bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves 8<--- cut here --- Unable to handle kernel paging request at virtual address 1fff7663 when write [1fff7663] *pgd=80000080004003, *pmd=00000000 Internal error: Oops: a06 [#1] PREEMPT SMP ARM Modules linked in: CPU: 1 PID: 13148 Comm: kworker/u8:1 Not tainted 6.10.0-rc7-syzkaller #0 Hardware name: ARM-Versatile Express Workqueue: netns cleanup_net PC is at __skb_unlink include/linux/skbuff.h:2390 [inline] PC is at __skb_dequeue include/linux/skbuff.h:2405 [inline] PC is at __skb_queue_purge_reason include/linux/skbuff.h:3259 [inline] PC is at __skb_queue_purge include/linux/skbuff.h:3265 [inline] PC is at gro_cells_destroy net/core/gro_cells.c:118 [inline] PC is at gro_cells_destroy+0xb0/0x124 net/core/gro_cells.c:106 LR is at kfree_skb include/linux/skbuff.h:1257 [inline] LR is at napi_free_frags include/linux/netdevice.h:3881 [inline] LR is at __netif_napi_del net/core/dev.c:6696 [inline] LR is at __netif_napi_del+0x90/0xec net/core/dev.c:6689 pc : [<81460d18>] lr : [<813fb8b0>] psr: a0000113 sp : dfe25dc8 ip : dfe25da0 fp : dfe25e04 r10: ff7663e0 r9 : a3e4b3e0 r8 : 5b91b000 r7 : 00000000 r6 : 00000000 r5 : 84eedf30 r4 : 00000000 r3 : 1fff7663 r2 : e0ff7663 r1 : 00000055 r0 : ff7663e1 Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 843b3f00 DAC: 00000000 Register r0 information: 0-page vmalloc region starting at 0xff760000 allocated at pcpu_get_vm_areas+0x0/0x12cc mm/vmalloc.c:3094 Register r1 information: non-paged memory Register r2 information: 0-page vmalloc region starting at 0xe0880000 allocated at __devm_ioremap lib/devres.c:42 [inline] Register r2 information: 0-page vmalloc region starting at 0xe0880000 allocated at __devm_ioremap_resource+0x1e0/0x230 lib/devres.c:160 Register r3 information: non-paged memory Register r4 information: NULL pointer Register r5 information: slab kmalloc-cg-2k start 84eed800 pointer offset 1840 size 2048 Register r6 information: NULL pointer Register r7 information: NULL pointer Register r8 information: non-paged memory Register r9 information: non-slab/vmalloc memory Register r10 information: 0-page vmalloc region starting at 0xff760000 allocated at pcpu_get_vm_areas+0x0/0x12cc mm/vmalloc.c:3094 Register r11 information: 2-page vmalloc region starting at 0xdfe24000 allocated at kernel_clone+0xac/0x3e4 kernel/fork.c:2797 Register r12 information: 2-page vmalloc region starting at 0xdfe24000 allocated at kernel_clone+0xac/0x3e4 kernel/fork.c:2797 Process kworker/u8:1 (pid: 13148, stack limit = 0xdfe24000) Stack: (0xdfe25dc8 to 0xdfe26000) 5dc0: 818ffbe4 8260ca7c 821ca53c ff7663f0 8046aa14 84eede60 5de0: dfe25e3c 00000000 dfe25b00 0004e7b0 82604d40 00000003 dfe25e1c dfe25e08 5e00: 8171041c 81460c74 84eed800 dfe25e3c dfe25e7c dfe25e20 8140a43c 81710410 5e20: 82907bf4 827c6a9c 8260ee88 00000000 00000000 dfe25eb0 dfe25e38 858d2b3c 5e40: 840de33c 840de000 00000000 7eff0bb9 dfe25e8c 827c64c0 827c64c0 827c6400 5e60: dfe25ea8 827c64c0 84fc3300 ffffffd8 dfe25e8c dfe25e80 8141631c 8140a29c 5e80: dfe25eec dfe25e90 813f07cc 81416318 818ffbe4 8027cc9c dfe25eec 827c6400 5ea0: 80827c24 813ef924 847099a0 84fc0020 00000100 00000122 00000000 7eff0bb9 5ec0: 81a02b44 846b6280 827c6418 82c19600 82c0e600 02000000 83721800 82c19615 5ee0: dfe25f44 dfe25ef0 80267258 813f0550 81a02940 83721800 dfe25f2c dfe25f08 5f00: 8027e69c 802ae24c dfe25f2c dfe25f18 dfe25f44 00000000 80263a6c 846b6280 5f20: 82c0e600 82604d40 82c0e620 61c88647 846b62ac 83721800 dfe25f84 dfe25f48 5f40: 80267e80 802670b0 dfe25f64 dfe25f58 818ffbe4 8027cc9c dfe25f84 851e1300 5f60: 83721800 80267c94 846b6280 851e1180 eb9f5e78 00000000 dfe25fac dfe25f88 5f80: 802712c0 80267ca0 851e1300 802711bc 00000000 00000000 00000000 00000000 5fa0: 00000000 dfe25fb0 80200114 802711c8 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000 Call trace: [<81460c68>] (gro_cells_destroy) from [<8171041c>] (ip6gre_dev_free+0x18/0x24 net/ipv6/ip6_gre.c:1444) r10:00000003 r9:82604d40 r8:0004e7b0 r7:dfe25b00 r6:00000000 r5:dfe25e3c r4:84eede60 [<81710404>] (ip6gre_dev_free) from [<8140a43c>] (netdev_run_todo+0x1ac/0x558 net/core/dev.c:10693) r5:dfe25e3c r4:84eed800 [<8140a290>] (netdev_run_todo) from [<8141631c>] (rtnl_unlock+0x10/0x14 net/core/rtnetlink.c:152) r10:ffffffd8 r9:84fc3300 r8:827c64c0 r7:dfe25ea8 r6:827c6400 r5:827c64c0 r4:827c64c0 [<8141630c>] (rtnl_unlock) from [<813f07cc>] (cleanup_net+0x288/0x438 net/core/net_namespace.c:636) [<813f0544>] (cleanup_net) from [<80267258>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3248) r10:82c19615 r9:83721800 r8:02000000 r7:82c0e600 r6:82c19600 r5:827c6418 r4:846b6280 [<802670a4>] (process_one_work) from [<80267e80>] (process_scheduled_works kernel/workqueue.c:3329 [inline]) [<802670a4>] (process_one_work) from [<80267e80>] (worker_thread+0x1ec/0x404 kernel/workqueue.c:3409) r10:83721800 r9:846b62ac r8:61c88647 r7:82c0e620 r6:82604d40 r5:82c0e600 r4:846b6280 [<80267c94>] (worker_thread) from [<802712c0>] (kthread+0x104/0x134 kernel/kthread.c:389) r10:00000000 r9:eb9f5e78 r8:851e1180 r7:846b6280 r6:80267c94 r5:83721800 r4:851e1300 [<802711bc>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:134) Exception stack(0xdfe25fb0 to 0xdfe25ff8) 5fa0: 00000000 00000000 00000000 00000000 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:802711bc r4:851e1300 Code: e58a3008 e1c020d0 e1c060f0 e5823004 (e5832000) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: e58a3008 str r3, [sl, #8] 4: e1c020d0 ldrd r2, [r0] 8: e1c060f0 strd r6, [r0] c: e5823004 str r3, [r2, #4] * 10: e5832000 str r2, [r3] <-- trapping instruction