------------[ cut here ]------------
WARNING: CPU: 0 PID: 6553 at kernel/softirq.c:387 __local_bh_enable_ip+0x24c/0x35c kernel/softirq.c:387
Modules linked in:
CPU: 0 UID: 0 PID: 6553 Comm: krxrpcio/7001 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
pstate: 204000c5 (nzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __local_bh_enable_ip+0x24c/0x35c kernel/softirq.c:387
lr : __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
lr : _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:210
sp : ffff8000a08a7500
x29: ffff8000a08a7510 x28: 0000000000000000 x27: 1fffe000337d6ed1
x26: ffff0000eda8da78 x25: ffff00019beb7680 x24: 0000000000000000
x23: dfff800000000000 x22: 1fffe0001e4b1001 x21: ffff800089962bec
x20: 0000000000000201 x19: ffff0000f2588008 x18: 00000000ffffffff
x17: ffff800093363000 x16: ffff80008052cb8c x15: 0000000000000001
x14: 1fffe000337d6ec8 x13: 0000000000000000 x12: 0000000000000000
x11: ffff6000337d6ec9 x10: dfff800000000000 x9 : 0000000000000000
x8 : 0000000100000203 x7 : ffff800089962858 x6 : 0000000000000000
x5 : ffff800093510dd8 x4 : 0000000000000008 x3 : ffff80008052cc94
x2 : 0000000000000001 x1 : 0000000000000201 x0 : ffff800089962bec
Call trace:
 __local_bh_enable_ip+0x24c/0x35c kernel/softirq.c:387 (P)
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 rt_add_uncached_list net/ipv4/route.c:1526 [inline]
 rt_set_nexthop+0x504/0x8bc net/ipv4/route.c:-1
 __mkroute_output net/ipv4/route.c:2669 [inline]
 ip_route_output_key_hash_rcu+0x1408/0x1e08 net/ipv4/route.c:2864
 ip_route_output_key_hash+0x170/0x290 net/ipv4/route.c:2694
 __ip_route_output_key include/net/route.h:169 [inline]
 ip_route_output_flow+0x3c/0x160 net/ipv4/route.c:2921
 ip_route_output_ports include/net/route.h:213 [inline]
 rxrpc_assess_MTU_size net/rxrpc/peer_object.c:174 [inline]
 rxrpc_init_peer+0x404/0xab0 net/rxrpc/peer_object.c:281
 rxrpc_new_incoming_peer+0x1ec/0x4ac net/rxrpc/peer_object.c:325
 rxrpc_alloc_incoming_call net/rxrpc/call_accept.c:284 [inline]
 rxrpc_new_incoming_call+0x500/0x1164 net/rxrpc/call_accept.c:377
 rxrpc_input_packet net/rxrpc/io_thread.c:310 [inline]
 rxrpc_io_thread+0x13e0/0x2850 net/rxrpc/io_thread.c:482
 kthread+0x5fc/0x75c kernel/kthread.c:464
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847
irq event stamp: 27
hardirqs last  enabled at (25): [<ffff80008af1e0f0>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:159 [inline]
hardirqs last  enabled at (25): [<ffff80008af1e0f0>] _raw_spin_unlock_irq+0x30/0x80 kernel/locking/spinlock.c:202
hardirqs last disabled at (26): [<ffff80008af1e380>] __raw_read_lock_irq include/linux/rwlock_api_smp.h:167 [inline]
hardirqs last disabled at (26): [<ffff80008af1e380>] _raw_read_lock_irq+0x2c/0x84 kernel/locking/spinlock.c:244
softirqs last  enabled at (0): [<ffff8000803af35c>] copy_process+0x1134/0x31ec kernel/fork.c:2114
softirqs last disabled at (27): [<ffff800089962858>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (27): [<ffff800089962858>] rt_add_uncached_list net/ipv4/route.c:1524 [inline]
softirqs last disabled at (27): [<ffff800089962858>] rt_set_nexthop+0x170/0x8bc net/ipv4/route.c:1626
---[ end trace 0000000000000000 ]---