------------[ cut here ]------------ WARNING: CPU: 0 PID: 9705 at net/core/dev.c:10876 netdev_has_any_lower_dev net/core/dev.c:6836 [inline] WARNING: CPU: 0 PID: 9705 at net/core/dev.c:10876 unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 Modules linked in: CPU: 0 PID: 9705 Comm: kworker/u4:2 Not tainted 6.5.0-rc5-syzkaller-00353-gae545c3283dc #0 Hardware name: linux,dummy-virt (DT) Workqueue: netns cleanup_net pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10876 lr : unregister_netdevice_many_notify+0xa00/0x137c net/core/dev.c:10876 sp : ffff80008bd47810 x29: ffff80008bd47820 x28: ffff000016aa20d0 x27: 0000000000000002 x26: ffff000015287000 x25: ffff000015287000 x24: ffff000015287000 x23: ffff80008bd47970 x22: ffff8000859be680 x21: dfff800000000000 x20: ffff000016aa2000 x19: ffff80008bd47a10 x18: ffff00000ecf41e0 x17: ffff800083d74024 x16: 0000000000000002 x15: 1fffe00001d9e83b x14: 0000000000000005 x13: 1fffe00001d9e838 x12: ffff700010ee65d1 x11: 1ffff00010ee65d0 x10: ffff700010ee65d0 x9 : dfff800000000000 x8 : 00008fffef119a30 x7 : ffff800087732e87 x6 : 0000000000000001 x5 : ffff800087732e80 x4 : ffff700010ee65d1 x3 : ffff80008029e5f0 x2 : 1fffe00002d54414 x1 : ffff00000f0464a0 x0 : 0000000000000001 Call trace: netdev_has_any_lower_dev net/core/dev.c:6836 [inline] unregister_netdevice_many_notify+0xed4/0x137c net/core/dev.c:10877 unregister_netdevice_many+0x18/0x24 net/core/dev.c:10906 ip6_tnl_exit_batch_net+0x3b0/0x4d4 net/ipv6/ip6_tunnel.c:2278 ops_exit_list+0xf0/0x140 net/core/net_namespace.c:175 cleanup_net+0x3b0/0x838 net/core/net_namespace.c:614 process_one_work+0x80c/0x1570 kernel/workqueue.c:2600 worker_thread+0x3f8/0xf54 kernel/workqueue.c:2751 kthread+0x27c/0x300 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853 irq event stamp: 2344658 hardirqs last enabled at (2344657): [] kasan_quarantine_put+0x1c8/0x228 mm/kasan/quarantine.c:240 hardirqs last disabled at (2344658): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (2344640): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (2344640): [] netif_addr_unlock_bh include/linux/netdevice.h:4536 [inline] softirqs last enabled at (2344640): [] dev_mc_flush+0x70/0x8c net/core/dev_addr_lists.c:1036 softirqs last disabled at (2344624): [] netif_addr_lock_bh include/linux/netdevice.h:4523 [inline] softirqs last disabled at (2344624): [] dev_mc_flush+0x3c/0x8c net/core/dev_addr_lists.c:1034 ---[ end trace 0000000000000000 ]--- unregister_netdevice: waiting for ip6tnl0 to become free. Usage count = 3 ref_tracker: ip6tnl0@00000000d7fb1885 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 ref_tracker: ip6tnl0@00000000d7fb1885 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 unregister_netdevice: waiting for ip6tnl0 to become free. Usage count = 3 ref_tracker: ip6tnl0@00000000d7fb1885 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] netdev_hold include/linux/netdevice.h:4101 [inline] __netdev_adjacent_dev_insert+0x2e8/0x864 net/core/dev.c:7464 __netdev_adjacent_dev_link_lists net/core/dev.c:7552 [inline] __netdev_adjacent_dev_link_neighbour net/core/dev.c:7576 [inline] __netdev_upper_dev_link+0x2b4/0x594 net/core/dev.c:7636 netdev_upper_dev_link+0x80/0xb0 net/core/dev.c:7682 register_vlan_dev+0x270/0x69c net/8021q/vlan.c:183 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 ref_tracker: ip6tnl0@00000000d7fb1885 has 1/2 users at __netdev_tracker_alloc include/linux/netdevice.h:4077 [inline] netdev_hold include/linux/netdevice.h:4106 [inline] vlan_dev_init+0x7dc/0xb60 net/8021q/vlan_dev.c:622 register_netdevice+0x420/0x1048 net/core/dev.c:9981 register_vlan_dev+0x258/0x69c net/8021q/vlan.c:179 register_vlan_device net/8021q/vlan.c:277 [inline] vlan_ioctl_handler+0x590/0x924 net/8021q/vlan.c:620 sock_ioctl+0x484/0x5f4 net/socket.c:1271 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __arm64_sys_ioctl+0x124/0x190 fs/ioctl.c:856 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0xc4/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x50/0x11c arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x134 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591