------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: CPU: 0 PID: 6003 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 net/mac80211/rate.c:398 Modules linked in: CPU: 0 UID: 0 PID: 6003 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Workqueue: events_power_efficient wg_ratelimiter_gc_entries RIP: 0010:__rate_control_send_low+0x5df/0x820 net/mac80211/rate.c:398 Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 89 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 c2 b9 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c RSP: 0018:ffffc90000007758 EFLAGS: 00010246 RAX: 4692a97332435800 RBX: 000000000000000c RCX: ffff8880255c3c00 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff888028aea7a8 R13: 0000000000000000 R14: ffff88802e6a0e40 R15: ffff88802e6a30d8 FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6f11705000 CR3: 000000000df36000 CR4: 00000000003526f0 Call Trace: rate_control_send_low+0x194/0x7a0 net/mac80211/rate.c:423 rate_control_get_rate+0x20b/0x5d0 net/mac80211/rate.c:934 ieee80211_beacon_get_finish+0x39a/0x6c0 net/mac80211/tx.c:5263 __ieee80211_beacon_get+0xd3d/0x1880 net/mac80211/tx.c:-1 ieee80211_beacon_get_tim+0xb4/0x2b0 net/mac80211/tx.c:5677 ieee80211_beacon_get include/net/mac80211.h:5663 [inline] mac80211_hwsim_beacon_tx+0x3ce/0x860 drivers/net/wireless/virtual/mac80211_hwsim.c:2319 __iterate_interfaces+0x2ab/0x590 net/mac80211/util.c:761 ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 net/mac80211/util.c:797 mac80211_hwsim_beacon+0xbb/0x1c0 drivers/net/wireless/virtual/mac80211_hwsim.c:2353 __run_hrtimer kernel/time/hrtimer.c:1761 [inline] __hrtimer_run_queues+0x52c/0xc60 kernel/time/hrtimer.c:1825 hrtimer_run_softirq+0x187/0x2b0 kernel/time/hrtimer.c:1842 handle_softirqs+0x283/0x870 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x175/0x360 kernel/locking/lockdep.c:5872 Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 41 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc900054f7978 EFLAGS: 00000206 RAX: 4692a97332435800 RBX: 0000000000000000 RCX: 4692a97332435800 RDX: 0000000000000000 RSI: ffffffff8dba922c RDI: ffffffff8be33c00 RBP: ffffffff8670784d R08: 0000000000000000 R09: ffffffff8670784d R10: dffffc0000000000 R11: fffffbfff1d901c5 R12: 0000000000000000 R13: ffffffff8ec80e38 R14: 0000000000000001 R15: 0000000000000246 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] wg_ratelimiter_gc_entries+0x5d/0x450 drivers/net/wireguard/ratelimiter.c:63 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x436/0x7d0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 00 00 add %al,(%rax) 4: 9c pushf 5: 8f 44 24 30 pop 0x30(%rsp) 9: f7 44 24 30 00 02 00 testl $0x200,0x30(%rsp) 10: 00 11: 0f 85 cd 00 00 00 jne 0xe4 17: f7 44 24 08 00 02 00 testl $0x200,0x8(%rsp) 1e: 00 1f: 74 01 je 0x22 21: fb sti 22: 65 48 8b 05 7b 41 03 mov %gs:0x1103417b(%rip),%rax # 0x110341a5 29: 11 * 2a: 48 3b 44 24 58 cmp 0x58(%rsp),%rax <-- trapping instruction 2f: 0f 85 f2 00 00 00 jne 0x127 35: 48 83 c4 60 add $0x60,%rsp 39: 5b pop %rbx 3a: 41 5c pop %r12 3c: 41 5d pop %r13 3e: 41 5e pop %r14