device veth0_macvtap left promiscuous mode device veth1_vlan left promiscuous mode device veth0_vlan left promiscuous mode list_del corruption. prev->next should be ffff888089392bd0, but was ffff88808e59cb90 ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:53! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.20.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:__list_del_entry_valid.cold.1+0x48/0x4a lib/list_debug.c:51 Code: 56 87 87 e8 3d ec 1a fe 0f 0b 48 89 de 48 c7 c7 80 57 87 87 e8 2c ec 1a fe 0f 0b 48 89 de 48 c7 c7 20 57 87 87 e8 1b ec 1a fe <0f> 0b 48 89 d9 48 c7 c7 e0 57 87 87 e8 0a ec 1a fe 0f 0b 48 89 f1 RSP: 0018:ffff8880aa21f490 EFLAGS: 00010286 RAX: 0000000000000054 RBX: ffff888089392bd0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff87875520 RDI: ffffffff8a351ca0 RBP: ffff8880aa21f4a8 R08: ffffed1015d05021 R09: ffffed1015d05020 R10: ffffed1015d05020 R11: ffff8880ae828107 R12: ffff88808e612750 R13: ffff888096fd8750 R14: ffff888089392940 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000a8075000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:117 [inline] list_del_init include/linux/list.h:159 [inline] neigh_mark_dead+0x86/0x210 net/core/neighbour.c:125 neigh_flush_dev+0x232/0x620 net/core/neighbour.c:290 __neigh_ifdown+0x46/0x310 net/core/neighbour.c:328 neigh_ifdown+0xb/0x10 net/core/neighbour.c:345 rt6_disable_ip+0x3f5/0x4b0 net/ipv6/route.c:4046 addrconf_ifdown+0x7a/0xf60 net/ipv6/addrconf.c:3669 addrconf_notify+0x531/0x1fa0 net/ipv6/addrconf.c:3594 notifier_call_chain+0x8a/0x160 kernel/notifier.c:93 __raw_notifier_call_chain kernel/notifier.c:394 [inline] raw_notifier_call_chain+0x11/0x20 kernel/notifier.c:401 call_netdevice_notifiers_info+0x28/0x60 net/core/dev.c:1737 call_netdevice_notifiers_extack net/core/dev.c:1749 [inline] call_netdevice_notifiers net/core/dev.c:1763 [inline] dev_close_many+0x2c6/0x640 net/core/dev.c:1507 rollback_registered_many+0x36d/0xcf0 net/core/dev.c:8036 unregister_netdevice_many+0x3e/0x1f0 net/core/dev.c:9164 default_device_exit_batch+0x2e4/0x3d0 net/core/dev.c:9633 ops_exit_list.isra.5+0xd3/0x120 net/core/net_namespace.c:156 cleanup_net+0x363/0x840 net/core/net_namespace.c:551 process_one_work+0x830/0x1670 kernel/workqueue.c:2153 worker_thread+0x85/0xb60 kernel/workqueue.c:2296 kthread+0x324/0x3e0 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace 86440e027f74ea15 ]--- RIP: 0010:__list_del_entry_valid.cold.1+0x48/0x4a lib/list_debug.c:51 Code: 56 87 87 e8 3d ec 1a fe 0f 0b 48 89 de 48 c7 c7 80 57 87 87 e8 2c ec 1a fe 0f 0b 48 89 de 48 c7 c7 20 57 87 87 e8 1b ec 1a fe <0f> 0b 48 89 d9 48 c7 c7 e0 57 87 87 e8 0a ec 1a fe 0f 0b 48 89 f1 RSP: 0018:ffff8880aa21f490 EFLAGS: 00010286 RAX: 0000000000000054 RBX: ffff888089392bd0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff87875520 RDI: ffffffff8a351ca0 RBP: ffff8880aa21f4a8 R08: ffffed1015d05021 R09: ffffed1015d05020 R10: ffffed1015d05020 R11: ffff8880ae828107 R12: ffff88808e612750 R13: ffff888096fd8750 R14: ffff888089392940 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000a8075000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400