bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): (slave wlan1): Releasing backup interface ------------[ cut here ]------------ WARNING: net/mac80211/tx.c:6303 at ieee80211_tx_skb_tid+0x3b4/0x470 net/mac80211/tx.c:6303, CPU#0: kworker/u8:21/6093 Modules linked in: CPU: 0 UID: 0 PID: 6093 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: netns cleanup_net RIP: 0010:ieee80211_tx_skb_tid+0x3b4/0x470 net/mac80211/tx.c:6303 Code: 3a d5 f6 e9 b1 fe ff ff e8 09 0e f8 f6 90 0f 0b 90 e9 e2 fe ff ff e8 fb 0d f8 f6 90 0f 0b 90 e9 2a fe ff ff e8 ed 0d f8 f6 90 <0f> 0b 90 e8 c4 e1 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 RSP: 0018:ffffc9000b596c18 EFLAGS: 00010293 RAX: ffffffff8ac93c73 RBX: ffffffff8ac938ef RCX: ffff88802d000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 00000000ffffffff R08: ffffffff8ac938ef R09: ffffffff8df41cc0 R10: dffffc0000000000 R11: ffffed100eb2f6f6 R12: ffff88806a644d80 R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000ebb030 CR3: 000000000dd3a000 CR4: 00000000003526f0 Call Trace: ieee80211_tx_skb net/mac80211/ieee80211_i.h:2418 [inline] mesh_plink_frame_tx+0x734/0xc10 net/mac80211/mesh_plink.c:354 mesh_plink_deactivate+0x18e/0x2f0 net/mac80211/mesh_plink.c:410 mesh_sta_cleanup+0x42/0x150 net/mac80211/mesh.c:171 __cleanup_single_sta net/mac80211/sta_info.c:167 [inline] cleanup_single_sta+0x40f/0x660 net/mac80211/sta_info.c:192 __sta_info_flush+0x5e4/0x710 net/mac80211/sta_info.c:1683 sta_info_flush net/mac80211/sta_info.h:970 [inline] ieee80211_do_stop+0x397/0x1f70 net/mac80211/iface.c:526 ieee80211_stop+0x1b1/0x240 net/mac80211/iface.c:828 __dev_close_many+0x344/0x6b0 net/core/dev.c:1756 netif_close_many+0x225/0x410 net/core/dev.c:1781 netif_close+0x158/0x210 net/core/dev.c:1798 dev_close+0x10a/0x220 net/core/dev_api.c:220 __bond_release_one+0xba4/0x10d0 drivers/net/bonding/bond_main.c:2472 bond_uninit+0x123/0x2d0 drivers/net/bonding/bond_main.c:5954 unregister_netdevice_many_notify+0x1cae/0x2310 net/core/dev.c:12402 ops_exit_rtnl_list net/core/net_namespace.c:187 [inline] ops_undo_list+0x3dc/0x990 net/core/net_namespace.c:248 cleanup_net+0x4d8/0x7a0 net/core/net_namespace.c:696 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246