bond0: Enslaving bond_slave_1 as an active interface with an up link IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready team0: Port device team_slave_0 added kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] SMP KASAN IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready CPU: 0 PID: 23 Comm: kworker/u4:1 Not tainted 4.18.0-rc8+ #176 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net team0: Port device team_slave_1 added RIP: 0010:get_work_pool+0x19f/0x260 kernel/workqueue.c:716 Code: 48 83 c4 60 5b 41 5c 41 5d 41 5e 5d c3 e8 99 26 2d 00 48 81 e3 00 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 9e 00 00 00 48 8b 1b eb 99 e8 6d 26 2d 00 e8 e8 IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready RSP: 0018:ffff8801d982f0e8 EFLAGS: 00010006 RAX: dffffc0000000000 RBX: 0000001ffffffe00 RCX: ffffffff814eeeea RDX: 00000003ffffffc0 RSI: ffffffff814eef67 RDI: 0000000000000007 RBP: ffff8801d982f168 R08: ffff8801d9820600 R09: ffffed003295e40e R10: ffffed003295e40e R11: ffff880194af2077 R12: 0000000000000004 R13: 1ffff1003b305e1d R14: ffff8801d982f148 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f968b2f1de0 CR3: 0000000007e6a000 CR4: 00000000001406f0 Call Trace: start_flush_work kernel/workqueue.c:2855 [inline] flush_work+0x10f/0x900 kernel/workqueue.c:2917 xfrm_policy_fini+0xb9/0x560 net/xfrm/xfrm_policy.c:2877 xfrm_net_exit+0x1d/0x70 net/xfrm/xfrm_policy.c:2938 ops_exit_list.isra.7+0xb0/0x160 net/core/net_namespace.c:153 cleanup_net+0x537/0xb50 net/core/net_namespace.c:551 process_one_work+0xc73/0x1ba0 kernel/workqueue.c:2153 worker_thread+0x189/0x13c0 kernel/workqueue.c:2296 kthread+0x345/0x410 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412 Modules linked in: Dumping ftrace buffer: --------------------------------- syz-exec-9943 0.N.4 108294469us : 0: }D syz-exec-9948 0.N.4 108321703us : 0: }D syz-exec-9948 0.N.4 108321736us : 0: }D --------------------------------- ---[ end trace f7c58ea2a14dd8c0 ]--- RIP: 0010:get_work_pool+0x19f/0x260 kernel/workqueue.c:716 Code: 48 83 c4 60 5b 41 5c 41 5d 41 5e 5d c3 e8 99 26 2d 00 48 81 e3 00 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 9e 00 00 00 48 8b 1b eb 99 e8 6d 26 2d 00 e8 e8 RSP: 0018:ffff8801d982f0e8 EFLAGS: 00010006 RAX: dffffc0000000000 RBX: 0000001ffffffe00 RCX: ffffffff814eeeea RDX: 00000003ffffffc0 RSI: ffffffff814eef67 RDI: 0000000000000007 RBP: ffff8801d982f168 R08: ffff8801d9820600 R09: ffffed003295e40e R10: ffffed003295e40e R11: ffff880194af2077 R12: 0000000000000004 R13: 1ffff1003b305e1d R14: ffff8801d982f148 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f968b2f1de0 CR3: 0000000007e6a000 CR4: 00000000001406f0