------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40
WARNING: CPU: 0 PID: 4171 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 net/mac80211/rate.c:371
Modules linked in:
CPU: 0 PID: 4171 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__rate_control_send_low+0x630/0x880 net/mac80211/rate.c:371
Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 0c 19 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 50 4a 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff
RSP: 0000:ffffc90000007768 EFLAGS: 00010246
RAX: 8600288970a00700 RBX: 000000000000000c RCX: ffff88807b221dc0
RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000000e51
R10: fffff52000000e51 R11: 1ffff92000000e50 R12: ffff8880622b9ca8
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040
FS:  0000555573672500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5e7ae3f000 CR3: 0000000074715000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rate_control_send_low+0x194/0x790 net/mac80211/rate.c:396
 rate_control_get_rate+0x207/0x5c0 net/mac80211/rate.c:908
 __ieee80211_beacon_get+0x1512/0x1f80 net/mac80211/tx.c:5175
 ieee80211_beacon_get_tim+0x48/0x840 net/mac80211/tx.c:5202
 ieee80211_beacon_get include/net/mac80211.h:4983 [inline]
 mac80211_hwsim_beacon_tx+0xf4/0x920 drivers/net/wireless/mac80211_hwsim.c:1812
 __iterate_interfaces+0x243/0x500 net/mac80211/util.c:793
 ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 net/mac80211/util.c:829
 mac80211_hwsim_beacon+0x9b/0x180 drivers/net/wireless/mac80211_hwsim.c:1865
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x53d/0xc40 kernel/time/hrtimer.c:1749
 hrtimer_run_softirq+0x176/0x240 kernel/time/hrtimer.c:1766
 handle_softirqs+0x328/0x820 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x12f/0x220 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:instrument_atomic_read include/linux/instrumented.h:71 [inline]
RIP: 0010:atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline]
RIP: 0010:lock_page_memcg+0x20c/0x410 mm/memcontrol.c:2062
Code: ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 f6 44 24 41 02 0f 85 f9 00 00 00 f7 c3 00 02 00 00 74 01 fb 4d 8d af 80 10 00 00 <4c> 89 ef be 04 00 00 00 e8 f7 95 fb ff 4c 89 e8 48 c1 e8 03 48 b9
RSP: 0000:ffffc9000305fb60 EFLAGS: 00000206
RAX: 8600288970a00700 RBX: 0000000000000286 RCX: 8600288970a00700
RDX: dffffc0000000000 RSI: ffffffff8a0b1be0 RDI: ffffffff8a59e800
RBP: ffffc9000305fc28 R08: dffffc0000000000 R09: fffffbfff1ff5424
R10: fffffbfff1ff5424 R11: 1ffffffff1ff5423 R12: ffff888016a7c670
R13: ffff888016a7d080 R14: ffffea00014746f8 R15: ffff888016a7c000
 __set_page_dirty_buffers+0x1c6/0x4a0 fs/buffer.c:638
 fault_dirty_shared_page+0xc3/0x310 mm/memory.c:2952
 do_shared_fault mm/memory.c:4344 [inline]
 do_fault mm/memory.c:4396 [inline]
 handle_pte_fault mm/memory.c:4650 [inline]
 __handle_mm_fault mm/memory.c:4785 [inline]
 handle_mm_fault+0x2182/0x43b0 mm/memory.c:4883
 do_user_addr_fault+0x489/0xc80 arch/x86/mm/fault.c:1357
 handle_page_fault arch/x86/mm/fault.c:1445 [inline]
 exc_page_fault+0x60/0x100 arch/x86/mm/fault.c:1501
 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606
RIP: 0033:0x7f5e81b6460a
Code: 00 01 00 00 00 74 9a 83 f9 c0 0f 87 8c fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 <f3> a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0b fd ff ff 0f 1f 40 00
RSP: 002b:00007ffdb66f9ba8 EFLAGS: 00010202
RAX: 00007f5e7ae0d000 RBX: 0000555573686cf0 RCX: 00000000000061b6
RDX: 00000000000381b6 RSI: 000055557376b940 RDI: 00007f5e7ae3f000
RBP: 00005555736942e0 R08: 00007f5e7ae0d000 R09: 000055557368a9c0
R10: 38b8978469758900 R11: 0000000000000202 R12: 0000000000000001
R13: 0000000000000000 R14: 00007ffdb66f9bc0 R15: 0000000000000000
 </TASK>
----------------
Code disassembly (best guess):
   0:	ff 48 c7             	decl   -0x39(%rax)
   3:	44 24 40             	rex.R and $0x40,%al
   6:	00 00                	add    %al,(%rax)
   8:	00 00                	add    %al,(%rax)
   a:	9c                   	pushf
   b:	8f 44 24 40          	pop    0x40(%rsp)
   f:	f6 44 24 41 02       	testb  $0x2,0x41(%rsp)
  14:	0f 85 f9 00 00 00    	jne    0x113
  1a:	f7 c3 00 02 00 00    	test   $0x200,%ebx
  20:	74 01                	je     0x23
  22:	fb                   	sti
  23:	4d 8d af 80 10 00 00 	lea    0x1080(%r15),%r13
* 2a:	4c 89 ef             	mov    %r13,%rdi <-- trapping instruction
  2d:	be 04 00 00 00       	mov    $0x4,%esi
  32:	e8 f7 95 fb ff       	call   0xfffb962e
  37:	4c 89 e8             	mov    %r13,%rax
  3a:	48 c1 e8 03          	shr    $0x3,%rax
  3e:	48                   	rex.W
  3f:	b9                   	.byte 0xb9