------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x62a/0x760 net/mac80211/rate.c:401, CPU#0: syz.8.4187/22421 Modules linked in: CPU: 0 UID: 0 PID: 22421 Comm: syz.8.4187 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:__rate_control_send_low+0x63c/0x760 net/mac80211/rate.c:401 Code: 8b 44 24 08 46 8b a4 a0 d4 00 00 00 e8 5d f9 d1 f6 48 8d 3d c6 7f ab 05 44 8b 44 24 24 48 8b 74 24 08 45 89 e9 89 d9 44 89 e2 <67> 48 0f b9 3a e9 4a fd ff ff 48 8b 3c 24 e8 81 ce 3b f7 e9 1f fd RSP: 0000:ffffc90004a977a8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90986f20 RBP: ffff88803fb14b68 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000000c R11: 0000000000000000 R12: 00000000ffffffff R13: 0000000000000000 R14: 000000000000000c R15: ffff88803fb14b70 FS: 000055556d0b9500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c3f1faa CR3: 000000006537f000 CR4: 00000000003526f0 Call Trace: rate_control_send_low+0x52a/0x810 net/mac80211/rate.c:429 rate_control_get_rate+0x1be/0x5e0 net/mac80211/rate.c:943 ieee80211_beacon_get_finish+0x467/0x670 net/mac80211/tx.c:5362 __ieee80211_beacon_get_ap+0x79d/0x1190 net/mac80211/tx.c:5465 ieee80211_beacon_get_ap net/mac80211/tx.c:5527 [inline] __ieee80211_beacon_get+0x14c0/0x1e40 net/mac80211/tx.c:5634 ieee80211_beacon_get_tim+0xa6/0x280 net/mac80211/tx.c:5776 ieee80211_beacon_get include/net/mac80211.h:5669 [inline] mac80211_hwsim_beacon_tx+0x4dc/0xa40 drivers/net/wireless/virtual/mac80211_hwsim.c:2361 __iterate_interfaces+0x2e5/0x650 net/mac80211/util.c:761 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:797 mac80211_hwsim_beacon+0x105/0x1b0 drivers/net/wireless/virtual/mac80211_hwsim.c:2395 __run_hrtimer kernel/time/hrtimer.c:1777 [inline] __hrtimer_run_queues+0x202/0xc40 kernel/time/hrtimer.c:1841 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1858 handle_softirqs+0x219/0x950 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x57/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0033:0x7fe569e4d723 Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 RSP: 002b:00007fffbb8877a8 EFLAGS: 00000202 RAX: 0000000081aba6cb RBX: 00007fe56ad15720 RCX: ffffffff845d46cb RDX: 00000000000006cb RSI: ffffffff81aba6cb RDI: 0000000000000018 RBP: ffffffff81aba6cb R08: 00007fe56a1d0000 R09: 00007fe56a1d2000 R10: 0000000081aba6cf R11: 0000000000000018 R12: 0000000000000018 R13: 0000000000000000 R14: ffffffff81aba42a R15: 0000000000000afe ---------------- Code disassembly (best guess): 0: 8b 44 24 08 mov 0x8(%rsp),%eax 4: 46 8b a4 a0 d4 00 00 mov 0xd4(%rax,%r12,4),%r12d b: 00 c: e8 5d f9 d1 f6 call 0xf6d1f96e 11: 48 8d 3d c6 7f ab 05 lea 0x5ab7fc6(%rip),%rdi # 0x5ab7fde 18: 44 8b 44 24 24 mov 0x24(%rsp),%r8d 1d: 48 8b 74 24 08 mov 0x8(%rsp),%rsi 22: 45 89 e9 mov %r13d,%r9d 25: 89 d9 mov %ebx,%ecx 27: 44 89 e2 mov %r12d,%edx * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 4a fd ff ff jmp 0xfffffd7e 34: 48 8b 3c 24 mov (%rsp),%rdi 38: e8 81 ce 3b f7 call 0xf73bcebe 3d: e9 .byte 0xe9 3e: 1f (bad) 3f: fd std