------------[ cut here ]------------ Have pending ack frames! WARNING: CPU: 1 PID: 385 at net/mac80211/main.c:1713 ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1713 Modules linked in: CPU: 1 UID: 0 PID: 385 Comm: kworker/u8:5 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: netns cleanup_net pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1713 lr : ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1713 sp : ffff80009c1d76a0 x29: ffff80009c1d76a0 x28: 0000000000000000 x27: ffff80009c1d76e0 x26: dfff800000000000 x25: dfff800000000000 x24: ffff0000f6da4000 x23: 0000000000000001 x22: ffff0000dcd79bb0 x21: ffff0000d15eafa8 x20: ffff800092806000 x19: ffff0000c77d63c0 x18: 1fffe00036711a76 x17: ffff80008f2fe000 x16: ffff80008ada5d6c x15: 0000000000000001 x14: 1fffe000367144e8 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800092d13bc0 x10: 0000000000000003 x9 : 0d4eba9f9da63700 x8 : 0d4eba9f9da63700 x7 : ffff80008047c6ec x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 x2 : 0000000000000007 x1 : ffff80008b3d7940 x0 : 0000000000000001 Call trace: ieee80211_free_ack_frame+0x68/0x70 net/mac80211/main.c:1713 (P) idr_for_each+0x17c/0x248 lib/idr.c:208 ieee80211_free_hw+0xb8/0x400 net/mac80211/main.c:1730 mac80211_hwsim_del_radio+0x264/0x3b4 drivers/net/wireless/virtual/mac80211_hwsim.c:5668 hwsim_exit_net+0x49c/0x558 drivers/net/wireless/virtual/mac80211_hwsim.c:6545 ops_exit_list net/core/net_namespace.c:172 [inline] cleanup_net+0x5d0/0x9c0 net/core/net_namespace.c:654 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 2007342 hardirqs last enabled at (2007341): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1525 [inline] hardirqs last enabled at (2007341): [] finish_lock_switch+0xb0/0x1c0 kernel/sched/core.c:5130 hardirqs last disabled at (2007342): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (2007166): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (2007166): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (2007143): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode BUG: MAX_LOCKDEP_CHAINS too low! turning off the locking correctness validator. CPU: 1 UID: 0 PID: 385 Comm: kworker/u8:5 Tainted: G W 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: netns cleanup_net Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:466 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 add_chain_cache kernel/locking/lockdep.c:-1 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3856 [inline] validate_chain kernel/locking/lockdep.c:3877 [inline] __lock_acquire+0xf50/0x3058 kernel/locking/lockdep.c:5235 lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5866 fs_reclaim_acquire+0xb8/0x118 mm/page_alloc.c:4081 might_alloc include/linux/sched/mm.h:318 [inline] slab_pre_alloc_hook mm/slub.c:4112 [inline] slab_alloc_node mm/slub.c:4190 [inline] __kmalloc_cache_noprof+0x58/0x3fc mm/slub.c:4367 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] kobject_uevent_env+0x258/0x884 lib/kobject_uevent.c:540 kobject_uevent+0x2c/0x3c lib/kobject_uevent.c:656 device_del+0x684/0x808 drivers/base/core.c:3899 device_unregister drivers/base/core.c:3922 [inline] device_destroy+0xb0/0x170 drivers/base/core.c:4476 macvtap_device_event+0x1f4/0x388 drivers/net/macvtap.c:193 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2176 [inline] call_netdevice_notifiers_extack net/core/dev.c:2214 [inline] call_netdevice_notifiers net/core/dev.c:2228 [inline] unregister_netdevice_many_notify+0x1250/0x1fbc net/core/dev.c:11982 unregister_netdevice_many net/core/dev.c:12046 [inline] default_device_exit_batch+0x838/0x8b4 net/core/dev.c:12538 ops_exit_list net/core/net_namespace.c:177 [inline] cleanup_net+0x650/0x9c0 net/core/net_namespace.c:654 process_one_work+0x7e8/0x156c kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3400 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed