------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399, CPU#0: syz.0.3007/15622 Modules linked in: CPU: 0 UID: 0 PID: 15622 Comm: syz.0.3007 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399 lr : __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399 sp : ffff80008ec37650 x29: ffff80008ec376b0 x28: dfff800000000000 x27: ffff0000f4023270 x26: 000000000000000c x25: 00000000ffffffff x24: 0000000000000000 x23: dfff800000000000 x22: ffff0000f4020f60 x21: ffff0000f5a087a8 x20: dfff800000000000 x19: 0000000000000000 x18: 00000000ffffffff x17: ffff800125154000 x16: ffff80008ec30000 x15: ffff80008630b914 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000000103 x9 : b812377ff3863800 x8 : b812377ff3863800 x7 : ffff80008048e314 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f9194 x2 : 0000000100000101 x1 : ffff00016750bb00 x0 : 0000000000000000 Call trace: __rate_control_send_low+0x6c8/0x74c net/mac80211/rate.c:399 (P) rate_control_send_low+0x184/0x68c net/mac80211/rate.c:427 rate_control_get_rate+0x15c/0x348 net/mac80211/rate.c:935 ieee80211_beacon_get_finish+0x33c/0x5a4 net/mac80211/tx.c:5556 ieee80211_beacon_get_ap+0x1038/0x1604 net/mac80211/tx.c:-1 __ieee80211_beacon_get+0xe68/0x12c4 net/mac80211/tx.c:5827 ieee80211_beacon_get_tim+0xc0/0x254 net/mac80211/tx.c:5969 ieee80211_beacon_get include/net/mac80211.h:5902 [inline] mac80211_hwsim_beacon_tx+0x304/0x6c0 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2500 __iterate_interfaces+0x234/0x4e0 net/mac80211/util.c:775 ieee80211_iterate_active_interfaces_atomic+0xf4/0x1ac net/mac80211/util.c:811 mac80211_hwsim_beacon+0xb4/0x1a4 drivers/net/wireless/virtual/mac80211_hwsim_main.c:2536 __run_hrtimer kernel/time/hrtimer.c:2067 [inline] __hrtimer_run_queues+0x314/0xbe0 kernel/time/hrtimer.c:2124 hrtimer_run_softirq+0x1b4/0x2a8 kernel/time/hrtimer.c:2141 handle_softirqs+0x2ec/0xd98 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:83 invoke_softirq kernel/softirq.c:526 [inline] __irq_exit_rcu+0x1c0/0x458 kernel/softirq.c:767 irq_exit_rcu+0x14/0x84 kernel/softirq.c:784 __el1_irq arch/arm64/kernel/entry-common.c:531 [inline] el1_interrupt+0x40/0x60 arch/arm64/kernel/entry-common.c:543 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:548 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:586 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P) _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P) spin_unlock_irqrestore include/linux/spinlock.h:425 [inline] __skb_try_recv_datagram+0x148/0x404 net/core/datagram.c:267 __unix_dgram_recvmsg+0x240/0x85c net/unix/af_unix.c:2590 unix_dgram_recvmsg+0xcc/0xe4 net/unix/af_unix.c:2689 sock_recvmsg_nosec+0x94/0x130 net/socket.c:1151 ____sys_recvmsg+0x4fc/0x608 net/socket.c:2931 ___sys_recvmsg+0x16c/0x1f4 net/socket.c:2975 do_recvmmsg+0x288/0x7d4 net/socket.c:3070 __sys_recvmmsg+0x1e0/0x270 net/socket.c:3144 __do_sys_recvmmsg net/socket.c:3167 [inline] __se_sys_recvmmsg net/socket.c:3160 [inline] __arm64_sys_recvmmsg+0xe0/0x108 net/socket.c:3160 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 39373 hardirqs last enabled at (39372): [] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline] hardirqs last enabled at (39372): [] __arm64_exit_to_kernel_mode+0x64/0x78 arch/arm64/kernel/entry-common.c:60 hardirqs last disabled at (39373): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (38992): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (38992): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:673 softirqs last disabled at (39349): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]---