------------[ cut here ]------------ Invalid VIF (ffff888043e629d0) magic 0x0, 08:02:11:00:00:01, 1/0 WARNING: CPU: 3 PID: 17824 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline] WARNING: CPU: 3 PID: 17824 at drivers/net/wireless/virtual/mac80211_hwsim.c:235 mac80211_hwsim_tx+0x1cfa/0x25b0 drivers/net/wireless/virtual/mac80211_hwsim.c:2026 Modules linked in: CPU: 3 UID: 0 PID: 17824 Comm: kworker/3:5 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: mld mld_ifc_work RIP: 0010:hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline] RIP: 0010:mac80211_hwsim_tx+0x1cfa/0x25b0 drivers/net/wireless/virtual/mac80211_hwsim.c:2026 Code: c0 74 08 3c 03 0f 8e 87 06 00 00 45 8b 04 24 44 89 ea 4c 89 e6 48 c7 c7 00 c9 27 8c 49 8d 8c 24 5a 04 00 00 e8 47 ea 91 fa 90 <0f> 0b 90 90 e9 84 e5 ff ff e8 98 b9 d1 fa e8 63 6f b6 fa 31 ff 89 RSP: 0018:ffffc90004156f60 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88804989f300 RCX: ffffffff817a1229 RDX: ffff888053144880 RSI: ffffffff817a1236 RDI: 0000000000000001 RBP: ffffc90004157078 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000009 R12: ffff888043e629d0 R13: 0000000000000000 R14: ffff888040e0b0a0 R15: ffff88804989f2c0 FS: 0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000005fbba000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 00000000ffff000b DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: drv_tx net/mac80211/driver-ops.h:37 [inline] wake_tx_push_queue net/mac80211/util.c:298 [inline] ieee80211_handle_wake_tx_queue+0x18a/0x260 net/mac80211/util.c:315 drv_wake_tx_queue net/mac80211/driver-ops.h:1366 [inline] schedule_and_wake_txq net/mac80211/driver-ops.h:1373 [inline] ieee80211_queue_skb+0x12b5/0x2010 net/mac80211/tx.c:1664 ieee80211_tx+0x2e6/0x420 net/mac80211/tx.c:1967 ieee80211_xmit+0x30e/0x3e0 net/mac80211/tx.c:2063 __ieee80211_subif_start_xmit+0xa61/0x1410 net/mac80211/tx.c:4339 ieee80211_subif_start_xmit+0x118/0x16c0 net/mac80211/tx.c:4533 __netdev_start_xmit include/linux/netdevice.h:5151 [inline] netdev_start_xmit include/linux/netdevice.h:5160 [inline] xmit_one net/core/dev.c:3806 [inline] dev_hard_start_xmit+0x9a/0x7b0 net/core/dev.c:3822 __dev_queue_xmit+0x7f0/0x43e0 net/core/dev.c:4655 dev_queue_xmit include/linux/netdevice.h:3313 [inline] neigh_resolve_output net/core/neighbour.c:1514 [inline] neigh_resolve_output+0x53a/0x940 net/core/neighbour.c:1494 neigh_output include/net/neighbour.h:539 [inline] ip6_finish_output2+0xb20/0x20a0 net/ipv6/ip6_output.c:141 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline] ip6_finish_output+0x3f9/0x1360 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x1f8/0x540 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:459 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] mld_sendpack+0x9f0/0x11d0 net/ipv6/mcast.c:1868 mld_send_cr net/ipv6/mcast.c:2169 [inline] mld_ifc_work+0x740/0xca0 net/ipv6/mcast.c:2702 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3317 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244