Unable to handle kernel paging request at virtual address 60002be60000 Mem abort info: ESR = 0x96000004 Exception class = DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000c355fd51 [000060002be60000] pgd=0000000000000000 Internal error: Oops: 96000004 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 1151 Comm: syz-executor1 Not tainted 4.16.0-00006-g6eee13dfb529 #1 Hardware name: linux,dummy-virt (DT) pstate: 80400005 (Nzcv daif +PAN -UAO) pc : __percpu_add arch/arm64/include/asm/percpu.h:102 [inline] pc : dev_put include/linux/netdevice.h:3395 [inline] pc : in_dev_finish_destroy+0xcc/0x230 net/ipv4/devinet.c:231 lr : dev_put include/linux/netdevice.h:3395 [inline] lr : in_dev_finish_destroy+0xa4/0x230 net/ipv4/devinet.c:231 sp : ffff8000366f2ee0 x29: ffff8000366f2ee0 x28: ffff800070a42238 x27: ffff20000a917460 x26: ffff20000a917000 x25: 000000000000000a x24: ffff20000a919000 x23: ffff8000366f3000 x22: ffff200009b84da8 x21: 1ffff0000e148448 x20: ffff800063ca5500 x19: ffff800070a42080 x18: 0000000000008a68 x17: 00000000000012b8 x16: 0000000000001068 x15: 0000000000000003 x14: 00000000f2000000 x13: ffff20000a9fb560 x12: 0000000000000002 x11: 0000000000001488 x10: 0000000000000004 x9 : 0000000000000000 x8 : 0000000000000003 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 1fffe4000178908c x3 : 1fffe4000178908c x2 : ffffffffffffffff x1 : 000060002be60000 x0 : 000060002be60000 Process syz-executor1 (pid: 1151, stack limit = 0x00000000491bb014) Call trace: __percpu_add arch/arm64/include/asm/percpu.h:102 [inline] dev_put include/linux/netdevice.h:3395 [inline] in_dev_finish_destroy+0xcc/0x230 net/ipv4/devinet.c:231 in_dev_put include/linux/inetdevice.h:248 [inline] in_dev_rcu_put+0x34/0x48 net/ipv4/devinet.c:287 __rcu_reclaim kernel/rcu/rcu.h:172 [inline] rcu_do_batch kernel/rcu/tree.c:2674 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2933 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2900 [inline] rcu_process_callbacks+0x350/0x988 kernel/rcu/tree.c:2917 __do_softirq+0x318/0x734 kernel/softirq.c:285 do_softirq_own_stack include/linux/interrupt.h:499 [inline] invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x264/0x2d0 kernel/softirq.c:405 __handle_domain_irq+0xd8/0x1a0 kernel/irq/irqdesc.c:646 gic_handle_irq+0x9c/0x1fc drivers/irqchip/irq-gic.c:389 el1_irq+0xb4/0x130 arch/arm64/kernel/entry.S:602 lock_acquire+0xe4/0x140 kernel/locking/lockdep.c:3924 tcpv6_net_exit_batch+0x1c/0x28 net/ipv6/tcp_ipv6.c:1992 ops_exit_list.isra.2+0xe8/0x140 net/core/net_namespace.c:145 setup_net+0x2d4/0x508 net/core/net_namespace.c:316 copy_net_ns+0x148/0x3a0 net/core/net_namespace.c:426 create_new_namespaces+0x318/0x640 kernel/nsproxy.c:107 copy_namespaces+0x270/0x2e8 kernel/nsproxy.c:165 copy_process.isra.6.part.7+0x18a0/0x5318 kernel/fork.c:1801 copy_process kernel/fork.c:1611 [inline] _do_fork+0x178/0x9e0 kernel/fork.c:2092 SYSC_clone kernel/fork.c:2199 [inline] SyS_clone+0x48/0x60 kernel/fork.c:2177 el0_svc_naked+0x30/0x34 Code: d538d081 f9425a80 92800002 8b010000 (885f7c04) ---[ end trace 5df99b2fbf203f6a ]---