------------[ cut here ]------------ WARNING: CPU: 0 PID: 5035 at net/mac80211/tx.c:4944 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline] WARNING: CPU: 0 PID: 5035 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345 Modules linked in: CPU: 0 PID: 5035 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline] pc : __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345 lr : __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline] lr : __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345 sp : ffff800008007a90 x29: ffff800008007ad0 x28: ffffffffffffe520 x27: 0000000000000001 x26: 0000000000000041 x25: ffff0000cc258800 x24: 0000000000000000 x23: ffff0000cc490e80 x22: ffff800008007b3c x21: ffff0000f5716228 x20: dfff800000000000 x19: ffff0000f5716760 x18: 0000000000000003 x17: 00000000ffff0000 x16: ffff8000082d7db8 x15: 0000000000000000 x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 x11: ff0080001131b664 x10: 0000000000000000 x9 : ffff80001131b664 x8 : ffff0000d1870000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001131a95c x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 Call trace: __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline] __ieee80211_beacon_get+0xf60/0x12bc net/mac80211/tx.c:5345 ieee80211_beacon_get_tim+0x70/0x44c net/mac80211/tx.c:5472 ieee80211_beacon_get include/net/mac80211.h:5335 [inline] mac80211_hwsim_beacon_tx+0x1e8/0x914 drivers/net/wireless/mac80211_hwsim.c:2091 __iterate_interfaces+0x204/0x484 net/mac80211/util.c:788 ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 net/mac80211/util.c:824 mac80211_hwsim_beacon+0xc8/0x1b8 drivers/net/wireless/mac80211_hwsim.c:2147 __run_hrtimer kernel/time/hrtimer.c:1747 [inline] __hrtimer_run_queues+0x438/0xc3c kernel/time/hrtimer.c:1811 hrtimer_run_softirq+0x160/0x400 kernel/time/hrtimer.c:1828 handle_softirqs+0x318/0xc60 kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x438 kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] console_emit_next_record+0x64c/0x808 kernel/printk/printk.c:2783 console_flush_all kernel/printk/printk.c:-1 [inline] console_unlock+0x240/0x57c kernel/printk/printk.c:2906 vprintk_emit+0x160/0x2f0 kernel/printk/printk.c:2303 vprintk_default+0x54/0x80 kernel/printk/printk.c:2318 vprintk+0x200/0x2a0 kernel/printk/printk_safe.c:45 _printk+0xe0/0x130 kernel/printk/printk.c:2328 __netdev_printk+0x1f8/0x39c net/core/dev.c:11420 netdev_info+0xf8/0x154 net/core/dev.c:11467 bond_enslave+0x26cc/0x3178 drivers/net/bonding/bond_main.c:2295 do_set_master net/core/rtnetlink.c:2633 [inline] do_setlink+0xbc4/0x3434 net/core/rtnetlink.c:2843 __rtnl_newlink net/core/rtnetlink.c:3613 [inline] rtnl_newlink+0x13c8/0x1a54 net/core/rtnetlink.c:3660 rtnetlink_rcv_msg+0x698/0xcdc net/core/rtnetlink.c:6157 netlink_rcv_skb+0x218/0x3e8 net/netlink/af_netlink.c:2511 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6175 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x60c/0x814 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f4/0x9c0 net/netlink/af_netlink.c:1872 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2152 __do_sys_sendto net/socket.c:2164 [inline] __se_sys_sendto net/socket.c:2160 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2160 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 33777 hardirqs last enabled at (33776): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (33776): [] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (33777): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (33702): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (33702): [] clusterip_netdev_event+0x384/0x3ac net/ipv4/netfilter/ipt_CLUSTERIP.c:233 softirqs last disabled at (33715): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]---