------------[ cut here ]------------ Invalid VIF (00000000baa1b563) magic 0x0, aa:aa:aa:aa:aa:17, 1/0 WARNING: CPU: 0 PID: 10 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline] WARNING: CPU: 0 PID: 10 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 mac80211_hwsim_tx+0x1794/0x2158 drivers/net/wireless/virtual/mac80211_hwsim.c:2026 Modules linked in: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: mld mld_ifc_work pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline] pc : mac80211_hwsim_tx+0x1794/0x2158 drivers/net/wireless/virtual/mac80211_hwsim.c:2026 lr : hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline] lr : mac80211_hwsim_tx+0x1794/0x2158 drivers/net/wireless/virtual/mac80211_hwsim.c:2026 sp : ffff800097a668e0 x29: ffff800097a66960 x28: 0000000000000000 x27: ffff0000ce84a9d0 x26: 0000000000000000 x25: ffff0000f0fd30a0 x24: ffff0000d0785e30 x23: 0000000000000001 x22: 1fffe00018c32458 x21: ffff0000c61922c0 x20: dfff800000000000 x19: ffff0000ce84ae2a x18: 0000000000000008 x17: 0000000000000000 x16: ffff80008327a354 x15: 0000000000000001 x14: 1fffe000366fc6ea x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000204 x10: 0000000000ff0100 x9 : 2fe74ceb23302600 x8 : 2fe74ceb23302600 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800097a66018 x4 : ffff80008fa90460 x3 : ffff80008073e504 x2 : 0000000000000001 x1 : 0000000000000202 x0 : 0000000000000000 Call trace: hwsim_check_magic drivers/net/wireless/virtual/mac80211_hwsim.c:235 [inline] (P) mac80211_hwsim_tx+0x1794/0x2158 drivers/net/wireless/virtual/mac80211_hwsim.c:2026 (P) drv_tx net/mac80211/driver-ops.h:37 [inline] wake_tx_push_queue net/mac80211/util.c:298 [inline] ieee80211_handle_wake_tx_queue+0x15c/0x274 net/mac80211/util.c:315 drv_wake_tx_queue net/mac80211/driver-ops.h:1362 [inline] schedule_and_wake_txq net/mac80211/driver-ops.h:1369 [inline] ieee80211_queue_skb+0x18e4/0x2230 net/mac80211/tx.c:1664 ieee80211_tx+0x260/0x400 net/mac80211/tx.c:1967 ieee80211_xmit+0x278/0x354 net/mac80211/tx.c:2063 __ieee80211_subif_start_xmit+0xabc/0x1234 net/mac80211/tx.c:4339 ieee80211_subif_start_xmit+0xe0/0x43c net/mac80211/tx.c:4533 __netdev_start_xmit include/linux/netdevice.h:5002 [inline] netdev_start_xmit include/linux/netdevice.h:5011 [inline] xmit_one net/core/dev.c:3620 [inline] dev_hard_start_xmit+0x274/0x904 net/core/dev.c:3636 __dev_queue_xmit+0x1680/0x35b4 net/core/dev.c:4466 dev_queue_xmit include/linux/netdevice.h:3168 [inline] neigh_resolve_output+0x558/0x65c net/core/neighbour.c:1514 neigh_output include/net/neighbour.h:539 [inline] ip6_finish_output2+0x16bc/0x214c net/ipv6/ip6_output.c:141 ip6_finish_output+0x428/0x7c4 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x274/0x598 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:450 [inline] NF_HOOK+0x160/0x4f0 include/linux/netfilter.h:314 mld_sendpack+0x7b8/0x10f8 net/ipv6/mcast.c:1819 mld_send_cr net/ipv6/mcast.c:2120 [inline] mld_ifc_work+0x840/0xd0c net/ipv6/mcast.c:2651 process_one_work+0x7a8/0x15cc kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3317 [inline] worker_thread+0x97c/0xeec kernel/workqueue.c:3398 kthread+0x288/0x310 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 188563 hardirqs last enabled at (188562): [] __up_console_sem kernel/printk/printk.c:344 [inline] hardirqs last enabled at (188562): [] __console_unlock+0x70/0xc4 kernel/printk/printk.c:2869 hardirqs last disabled at (188563): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (188514): [] neigh_hh_init net/core/neighbour.c:1489 [inline] softirqs last enabled at (188514): [] neigh_resolve_output+0x268/0x65c net/core/neighbour.c:1504 softirqs last disabled at (188518): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---