syzbot

------------[ cut here ]------------
!local->started
WARNING: net/mac80211/rx.c:5471 at ieee80211_rx_list+0x1547/0x2fc0 net/mac80211/rx.c:5471, CPU#0: syz.2.201/6678
Modules linked in:
CPU: 0 UID: 0 PID: 6678 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:ieee80211_rx_list+0x1547/0x2fc0 net/mac80211/rx.c:5471
Code: 3d 4e 1f dd 05 41 0f b6 d5 0f b6 f3 67 48 0f b9 3a e9 ad ef ff ff e8 78 8d fb f6 90 0f 0b 90 e9 58 ee ff ff e8 6a 8d fb f6 90 <0f> 0b 90 e9 91 ef ff ff e8 5c 8d fb f6 44 0f b6 75 48 bf 30 00 00
RSP: 0018:ffffc90000007c50 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b0d57bd
RDX: ffff8880337b24c0 RSI: ffffffff8b0d6a76 RDI: ffff8880337b24c0
RBP: ffff888057a02000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888057a020d8
R13: ffff88802e2cb168 R14: ffff88802e2c8720 R15: ffff88802e2c8ec0
FS:  00007f4dc39406c0(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdf8912ba40 CR3: 0000000079606000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 ieee80211_rx_napi+0xdc/0x400 net/mac80211/rx.c:5611
 ieee80211_rx include/net/mac80211.h:5267 [inline]
 ieee80211_handle_queued_frames+0xc8/0x120 net/mac80211/main.c:452
 tasklet_action_common+0x2de/0x3d0 kernel/softirq.c:925
 handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622
 do_softirq kernel/softirq.c:523 [inline]
 do_softirq+0xac/0xe0 kernel/softirq.c:510
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 __alloc_skb+0x5db/0x710 net/core/skbuff.c:697
 alloc_skb include/linux/skbuff.h:1383 [inline]
 nlmsg_new include/net/netlink.h:1055 [inline]
 rtmsg_ifinfo_build_skb+0x81/0x260 net/core/rtnetlink.c:4429
 rtmsg_ifinfo_event net/core/rtnetlink.c:4471 [inline]
 rtmsg_ifinfo_event net/core/rtnetlink.c:4461 [inline]
 rtmsg_ifinfo+0xa4/0x1b0 net/core/rtnetlink.c:4480
 netif_close_many+0x2fc/0x630 net/core/dev.c:1803
 netif_close net/core/dev.c:1817 [inline]
 netif_close+0x17f/0x230 net/core/dev.c:1811
 dev_close+0xaa/0x240 net/core/dev_api.c:220
 nl80211_del_interface+0xec/0x190 net/wireless/nl80211.c:4852
 genl_family_rcv_msg_doit+0x214/0x300 net/netlink/genetlink.c:1114
 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
 genl_rcv_msg+0x560/0x800 net/netlink/genetlink.c:1209
 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg net/socket.c:742 [inline]
 ____sys_sendmsg+0x9e1/0xb70 net/socket.c:2592
 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2646
 __sys_sendmsg+0x170/0x220 net/socket.c:2678
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4dc299c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f4dc3940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f4dc2c15fa0 RCX: 00007f4dc299c819
RDX: 0000000002000000 RSI: 0000200000000200 RDI: 0000000000000007
RBP: 00007f4dc2a32c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f4dc2c16038 R14: 00007f4dc2c15fa0 R15: 00007ffddc5b20c8
 </TASK>