veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode ------------[ cut here ]------------ WARNING: CPU: 1 PID: 136 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x84/0x154 net/ipv6/xfrm6_tunnel.c:341 Modules linked in: CPU: 1 UID: 0 PID: 136 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : xfrm6_tunnel_net_exit+0x84/0x154 net/ipv6/xfrm6_tunnel.c:341 lr : xfrm6_tunnel_net_exit+0x50/0x154 net/ipv6/xfrm6_tunnel.c:338 sp : ffff80008dea7910 x29: ffff80008dea7910 x28: dfff800000000000 x27: ffff800088a6e580 x26: ffff800088c27440 x25: ffff700011bd4f5c x24: ffff00000e942200 x23: dfff800000000000 x22: ffff00001721c000 x21: 0000000000000000 x20: ffff00001721c000 x19: 0000000000000000 x18: 1ffff0001427aeac x17: ffff0000126a8008 x16: 0000000000000000 x15: 0000000000000002 x14: 000000000001180a x13: 0000000000000000 x12: ffff700011bd4e95 x11: 1ffff00011bd4e94 x10: ffff700011bd4e94 x9 : dfff800000000000 x8 : ffff80008dea74a8 x7 : ffff80008dea75d0 x6 : ffff80008dea7520 x5 : ffff80008dea7508 x4 : 0000000000000003 x3 : 1fffe00001fb4001 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000188bb000 Call trace: xfrm6_tunnel_net_exit+0x84/0x154 net/ipv6/xfrm6_tunnel.c:341 (P) ops_exit_list net/core/net_namespace.c:199 [inline] ops_undo_list+0x1f4/0x71c net/core/net_namespace.c:252 cleanup_net+0x32c/0x73c net/core/net_namespace.c:695 process_one_work+0x7cc/0x18d4 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x734/0xb84 kernel/workqueue.c:3427 kthread+0x348/0x5fc kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 1627190 hardirqs last enabled at (1627189): [] class_irqsave_destructor include/linux/irqflags.h:266 [inline] hardirqs last enabled at (1627189): [] __free_object+0x24c/0x5a0 lib/debugobjects.c:519 hardirqs last disabled at (1627190): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (1627176): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1627176): [] xfrm_state_flush+0x3bc/0x474 net/xfrm/xfrm_state.c:952 softirqs last disabled at (1627174): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1627174): [] xfrm_state_flush+0x348/0x474 net/xfrm/xfrm_state.c:946 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 136 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xe0/0x154 net/ipv6/xfrm6_tunnel.c:344 Modules linked in: CPU: 0 UID: 0 PID: 136 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : xfrm6_tunnel_net_exit+0xe0/0x154 net/ipv6/xfrm6_tunnel.c:344 lr : xfrm6_tunnel_net_exit+0x50/0x154 net/ipv6/xfrm6_tunnel.c:338 sp : ffff80008dea7910 x29: ffff80008dea7910 x28: dfff800000000000 x27: ffff800088a6e580 x26: ffff800088c27440 x25: ffff700011bd4f5c x24: ffff00000e942200 x23: dfff800000000000 x22: ffff00001721c000 x21: ffff00001721c808 x20: 0000000000000101 x19: 0000000000000001 x18: 1ffff0001427aeac x17: ffff0000126a8008 x16: 0000000000000000 x15: 0000000000000002 x14: 000000000001180a x13: 0000000000000000 x12: ffff700011bd4e95 x11: 1ffff00011bd4e94 x10: ffff700011bd4e94 x9 : dfff800000000000 x8 : ffff80008dea74a8 x7 : ffff80008dea75d0 x6 : ffff80008dea7520 x5 : ffff80008dea7508 x4 : 0000000000000003 x3 : 1fffe00001fb4001 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000188bb010 Call trace: xfrm6_tunnel_net_exit+0xe0/0x154 net/ipv6/xfrm6_tunnel.c:344 (P) ops_exit_list net/core/net_namespace.c:199 [inline] ops_undo_list+0x1f4/0x71c net/core/net_namespace.c:252 cleanup_net+0x32c/0x73c net/core/net_namespace.c:695 process_one_work+0x7cc/0x18d4 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x734/0xb84 kernel/workqueue.c:3427 kthread+0x348/0x5fc kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 1627248 hardirqs last enabled at (1627247): [] irqentry_exit+0x48/0x188 kernel/entry/common.c:214 hardirqs last disabled at (1627248): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (1627242): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (1627242): [] handle_softirqs+0x88c/0xdb4 kernel/softirq.c:650 softirqs last disabled at (1627193): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 136 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x1e8/0x330 net/xfrm/xfrm_state.c:3318 Modules linked in: CPU: 0 UID: 0 PID: 136 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : xfrm_state_fini+0x1e8/0x330 net/xfrm/xfrm_state.c:3306 lr : xfrm_state_fini+0x4c/0x330 net/xfrm/xfrm_state.c:3304 sp : ffff80008dea78f0 x29: ffff80008dea78f0 x28: dfff800000000000 x27: ffff800088a6e580 x26: ffff800088be9fc0 x25: ffff700011bd4f5c x24: ffff00000e942200 x23: ffff800088a6e580 x22: ffff80008dea7ae0 x21: ffff800088be9fe0 x20: ffff00000e943440 x19: ffff00000e942200 x18: 0000000000000000 x17: ffff800084e17654 x16: ffff800084e1746c x15: ffff800084e43edc x14: ffff80008095c9e4 x13: 0000000000000000 x12: ffff700011bd4eb9 x11: 1ffff00011bd4eb8 x10: ffff700011bd4eb8 x9 : dfff800000000000 x8 : ffff80008dea75c8 x7 : ffff80008dea76f0 x6 : ffff80008dea7640 x5 : ffff80008dea7628 x4 : 1fffe00001fb4001 x3 : 1fffe00001fb4088 x2 : 0000000000000000 x1 : 1fffe00001d28688 x0 : ffff00001ec3cdd8 Call trace: xfrm_state_fini+0x1e8/0x330 net/xfrm/xfrm_state.c:3318 (P) xfrm_net_exit+0x30/0x70 net/xfrm/xfrm_policy.c:4354 ops_exit_list net/core/net_namespace.c:199 [inline] ops_undo_list+0x1f4/0x71c net/core/net_namespace.c:252 cleanup_net+0x32c/0x73c net/core/net_namespace.c:695 process_one_work+0x7cc/0x18d4 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x734/0xb84 kernel/workqueue.c:3427 kthread+0x348/0x5fc kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 1629566 hardirqs last enabled at (1629565): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:159 [inline] hardirqs last enabled at (1629565): [] _raw_spin_unlock_irq+0x30/0x8c kernel/locking/spinlock.c:202 hardirqs last disabled at (1629566): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (1629562): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (1629562): [] xfrm_state_flush+0x3bc/0x474 net/xfrm/xfrm_state.c:952 softirqs last disabled at (1629560): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (1629560): [] xfrm_state_flush+0x50/0x474 net/xfrm/xfrm_state.c:924 ---[ end trace 0000000000000000 ]---