------------[ cut here ]------------ WARNING: CPU: 0 PID: 17514 at net/core/dev.c:10876 netdev_has_any_lower_dev net/core/dev.c:6836 [inline] WARNING: CPU: 0 PID: 17514 at net/core/dev.c:10876 unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 Modules linked in: CPU: 0 PID: 17514 Comm: kworker/u4:0 Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0 Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10876 lr : unregister_netdevice_many_notify+0xa00/0x137c net/core/dev.c:10876 sp : ffff800089947810 x29: ffff800089947820 x28: ffff0000137520d0 x27: 0000000000000002 x26: ffff00000dfec780 x25: ffff00000dfec780 x24: ffff00000dfec780 x23: ffff800089947970 x22: ffff8000859be6c0 x21: dfff800000000000 x20: ffff000013752000 x19: ffff800089947a10 x18: ffff00001411c1e0 x17: ffff8000801c4a58 x16: 0000000000000002 x15: 1fffe0000282383b x14: 000000000000011b x13: 1fffe00002823838 x12: ffff700010ee65d1 x11: 1ffff00010ee65d0 x10: ffff700010ee65d0 x9 : dfff800000000000 x8 : 00008fffef119a30 x7 : ffff800087732e87 x6 : 0000000000000001 x5 : ffff800087732e80 x4 : ffff700010ee65d1 x3 : ffff80008029e5f0 x2 : 1fffe000026ea414 x1 : ffff000015690820 x0 : 0000000000000001 Call trace: netdev_has_any_lower_dev net/core/dev.c:6836 [inline] unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 unregister_netdevice_many+0x18/0x24 net/core/dev.c:10906 ip6_tnl_exit_batch_net+0x3b0/0x4d4 net/ipv6/ip6_tunnel.c:2278 ops_exit_list+0xf0/0x140 net/core/net_namespace.c:175 cleanup_net+0x3b0/0x838 net/core/net_namespace.c:614 process_one_work+0x80c/0x1570 kernel/workqueue.c:2600 worker_thread+0x3f8/0xf54 kernel/workqueue.c:2751 kthread+0x27c/0x300 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853 irq event stamp: 71502 hardirqs last enabled at (71501): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (71501): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (71502): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (71474): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (71474): [] netif_addr_unlock_bh include/linux/netdevice.h:4536 [inline] softirqs last enabled at (71474): [] dev_mc_flush+0x70/0x8c net/core/dev_addr_lists.c:1036 softirqs last disabled at (71458): [] netif_addr_lock_bh include/linux/netdevice.h:4523 [inline] softirqs last disabled at (71458): [] dev_mc_flush+0x3c/0x8c net/core/dev_addr_lists.c:1034 ---[ end trace 0000000000000000 ]--- unregister_netdevice: waiting for ip6tnl0 to become free. Usage count = 3 ref_tracker: ip6tnl0@000000003db718e4 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 ref_tracker: ip6tnl0@000000003db718e4 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 unregister_netdevice: waiting for ip6tnl0 to become free. Usage count = 3 ref_tracker: ip6tnl0@000000003db718e4 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 ref_tracker: ip6tnl0@000000003db718e4 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596