------------[ cut here ]------------ Have pending ack frames! WARNING: CPU: 0 PID: 40 at net/mac80211/main.c:1511 ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1511 Modules linked in: CPU: 0 PID: 40 Comm: kworker/u4:3 Not tainted 6.5.0-rc7-syzkaller-00063-g35e2132122ba #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 Workqueue: netns cleanup_net pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1511 lr : ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1511 sp : ffff800092f77720 x29: ffff800092f77720 x28: dfff800000000000 x27: 0000000000000000 x26: 1ffff000125eef10 x25: 0000000000000001 x24: ffff0000e4c5d0b0 x23: 1ffff000125eeef1 x22: ffff800092f77780 x21: 1ffff000125eeef0 x20: ffff800090d43000 x19: ffff0000c8177dc0 x18: ffff800092f76c20 x17: 0000000000000000 x16: ffff80008a572e30 x15: 0000000000000001 x14: 1fffe0003683ae2a x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 192870c41770f100 x8 : 192870c41770f100 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800092f77018 x4 : ffff80008e17f000 x3 : ffff8000805a25e4 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: ieee80211_free_ack_frame+0x64/0x6c net/mac80211/main.c:1511 idr_for_each+0x19c/0x2b4 lib/idr.c:208 ieee80211_free_hw+0xd4/0x41c net/mac80211/main.c:1529 mac80211_hwsim_del_radio+0x26c/0x3d8 drivers/net/wireless/virtual/mac80211_hwsim.c:5412 hwsim_exit_net+0x518/0x5e0 drivers/net/wireless/virtual/mac80211_hwsim.c:6285 ops_exit_list net/core/net_namespace.c:170 [inline] cleanup_net+0x564/0x8d0 net/core/net_namespace.c:614 process_one_work+0x800/0x1480 kernel/workqueue.c:2600 worker_thread+0x8e0/0xfe8 kernel/workqueue.c:2751 kthread+0x288/0x310 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853 irq event stamp: 2243584 hardirqs last enabled at (2243583): [] __up_console_sem+0x60/0xb4 kernel/printk/printk.c:347 hardirqs last disabled at (2243584): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:436 softirqs last enabled at (2242094): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (2242094): [] cfg80211_mgmt_registrations_update+0x538/0xb5c net/wireless/mlme.c:500 softirqs last disabled at (2242092): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (2242092): [] cfg80211_mgmt_registrations_update+0x118/0xb5c net/wireless/mlme.c:473 ---[ end trace 0000000000000000 ]--- hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): Released all slaves