------------[ cut here ]------------ WARNING: CPU: 0 PID: 21994 at net/core/dev.c:10876 netdev_has_any_lower_dev net/core/dev.c:6836 [inline] WARNING: CPU: 0 PID: 21994 at net/core/dev.c:10876 unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 Modules linked in: CPU: 0 PID: 21994 Comm: kworker/u4:0 Not tainted 6.5.0-rc5-syzkaller-00243-g9106536c1aa3 #0 Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10876 lr : unregister_netdevice_many_notify+0xa00/0x137c net/core/dev.c:10876 sp : ffff800089d57800 x29: ffff800089d57810 x28: ffff00000f0260d0 x27: 0000000000000002 x26: ffff00000f466a00 x25: ffff00000f466a00 x24: ffff00000f466a00 x23: ffff800089d57960 x22: ffff800085987d60 x21: dfff800000000000 x20: ffff00000f026000 x19: ffff800089d57a00 x18: ffff00001132c1e0 x17: ffff800083d73f9c x16: 0000000000000002 x15: 1fffe0000226583b x14: 0000000000000118 x13: 1fffe00002265838 x12: ffff700010ee65b9 x11: 1ffff00010ee65b8 x10: ffff700010ee65b8 x9 : dfff800000000000 x8 : 00008fffef119a48 x7 : ffff800087732dc7 x6 : 0000000000000001 x5 : ffff800087732dc0 x4 : ffff700010ee65b9 x3 : ffff80008029e5f0 x2 : 1fffe00001e04c14 x1 : ffff000025856e20 x0 : 0000000000000001 Call trace: netdev_has_any_lower_dev net/core/dev.c:6836 [inline] unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 unregister_netdevice_many+0x18/0x24 net/core/dev.c:10906 ip_tunnel_delete_nets+0x220/0x2ec net/ipv4/ip_tunnel.c:1144 ipgre_exit_batch_net+0x20/0x2c net/ipv4/ip_gre.c:1027 ops_exit_list+0xf0/0x140 net/core/net_namespace.c:175 cleanup_net+0x3b0/0x838 net/core/net_namespace.c:614 process_one_work+0x80c/0x1570 kernel/workqueue.c:2600 worker_thread+0x3f8/0xf54 kernel/workqueue.c:2751 kthread+0x27c/0x300 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853 irq event stamp: 789236 hardirqs last enabled at (789235): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (789235): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (789236): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (789212): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (789212): [] netif_addr_unlock_bh include/linux/netdevice.h:4536 [inline] softirqs last enabled at (789212): [] dev_mc_flush+0x70/0x8c net/core/dev_addr_lists.c:1036 softirqs last disabled at (789202): [] netif_addr_lock_bh include/linux/netdevice.h:4523 [inline] softirqs last disabled at (789202): [] dev_mc_flush+0x3c/0x8c net/core/dev_addr_lists.c:1034 ---[ end trace 0000000000000000 ]--- unregister_netdevice: waiting for gre0 to become free. Usage count = 3 ref_tracker: gre%d@00000000053b6f7b has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 ref_tracker: gre%d@00000000053b6f7b has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 unregister_netdevice: waiting for gre0 to become free. Usage count = 3 ref_tracker: gre%d@00000000053b6f7b has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596 ref_tracker: gre%d@00000000053b6f7b has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 compat_sock_ioctl_trans net/socket.c:3362 [inline] compat_sock_ioctl+0x25c/0x508 net/socket.c:3435 __do_compat_sys_ioctl fs/ioctl.c:968 [inline] __se_compat_sys_ioctl fs/ioctl.c:910 [inline] __arm64_compat_sys_ioctl+0x1d4/0x220 fs/ioctl.c:910 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:194 el0_svc_compat+0x4c/0x134 arch/arm64/kernel/entry-common.c:786 el0t_32_sync_handler+0x98/0x13c arch/arm64/kernel/entry-common.c:796 el0t_32_sync+0x194/0x198 arch/arm64/kernel/entry.S:596