[ 427.973089][T11523] validate_nla: 265 callbacks suppressed [ 427.973108][T11523] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 428.020517][T11524] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 428.046052][T11526] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 428.062966][T11528] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 428.081235][T11532] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 428.094329][T11533] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 428.139129][T11538] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 428.198267][T11540] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 428.213082][T11542] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 428.232228][T11546] netlink: 'syz-executor.5': attribute type 4 has an invalid length. Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. [ 431.395007][T11486] device hsr_slave_0 left promiscuous mode [ 431.468239][T11486] device hsr_slave_1 left promiscuous mode [ 431.476945][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.484978][T11486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.501392][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.509362][T11486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.520418][T11486] device bridge_slave_1 left promiscuous mode [ 431.536236][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.554345][T11486] device bridge_slave_0 left promiscuous mode [ 431.561152][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.589073][T11486] device veth1_macvtap left promiscuous mode [ 431.601781][T11486] device veth0_macvtap left promiscuous mode [ 431.608051][T11486] device veth1_vlan left promiscuous mode [ 431.620775][T11486] device veth0_vlan left promiscuous mode [ 432.058906][T11486] team0 (unregistering): Port device team_slave_1 removed [ 432.095940][T11486] team0 (unregistering): Port device team_slave_0 removed [ 432.119168][T11486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.153181][T11486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.368724][T11486] bond0 (unregistering): Released all slaves [ 432.993491][T11613] validate_nla: 48 callbacks suppressed [ 432.993509][T11613] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.043980][T11614] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.065249][T11615] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.103164][T11616] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.143402][T11617] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.177312][T11618] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.211380][T11619] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.256232][T11620] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.289332][T11621] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.335590][T11622] netlink: 'syz-executor656': attribute type 4 has an invalid length. [ 433.438752][T11486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.449580][ C0] ================================================================== [ 433.449595][ C0] BUG: KASAN: use-after-free in tcp_retransmit_timer+0x2ef3/0x3360 [ 433.449812][ C0] Read of size 8 at addr ffff88801ad30480 by task kworker/u4:2/11486 [ 433.449837][ C0] [ 433.449845][ C0] CPU: 0 PID: 11486 Comm: kworker/u4:2 Not tainted 5.18.0-rc3-syzkaller-00016-gb253435746d9-dirty #0 [ 433.449879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.449898][ C0] Workqueue: netns cleanup_net [ 433.449957][ C0] Call Trace: [ 433.449965][ C0] [ 433.449975][ C0] dump_stack_lvl+0xcd/0x134 [ 433.450074][ C0] print_address_description.constprop.0.cold+0xeb/0x467 [ 433.450130][ C0] ? tcp_retransmit_timer+0x2ef3/0x3360 [ 433.450159][ C0] kasan_report.cold+0xf4/0x1c6 [ 433.450190][ C0] ? tcp_retransmit_timer+0x2ef3/0x3360 [ 433.450218][ C0] tcp_retransmit_timer+0x2ef3/0x3360 [ 433.450248][ C0] ? tcp_mstamp_refresh+0x12/0xa0 [ 433.450275][ C0] ? tcp_delack_timer+0x320/0x320 [ 433.450304][ C0] ? ktime_get+0x38a/0x470 [ 433.450390][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 433.450464][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 433.450525][ C0] ? ktime_get+0x30b/0x470 [ 433.450553][ C0] tcp_write_timer_handler+0x5e6/0xbc0 [ 433.450583][ C0] tcp_write_timer+0xa2/0x2b0 [ 433.450610][ C0] ? tcp_write_timer_handler+0xbc0/0xbc0 [ 433.450638][ C0] call_timer_fn+0x1a5/0x6b0 [ 433.450664][ C0] ? timer_fixup_activate+0x350/0x350 [ 433.450691][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 433.450753][ C0] ? tcp_write_timer_handler+0xbc0/0xbc0 [ 433.450782][ C0] __run_timers.part.0+0x679/0xa80 [ 433.450809][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 433.450835][ C0] run_timer_softirq+0xb3/0x1d0 [ 433.450860][ C0] __do_softirq+0x29b/0x9c2 [ 433.450887][ C0] __irq_exit_rcu+0x123/0x180 [ 433.450965][ C0] irq_exit_rcu+0x5/0x20 [ 433.450992][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 433.451023][ C0] [ 433.451030][ C0] [ 433.451038][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 433.451067][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 433.451099][ C0] Code: 48 89 ef 5d e9 a1 72 4a 00 5d be 03 00 00 00 e9 86 c0 74 02 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 b9 aa 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 433.451125][ C0] RSP: 0018:ffffc90004aa7058 EFLAGS: 00000293 [ 433.451148][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 433.451165][ C0] RDX: ffff88804c5f0100 RSI: ffffffff815eb9c8 RDI: 0000000000000003 [ 433.451184][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff9002f907 [ 433.451201][ C0] R10: ffffffff815eb9be R11: 0000000000000000 R12: ffffffff84e0fb70 [ 433.451219][ C0] R13: 0000000000000200 R14: ffffc90004aa70b8 R15: dffffc0000000000 [ 433.451237][ C0] ? loopback_xmit+0x730/0x730 [ 433.451327][ C0] ? console_unlock+0x81e/0xdd0 [ 433.451364][ C0] ? console_unlock+0x828/0xdd0 [ 433.451392][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 433.451424][ C0] console_unlock+0x82e/0xdd0 [ 433.451454][ C0] ? devkmsg_read+0x730/0x730 [ 433.451480][ C0] ? lock_release+0x720/0x720 [ 433.451520][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 433.451583][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 433.451610][ C0] vprintk_emit+0x1b4/0x5f0 [ 433.451634][ C0] dev_vprintk_emit+0x36e/0x3b2 [ 433.451662][ C0] ? dev_attr_show.cold+0x3a/0x3a [ 433.451693][ C0] ? arch_stack_walk+0x5c/0xe0 [ 433.451735][ C0] dev_printk_emit+0xba/0xf1 [ 433.451762][ C0] ? dev_vprintk_emit+0x3b2/0x3b2 [ 433.451793][ C0] ? lock_chain_count+0x20/0x20 [ 433.451819][ C0] ? mark_lock.part.0+0xee/0x1910 [ 433.451847][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 433.451907][ C0] __netdev_printk+0x1c6/0x27a [ 433.451972][ C0] netdev_info+0xd7/0x109 [ 433.452002][ C0] ? netdev_notice+0x109/0x109 [ 433.452033][ C0] nsim_udp_tunnel_unset_port.cold+0x95/0xb8 [ 433.452100][ C0] __udp_tunnel_nic_device_sync.part.0+0xa4c/0xcb0 [ 433.452156][ C0] ? unregister_netdevice_many+0x10c7/0x1890 [ 433.452190][ C0] ? kmalloc_array.constprop.0+0x20/0x20 [ 433.452217][ C0] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 433.452246][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 433.452279][ C0] ? udp_tunnel_nic_entry_adj+0x239/0x300 [ 433.452306][ C0] udp_tunnel_nic_flush+0x2b4/0x5e0 [ 433.452333][ C0] udp_tunnel_nic_netdevice_event+0x66a/0x1a60 [ 433.452363][ C0] ? netconsole_netdev_event+0x262/0x3c0 [ 433.452395][ C0] ? mpls_dev_notify+0x280/0x8a0 [ 433.452485][ C0] notifier_call_chain+0xb5/0x200 [ 433.452534][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 433.452563][ C0] unregister_netdevice_many+0x92e/0x1890 [ 433.452593][ C0] ? __mutex_lock+0x21a/0x12f0 [ 433.452622][ C0] ? netdev_pick_tx+0xbe0/0xbe0 [ 433.452651][ C0] ? nsim_destroy+0x35/0x190 [ 433.452750][ C0] ? mutex_lock_io_nested+0x1150/0x1150 [ 433.452781][ C0] unregister_netdevice_queue+0x2dd/0x3c0 [ 433.452815][ C0] ? unregister_netdevice_many+0x1890/0x1890 [ 433.452848][ C0] ? queue_delayed_work_on+0xe6/0x120 [ 433.452898][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 433.452932][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 433.452966][ C0] ? queue_delayed_work_on+0xbb/0x120 [ 433.452993][ C0] nsim_destroy+0x3f/0x190 [ 433.453024][ C0] __nsim_dev_port_del+0x191/0x250 [ 433.453059][ C0] nsim_dev_port_del_all+0x85/0xe0 [ 433.453091][ C0] nsim_dev_reload_destroy+0x11f/0x420 [ 433.453127][ C0] nsim_dev_reload_down+0xdf/0x180 [ 433.453159][ C0] devlink_reload+0x1c2/0x6b0 [ 433.453238][ C0] ? devlink_remote_reload_actions_performed+0xa0/0xa0 [ 433.453270][ C0] ? devlink_try_get+0x159/0x1e0 [ 433.453297][ C0] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 433.453329][ C0] devlink_pernet_pre_exit+0x17e/0x220 [ 433.453379][ C0] ? devlink_nl_cmd_get_dumpit+0x3f0/0x3f0 [ 433.453411][ C0] ? devlink_nl_cmd_get_dumpit+0x3f0/0x3f0 [ 433.453441][ C0] cleanup_net+0x451/0xb00 [ 433.453471][ C0] ? unregister_pernet_device+0x70/0x70 [ 433.453504][ C0] process_one_work+0x996/0x1610 [ 433.453530][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 433.453558][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 433.453587][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 433.453622][ C0] worker_thread+0x665/0x1080 [ 433.453648][ C0] ? __kthread_parkme+0x15f/0x220 [ 433.453679][ C0] ? process_one_work+0x1610/0x1610 [ 433.453712][ C0] kthread+0x2e9/0x3a0 [ 433.453738][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 433.453771][ C0] ret_from_fork+0x1f/0x30 [ 433.453811][ C0] [ 433.453821][ C0] [ 433.453825][ C0] Allocated by task 3885: [ 433.453838][ C0] kasan_save_stack+0x1e/0x40 [ 433.453886][ C0] __kasan_slab_alloc+0x85/0xb0 [ 433.453914][ C0] kmem_cache_alloc+0x265/0x560 [ 433.453941][ C0] copy_net_ns+0x125/0x760 [ 433.453967][ C0] create_new_namespaces+0x3f6/0xb20 [ 433.453999][ C0] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 433.454024][ C0] ksys_unshare+0x445/0x920 [ 433.454048][ C0] __x64_sys_unshare+0x2d/0x40 [ 433.454071][ C0] do_syscall_64+0x35/0x80 [ 433.454097][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.454123][ C0] [ 433.454127][ C0] Freed by task 11486: [ 433.454139][ C0] kasan_save_stack+0x1e/0x40 [ 433.454166][ C0] kasan_set_track+0x21/0x30 [ 433.454193][ C0] kasan_set_free_info+0x20/0x30 [ 433.454222][ C0] ____kasan_slab_free+0x13d/0x180 [ 433.454250][ C0] kmem_cache_free.part.0+0xa9/0x240 [ 433.454278][ C0] cleanup_net+0x8ba/0xb00 [ 433.454305][ C0] process_one_work+0x996/0x1610 [ 433.454326][ C0] worker_thread+0x665/0x1080 [ 433.454349][ C0] kthread+0x2e9/0x3a0 [ 433.454375][ C0] ret_from_fork+0x1f/0x30 [ 433.454401][ C0] [ 433.454405][ C0] Last potentially related work creation: [ 433.454412][ C0] kasan_save_stack+0x1e/0x40 [ 433.454439][ C0] __kasan_record_aux_stack+0x7e/0x90 [ 433.454469][ C0] insert_work+0x48/0x350 [ 433.454520][ C0] __queue_work+0x62e/0x1140 [ 433.454549][ C0] call_timer_fn+0x1a5/0x6b0 [ 433.454573][ C0] __run_timers.part.0+0x4a3/0xa80 [ 433.454597][ C0] run_timer_softirq+0x152/0x1d0 [ 433.454621][ C0] __do_softirq+0x29b/0x9c2 [ 433.454647][ C0] [ 433.454651][ C0] Second to last potentially related work creation: [ 433.454659][ C0] kasan_save_stack+0x1e/0x40 [ 433.454686][ C0] __kasan_record_aux_stack+0x7e/0x90 [ 433.454728][ C0] insert_work+0x48/0x350 [ 433.454755][ C0] __queue_work+0x62e/0x1140 [ 433.454785][ C0] call_timer_fn+0x1a5/0x6b0 [ 433.454807][ C0] __run_timers.part.0+0x4a3/0xa80 [ 433.454832][ C0] run_timer_softirq+0x152/0x1d0 [ 433.454856][ C0] __do_softirq+0x29b/0x9c2 [ 433.454881][ C0] [ 433.454885][ C0] The buggy address belongs to the object at ffff88801ad301c0 [ 433.454885][ C0] which belongs to the cache net_namespace of size 6784 [ 433.454908][ C0] The buggy address is located 704 bytes inside of [ 433.454908][ C0] 6784-byte region [ffff88801ad301c0, ffff88801ad31c40) [ 433.454934][ C0] [ 433.454938][ C0] The buggy address belongs to the physical page: [ 433.454948][ C0] page:ffffea00006b4c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ad30 [ 433.454977][ C0] head:ffffea00006b4c00 order:1 compound_mapcount:0 compound_pincount:0 [ 433.454997][ C0] memcg:ffff88807f2a1e41 [ 433.455006][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 433.455044][ C0] raw: 00fff00000010200 ffffea0000726508 ffff8880114e3f50 ffff8880114d3600 [ 433.455070][ C0] raw: 0000000000000000 ffff88801ad301c0 0000000100000001 ffff88807f2a1e41 [ 433.455084][ C0] page dumped because: kasan: bad access detected [ 433.455097][ C0] page_owner tracks the page as allocated [ 433.455104][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 3885, tgid 3885 (syz-executor.0), ts 66206628827, free_ts 58584232453 [ 433.455152][ C0] get_page_from_freelist+0xba2/0x3e00 [ 433.455186][ C0] __alloc_pages+0x1b2/0x500 [ 433.455207][ C0] cache_grow_begin+0x75/0x350 [ 433.455231][ C0] cache_alloc_refill+0x27f/0x380 [ 433.455257][ C0] kmem_cache_alloc+0x450/0x560 [ 433.455280][ C0] copy_net_ns+0x125/0x760 [ 433.455305][ C0] create_new_namespaces+0x3f6/0xb20 [ 433.455336][ C0] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 433.455360][ C0] ksys_unshare+0x445/0x920 [ 433.455380][ C0] __x64_sys_unshare+0x2d/0x40 [ 433.455403][ C0] do_syscall_64+0x35/0x80 [ 433.455427][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.455453][ C0] page last free stack trace: [ 433.455459][ C0] free_pcp_prepare+0x549/0xd20 [ 433.455481][ C0] free_unref_page+0x19/0x6a0 [ 433.455504][ C0] slabs_destroy+0x89/0xc0 [ 433.455526][ C0] ___cache_free+0x34e/0x670 [ 433.455551][ C0] qlist_free_all+0x4f/0x1b0 [ 433.455602][ C0] kasan_quarantine_reduce+0x180/0x200 [ 433.455625][ C0] __kasan_slab_alloc+0x97/0xb0 [ 433.455651][ C0] kmem_cache_alloc+0x265/0x560 [ 433.455674][ C0] getname_flags.part.0+0x50/0x4f0 [ 433.455737][ C0] getname_flags+0x9a/0xe0 [ 433.455763][ C0] vfs_fstatat+0x73/0xb0 [ 433.455783][ C0] __do_sys_newfstatat+0x91/0x110 [ 433.455805][ C0] do_syscall_64+0x35/0x80 [ 433.455828][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.455854][ C0] [ 433.455859][ C0] Memory state around the buggy address: [ 433.455870][ C0] ffff88801ad30380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.455888][ C0] ffff88801ad30400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.455906][ C0] >ffff88801ad30480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.455920][ C0] ^ [ 433.455932][ C0] ffff88801ad30500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.455950][ C0] ffff88801ad30580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.455964][ C0] ================================================================== [ 433.456044][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 433.456055][ C0] CPU: 0 PID: 11486 Comm: kworker/u4:2 Not tainted 5.18.0-rc3-syzkaller-00016-gb253435746d9-dirty #0 [ 433.456080][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.456096][ C0] Workqueue: netns cleanup_net [ 433.456124][ C0] Call Trace: [ 433.456130][ C0] [ 433.456138][ C0] dump_stack_lvl+0xcd/0x134 [ 433.456168][ C0] panic+0x2d7/0x636 [ 433.456225][ C0] ? panic_print_sys_info.part.0+0x10b/0x10b [ 433.456254][ C0] ? tcp_retransmit_timer+0x2ef3/0x3360 [ 433.456285][ C0] ? tcp_retransmit_timer+0x2ef3/0x3360 [ 433.456313][ C0] end_report.part.0+0x3f/0x7c [ 433.456342][ C0] kasan_report.cold+0x93/0x1c6 [ 433.456371][ C0] ? tcp_retransmit_timer+0x2ef3/0x3360 [ 433.456398][ C0] tcp_retransmit_timer+0x2ef3/0x3360 [ 433.456427][ C0] ? tcp_mstamp_refresh+0x12/0xa0 [ 433.456452][ C0] ? tcp_delack_timer+0x320/0x320 [ 433.456479][ C0] ? ktime_get+0x38a/0x470 [ 433.456506][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 433.456536][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 433.456565][ C0] ? ktime_get+0x30b/0x470 [ 433.456591][ C0] tcp_write_timer_handler+0x5e6/0xbc0 [ 433.456620][ C0] tcp_write_timer+0xa2/0x2b0 [ 433.456646][ C0] ? tcp_write_timer_handler+0xbc0/0xbc0 [ 433.456674][ C0] call_timer_fn+0x1a5/0x6b0 [ 433.456696][ C0] ? timer_fixup_activate+0x350/0x350 [ 433.456729][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 433.456761][ C0] ? tcp_write_timer_handler+0xbc0/0xbc0 [ 433.456788][ C0] __run_timers.part.0+0x679/0xa80 [ 433.456814][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 433.456839][ C0] run_timer_softirq+0xb3/0x1d0 [ 433.456863][ C0] __do_softirq+0x29b/0x9c2 [ 433.456890][ C0] __irq_exit_rcu+0x123/0x180 [ 433.456920][ C0] irq_exit_rcu+0x5/0x20 [ 433.456948][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 433.456979][ C0] [ 433.456986][ C0] [ 433.456993][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 433.457022][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 433.457054][ C0] Code: 48 89 ef 5d e9 a1 72 4a 00 5d be 03 00 00 00 e9 86 c0 74 02 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 <65> 8b 05 b9 aa 8a 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 433.457079][ C0] RSP: 0018:ffffc90004aa7058 EFLAGS: 00000293 [ 433.457099][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 433.457115][ C0] RDX: ffff88804c5f0100 RSI: ffffffff815eb9c8 RDI: 0000000000000003 [ 433.457133][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff9002f907 [ 433.457152][ C0] R10: ffffffff815eb9be R11: 0000000000000000 R12: ffffffff84e0fb70 [ 433.457170][ C0] R13: 0000000000000200 R14: ffffc90004aa70b8 R15: dffffc0000000000 [ 433.457188][ C0] ? loopback_xmit+0x730/0x730 [ 433.457218][ C0] ? console_unlock+0x81e/0xdd0 [ 433.457245][ C0] ? console_unlock+0x828/0xdd0 [ 433.457273][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 433.457302][ C0] console_unlock+0x82e/0xdd0 [ 433.457329][ C0] ? devkmsg_read+0x730/0x730 [ 433.457355][ C0] ? lock_release+0x720/0x720 [ 433.457382][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 433.457414][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 433.457443][ C0] vprintk_emit+0x1b4/0x5f0 [ 433.457471][ C0] dev_vprintk_emit+0x36e/0x3b2 [ 433.457502][ C0] ? dev_attr_show.cold+0x3a/0x3a [ 433.457532][ C0] ? arch_stack_walk+0x5c/0xe0 [ 433.457562][ C0] dev_printk_emit+0xba/0xf1 [ 433.457590][ C0] ? dev_vprintk_emit+0x3b2/0x3b2 [ 433.457620][ C0] ? lock_chain_count+0x20/0x20 [ 433.457646][ C0] ? mark_lock.part.0+0xee/0x1910 [ 433.457672][ C0] ? create_prof_cpu_mask+0x20/0x20 [ 433.457707][ C0] __netdev_printk+0x1c6/0x27a [ 433.457738][ C0] netdev_info+0xd7/0x109 [ 433.457767][ C0] ? netdev_notice+0x109/0x109 [ 433.457800][ C0] nsim_udp_tunnel_unset_port.cold+0x95/0xb8 [ 433.457831][ C0] __udp_tunnel_nic_device_sync.part.0+0xa4c/0xcb0 [ 433.457862][ C0] ? unregister_netdevice_many+0x10c7/0x1890 [ 433.457892][ C0] ? kmalloc_array.constprop.0+0x20/0x20 [ 433.457920][ C0] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 433.457949][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 433.457980][ C0] ? udp_tunnel_nic_entry_adj+0x239/0x300 [ 433.458007][ C0] udp_tunnel_nic_flush+0x2b4/0x5e0 [ 433.458033][ C0] udp_tunnel_nic_netdevice_event+0x66a/0x1a60 [ 433.458062][ C0] ? netconsole_netdev_event+0x262/0x3c0 [ 433.458094][ C0] ? mpls_dev_notify+0x280/0x8a0 [ 433.458123][ C0] notifier_call_chain+0xb5/0x200 [ 433.458149][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 433.458175][ C0] unregister_netdevice_many+0x92e/0x1890 [ 433.458205][ C0] ? __mutex_lock+0x21a/0x12f0 [ 433.458233][ C0] ? netdev_pick_tx+0xbe0/0xbe0 [ 433.458259][ C0] ? nsim_destroy+0x35/0x190 [ 433.458291][ C0] ? mutex_lock_io_nested+0x1150/0x1150 [ 433.458320][ C0] unregister_netdevice_queue+0x2dd/0x3c0 [ 433.458351][ C0] ? unregister_netdevice_many+0x1890/0x1890 [ 433.458381][ C0] ? queue_delayed_work_on+0xe6/0x120 [ 433.458408][ C0] ? lockdep_hardirqs_on+0x79/0x100 [ 433.458437][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 433.458467][ C0] ? queue_delayed_work_on+0xbb/0x120 [ 433.458493][ C0] nsim_destroy+0x3f/0x190 [ 433.458522][ C0] __nsim_dev_port_del+0x191/0x250 [ 433.458554][ C0] nsim_dev_port_del_all+0x85/0xe0 [ 433.458585][ C0] nsim_dev_reload_destroy+0x11f/0x420 [ 433.458616][ C0] nsim_dev_reload_down+0xdf/0x180 [ 433.458647][ C0] devlink_reload+0x1c2/0x6b0 [ 433.458672][ C0] ? devlink_remote_reload_actions_performed+0xa0/0xa0 [ 433.458707][ C0] ? devlink_try_get+0x159/0x1e0 [ 433.458733][ C0] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 433.458762][ C0] devlink_pernet_pre_exit+0x17e/0x220 [ 433.458790][ C0] ? devlink_nl_cmd_get_dumpit+0x3f0/0x3f0 [ 433.458820][ C0] ? devlink_nl_cmd_get_dumpit+0x3f0/0x3f0 [ 433.458847][ C0] cleanup_net+0x451/0xb00 [ 433.458874][ C0] ? unregister_pernet_device+0x70/0x70 [ 433.458906][ C0] process_one_work+0x996/0x1610 [ 433.458930][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 433.458955][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 433.458983][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 433.459015][ C0] worker_thread+0x665/0x1080 [ 433.459039][ C0] ? __kthread_parkme+0x15f/0x220 [ 433.459066][ C0] ? process_one_work+0x1610/0x1610 [ 433.459089][ C0] kthread+0x2e9/0x3a0 [ 433.459116][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 433.459147][ C0] ret_from_fork+0x1f/0x30 [ 433.459177][ C0] [ 433.459360][ C0] Kernel Offset: disabled [ 435.297187][ C0] Rebooting in 86400 seconds..