------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x663/0x7d0 net/mac80211/rate.c:406, CPU#3: udevd/9152
Modules linked in:
CPU: 3 UID: 0 PID: 9152 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:__rate_control_send_low+0x673/0x7d0 net/mac80211/rate.c:406
Code: 7d 29 f7 48 8b 04 24 8b ac a8 dc 00 00 00 e8 e4 67 b0 f6 48 8d 3d fd 35 1d 07 44 8b 44 24 0c 48 8b 34 24 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 28 fd ff ff 48 89 44 24 40 e8 79 7d 29 f7 48 8b
RSP: 0018:ffffc900006f88e8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff927aeb30
RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000000c R11: 0000000000000000 R12: ffff88803a2d6528
R13: ffff8880602b32c8 R14: 0000000000000000 R15: dffffc0000000000
FS: 00007f3a0717b880(0000) GS:ffff8880d479e000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3299aaf890 CR3: 000000003966d000 CR4: 0000000000352ef0
Call Trace:
rate_control_send_low+0x2a8/0x7e0 net/mac80211/rate.c:434
rate_control_get_rate+0x1be/0x5c0 net/mac80211/rate.c:942
ieee80211_beacon_get_finish+0x45a/0x690 net/mac80211/tx.c:5655
__ieee80211_beacon_get_ap+0x777/0x10e0 net/mac80211/tx.c:5759
ieee80211_beacon_get_ap net/mac80211/tx.c:5821 [inline]
__ieee80211_beacon_get+0x1513/0x1f00 net/mac80211/tx.c:5927
ieee80211_beacon_get_tim+0xa6/0x280 net/mac80211/tx.c:6069
ieee80211_beacon_get include/net/mac80211.h:5936 [inline]
mac80211_hwsim_beacon_tx+0x4c8/0xa00 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2512
__iterate_interfaces+0x2e6/0x650 net/mac80211/util.c:775
ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:811
mac80211_hwsim_beacon+0xe5/0x2a0 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2548
__run_hrtimer kernel/time/hrtimer.c:2075 [inline]
__hrtimer_run_queues+0x448/0x9a0 kernel/time/hrtimer.c:2132
hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2149
handle_softirqs+0x216/0xa20 kernel/softirq.c:669
__do_softirq kernel/softirq.c:703 [inline]
invoke_softirq kernel/softirq.c:542 [inline]
__irq_exit_rcu+0x178/0x220 kernel/softirq.c:786
irq_exit_rcu+0x9/0x30 kernel/softirq.c:809
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:114 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:140 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline]
RIP: 0010:kasan_check_range+0x6e/0x1e0 mm/kasan/generic.c:200
Code: 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 <48> 89 da 48 29 ea 48 83 fa 10 0f 8e db 00 00 00 41 89 eb 41 83 e3
RSP: 0018:ffffc900033cf8f8 EFLAGS: 00000282
RAX: fffff52000679f29 RBX: fffff52000679f2a RCX: ffffffff81e85949
RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900033cf948
RBP: fffff52000679f29 R08: 0000000000000001 R09: fffff52000679f29
R10: ffffc900033cf94f R11: 0000000000000001 R12: ffffffff9269b140
R13: 1ffff92000679f25 R14: ffffc900033cf948 R15: 0000000000000001
instrument_read_write include/linux/instrumented.h:55 [inline]
atomic_long_try_cmpxchg include/linux/atomic/atomic-instrumented.h:4435 [inline]
rwsem_clear_reader_owned kernel/locking/rwsem.c:221 [inline]
__up_read+0x299/0x980 kernel/locking/rwsem.c:1387
kernfs_iop_lookup+0x234/0x2d0 fs/kernfs/dir.c:1284
__lookup_slow+0x155/0x320 fs/namei.c:1919
lookup_slow+0x54/0x80 fs/namei.c:1936
walk_component fs/namei.c:2282 [inline]
lookup_last fs/namei.c:2789 [inline]
path_lookupat+0x5e8/0xc40 fs/namei.c:2813
filename_lookup+0x202/0x590 fs/namei.c:2842
vfs_statx+0xff/0x3f0 fs/stat.c:357
vfs_fstatat+0x77/0xe0 fs/stat.c:377
__do_sys_newfstatat+0x9d/0x120 fs/stat.c:542
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3a06b11b0a
Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7
RSP: 002b:00007ffee77bfac8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 0000561ea9bb7811 RCX: 00007f3a06b11b0a
RDX: 00007ffee77bfad0 RSI: 00007ffee77bfb60 RDI: 00000000ffffff9c
RBP: 0000561ea9bc43c0 R08: 0000561ea9bb7811 R09: 0000000000000000
R10: 0000000000000100 R11: 0000000000000206 R12: 0000561ea9bc44b0
R13: 00007ffee77bfb60 R14: 0000561ea9b8bfec R15: 0000561e84026bcc
----------------
Code disassembly (best guess):
0: 7d 29 jge 0x2b
2: f7 48 8b 04 24 8b ac testl $0xac8b2404,-0x75(%rax)
9: a8 dc test $0xdc,%al
b: 00 00 add %al,(%rax)
d: 00 e8 add %ch,%al
f: e4 67 in $0x67,%al
11: b0 f6 mov $0xf6,%al
13: 48 8d 3d fd 35 1d 07 lea 0x71d35fd(%rip),%rdi # 0x71d3617
1a: 44 8b 44 24 0c mov 0xc(%rsp),%r8d
1f: 48 8b 34 24 mov (%rsp),%rsi
23: 45 89 f1 mov %r14d,%r9d
26: 89 d9 mov %ebx,%ecx
28: 89 ea mov %ebp,%edx
* 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction
2f: e9 28 fd ff ff jmp 0xfffffd5c
34: 48 89 44 24 40 mov %rax,0x40(%rsp)
39: e8 79 7d 29 f7 call 0xf7297db7
3e: 48 rex.W
3f: 8b .byte 0x8b