------------[ cut here ]------------ WARNING: CPU: 0 PID: 4916 at net/mac80211/tx.c:4851 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4851 [inline] WARNING: CPU: 0 PID: 4916 at net/mac80211/tx.c:4851 __ieee80211_beacon_get+0x172c/0x1f80 net/mac80211/tx.c:5075 Modules linked in: CPU: 0 PID: 4916 Comm: modprobe Not tainted 5.15.189-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4851 [inline] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 net/mac80211/tx.c:5075 Code: f8 0f 0b e9 f1 fa ff ff e8 d1 61 3b f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 c0 61 3b f8 0f 0b e9 3c ef ff ff e8 b4 61 3b f8 <0f> 0b e9 b8 f2 ff ff e8 f8 ca 6b 00 44 89 e1 80 e1 07 80 c1 03 38 RSP: 0000:ffffc9000368f820 EFLAGS: 00010246 RAX: ffffffff893c626c RBX: ffff8880256d4c80 RCX: ffff88807a32bb80 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000368fa48 R08: ffff88807a32bb80 R09: 0000000000000003 R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802be8a200 R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920006d1f14 FS: 00007f0353843c80(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0353a17a90 CR3: 00000000571e4000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ieee80211_beacon_get_tim+0x48/0x840 net/mac80211/tx.c:5194 ieee80211_beacon_get include/net/mac80211.h:4981 [inline] mac80211_hwsim_beacon_tx+0xf4/0x920 drivers/net/wireless/mac80211_hwsim.c:1812 __iterate_interfaces+0x243/0x500 net/mac80211/util.c:793 ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 net/mac80211/util.c:829 mac80211_hwsim_beacon+0x9b/0x180 drivers/net/wireless/mac80211_hwsim.c:1865 __run_hrtimer kernel/time/hrtimer.c:1690 [inline] __hrtimer_run_queues+0x53d/0xc40 kernel/time/hrtimer.c:1754 hrtimer_run_softirq+0x176/0x240 kernel/time/hrtimer.c:1771 handle_softirqs+0x328/0x820 kernel/softirq.c:576 __do_softirq kernel/softirq.c:610 [inline] invoke_softirq kernel/softirq.c:450 [inline] __irq_exit_rcu+0x12f/0x220 kernel/softirq.c:659 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1108 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0033:0x7f0353bb9d08 Code: c5 08 31 c0 4d 85 c9 74 39 49 8b 0f 41 55 8b 74 24 18 56 44 89 f6 ff b4 24 e8 00 00 00 8b bc 24 e8 00 00 00 57 48 89 df 41 54 <50> 4c 8b 44 24 48 48 8b 54 24 38 e8 98 f2 ff ff 48 83 c4 30 85 c0 RSP: 002b:00007ffe30a5e758 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 00007f03538e4b88 RCX: 00007f03538e4018 RDX: 0000000000000000 RSI: 000000001898e6f7 RDI: 00007f03538e4b88 RBP: 00007f0353baf920 R08: 00007f03538b2798 R09: 00007f0353be6608 R10: 00007f03538b2798 R11: 0000000009691a75 R12: 00007f03538b2798 R13: 00007f0353baf580 R14: 000000001898e6f7 R15: 00007ffe30a5e908