------------[ cut here ]------------ WARNING: CPU: 1 PID: 13672 at net/core/dev.c:10876 netdev_has_any_lower_dev net/core/dev.c:6836 [inline] WARNING: CPU: 1 PID: 13672 at net/core/dev.c:10876 unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 Modules linked in: CPU: 1 PID: 13672 Comm: kworker/u4:6 Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0 Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10876 lr : unregister_netdevice_many_notify+0xa00/0x137c net/core/dev.c:10876 sp : ffff80008e157810 x29: ffff80008e157820 x28: ffff0000151400d0 x27: 0000000000000002 x26: ffff0000153a4a80 x25: ffff0000153a4a80 x24: ffff0000153a4a80 x23: ffff80008e157970 x22: ffff8000859be6c0 x21: dfff800000000000 x20: ffff000015140000 x19: ffff80008e157a10 x18: ffff000011b1c1e0 x17: ffff800083d74034 x16: 0000000000000002 x15: 1fffe0000236383b x14: 0000000000000117 x13: 1fffe00002363838 x12: ffff700010ee65d1 x11: 1ffff00010ee65d0 x10: ffff700010ee65d0 x9 : dfff800000000000 x8 : 00008fffef119a30 x7 : ffff800087732e87 x6 : 0000000000000001 x5 : ffff800087732e80 x4 : ffff700010ee65d1 x3 : ffff80008029e5f0 x2 : 1fffe00002a28014 x1 : ffff000014cd2d20 x0 : 0000000000000001 Call trace: netdev_has_any_lower_dev net/core/dev.c:6836 [inline] unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 unregister_netdevice_many+0x18/0x24 net/core/dev.c:10906 ip6_tnl_exit_batch_net+0x3b0/0x4d4 net/ipv6/ip6_tunnel.c:2278 ops_exit_list+0xf0/0x140 net/core/net_namespace.c:175 cleanup_net+0x3b0/0x838 net/core/net_namespace.c:614 process_one_work+0x80c/0x1570 kernel/workqueue.c:2600 worker_thread+0x3f8/0xf54 kernel/workqueue.c:2751 kthread+0x27c/0x300 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853 irq event stamp: 857670 hardirqs last enabled at (857669): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (857669): [] _raw_spin_unlock_irqrestore+0x80/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (857670): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (857650): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (857650): [] netif_addr_unlock_bh include/linux/netdevice.h:4536 [inline] softirqs last enabled at (857650): [] dev_mc_flush+0x70/0x8c net/core/dev_addr_lists.c:1036 softirqs last disabled at (857634): [] netif_addr_lock_bh include/linux/netdevice.h:4523 [inline] softirqs last disabled at (857634): [] dev_mc_flush+0x3c/0x8c net/core/dev_addr_lists.c:1034 ---[ end trace 0000000000000000 ]--- unregister_netdevice: waiting for ip6tnl0 to become free. Usage count = 3 ref_tracker: ip6tnl0@00000000ad1c4832 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 ref_tracker: ip6tnl0@00000000ad1c4832 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 unregister_netdevice: waiting for ip6tnl0 to become free. Usage count = 3 ref_tracker: ip6tnl0@00000000ad1c4832 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 ref_tracker: ip6tnl0@00000000ad1c4832 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591