------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 WARNING: CPU: 0 PID: 4553 at net/mac80211/rate.c:376 __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 Modules linked in: CPU: 0 PID: 4553 Comm: kworker/u4:11 Not tainted 5.15.186-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: phy9 ieee80211_iface_work pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 lr : __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 sp : ffff800020186a30 x29: ffff800020186a80 x28: ffff0000d30bb370 x27: 000000000000000c x26: dfff800000000000 x25: 0000000000000000 x24: dfff800000000000 x23: ffff0000ea809b68 x22: 0000000000000040 x21: 000000000000000c x20: ffff0000d30bb378 x19: 0000000000000fff x18: 0000000000000102 x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 x11: 0000000000000101 x10: 0000000000000000 x9 : 677f511441d96f00 x8 : 677f511441d96f00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800020186318 x4 : ffff80001425f400 x3 : ffff80000830220c x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000059 Call trace: __rate_control_send_low+0x574/0x770 net/mac80211/rate.c:371 rate_control_send_low+0x164/0x684 net/mac80211/rate.c:396 rate_control_get_rate+0x1a0/0x4b8 net/mac80211/rate.c:908 __ieee80211_beacon_get+0x1170/0x19dc net/mac80211/tx.c:5167 ieee80211_beacon_get_tim+0x5c/0x790 net/mac80211/tx.c:5194 ieee80211_beacon_get include/net/mac80211.h:4981 [inline] mac80211_hwsim_beacon_tx+0x10c/0x7ac drivers/net/wireless/mac80211_hwsim.c:1812 __iterate_interfaces+0x204/0x484 net/mac80211/util.c:793 ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 net/mac80211/util.c:829 mac80211_hwsim_beacon+0x90/0x174 drivers/net/wireless/mac80211_hwsim.c:1865 __run_hrtimer kernel/time/hrtimer.c:1690 [inline] __hrtimer_run_queues+0x428/0xb6c kernel/time/hrtimer.c:1754 hrtimer_run_softirq+0x160/0x400 kernel/time/hrtimer.c:1771 handle_softirqs+0x344/0xbf0 kernel/softirq.c:576 __do_softirq kernel/softirq.c:610 [inline] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] do_softirq+0xfc/0x1b0 kernel/softirq.c:477 __local_bh_enable_ip+0x250/0x380 kernel/softirq.c:401 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:176 [inline] _raw_spin_unlock_bh+0xec/0x174 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:408 [inline] cfg80211_bss_update+0x16e4/0x1c7c net/wireless/scan.c:1918 cfg80211_inform_single_bss_frame_data net/wireless/scan.c:2554 [inline] cfg80211_inform_bss_frame_data+0x6d4/0x1b48 net/wireless/scan.c:2587 ieee80211_bss_info_update+0x5b8/0x934 net/mac80211/scan.c:190 ieee80211_rx_bss_info net/mac80211/ibss.c:1123 [inline] ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1614 [inline] ieee80211_ibss_rx_queued_mgmt+0x7a8/0x25f8 net/mac80211/ibss.c:1643 ieee80211_iface_process_skb net/mac80211/iface.c:1459 [inline] ieee80211_iface_work+0x594/0xa30 net/mac80211/iface.c:1513 process_one_work+0x79c/0x1140 kernel/workqueue.c:2310 worker_thread+0x8f4/0x101c kernel/workqueue.c:2457 kthread+0x374/0x454 kernel/kthread.c:334 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:855 irq event stamp: 902877 hardirqs last enabled at (902876): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (902877): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396 softirqs last enabled at (902734): [] spin_unlock_bh include/linux/spinlock.h:408 [inline] softirqs last enabled at (902734): [] cfg80211_bss_update+0x16e4/0x1c7c net/wireless/scan.c:1918 softirqs last disabled at (902735): [] __do_softirq kernel/softirq.c:610 [inline] softirqs last disabled at (902735): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (902735): [] do_softirq+0xfc/0x1b0 kernel/softirq.c:477 ---[ end trace 87e9c2a58ea9a52c ]--- vkms_vblank_simulate: vblank timer overrun