------------[ cut here ]------------
TX w/o channel - queue = 0
WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2227 at mac80211_hwsim_tx+0x1c33/0x2580, CPU#0: ksoftirqd/0/15
Modules linked in:
CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:mac80211_hwsim_tx+0x1c53/0x2580
Code: 8d 46 2c 48 8d 3d fd 03 4d 09 48 89 c1 48 c1 e9 03 42 0f b6 0c 21 84 c9 0f 85 f8 07 00 00 48 89 f3 8b 76 2c c1 ee 11 83 e6 0f <67> 48 0f b9 3a 48 8b 7c 24 20 48 89 de e9 c4 fb ff ff e8 66 2e 8d
RSP: 0018:ffffc900001477c0 EFLAGS: 00010246
RAX: ffff8881133a7cac RBX: ffff8881133a7c80 RCX: 0000000000000000
RDX: 8000000000000100 RSI: 0000000000000000 RDI: ffffffff90879080
RBP: ffffc90000147950 R08: 0000000000000100 R09: 0000000000000000
R10: ffff8881133a7c80 R11: ffffffff873a7050 R12: dffffc0000000000
R13: 0000000000000000 R14: ffff8881133a7d58 R15: ffff88803ae73220
FS:  0000000000000000(0000) GS:ffff88818d6d9000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f461e12bff8 CR3: 000000002333e000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 ieee80211_tx_frags+0x3df/0x890
 __ieee80211_tx+0x267/0x580
 ieee80211_tx_pending+0x5bc/0xba0
 tasklet_action_common+0x2d7/0x490
 handle_softirqs+0x226/0x860
 run_ksoftirqd+0x36/0x60
 smpboot_thread_fn+0x565/0xa70
 kthread+0x38b/0x480
 ret_from_fork+0x514/0xb70
 ret_from_fork_asm+0x1a/0x30
 </TASK>
