------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 WARNING: CPU: 0 PID: 0 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 net/mac80211/rate.c:371 Modules linked in: CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__rate_control_send_low+0x630/0x880 net/mac80211/rate.c:371 Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 e0 de 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 a0 38 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff RSP: 0018:ffffc90000007768 EFLAGS: 00010246 RAX: ca6afd453bed8400 RBX: 000000000000000c RCX: ffffffff8bebc3c0 RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff52000000e51 R10: fffff52000000e51 R11: 1ffff92000000e50 R12: ffff888063d4c2a8 R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffda85c8010 CR3: 0000000064528000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rate_control_send_low+0x194/0x790 net/mac80211/rate.c:396 rate_control_get_rate+0x207/0x5c0 net/mac80211/rate.c:908 __ieee80211_beacon_get+0x1512/0x1f80 net/mac80211/tx.c:5175 ieee80211_beacon_get_tim+0x48/0x840 net/mac80211/tx.c:5202 ieee80211_beacon_get include/net/mac80211.h:4983 [inline] mac80211_hwsim_beacon_tx+0xf4/0x920 drivers/net/wireless/mac80211_hwsim.c:1812 __iterate_interfaces+0x243/0x500 net/mac80211/util.c:793 ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 net/mac80211/util.c:829 mac80211_hwsim_beacon+0x9b/0x180 drivers/net/wireless/mac80211_hwsim.c:1865 __run_hrtimer kernel/time/hrtimer.c:1690 [inline] __hrtimer_run_queues+0x53d/0xc40 kernel/time/hrtimer.c:1754 hrtimer_run_softirq+0x176/0x240 kernel/time/hrtimer.c:1771 handle_softirqs+0x328/0x820 kernel/softirq.c:576 __do_softirq kernel/softirq.c:610 [inline] invoke_softirq kernel/softirq.c:450 [inline] __irq_exit_rcu+0x12f/0x220 kernel/softirq.c:659 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline] sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676 RIP: 0010:default_idle+0xb/0x10 arch/x86/kernel/process.c:730 Code: bf 48 89 df e8 46 f5 09 f8 eb b5 e8 3f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d f7 83 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 RAX: ca6afd453bed8400 RBX: ffffffff8bebc3c0 RCX: ca6afd453bed8400 RDX: 0000000000000001 RSI: ffffffff8a0b1620 RDI: ffffffff8a59a240 RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed101720765a R10: ffffed101720765a R11: 1ffff11017207659 R12: ffffffff8d698f28 R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878 default_idle_call+0x81/0xc0 kernel/sched/idle.c:112 cpuidle_idle_call kernel/sched/idle.c:194 [inline] do_idle+0x21b/0x5b0 kernel/sched/idle.c:306 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403 start_kernel+0x486/0x530 init/main.c:1140 secondary_startup_64_no_verify+0xb1/0xbb ---------------- Code disassembly (best guess): 0: bf 48 89 df e8 mov $0xe8df8948,%edi 5: 46 f5 rex.RX cmc 7: 09 f8 or %edi,%eax 9: eb b5 jmp 0xffffffc0 b: e8 3f b0 f6 ff call 0xfff6b04f 10: 00 00 add %al,(%rax) 12: cc int3 13: cc int3 14: 00 00 add %al,(%rax) 16: cc int3 17: cc int3 18: 00 00 add %al,(%rax) 1a: cc int3 1b: cc int3 1c: 00 00 add %al,(%rax) 1e: cc int3 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d f7 83 53 00 verw 0x5383f7(%rip) # 0x53841f 28: fb sti 29: f4 hlt * 2a: c3 ret <-- trapping instruction 2b: 0f 1f 40 00 nopl 0x0(%rax) 2f: 41 57 push %r15 31: 41 56 push %r14 33: 53 push %rbx 34: 49 be 00 00 00 00 00 movabs $0xdffffc0000000000,%r14 3b: fc ff df 3e: 65 gs 3f: 48 rex.W