------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0 net/mac80211/rate.c:399, CPU#1: syz.2.5212/25868
Modules linked in:
CPU: 1 UID: 0 PID: 25868 Comm: syz.2.5212 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:__rate_control_send_low+0x638/0x8a0 net/mac80211/rate.c:399
Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
RSP: 0018:ffffc90000a088d8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90699890
RBP: ffff888061e60f40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000100 R12: ffff888074fe1168
R13: dffffc0000000000 R14: ffffffff90699890 R15: ffff888061e63258
FS: 00007f1c66ea66c0(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f97e615da08 CR3: 00000000522f8000 CR4: 00000000003526f0
Call Trace:
rate_control_send_low+0x1a7/0x7b0 net/mac80211/rate.c:427
rate_control_get_rate+0x20b/0x5d0 net/mac80211/rate.c:935
ieee80211_beacon_get_finish+0x385/0x6c0 net/mac80211/tx.c:5514
__ieee80211_beacon_get+0xe2b/0x1920 net/mac80211/tx.c:-1
ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5927
ieee80211_beacon_get include/net/mac80211.h:5890 [inline]
mac80211_hwsim_beacon_tx+0x378/0x820 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2478
__iterate_interfaces+0x2af/0x5a0 net/mac80211/util.c:772
ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 net/mac80211/util.c:808
mac80211_hwsim_beacon+0xaf/0x240 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2514
__run_hrtimer kernel/time/hrtimer.c:2032 [inline]
__hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2096
hrtimer_run_softirq+0x17a/0x240 kernel/time/hrtimer.c:2113
handle_softirqs+0x225/0x840 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:118 [inline]
RIP: 0010:lock_acquire+0x84/0x350 kernel/locking/lockdep.c:5844
Code: e8 f1 29 09 00 84 c0 0f 84 ca 01 00 00 83 3d b2 7b b5 0e 00 0f 84 d3 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 7c a8 91 00 <83> 3d 95 7b b5 0e 00 0f 84 ce 00 00 00 65 8b 05 78 81 ca 11 85 c0
RSP: 0018:ffffc900042ee690 EFLAGS: 00000202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8273c8e8 RDI: 1ffffffff1d6b384
RBP: ffffffff8273c8cc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002
R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
rcu_read_lock include/linux/rcupdate.h:840 [inline]
class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
kernfs_root+0x38/0x230 fs/kernfs/kernfs-internal.h:76
kernfs_root_is_locked fs/kernfs/kernfs-internal.h:110 [inline]
kernfs_rcu_name fs/kernfs/kernfs-internal.h:120 [inline]
kernfs_sd_compare fs/kernfs/dir.c:366 [inline]
kernfs_link_sibling+0xed/0x5a0 fs/kernfs/dir.c:397
kernfs_add_one+0x1d2/0x5e0 fs/kernfs/dir.c:844
__kernfs_create_file+0x22b/0x2e0 fs/kernfs/file.c:1079
sysfs_add_file_mode_ns+0x237/0x300 fs/sysfs/file.c:316
create_files fs/sysfs/group.c:82 [inline]
internal_create_group+0x679/0x1180 fs/sysfs/group.c:189
internal_create_groups fs/sysfs/group.c:229 [inline]
sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:255
setup_gid_attrs drivers/infiniband/core/sysfs.c:1118 [inline]
ib_setup_port_attrs+0x1774/0x2420 drivers/infiniband/core/sysfs.c:1394
add_one_compat_dev+0x446/0x650 drivers/infiniband/core/device.c:979
add_compat_devs drivers/infiniband/core/device.c:1037 [inline]
enable_device_and_get+0x2b3/0x3e0 drivers/infiniband/core/device.c:1347
ib_register_device+0x10af/0x1380 drivers/infiniband/core/device.c:1468
rxe_register_device+0x1e3/0x350 drivers/infiniband/sw/rxe/rxe_verbs.c:1543
rxe_net_add+0x81/0x110 drivers/infiniband/sw/rxe/rxe_net.c:625
rxe_newlink+0xf4/0x1c0 drivers/infiniband/sw/rxe/rxe.c:243
nldev_newlink+0x5bc/0x650 drivers/infiniband/core/nldev.c:1816
rdma_nl_rcv_msg drivers/infiniband/core/netlink.c:-1 [inline]
rdma_nl_rcv_skb drivers/infiniband/core/netlink.c:239 [inline]
rdma_nl_rcv+0x6ef/0xa40 drivers/infiniband/core/netlink.c:259
netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
netlink_unicast+0x7bb/0x940 net/netlink/af_netlink.c:1345
netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1900
sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775
__sock_sendmsg net/socket.c:790 [inline]
____sys_sendmsg+0x54e/0x850 net/socket.c:2684
___sys_sendmsg+0x2a5/0x360 net/socket.c:2738
__sys_sendmsg net/socket.c:2770 [inline]
__do_sys_sendmsg net/socket.c:2775 [inline]
__se_sys_sendmsg net/socket.c:2773 [inline]
__x64_sys_sendmsg+0x1b1/0x290 net/socket.c:2773
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1c65f9de59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f1c66ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f1c66225fa0 RCX: 00007f1c65f9de59
RDX: 0000000024048800 RSI: 0000200000000100 RDI: 0000000000000006
RBP: 00007f1c66033e6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1c66226038 R14: 00007f1c66225fa0 R15: 00007fff5e4a0ba8
----------------
Code disassembly (best guess):
0: 7c 24 jl 0x26
2: 10 48 8b adc %cl,-0x75(%rax)
5: 44 24 28 rex.R and $0x28,%al
8: 42 0f b6 04 28 movzbl (%rax,%r13,1),%eax
d: 84 c0 test %al,%al
f: 0f 85 c4 01 00 00 jne 0x1d9
15: 41 8b 0f mov (%r15),%ecx
18: 4c 89 f7 mov %r14,%rdi
1b: 48 8b 74 24 18 mov 0x18(%rsp),%rsi
20: 44 8b 44 24 24 mov 0x24(%rsp),%r8d
25: 44 8b 4c 24 0c mov 0xc(%rsp),%r9d
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: e9 46 fe ff ff jmp 0xfffffe7a
34: 44 89 f1 mov %r14d,%ecx
37: 80 e1 07 and $0x7,%cl
3a: 80 c1 03 add $0x3,%cl
3d: 38 c1 cmp %al,%cl
3f: 0f .byte 0xf