------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40
WARNING: CPU: 0 PID: 17980 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 net/mac80211/rate.c:380
Modules linked in:
CPU: 0 PID: 17980 Comm: udevd Not tainted 6.6.101-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__rate_control_send_low+0x635/0x880 net/mac80211/rate.c:380
Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 85 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 9b e7 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
RSP: 0018:ffffc90000007560 EFLAGS: 00010246
RAX: 471d76eacfbec000 RBX: 000000000000000c RCX: ffff88802be51e00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c
R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040
R13: dffffc0000000000 R14: ffff888076d83358 R15: ffff888025755ca8
FS:  00007fcc03375880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff6faee56c0 CR3: 000000002e341000 CR4: 00000000003506f0
Call Trace:
 <IRQ>
 rate_control_send_low+0x194/0x790 net/mac80211/rate.c:405
 rate_control_get_rate+0x20b/0x5c0 net/mac80211/rate.c:921
 ieee80211_beacon_get_finish+0x38d/0x6b0 net/mac80211/tx.c:5218
 ieee80211_beacon_get_ap+0x1429/0x1970 net/mac80211/tx.c:5321
 __ieee80211_beacon_get+0x10eb/0x1600 net/mac80211/tx.c:5417
 ieee80211_beacon_get_tim+0xb8/0x560 net/mac80211/tx.c:5559
 ieee80211_beacon_get include/net/mac80211.h:5438 [inline]
 mac80211_hwsim_beacon_tx+0x3c7/0x780 drivers/net/wireless/virtual/mac80211_hwsim.c:2265
 __iterate_interfaces+0x243/0x500 net/mac80211/util.c:766
 ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 net/mac80211/util.c:802
 mac80211_hwsim_beacon+0xbb/0x1b0 drivers/net/wireless/virtual/mac80211_hwsim.c:2295
 __run_hrtimer kernel/time/hrtimer.c:1755 [inline]
 __hrtimer_run_queues+0x51e/0xc40 kernel/time/hrtimer.c:1819
 hrtimer_run_softirq+0x187/0x2b0 kernel/time/hrtimer.c:1836
 handle_softirqs+0x280/0x820 kernel/softirq.c:578
 __do_softirq kernel/softirq.c:612 [inline]
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xc7/0x190 kernel/softirq.c:661
 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687
RIP: 0010:kasan_check_range+0x1c0/0x290 mm/kasan/generic.c:-1
Code: 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 ff 75 61 41 f7 c7 00 ff 00 00 75 5d
RSP: 0018:ffffc90004fe7780 EFLAGS: 00000256
RAX: ffffffff81f27c01 RBX: ffff88801fe58ab8 RCX: ffffffff81f27cd6
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88801fe58ab8
RBP: 0000000000000003 R08: ffff88801fe58ab8 R09: 1ffff11003fcb157
R10: dffffc0000000000 R11: ffffed1003fcb158 R12: ffff88805e2cd521
R13: ffff88801fe58ab8 R14: ffffed1003fcb158 R15: 1ffff11003fcb157
 read_word_at_a_time+0x16/0x20 include/asm-generic/rwonce.h:85
 dentry_string_cmp fs/dcache.c:226 [inline]
 dentry_cmp fs/dcache.c:278 [inline]
 __d_lookup_rcu+0x2a5/0x4c0 fs/dcache.c:2410
 lookup_fast+0xca/0x4d0 fs/namei.c:1629
 walk_component fs/namei.c:1998 [inline]
 link_path_walk+0x5ff/0xe00 fs/namei.c:2329
 path_openat+0x283/0x3190 fs/namei.c:3785
 do_filp_open+0x1c5/0x3d0 fs/namei.c:3816
 do_sys_openat2+0x12c/0x1c0 fs/open.c:1419
 do_sys_open fs/open.c:1434 [inline]
 __do_sys_openat fs/open.c:1450 [inline]
 __se_sys_openat fs/open.c:1445 [inline]
 __x64_sys_openat+0x139/0x160 fs/open.c:1445
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fcc02ca7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007fff983f0230 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fcc03375880 RCX: 00007fcc02ca7407
RDX: 0000000000080000 RSI: 00005601935196f0 RDI: ffffffffffffff9c
RBP: 00005601935196f0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009
 </TASK>
----------------
Code disassembly (best guess):
   0:	49 8d 5c 24 07       	lea    0x7(%r12),%rbx
   5:	4d 85 e4             	test   %r12,%r12
   8:	49 0f 49 dc          	cmovns %r12,%rbx
   c:	48 83 e3 f8          	and    $0xfffffffffffffff8,%rbx
  10:	49 29 dc             	sub    %rbx,%r12
  13:	74 12                	je     0x27
  15:	41 80 3b 00          	cmpb   $0x0,(%r11)
  19:	0f 85 a6 00 00 00    	jne    0xc5
  1f:	49 ff c3             	inc    %r11
  22:	49 ff cc             	dec    %r12
  25:	75 ee                	jne    0x15
  27:	5b                   	pop    %rbx
  28:	41 5c                	pop    %r12
* 2a:	41 5d                	pop    %r13 <-- trapping instruction
  2c:	41 5e                	pop    %r14
  2e:	41 5f                	pop    %r15
  30:	5d                   	pop    %rbp
  31:	c3                   	ret
  32:	45 84 ff             	test   %r15b,%r15b
  35:	75 61                	jne    0x98
  37:	41 f7 c7 00 ff 00 00 	test   $0xff00,%r15d
  3e:	75 5d                	jne    0x9d