lo speed is unknown, defaulting to 1000 lo speed is unknown, defaulting to 1000 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 10227 at net/ipv6/ip6mr.c:419 ip6mr_can_free_table net/ipv6/ip6mr.c:113 [inline] WARNING: CPU: 0 PID: 10227 at net/ipv6/ip6mr.c:419 ip6mr_free_table+0x94/0xf4 net/ipv6/ip6mr.c:419 Modules linked in: CPU: 0 UID: 0 PID: 10227 Comm: syz.2.2516 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 Hardware name: linux,dummy-virt (DT) pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip6mr_free_table+0x94/0xf4 net/ipv6/ip6mr.c:419 lr : instrument_atomic_read include/linux/instrumented.h:68 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : refcount_read include/linux/refcount.h:136 [inline] lr : check_net include/net/net_namespace.h:293 [inline] lr : ip6mr_can_free_table net/ipv6/ip6mr.c:113 [inline] lr : ip6mr_free_table+0x48/0xf4 net/ipv6/ip6mr.c:419 sp : ffff8000a0f475e0 x29: ffff8000a0f475e0 x28: ffff000019de4930 x27: 1fffe00004b5e800 x26: ffff000019de3a80 x25: dead000000000100 x24: dead000000000122 x23: ffff000019de4930 x22: ffff000019de4930 x21: ffff000019de3a80 x20: ffff000019de3bc4 x19: ffff000025af4000 x18: 00000000671d0a6c x17: 0000000000000000 x16: 0000000000000000 x15: 1fffe0000238a514 x14: 1ffff000110e62fd x13: ffff000011c528c0 x12: ffff6000033bc779 x11: 1fffe000033bc778 x10: ffff6000033bc778 x9 : dfff800000000000 x8 : ffff000019de3bc7 x7 : 0000000000000001 x6 : ffff6000033bc778 x5 : ffff000019de3bc4 x4 : ffff6000033bc779 x3 : ffff800084d04cb8 x2 : 1fffe000033bc928 x1 : 0000000000000000 x0 : ffff000016084500 Call trace: ip6mr_can_free_table net/ipv6/ip6mr.c:113 [inline] (P) ip6mr_free_table+0x94/0xf4 net/ipv6/ip6mr.c:419 (P) instrument_atomic_read include/linux/instrumented.h:68 [inline] (L) atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] (L) refcount_read include/linux/refcount.h:136 [inline] (L) check_net include/net/net_namespace.h:293 [inline] (L) ip6mr_can_free_table net/ipv6/ip6mr.c:113 [inline] (L) ip6mr_free_table+0x48/0xf4 net/ipv6/ip6mr.c:419 (L) ip6mr_rules_exit+0x104/0x22c net/ipv6/ip6mr.c:283 ip6mr_net_exit_batch+0x50/0x9c net/ipv6/ip6mr.c:1388 ops_exit_list+0xf0/0x140 net/core/net_namespace.c:177 setup_net+0x510/0x700 net/core/net_namespace.c:394 copy_net_ns+0x1cc/0x510 net/core/net_namespace.c:500 create_new_namespaces+0x300/0x844 kernel/nsproxy.c:110 copy_namespaces+0x2b4/0x34c kernel/nsproxy.c:179 copy_process+0x1788/0x50e0 kernel/fork.c:2398 kernel_clone+0x140/0x7e4 kernel/fork.c:2807 __do_sys_clone+0xb8/0xfc kernel/fork.c:2950 __se_sys_clone kernel/fork.c:2918 [inline] __arm64_sys_clone+0xa4/0xfc kernel/fork.c:2918 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x50/0x180 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 47356 hardirqs last enabled at (47355): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (47355): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (47356): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (47304): [] sock_orphan include/net/sock.h:2023 [inline] softirqs last enabled at (47304): [] sk_common_release+0x108/0x2f4 net/core/sock.c:3845 softirqs last disabled at (47302): [] sock_orphan include/net/sock.h:2019 [inline] softirqs last disabled at (47302): [] sk_common_release+0xa0/0x2f4 net/core/sock.c:3845 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 10227 at net/ipv4/ipmr.c:440 ipmr_can_free_table net/ipv4/ipmr.c:125 [inline] WARNING: CPU: 0 PID: 10227 at net/ipv4/ipmr.c:440 ipmr_free_table+0x94/0xf4 net/ipv4/ipmr.c:440 Modules linked in: CPU: 0 UID: 0 PID: 10227 Comm: syz.2.2516 Tainted: G W 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 Tainted: [W]=WARN Hardware name: linux,dummy-virt (DT) pstate: 10000005 (nzcV daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ipmr_free_table+0x94/0xf4 net/ipv4/ipmr.c:440 lr : instrument_atomic_read include/linux/instrumented.h:68 [inline] lr : atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] lr : refcount_read include/linux/refcount.h:136 [inline] lr : check_net include/net/net_namespace.h:293 [inline] lr : ipmr_can_free_table net/ipv4/ipmr.c:125 [inline] lr : ipmr_free_table+0x48/0xf4 net/ipv4/ipmr.c:440 sp : ffff8000a0f475e0 x29: ffff8000a0f475e0 x28: ffff000019de43c8 x27: 1fffe00002e08000 x26: ffff000019de3a80 x25: dead000000000100 x24: dead000000000122 x23: ffff000019de43c8 x22: ffff000019de43c8 x21: ffff000019de3a80 x20: ffff000019de3bc4 x19: ffff000017040000 x18: 00000000671d0a6c x17: 0000000000000000 x16: 0000000000000000 x15: 1fffe0000238a514 x14: 1ffff000110e62fd x13: ffff000011c528c0 x12: ffff6000033bc779 x11: 1fffe000033bc778 x10: ffff6000033bc778 x9 : dfff800000000000 x8 : ffff000019de3bc7 x7 : 0000000000000001 x6 : ffff6000033bc778 x5 : ffff000019de3bc4 x4 : ffff6000033bc779 x3 : ffff800084a83090 x2 : 1fffe000033bc87b x1 : 0000000000000000 x0 : ffff00001e10e100 Call trace: ipmr_can_free_table net/ipv4/ipmr.c:125 [inline] (P) ipmr_free_table+0x94/0xf4 net/ipv4/ipmr.c:440 (P) instrument_atomic_read include/linux/instrumented.h:68 [inline] (L) atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] (L) refcount_read include/linux/refcount.h:136 [inline] (L) check_net include/net/net_namespace.h:293 [inline] (L) ipmr_can_free_table net/ipv4/ipmr.c:125 [inline] (L) ipmr_free_table+0x48/0xf4 net/ipv4/ipmr.c:440 (L) ipmr_rules_exit+0x104/0x22c net/ipv4/ipmr.c:295 ipmr_net_exit_batch+0x50/0x9c net/ipv4/ipmr.c:3160 ops_exit_list+0xf0/0x140 net/core/net_namespace.c:177 setup_net+0x510/0x700 net/core/net_namespace.c:394 copy_net_ns+0x1cc/0x510 net/core/net_namespace.c:500 create_new_namespaces+0x300/0x844 kernel/nsproxy.c:110 copy_namespaces+0x2b4/0x34c kernel/nsproxy.c:179 copy_process+0x1788/0x50e0 kernel/fork.c:2398 kernel_clone+0x140/0x7e4 kernel/fork.c:2807 __do_sys_clone+0xb8/0xfc kernel/fork.c:2950 __se_sys_clone kernel/fork.c:2918 [inline] __arm64_sys_clone+0xa4/0xfc kernel/fork.c:2918 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x50/0x180 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 48902 hardirqs last enabled at (48901): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (48901): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (48902): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (48768): [] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (48768): [] handle_softirqs+0x88c/0xdb4 kernel/softirq.c:582 softirqs last disabled at (48753): [] __do_softirq+0x14/0x20 kernel/softirq.c:588 ---[ end trace 0000000000000000 ]---