------------[ cut here ]------------
!chanctx_conf
WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x46a/0x550 net/mac80211/tx.c:6509, CPU#3: syz.3.7832/24307
Modules linked in:
CPU: 3 UID: 0 PID: 24307 Comm: syz.3.7832 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:ieee80211_tx_skb_tid+0x46a/0x550 net/mac80211/tx.c:6509
Code: fc ff ff e8 38 b2 2f f7 e9 8f fc ff ff 4c 89 e7 e8 5b b2 2f f7 e9 4e fd ff ff e8 21 b2 2f f7 e9 0b fe ff ff e8 a7 71 bd f6 90 <0f> 0b 90 e8 9e 70 80 00 31 ff 89 c3 89 c6 e8 03 6c bd f6 85 db 75
RSP: 0000:ffffc90003b1e978 EFLAGS: 00010246
RAX: 0000000000080000 RBX: ffff88805d50cec0 RCX: ffffc9000c421000
RDX: 0000000000080000 RSI: ffffffff8b4df029 RDI: ffff888070068000
RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
R13: ffff888024c12c80 R14: 0000000000000007 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff888096c60000(0063) knlGS:00000000f54bdb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f71f1fac CR3: 0000000056ee2000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 ieee80211_tx_skb net/mac80211/ieee80211_i.h:2497 [inline]
 mesh_plink_frame_tx.isra.0+0xdf1/0x10d0 net/mac80211/mesh_plink.c:352
 mesh_plink_deactivate+0x271/0x340 net/mac80211/mesh_plink.c:408
 mesh_sta_cleanup+0x35/0x80 net/mac80211/mesh.c:173
 __cleanup_single_sta+0x5c0/0x730 net/mac80211/sta_info.c:167
 cleanup_single_sta net/mac80211/sta_info.c:192 [inline]
 __sta_info_destroy_part2+0x36a/0x500 net/mac80211/sta_info.c:1615
 __sta_info_flush+0x4f6/0x720 net/mac80211/sta_info.c:1744
 sta_info_flush net/mac80211/sta_info.h:984 [inline]
 ieee80211_do_stop+0x281/0x2bb0 net/mac80211/iface.c:535
 ieee80211_stop+0x165/0x2f0 net/mac80211/iface.c:868
 __dev_close_many+0x312/0x710 net/core/dev.c:1798
 __dev_close net/core/dev.c:1811 [inline]
 __dev_change_flags+0x307/0x850 net/core/dev.c:9810
 netif_change_flags+0x8d/0x160 net/core/dev.c:9877
 do_setlink.isra.0+0x1ac4/0x3e60 net/core/rtnetlink.c:3266
 rtnl_group_changelink net/core/rtnetlink.c:3919 [inline]
 __rtnl_newlink net/core/rtnetlink.c:4085 [inline]
 rtnl_newlink+0x1dc4/0x2620 net/core/rtnetlink.c:4215
 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:7132
 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2556
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1900
 sock_sendmsg_nosec net/socket.c:800 [inline]
 __sock_sendmsg net/socket.c:815 [inline]
 ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2713
 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2767
 __sys_sendmsg+0x160/0x210 net/socket.c:2799
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf70cefec
Code: Unable to access opcode bytes at 0xf70cefc2.
RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>