------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: CPU: 0 PID: 6232 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890 net/mac80211/rate.c:380
Modules linked in:
CPU: 0 UID: 0 PID: 6232 Comm: kworker/u8:18 Not tainted 6.12.0-rc3-syzkaller-00152-g3b05b9c36ddd #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events_unbound kfree_rcu_monitor
RIP: 0010:__rate_control_send_low+0x659/0x890 net/mac80211/rate.c:380
Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 c8 41 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db
RSP: 0018:ffffc90000007760 EFLAGS: 00010246
RAX: a13e44cb2e46bd00 RBX: 000000000000000c RCX: ffff888066515a00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888024b823e8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8
R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800
R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001370 CR3: 0000000024646000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rate_control_send_low+0x1a8/0x770 net/mac80211/rate.c:405
 rate_control_get_rate+0x20e/0x5e0 net/mac80211/rate.c:921
 ieee80211_beacon_get_finish+0x49e/0x870 net/mac80211/tx.c:5253
 __ieee80211_beacon_get+0xf7e/0x15c0
 ieee80211_beacon_get_tim+0xb4/0x320 net/mac80211/tx.c:5594
 ieee80211_beacon_get include/net/mac80211.h:5607 [inline]
 mac80211_hwsim_beacon_tx+0x39d/0x850 drivers/net/wireless/virtual/mac80211_hwsim.c:2311
 __iterate_interfaces+0x222/0x510 net/mac80211/util.c:774
 ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 net/mac80211/util.c:810
 mac80211_hwsim_beacon+0xd4/0x1f0 drivers/net/wireless/virtual/mac80211_hwsim.c:2345
 __run_hrtimer kernel/time/hrtimer.c:1691 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1755
 hrtimer_run_softirq+0x19a/0x2c0 kernel/time/hrtimer.c:1772
 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1037
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rol32 include/linux/bitops.h:127 [inline]
RIP: 0010:jhash2 include/linux/jhash.h:129 [inline]
RIP: 0010:hash_stack lib/stackdepot.c:514 [inline]
RIP: 0010:stack_depot_save_flags+0x8e/0x830 lib/stackdepot.c:614
Code: 8b 44 24 08 4c 89 c2 03 02 03 5a 04 44 03 72 08 44 89 f7 c1 c7 04 44 29 f0 31 c7 41 01 de 29 fb 89 fd c1 c5 06 31 dd 44 01 f7 <89> e9 c1 c1 08 41 29 ee 44 31 f1 01 fd 29 cf 89 c8 c1 c0 10 31 f8
RSP: 0018:ffffc900172ef6c0 EFLAGS: 00000282
RAX: 00000000a43aa476 RBX: 0000000083de9299 RCX: 00000000b30d2d41
RDX: ffffc900172ef744 RSI: 000000000000000d RDI: 00000000ab4a74ab
RBP: 00000000f2a30cff R08: ffffc900172ef720 R09: 000000000000000b
R10: ffffc900172ef5f0 R11: ffffffff8180a0e0 R12: ffff888024c61000
R13: ffff88801ac41dc0 R14: 0000000011847e32 R15: ffffc900172ef720
 kasan_save_stack mm/kasan/common.c:48 [inline]
 kasan_save_track+0x51/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:230 [inline]
 slab_free_hook mm/slub.c:2342 [inline]
 slab_free_freelist_hook mm/slub.c:2371 [inline]
 slab_free_bulk mm/slub.c:4603 [inline]
 kmem_cache_free_bulk+0x2ea/0x530 mm/slub.c:4847
 kfree_bulk include/linux/slab.h:767 [inline]
 kvfree_rcu_bulk+0x24b/0x4e0 kernel/rcu/tree.c:3385
 kvfree_rcu_drain_ready kernel/rcu/tree.c:3559 [inline]
 kfree_rcu_monitor+0x8f5/0x990 kernel/rcu/tree.c:3632
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
----------------
Code disassembly (best guess):
   0:	8b 44 24 08          	mov    0x8(%rsp),%eax
   4:	4c 89 c2             	mov    %r8,%rdx
   7:	03 02                	add    (%rdx),%eax
   9:	03 5a 04             	add    0x4(%rdx),%ebx
   c:	44 03 72 08          	add    0x8(%rdx),%r14d
  10:	44 89 f7             	mov    %r14d,%edi
  13:	c1 c7 04             	rol    $0x4,%edi
  16:	44 29 f0             	sub    %r14d,%eax
  19:	31 c7                	xor    %eax,%edi
  1b:	41 01 de             	add    %ebx,%r14d
  1e:	29 fb                	sub    %edi,%ebx
  20:	89 fd                	mov    %edi,%ebp
  22:	c1 c5 06             	rol    $0x6,%ebp
  25:	31 dd                	xor    %ebx,%ebp
  27:	44 01 f7             	add    %r14d,%edi
* 2a:	89 e9                	mov    %ebp,%ecx <-- trapping instruction
  2c:	c1 c1 08             	rol    $0x8,%ecx
  2f:	41 29 ee             	sub    %ebp,%r14d
  32:	44 31 f1             	xor    %r14d,%ecx
  35:	01 fd                	add    %edi,%ebp
  37:	29 cf                	sub    %ecx,%edi
  39:	89 c8                	mov    %ecx,%eax
  3b:	c1 c0 10             	rol    $0x10,%eax
  3e:	31 f8                	xor    %edi,%eax