------------[ cut here ]------------ WARNING: CPU: 0 PID: 29137 at net/core/dev.c:10876 netdev_has_any_lower_dev net/core/dev.c:6836 [inline] WARNING: CPU: 0 PID: 29137 at net/core/dev.c:10876 unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 Modules linked in: CPU: 0 PID: 29137 Comm: syz-executor.1 Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0 Hardware name: linux,dummy-virt (DT) pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10876 lr : unregister_netdevice_many_notify+0xa00/0x137c net/core/dev.c:10876 sp : ffff80008d5f77e0 x29: ffff80008d5f77f0 x28: ffff000013da60d0 x27: 0000000000000002 x26: ffff0000169b6000 x25: ffff0000169b6000 x24: ffff0000169b6000 x23: ffff80008d5f7940 x22: ffff8000859db580 x21: dfff800000000000 x20: ffff000013da6000 x19: ffff80008d5f79b0 x18: ffff00000a8f41e0 x17: 1ffff00011abeec2 x16: 0000000000000002 x15: 1fffe0000151e83b x14: 000000000000011b x13: 1fffe0000151e838 x12: ffff700010ee65d1 x11: 1ffff00010ee65d0 x10: ffff700010ee65d0 x9 : dfff800000000000 x8 : 00008fffef119a30 x7 : ffff800087732e87 x6 : 0000000000000001 x5 : ffff800087732e80 x4 : ffff700010ee65d1 x3 : ffff80008029e5f0 x2 : 1fffe000027b4c14 x1 : ffff000015499ca0 x0 : 0000000000000001 Call trace: netdev_has_any_lower_dev net/core/dev.c:6836 [inline] unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 unregister_netdevice_many net/core/dev.c:10906 [inline] unregister_netdevice_queue+0x24c/0x30c net/core/dev.c:10786 unregister_vlan_dev+0x1e4/0x3d8 net/8021q/vlan.c:118 vlan_ioctl_handler+0x294/0x924 net/8021q/vlan.c:627 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 irq event stamp: 4856 hardirqs last enabled at (4855): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (4855): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (4856): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (4832): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (4832): [] netif_addr_unlock_bh include/linux/netdevice.h:4536 [inline] softirqs last enabled at (4832): [] dev_mc_flush+0x70/0x8c net/core/dev_addr_lists.c:1036 softirqs last disabled at (4822): [] netif_addr_lock_bh include/linux/netdevice.h:4523 [inline] softirqs last disabled at (4822): [] dev_mc_flush+0x3c/0x8c net/core/dev_addr_lists.c:1034 ---[ end trace 0000000000000000 ]--- unregister_netdevice: waiting for vlan0 to become free. Usage count = 3 ref_tracker: vlan0@00000000e447cc21 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 ref_tracker: vlan0@00000000e447cc21 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 unregister_netdevice: waiting for vlan0 to become free. Usage count = 3 ref_tracker: vlan0@00000000e447cc21 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 ref_tracker: vlan0@00000000e447cc21 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596