------------[ cut here ]------------ syzkaller0: Failed check-sdata-in-driver check, flags: 0x0 WARNING: CPU: 1 PID: 4342 at net/mac80211/driver-ops.c:114 drv_remove_interface+0x324/0x5c0 net/mac80211/driver-ops.c:114 Modules linked in: CPU: 1 UID: 0 PID: 4342 Comm: kworker/u8:9 Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: netns cleanup_net pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : drv_remove_interface+0x324/0x5c0 net/mac80211/driver-ops.c:114 lr : drv_remove_interface+0x324/0x5c0 net/mac80211/driver-ops.c:114 sp : ffff8000a1d370c0 x29: ffff8000a1d370c0 x28: dfff800000000000 x27: ffff0000cb6729d0 x26: ffff0000d1118e40 x25: 1fffe0001a2232a0 x24: ffff0000d1118e80 x23: dfff800000000000 x22: ffff800092c60000 x21: 0000000000000000 x20: ffff0000cb670d80 x19: ffff0000d1118e40 x18: 1fffe00036700a7e x17: ffff80008f99d000 x16: ffff800080463930 x15: 0000000000000001 x14: 1fffe000367034d0 x13: ffff8000a1d38000 x12: 0000000000000003 x11: 0000000000000001 x10: 0000000000000003 x9 : 3dedc896a57df900 x8 : 3dedc896a57df900 x7 : ffff8000803cf9cc x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000006 x1 : ffff80008b746ea0 x0 : ffff800123f1a000 Call trace: drv_remove_interface+0x324/0x5c0 net/mac80211/driver-ops.c:114 (P) ieee80211_do_stop+0x146c/0x1da4 net/mac80211/iface.c:710 ieee80211_stop+0x3e0/0x448 net/mac80211/iface.c:781 __dev_close_many+0x2d8/0x3c8 net/core/dev.c:1560 dev_close_many+0x1e0/0x474 net/core/dev.c:1585 dev_close+0x174/0x250 net/core/dev.c:1611 cfg80211_shutdown_all_interfaces+0xc0/0x1d8 net/wireless/core.c:280 ieee80211_remove_interfaces+0x10c/0x5dc net/mac80211/iface.c:2280 ieee80211_unregister_hw+0x60/0x29c net/mac80211/main.c:1671 mac80211_hwsim_del_radio+0x220/0x3e4 drivers/net/wireless/virtual/mac80211_hwsim.c:5625 hwsim_exit_net+0x51c/0x5e4 drivers/net/wireless/virtual/mac80211_hwsim.c:6505 ops_exit_list net/core/net_namespace.c:172 [inline] cleanup_net+0x640/0xa34 net/core/net_namespace.c:648 process_one_work+0x7a8/0x15cc kernel/workqueue.c:3229 process_scheduled_works kernel/workqueue.c:3310 [inline] worker_thread+0x97c/0xeec kernel/workqueue.c:3391 kthread+0x288/0x310 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 912248 hardirqs last enabled at (912247): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1535 [inline] hardirqs last enabled at (912247): [] finish_lock_switch+0xbc/0x1e4 kernel/sched/core.c:5123 hardirqs last disabled at (912248): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (912198): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (912198): [] netif_addr_unlock_bh include/linux/netdevice.h:4608 [inline] softirqs last enabled at (912198): [] ieee80211_do_stop+0x548/0x1da4 net/mac80211/iface.c:534 softirqs last disabled at (912194): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bridge0: port 2(bridge_slave_1) entered blocking state bridge0: port 2(bridge_slave_1) entered forwarding state