------------[ cut here ]------------
sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt
WARNING: net/mac80211/key.c:1169 at ieee80211_free_keys+0x7b8/0x8e0 net/mac80211/key.c:1168, CPU#0: kworker/u8:11/8638
Modules linked in:
CPU: 0 UID: 0 PID: 8638 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: netns cleanup_net
RIP: 0010:ieee80211_free_keys+0x7b8/0x8e0 net/mac80211/key.c:1168
Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8d 29 85 00 cc e8 47 a0 af f6 90 0f 0b 90 e9 04 fa ff ff e8 39 a0 af f6 90 <0f> 0b 90 e9 32 fe ff ff e8 2b a0 af f6 e9 d4 fd ff ff 48 c7 c1 c0
RSP: 0018:ffffc900032e6fe0 EFLAGS: 00010293
RAX: ffffffff8b14d9e7 RBX: 0000000000000000 RCX: ffff888053ef9e80
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
RBP: ffffc900032e70b0 R08: ffffc900032e6dc7 R09: 1ffff9200065cdb8
R10: dffffc0000000000 R11: fffff5200065cdb9 R12: 0000000000000001
R13: ffff8880545a8d80 R14: ffff888054a65730 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8881256f3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000101030 CR3: 0000000050740000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ieee80211_do_stop+0xf3b/0x1ff0 net/mac80211/iface.c:605
 ieee80211_stop+0x1b1/0x240 net/mac80211/iface.c:832
 __dev_close_many+0x368/0x6d0 net/core/dev.c:1769
 netif_close_many+0x225/0x420 net/core/dev.c:1794
 netif_close+0x160/0x220 net/core/dev.c:1811
 dev_close+0x10a/0x220 net/core/dev_api.c:220
 cfg80211_shutdown_all_interfaces+0xc4/0x200 net/wireless/core.c:280
 ieee80211_remove_interfaces+0x108/0x6d0 net/mac80211/iface.c:2405
 ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1680
 mac80211_hwsim_del_radio+0x28a/0x490 drivers/net/wireless/virtual/mac80211_hwsim.c:5916
 hwsim_exit_net+0xede/0xfa0 drivers/net/wireless/virtual/mac80211_hwsim.c:6807
 ops_exit_list net/core/net_namespace.c:199 [inline]
 ops_undo_list+0x49f/0x940 net/core/net_namespace.c:252
 cleanup_net+0x4df/0x7b0 net/core/net_namespace.c:696
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0xaec/0x17a0 kernel/workqueue.c:3340
 worker_thread+0xda6/0x1360 kernel/workqueue.c:3421
 kthread+0x726/0x8b0 kernel/kthread.c:463
 ret_from_fork+0x51b/0xa40 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>