------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: CPU: 0 PID: 26076 at net/mac80211/rate.c:380 __rate_control_send_low+0x6d9/0x800 net/mac80211/rate.c:380
Modules linked in:
CPU: 0 PID: 26076 Comm: syz-executor.4 Not tainted 6.9.0-rc7-syzkaller-00023-g6d7ddd805123 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:__rate_control_send_low+0x6d9/0x800 net/mac80211/rate.c:380
Code: a4 a0 d4 00 00 00 e8 16 58 41 f7 44 8b 44 24 3c 45 89 e9 89 d9 48 8b 74 24 18 44 89 e2 48 c7 c7 60 86 6f 8c e8 28 ba 03 f7 90 <0f> 0b 90 90 e9 ff fc ff ff 48 8b 7c 24 30 e8 e4 4e 9d f7 e9 e1 fb
RSP: 0018:ffffc90000007948 EFLAGS: 00010282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81517119
RDX: ffff888028e48000 RSI: ffffffff81517126 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000005 R12: 00000000ffffffff
R13: 0000000000000000 R14: 000000000000000c R15: dffffc0000000000
FS:  00007fd21f6566c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000002bafc000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 rate_control_send_low+0x29a/0x820 net/mac80211/rate.c:405
 rate_control_get_rate+0x1be/0x590 net/mac80211/rate.c:921
 ieee80211_beacon_get_finish+0x468/0x670 net/mac80211/tx.c:5254
 __ieee80211_beacon_get+0xdbe/0x16b0 net/mac80211/tx.c:5524
 ieee80211_beacon_get_tim+0xa7/0x280 net/mac80211/tx.c:5593
 ieee80211_beacon_get include/net/mac80211.h:5555 [inline]
 mac80211_hwsim_beacon_tx+0x48d/0x880 drivers/net/wireless/virtual/mac80211_hwsim.c:2296
 __iterate_interfaces+0x2d5/0x580 net/mac80211/util.c:772
 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:808
 mac80211_hwsim_beacon+0x105/0x200 drivers/net/wireless/virtual/mac80211_hwsim.c:2326
 __run_hrtimer kernel/time/hrtimer.c:1692 [inline]
 __hrtimer_run_queues+0x20f/0xcc0 kernel/time/hrtimer.c:1756
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1773
 handle_softirqs+0x219/0x8f0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:810 [inline]
RIP: 0010:filemap_get_entry+0x219/0x470 mm/filemap.c:1834
Code: 9d ba cd ff 4c 89 f7 e8 d5 08 ff ff 48 39 c3 0f 85 a4 01 00 00 e8 87 ba cd ff e8 02 5a 1b 09 31 ff 89 c5 89 c6 e8 57 b5 cd ff <85> ed 0f 85 ea 00 00 00 e8 6a ba cd ff e8 15 a2 b4 ff 48 c7 c7 20
RSP: 0018:ffffc90008ed7958 EFLAGS: 00000297
RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff81c152d9
RDX: ffff888028e48000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
R13: 1ffff920011daf2c R14: ffffc90008ed7980 R15: 000000000000064f
 shmem_get_folio_gfp+0x369/0x13e0 mm/shmem.c:1982
 shmem_get_folio mm/shmem.c:2160 [inline]
 shmem_write_begin+0x15a/0x370 mm/shmem.c:2744
 generic_perform_write+0x275/0x620 mm/filemap.c:3974
 shmem_file_write_iter+0x114/0x140 mm/shmem.c:2920
 call_write_iter include/linux/fs.h:2110 [inline]
 new_sync_write fs/read_write.c:497 [inline]
 vfs_write+0x6de/0x1100 fs/read_write.c:590
 ksys_write+0x12f/0x260 fs/read_write.c:643
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcf/0x260 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd21e87caaf
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48
RSP: 002b:00007fd21f655e80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007fd21e87caaf
RDX: 0000000001000000 RSI: 00007fd214600000 RDI: 0000000000000005
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000006232
R10: 000000000000079c R11: 0000000000000293 R12: 0000000000000005
R13: 00007fd21f655f80 R14: 00007fd21f655f40 R15: 00007fd214600000
 </TASK>
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	cd ff                	int    $0xff
   2:	4c 89 f7             	mov    %r14,%rdi
   5:	e8 d5 08 ff ff       	call   0xffff08df
   a:	48 39 c3             	cmp    %rax,%rbx
   d:	0f 85 a4 01 00 00    	jne    0x1b7
  13:	e8 87 ba cd ff       	call   0xffcdba9f
  18:	e8 02 5a 1b 09       	call   0x91b5a1f
  1d:	31 ff                	xor    %edi,%edi
  1f:	89 c5                	mov    %eax,%ebp
  21:	89 c6                	mov    %eax,%esi
  23:	e8 57 b5 cd ff       	call   0xffcdb57f
* 28:	85 ed                	test   %ebp,%ebp <-- trapping instruction
  2a:	0f 85 ea 00 00 00    	jne    0x11a
  30:	e8 6a ba cd ff       	call   0xffcdba9f
  35:	e8 15 a2 b4 ff       	call   0xffb4a24f
  3a:	48                   	rex.W
  3b:	c7                   	.byte 0xc7
  3c:	c7                   	(bad)
  3d:	20                   	.byte 0x20