------------[ cut here ]------------ WARNING: CPU: 0 PID: 12265 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:362 Modules linked in: CPU: 0 UID: 0 PID: 12265 Comm: syz.1.1320 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:362 Code: 00 e8 d1 8b 0b 00 e8 9c f7 42 00 fb 65 8b 05 4c c6 b3 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 8e 73 b2 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 a3 f5 42 00 eb 99 48 89 ef e8 69 d8 19 00 eb a2 RSP: 0018:ffffc90003796bd0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000200 RCX: 1ffffffff2028f33 RDX: 0000000000000000 RSI: 0000000000000200 RDI: ffffffff88f16e1d RBP: ffffffff88f16e1d R08: 0000000000000000 R09: fffffbfff20288d3 R10: ffffffff9014469f R11: ffffffff8b200130 R12: 0000000000000000 R13: ffff88807e31dd00 R14: ffff8880601440b8 R15: ffff888060144000 FS: 00007f19a55d46c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002004e000 CR3: 00000000634b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:908 [inline] __dev_queue_xmit+0x882/0x4300 net/core/dev.c:4450 dev_queue_xmit include/linux/netdevice.h:3105 [inline] __netlink_deliver_tap_skb net/netlink/af_netlink.c:307 [inline] __netlink_deliver_tap net/netlink/af_netlink.c:325 [inline] netlink_deliver_tap+0xa7d/0xd90 net/netlink/af_netlink.c:338 __netlink_sendskb net/netlink/af_netlink.c:1275 [inline] netlink_broadcast_deliver net/netlink/af_netlink.c:1408 [inline] do_one_broadcast net/netlink/af_netlink.c:1495 [inline] netlink_broadcast_filtered+0x92d/0xef0 net/netlink/af_netlink.c:1540 nlmsg_multicast_filtered include/net/netlink.h:1125 [inline] genlmsg_multicast_netns_filtered include/net/genetlink.h:491 [inline] genlmsg_multicast_netns include/net/genetlink.h:508 [inline] nl80211_frame_tx_status+0xa6f/0xd10 net/wireless/nl80211.c:19090 ieee80211_report_ack_skb net/mac80211/status.c:645 [inline] ieee80211_report_used_skb+0x1241/0x21c0 net/mac80211/status.c:778 ieee80211_free_txskb+0x23/0x40 net/mac80211/status.c:1291 ieee80211_do_stop+0xd65/0x2270 net/mac80211/iface.c:646 ieee80211_runtime_change_iftype net/mac80211/iface.c:1860 [inline] ieee80211_if_change_type+0x360/0x790 net/mac80211/iface.c:1898 ieee80211_change_iface+0xa5/0x500 net/mac80211/cfg.c:219 rdev_change_virtual_intf net/wireless/rdev-ops.h:74 [inline] cfg80211_change_iface+0x586/0xdd0 net/wireless/util.c:1215 nl80211_set_interface+0x64e/0x980 net/wireless/nl80211.c:4368 genl_family_rcv_msg_doit+0x202/0x2f0 net/netlink/genetlink.c:1115 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x565/0x800 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0xab5/0xc90 net/socket.c:2597 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2651 __sys_sendmsg+0x117/0x1f0 net/socket.c:2680 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f19a477cef9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f19a55d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f19a4935f80 RCX: 00007f19a477cef9 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 RBP: 00007f19a47ef01e R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f19a4935f80 R15: 00007ffe1bcd1268