------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: net/mac80211/rate.c:412 at __rate_control_send_low+0x6ec/0x768 net/mac80211/rate.c:407, CPU#1: kworker/u8:0/12 Modules linked in: CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: ipv6_addrconf addrconf_dad_work pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __rate_control_send_low+0x6ec/0x768 net/mac80211/rate.c:407 lr : __rate_control_send_low+0x6ec/0x768 net/mac80211/rate.c:407 sp : ffff80008f9262d0 x29: ffff80008f926330 x28: ffff0000f42332d0 x27: 000000000000000c x26: ffff0000f42332e0 x25: ffff0000f4230fc0 x24: 0000000000000000 x23: ffff0000f22b5528 x22: 1fffe0001e84665c x21: dfff800000000000 x20: 00000000ffffffff x19: dfff800000000000 x18: ffff80011b88c000 x17: ffff80011b88c000 x16: ffff80008f800000 x15: 0000000000000000 x14: 000000000001e78c x13: 0000000000000001 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000000203 x9 : 008bc72e65769000 x8 : 008bc72e65769000 x7 : ffff800080483084 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3d68 x2 : 0000000100000201 x1 : ffff0000c1a00000 x0 : 0000000000000000 Call trace: __rate_control_send_low+0x6ec/0x768 net/mac80211/rate.c:407 (P) rate_control_send_low+0x184/0x68c net/mac80211/rate.c:435 rate_control_get_rate+0x15c/0x348 net/mac80211/rate.c:943 ieee80211_tx_h_rate_ctrl+0x6bc/0x1288 net/mac80211/tx.c:766 invoke_tx_handlers_late+0xa0/0x13c8 net/mac80211/tx.c:1868 ieee80211_tx_dequeue+0x287c/0x3d08 net/mac80211/tx.c:4039 ieee80211_hwsim_wake_tx_queue+0xc0/0x154 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2311 drv_wake_tx_queue net/mac80211/driver-ops.h:1394 [inline] schedule_and_wake_txq net/mac80211/driver-ops.h:1401 [inline] ieee80211_queue_skb+0x132c/0x1ad0 net/mac80211/tx.c:1683 ieee80211_tx+0x23c/0x404 net/mac80211/tx.c:1989 ieee80211_xmit+0x274/0x348 net/mac80211/tx.c:2085 __ieee80211_subif_start_xmit+0x908/0xfac net/mac80211/tx.c:4470 ieee80211_subif_start_xmit+0xe8/0x45c net/mac80211/tx.c:4665 __netdev_start_xmit include/linux/netdevice.h:5432 [inline] netdev_start_xmit include/linux/netdevice.h:5441 [inline] xmit_one net/core/dev.c:3953 [inline] dev_hard_start_xmit+0x1dc/0x794 net/core/dev.c:3969 __dev_queue_xmit+0xed4/0x2a68 net/core/dev.c:4958 dev_queue_xmit include/linux/netdevice.h:3464 [inline] neigh_resolve_output+0x568/0x668 net/core/neighbour.c:1616 neigh_output include/net/neighbour.h:560 [inline] ip6_finish_output2+0xaf0/0x1338 net/ipv6/ip6_output.c:138 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline] ip6_finish_output+0x230/0x618 net/ipv6/ip6_output.c:221 NF_HOOK_COND include/linux/netfilter.h:314 [inline] ip6_output+0x2d0/0x528 net/ipv6/ip6_output.c:248 dst_output include/net/dst.h:471 [inline] NF_HOOK+0x14c/0x464 include/linux/netfilter.h:325 igmp6_send+0x79c/0xde0 net/ipv6/mcast.c:2270 igmp6_join_group+0x104/0x3ac net/ipv6/mcast.c:2655 igmp6_group_added+0x240/0x430 net/ipv6/mcast.c:705 __ipv6_dev_mc_inc+0x810/0xa84 net/ipv6/mcast.c:992 ipv6_dev_mc_inc+0x2c/0x3c net/ipv6/mcast.c:1001 addrconf_join_solict+0xec/0x170 net/ipv6/addrconf.c:2262 addrconf_dad_begin net/ipv6/addrconf.c:4135 [inline] addrconf_dad_work+0x1ec/0xfe8 net/ipv6/addrconf.c:4263 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 irq event stamp: 555565 hardirqs last enabled at (555564): [] vprintk_store+0x924/0xb94 kernel/printk/printk.c:2385 hardirqs last disabled at (555565): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483 softirqs last enabled at (555536): [] neigh_hh_init net/core/neighbour.c:1591 [inline] softirqs last enabled at (555536): [] neigh_resolve_output+0x264/0x668 net/core/neighbour.c:1606 softirqs last disabled at (555540): [] local_bh_disable include/linux/bottom_half.h:20 [inline] softirqs last disabled at (555540): [] rcu_read_lock_bh include/linux/rcupdate.h:902 [inline] softirqs last disabled at (555540): [] __dev_queue_xmit+0x1fc/0x2a68 net/core/dev.c:4872 ---[ end trace 0000000000000000 ]---