------------[ cut here ]------------ WARNING: CPU: 1 PID: 109 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0xc0/0x164 net/xfrm/xfrm_state.c:3315 Modules linked in: CPU: 1 UID: 0 PID: 109 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : xfrm_state_fini+0xc0/0x164 net/xfrm/xfrm_state.c:3303 lr : xfrm_state_fini+0x3c/0x164 net/xfrm/xfrm_state.c:3301 sp : ffff800083213c50 x29: ffff800083213c50 x28: 0000000000000000 x27: 0000000000000000 x26: ffff800082b74940 x25: 0000000000000001 x24: 0000000000000001 x23: ffff800082b81e00 x22: ffff800082b749b8 x21: ffff800082b749b8 x20: fbf000000a5a0000 x19: fbf000000a5a0000 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000002 x14: fbf000000453a580 x13: 00000000000003f9 x12: 0000000065e0fc20 x11: 0000000000000040 x10: ffff800082939d50 x9 : ffff800082939d48 x8 : f1f0000003400028 x7 : 0000000000000000 x6 : 0000000000000000 x5 : f1f0000003400000 x4 : f1f0000003400058 x3 : 0000000000000000 x2 : 0000000000000000 x1 : f3f00000049e0418 x0 : fbf000000a5a0c80 Call trace: xfrm_state_fini+0xc0/0x164 net/xfrm/xfrm_state.c:3315 (P) xfrm_net_exit+0x30/0x50 net/xfrm/xfrm_policy.c:4348 ops_exit_list net/core/net_namespace.c:198 [inline] ops_undo_list+0xec/0x23c net/core/net_namespace.c:251 cleanup_net+0x1f4/0x3cc net/core/net_namespace.c:682 process_one_work+0x178/0x2cc kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x250/0x358 kernel/workqueue.c:3400 kthread+0x130/0x1fc kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 ---[ end trace 0000000000000000 ]---