------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760 net/mac80211/rate.c:401, CPU#0: kworker/u8:8/3029 Modules linked in: CPU: 0 UID: 0 PID: 3029 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: krdsd rds_connect_worker RIP: 0010:__rate_control_send_low+0x621/0x760 net/mac80211/rate.c:401 Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 d7 07 1a f7 48 8d 3d 00 43 db 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 5b 64 83 f7 e9 03 RSP: 0018:ffffc900000078b0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c815b0 RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000000c R11: 0000000000000000 R12: ffff8880329ea668 R13: ffff88807e41b128 R14: 0000000000000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c368e9d CR3: 0000000059921000 CR4: 0000000000350ef0 Call Trace: rate_control_send_low+0x2a8/0x7e0 net/mac80211/rate.c:429 rate_control_get_rate+0x1be/0x5c0 net/mac80211/rate.c:943 ieee80211_beacon_get_finish+0x45a/0x690 net/mac80211/tx.c:5364 __ieee80211_beacon_get_ap+0x76e/0x10d0 net/mac80211/tx.c:5467 ieee80211_beacon_get_ap net/mac80211/tx.c:5529 [inline] __ieee80211_beacon_get+0x14fa/0x1ee0 net/mac80211/tx.c:5636 ieee80211_beacon_get_tim+0xa6/0x280 net/mac80211/tx.c:5778 ieee80211_beacon_get include/net/mac80211.h:5669 [inline] mac80211_hwsim_beacon_tx+0x4d6/0xa00 drivers/net/wireless/virtual/mac80211_hwsim.c:2361 __iterate_interfaces+0x2e6/0x650 net/mac80211/util.c:761 ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 net/mac80211/util.c:797 mac80211_hwsim_beacon+0x105/0x1b0 drivers/net/wireless/virtual/mac80211_hwsim.c:2395 __run_hrtimer kernel/time/hrtimer.c:1777 [inline] __hrtimer_run_queues+0x516/0x990 kernel/time/hrtimer.c:1841 hrtimer_run_softirq+0x17d/0x350 kernel/time/hrtimer.c:1858 handle_softirqs+0x1ea/0x910 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xac/0xe0 kernel/softirq.c:510 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450 rds_tcp_tune+0xcd/0x920 net/rds/tcp.c:497 rds_tcp_conn_path_connect+0x305/0x7f0 net/rds/tcp_connect.c:127 rds_connect_worker+0x1b4/0x2d0 net/rds/threads.c:176 process_one_work+0x9c2/0x1840 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x5da/0xe40 kernel/workqueue.c:3421 kthread+0x3b3/0x730 kernel/kthread.c:463 ret_from_fork+0x754/0xaf0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 48 8b 44 24 10 mov 0x10(%rsp),%rax 5: 8b ac a8 d4 00 00 00 mov 0xd4(%rax,%rbp,4),%ebp c: e8 d7 07 1a f7 call 0xf71a07e8 11: 48 8d 3d 00 43 db 05 lea 0x5db4300(%rip),%rdi # 0x5db4318 18: 44 8b 44 24 04 mov 0x4(%rsp),%r8d 1d: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 22: 45 89 f1 mov %r14d,%r9d 25: 89 d9 mov %ebx,%ecx 27: 89 ea mov %ebp,%edx * 29: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2e: e9 2f fd ff ff jmp 0xfffffd62 33: 48 8b 7c 24 08 mov 0x8(%rsp),%rdi 38: e8 5b 64 83 f7 call 0xf7836498 3d: e9 .byte 0xe9 3e: 03 .byte 0x3