bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): (slave wlan1): Releasing backup interface
------------[ cut here ]------------
WARNING: CPU: 1 PID: 7733 at net/mac80211/tx.c:6202 ieee80211_tx_skb_tid+0x3ef/0x4f0 net/mac80211/tx.c:6202
Modules linked in:
CPU: 1 UID: 0 PID: 7733 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: netns cleanup_net
RIP: 0010:ieee80211_tx_skb_tid+0x3ef/0x4f0 net/mac80211/tx.c:6202
Code: c7 c0 24 09 8d c6 05 75 23 80 05 01 e8 8a 0e 84 f6 e9 2d fd ff ff e8 a0 29 a8 f6 90 0f 0b 90 e9 d7 fc ff ff e8 92 29 a8 f6 90 <0f> 0b 90 e8 a9 29 80 00 31 ff 89 c3 89 c6 e8 be 24 a8 f6 85 db 75
RSP: 0018:ffffc9000495ef88 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888034250d80 RCX: ffffffff8b1364bf
RDX: ffff8880343b2440 RSI: ffffffff8b1367ae RDI: 0000000000000005
RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff8880287508c0 R14: 0000000000000007 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3ad3e18d58 CR3: 000000000e380000 CR4: 00000000003526f0
DR0: 0000000000000046 DR1: 0000000000008aca DR2: 00000000000000d0
DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ieee80211_tx_skb net/mac80211/ieee80211_i.h:2409 [inline]
 mesh_plink_frame_tx.isra.0+0x8a5/0xc60 net/mac80211/mesh_plink.c:354
 mesh_plink_deactivate+0x271/0x340 net/mac80211/mesh_plink.c:410
 mesh_sta_cleanup+0x35/0x70 net/mac80211/mesh.c:171
 __cleanup_single_sta+0x5c0/0x730 net/mac80211/sta_info.c:167
 cleanup_single_sta net/mac80211/sta_info.c:192 [inline]
 __sta_info_destroy_part2+0x389/0x540 net/mac80211/sta_info.c:1554
 __sta_info_flush+0x521/0x740 net/mac80211/sta_info.c:1683
 sta_info_flush net/mac80211/sta_info.h:970 [inline]
 ieee80211_do_stop+0x269/0x2520 net/mac80211/iface.c:509
 ieee80211_stop+0x169/0x320 net/mac80211/iface.c:814
 __dev_close_many+0x29b/0x760 net/core/dev.c:1755
 netif_close_many+0x233/0x630 net/core/dev.c:1780
 netif_close net/core/dev.c:1797 [inline]
 netif_close+0x17f/0x230 net/core/dev.c:1791
 dev_close+0xaa/0x240 net/core/dev_api.c:220
 __bond_release_one+0xb08/0x1a00 drivers/net/bonding/bond_main.c:2657
 bond_uninit+0x124/0x320 drivers/net/bonding/bond_main.c:6143
 unregister_netdevice_many_notify+0x1419/0x24c0 net/core/dev.c:12175
 ops_exit_rtnl_list net/core/net_namespace.c:186 [inline]
 ops_undo_list+0x8fc/0xab0 net/core/net_namespace.c:247
 cleanup_net+0x408/0x890 net/core/net_namespace.c:682
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:463
 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>