------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20
WARNING: CPU: 0 PID: 4684 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890 net/mac80211/rate.c:380
Modules linked in:
CPU: 0 UID: 0 PID: 4684 Comm: udevd Not tainted 6.12.0-rc3-syzkaller-00140-g07d6bf634bc8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__rate_control_send_low+0x659/0x890 net/mac80211/rate.c:380
Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 c8 41 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db
RSP: 0018:ffffc90000007760 EFLAGS: 00010246
RAX: 2255365901110900 RBX: 000000000000000c RCX: ffff88807e7f0000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88806588f2a8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8
R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800
R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000
FS: 00007f0780b3bc80(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f82f92a4d58 CR3: 0000000030cca000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rate_control_send_low+0x1a8/0x770 net/mac80211/rate.c:405
rate_control_get_rate+0x20e/0x5e0 net/mac80211/rate.c:921
ieee80211_beacon_get_finish+0x49e/0x870 net/mac80211/tx.c:5253
__ieee80211_beacon_get+0xf7e/0x15c0
ieee80211_beacon_get_tim+0xb4/0x320 net/mac80211/tx.c:5594
ieee80211_beacon_get include/net/mac80211.h:5607 [inline]
mac80211_hwsim_beacon_tx+0x39d/0x850 drivers/net/wireless/virtual/mac80211_hwsim.c:2311
__iterate_interfaces+0x222/0x510 net/mac80211/util.c:774
ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 net/mac80211/util.c:810
mac80211_hwsim_beacon+0xd4/0x1f0 drivers/net/wireless/virtual/mac80211_hwsim.c:2345
__run_hrtimer kernel/time/hrtimer.c:1691 [inline]
__hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1755
hrtimer_run_softirq+0x19a/0x2c0 kernel/time/hrtimer.c:1772
handle_softirqs+0x2c5/0x980 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1037
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__kasan_check_read+0x0/0x20 mm/kasan/shadow.c:30
Code: 8e 4c 89 fe e8 81 a9 c4 09 31 db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 6f e6 ff ff 66 2e 0f 1f 84
RSP: 0018:ffffc9000341f618 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88807e7f0000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901cfea8
RBP: ffffc9000341f750 R08: ffffffff821779d0 R09: 1ffff110024772d8
R10: dffffc0000000000 R11: ffffed10024772d9 R12: 1ffff92000683ed0
R13: ffffffff82177907 R14: ffffffff82177907 R15: dffffc0000000000
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
cpumask_test_cpu include/linux/cpumask.h:570 [inline]
cpu_online include/linux/cpumask.h:1117 [inline]
trace_lock_release include/trace/events/lock.h:69 [inline]
lock_release+0xb0/0xa30 kernel/locking/lockdep.c:5836
rcu_lock_release include/linux/rcupdate.h:347 [inline]
rcu_read_unlock include/linux/rcupdate.h:880 [inline]
dput+0x179/0x2b0 fs/dcache.c:852
step_into+0x355/0x1080 fs/namei.c:1906
walk_component fs/namei.c:2059 [inline]
link_path_walk+0x7b7/0xea0 fs/namei.c:2418
path_lookupat+0xa9/0x450 fs/namei.c:2579
filename_lookup+0x256/0x610 fs/namei.c:2609
vfs_statx+0x103/0x490 fs/stat.c:312
vfs_fstatat+0x145/0x190 fs/stat.c:341
__do_sys_newfstatat fs/stat.c:505 [inline]
__se_sys_newfstatat fs/stat.c:499 [inline]
__x64_sys_newfstatat+0x11d/0x1a0 fs/stat.c:499
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f07807165f4
Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8
RSP: 002b:00007ffd09aefe38 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 0000564162582fc0 RCX: 00007f07807165f4
RDX: 00007ffd09aefe48 RSI: 00007ffd09af02d8 RDI: 00000000ffffff9c
RBP: 00007ffd09aefed8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd09af02d8
R13: 00007ffd09aefe48 R14: 0000564162562910 R15: 0000000000000000
----------------
Code disassembly (best guess):
0: 8e 4c 89 fe mov -0x2(%rcx,%rcx,4),%cs
4: e8 81 a9 c4 09 call 0x9c4a98a
9: 31 db xor %ebx,%ebx
b: eb d0 jmp 0xffffffdd
d: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1)
14: 00 00 00
17: 0f 1f 00 nopl (%rax)
1a: 90 nop
1b: 90 nop
1c: 90 nop
1d: 90 nop
1e: 90 nop
1f: 90 nop
20: 90 nop
21: 90 nop
22: 90 nop
23: 90 nop
24: 90 nop
25: 90 nop
26: 90 nop
27: 90 nop
28: 90 nop
29: 90 nop
* 2a: f3 0f 1e fa endbr64 <-- trapping instruction
2e: 89 f6 mov %esi,%esi
30: 48 8b 0c 24 mov (%rsp),%rcx
34: 31 d2 xor %edx,%edx
36: e9 6f e6 ff ff jmp 0xffffe6aa
3b: 66 data16
3c: 2e cs
3d: 0f .byte 0xf
3e: 1f (bad)
3f: 84 .byte 0x84