netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 8<--- cut here --- Unable to handle kernel paging request at virtual address 7465726c when read [7465726c] *pgd=80000080005003, *pmd=00000000 Internal error: Oops: 206 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express Workqueue: netns cleanup_net PC is at __rb_change_child include/linux/rbtree_augmented.h:199 [inline] PC is at __rb_erase_augmented include/linux/rbtree_augmented.h:242 [inline] PC is at rb_erase+0x270/0x394 lib/rbtree.c:443 LR is at 0x0 pc : [<81a400f8>] lr : [<00000000>] psr: 200e0113 sp : df849c38 ip : 74657264 fp : df849c4c r10: df849e18 r9 : 85138000 r8 : 00000004 r7 : 84a32500 r6 : 00000001 r5 : 8541ccc8 r4 : 8541cc80 r3 : 74657267 r2 : 00000000 r1 : 84a32534 r0 : 8541cce8 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 846aebc0 DAC: fffffffd Register r0 information: slab kmalloc-128 start 8541cc80 pointer offset 104 size 128 Register r1 information: slab kmalloc-128 start 84a32500 pointer offset 52 size 128 Register r2 information: NULL pointer Register r3 information: non-paged memory Register r4 information: slab kmalloc-128 start 8541cc80 pointer offset 0 size 128 Register r5 information: slab kmalloc-128 start 8541cc80 pointer offset 72 size 128 Register r6 information: non-paged memory Register r7 information: slab kmalloc-128 start 84a32500 pointer offset 0 size 128 Register r8 information: non-paged memory Register r9 information: slab kmalloc-cg-2k start 85138000 pointer offset 0 size 2048 Register r10 information: 2-page vmalloc region starting at 0xdf848000 allocated at kernel_clone+0xac/0x3e4 kernel/fork.c:2844 Register r11 information: 2-page vmalloc region starting at 0xdf848000 allocated at kernel_clone+0xac/0x3e4 kernel/fork.c:2844 Register r12 information: non-paged memory Process kworker/u8:0 (pid: 12, stack limit = 0xdf848000) Stack: (0xdf849c38 to 0xdf84a000) 9c20: 8541cc80 8541ccc8 9c40: df849c8c df849c50 80610f1c 81a3fe94 0000000c 600e0113 dddcc99c 600e0113 9c60: 00000000 70e9309b 857e8804 8565b000 857e8804 00000001 8541cc80 00000021 9c80: df849ccc df849c90 80610f50 80610e58 df849cac df849ca0 81a503b0 82aca2a8 9ca0: 84699b00 70e9309b df849ccc 8565b000 84699b00 8463f800 00000004 8463f810 9cc0: df849ce4 df849cd0 80611020 80610e58 857e8800 84699b00 df849cf4 df849ce8 9ce0: 8198106c 80611004 df849d54 df849cf8 81757b00 81981068 00000000 8122f44c 9d00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9d20: 00000000 70e9309b df849d54 829e16f0 829e15e8 fffffff0 00000000 817578e4 9d40: 84801b40 df849e18 df849d8c df849d58 802926d4 817578f0 83238c00 00000006 9d60: df849d8c df849e18 00000006 84699b00 00000000 8552c7c0 84801b40 00000000 9d80: df849da4 df849d90 8029290c 80292680 00000000 802da2e4 df849dcc df849da8 9da0: 8154bd94 802928f8 8043a2e8 70e9309b df849dcc 000000c0 85138000 00000001 9dc0: df849e64 df849dd0 8155732c 8154bd4c 00000000 00000000 00000000 00000000 9de0: 00000000 8029ce24 82c1f94c 82c20734 829d251c 00000000 00000000 00000000 9e00: 83238c00 df849e98 df849e4c 00000000 df849e10 df849e10 85138000 00000000 9e20: 849b4800 df849e98 df849e44 df849e38 815644cc 70e9309b df849e74 829d1ec4 9e40: 82c1f940 829d1e80 df849e90 829d1ec4 829d1ec4 84698d80 df849e74 df849e68 9e60: 815579bc 81556dec df849ed4 df849e78 8153c304 815579b0 81a5c2b4 8029ce24 9e80: 82c1f940 829d1e80 808c9b70 81539ec4 84699b20 84699b20 8534610c 83baf10c 9ea0: 00000000 70e9309b 81c01f84 830b8700 829d1e98 8301bc00 8300e600 83238c00 9ec0: 8301bc15 8300f070 df849f2c df849ed8 802873bc 8153c07c 81c01a40 83238c00 9ee0: df849f14 df849ef0 829d1e9c 829d1e98 829d1e9c 829d1e98 df849f2c 00000000 9f00: 80282cf8 830b8700 8300e620 8300e600 82804d40 830b872c 83238c00 61c88647 9f20: df849f6c df849f30 80288004 80287214 81a5c2b4 61c88647 82804d40 61c88647 9f40: 8028eb98 00000001 83238c00 830b8780 df819e48 80287e08 830b8700 00000000 9f60: df849fac df849f70 8028f07c 80287e14 80274ea8 81a5c23c 83238c00 70e9309b 9f80: df849fac 830b51c0 8028ef50 00000000 00000000 00000000 00000000 00000000 9fa0: 00000000 df849fb0 80200114 8028ef5c 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000 Call trace: [<81a3fe88>] (rb_erase) from [<80610f1c>] (erase_entry fs/proc/proc_sysctl.c:189 [inline]) [<81a3fe88>] (rb_erase) from [<80610f1c>] (erase_header fs/proc/proc_sysctl.c:225 [inline]) [<81a3fe88>] (rb_erase) from [<80610f1c>] (start_unregistering fs/proc/proc_sysctl.c:322 [inline]) [<81a3fe88>] (rb_erase) from [<80610f1c>] (drop_sysctl_table+0xd0/0x1ac fs/proc/proc_sysctl.c:1514) r5:8541ccc8 r4:8541cc80 [<80610e4c>] (drop_sysctl_table) from [<80610f50>] (drop_sysctl_table+0x104/0x1ac fs/proc/proc_sysctl.c:1521) r8:00000021 r7:8541cc80 r6:00000001 r5:857e8804 r4:8565b000 [<80610e4c>] (drop_sysctl_table) from [<80611020>] (unregister_sysctl_table fs/proc/proc_sysctl.c:1539 [inline]) [<80610e4c>] (drop_sysctl_table) from [<80611020>] (unregister_sysctl_table+0x28/0x38 fs/proc/proc_sysctl.c:1531) r8:8463f810 r7:00000004 r6:8463f800 r5:84699b00 r4:8565b000 [<80610ff8>] (unregister_sysctl_table) from [<8198106c>] (unregister_net_sysctl_table+0x10/0x14 net/sysctl_net.c:177) r5:84699b00 r4:857e8800 [<8198105c>] (unregister_net_sysctl_table) from [<81757b00>] (__devinet_sysctl_unregister net/ipv4/devinet.c:2701 [inline]) [<8198105c>] (unregister_net_sysctl_table) from [<81757b00>] (devinet_sysctl_unregister net/ipv4/devinet.c:2729 [inline]) [<8198105c>] (unregister_net_sysctl_table) from [<81757b00>] (inetdev_destroy net/ipv4/devinet.c:334 [inline]) [<8198105c>] (unregister_net_sysctl_table) from [<81757b00>] (inetdev_event+0x21c/0x6cc net/ipv4/devinet.c:1656) [<817578e4>] (inetdev_event) from [<802926d4>] (notifier_call_chain+0x60/0x1b4 kernel/notifier.c:85) r10:df849e18 r9:84801b40 r8:817578e4 r7:00000000 r6:fffffff0 r5:829e15e8 r4:829e16f0 [<80292674>] (notifier_call_chain) from [<8029290c>] (raw_notifier_call_chain+0x20/0x28 kernel/notifier.c:453) r10:00000000 r9:84801b40 r8:8552c7c0 r7:00000000 r6:84699b00 r5:00000006 r4:df849e18 [<802928ec>] (raw_notifier_call_chain) from [<8154bd94>] (call_netdevice_notifiers_info+0x54/0xa0 net/core/dev.c:2176) [<8154bd40>] (call_netdevice_notifiers_info) from [<8155732c>] (call_netdevice_notifiers_extack net/core/dev.c:2214 [inline]) [<8154bd40>] (call_netdevice_notifiers_info) from [<8155732c>] (call_netdevice_notifiers net/core/dev.c:2228 [inline]) [<8154bd40>] (call_netdevice_notifiers_info) from [<8155732c>] (unregister_netdevice_many_notify+0x54c/0xbc4 net/core/dev.c:11972) r6:00000001 r5:85138000 r4:000000c0 [<81556de0>] (unregister_netdevice_many_notify) from [<815579bc>] (unregister_netdevice_many+0x18/0x1c net/core/dev.c:12036) r10:84698d80 r9:829d1ec4 r8:829d1ec4 r7:df849e90 r6:829d1e80 r5:82c1f940 r4:829d1ec4 [<815579a4>] (unregister_netdevice_many) from [<8153c304>] (cleanup_net+0x294/0x49c net/core/net_namespace.c:649) [<8153c070>] (cleanup_net) from [<802873bc>] (process_one_work+0x1b4/0x4f4 kernel/workqueue.c:3238) r10:8300f070 r9:8301bc15 r8:83238c00 r7:8300e600 r6:8301bc00 r5:829d1e98 r4:830b8700 [<80287208>] (process_one_work) from [<80288004>] (process_scheduled_works kernel/workqueue.c:3319 [inline]) [<80287208>] (process_one_work) from [<80288004>] (worker_thread+0x1fc/0x3d8 kernel/workqueue.c:3400) r10:61c88647 r9:83238c00 r8:830b872c r7:82804d40 r6:8300e600 r5:8300e620 r4:830b8700 [<80287e08>] (worker_thread) from [<8028f07c>] (kthread+0x12c/0x280 kernel/kthread.c:464) r10:00000000 r9:830b8700 r8:80287e08 r7:df819e48 r6:830b8780 r5:83238c00 r4:00000001 [<8028ef50>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137) Exception stack(0xdf849fb0 to 0xdf849ff8) 9fa0: 00000000 00000000 00000000 00000000 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8028ef50 r4:830b51c0 Code: e5903000 e3530003 9a00001b e3c3c003 (e59c2008) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: e5903000 ldr r3, [r0] 4: e3530003 cmp r3, #3 8: 9a00001b bls 0x7c c: e3c3c003 bic ip, r3, #3 * 10: e59c2008 ldr r2, [ip, #8] <-- trapping instruction