------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: CPU: 0 PID: 5695 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
Modules linked in:
CPU: 0 UID: 0 PID: 5695 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:__rate_control_send_low+0x5df/0x820
Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 c6 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
RSP: 0018:ffffc90002e1e2b8 EFLAGS: 00010246
RAX: 171fbbfed63c5500 RBX: 000000000000000c RCX: ffff888106fb0000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
RBP: dffffc0000000000 R08: ffff88804b024293 R09: 1ffff11009604852
R10: dffffc0000000000 R11: ffffed1009604853 R12: ffff8880301a84a8
R13: 0000000000000000 R14: ffff888121268e40 R15: ffff88812126b0d8
FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c29766b CR3: 000000000df38000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 rate_control_send_low+0x194/0x7a0
 rate_control_get_rate+0x20b/0x5d0
 ieee80211_tx_h_rate_ctrl+0xb32/0x1780
 invoke_tx_handlers_late+0xb6/0x1820
 ieee80211_tx_dequeue+0x3068/0x4340
 ieee80211_handle_wake_tx_queue+0x125/0x2a0
 ieee80211_queue_skb+0x19e8/0x2180
 ieee80211_tx+0x297/0x420
 __ieee80211_subif_start_xmit+0xc49/0x1500
 ieee80211_subif_start_xmit+0xe0/0x510
 dev_hard_start_xmit+0x2d7/0x830
 __dev_queue_xmit+0x1adf/0x3a70
 ip6_finish_output2+0x11fe/0x16a0
 ip6_finish_output+0x234/0x7d0
 NF_HOOK+0x9e/0x380
 mld_sendpack+0x800/0xd80
 ipv6_mc_dad_complete+0x88/0x4b0
 addrconf_dad_completed+0x6d5/0xd60
 addrconf_dad_work+0xc36/0x14b0
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x3fc/0x770
 ret_from_fork_asm+0x1a/0x30
 </TASK>
