------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 WARNING: CPU: 1 PID: 136 at net/mac80211/rate.c:376 __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 Modules linked in: CPU: 1 PID: 136 Comm: kworker/u4:1 Not tainted 5.15.181-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 Workqueue: phy4 ieee80211_scan_work pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 lr : __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 sp : ffff80001bd17250 x29: ffff80001bd172a0 x28: ffff0000d632b370 x27: 000000000000000c x26: dfff800000000000 x25: 0000000000000000 x24: dfff800000000000 x23: ffff0000ca468ca8 x22: 0000000000000040 x21: 000000000000000c x20: ffff0000d632b378 x19: 0000000000000fff x18: 0000000000000200 x17: 0000000000000000 x16: ffff8000111a3970 x15: 0000000000000012 x14: 0000000000000000 x13: 1ffff0000282a06b x12: 0000000000ff0100 x11: 0000000000000200 x10: 0000000000000000 x9 : 87302286eab57e00 x8 : 87302286eab57e00 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008503848 x2 : 0000000000000001 x1 : 0000000100000200 x0 : 0000000000000059 Call trace: __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 rate_control_send_low+0x164/0x684 net/mac80211/rate.c:396 rate_control_get_rate+0x1a0/0x4b8 net/mac80211/rate.c:908 ieee80211_tx_h_rate_ctrl+0x880/0x1240 net/mac80211/tx.c:744 invoke_tx_handlers_late+0x9c/0x12a0 net/mac80211/tx.c:1826 ieee80211_tx+0x244/0x3b8 net/mac80211/tx.c:1947 ieee80211_xmit+0x298/0x3b4 net/mac80211/tx.c:2040 __ieee80211_tx_skb_tid_band+0x13c/0x1dc net/mac80211/tx.c:5669 ieee80211_tx_skb_tid_band net/mac80211/ieee80211_i.h:2204 [inline] ieee80211_send_scan_probe_req net/mac80211/scan.c:647 [inline] ieee80211_scan_state_send_probe+0x4c0/0x82c net/mac80211/scan.c:675 ieee80211_scan_work+0x3b4/0x17cc net/mac80211/scan.c:1145 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 irq event stamp: 1924659 hardirqs last enabled at (1924658): [] console_trylock_spinning+0x160/0x268 kernel/printk/printk.c:1891 hardirqs last disabled at (1924659): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (1924600): [] spin_unlock_bh include/linux/spinlock.h:408 [inline] softirqs last enabled at (1924600): [] ieee80211_ibss_work+0x2a4/0xd60 net/mac80211/ibss.c:1706 softirqs last disabled at (1924646): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18 ---[ end trace 5222d49a8b4586a5 ]--- IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready bridge0: port 1(bridge_slave_0) entered blocking state bridge0: port 1(bridge_slave_0) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready