------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: CPU: 1 PID: 7245 at net/mac80211/rate.c:375 __rate_control_send_low+0x4b6/0x680 net/mac80211/rate.c:375
Modules linked in:
CPU: 1 PID: 7245 Comm: syz-executor.7 Not tainted 5.10.194 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:__rate_control_send_low+0x4b6/0x680 net/mac80211/rate.c:375
Code: 14 48 89 44 24 10 e8 f9 7f 87 fd 44 8b 44 24 24 45 89 e9 44 89 e1 48 8b 74 24 10 44 89 f2 48 c7 c7 e0 9b 95 84 e8 6a b8 1d 00 <0f> 0b e9 29 fe ff ff e8 ce 7f 87 fd 48 8b 44 24 08 48 8d 78 7f 48
RSP: 0018:ffff88806cf09a60 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff8880463f2ca8 RCX: 0000000000000000
RDX: ffff888017643480 RSI: ffffffff8129b9e3 RDI: ffffed100d9e133e
RBP: ffff888047c8b1e8 R08: 0000000000000001 R09: ffff88806cf37b4f
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000000
FS: 00005555560cc400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d025000 CR3: 0000000017656000 CR4: 0000000000350ee0
Call Trace:
rate_control_send_low+0x1f2/0x600 net/mac80211/rate.c:400
rate_control_get_rate+0x18b/0x510 net/mac80211/rate.c:913
__ieee80211_beacon_get+0x773/0x1440 net/mac80211/tx.c:4961
ieee80211_beacon_get_tim+0x88/0x9f0 net/mac80211/tx.c:4988
ieee80211_beacon_get include/net/mac80211.h:4912 [inline]
mac80211_hwsim_beacon_tx+0x111/0x940 drivers/net/wireless/mac80211_hwsim.c:1740
__iterate_interfaces+0x1f0/0x550 net/mac80211/util.c:792
ieee80211_iterate_active_interfaces_atomic+0x71/0x1c0 net/mac80211/util.c:828
mac80211_hwsim_beacon+0xd1/0x1d0 drivers/net/wireless/mac80211_hwsim.c:1793
__run_hrtimer kernel/time/hrtimer.c:1583 [inline]
__hrtimer_run_queues+0x632/0xb40 kernel/time/hrtimer.c:1647
hrtimer_run_softirq+0x148/0x310 kernel/time/hrtimer.c:1664
__do_softirq+0x1b8/0x7c9 kernel/softirq.c:298
asm_call_irq_on_stack+0x12/0x20
__run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
do_softirq_own_stack+0x80/0xa0 arch/x86/kernel/irq_64.c:77
invoke_softirq kernel/softirq.c:393 [inline]
__irq_exit_rcu kernel/softirq.c:423 [inline]
irq_exit_rcu+0x114/0x1b0 kernel/softirq.c:435
sysvec_apic_timer_interrupt+0x43/0xa0 arch/x86/kernel/apic/apic.c:1094
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:lock_acquire+0x1b9/0x470 kernel/locking/lockdep.c:5533
Code: 5e db 7e e8 39 91 ff ff b8 ff ff ff ff 48 83 c4 20 65 0f c1 05 28 5e db 7e 83 f8 01 4c 8b 54 24 08 0f 85 48 02 00 00 41 52 9d <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7
RSP: 0018:ffff8880181a7480 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 1ffff11003034e92 RCX: 0000000039a3c8ee
RDX: 1ffff11002ec87b8 RSI: befc7cf4c1d7a922 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8685f6e7
R10: 0000000000000246 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: ffffffff84ff85a0 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:260 [inline]
rcu_read_lock include/linux/rcupdate.h:660 [inline]
__is_insn_slot_addr+0x3f/0x290 kernel/kprobes.c:299
is_kprobe_insn_slot include/linux/kprobes.h:309 [inline]
kernel_text_address kernel/extable.c:149 [inline]
kernel_text_address+0xf2/0x120 kernel/extable.c:120
__kernel_text_address+0x9/0x40 kernel/extable.c:105
unwind_get_return_address arch/x86/kernel/unwind_orc.c:323 [inline]
unwind_get_return_address+0x55/0xa0 arch/x86/kernel/unwind_orc.c:318
arch_stack_walk+0x99/0xf0 arch/x86/kernel/stacktrace.c:26
stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:121
kasan_save_stack+0x1b/0x40 mm/kasan/common.c:48
kasan_set_track mm/kasan/common.c:56 [inline]
__kasan_kmalloc.constprop.0+0xc9/0xd0 mm/kasan/common.c:461
slab_post_alloc_hook mm/slab.h:532 [inline]
slab_alloc_node mm/slub.c:2896 [inline]
slab_alloc mm/slub.c:2904 [inline]
kmem_cache_alloc+0x13b/0x310 mm/slub.c:2909
mem_pool_alloc mm/kmemleak.c:423 [inline]
create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:578
kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
slab_post_alloc_hook mm/slab.h:534 [inline]
slab_alloc_node mm/slub.c:2896 [inline]
slab_alloc mm/slub.c:2904 [inline]
kmem_cache_alloc+0x159/0x310 mm/slub.c:2909
vm_area_dup+0x78/0x290 kernel/fork.c:356
__split_vma+0xa8/0x570 mm/mmap.c:2755
split_vma+0x99/0xe0 mm/mmap.c:2813
mprotect_fixup+0x669/0x8c0 mm/mprotect.c:467
do_mprotect_pkey+0x518/0x940 mm/mprotect.c:619
__do_sys_mprotect mm/mprotect.c:644 [inline]
__se_sys_mprotect mm/mprotect.c:641 [inline]
__x64_sys_mprotect+0x74/0xb0 mm/mprotect.c:641
do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x62/0xc7
RIP: 0033:0x7f11babb9c27
Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff9bfabcd8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f11babb9c27
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f11b80ef000
RBP: 00007fff9bfabdb0 R08: 00000000ffffffff R09: 00007f11b810e700
R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9bfabec0
R13: 00007f11b810e700 R14: 0000000000000000 R15: 0000000000022000
irq event stamp: 3392
hardirqs last enabled at (3402): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2561
hardirqs last disabled at (3411): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2476
softirqs last enabled at (1874): [] asm_call_irq_on_stack+0x12/0x20
softirqs last disabled at (1889): [] asm_call_irq_on_stack+0x12/0x20
---[ end trace 138344a67f03f651 ]---
device wlan1 entered promiscuous mode
serio: Serial port tty29
EXT4-fs (loop3): Couldn't mount because of unsupported optional features (5700001)
----------------
Code disassembly (best guess), 3 bytes skipped:
0: e8 39 91 ff ff callq 0xffff913e
5: b8 ff ff ff ff mov $0xffffffff,%eax
a: 48 83 c4 20 add $0x20,%rsp
e: 65 0f c1 05 28 5e db xadd %eax,%gs:0x7edb5e28(%rip) # 0x7edb5e3e
15: 7e
16: 83 f8 01 cmp $0x1,%eax
19: 4c 8b 54 24 08 mov 0x8(%rsp),%r10
1e: 0f 85 48 02 00 00 jne 0x26c
24: 41 52 push %r10
26: 9d popfq
* 27: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction
2e: fc ff df
31: 48 01 c3 add %rax,%rbx
34: 48 c7 03 00 00 00 00 movq $0x0,(%rbx)
3b: 48 rex.W
3c: c7 .byte 0xc7