------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: CPU: 2 PID: 0 at net/mac80211/rate.c:379 __rate_control_send_low+0x6d9/0x800 net/mac80211/rate.c:379 Modules linked in: CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.7.0-rc5-syzkaller-00030-geaadbbaaff74 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:__rate_control_send_low+0x6d9/0x800 net/mac80211/rate.c:379 Code: a4 a0 d4 00 00 00 e8 36 24 8f f7 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 40 1f 0c 8c e8 68 49 55 f7 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 f4 07 e5 f7 e9 e1 fb RSP: 0018:ffffc90000a48988 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814ca799 RDX: ffff8880156c8480 RSI: ffffffff814ca7a6 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000002 R12: 00000000ffffffff R13: 0000000000000000 R14: 000000000000000c R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff88806b800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056039727f5d0 CR3: 000000001dfe6000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rate_control_send_low+0x296/0x820 net/mac80211/rate.c:404 rate_control_get_rate+0x1be/0x590 net/mac80211/rate.c:916 ieee80211_beacon_get_finish+0x468/0x670 net/mac80211/tx.c:5228 __ieee80211_beacon_get+0x7d5/0x16e0 net/mac80211/tx.c:5498 ieee80211_beacon_get_tim+0xa7/0x280 net/mac80211/tx.c:5567 ieee80211_beacon_get include/net/mac80211.h:5442 [inline] mac80211_hwsim_beacon_tx+0x3f6/0x740 drivers/net/wireless/virtual/mac80211_hwsim.c:2260 __iterate_interfaces+0x2d2/0x580 net/mac80211/util.c:767 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:803 mac80211_hwsim_beacon+0x101/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2290 __run_hrtimer kernel/time/hrtimer.c:1688 [inline] __hrtimer_run_queues+0x203/0xc20 kernel/time/hrtimer.c:1752 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1769 __do_softirq+0x21a/0x8de kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline] RIP: 0010:default_idle+0xf/0x20 arch/x86/kernel/process.c:743 Code: 89 07 49 c7 c0 08 00 00 00 4d 29 c8 4c 01 c7 4c 29 c2 e9 76 ff ff ff cc cc cc cc f3 0f 1e fa 66 90 0f 00 2d d3 26 47 00 fb f4 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 65 RSP: 0018:ffffc90000387e08 EFLAGS: 00000246 RAX: 00000000000239cf RBX: 0000000000000002 RCX: ffffffff8a7f6a17 RDX: 0000000000000000 RSI: ffffffff8acca5a0 RDI: ffffffff8b2ee5a0 RBP: ffffed1002ad9090 R08: 0000000000000001 R09: ffffed100d706dbd R10: ffff88806b836deb R11: 0000000000000000 R12: 0000000000000002 R13: ffff8880156c8480 R14: ffffffff8f187890 R15: 0000000000000000 default_idle_call+0x69/0xa0 kernel/sched/idle.c:97 cpuidle_idle_call kernel/sched/idle.c:170 [inline] do_idle+0x332/0x400 kernel/sched/idle.c:282 cpu_startup_entry+0x50/0x60 kernel/sched/idle.c:380 start_secondary+0x20e/0x2a0 arch/x86/kernel/smpboot.c:336 secondary_startup_64_no_verify+0x166/0x16b ---------------- Code disassembly (best guess): 0: 89 07 mov %eax,(%rdi) 2: 49 c7 c0 08 00 00 00 mov $0x8,%r8 9: 4d 29 c8 sub %r9,%r8 c: 4c 01 c7 add %r8,%rdi f: 4c 29 c2 sub %r8,%rdx 12: e9 76 ff ff ff jmp 0xffffff8d 17: cc int3 18: cc int3 19: cc int3 1a: cc int3 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d d3 26 47 00 verw 0x4726d3(%rip) # 0x4726fb 28: fb sti 29: f4 hlt * 2a: fa cli <-- trapping instruction 2b: c3 ret 2c: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 33: 00 00 00 00 37: 0f 1f 40 00 nopl 0x0(%rax) 3b: f3 0f 1e fa endbr64 3f: 65 gs