------------[ cut here ]------------
WARNING: CPU: 0 PID: 5350 at net/mac80211/tx.c:4944 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline]
WARNING: CPU: 0 PID: 5350 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345
Modules linked in:
CPU: 0 PID: 5350 Comm: syz.5.253 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline]
pc : __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345
lr : __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline]
lr : __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345
sp : ffff800008007a90
x29: ffff800008007ad0 x28: ffffffffffffe520 x27: 0000000000000001
x26: 0000000000000041 x25: ffff0000f576e000 x24: 0000000000000000
x23: ffff0000de2e0ea0 x22: ffff800008007b3c x21: ffff0000f5f72228
x20: dfff800000000000 x19: ffff0000f5f72760 x18: ffff800011b8bf60
x17: 00000000ffff0000 x16: ffff8000082d7e60 x15: 0000000000000000
x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100
x11: ff008000113064f0 x10: 0000000000000000 x9 : ffff8000113064f0
x8 : ffff0000d24f8000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000113057e8
x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline]
 __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345
 ieee80211_beacon_get_tim+0x70/0x44c net/mac80211/tx.c:5472
 ieee80211_beacon_get include/net/mac80211.h:5335 [inline]
 mac80211_hwsim_beacon_tx+0x1e8/0x914 drivers/net/wireless/mac80211_hwsim.c:2091
 __iterate_interfaces+0x204/0x484 net/mac80211/util.c:788
 ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 net/mac80211/util.c:824
 mac80211_hwsim_beacon+0xc8/0x1b8 drivers/net/wireless/mac80211_hwsim.c:2147
 __run_hrtimer kernel/time/hrtimer.c:1747 [inline]
 __hrtimer_run_queues+0x434/0xc34 kernel/time/hrtimer.c:1811
 hrtimer_run_softirq+0x160/0x400 kernel/time/hrtimer.c:1828
 handle_softirqs+0x318/0xc60 kernel/softirq.c:596
 __do_softirq+0x14/0x20 kernel/softirq.c:630
 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80
 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897
 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85
 invoke_softirq kernel/softirq.c:477 [inline]
 __irq_exit_rcu+0x23c/0x438 kernel/softirq.c:679
 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691
 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline]
 el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581
 __sanitizer_cov_trace_const_cmp8+0xc/0xa8 kernel/kcov.c:321
 shmem_undo_range+0x444/0x1658 mm/shmem.c:943
 shmem_truncate_range mm/shmem.c:1062 [inline]
 shmem_evict_inode+0x214/0x8a8 mm/shmem.c:1171
 evict+0x3e0/0x828 fs/inode.c:705
 iput_final fs/inode.c:1834 [inline]
 iput+0x754/0x7e4 fs/inode.c:1860
 dentry_unlink_inode+0x360/0x438 fs/dcache.c:405
 __dentry_kill+0x320/0x598 fs/dcache.c:611
 dentry_kill+0xc8/0x248 fs/dcache.c:-1
 dput+0x238/0x454 fs/dcache.c:918
 __fput+0x480/0x7b8 fs/file_table.c:328
 ____fput+0x20/0x30 fs/file_table.c:348
 task_work_run+0x1ec/0x278 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0x550/0x19b0 kernel/exit.c:880
 do_group_exit+0x194/0x22c kernel/exit.c:1022
 get_signal+0x11cc/0x1304 kernel/signal.c:2871
 do_signal arch/arm64/kernel/signal.c:1095 [inline]
 do_notify_resume+0x33c/0x2aa4 arch/arm64/kernel/signal.c:1148
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 20831
hardirqs last  enabled at (20830): [<ffff800011a235e4>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline]
hardirqs last  enabled at (20830): [<ffff800011a235e4>] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94
hardirqs last disabled at (20831): [<ffff800011a2163c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (18846): [<ffff8000081ac37c>] softirq_handle_end kernel/softirq.c:439 [inline]
softirqs last  enabled at (18846): [<ffff8000081ac37c>] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624
softirqs last disabled at (20659): [<ffff800008020164>] __do_softirq+0x14/0x20 kernel/softirq.c:630
---[ end trace 0000000000000000 ]---