------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: CPU: 1 PID: 10861 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 net/mac80211/rate.c:371 Modules linked in: CPU: 1 PID: 10861 Comm: syz.3.2347 Not tainted 5.15.161-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:__rate_control_send_low+0x653/0x890 net/mac80211/rate.c:371 Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 40 0a 94 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 2d c9 9d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff RSP: 0018:ffffc90002e76648 EFLAGS: 00010246 RAX: de3ef3f3354fbb00 RBX: 000000000000000c RCX: 0000000000040000 RDX: ffffc900044fd000 RSI: 0000000000008206 RDI: 0000000000008207 RBP: ffff888068bec7a8 R08: ffffffff8166835c R09: fffff520005cec09 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: 000000000000000c R14: 0000000000000000 R15: 00000000ffffffff FS: 00007f0d107d56c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33717ff8 CR3: 000000006780a000 CR4: 00000000003506e0 DR0: 000000000000004e DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: rate_control_send_low+0x1a8/0x770 net/mac80211/rate.c:396 rate_control_get_rate+0x20a/0x5d0 net/mac80211/rate.c:908 ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 net/mac80211/tx.c:744 invoke_tx_handlers_late+0xb2/0x17f0 net/mac80211/tx.c:1826 ieee80211_tx+0x2df/0x460 net/mac80211/tx.c:1947 __ieee80211_tx_skb_tid_band+0x164/0x200 net/mac80211/tx.c:5669 ieee80211_tx_skb_tid_band net/mac80211/ieee80211_i.h:2199 [inline] ieee80211_send_scan_probe_req net/mac80211/scan.c:647 [inline] ieee80211_scan_state_send_probe+0x557/0x8f0 net/mac80211/scan.c:675 __ieee80211_start_scan+0x199b/0x1ae0 net/mac80211/scan.c:806 ieee80211_request_scan+0x5f/0xa0 net/mac80211/scan.c:1168 rdev_scan net/wireless/rdev-ops.h:439 [inline] cfg80211_conn_scan+0x988/0xda0 net/wireless/sme.c:133 cfg80211_sme_connect net/wireless/sme.c:597 [inline] cfg80211_connect+0x1721/0x1f40 net/wireless/sme.c:1276 nl80211_connect+0x1860/0x1f70 net/wireless/nl80211.c:10946 genl_family_rcv_msg_doit net/netlink/genetlink.c:731 [inline] genl_family_rcv_msg net/netlink/genetlink.c:775 [inline] genl_rcv_msg+0xfbd/0x14a0 net/netlink/genetlink.c:792 netlink_rcv_skb+0x1cf/0x410 net/netlink/af_netlink.c:2508 genl_rcv+0x24/0x40 net/netlink/genetlink.c:803 netlink_unicast_kernel net/netlink/af_netlink.c:1330 [inline] netlink_unicast+0x7b6/0x980 net/netlink/af_netlink.c:1356 netlink_sendmsg+0xa30/0xd60 net/netlink/af_netlink.c:1924 sock_sendmsg_nosec net/socket.c:704 [inline] __sock_sendmsg net/socket.c:716 [inline] ____sys_sendmsg+0x59e/0x8f0 net/socket.c:2431 ___sys_sendmsg+0x252/0x2e0 net/socket.c:2485 __sys_sendmsg net/socket.c:2514 [inline] __do_sys_sendmsg net/socket.c:2523 [inline] __se_sys_sendmsg+0x19a/0x260 net/socket.c:2521 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f0d11d54d39 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0d107d5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f0d11ee2fa0 RCX: 00007f0d11d54d39 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 RBP: 00007f0d11dd5766 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f0d11ee2fa0 R15: 00007fffa6c448e8