------------[ cut here ]------------
Have pending ack frames!
WARNING: CPU: 0 PID: 11 at net/mac80211/main.c:1703 ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1703
Modules linked in:
CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: netns cleanup_net
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1703
lr : ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1703
sp : ffff8000978e76a0
x29: ffff8000978e76a0 x28: dfff800000000000 x27: 0000000000000000
x26: 1ffff00012f1cf00 x25: 0000000000000001 x24: ffff0000ce64c2f0
x23: 1ffff00012f1cee1 x22: ffff8000978e7700 x21: 1ffff00012f1cee0
x20: ffff800092ab5000 x19: ffff0000d0a16280 x18: 0000000000000008
x17: 0000000000000000 x16: ffff8000830d1d70 x15: 0000000000000001
x14: 1fffe000366c68e2 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000002 x10: 0000000000ff0100 x9 : 50b3433249620700
x8 : 50b3433249620700 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000978e6dd8 x4 : ffff80008f90d220 x3 : ffff800080626d8c
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1703 (P)
 ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1703 (L)
 idr_for_each+0x19c/0x2b4 lib/idr.c:208
 ieee80211_free_hw+0xc8/0x410 net/mac80211/main.c:1720
 mac80211_hwsim_del_radio+0x270/0x3e4 drivers/net/wireless/virtual/mac80211_hwsim.c:5628
 hwsim_exit_net+0x51c/0x5e4 drivers/net/wireless/virtual/mac80211_hwsim.c:6505
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x640/0x9b4 net/core/net_namespace.c:626
 process_one_work+0x7bc/0x1600 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x97c/0xeec kernel/workqueue.c:3391
 kthread+0x288/0x310 kernel/kthread.c:389
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862
irq event stamp: 1378800
hardirqs last  enabled at (1378799): [<ffff80008039a9c4>] __up_console_sem kernel/printk/printk.c:344 [inline]
hardirqs last  enabled at (1378799): [<ffff80008039a9c4>] __console_unlock+0x70/0xc4 kernel/printk/printk.c:2844
hardirqs last disabled at (1378800): [<ffff80008b4b302c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488
softirqs last  enabled at (1377876): [<ffff80008020396c>] softirq_handle_end kernel/softirq.c:400 [inline]
softirqs last  enabled at (1377876): [<ffff80008020396c>] handle_softirqs+0xa38/0xbf8 kernel/softirq.c:582
softirqs last disabled at (1377839): [<ffff800080020db4>] __do_softirq+0x14/0x20 kernel/softirq.c:588
---[ end trace 0000000000000000 ]---
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth1_macvtap: left promiscuous mode
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
bridge_slave_1: left allmulticast mode
bridge_slave_1: left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): Released all slaves
bond1 (unregistering): Released all slaves
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth1_macvtap: left promiscuous mode
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode