------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399, CPU#1: udevd/4705 Modules linked in: CPU: 1 UID: 0 PID: 4705 Comm: udevd Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399 lr : __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399 sp : ffff80008eaf7650 x29: ffff80008eaf76b0 x28: dfff800000000000 x27: ffff0000fc2c3270 x26: 000000000000000c x25: 00000000ffffffff x24: 0000000000000000 x23: dfff800000000000 x22: ffff0000fc2c0f60 x21: ffff0000d02abb68 x20: dfff800000000000 x19: 0000000000000000 x18: 0000000000000000 x17: 00000000ffff0000 x16: ffff000000000000 x15: ffff80008624bf7c x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000104 x9 : 34267f714a5d0e00 x8 : 34267f714a5d0e00 x7 : ffff80008048ce60 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7010 x2 : 0000000000000102 x1 : ffff0000d3889d40 x0 : 0000000000000000 Call trace: __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399 (P) rate_control_send_low+0x184/0x68c net/mac80211/rate.c:427 rate_control_get_rate+0x15c/0x348 net/mac80211/rate.c:935 ieee80211_beacon_get_finish+0x33c/0x5a4 net/mac80211/tx.c:5514 ieee80211_beacon_get_ap+0x1038/0x1604 net/mac80211/tx.c:-1 __ieee80211_beacon_get+0xe68/0x12c4 net/mac80211/tx.c:5785 ieee80211_beacon_get_tim+0xc0/0x254 net/mac80211/tx.c:5927 ieee80211_beacon_get include/net/mac80211.h:5890 [inline] mac80211_hwsim_beacon_tx+0x304/0x6c0 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2478 __iterate_interfaces+0x234/0x4e0 net/mac80211/util.c:772 ieee80211_iterate_active_interfaces_atomic+0xf4/0x1ac net/mac80211/util.c:808 mac80211_hwsim_beacon+0xb4/0x1a4 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2514 __run_hrtimer kernel/time/hrtimer.c:2032 [inline] __hrtimer_run_queues+0x314/0xbe0 kernel/time/hrtimer.c:2096 hrtimer_run_softirq+0x15c/0x21c kernel/time/hrtimer.c:2113 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:622 __do_softirq+0x14/0x20 kernel/softirq.c:656 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 invoke_softirq kernel/softirq.c:503 [inline] __irq_exit_rcu+0x1ac/0x428 kernel/softirq.c:735 irq_exit_rcu+0x14/0x84 kernel/softirq.c:752 __el1_irq arch/arm64/kernel/entry-common.c:510 [inline] el1_interrupt+0x40/0x60 arch/arm64/kernel/entry-common.c:522 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:527 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:590 raw_atomic_read include/linux/atomic/atomic-arch-fallback.h:457 [inline] (P) rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] (P) rcu_is_watching+0x98/0x134 kernel/rcu/tree.c:752 (P) trace_lock_acquire include/trace/events/lock.h:23 [inline] lock_acquire+0x80/0x364 kernel/locking/lockdep.c:5831 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock_sched include/linux/rcupdate.h:938 [inline] pfn_valid+0xac/0x214 include/linux/mmzone.h:2270 lowmem_page_address include/linux/mm.h:3007 [inline] __kasan_poison_pages+0x40/0x8c mm/kasan/common.c:151 kasan_poison_pages include/linux/kasan.h:118 [inline] __free_pages_prepare mm/page_alloc.c:1428 [inline] __free_frozen_pages+0x4e0/0xbb8 mm/page_alloc.c:2950 free_frozen_pages+0x14/0x20 mm/page_alloc.c:2988 __free_slab+0x11c/0x1b4 mm/slub.c:3469 free_slab+0x2c/0x154 mm/slub.c:3503 discard_slab+0x48/0x90 mm/slub.c:3509 __slab_free+0x1a0/0x1d0 mm/slub.c:5767 ___cache_free+0x80/0x94 mm/slub.c:6477 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0xb4/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x118/0x124 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x2c/0x88 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4612 [inline] slab_alloc_node mm/slub.c:4945 [inline] kmem_cache_alloc_noprof+0x268/0x5d8 mm/slub.c:4959 alloc_filename fs/namei.c:147 [inline] do_getname+0x48/0x234 fs/namei.c:187 getname_flags fs/namei.c:230 [inline] getname include/linux/fs.h:2532 [inline] class_filename_constructor include/linux/fs.h:2559 [inline] __do_sys_renameat fs/namei.c:6223 [inline] __se_sys_renameat fs/namei.c:6220 [inline] __arm64_sys_renameat+0xa0/0x100 fs/namei.c:6220 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 irq event stamp: 2991245 hardirqs last enabled at (2991244): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (2991244): [] arm64_exit_to_kernel_mode+0x80/0x94 arch/arm64/kernel/entry-common.c:62 hardirqs last disabled at (2991245): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:425 softirqs last enabled at (2990992): [] local_bh_enable include/linux/bottom_half.h:33 [inline] softirqs last enabled at (2990992): [] put_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:251 [inline] softirqs last enabled at (2990992): [] fpsimd_restore_current_state+0x39c/0x9c8 arch/arm64/kernel/fpsimd.c:1797 softirqs last disabled at (2991117): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]---