--- a/sys/dev/netif/ral/rt2661.c	2026-09-17 06:16:59.148778118 +0000
+++ b/sys/dev/netif/ral/rt2661.c	2026-09-17 06:16:59.164777914 +0000
@@ -2843,6 +2843,8 @@ rt2661_scan_end(struct ieee80211com *ic)
 	struct ieee80211vap *vap = TAILQ_FIRST(&ic->ic_vaps);
 
 	rt2661_enable_tsf_sync(sc);
+	if (vap == NULL)
+		return;
 	/* XXX keep local copy */
 	rt2661_set_bssid(sc, vap->iv_bss->ni_bssid);
 }