------------[ cut here ]------------ no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800 net/mac80211/rate.c:401, CPU#0: syz-executor/18556 Modules linked in: CPU: 0 UID: 0 PID: 18556 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:__rate_control_send_low+0x5bb/0x800 net/mac80211/rate.c:401 Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 RSP: 0018:ffffc900000078d8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9041a350 RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000004 R11: 0000000000000100 R12: ffff8880ad727b68 R13: 0000000000000000 R14: ffffffff9041a350 R15: ffff8880741c31f8 FS: 0000555557f3a500(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555557f55a38 CR3: 0000000078aac000 CR4: 00000000003526f0 Call Trace: rate_control_send_low+0x1a7/0x7b0 net/mac80211/rate.c:429 rate_control_get_rate+0x20b/0x5d0 net/mac80211/rate.c:943 ieee80211_beacon_get_finish+0x3af/0x6f0 net/mac80211/tx.c:5436 __ieee80211_beacon_get+0xd3d/0x1880 net/mac80211/tx.c:-1 ieee80211_beacon_get_tim+0xbd/0x2c0 net/mac80211/tx.c:5849 ieee80211_beacon_get include/net/mac80211.h:5848 [inline] mac80211_hwsim_beacon_tx+0x3c5/0x870 drivers/net/wireless/virtual/mac80211_hwsim.c:2497 __iterate_interfaces+0x2ab/0x590 net/mac80211/util.c:772 ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 net/mac80211/util.c:808 mac80211_hwsim_beacon+0xbb/0x180 drivers/net/wireless/virtual/mac80211_hwsim.c:2531 __run_hrtimer kernel/time/hrtimer.c:1930 [inline] __hrtimer_run_queues+0x3c0/0xa20 kernel/time/hrtimer.c:1994 hrtimer_run_softirq+0x17a/0x240 kernel/time/hrtimer.c:2011 handle_softirqs+0x22a/0x840 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1061 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:process_measurement+0x190/0x1c80 security/integrity/ima/ima_main.c:270 Code: 00 00 00 00 00 00 00 c6 43 34 04 c7 84 24 40 02 00 00 0a 00 00 00 c6 43 36 00 48 c7 84 24 50 02 00 00 00 00 00 00 c6 43 3a 00 <48> c7 84 24 70 02 00 00 00 00 00 00 c6 43 3e 04 c7 84 24 90 02 00 RSP: 0018:ffffc9000523f560 EFLAGS: 00000246 RAX: 0700000000000000 RBX: fffff52000a47ec0 RCX: ffff888031653e00 RDX: 0000000000000000 RSI: ffff88802f96c900 RDI: ffff888067695180 RBP: ffffc9000523f858 R08: 0000000000000000 R09: 0000000000000006 R10: ffffc9000523f8c0 R11: fffff52000a47f1a R12: ffffc9000523f8c0 R13: ffff88802f96c900 R14: ffff8880676951e0 R15: dffffc0000000000 ima_file_check+0xe1/0x130 security/integrity/ima/ima_main.c:685 security_file_post_open+0xb3/0x260 security/security.c:2755 do_open fs/namei.c:4701 [inline] path_openat+0x2e4d/0x3860 fs/namei.c:4858 do_file_open+0x23e/0x4a0 fs/namei.c:4887 do_sys_openat2+0x113/0x200 fs/open.c:1364 do_sys_open fs/open.c:1370 [inline] __do_sys_openat fs/open.c:1386 [inline] __se_sys_openat fs/open.c:1381 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1381 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdcdf35d68e Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007ffdc62320f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 0000555557f3a500 RCX: 00007fdcdf35d68e RDX: 0000000000000002 RSI: 00007ffdc6232240 RDI: ffffffffffffff9c RBP: 00007ffdc62321ec R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001ef R13: 00000000000927c0 R14: 00000000000d595a R15: 00007ffdc6232240 ---------------- Code disassembly (best guess): 0: ff 4c 8b 7c decl 0x7c(%rbx,%rcx,4) 4: 24 08 and $0x8,%al 6: 48 8b 44 24 38 mov 0x38(%rsp),%rax b: 0f b6 04 28 movzbl (%rax,%rbp,1),%eax f: 84 c0 test %al,%al 11: 0f 85 d3 01 00 00 jne 0x1ea 17: 41 8b 0f mov (%r15),%ecx 1a: 4c 89 f7 mov %r14,%rdi 1d: 48 8b 74 24 18 mov 0x18(%rsp),%rsi 22: 44 8b 44 24 2c mov 0x2c(%rsp),%r8d 27: 45 89 e9 mov %r13d,%r9d * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 4c 8b 74 24 30 mov 0x30(%rsp),%r14 34: e9 81 fe ff ff jmp 0xfffffeba 39: 44 89 f9 mov %r15d,%ecx 3c: 80 e1 07 and $0x7,%cl 3f: 80 .byte 0x80