------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760 net/mac80211/rate.c:401, CPU#0: ksoftirqd/0/15 Modules linked in: CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 RIP: 0010:__rate_control_send_low+0x621/0x760 net/mac80211/rate.c:401 Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 87 11 1a f7 48 8d 3d d0 4c db 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 0b 6d 83 f7 e9 03 RSP: 0018:ffffc90000147640 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c81590 RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000000c R11: 0000000000000000 R12: ffff88802ff60528 R13: ffff88805d53b128 R14: 0000000000000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f30b71e6470 CR3: 00000000767b4000 CR4: 0000000000350ef0 Call Trace: rate_control_send_low+0x2a8/0x7e0 net/mac80211/rate.c:429 rate_control_get_rate+0x1be/0x5c0 net/mac80211/rate.c:943 ieee80211_beacon_get_finish+0x45a/0x690 net/mac80211/tx.c:5364 __ieee80211_beacon_get_ap+0x76e/0x10d0 net/mac80211/tx.c:5467 ieee80211_beacon_get_ap net/mac80211/tx.c:5529 [inline] __ieee80211_beacon_get+0x14fa/0x1ee0 net/mac80211/tx.c:5636 ieee80211_beacon_get_tim+0xa6/0x280 net/mac80211/tx.c:5778 ieee80211_beacon_get include/net/mac80211.h:5669 [inline] mac80211_hwsim_beacon_tx+0x4d6/0xa00 drivers/net/wireless/virtual/mac80211_hwsim.c:2361 __iterate_interfaces+0x2e6/0x650 net/mac80211/util.c:761 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:797 mac80211_hwsim_beacon+0x105/0x1b0 drivers/net/wireless/virtual/mac80211_hwsim.c:2395 __run_hrtimer kernel/time/hrtimer.c:1777 [inline] __hrtimer_run_queues+0x516/0x990 kernel/time/hrtimer.c:1841 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1858 handle_softirqs+0x1ea/0x910 kernel/softirq.c:622 run_ksoftirqd kernel/softirq.c:1063 [inline] run_ksoftirqd+0x38/0x60 kernel/softirq.c:1055 smpboot_thread_fn+0x3d3/0xaa0 kernel/smpboot.c:160 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---------------- Code disassembly (best guess): 0: f7 48 8b 44 24 10 8b testl $0x8b102444,-0x75(%rax) 7: ac lods %ds:(%rsi),%al 8: a8 d4 test $0xd4,%al a: 00 00 add %al,(%rax) c: 00 e8 add %ch,%al e: 87 11 xchg %edx,(%rcx) 10: 1a f7 sbb %bh,%dh 12: 48 8d 3d d0 4c db 05 lea 0x5db4cd0(%rip),%rdi # 0x5db4ce9 19: 44 8b 44 24 04 mov 0x4(%rsp),%r8d 1e: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 23: 45 89 f1 mov %r14d,%r9d 26: 89 d9 mov %ebx,%ecx 28: 89 ea mov %ebp,%edx * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 2f fd ff ff jmp 0xfffffd63 34: 48 8b 7c 24 08 mov 0x8(%rsp),%rdi 39: e8 0b 6d 83 f7 call 0xf7836d49 3e: e9 .byte 0xe9 3f: 03 .byte 0x3