------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40
WARNING: CPU: 1 PID: 4752 at net/mac80211/rate.c:385 __rate_control_send_low+0x574/0x774 net/mac80211/rate.c:380
Modules linked in:
CPU: 1 PID: 4752 Comm: kworker/u4:8 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
Workqueue: events_unbound cfg80211_wiphy_work
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __rate_control_send_low+0x574/0x774 net/mac80211/rate.c:380
lr : __rate_control_send_low+0x574/0x774 net/mac80211/rate.c:380
sp : ffff8000215671f0
x29: ffff800021567240 x28: ffff0000c4ccb390 x27: 000000000000000c
x26: dfff800000000000 x25: ffff0000c4ccb3a0 x24: ffff0000f2fa2028
x23: 0000000000000040 x22: 1fffe00018999674 x21: ffff0000c4ccb398
x20: ffff0000c4cc8ea0 x19: dfff800000000000 x18: ffff800011a5bd40
x17: 6d5f65746172206e x16: ffff8000082d3a08 x15: 0000000000000000
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100
x11: ff008000081924a8 x10: 0000000000000000 x9 : 3b8cacc5cf54d700
x8 : 3b8cacc5cf54d700 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021566c78 x4 : ffff800015134e00 x3 : ffff80000852f9b8
x2 : 0000000000000001 x1 : 0000000100000200 x0 : 0000000000000000
Call trace:
 __rate_control_send_low+0x574/0x774 net/mac80211/rate.c:380
 rate_control_send_low+0x164/0x684 net/mac80211/rate.c:405
 rate_control_get_rate+0x1a0/0x4b8 net/mac80211/rate.c:921
 ieee80211_tx_h_rate_ctrl+0x880/0x1274 net/mac80211/tx.c:791
 invoke_tx_handlers_late+0xa8/0x1344 net/mac80211/tx.c:1885
 ieee80211_tx+0x244/0x3b8 net/mac80211/tx.c:2006
 ieee80211_xmit+0x274/0x350 net/mac80211/tx.c:2099
 __ieee80211_tx_skb_tid_band+0x460/0x58c net/mac80211/tx.c:5862
 ieee80211_tx_skb_tid_band net/mac80211/ieee80211_i.h:2187 [inline]
 ieee80211_send_scan_probe_req net/mac80211/scan.c:652 [inline]
 ieee80211_scan_state_send_probe+0x4bc/0x82c net/mac80211/scan.c:680
 ieee80211_scan_work+0x3d0/0x17a8 net/mac80211/scan.c:1150
 cfg80211_wiphy_work+0x1d8/0x218 net/wireless/core.c:433
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 4554663
hardirqs last  enabled at (4554662): [<ffff800008309b4c>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261
hardirqs last disabled at (4554663): [<ffff8000118fa220>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (4554620): [<ffff8000111687f4>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last  enabled at (4554620): [<ffff8000111687f4>] ieee80211_ibss_work+0x2a4/0xd60 net/mac80211/ibss.c:1701
softirqs last disabled at (4554642): [<ffff8000111f462c>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered forwarding state
IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered forwarding state
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready