------------[ cut here ]------------
WARNING: CPU: 0 PID: 5140 at net/mac80211/tx.c:5034 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5034 [inline]
WARNING: CPU: 0 PID: 5140 at net/mac80211/tx.c:5034 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5029 [inline]
WARNING: CPU: 0 PID: 5140 at net/mac80211/tx.c:5034 __ieee80211_beacon_get+0x14aa/0x16b0 net/mac80211/tx.c:5461
Modules linked in:
CPU: 0 PID: 5140 Comm: syz-executor615 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5034 [inline]
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5029 [inline]
RIP: 0010:__ieee80211_beacon_get+0x14aa/0x16b0 net/mac80211/tx.c:5461
Code: 00 89 df 44 89 e6 e8 35 c2 40 f7 44 38 e3 72 a3 e8 6b c8 40 f7 48 89 ef e8 53 64 91 f7 31 ed e9 9e fe ff ff e8 57 c8 40 f7 90 <0f> 0b 90 e9 88 f6 ff ff 48 89 c6 48 c7 c7 e0 bb 6e 8f 48 89 04 24
RSP: 0018:ffffc90000007b90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a4d6a62
RDX: ffff888023241e00 RSI: ffffffff8a4d73d9 RDI: 0000000000000001
RBP: ffffc90000007c40 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000008 R12: ffff888021f67c00
R13: 0000000000000041 R14: ffff88807d5d0ca0 R15: ffff88807d5d2750
FS: 000055555e81d480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffb6b3ed1d8 CR3: 0000000023386000 CR4: 0000000000350ef0
Call Trace:
ieee80211_beacon_get_tim+0xa7/0x280 net/mac80211/tx.c:5588
ieee80211_beacon_get include/net/mac80211.h:5552 [inline]
mac80211_hwsim_beacon_tx+0x48d/0x880 drivers/net/wireless/virtual/mac80211_hwsim.c:2296
__iterate_interfaces+0x2d5/0x580 net/mac80211/util.c:772
ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:808
mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2326
__run_hrtimer kernel/time/hrtimer.c:1692 [inline]
__hrtimer_run_queues+0x20f/0xc20 kernel/time/hrtimer.c:1756
hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1773
__do_softirq+0x21b/0x8de kernel/softirq.c:554
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu kernel/softirq.c:633 [inline]
irq_exit_rcu+0xb9/0x120 kernel/softirq.c:645
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline]
RIP: 0010:rcu_is_watching+0x19/0xc0 kernel/rcu/tree.c:700
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 db fd 8e 7e e8 1e 75 5e 09 48 c7 c3 e8 7e 03 00 <83> f8 07 89 c5 0f 87 82 00 00 00 48 8d 3c ed 20 9b 23 8d 48 b8 00
RSP: 0018:ffffc900047ef5d8 EFLAGS: 00000286
RAX: 0000000000000000 RBX: 0000000000037ee8 RCX: ffffffff816c967b
RDX: fffffbfff1f3e863 RSI: ffffffff8b6eb460 RDI: ffffffff8b6eb4a0
RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1f3e862
R10: ffffffff8f9f4317 R11: 0000000000000007 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff8d7b4920 R15: 0000000000000000
trace_lock_acquire include/trace/events/lock.h:24 [inline]
lock_acquire+0x47b/0x540 kernel/locking/lockdep.c:5725
rcu_lock_acquire include/linux/rcupdate.h:298 [inline]
rcu_read_lock_sched include/linux/rcupdate.h:842 [inline]
pfn_valid include/linux/mmzone.h:2016 [inline]
page_table_check_set+0x119/0xc60 mm/page_table_check.c:105
__page_table_check_ptes_set+0x444/0x700 mm/page_table_check.c:196
page_table_check_ptes_set include/linux/page_table_check.h:74 [inline]
set_ptes include/linux/pgtable.h:241 [inline]
copy_present_pte mm/memory.c:993 [inline]
copy_pte_range mm/memory.c:1102 [inline]
copy_pmd_range mm/memory.c:1187 [inline]
copy_pud_range mm/memory.c:1224 [inline]
copy_p4d_range mm/memory.c:1248 [inline]
copy_page_range+0x152e/0x3d10 mm/memory.c:1346
dup_mmap kernel/fork.c:747 [inline]
dup_mm kernel/fork.c:1687 [inline]
copy_mm kernel/fork.c:1736 [inline]
copy_process+0x81bf/0x9160 kernel/fork.c:2389
kernel_clone+0xfd/0x940 kernel/fork.c:2796
__do_sys_clone+0xba/0x100 kernel/fork.c:2939
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xd5/0x260 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7ffb6b362993
Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
RSP: 002b:00007fff808f5e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb6b362993
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0079746972756365
R10: 000055555e81d750 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff808f5fe0 R14: 0000000000000723 R15: 00007fff808f6020
----------------
Code disassembly (best guess):
0: 90 nop
1: 90 nop
2: 90 nop
3: 90 nop
4: 90 nop
5: 90 nop
6: 90 nop
7: 90 nop
8: 90 nop
9: 90 nop
a: 90 nop
b: 90 nop
c: 90 nop
d: 90 nop
e: 90 nop
f: 90 nop
10: 90 nop
11: f3 0f 1e fa endbr64
15: 55 push %rbp
16: 53 push %rbx
17: 65 ff 05 db fd 8e 7e incl %gs:0x7e8efddb(%rip) # 0x7e8efdf9
1e: e8 1e 75 5e 09 call 0x95e7541
23: 48 c7 c3 e8 7e 03 00 mov $0x37ee8,%rbx
* 2a: 83 f8 07 cmp $0x7,%eax <-- trapping instruction
2d: 89 c5 mov %eax,%ebp
2f: 0f 87 82 00 00 00 ja 0xb7
35: 48 8d 3c ed 20 9b 23 lea -0x72dc64e0(,%rbp,8),%rdi
3c: 8d
3d: 48 rex.W
3e: b8 .byte 0xb8