bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): (slave wlan1): Releasing backup interface ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7361 at net/mac80211/tx.c:6301 ieee80211_tx_skb_tid+0x378/0x420 net/mac80211/tx.c:6301 Modules linked in: CPU: 0 UID: 0 PID: 7361 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: netns cleanup_net pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ieee80211_tx_skb_tid+0x378/0x420 net/mac80211/tx.c:6301 lr : ieee80211_tx_skb_tid+0x378/0x420 net/mac80211/tx.c:6301 sp : ffff8000a1136b70 x29: ffff8000a1136b70 x28: 0000000000000000 x27: 1fffe0001a35e269 x26: ffff0000f3777af2 x25: dfff800000000000 x24: 0000000000000001 x23: 0000000000000000 x22: ffff0000f39fcdc0 x21: 0000000000000007 x20: 00000000ffffffff x19: ffff0000d1af1280 x18: 00000000ffffffff x17: ffff800093335000 x16: ffff80008052b3c8 x15: 0000000000000001 x14: 0000000000000001 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000099cc8b10 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c4b9bd80 x7 : ffff80008a7358dc x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: ieee80211_tx_skb_tid+0x378/0x420 net/mac80211/tx.c:6301 (P) ieee80211_tx_skb net/mac80211/ieee80211_i.h:2417 [inline] mesh_plink_frame_tx+0x5e8/0xaa0 net/mac80211/mesh_plink.c:354 mesh_plink_deactivate+0x12c/0x280 net/mac80211/mesh_plink.c:410 mesh_sta_cleanup+0x40/0x7c net/mac80211/mesh.c:171 __cleanup_single_sta net/mac80211/sta_info.c:167 [inline] cleanup_single_sta+0x3bc/0x630 net/mac80211/sta_info.c:192 __sta_info_destroy_part2+0x310/0x3f4 net/mac80211/sta_info.c:1554 __sta_info_flush+0x510/0x62c net/mac80211/sta_info.c:1683 sta_info_flush net/mac80211/sta_info.h:970 [inline] ieee80211_do_stop+0x31c/0x1a80 net/mac80211/iface.c:526 ieee80211_stop+0x1ac/0x220 net/mac80211/iface.c:827 __dev_close_many+0x3d8/0x704 net/core/dev.c:1755 netif_close_many+0x1e8/0x448 net/core/dev.c:1780 netif_close+0x148/0x1f8 net/core/dev.c:1797 dev_close+0xf8/0x1e4 net/core/dev_api.c:220 __bond_release_one+0x974/0xdc4 drivers/net/bonding/bond_main.c:2563 bond_uninit+0x264/0x3c4 drivers/net/bonding/bond_main.c:6045 unregister_netdevice_many_notify+0x195c/0x20e8 net/core/dev.c:12305 unregister_netdevice_many+0x28/0x38 net/core/dev.c:12347 ops_exit_rtnl_list net/core/net_namespace.c:187 [inline] ops_undo_list+0x32c/0x7ec net/core/net_namespace.c:248 cleanup_net+0x3f8/0x6dc net/core/net_namespace.c:695 process_one_work+0x7e8/0x155c kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3427 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 114899 hardirqs last enabled at (114898): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (114898): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (114899): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (114892): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (114892): [] ieee80211_txq_purge+0x270/0x34c net/mac80211/tx.c:1555 softirqs last disabled at (114894): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (114894): [] mesh_plink_deactivate+0x6c/0x280 net/mac80211/mesh_plink.c:405 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7361 at net/mac80211/iface.c:527 ieee80211_do_stop+0x97c/0x1a80 net/mac80211/iface.c:527 Modules linked in: CPU: 0 UID: 0 PID: 7361 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: netns cleanup_net pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ieee80211_do_stop+0x97c/0x1a80 net/mac80211/iface.c:527 lr : ieee80211_do_stop+0x97c/0x1a80 net/mac80211/iface.c:527 sp : ffff8000a1136f20 x29: ffff8000a11370f0 x28: ffff8000a1136fc0 x27: ffff0000f39fcdc0 x26: dfff800000000000 x25: 1fffe0001e73fd58 x24: ffff0000d1ea0e80 x23: ffff0000f39feac0 x22: 0000000000000007 x21: 0000000000000001 x20: ffff8000a1136fe0 x19: ffff0000f39fd7f0 x18: 1fffe000337d4a90 x17: ffff80008f5ae000 x16: ffff800082defd48 x15: 0000000000000001 x14: 1ffff00011fd7116 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000049f0f500 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c4b9bd80 x7 : ffff80008a65b990 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: ieee80211_do_stop+0x97c/0x1a80 net/mac80211/iface.c:527 (P) ieee80211_stop+0x1ac/0x220 net/mac80211/iface.c:827 __dev_close_many+0x3d8/0x704 net/core/dev.c:1755 netif_close_many+0x1e8/0x448 net/core/dev.c:1780 netif_close+0x148/0x1f8 net/core/dev.c:1797 dev_close+0xf8/0x1e4 net/core/dev_api.c:220 __bond_release_one+0x974/0xdc4 drivers/net/bonding/bond_main.c:2563 bond_uninit+0x264/0x3c4 drivers/net/bonding/bond_main.c:6045 unregister_netdevice_many_notify+0x195c/0x20e8 net/core/dev.c:12305 unregister_netdevice_many+0x28/0x38 net/core/dev.c:12347 ops_exit_rtnl_list net/core/net_namespace.c:187 [inline] ops_undo_list+0x32c/0x7ec net/core/net_namespace.c:248 cleanup_net+0x3f8/0x6dc net/core/net_namespace.c:695 process_one_work+0x7e8/0x155c kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3427 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 irq event stamp: 115074 hardirqs last enabled at (115073): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (115074): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (115028): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (115028): [] mesh_path_flush_by_nexthop+0x104/0x120 net/mac80211/mesh_pathtbl.c:845 softirqs last disabled at (115026): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (115026): [] mesh_path_flush_by_nexthop+0x54/0x120 net/mac80211/mesh_pathtbl.c:840 ---[ end trace 0000000000000000 ]--- bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50