------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: CPU: 1 PID: 12 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
Modules linked in:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:__rate_control_send_low+0x5df/0x820
Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 80 af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 15 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
RSP: 0018:ffffc900000f62f8 EFLAGS: 00010246
RAX: f6dbeffd7dcefe00 RBX: 000000000000000c RCX: ffff88801c6bd640
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88810dd03528
R13: 0000000000000000 R14: ffff88810a5b8e40 R15: ffff88810a5bb0d8
FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faa73b92d58 CR3: 000000003f0c4000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 rate_control_send_low+0x194/0x7a0
 rate_control_get_rate+0x20b/0x5d0
 ieee80211_tx_h_rate_ctrl+0xb32/0x1780
 invoke_tx_handlers_late+0xb6/0x1820
 ieee80211_tx_dequeue+0x3068/0x4340
 ieee80211_handle_wake_tx_queue+0x125/0x2a0
 ieee80211_queue_skb+0x19e8/0x2180
 ieee80211_tx+0x297/0x420
 __ieee80211_subif_start_xmit+0xccf/0x1610
 ieee80211_subif_start_xmit+0xe0/0x510
 dev_hard_start_xmit+0x2d7/0x830
 __dev_queue_xmit+0x1b8d/0x3b50
 ip6_finish_output2+0x11fe/0x16a0
 NF_HOOK+0x9e/0x380
 mld_sendpack+0x800/0xd80
 ipv6_mc_dad_complete+0x88/0x410
 addrconf_dad_completed+0x6d5/0xd60
 addrconf_dad_work+0xc36/0x14b0
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
