bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): (slave wlan1): Releasing backup interface
bond0 (unregistering): Released all slaves
------------[ cut here ]------------
WARNING: CPU: 1 PID: 20797 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
Modules linked in:
CPU: 1 UID: 0 PID: 20797 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: netns cleanup_net
RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6b ec 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ce 6e c1 f6 e9 ef f8 ff ff e8 c4 6e c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 b6 6e c1 f6 e9 39 07 00 00 48 83 7c 24
RSP: 0018:ffffc900081e6d00 EFLAGS: 00010293
RAX: ffffffff8afe4712 RBX: 0000000000000000 RCX: ffff888026629cc0
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880396d6980
RBP: ffffc900081e6ec0 R08: ffff8880396d5737 R09: 1ffff110072daae6
R10: dffffc0000000000 R11: ffffed10072daae7 R12: dffffc0000000000
R13: 0000000000000070 R14: ffff88802b5328c0 R15: ffff88802b5328c0
FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdfc404f5c9 CR3: 0000000120048000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 ieee80211_assign_link_chanctx+0x5ca/0xd70
 __ieee80211_link_release_channel+0x33b/0x4a0
 ieee80211_leave_mesh+0xc5/0x130
 cfg80211_leave_mesh+0x293/0x800
 cfg80211_netdev_notifier_call+0x1b3/0x1450
 notifier_call_chain+0x1b6/0x3e0
 __dev_close_many+0x106/0x6f0
 netif_close_many+0x225/0x410
 netif_close+0x158/0x210
 dev_close+0x10a/0x220
 cfg80211_shutdown_all_interfaces+0xd4/0x220
 ieee80211_remove_interfaces+0x109/0x6e0
 ieee80211_unregister_hw+0x5d/0x2c0
 mac80211_hwsim_del_radio+0x275/0x460
 hwsim_exit_net+0x584/0x640
 ops_undo_list+0x49a/0x990
 cleanup_net+0x4c5/0x800
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x439/0x7d0
 ret_from_fork_asm+0x1a/0x30
 </TASK>
