------------[ cut here ]------------
Invalid VIF (ffff88804c7a29d0) magic 0x0, 08:02:11:00:00:01, 2/1
WARNING: CPU: 1 PID: 1031 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline]
WARNING: CPU: 1 PID: 1031 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 mac80211_hwsim_tx+0x1c48/0x24d0 drivers/net/wireless/virtual/mac80211_hwsim.c:2026
Modules linked in:
CPU: 1 UID: 0 PID: 1031 Comm: kworker/u32:5 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline]
RIP: 0010:mac80211_hwsim_tx+0x1c48/0x24d0 drivers/net/wireless/virtual/mac80211_hwsim.c:2026
Code: c0 74 08 3c 03 0f 8e 5a 08 00 00 45 8b 04 24 44 89 ea 4c 89 e6 48 c7 c7 00 cf 26 8c 49 8d 8c 24 5a 04 00 00 e8 69 4a 9b fa 90 <0f> 0b 90 90 e9 36 e6 ff ff e8 0a 62 da fa e8 65 86 bf fa 31 ff 89
RSP: 0000:ffffc90006866d50 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff88801faf91c0 RCX: ffffffff8179c4f9
RDX: ffff8880255fa440 RSI: ffffffff8179c506 RDI: 0000000000000001
RBP: ffffc90006866e68 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000009 R12: ffff88804c7a29d0
R13: 0000000000000000 R14: ffff888069c230a0 R15: ffff88801faf9180
FS:  0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000c327743 CR3: 000000006d0ba000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 drv_tx net/mac80211/driver-ops.h:37 [inline]
 wake_tx_push_queue net/mac80211/util.c:298 [inline]
 ieee80211_handle_wake_tx_queue+0x18a/0x260 net/mac80211/util.c:315
 drv_wake_tx_queue net/mac80211/driver-ops.h:1366 [inline]
 schedule_and_wake_txq net/mac80211/driver-ops.h:1373 [inline]
 ieee80211_queue_skb+0x12b5/0x2010 net/mac80211/tx.c:1664
 ieee80211_tx+0x2e6/0x420 net/mac80211/tx.c:1967
 ieee80211_xmit+0x30e/0x3e0 net/mac80211/tx.c:2063
 __ieee80211_subif_start_xmit+0xa62/0x1410 net/mac80211/tx.c:4339
 ieee80211_subif_start_xmit+0x118/0x16c0 net/mac80211/tx.c:4533
 __netdev_start_xmit include/linux/netdevice.h:5144 [inline]
 netdev_start_xmit include/linux/netdevice.h:5153 [inline]
 xmit_one net/core/dev.c:3735 [inline]
 dev_hard_start_xmit+0x9a/0x7b0 net/core/dev.c:3751
 __dev_queue_xmit+0x7f0/0x43e0 net/core/dev.c:4584
 dev_queue_xmit include/linux/netdevice.h:3305 [inline]
 neigh_resolve_output net/core/neighbour.c:1514 [inline]
 neigh_resolve_output+0x53a/0x940 net/core/neighbour.c:1494
 neigh_output include/net/neighbour.h:539 [inline]
 ip6_finish_output2+0xb20/0x2090 net/ipv6/ip6_output.c:141
 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline]
 ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226
 NF_HOOK_COND include/linux/netfilter.h:303 [inline]
 ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247
 dst_output include/net/dst.h:459 [inline]
 NF_HOOK include/linux/netfilter.h:314 [inline]
 ndisc_send_skb+0xa69/0x1c50 net/ipv6/ndisc.c:511
 ndisc_send_rs+0x129/0x670 net/ipv6/ndisc.c:721
 addrconf_dad_completed+0x4a1/0x1060 net/ipv6/addrconf.c:4356
 addrconf_dad_begin net/ipv6/addrconf.c:4118 [inline]
 addrconf_dad_work+0xcf6/0x14e0 net/ipv6/addrconf.c:4223
 process_one_work+0x958/0x1b30 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>