------------[ cut here ]------------ sk->sk_forward_alloc WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x653/0x800 net/ipv4/af_inet.c:162, CPU#1: kworker/1:3/5869 Modules linked in: CPU: 1 UID: 0 PID: 5869 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: mld mld_ifc_work RIP: 0010:inet_sock_destruct+0x653/0x800 net/ipv4/af_inet.c:162 Code: 32 4d ff e9 06 fd ff ff e8 fa 71 fc f7 90 0f 0b 90 e9 35 fe ff ff e8 ec 71 fc f7 90 0f 0b 90 e9 c5 fe ff ff e8 de 71 fc f7 90 <0f> 0b 90 e9 04 ff ff ff e8 d0 71 fc f7 90 0f 0b 90 e9 65 fe ff ff RSP: 0018:ffffc900006a0db0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88803b299100 RCX: ffffffff8a0cd207 RDX: ffff888024b5ca80 RSI: ffffffff8a0cd302 RDI: ffff888024b5ca80 RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000f70 R11: 000000000000751b R12: ffff88803b299100 R13: ffff88803b299190 R14: ffffffff81ee981d R15: 0000000000000006 FS: 0000000000000000(0000) GS:ffff8880d645f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000020479ad6a000 CR3: 000000002ffb8000 CR4: 0000000000352ef0 Call Trace: __sk_destruct+0x85/0xab0 net/core/sock.c:2357 rcu_do_batch kernel/rcu/tree.c:2645 [inline] rcu_core+0x5a2/0x10d0 kernel/rcu/tree.c:2897 handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xac/0xe0 kernel/softirq.c:510 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450 ipv6_get_lladdr+0x299/0x4f0 net/ipv6/addrconf.c:1944 mld_newpack.isra.0+0x41d/0xa20 net/ipv6/mcast.c:1789 add_grhead+0x299/0x340 net/ipv6/mcast.c:1886 add_grec+0x1380/0x1920 net/ipv6/mcast.c:2025 mld_send_cr net/ipv6/mcast.c:2148 [inline] mld_ifc_work+0x3c5/0xc10 net/ipv6/mcast.c:2693 process_one_work+0xa23/0x1940 kernel/workqueue.c:3314 process_scheduled_works kernel/workqueue.c:3397 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245