------------[ cut here ]------------
no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x524/0x800, CPU#1: kworker/u8:1/13
Modules linked in:
CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:__rate_control_send_low+0x5bb/0x800
Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 10 44 8b 44 24 24 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 28 e9 81 fe ff ff 44 89 f9 80 e1 07 80
RSP: 0018:ffffc90000126638 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff904186e0
RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000004 R11: 0000000000000000 R12: ffff88816cd52028
R13: 0000000000000000 R14: ffffffff904186e0 R15: ffff888118933258
FS:  0000000000000000(0000) GS:ffff8882a92a5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c33cce5 CR3: 00000001bc436000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 rate_control_send_low+0x1a7/0x7b0
 rate_control_get_rate+0x20b/0x5d0
 ieee80211_tx_h_rate_ctrl+0xafa/0x1760
 invoke_tx_handlers_late+0xb5/0x1830
 ieee80211_tx_dequeue+0x3fb6/0x55a0
 ieee80211_hwsim_wake_tx_queue+0xbb/0x150
 ieee80211_queue_skb+0x1923/0x22c0
 ieee80211_tx+0x2c2/0x4b0
 __ieee80211_subif_start_xmit+0xf06/0x1690
 ieee80211_subif_start_xmit+0xf1/0x570
 dev_hard_start_xmit+0x2cd/0x830
 __dev_queue_xmit+0x1435/0x37f0
 ip6_output+0x337/0x540
 ndisc_send_skb+0xcb2/0x1650
 addrconf_dad_completed+0x911/0xe60
 addrconf_dad_work+0xcf8/0x15c0
 process_scheduled_works+0xa8e/0x14e0
 worker_thread+0xa47/0xfb0
 kthread+0x389/0x470
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
