Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: netns cleanup_net
RIP: 0010:dst_dev_put+0x27/0x2d0
Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 d0 d2 4e f8 49 89 dd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 48 89 df e8 59 74 b4 f8 4c 8b 33 48 8d 7b
RSP: 0018:ffffc900001e0b38 EFLAGS: 00010246
RAX: ffffffff89718850 RBX: 0000000000000001 RCX: ffff88801caf8000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 1ffffffff1bb8c98 R08: ffff888023ff461b R09: 1ffff110047fe8c3
R10: dffffc0000000000 R11: ffffed10047fe8c4 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000607e5c2517b8 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8881a39fc000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faca52b4440 CR3: 000000010858e000 CR4: 00000000000006f0
Call Trace:
 <IRQ>
 fib_nh_common_release+0x201/0x430
 fib6_info_destroy_rcu+0xca/0x1c0
 rcu_core+0xcab/0x1770
 handle_softirqs+0x286/0x870
 __irq_exit_rcu+0xca/0x1f0
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:lock_release+0x2b5/0x3e0
Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 1b 30 24 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
RSP: 0018:ffffc90000106a70 EFLAGS: 00000206
RAX: 25b7e2867a9ad100 RBX: 0000000000000206 RCX: 25b7e2867a9ad100
RDX: 0000000000000005 RSI: ffffffff8dd8dcaa RDI: ffffffff8c03da60
RBP: ffff88801caf8bf8 R08: ffffc90000107610 R09: 0000000000000000
R10: ffffc90000106bf8 R11: fffff52000020d81 R12: 0000000000000005
R13: 0000000000000005 R14: ffffffff8e33d320 R15: ffff88801caf8000
 unwind_next_frame+0x19a9/0x2390
 arch_stack_walk+0x11c/0x150
 stack_trace_save+0x9c/0xe0
 kasan_save_track+0x3e/0x80
 __kasan_slab_alloc+0x6c/0x80
 kmem_cache_alloc_node_noprof+0x433/0x710
 __alloc_skb+0x112/0x2d0
 inet6_ifmcaddr_notify+0xeb/0x1d0
 __ipv6_dev_mc_dec+0x2dc/0x330
 __ipv6_ifa_notify+0x43d/0xac0
 addrconf_ifdown+0xe69/0x1880
 addrconf_notify+0x1bc/0x1010
 notifier_call_chain+0x1b6/0x3e0
 netif_close_many+0x29c/0x410
 unregister_netdevice_many_notify+0x7b9/0x1ff0
 default_device_exit_batch+0x819/0x890
 ops_undo_list+0x525/0x990
 cleanup_net+0x4d8/0x820
 process_scheduled_works+0xae1/0x17b0
 worker_thread+0x8a0/0xda0
 kthread+0x711/0x8a0
 ret_from_fork+0x4bc/0x870
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:dst_dev_put+0x27/0x2d0
Code: 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 d0 d2 4e f8 49 89 dd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 48 89 df e8 59 74 b4 f8 4c 8b 33 48 8d 7b
RSP: 0018:ffffc900001e0b38 EFLAGS: 00010246
RAX: ffffffff89718850 RBX: 0000000000000001 RCX: ffff88801caf8000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 1ffffffff1bb8c98 R08: ffff888023ff461b R09: 1ffff110047fe8c3
R10: dffffc0000000000 R11: ffffed10047fe8c4 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000607e5c2517b8 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8881a39fc000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007faca52b4440 CR3: 000000010858e000 CR4: 00000000000006f0
