------------[ cut here ]------------
Invalid VIF (ffff888066ace9d0) magic 0x0, aa:aa:aa:aa:aa:17, 1/0
WARNING: CPU: 3 PID: 58 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline]
WARNING: CPU: 3 PID: 58 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 mac80211_hwsim_tx+0x1c48/0x24d0 drivers/net/wireless/virtual/mac80211_hwsim.c:2026
Modules linked in:
CPU: 3 UID: 0 PID: 58 Comm: kworker/3:1 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: mld mld_ifc_work
RIP: 0010:hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline]
RIP: 0010:mac80211_hwsim_tx+0x1c48/0x24d0 drivers/net/wireless/virtual/mac80211_hwsim.c:2026
Code: c0 74 08 3c 03 0f 8e 5a 08 00 00 45 8b 04 24 44 89 ea 4c 89 e6 48 c7 c7 00 e7 26 8c 49 8d 8c 24 5a 04 00 00 e8 49 ba 9a fa 90 <0f> 0b 90 90 e9 36 e6 ff ff e8 da e1 d9 fa e8 85 f8 be fa 31 ff 89
RSP: 0018:ffffc90000796f70 EFLAGS: 00010282
RAX: 0000000000000000 RBX: ffff88801f7d2040 RCX: ffffffff8179c889
RDX: ffff88801e9ca440 RSI: ffffffff8179c896 RDI: 0000000000000001
RBP: ffffc90000797088 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000009 R12: ffff888066ace9d0
R13: 0000000000000000 R14: ffff88806906b0a0 R15: ffff88801f7d2000
FS:  0000000000000000(0000) GS:ffff88802b700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000f7f555c0 CR3: 0000000064d22000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 drv_tx net/mac80211/driver-ops.h:37 [inline]
 wake_tx_push_queue net/mac80211/util.c:298 [inline]
 ieee80211_handle_wake_tx_queue+0x18a/0x260 net/mac80211/util.c:315
 drv_wake_tx_queue net/mac80211/driver-ops.h:1366 [inline]
 schedule_and_wake_txq net/mac80211/driver-ops.h:1373 [inline]
 ieee80211_queue_skb+0x12b5/0x2010 net/mac80211/tx.c:1664
 ieee80211_tx+0x2e6/0x420 net/mac80211/tx.c:1967
 ieee80211_xmit+0x30e/0x3e0 net/mac80211/tx.c:2063
 __ieee80211_subif_start_xmit+0xa62/0x1410 net/mac80211/tx.c:4339
 ieee80211_subif_start_xmit+0x118/0x16c0 net/mac80211/tx.c:4533
 __netdev_start_xmit include/linux/netdevice.h:5144 [inline]
 netdev_start_xmit include/linux/netdevice.h:5153 [inline]
 xmit_one net/core/dev.c:3735 [inline]
 dev_hard_start_xmit+0x9a/0x7b0 net/core/dev.c:3751
 __dev_queue_xmit+0x7f0/0x43e0 net/core/dev.c:4584
 dev_queue_xmit include/linux/netdevice.h:3305 [inline]
 neigh_resolve_output net/core/neighbour.c:1514 [inline]
 neigh_resolve_output+0x53a/0x940 net/core/neighbour.c:1494
 neigh_output include/net/neighbour.h:539 [inline]
 ip6_finish_output2+0xb20/0x2090 net/ipv6/ip6_output.c:141
 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline]
 ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226
 NF_HOOK_COND include/linux/netfilter.h:303 [inline]
 ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247
 dst_output include/net/dst.h:459 [inline]
 NF_HOOK include/linux/netfilter.h:314 [inline]
 NF_HOOK include/linux/netfilter.h:308 [inline]
 mld_sendpack+0x9f0/0x11d0 net/ipv6/mcast.c:1862
 mld_send_cr net/ipv6/mcast.c:2163 [inline]
 mld_ifc_work+0x740/0xca0 net/ipv6/mcast.c:2697
 process_one_work+0x958/0x1b30 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>