------------[ cut here ]------------ WARNING: CPU: 0 PID: 1381 at drivers/net/netdevsim/fib.c:466 nsim_fib6_rt_nh_del+0x267/0x330 drivers/net/netdevsim/fib.c:466 Modules linked in: CPU: 0 PID: 1381 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:nsim_fib6_rt_nh_del+0x267/0x330 drivers/net/netdevsim/fib.c:466 Code: e8 ae c0 4b fc 85 db 74 32 e8 25 b9 4b fc 48 89 ef e8 0d 09 8e fc 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0e b9 4b fc e8 09 b9 4b fc <0f> 0b 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f8 b8 4b fc e8 f3 b8 4b fc RSP: 0018:ffffc90001c1e428 EFLAGS: 00010246 RAX: 0000000000040000 RBX: dffffc0000000000 RCX: ffffc90001f21000 RDX: 0000000000040000 RSI: ffffffff85271ce7 RDI: ffff888026680280 RBP: ffff8880266802b8 R08: 0000000000000001 R09: 0000000000000000 R10: ffffffff85278160 R11: 0000000000000000 R12: ffff888020fb7d10 R13: ffff8880151f5600 R14: ffff8880266802b8 R15: ffff888026680280 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0063) knlGS:00000000f55e1b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000055aae8da4160 CR3: 000000002da3a000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nsim_fib6_rt_remove drivers/net/netdevsim/fib.c:706 [inline] nsim_fib6_event drivers/net/netdevsim/fib.c:738 [inline] nsim_fib_event drivers/net/netdevsim/fib.c:757 [inline] nsim_fib_event_nb+0x10e3/0x2840 drivers/net/netdevsim/fib.c:785 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 atomic_notifier_call_chain+0x8d/0x170 kernel/notifier.c:217 call_fib_notifiers+0x166/0x290 net/core/fib_notifier.c:35 call_fib6_entry_notifiers net/ipv6/ip6_fib.c:400 [inline] fib6_del_route net/ipv6/ip6_fib.c:1985 [inline] fib6_del+0xefc/0x15a0 net/ipv6/ip6_fib.c:2026 fib6_clean_node+0x398/0x5c0 net/ipv6/ip6_fib.c:2188 fib6_walk_continue+0x4aa/0x8e0 net/ipv6/ip6_fib.c:2110 fib6_walk+0x182/0x370 net/ipv6/ip6_fib.c:2158 fib6_clean_tree+0xdb/0x120 net/ipv6/ip6_fib.c:2238 __fib6_clean_all+0x120/0x290 net/ipv6/ip6_fib.c:2254 rt6_sync_down_dev net/ipv6/route.c:4780 [inline] rt6_disable_ip+0x77f/0x890 net/ipv6/route.c:4785 addrconf_ifdown.isra.0+0xf6/0x1590 net/ipv6/addrconf.c:3704 addrconf_notify+0x55c/0x23f0 net/ipv6/addrconf.c:3629 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2040 call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x1da/0x2b0 net/core/dev.c:8519 dev_change_flags+0x100/0x160 net/core/dev.c:8555 do_setlink+0x891/0x3a70 net/core/rtnetlink.c:2708 rtnl_group_changelink net/core/rtnetlink.c:3227 [inline] __rtnl_newlink+0xde5/0x16e0 net/core/rtnetlink.c:3381 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3491 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5553 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2494 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline] netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1330 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2345 ___sys_sendmsg+0xf3/0x170 net/socket.c:2399 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2432 do_syscall_32_irqs_on arch/x86/entry/common.c:77 [inline] __do_fast_syscall_32+0x56/0x80 arch/x86/entry/common.c:139 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:164 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c RIP: 0023:0xf7fe7549 Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 RSP: 002b:00000000f55e15fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000