------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x62a/0x760 net/mac80211/rate.c:401, CPU#0: syz-executor/5837
Modules linked in:
CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__rate_control_send_low+0x63c/0x760 net/mac80211/rate.c:401
Code: 8b 44 24 08 46 8b a4 a0 d4 00 00 00 e8 3d 30 d3 f6 48 8d 3d 96 2a ad 05 44 8b 44 24 24 48 8b 74 24 08 45 89 e9 89 d9 44 89 e2 <67> 48 0f b9 3a e9 4a fd ff ff 48 8b 3c 24 e8 11 13 3c f7 e9 1f fd
RSP: 0018:ffffc90000007870 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9098d330
RBP: ffff888029a91528 R08: 0000000000000000 R09: 0000000000000000
R10: 000000000000000c R11: 0000000000000000 R12: 00000000ffffffff
R13: 0000000000000000 R14: 000000000000000c R15: ffff888029a91530
FS:  00005555796f7500(0000) GS:ffff8881248f3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3511aff8 CR3: 00000000623e8000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 rate_control_send_low+0x52a/0x810 net/mac80211/rate.c:429
 rate_control_get_rate+0x1be/0x5e0 net/mac80211/rate.c:943
 ieee80211_beacon_get_finish+0x467/0x670 net/mac80211/tx.c:5364
 __ieee80211_beacon_get_ap+0x79d/0x1190 net/mac80211/tx.c:5467
 ieee80211_beacon_get_ap net/mac80211/tx.c:5529 [inline]
 __ieee80211_beacon_get+0x14c0/0x1e40 net/mac80211/tx.c:5636
 ieee80211_beacon_get_tim+0xa6/0x280 net/mac80211/tx.c:5778
 ieee80211_beacon_get include/net/mac80211.h:5669 [inline]
 mac80211_hwsim_beacon_tx+0x4dc/0xa40 drivers/net/wireless/virtual/mac80211_hwsim.c:2361
 __iterate_interfaces+0x2e5/0x650 net/mac80211/util.c:761
 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:797
 mac80211_hwsim_beacon+0x105/0x1b0 drivers/net/wireless/virtual/mac80211_hwsim.c:2395
 __run_hrtimer kernel/time/hrtimer.c:1777 [inline]
 __hrtimer_run_queues+0x202/0xc40 kernel/time/hrtimer.c:1841
 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1858
 handle_softirqs+0x219/0x950 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x109/0x170 kernel/softirq.c:723
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1056
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__sanitizer_cov_trace_switch+0x16/0x90 kernel/kcov.c:334
Code: 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 41 55 41 54 49 89 fc 55 48 89 f5 53 48 8b 46 08 <48> 83 f8 20 74 6b 77 48 48 83 f8 08 74 5b 48 83 f8 10 75 2f 41 bd
RSP: 0018:ffffc90003fcf720 EFLAGS: 00000246
RAX: 0000000000000020 RBX: dffffc0000000000 RCX: ffffffff819a34cc
RDX: ffff88803498bd00 RSI: ffffffff8ba08560 RDI: 0000000000000000
RBP: ffffffff8ba08560 R08: 0000000000000001 R09: fffff520007f9edc
R10: 0000000000000003 R11: ffff88803498c830 R12: 0000000000000000
R13: ffff88804b13ad38 R14: 0000000000000000 R15: ffff88804b13adf0
 d_walk+0x11a/0xa60 fs/dcache.c:1326
 shrink_dcache_tree+0x138/0x570 fs/dcache.c:1587
 shrink_dcache_parent fs/dcache.c:1616 [inline]
 d_invalidate fs/dcache.c:1698 [inline]
 d_invalidate+0x13a/0x290 fs/dcache.c:1683
 proc_invalidate_siblings_dcache+0x45c/0x760 fs/proc/inode.c:142
 release_task+0xd9a/0x1ab0 kernel/exit.c:291
 wait_task_zombie kernel/exit.c:1274 [inline]
 wait_consider_task+0x1756/0x3eb0 kernel/exit.c:1501
 do_wait_thread kernel/exit.c:1564 [inline]
 __do_wait+0x1e2/0x890 kernel/exit.c:1682
 do_wait+0x21d/0x570 kernel/exit.c:1716
 kernel_wait4+0x16b/0x280 kernel/exit.c:1875
 __do_sys_wait4+0x15d/0x170 kernel/exit.c:1903
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6d81385897
Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44
RSP: 002b:00007fffab35e970 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: ffffffffffffffda RBX: 0000000000000344 RCX: 00007f6d81385897
RDX: 0000000040000001 RSI: 00007fffab35e9dc RDI: 00000000ffffffff
RBP: 00007fffab35e9dc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
R13: 00000000000927c0 R14: 000000000006bede R15: 00007fffab35ea30
 </TASK>
----------------
Code disassembly (best guess):
   0:	8b 44 24 08          	mov    0x8(%rsp),%eax
   4:	46 8b a4 a0 d4 00 00 	mov    0xd4(%rax,%r12,4),%r12d
   b:	00
   c:	e8 3d 30 d3 f6       	call   0xf6d3304e
  11:	48 8d 3d 96 2a ad 05 	lea    0x5ad2a96(%rip),%rdi        # 0x5ad2aae
  18:	44 8b 44 24 24       	mov    0x24(%rsp),%r8d
  1d:	48 8b 74 24 08       	mov    0x8(%rsp),%rsi
  22:	45 89 e9             	mov    %r13d,%r9d
  25:	89 d9                	mov    %ebx,%ecx
  27:	44 89 e2             	mov    %r12d,%edx
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	e9 4a fd ff ff       	jmp    0xfffffd7e
  34:	48 8b 3c 24          	mov    (%rsp),%rdi
  38:	e8 11 13 3c f7       	call   0xf73c134e
  3d:	e9                   	.byte 0xe9
  3e:	1f                   	(bad)
  3f:	fd                   	std