------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: CPU: 0 PID: 13 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
Modules linked in:
CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:__rate_control_send_low+0x5df/0x820
Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 a2 77 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
RSP: 0000:ffffc900001062f8 EFLAGS: 00010246
RAX: 993f600d958d7600 RBX: 000000000000000c RCX: ffff88801c6c0000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff888029e8e1a8
R13: 0000000000000000 R14: ffff8881180c8e40 R15: ffff8881180cb0d8
FS:  0000000000000000(0000) GS:ffff8880b8623000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9318762c39 CR3: 000000000df38000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 rate_control_send_low+0x194/0x7a0
 rate_control_get_rate+0x20b/0x5d0
 ieee80211_tx_h_rate_ctrl+0xb32/0x1780
 invoke_tx_handlers_late+0xb6/0x1820
 ieee80211_tx_dequeue+0x3068/0x4340
 ieee80211_handle_wake_tx_queue+0x125/0x2a0
 ieee80211_queue_skb+0x19e8/0x2180
 ieee80211_tx+0x297/0x420
 __ieee80211_subif_start_xmit+0xc49/0x1500
 ieee80211_subif_start_xmit+0xe0/0x510
 dev_hard_start_xmit+0x2d7/0x830
 __dev_queue_xmit+0x1adf/0x3a70
 ip6_finish_output2+0x11fe/0x16a0
 NF_HOOK+0x9e/0x380
 mld_sendpack+0x800/0xd80
 ipv6_mc_dad_complete+0x88/0x4b0
 addrconf_dad_completed+0x6d5/0xd60
 addrconf_dad_work+0xc36/0x14b0
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
