------------[ cut here ]------------
WARNING: CPU: 0 PID: 5187 at net/mac80211/tx.c:5034 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5034 [inline]
WARNING: CPU: 0 PID: 5187 at net/mac80211/tx.c:5034 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5029 [inline]
WARNING: CPU: 0 PID: 5187 at net/mac80211/tx.c:5034 __ieee80211_beacon_get+0x14aa/0x16b0 net/mac80211/tx.c:5461
Modules linked in:
CPU: 0 PID: 5187 Comm: kworker/u8:2 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5034 [inline]
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5029 [inline]
RIP: 0010:__ieee80211_beacon_get+0x14aa/0x16b0 net/mac80211/tx.c:5461
Code: 00 89 df 44 89 e6 e8 35 c2 40 f7 44 38 e3 72 a3 e8 6b c8 40 f7 48 89 ef e8 53 64 91 f7 31 ed e9 9e fe ff ff e8 57 c8 40 f7 90 <0f> 0b 90 e9 88 f6 ff ff 48 89 c6 48 c7 c7 e0 bb 6e 8f 48 89 04 24
RSP: 0018:ffffc90000007b90 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a4d6a62
RDX: ffff88802959bc00 RSI: ffffffff8a4d73d9 RDI: 0000000000000001
RBP: ffffc90000007c40 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000004 R12: ffff88807d5b0800
R13: 0000000000000041 R14: ffff88801ea6cca0 R15: ffff88801ea6e750
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555704cd8f8 CR3: 000000001f3c0000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 ieee80211_beacon_get_tim+0xa7/0x280 net/mac80211/tx.c:5588
 ieee80211_beacon_get include/net/mac80211.h:5552 [inline]
 mac80211_hwsim_beacon_tx+0x48d/0x880 drivers/net/wireless/virtual/mac80211_hwsim.c:2296
 __iterate_interfaces+0x2d5/0x580 net/mac80211/util.c:772
 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:808
 mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2326
 __run_hrtimer kernel/time/hrtimer.c:1692 [inline]
 __hrtimer_run_queues+0x20f/0xc20 kernel/time/hrtimer.c:1756
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1773
 __do_softirq+0x21b/0x8de kernel/softirq.c:554
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:633 [inline]
 irq_exit_rcu+0xb9/0x120 kernel/softirq.c:645
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:23 [inline]
RIP: 0010:raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline]
RIP: 0010:rcu_dynticks_curr_cpu_in_eqs include/linux/context_tracking.h:122 [inline]
RIP: 0010:rcu_is_watching+0x60/0xc0 kernel/rcu/tree.c:700
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed 20 9b 23 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 <48> 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02
RSP: 0018:ffffc900047e7ab8 EFLAGS: 00000216
RAX: dffffc0000000000 RBX: ffff8880b9437ee8 RCX: ffffffff816c8739
RDX: 0000000000000000 RSI: ffffffff8b6eb460 RDI: ffffffff8d239b20
RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1f3e862
R10: ffffffff8f9f4317 R11: 0000000000000002 R12: ffffffff8d7b49e0
R13: 0000000000000000 R14: 000000000003d40c R15: 0000000000000001
 trace_lock_release include/trace/events/lock.h:69 [inline]
 lock_release+0x4cc/0x6a0 kernel/locking/lockdep.c:5765
 rcu_lock_release include/linux/rcupdate.h:308 [inline]
 rcu_read_unlock include/linux/rcupdate.h:783 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline]
 batadv_nc_worker+0x8f3/0x10f0 net/batman-adv/network-coding.c:719
 process_one_work+0x9ac/0x1a60 kernel/workqueue.c:3254
 process_scheduled_works kernel/workqueue.c:3335 [inline]
 worker_thread+0x6c8/0xf70 kernel/workqueue.c:3416
 kthread+0x2c4/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243
 </TASK>
----------------
Code disassembly (best guess):
   0:	48 89 fa             	mov    %rdi,%rdx
   3:	48 c1 ea 03          	shr    $0x3,%rdx
   7:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   b:	75 5c                	jne    0x69
   d:	48 03 1c ed 20 9b 23 	add    -0x72dc64e0(,%rbp,8),%rbx
  14:	8d
  15:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  1c:	fc ff df
  1f:	48 89 da             	mov    %rbx,%rdx
  22:	48 c1 ea 03          	shr    $0x3,%rdx
  26:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
* 2a:	48 89 d8             	mov    %rbx,%rax <-- trapping instruction
  2d:	83 e0 07             	and    $0x7,%eax
  30:	83 c0 03             	add    $0x3,%eax
  33:	38 d0                	cmp    %dl,%al
  35:	7c 04                	jl     0x3b
  37:	84 d2                	test   %dl,%dl
  39:	75 24                	jne    0x5f
  3b:	8b 03                	mov    (%rbx),%eax
  3d:	c1 e8 02             	shr    $0x2,%eax