------------[ cut here ]------------
WARNING: CPU: 1 PID: 9387 at net/mac80211/tx.c:4944 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline]
WARNING: CPU: 1 PID: 9387 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 net/mac80211/tx.c:5345
Modules linked in:
CPU: 1 PID: 9387 Comm: syz.6.1167 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:4944 [inline]
RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 net/mac80211/tx.c:5345
Code: 24 4c 89 e7 e8 ae 73 0b f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 dc d2 f7 0f 0b e9 f6 f7 ff ff e8 bd dc d2 f7 <0f> 0b e9 48 fb ff ff e8 b1 dc d2 f7 48 c7 c7 70 c2 fa 8d 4c 89 e6
RSP: 0000:ffffc90004c4f970 EFLAGS: 00010246
RAX: ffffffff89af95b3 RBX: ffffffff89af83b6 RCX: ffff888058439dc0
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff888058439dc0 R09: 0000000000000003
R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807c1d6258
R13: dffffc0000000000 R14: ffff88807c1d6790 R15: ffff88805554e824
FS:  0000555592e2c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3db415 CR3: 0000000060c95000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_beacon_get_tim+0x63/0x4e0 net/mac80211/tx.c:5472
 ieee80211_beacon_get include/net/mac80211.h:5335 [inline]
 mac80211_hwsim_beacon_tx+0x21c/0xae0 drivers/net/wireless/mac80211_hwsim.c:2091
 __iterate_interfaces+0x243/0x500 net/mac80211/util.c:788
 ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 net/mac80211/util.c:824
 mac80211_hwsim_beacon+0xb7/0x1b0 drivers/net/wireless/mac80211_hwsim.c:2147
 __run_hrtimer kernel/time/hrtimer.c:1747 [inline]
 __hrtimer_run_queues+0x560/0xd70 kernel/time/hrtimer.c:1811
 hrtimer_run_softirq+0x183/0x2a0 kernel/time/hrtimer.c:1828
 handle_softirqs+0x2a1/0x930 kernel/softirq.c:596
 __do_softirq kernel/softirq.c:630 [inline]
 invoke_softirq kernel/softirq.c:470 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:691
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1118
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0033:0x7ff0bba4f730
Code: 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d d2 28 3b 00 89 f0 <4c> 8d 05 c9 08 3b 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1
RSP: 002b:00007ffc3f5f5f88 EFLAGS: 00000246
RAX: 0000000081abb606 RBX: ffffffff81abb606 RCX: ffffffff81abbb73
RDX: ffffffff81abb266 RSI: ffffffff81abb606 RDI: 0000000000000007
RBP: 0000000000000000 R08: 00007ff0bbe00000 R09: 00007ff0bbe02000
R10: 0000000081abb60a R11: 0000000000000007 R12: 00007ff0bbe16038
R13: 000000000007dbf2 R14: ffffffff81abb266 R15: 00007ff0bc945720
 </TASK>