------------[ cut here ]------------
WARNING: CPU: 1 PID: 6912 at net/mac80211/tx.c:5041 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5041 [inline]
WARNING: CPU: 1 PID: 6912 at net/mac80211/tx.c:5041 __ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5036 [inline]
WARNING: CPU: 1 PID: 6912 at net/mac80211/tx.c:5041 __ieee80211_beacon_get+0x14f4/0x1720 net/mac80211/tx.c:5470
Modules linked in:
CPU: 1 UID: 0 PID: 6912 Comm: syz-executor296 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5041 [inline]
RIP: 0010:__ieee80211_beacon_update_cntdwn net/mac80211/tx.c:5036 [inline]
RIP: 0010:__ieee80211_beacon_get+0x14f4/0x1720 net/mac80211/tx.c:5470
Code: 24 89 df 89 ee e8 9c 32 c9 f6 40 38 eb 72 a2 e8 72 38 c9 f6 4c 89 e7 e8 2a ee 23 f7 45 31 e4 e9 9b fe ff ff e8 5d 38 c9 f6 90 <0f> 0b 90 e9 3e f6 ff ff 48 89 c6 48 c7 c7 00 4a 53 90 48 89 44 24
RSP: 0018:ffffc900006a0b70 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888030ef69d0 RCX: ffffffff8af20dd1
RDX: ffff88802b6ca440 RSI: ffffffff8af21793 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900006a0c28
R13: ffff888026883c00 R14: 0000000000000041 R15: ffff888030ef6500
FS: 0000000000000000(0000) GS:ffff8880d6ab2000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2ce938d270 CR3: 000000000e180000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
ieee80211_beacon_get_tim+0xa6/0x280 net/mac80211/tx.c:5597
ieee80211_beacon_get include/net/mac80211.h:5648 [inline]
mac80211_hwsim_beacon_tx+0x4dc/0xa40 drivers/net/wireless/virtual/mac80211_hwsim.c:2313
__iterate_interfaces+0x2e2/0x650 net/mac80211/util.c:761
ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:797
mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2347
__run_hrtimer kernel/time/hrtimer.c:1761 [inline]
__hrtimer_run_queues+0x1ff/0xad0 kernel/time/hrtimer.c:1825
hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1842
handle_softirqs+0x216/0x8e0 kernel/softirq.c:579
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__update_page_owner_free_handle.constprop.0+0x116/0x470 mm/page_owner.c:272
Code: 48 83 c5 01 e8 8b 9c 90 ff 48 85 db 0f 84 cf 01 00 00 e8 7d 9c 90 ff 44 0f b7 7c 24 24 bf 1f 00 00 00 44 89 fe e8 7a 97 90 ff <66> 41 83 ff 1f 0f 87 da 54 f6 fe e8 5a 9c 90 ff 4c 89 ee 48 89 ef
RSP: 0018:ffffc900033af418 EFLAGS: 00000293
RAX: 0000000000000000 RBX: ffff88801d58a100 RCX: ffffffff822ab386
RDX: ffff88802b6ca440 RSI: 000000000000001f RDI: 0000000000000003
RBP: 0000000000000001 R08: 0000000000000003 R09: 000000000000001f
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000065a026d
R13: 0000000000000001 R14: 000000000003ced0 R15: 0000000000000000
__reset_page_owner+0x93/0x1a0 mm/page_owner.c:309
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1262 [inline]
free_unref_folios+0x999/0x1630 mm/page_alloc.c:2782
folios_put_refs+0x56f/0x740 mm/swap.c:992
folio_batch_release include/linux/pagevec.h:101 [inline]
shmem_undo_range+0x58f/0x1150 mm/shmem.c:1125
shmem_truncate_range mm/shmem.c:1237 [inline]
shmem_evict_inode+0x3a1/0xbe0 mm/shmem.c:1365
evict+0x3e3/0x920 fs/inode.c:810
iput_final fs/inode.c:1898 [inline]
iput fs/inode.c:1924 [inline]
iput+0x521/0x880 fs/inode.c:1910
dentry_unlink_inode+0x29c/0x480 fs/dcache.c:457
__dentry_kill+0x1d0/0x600 fs/dcache.c:660
dput.part.0+0x4b1/0x9b0 fs/dcache.c:902
dput+0x1f/0x30 fs/dcache.c:892
__fput+0x51c/0xb70 fs/file_table.c:473
task_work_run+0x14d/0x240 kernel/task_work.c:227
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0xafb/0x2c30 kernel/exit.c:953
do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
__do_sys_exit_group kernel/exit.c:1113 [inline]
__se_sys_exit_group kernel/exit.c:1111 [inline]
__x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1111
x64_sys_call+0x1530/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2ce930ad19
Code: Unable to access opcode bytes at 0x7f2ce930acef.
RSP: 002b:00007ffd26a3de18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ce930ad19
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f2ce938b390 R08: ffffffffffffffb8 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce938b390
R13: 0000000000000000 R14: 00007f2ce938ce60 R15: 00007f2ce92db120
----------------
Code disassembly (best guess):
0: 48 83 c5 01 add $0x1,%rbp
4: e8 8b 9c 90 ff call 0xff909c94
9: 48 85 db test %rbx,%rbx
c: 0f 84 cf 01 00 00 je 0x1e1
12: e8 7d 9c 90 ff call 0xff909c94
17: 44 0f b7 7c 24 24 movzwl 0x24(%rsp),%r15d
1d: bf 1f 00 00 00 mov $0x1f,%edi
22: 44 89 fe mov %r15d,%esi
25: e8 7a 97 90 ff call 0xff9097a4
* 2a: 66 41 83 ff 1f cmp $0x1f,%r15w <-- trapping instruction
2f: 0f 87 da 54 f6 fe ja 0xfef6550f
35: e8 5a 9c 90 ff call 0xff909c94
3a: 4c 89 ee mov %r13,%rsi
3d: 48 89 ef mov %rbp,%rdi