* [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9)
@ 2026-05-10 20:18 syzbot
2026-05-14 1:51 ` Forwarded: [syzbot] test patch for unregister_netdevice syzbot
` (9 more replies)
0 siblings, 10 replies; 20+ messages in thread
From: syzbot @ 2026-05-10 20:18 UTC (permalink / raw)
To: davem, dsahern, edumazet, horms, kuba, linux-kernel, netdev,
pabeni, syzkaller-bugs
Hello,
syzbot found the following issue on:
HEAD commit: 5cbb61bf4168 arm64/fpsimd: ptrace: zero target's fpsimd_st..
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
console output: https://syzkaller.appspot.com/x/log.txt?x=142f40ec580000
kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b
dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd
compiler: Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50), Debian LLD 21.1.8
userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=103f3dba580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/04156ec16593/disk-5cbb61bf.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/6bfa041e2c79/vmlinux-5cbb61bf.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a92d82d8a79e/Image-5cbb61bf.gz.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/7915d7230a1d/mount_6.gz
fsck result: failed (log: https://syzkaller.appspot.com/x/fsck.log?x=15005a73980000)
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com
unregister_netdevice: waiting for netdevsim1 to become free. Usage count = 2
ref_tracker: netdev@00000000f11a2c54 has 1/1 users at
__netdev_tracker_alloc include/linux/netdevice.h:4471 [inline]
netdev_tracker_alloc include/linux/netdevice.h:4483 [inline]
netdev_get_by_index+0x88/0xe0 net/core/dev.c:1027
fib6_nh_init+0x258/0x14bc net/ipv6/route.c:3606
ip6_route_info_create_nh+0x120/0x9a8 net/ipv6/route.c:3905
addrconf_f6i_alloc+0x1e4/0x3b4 net/ipv6/route.c:4697
ipv6_add_addr+0x458/0xd70 net/ipv6/addrconf.c:1126
addrconf_add_linklocal+0x1e0/0x378 net/ipv6/addrconf.c:3311
addrconf_addr_gen+0x27c/0x2e0 net/ipv6/addrconf.c:-1
addrconf_init_auto_addrs+0x390/0x764 net/ipv6/addrconf.c:-1
addrconf_notify+0x7a0/0xbe4 net/ipv6/addrconf.c:3752
notifier_call_chain+0x194/0x60c kernel/notifier.c:85
raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453
call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2249
call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
call_netdevice_notifiers net/core/dev.c:2301 [inline]
__dev_notify_flags+0x160/0x27c net/core/dev.c:9794
netif_change_flags+0xd0/0x15c net/core/dev.c:9823
do_setlink+0xab0/0x31c0 net/core/rtnetlink.c:3180
rtnl_changelink net/core/rtnetlink.c:3799 [inline]
__rtnl_newlink net/core/rtnetlink.c:3972 [inline]
rtnl_newlink+0xd24/0x113c net/core/rtnetlink.c:4109
netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
^ permalink raw reply [flat|nested] 20+ messages in thread* Forwarded: [syzbot] test patch for unregister_netdevice 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot @ 2026-05-14 1:51 ` syzbot 2026-05-14 2:08 ` Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot ` (8 subsequent siblings) 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 1:51 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test patch for unregister_netdevice Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c index 5476b6536eb7..a517e57cf86a 100644 --- a/net/ipv6/addrconf.c +++ b/net/ipv6/addrconf.c @@ -3666,6 +3666,9 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, break; case NETDEV_CHANGEMTU: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + /* if MTU under IPV6_MIN_MTU stop IPv6 on this interface. */ if (dev->mtu < IPV6_MIN_MTU) { addrconf_ifdown(dev, dev != net->loopback_dev); @@ -3691,6 +3694,9 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, fallthrough; case NETDEV_UP: case NETDEV_CHANGE: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + if (idev && idev->cnf.disable_ipv6) break; ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot 2026-05-14 1:51 ` Forwarded: [syzbot] test patch for unregister_netdevice syzbot @ 2026-05-14 2:08 ` syzbot 2026-05-14 2:36 ` syzbot ` (7 subsequent siblings) 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 2:08 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main From: Xu Rao <raoxu@uniontech.com> Date: Tue, 12 May 2026 20:44:10 +0800 Subject: [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot reports that unregister_netdevice() can wait forever for a netdevsim device whose reference count never drops to zero. The leaked reference is held by an IPv6 local route created from addrconf. A late NETDEV_CHANGE notification can still reach addrconf_notify() after the device has entered NETREG_UNREGISTERING. The handler can then run automatic address configuration, add a link-local address and install its host route after unregister teardown has already started. The route nexthop takes a netdev reference in fib6_nh_init(), and there might not be a later ifdown pass to remove the newly created address and route. Do not run MTU, UP or CHANGE based IPv6 autoconfiguration once the device is unregistering. Keep NETDEV_DOWN and NETDEV_UNREGISTER handling unchanged so the teardown path can still remove existing IPv6 state. Reported-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd Signed-off-by: Xu Rao <raoxu@uniontech.com> --- v2: - Drop READ_ONCE() around dev->reg_state. addrconf_notify() is called from the netdevice notifier path, so a plain load is sufficient. - Do not add a Fixes tag. The issue does not appear to be caused by a single commit, but by a long-standing unregister-time lifecycle gap. net/ipv6/addrconf.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c index 5476b6536eb7..a517e57cf86a 100644 --- a/net/ipv6/addrconf.c +++ b/net/ipv6/addrconf.c @@ -3666,6 +3666,9 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, break; case NETDEV_CHANGEMTU: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + /* if MTU under IPV6_MIN_MTU stop IPv6 on this interface. */ if (dev->mtu < IPV6_MIN_MTU) { addrconf_ifdown(dev, dev != net->loopback_dev); @@ -3691,6 +3694,9 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, fallthrough; case NETDEV_UP: case NETDEV_CHANGE: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + if (idev && idev->cnf.disable_ipv6) break; -- 2.50.1 ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot 2026-05-14 1:51 ` Forwarded: [syzbot] test patch for unregister_netdevice syzbot 2026-05-14 2:08 ` Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot @ 2026-05-14 2:36 ` syzbot 2026-05-14 4:02 ` syzbot ` (6 subsequent siblings) 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 2:36 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot ` (2 preceding siblings ...) 2026-05-14 2:36 ` syzbot @ 2026-05-14 4:02 ` syzbot 2026-05-14 6:48 ` Forwarded: [syzbot] test net main baseline syzbot ` (5 subsequent siblings) 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 4:02 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main From: Xu Rao <raoxu@uniontech.com> Subject: [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot reports that unregister_netdevice() can wait forever for a netdevsim device whose reference count never drops to zero. The leaked reference is held by an IPv6 local route created from addrconf. A late NETDEV_CHANGE notification can still reach addrconf_notify() after the device has entered NETREG_UNREGISTERING. The handler can then run automatic address configuration, add a link-local address and install its host route after unregister teardown has already started. The route nexthop takes a netdev reference in fib6_nh_init(), and there might not be a later ifdown pass to remove the newly created address and route. Do not run MTU, UP or CHANGE based IPv6 autoconfiguration once the device is unregistering. Keep NETDEV_DOWN and NETDEV_UNREGISTER handling unchanged so the teardown path can still remove existing IPv6 state. Reported-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd Signed-off-by: Xu Rao <raoxu@uniontech.com> --- v2: - Drop READ_ONCE() around dev->reg_state. addrconf_notify() is called from the netdevice notifier path, so a plain load is sufficient. - Do not add a Fixes tag. The issue does not appear to be caused by a single commit, but by a long-standing unregister-time lifecycle gap. net/ipv6/addrconf.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c index 5476b6536eb7..a517e57cf86a 100644 --- a/net/ipv6/addrconf.c +++ b/net/ipv6/addrconf.c @@ -3666,6 +3666,9 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, break; case NETDEV_CHANGEMTU: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + /* if MTU under IPV6_MIN_MTU stop IPv6 on this interface. */ if (dev->mtu < IPV6_MIN_MTU) { addrconf_ifdown(dev, dev != net->loopback_dev); @@ -3691,12 +3694,15 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, fallthrough; case NETDEV_UP: case NETDEV_CHANGE: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + if (idev && idev->cnf.disable_ipv6) break; if (dev->priv_flags & IFF_NO_ADDRCONF) { if (event == NETDEV_UP && !IS_ERR_OR_NULL(idev) && dev->flags & IFF_UP && dev->flags & IFF_MULTICAST) ipv6_mc_up(idev); break; } -- 2.50.1 ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: [syzbot] test net main baseline 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot ` (3 preceding siblings ...) 2026-05-14 4:02 ` syzbot @ 2026-05-14 6:48 ` syzbot 2026-05-14 8:24 ` Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot ` (4 subsequent siblings) 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 6:48 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test net main baseline Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot ` (4 preceding siblings ...) 2026-05-14 6:48 ` Forwarded: [syzbot] test net main baseline syzbot @ 2026-05-14 8:24 ` syzbot 2026-05-14 11:12 ` Forwarded: [syzbot] test WARN_ON for addrconf " syzbot ` (3 subsequent siblings) 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 8:24 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci From: Xu Rao <raoxu@uniontech.com> Subject: [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot reports that unregister_netdevice() can wait forever for a netdevsim device whose reference count never drops to zero. The leaked reference is held by an IPv6 local route created from addrconf. A late NETDEV_CHANGE notification can still reach addrconf_notify() after the device has entered NETREG_UNREGISTERING. The handler can then run automatic address configuration, add a link-local address and install its host route after unregister teardown has already started. The route nexthop takes a netdev reference in fib6_nh_init(), and there might not be a later ifdown pass to remove the newly created address and route. Do not run MTU, UP or CHANGE based IPv6 autoconfiguration once the device is unregistering. Keep NETDEV_DOWN and NETDEV_UNREGISTER handling unchanged so the teardown path can still remove existing IPv6 state. Reported-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd Signed-off-by: Xu Rao <raoxu@uniontech.com> --- v2: - Drop READ_ONCE() around dev->reg_state. addrconf_notify() is called from the netdevice notifier path, so a plain load is sufficient. - Do not add a Fixes tag. The issue does not appear to be caused by a single commit, but by a long-standing unregister-time lifecycle gap. net/ipv6/addrconf.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c index 5476b6536eb7..a517e57cf86a 100644 --- a/net/ipv6/addrconf.c +++ b/net/ipv6/addrconf.c @@ -3666,6 +3666,9 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, break; case NETDEV_CHANGEMTU: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + /* if MTU under IPV6_MIN_MTU stop IPv6 on this interface. */ if (dev->mtu < IPV6_MIN_MTU) { addrconf_ifdown(dev, dev != net->loopback_dev); @@ -3691,12 +3694,15 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, fallthrough; case NETDEV_UP: case NETDEV_CHANGE: + if (dev->reg_state == NETREG_UNREGISTERING) + break; + if (idev && idev->cnf.disable_ipv6) break; if (dev->priv_flags & IFF_NO_ADDRCONF) { if (event == NETDEV_UP && !IS_ERR_OR_NULL(idev) && dev->flags & IFF_UP && dev->flags & IFF_MULTICAST) ipv6_mc_up(idev); break; } -- 2.50.1 ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: [syzbot] test WARN_ON for addrconf on unregistering devices 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot ` (5 preceding siblings ...) 2026-05-14 8:24 ` Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot @ 2026-05-14 11:12 ` syzbot 2026-05-14 11:58 ` Forwarded: [syzbot] test baseline for unregister_netdevice ref leak syzbot ` (2 subsequent siblings) 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 11:12 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test WARN_ON for addrconf on unregistering devices Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci From: Xu Rao <raoxu@uniontech.com> Subject: [PATCH debug] ipv6: addrconf: warn on autoconf for unregistering devices Add WARN_ON() checks where the proposed fix skips IPv6 autoconf on unregistering devices. This is a diagnostic patch to confirm whether the syzbot reproducer reaches the MTU / UP / CHANGE paths after the netdevice has entered NETREG_UNREGISTERING. Signed-off-by: Xu Rao <raoxu@uniontech.com> --- net/ipv6/addrconf.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c index 5476b6536eb7..72a3b17d30a1 100644 --- a/net/ipv6/addrconf.c +++ b/net/ipv6/addrconf.c @@ -3666,6 +3666,8 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, break; case NETDEV_CHANGEMTU: + WARN_ON(dev->reg_state == NETREG_UNREGISTERING); + /* if MTU under IPV6_MIN_MTU stop IPv6 on this interface. */ if (dev->mtu < IPV6_MIN_MTU) { addrconf_ifdown(dev, dev != net->loopback_dev); @@ -3691,12 +3693,14 @@ static int addrconf_notify(struct notifier_block *this, unsigned long event, fallthrough; case NETDEV_UP: case NETDEV_CHANGE: + WARN_ON(dev->reg_state == NETREG_UNREGISTERING); + if (idev && idev->cnf.disable_ipv6) break; if (dev->priv_flags & IFF_NO_ADDRCONF) { if (event == NETDEV_UP && !IS_ERR_OR_NULL(idev) && dev->flags & IFF_UP && dev->flags & IFF_MULTICAST) ipv6_mc_up(idev); break; } -- 2.50.1 ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: [syzbot] test baseline for unregister_netdevice ref leak 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot ` (6 preceding siblings ...) 2026-05-14 11:12 ` Forwarded: [syzbot] test WARN_ON for addrconf " syzbot @ 2026-05-14 11:58 ` syzbot 2026-09-15 12:14 ` [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot 2026-09-15 12:29 ` Forwarded: " syzbot 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 11:58 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: [syzbot] test baseline for unregister_netdevice ref leak Author: raoxu@uniontech.com #syz test: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ^ permalink raw reply [flat|nested] 20+ messages in thread
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot ` (7 preceding siblings ...) 2026-05-14 11:58 ` Forwarded: [syzbot] test baseline for unregister_netdevice ref leak syzbot @ 2026-09-15 12:14 ` syzbot 2026-09-15 12:29 ` Forwarded: " syzbot 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-09-15 12:14 UTC (permalink / raw) To: davem, dsahern, edumazet, horms, idosch, kuba, kuniyu, linux-kernel, netdev, pabeni, penguin-kernel, raoxu, syzkaller-bugs, willemb syzbot has found a reproducer for the following issue on: HEAD commit: 5445d6419962 arm64: Don't read GMID_EL1 when MTE is disabled git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci console output: https://syzkaller.appspot.com/x/log.txt?x=1250428e580000 kernel config: https://syzkaller.appspot.com/x/.config?x=56ed23170c168d4c dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 userspace arch: arm64 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=15b32471580000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=16d742d1580000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/e8b70e3bd109/disk-5445d641.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/e5227e56ac93/vmlinux-5445d641.xz kernel image: https://storage.googleapis.com/syzbot-assets/54905f78be59/Image-5445d641.gz.xz IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com unregister_netdevice: waiting for netdevsim2 to become free. Usage count = 2 ref_tracker: netdev@000000004118ac35 has 1/1 users at __netdev_tracker_alloc include/linux/netdevice.h:4528 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4540 fib_create_info+0x15cc/0x2184 net/ipv4/fib_semantics.c:1524 fib_table_insert+0xa4/0x12bc net/ipv4/fib_trie.c:1212 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1147 fib_add_ifaddr+0x114/0x500 net/ipv4/fib_frontend.c:1169 fib_inetaddr_event+0x114/0x1c0 net/ipv4/fib_frontend.c:1483 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x87c/0xa74 net/ipv4/devinet.c:566 inet_rtm_newaddr+0xba4/0x1140 net/ipv4/devinet.c:1001 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 --- If you want syzbot to run the reproducer, reply with: #syz test: git://repo/address.git branch-or-commit-hash If you attach or paste a git patch, syzbot will apply it before testing. ^ permalink raw reply [flat|nested] 20+ messages in thread
* Forwarded: Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) 2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot ` (8 preceding siblings ...) 2026-09-15 12:14 ` [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot @ 2026-09-15 12:29 ` syzbot 9 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-09-15 12:29 UTC (permalink / raw) To: linux-kernel, syzkaller-bugs For archival purposes, forwarding an incoming command email to linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com. *** Subject: Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) Author: penguin-kernel@i-love.sakura.ne.jp #syz test diff --git a/include/linux/netdevice.h b/include/linux/netdevice.h index 87cafc932e9e..d518338cd074 100644 --- a/include/linux/netdevice.h +++ b/include/linux/netdevice.h @@ -2153,6 +2153,8 @@ enum netdev_reg_state { * * FIXME: cleanup struct net_device such that network protocol info * moves out. + * + * @netdev_trace_buffer_list: Linked list for debugging refcount leak. */ struct net_device { @@ -2312,6 +2314,9 @@ struct net_device { #if IS_ENABLED(CONFIG_TLS_DEVICE) const struct tlsdev_ops *tlsdev_ops; #endif +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) + struct list_head netdev_trace_buffer_list; +#endif unsigned int operstate; unsigned char link_mode; @@ -4498,9 +4503,16 @@ static inline bool dev_nit_active(const struct net_device *dev) void dev_queue_xmit_nit(struct sk_buff *skb, struct net_device *dev); +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +void save_netdev_trace_buffer(struct net_device *dev, int delta); +#else +static inline void save_netdev_trace_buffer(struct net_device *dev, int delta) { } +#endif + static inline void __dev_put(struct net_device *dev) { if (dev) { + save_netdev_trace_buffer(dev, -1); #ifdef CONFIG_PCPU_DEV_REFCNT this_cpu_dec(*dev->pcpu_refcnt); #else @@ -4512,6 +4524,7 @@ static inline void __dev_put(struct net_device *dev) static inline void __dev_hold(struct net_device *dev) { if (dev) { + save_netdev_trace_buffer(dev, 1); #ifdef CONFIG_PCPU_DEV_REFCNT this_cpu_inc(*dev->pcpu_refcnt); #else diff --git a/kernel/rcu/tree.c b/kernel/rcu/tree.c index 96848fc1f02b..20c4c92708b8 100644 --- a/kernel/rcu/tree.c +++ b/kernel/rcu/tree.c @@ -2566,6 +2566,10 @@ static bool rcu_do_batch_check_time(long count, long tlimit, local_clock() >= tlimit; } +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +static noinline void rcu_do_batch(struct rcu_data *rdp); +#endif + /* * Invoke any RCU callbacks that have made it to the end of their grace * period. Throttle as specified by rdp->blimit. diff --git a/kernel/softirq.c b/kernel/softirq.c index 7980a4a232f9..ad9889563288 100644 --- a/kernel/softirq.c +++ b/kernel/softirq.c @@ -599,6 +599,10 @@ static inline bool lockdep_softirq_start(void) { return false; } static inline void lockdep_softirq_end(bool in_hardirq) { } #endif +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +static noinline void handle_softirqs(bool ksirqd); +#endif + static void handle_softirqs(bool ksirqd) { unsigned long end = jiffies + MAX_SOFTIRQ_TIME; diff --git a/kernel/workqueue.c b/kernel/workqueue.c index 3c034cbc5bb3..60daae1c6f17 100644 --- a/kernel/workqueue.c +++ b/kernel/workqueue.c @@ -3259,6 +3259,10 @@ static bool manage_workers(struct worker *worker) return true; } +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +static noinline void process_one_work(struct worker *worker, struct work_struct *work); +#endif + /** * process_one_work - process single work * @worker: self diff --git a/net/core/dev.c b/net/core/dev.c index 38336858c168..93a7594d586e 100644 --- a/net/core/dev.c +++ b/net/core/dev.c @@ -11639,6 +11639,14 @@ int netdev_refcnt_read(const struct net_device *dev) } EXPORT_SYMBOL(netdev_refcnt_read); +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +static void dump_netdev_trace_buffer(const struct net_device *dev); +static void erase_netdev_trace_buffer(const struct net_device *dev); +#else +static inline void dump_netdev_trace_buffer(const struct net_device *dev) { } +static inline void erase_netdev_trace_buffer(const struct net_device *dev) { } +#endif + int netdev_unregister_timeout_secs __read_mostly = 10; #define WAIT_REFS_MIN_MSECS 1 @@ -11721,6 +11729,7 @@ static struct net_device *netdev_wait_allrefs_any(struct list_head *list) pr_emerg("unregister_netdevice: waiting for %s to become free. Usage count = %d\n", dev->name, netdev_refcnt_read(dev)); ref_tracker_dir_print(&dev->refcnt_tracker, 10); + dump_netdev_trace_buffer(dev); } warning_time = jiffies; @@ -12121,6 +12130,9 @@ struct net_device *alloc_netdev_mqs(int sizeof_priv, const char *name, dev->priv_len = sizeof_priv; +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) + INIT_LIST_HEAD(&dev->netdev_trace_buffer_list); +#endif ref_tracker_dir_init(&dev->refcnt_tracker, 128, "netdev"); #ifdef CONFIG_PCPU_DEV_REFCNT dev->pcpu_refcnt = alloc_percpu(int); @@ -12223,6 +12235,7 @@ struct net_device *alloc_netdev_mqs(int sizeof_priv, const char *name, free_pcpu: #ifdef CONFIG_PCPU_DEV_REFCNT free_percpu(dev->pcpu_refcnt); + erase_netdev_trace_buffer(dev); free_dev: #endif ref_tracker_dir_exit(&dev->refcnt_tracker); @@ -12292,6 +12305,7 @@ void free_netdev(struct net_device *dev) free_percpu(dev->pcpu_refcnt); dev->pcpu_refcnt = NULL; #endif + erase_netdev_trace_buffer(dev); free_percpu(dev->core_stats); dev->core_stats = NULL; free_percpu(dev->xdp_bulkq); @@ -13418,6 +13432,12 @@ static struct smp_hotplug_thread backlog_threads = { .setup = backlog_napi_setup, }; +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +static void __init net_dev_refcnt_tracker_init(void); +#else +static void __init net_dev_refcnt_tracker_init(void) { }; +#endif + /* * This is called single threaded during boot, so no need * to take the rtnl semaphore. @@ -13426,6 +13446,7 @@ static int __init net_dev_init(void) { int i, rc = -ENOMEM; + net_dev_refcnt_tracker_init(); BUG_ON(!dev_boot_phase); net_dev_struct_check(); @@ -13529,3 +13550,254 @@ static int __init net_dev_init(void) } subsys_initcall(net_dev_init); + +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) + +#define NETDEV_TRACE_BUFFER_SIZE 32768 +static struct netdev_trace_buffer { + struct list_head list; + atomic_t count; + int trimmed_entries; + int nr_entries; + unsigned long entries[20]; +} netdev_trace_buffer[NETDEV_TRACE_BUFFER_SIZE]; +static LIST_HEAD(netdev_trace_buffer_list); +static DEFINE_RAW_SPINLOCK(netdev_trace_buffer_lock); +static bool netdev_trace_buffer_exhausted; +static unsigned long start_of_handle_softirqs __ro_after_init; +static unsigned long end_of_handle_softirqs __ro_after_init; + +static int netdev_trace_buffer_init(void) +{ + int i; + + for (i = 0; i < NETDEV_TRACE_BUFFER_SIZE; i++) + list_add_tail(&netdev_trace_buffer[i].list, &netdev_trace_buffer_list); + return 0; +} +pure_initcall(netdev_trace_buffer_init); + +static int trim_netdev_trace(unsigned long *entries, int nr_entries) +{ + char buffer[KSYM_SYMBOL_LEN] = { }; + char *cp; + int i; + + for (i = 0; i < nr_entries; i++) { + sprint_symbol_no_offset(buffer, entries[i]); + cp = strchr(buffer, ' '); + if (cp) + *cp = '\0'; + if (buffer[0] == 'p') { + if (!strcmp(buffer, "process_one_work")) + return i + 1; + } else if (buffer[0] == 'k') { + if (!strcmp(buffer, "ksys_unshare")) + return i + 1; + } else if (buffer[0] == 's') { + if (!strcmp(buffer, "sock_sendmsg_nosec") || + !strcmp(buffer, "sock_recvmsg_nosec")) + return i + 1; + } else if (buffer[0] == 'r') { + if (!strcmp(buffer, "rcu_do_batch")) + return i + 1; + } else if (buffer[0] == '_') { + if (!strcmp(buffer, "__sys_bind") || + !strcmp(buffer, "__sock_release") || + !strcmp(buffer, "__sys_bpf")) + return i + 1; + } else { + if (!strcmp(buffer, "do_sock_setsockopt")) + return i + 1; + } + } + return nr_entries; +} + +static void dump_netdev_trace_buffer(const struct net_device *dev) +{ + struct netdev_trace_buffer *ptr, *tmp; + int count, balance = 0, pos = 0; + + /* Update trimmed_entries field. Do not modify nr_entries field + * in case save_netdev_trace_buffer() is called again. + */ + list_for_each_entry_rcu(ptr, &dev->netdev_trace_buffer_list, list, + /* list elements can't go away. */ 1) { + if (ptr->trimmed_entries == ptr->nr_entries) + ptr->trimmed_entries = trim_netdev_trace(ptr->entries, ptr->nr_entries); + } + /* Merge duplicated entries using trimmed_entries field. */ + list_for_each_entry_rcu(ptr, &dev->netdev_trace_buffer_list, list, + /* list elements can't go away. */ 1) { + /* Skip empty entries. */ + if (!atomic_read(&ptr->count)) + continue; + tmp = ptr; + list_for_each_entry_continue_rcu(tmp, &dev->netdev_trace_buffer_list, list) { + if (ptr->trimmed_entries != tmp->trimmed_entries || + memcmp(ptr->entries, tmp->entries, + ptr->trimmed_entries * sizeof(unsigned long))) + continue; + /* Skip empty entries. */ + count = atomic_read(&tmp->count); + if (!count) + continue; + /* Move count from non-first entry to first entry. */ + atomic_add(count, &ptr->count); + atomic_sub(count, &tmp->count); + } + /* It is safe to call cond_resched() because this function is + * called from schedulable context. + */ + cond_resched(); + } + /* Report all entries for this device. */ + list_for_each_entry_rcu(ptr, &dev->netdev_trace_buffer_list, list, + /* list elements can't go away. */ 1) { + /* Skip empty entries. */ + count = atomic_read(&ptr->count); + if (!count) + continue; + /* Report this entry. It is safe to call cond_resched() because + * this function is called from schedulable context. + */ + pos++; + balance += count; + pr_info("Call trace for %s[%d] %+d at\n", dev->name, pos, count); + stack_trace_print(ptr->entries, ptr->trimmed_entries, 4); + cond_resched(); + } + if (!netdev_trace_buffer_exhausted) + pr_info("balance as of %s[%d] is %d\n", dev->name, pos, balance); +} + +static void erase_netdev_trace_buffer(const struct net_device *dev) +{ + struct netdev_trace_buffer *ptr; + unsigned long flags; + + /* This function is called after free_percpu(dev->pcpu_refcnt) was already + * called, which means that no more __dev_put()/__dev_hold() call can be made. + * Therefore, no more save_netdev_trace_buffer() call will be made, and we can + * safely return list elements to netdev_trace_buffer_list. + */ + raw_spin_lock_irqsave(&netdev_trace_buffer_lock, flags); + while (!list_empty(&dev->netdev_trace_buffer_list)) { + ptr = list_first_entry(&dev->netdev_trace_buffer_list, typeof(*ptr), list); + list_del(&ptr->list); + list_add_tail(&ptr->list, &netdev_trace_buffer_list); + } + raw_spin_unlock_irqrestore(&netdev_trace_buffer_lock, flags); +} + +void save_netdev_trace_buffer(struct net_device *dev, int delta) +{ + struct netdev_trace_buffer *ptr; + unsigned long entries[ARRAY_SIZE(ptr->entries)]; + int nr_entries; + unsigned long flags; + + /* This function is not NMI-safe. Give up if called from NMI context. */ + if (in_nmi()) + return; + /* Get stack traces. */ + nr_entries = stack_trace_save(entries, ARRAY_SIZE(ptr->entries), 1); + /* Trim traces of process context now if called from softirq context, for + * we will easily exhaust netdev_trace_buffer_list if we don't trim traces + * of process context when trying to compare with existing entries. + * + * Avoid kallsyms lookup, by using cached address resolved upon boot. + */ + if (in_softirq()) { + int i; + + for (i = 0; i < nr_entries; i++) { + if (entries[i] >= start_of_handle_softirqs && + entries[i] < end_of_handle_softirqs) { + nr_entries = i + 1; + break; + } + } + } + /* Compare with existing entries at best-effort basis. Since duplicated entries + * created by race condition will be merged when reporting, we don't use lock here. + */ + list_for_each_entry_rcu(ptr, &dev->netdev_trace_buffer_list, list, + /* list elements can't go away. */ 1) { + if (ptr->nr_entries == nr_entries && + !memcmp(ptr->entries, entries, nr_entries * sizeof(unsigned long))) { + atomic_add(delta, &ptr->count); + return; + } + } + /* Add a new entry. We don't re-compare with existing entries with lock held, for + * duplicated entries created by race condition will be merged when reporting. + * But we use raw spinlock here in case this function is called with some other + * raw spinlock already held. + */ + raw_spin_lock_irqsave(&netdev_trace_buffer_lock, flags); + if (!list_empty(&netdev_trace_buffer_list)) { + /* Remove one entry from netdev_trace_buffer_list and initialize it. */ + ptr = list_first_entry(&netdev_trace_buffer_list, typeof(*ptr), list); + list_del(&ptr->list); + atomic_set(&ptr->count, delta); + ptr->nr_entries = nr_entries; + ptr->trimmed_entries = nr_entries; + memmove(ptr->entries, entries, nr_entries * sizeof(unsigned long)); + /* Append it in RCU manner, for readers are lockless. */ + list_add_tail_rcu(&ptr->list, &dev->netdev_trace_buffer_list); + } else { + netdev_trace_buffer_exhausted = true; + } + raw_spin_unlock_irqrestore(&netdev_trace_buffer_lock, flags); +} +EXPORT_SYMBOL(save_netdev_trace_buffer); + +struct timer_completion_struct { + struct timer_list timer; + struct completion completion; +}; + +/* Resolve address of handle_softirqs() and cache it, in order to avoid looking up + * kallsyms every time. + */ +static void __init netdev_addr_resolve_func(struct timer_list *timer) +{ + unsigned long entries[40]; + int nr_entries = stack_trace_save(entries, ARRAY_SIZE(entries), 1); + char buffer[KSYM_SYMBOL_LEN] = { }; + unsigned long offset, size; + char *cp; + int i; + + for (i = 0; i < nr_entries; i++) { + sprint_symbol(buffer, entries[i]); + if (strncmp(buffer, "handle_softirqs", 15)) + continue; + cp = strchr(buffer, '+'); + if (!cp || sscanf(cp, "+%lx/%lx", &offset, &size) != 2) + continue; + start_of_handle_softirqs = entries[i] - offset; + end_of_handle_softirqs = start_of_handle_softirqs + size; + break; + } + complete(&container_of(timer, struct timer_completion_struct, timer)->completion); +} + +static void __init net_dev_refcnt_tracker_init(void) +{ + struct timer_completion_struct tc; + + timer_setup_on_stack(&tc.timer, netdev_addr_resolve_func, 0); + init_completion(&tc.completion); + /* Schedule a call to netdev_addr_resolve_func(). */ + mod_timer(&tc.timer, jiffies); + /* Wait for netdev_addr_resolve_func() to be called. */ + wait_for_completion(&tc.completion); + /* Wait for netdev_addr_resolve_func() to complete. */ + timer_delete_sync(&tc.timer); + timer_destroy_on_stack(&tc.timer); +} + +#endif diff --git a/net/socket.c b/net/socket.c index c05d86e63abf..b3ddcc283cbb 100644 --- a/net/socket.c +++ b/net/socket.c @@ -723,7 +723,11 @@ struct socket *sock_alloc(void) } EXPORT_SYMBOL(sock_alloc); -static void __sock_release(struct socket *sock, struct inode *inode) +static +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +noinline +#endif +void __sock_release(struct socket *sock, struct inode *inode) { const struct proto_ops *ops = READ_ONCE(sock->ops); @@ -795,7 +799,13 @@ static noinline void call_trace_sock_send_length(struct sock *sk, int ret, trace_sock_send_length(sk, ret, 0); } -static inline int sock_sendmsg_nosec(struct socket *sock, struct msghdr *msg) +static +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +noinline +#else +inline +#endif +int sock_sendmsg_nosec(struct socket *sock, struct msghdr *msg) { int ret = INDIRECT_CALL_INET(READ_ONCE(sock->ops)->sendmsg, inet6_sendmsg, inet_sendmsg, sock, msg, @@ -1145,8 +1155,13 @@ static noinline void call_trace_sock_recv_length(struct sock *sk, int ret, int f trace_sock_recv_length(sk, ret, flags); } -static inline int sock_recvmsg_nosec(struct socket *sock, struct msghdr *msg, - int flags) +static +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +noinline +#else +inline +#endif +int sock_recvmsg_nosec(struct socket *sock, struct msghdr *msg, int flags) { int ret = INDIRECT_CALL_INET(READ_ONCE(sock->ops)->recvmsg, inet6_recvmsg, @@ -2653,9 +2668,12 @@ static int copy_msghdr_from_user(struct msghdr *kmsg, return err < 0 ? err : 0; } -static int ____sys_sendmsg(struct socket *sock, struct msghdr *msg_sys, - unsigned int flags, struct used_address *used_address, - unsigned int allowed_msghdr_flags) +static +#if defined(CONFIG_NET_DEV_REFCNT_TRACKER) && defined(CONFIG_KALLSYMS) +noinline +#endif +int ____sys_sendmsg(struct socket *sock, struct msghdr *msg_sys, unsigned int flags, + struct used_address *used_address, unsigned int allowed_msghdr_flags) { unsigned char ctl[sizeof(struct cmsghdr) + 20] __aligned(sizeof(__kernel_size_t)); -- 2.52.0 ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <B2CF7974DC914535+20260514015049.255578-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <B2CF7974DC914535+20260514015049.255578-1-raoxu@uniontech.com> @ 2026-05-14 1:59 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 1:59 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot tried to test the proposed patch but the build/boot failed: failed to apply patch: error: corrupt patch at line 24 Tested on: commit: 59afae20 selftests/tc-testing: Add QFQ/CBS qlen underf.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: userspace arch: arm64 patch: https://syzkaller.appspot.com/x/patch.diff?x=14415636580000 ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <950831E2452101D8+20260514020809.275684-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <950831E2452101D8+20260514020809.275684-1-raoxu@uniontech.com> @ 2026-05-14 2:17 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 2:17 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot tried to test the proposed patch but the build/boot failed: failed to apply patch: error: corrupt patch at line 24 Tested on: commit: b84c5632 net: net_failover: Fix the deadlock in slave .. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: userspace arch: arm64 patch: https://syzkaller.appspot.com/x/patch.diff?x=15798950580000 ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <0CE6AE93FEBA21AC+20260514023628.308904-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <0CE6AE93FEBA21AC+20260514023628.308904-1-raoxu@uniontech.com> @ 2026-05-14 2:45 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 2:45 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot tried to test the proposed patch but the build/boot failed: failed to apply patch: error: corrupt patch at line 24 Tested on: commit: cc21150c Merge branch 'macsec-use-rcu_work-to-fix-cryp.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: userspace arch: arm64 patch: https://syzkaller.appspot.com/x/patch.diff?x=13458950580000 ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <113A84FF927506B4+20260514040220.410747-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <113A84FF927506B4+20260514040220.410747-1-raoxu@uniontech.com> @ 2026-05-14 5:36 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 5:36 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot tried to test the proposed patch but the build/boot failed: failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "64" "ARCH=arm64" "CROSS_COMPILE=aarch64-linux-gnu-" "LLVM=1" "Image.gz"]: exit status 2 Tested on: commit: cc21150c Merge branch 'macsec-use-rcu_work-to-fix-cryp.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50), Debian LLD 21.1.8 userspace arch: arm64 patch: https://syzkaller.appspot.com/x/patch.diff?x=15a90d6a580000 ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <E61E4EBE5175D344+20260514064805.611177-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <E61E4EBE5175D344+20260514064805.611177-1-raoxu@uniontech.com> @ 2026-05-14 7:30 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 7:30 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot tried to test the proposed patch but the build/boot failed: failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "64" "ARCH=arm64" "CROSS_COMPILE=aarch64-linux-gnu-" "LLVM=1" "Image.gz"]: exit status 2 Tested on: commit: cc21150c Merge branch 'macsec-use-rcu_work-to-fix-cryp.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git main kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50), Debian LLD 21.1.8 userspace arch: arm64 Note: no patches were applied. ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <BD680186E4DE6711+20260514082426.721996-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <BD680186E4DE6711+20260514082426.721996-1-raoxu@uniontech.com> @ 2026-05-14 9:20 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 9:20 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot has tested the proposed patch and the reproducer did not trigger any issue: Reported-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com Tested-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com Tested on: commit: 5cbb61bf arm64/fpsimd: ptrace: zero target's fpsimd_st.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci console output: https://syzkaller.appspot.com/x/log.txt?x=147a20ec580000 kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50), Debian LLD 21.1.8 userspace arch: arm64 patch: https://syzkaller.appspot.com/x/patch.diff?x=12255636580000 Note: testing is done by a robot and is best-effort only. ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <FF91F2BF42AC95B3+20260514111238.1600030-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <FF91F2BF42AC95B3+20260514111238.1600030-1-raoxu@uniontech.com> @ 2026-05-14 11:43 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 11:43 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot has tested the proposed patch and the reproducer did not trigger any issue: Reported-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com Tested-by: syzbot+e2af46126e0644cbebdd@syzkaller.appspotmail.com Tested on: commit: 5cbb61bf arm64/fpsimd: ptrace: zero target's fpsimd_st.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci console output: https://syzkaller.appspot.com/x/log.txt?x=10eae996580000 kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50), Debian LLD 21.1.8 userspace arch: arm64 patch: https://syzkaller.appspot.com/x/patch.diff?x=1182da73980000 Note: testing is done by a robot and is best-effort only. ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <FBE6DA28176D6E90+20260514115843.1655377-1-raoxu@uniontech.com>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <FBE6DA28176D6E90+20260514115843.1655377-1-raoxu@uniontech.com> @ 2026-05-14 12:28 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-05-14 12:28 UTC (permalink / raw) To: linux-kernel, raoxu, syzkaller-bugs Hello, syzbot has tested the proposed patch but the reproducer is still triggering an issue: unregister_netdevice: waiting for DEV to become free unregister_netdevice: waiting for syz_tun to become free. Usage count = 8 ref_tracker: netdev@00000000adbd14c8 has 1/7 users at __netdev_tracker_alloc include/linux/netdevice.h:4471 [inline] netdev_tracker_alloc include/linux/netdevice.h:4483 [inline] netdev_get_by_index+0x88/0xe0 net/core/dev.c:1027 fib6_nh_init+0x258/0x14bc net/ipv6/route.c:3606 ip6_route_info_create_nh+0x120/0x9a8 net/ipv6/route.c:3905 ip6_route_add+0x8c/0x1b4 net/ipv6/route.c:3957 addrconf_prefix_route+0x1f4/0x2b4 net/ipv6/addrconf.c:2488 addrconf_add_linklocal+0x238/0x378 net/ipv6/addrconf.c:3313 addrconf_addr_gen+0x27c/0x2e0 net/ipv6/addrconf.c:-1 addrconf_init_auto_addrs+0x390/0x764 net/ipv6/addrconf.c:-1 addrconf_notify+0x7a0/0xbe4 net/ipv6/addrconf.c:3752 notifier_call_chain+0x194/0x60c kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2249 call_netdevice_notifiers_extack net/core/dev.c:2287 [inline] call_netdevice_notifiers net/core/dev.c:2301 [inline] __dev_notify_flags+0x160/0x27c net/core/dev.c:9794 netif_change_flags+0xd0/0x15c net/core/dev.c:9823 do_setlink+0xab0/0x31c0 net/core/rtnetlink.c:3180 rtnl_changelink net/core/rtnetlink.c:3799 [inline] __rtnl_newlink net/core/rtnetlink.c:3972 [inline] rtnl_newlink+0xd24/0x113c net/core/rtnetlink.c:4109 ref_tracker: netdev@00000000adbd14c8 has 1/7 users at __netdev_tracker_alloc include/linux/netdevice.h:4471 [inline] netdev_tracker_alloc include/linux/netdevice.h:4483 [inline] netdev_get_by_index+0x88/0xe0 net/core/dev.c:1027 fib6_nh_init+0x258/0x14bc net/ipv6/route.c:3606 ip6_route_info_create_nh+0x120/0x9a8 net/ipv6/route.c:3905 addrconf_f6i_alloc+0x1e4/0x3b4 net/ipv6/route.c:4697 ipv6_add_addr+0x458/0xd70 net/ipv6/addrconf.c:1126 addrconf_add_linklocal+0x1e0/0x378 net/ipv6/addrconf.c:3311 addrconf_addr_gen+0x27c/0x2e0 net/ipv6/addrconf.c:-1 addrconf_init_auto_addrs+0x390/0x764 net/ipv6/addrconf.c:-1 addrconf_notify+0x7a0/0xbe4 net/ipv6/addrconf.c:3752 notifier_call_chain+0x194/0x60c kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2249 call_netdevice_notifiers_extack net/core/dev.c:2287 [inline] call_netdevice_notifiers net/core/dev.c:2301 [inline] __dev_notify_flags+0x160/0x27c net/core/dev.c:9794 netif_change_flags+0xd0/0x15c net/core/dev.c:9823 do_setlink+0xab0/0x31c0 net/core/rtnetlink.c:3180 rtnl_changelink net/core/rtnetlink.c:3799 [inline] __rtnl_newlink net/core/rtnetlink.c:3972 [inline] rtnl_newlink+0xd24/0x113c net/core/rtnetlink.c:4109 ref_tracker: netdev@00000000adbd14c8 has 1/7 users at __netdev_tracker_alloc include/linux/netdevice.h:4471 [inline] netdev_tracker_alloc include/linux/netdevice.h:4483 [inline] netdev_get_by_index+0x88/0xe0 net/core/dev.c:1027 fib6_nh_init+0x258/0x14bc net/ipv6/route.c:3606 ip6_route_info_create_nh+0x120/0x9a8 net/ipv6/route.c:3905 ip6_route_add+0x8c/0x1b4 net/ipv6/route.c:3957 addrconf_add_mroute+0x14c/0x1cc net/ipv6/addrconf.c:2552 addrconf_add_dev+0xe8/0x1a0 net/ipv6/addrconf.c:2570 addrconf_dev_config net/ipv6/addrconf.c:3484 [inline] addrconf_init_auto_addrs+0x304/0x764 net/ipv6/addrconf.c:3572 addrconf_notify+0x7a0/0xbe4 net/ipv6/addrconf.c:3752 notifier_call_chain+0x194/0x60c kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2249 call_netdevice_notifiers_extack net/core/dev.c:2287 [inline] call_netdevice_notifiers net/core/dev.c:2301 [inline] __dev_notify_flags+0x160/0x27c net/core/dev.c:9794 netif_change_flags+0xd0/0x15c net/core/dev.c:9823 do_setlink+0xab0/0x31c0 net/core/rtnetlink.c:3180 rtnl_changelink net/core/rtnetlink.c:3799 [inline] __rtnl_newlink net/core/rtnetlink.c:3972 [inline] rtnl_newlink+0xd24/0x113c net/core/rtnetlink.c:4109 rtnetlink_rcv_msg+0x64c/0x984 net/core/rtnetlink.c:6995 ref_tracker: netdev@00000000adbd14c8 has 1/7 users at __netdev_tracker_alloc include/linux/netdevice.h:4471 [inline] netdev_tracker_alloc include/linux/netdevice.h:4483 [inline] netdev_get_by_index+0x88/0xe0 net/core/dev.c:1027 fib6_nh_init+0x258/0x14bc net/ipv6/route.c:3606 ip6_route_info_create_nh+0x120/0x9a8 net/ipv6/route.c:3905 ip6_route_add+0x8c/0x1b4 net/ipv6/route.c:3957 addrconf_prefix_route+0x1f4/0x2b4 net/ipv6/addrconf.c:2488 fixup_permanent_addr net/ipv6/addrconf.c:3603 [inline] addrconf_permanent_addr+0x5a8/0x824 net/ipv6/addrconf.c:3639 addrconf_notify+0x690/0xbe4 net/ipv6/addrconf.c:3706 notifier_call_chain+0x194/0x60c kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2249 call_netdevice_notifiers_extack net/core/dev.c:2287 [inline] call_netdevice_notifiers net/core/dev.c:2301 [inline] __dev_notify_flags+0x160/0x27c net/core/dev.c:9794 netif_change_flags+0xd0/0x15c net/core/dev.c:9823 do_setlink+0xab0/0x31c0 net/core/rtnetlink.c:3180 rtnl_changelink net/core/rtnetlink.c:3799 [inline] __rtnl_newlink net/core/rtnetlink.c:3972 [inline] rtnl_newlink+0xd24/0x113c net/core/rtnetlink.c:4109 rtnetlink_rcv_msg+0x64c/0x984 net/core/rtnetlink.c:6995 netlink_rcv_skb+0x22c/0x410 net/netlink/af_netlink.c:2550 ref_tracker: netdev@00000000adbd14c8 has 1/7 users at __netdev_tracker_alloc include/linux/netdevice.h:4471 [inline] netdev_hold include/linux/netdevice.h:4500 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1261 [inline] fib_check_nh+0x968/0x1548 net/ipv4/fib_semantics.c:1281 fib_create_info+0x13d8/0x2100 net/ipv4/fib_semantics.c:1501 fib_table_insert+0xa4/0x11e8 net/ipv4/fib_trie.c:1212 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x334/0x4e4 net/ipv4/fib_frontend.c:1178 fib_netdev_event+0x35c/0x49c net/ipv4/fib_frontend.c:1516 notifier_call_chain+0x194/0x60c kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2249 call_netdevice_notifiers_extack net/core/dev.c:2287 [inline] call_netdevice_notifiers net/core/dev.c:2301 [inline] __dev_notify_flags+0x160/0x27c net/core/dev.c:9794 netif_change_flags+0xd0/0x15c net/core/dev.c:9823 do_setlink+0xab0/0x31c0 net/core/rtnetlink.c:3180 rtnl_changelink net/core/rtnetlink.c:3799 [inline] __rtnl_newlink net/core/rtnetlink.c:3972 [inline] rtnl_newlink+0xd24/0x113c net/core/rtnetlink.c:4109 rtnetlink_rcv_msg+0x64c/0x984 net/core/rtnetlink.c:6995 netlink_rcv_skb+0x22c/0x410 net/netlink/af_netlink.c:2550 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7022 ref_tracker: netdev@00000000adbd14c8 has 1/7 users at __netdev_tracker_alloc include/linux/netdevice.h:4471 [inline] netdev_tracker_alloc include/linux/netdevice.h:4483 [inline] netdev_get_by_index+0x88/0xe0 net/core/dev.c:1027 fib6_nh_init+0x258/0x14bc net/ipv6/route.c:3606 ip6_route_info_create_nh+0x120/0x9a8 net/ipv6/route.c:3905 addrconf_f6i_alloc+0x1e4/0x3b4 net/ipv6/route.c:4697 ipv6_add_addr+0x458/0xd70 net/ipv6/addrconf.c:1126 inet6_addr_add+0x2a4/0x78c net/ipv6/addrconf.c:3050 inet6_rtm_newaddr+0x738/0xa58 net/ipv6/addrconf.c:5071 rtnetlink_rcv_msg+0x64c/0x984 net/core/rtnetlink.c:6995 netlink_rcv_skb+0x22c/0x410 net/netlink/af_netlink.c:2550 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7022 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x610/0x800 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x63c/0x920 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg+0xc8/0x138 net/socket.c:802 __sys_sendto+0x254/0x338 net/socket.c:2265 __do_sys_sendto net/socket.c:2272 [inline] __se_sys_sendto net/socket.c:2268 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2268 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 ref_tracker: netdev@00000000adbd14c8 has 1/7 users at __netdev_tracker_alloc include/linux/netdevice.h:4471 [inline] netdev_tracker_alloc+0x68/0xb0 include/linux/netdevice.h:4483 fib_create_info+0x1b14/0x2100 net/ipv4/fib_semantics.c:1495 fib_table_insert+0xa4/0x11e8 net/ipv4/fib_trie.c:1212 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x118/0x4e4 net/ipv4/fib_frontend.c:1156 fib_inetaddr_event+0x114/0x1c0 net/ipv4/fib_frontend.c:1470 notifier_call_chain+0x194/0x60c kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x828/0xa0c net/ipv4/devinet.c:566 inet_rtm_newaddr+0xb58/0x10e8 net/ipv4/devinet.c:1001 rtnetlink_rcv_msg+0x64c/0x984 net/core/rtnetlink.c:6995 netlink_rcv_skb+0x22c/0x410 net/netlink/af_netlink.c:2550 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7022 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x610/0x800 net/netlink/af_netlink.c:1344 netlink_sendmsg+0x63c/0x920 net/netlink/af_netlink.c:1894 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg+0xc8/0x138 net/socket.c:802 Tested on: commit: 5cbb61bf arm64/fpsimd: ptrace: zero target's fpsimd_st.. git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci console output: https://syzkaller.appspot.com/x/log.txt?x=15f620ec580000 kernel config: https://syzkaller.appspot.com/x/.config?x=a834c6344141a58b dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50), Debian LLD 21.1.8 userspace arch: arm64 Note: no patches were applied. ^ permalink raw reply [flat|nested] 20+ messages in thread
[parent not found: <0d52ff78-4135-4761-a54a-d80ecfe1d88e@I-love.SAKURA.ne.jp>]
* Re: [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) [not found] <0d52ff78-4135-4761-a54a-d80ecfe1d88e@I-love.SAKURA.ne.jp> @ 2026-09-15 12:56 ` syzbot 0 siblings, 0 replies; 20+ messages in thread From: syzbot @ 2026-09-15 12:56 UTC (permalink / raw) To: linux-kernel, penguin-kernel, syzkaller-bugs Hello, syzbot has tested the proposed patch but the reproducer is still triggering an issue: unregister_netdevice: waiting for DEV to become free unregister_netdevice: waiting for netdevsim2 to become free. Usage count = 2 ref_tracker: netdev@00000000163a43c1 has 1/1 users at __netdev_tracker_alloc include/linux/netdevice.h:4541 [inline] netdev_tracker_alloc include/linux/netdevice.h:4553 [inline] netdev_get_by_index+0x84/0xdc net/core/dev.c:1049 fib6_nh_init+0x258/0x1514 net/ipv6/route.c:3615 ip6_route_info_create_nh+0x13c/0x98c net/ipv6/route.c:3914 addrconf_f6i_alloc+0x1e4/0x3b4 net/ipv6/route.c:4718 ipv6_add_addr+0x484/0xdb0 net/ipv6/addrconf.c:1132 addrconf_add_linklocal+0x1e0/0x378 net/ipv6/addrconf.c:3335 addrconf_addr_gen+0x27c/0x2dc net/ipv6/addrconf.c:-1 addrconf_init_auto_addrs+0x390/0x764 net/ipv6/addrconf.c:-1 addrconf_notify+0x774/0xbbc net/ipv6/addrconf.c:3776 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] __dev_notify_flags+0x288/0x438 net/core/dev.c:9853 netif_change_flags+0xd0/0x15c net/core/dev.c:9882 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 Call trace for netdevsim2[1] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] rx_queue_add_kobject net/core/net-sysfs.c:1236 [inline] net_rx_queue_update_kobjects+0x108/0x67c net/core/net-sysfs.c:1301 register_queue_kobjects net/core/net-sysfs.c:2093 [inline] netdev_register_kobject+0x210/0x328 net/core/net-sysfs.c:2344 register_netdevice+0xd74/0x14c0 net/core/dev.c:11503 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 device_register+0x28/0x38 drivers/base/core.c:3858 nsim_bus_dev_new drivers/net/netdevsim/bus.c:468 [inline] new_device_store+0x2c4/0x58c drivers/net/netdevsim/bus.c:191 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 Call trace for netdevsim2[2] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] netdev_queue_add_kobject net/core/net-sysfs.c:1973 [inline] netdev_queue_update_kobjects+0x158/0x5f0 net/core/net-sysfs.c:2035 register_queue_kobjects net/core/net-sysfs.c:2098 [inline] netdev_register_kobject+0x24c/0x328 net/core/net-sysfs.c:2344 register_netdevice+0xd74/0x14c0 net/core/dev.c:11503 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 device_register+0x28/0x38 drivers/base/core.c:3858 nsim_bus_dev_new drivers/net/netdevsim/bus.c:468 [inline] new_device_store+0x2c4/0x58c drivers/net/netdevsim/bus.c:191 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 Call trace for netdevsim2[3] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold+0x38/0xf4 include/linux/netdevice.h:4569 register_netdevice+0xf4c/0x14c0 net/core/dev.c:11527 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 device_register+0x28/0x38 drivers/base/core.c:3858 nsim_bus_dev_new drivers/net/netdevsim/bus.c:468 [inline] new_device_store+0x2c4/0x58c drivers/net/netdevsim/bus.c:191 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 Call trace for netdevsim2[4] +3 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:674 [inline] netdevice_event+0x424/0x7c0 drivers/infiniband/core/roce_gid_mgmt.c:822 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] register_netdevice+0x1018/0x14c0 net/core/dev.c:11541 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 device_register+0x28/0x38 drivers/base/core.c:3858 Call trace for netdevsim2[5] +3 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:675 [inline] netdevice_event+0x4b0/0x7c0 drivers/infiniband/core/roce_gid_mgmt.c:822 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] register_netdevice+0x1018/0x14c0 net/core/dev.c:11541 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 device_register+0x28/0x38 drivers/base/core.c:3858 Call trace for netdevsim2[6] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] neigh_parms_alloc+0x140/0x474 net/core/neighbour.c:1773 inetdev_init+0x110/0x4a8 net/ipv4/devinet.c:280 inetdev_event+0x248/0x1184 net/ipv4/devinet.c:1590 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] register_netdevice+0x1018/0x14c0 net/core/dev.c:11541 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 Call trace for netdevsim2[7] -7 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] dev_put include/linux/netdevice.h:4604 [inline] netdevice_event_work_handler+0xfc/0x26c drivers/infiniband/core/roce_gid_mgmt.c:652 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[8] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] inetdev_init+0x174/0x4a8 net/ipv4/devinet.c:286 inetdev_event+0x248/0x1184 net/ipv4/devinet.c:1590 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] register_netdevice+0x1018/0x14c0 net/core/dev.c:11541 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 Call trace for netdevsim2[9] -7 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] dev_put include/linux/netdevice.h:4604 [inline] netdevice_event_work_handler+0x17c/0x26c drivers/infiniband/core/roce_gid_mgmt.c:653 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[10] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] neigh_parms_alloc+0x140/0x474 net/core/neighbour.c:1773 ipv6_add_dev+0x380/0x1024 net/ipv6/addrconf.c:403 addrconf_notify+0x400/0xbbc net/ipv6/addrconf.c:3686 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] register_netdevice+0x1018/0x14c0 net/core/dev.c:11541 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 Call trace for netdevsim2[11] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] ipv6_add_dev+0x3e8/0x1024 net/ipv6/addrconf.c:411 addrconf_notify+0x400/0xbbc net/ipv6/addrconf.c:3686 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] register_netdevice+0x1018/0x14c0 net/core/dev.c:11541 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 Call trace for netdevsim2[12] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] udp_tunnel_nic_register net/ipv4/udp_tunnel_nic.c:852 [inline] udp_tunnel_nic_netdevice_event+0x93c/0x1444 net/ipv4/udp_tunnel_nic.c:933 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] register_netdevice+0x1018/0x14c0 net/core/dev.c:11541 nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1072 [inline] nsim_create+0x944/0xcf4 drivers/net/netdevsim/netdev.c:1154 __nsim_dev_port_add+0x59c/0x95c drivers/net/netdevsim/dev.c:1434 nsim_dev_port_add_all+0x50/0x114 drivers/net/netdevsim/dev.c:1495 nsim_drv_probe+0x780/0xa1c drivers/net/netdevsim/dev.c:1656 nsim_bus_probe+0x20/0x30 drivers/net/netdevsim/bus.c:420 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x29c/0x800 drivers/base/dd.c:706 __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868 driver_probe_device+0x6c/0x19c drivers/base/dd.c:898 __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026 bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500 __device_attach+0x248/0x390 drivers/base/dd.c:1098 device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 bus_probe_device+0x58/0x120 drivers/base/bus.c:620 device_add+0x6cc/0x9e0 drivers/base/core.c:3776 device_register+0x28/0x38 drivers/base/core.c:3858 Call trace for netdevsim2[13] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] netdev_work_enqueue+0x148/0x2b0 net/core/netdev_work.c:40 __netdev_work_core_sched+0x2c/0x3c net/core/netdev_work.c:109 netif_rx_mode_queue net/core/dev_addr_lists.c:1337 [inline] __dev_set_rx_mode+0x188/0x314 net/core/dev_addr_lists.c:1376 dev_set_rx_mode+0x60/0x84 net/core/dev_addr_lists.c:1393 __dev_open+0x54c/0x76c net/core/dev.c:1732 __dev_change_flags+0x294/0x698 net/core/dev.c:9812 netif_change_flags+0x80/0x15c net/core/dev.c:9877 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x88/0x138 net/socket.c:810 Call trace for netdevsim2[14] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] qdisc_alloc+0x43c/0x7bc net/sched/sch_generic.c:1030 qdisc_create_dflt+0x9c/0x570 net/sched/sch_generic.c:1053 attach_one_default_qdisc+0xb0/0x194 net/sched/sch_generic.c:1219 netdev_for_each_tx_queue include/linux/netdevice.h:2754 [inline] attach_default_qdiscs net/sched/sch_generic.c:1237 [inline] dev_activate+0x250/0xc4c net/sched/sch_generic.c:1296 __dev_open+0x554/0x76c net/core/dev.c:1733 __dev_change_flags+0x294/0x698 net/core/dev.c:9812 netif_change_flags+0x80/0x15c net/core/dev.c:9877 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x88/0x138 net/socket.c:810 Call trace for netdevsim2[15] +3 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:674 [inline] netdevice_event+0x424/0x7c0 drivers/infiniband/core/roce_gid_mgmt.c:822 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] __dev_notify_flags+0x288/0x438 net/core/dev.c:9853 netif_change_flags+0xd0/0x15c net/core/dev.c:9882 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x88/0x138 net/socket.c:810 Call trace for netdevsim2[16] +3 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:675 [inline] netdevice_event+0x4b0/0x7c0 drivers/infiniband/core/roce_gid_mgmt.c:822 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] __dev_notify_flags+0x288/0x438 net/core/dev.c:9853 netif_change_flags+0xd0/0x15c net/core/dev.c:9882 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x88/0x138 net/socket.c:810 Call trace for netdevsim2[17] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] dev_get_by_index+0x1ac/0x308 net/core/dev.c:1024 netdev_get_by_index+0x34/0xdc net/core/dev.c:1047 fib6_nh_init+0x258/0x1514 net/ipv6/route.c:3615 ip6_route_info_create_nh+0x13c/0x98c net/ipv6/route.c:3914 ip6_route_add+0x8c/0x1b4 net/ipv6/route.c:3966 addrconf_add_mroute+0x14c/0x1d0 net/ipv6/addrconf.c:2568 addrconf_add_dev+0xe4/0x188 net/ipv6/addrconf.c:2586 addrconf_dev_config net/ipv6/addrconf.c:3508 [inline] addrconf_init_auto_addrs+0x304/0x764 net/ipv6/addrconf.c:3596 addrconf_notify+0x774/0xbbc net/ipv6/addrconf.c:3776 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] __dev_notify_flags+0x288/0x438 net/core/dev.c:9853 netif_change_flags+0xd0/0x15c net/core/dev.c:9882 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 Call trace for netdevsim2[18] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] dev_get_by_index+0x1ac/0x308 net/core/dev.c:1024 netdev_get_by_index+0x34/0xdc net/core/dev.c:1047 fib6_nh_init+0x258/0x1514 net/ipv6/route.c:3615 ip6_route_info_create_nh+0x13c/0x98c net/ipv6/route.c:3914 addrconf_f6i_alloc+0x1e4/0x3b4 net/ipv6/route.c:4718 ipv6_add_addr+0x484/0xdb0 net/ipv6/addrconf.c:1132 addrconf_add_linklocal+0x1e0/0x378 net/ipv6/addrconf.c:3335 addrconf_addr_gen+0x27c/0x2dc net/ipv6/addrconf.c:-1 addrconf_init_auto_addrs+0x390/0x764 net/ipv6/addrconf.c:-1 addrconf_notify+0x774/0xbbc net/ipv6/addrconf.c:3776 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] __dev_notify_flags+0x288/0x438 net/core/dev.c:9853 netif_change_flags+0xd0/0x15c net/core/dev.c:9882 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 Call trace for netdevsim2[19] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] addr_event+0x288/0x408 drivers/infiniband/core/roce_gid_mgmt.c:870 inet6addr_event+0xa4/0xd8 drivers/infiniband/core/roce_gid_mgmt.c:903 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 atomic_notifier_call_chain+0xf0/0x1ac kernel/notifier.c:223 inet6addr_notifier_call_chain+0x30/0x40 net/ipv6/addrconf_core.c:108 ipv6_add_addr+0xb28/0xdb0 net/ipv6/addrconf.c:1193 addrconf_add_linklocal+0x1e0/0x378 net/ipv6/addrconf.c:3335 addrconf_addr_gen+0x27c/0x2dc net/ipv6/addrconf.c:-1 addrconf_init_auto_addrs+0x390/0x764 net/ipv6/addrconf.c:-1 addrconf_notify+0x774/0xbbc net/ipv6/addrconf.c:3776 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] __dev_notify_flags+0x288/0x438 net/core/dev.c:9853 netif_change_flags+0xd0/0x15c net/core/dev.c:9882 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 Call trace for netdevsim2[20] -2 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] dev_put include/linux/netdevice.h:4604 [inline] update_gid_event_work_handler+0x88/0x118 drivers/infiniband/core/roce_gid_mgmt.c:834 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[21] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] dev_get_by_index+0x1ac/0x308 net/core/dev.c:1024 netdev_get_by_index+0x34/0xdc net/core/dev.c:1047 fib6_nh_init+0x258/0x1514 net/ipv6/route.c:3615 ip6_route_info_create_nh+0x13c/0x98c net/ipv6/route.c:3914 ip6_route_add+0x8c/0x1b4 net/ipv6/route.c:3966 addrconf_prefix_route+0x1f4/0x2b8 net/ipv6/addrconf.c:2504 addrconf_add_linklocal+0x238/0x378 net/ipv6/addrconf.c:3337 addrconf_addr_gen+0x27c/0x2dc net/ipv6/addrconf.c:-1 addrconf_init_auto_addrs+0x390/0x764 net/ipv6/addrconf.c:-1 addrconf_notify+0x774/0xbbc net/ipv6/addrconf.c:3776 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] __dev_notify_flags+0x288/0x438 net/core/dev.c:9853 netif_change_flags+0xd0/0x15c net/core/dev.c:9882 do_setlink+0xc28/0x31e8 net/core/rtnetlink.c:3266 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 Call trace for netdevsim2[22] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] netdev_work_dequeue+0x1c4/0x264 net/core/netdev_work.c:61 __netdev_work_core_cancel+0x2c/0x3c net/core/netdev_work.c:115 netif_rx_mode_sync+0x24/0x5c net/core/dev_addr_lists.c:1410 do_setlink+0x96c/0x31e8 net/core/rtnetlink.c:3520 rtnl_changelink net/core/rtnetlink.c:3905 [inline] __rtnl_newlink net/core/rtnetlink.c:4076 [inline] rtnl_newlink+0xf44/0x138c net/core/rtnetlink.c:4215 rtnetlink_rcv_msg+0x66c/0x9bc net/core/rtnetlink.c:7132 netlink_rcv_skb+0x238/0x414 net/netlink/af_netlink.c:2556 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:7159 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec+0x88/0x138 net/socket.c:810 Call trace for netdevsim2[23] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] netdev_work_enqueue+0x148/0x2b0 net/core/netdev_work.c:40 __netdev_work_core_sched+0x2c/0x3c net/core/netdev_work.c:109 netif_rx_mode_queue net/core/dev_addr_lists.c:1337 [inline] __dev_set_rx_mode+0x188/0x314 net/core/dev_addr_lists.c:1376 __dev_mc_add+0xc4/0x10c net/core/dev_addr_lists.c:1002 dev_mc_add+0x2c/0x3c net/core/dev_addr_lists.c:1016 igmp6_group_added+0x1d0/0x430 net/ipv6/mcast.c:681 __ipv6_dev_mc_inc+0x7d0/0x9e4 net/ipv6/mcast.c:973 ipv6_dev_mc_inc+0x2c/0x3c net/ipv6/mcast.c:982 addrconf_join_solict+0xec/0x170 net/ipv6/addrconf.c:2262 addrconf_dad_begin net/ipv6/addrconf.c:4135 [inline] addrconf_dad_work+0x1ec/0xfe8 net/ipv6/addrconf.c:4263 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[24] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] netdev_work_proc+0xbc/0x6fc net/core/netdev_work.c:152 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[25] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] netdev_work_proc+0x328/0x6fc net/core/netdev_work.c:164 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[26] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] netdev_work_proc+0x520/0x6fc net/core/netdev_work.c:174 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[27] +2 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dst_init+0x6c/0x438 net/core/dst.c:52 dst_alloc+0x118/0x15c net/core/dst.c:94 ip6_dst_alloc+0x38/0xc8 net/ipv6/route.c:342 icmp6_dst_alloc+0x6c/0x260 net/ipv6/route.c:3346 mld_sendpack+0x668/0xfec net/ipv6/mcast.c:1859 mld_send_cr net/ipv6/mcast.c:2171 [inline] mld_ifc_work+0x76c/0x9e4 net/ipv6/mcast.c:2711 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[28] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] ___neigh_create+0xc08/0x2340 net/core/neighbour.c:661 __neigh_create+0x80/0xa4 net/core/neighbour.c:740 ip6_finish_output2+0xedc/0x1b68 net/ipv6/ip6_output.c:130 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline] ip6_finish_output+0x230/0x618 net/ipv6/ip6_output.c:221 NF_HOOK_COND include/linux/netfilter.h:314 [inline] ip6_output+0x2d0/0x644 net/ipv6/ip6_output.c:248 dst_output include/net/dst.h:470 [inline] NF_HOOK+0x14c/0x464 include/linux/netfilter.h:325 mld_sendpack+0x7f4/0xfec net/ipv6/mcast.c:1870 mld_send_cr net/ipv6/mcast.c:2171 [inline] mld_ifc_work+0x76c/0x9e4 net/ipv6/mcast.c:2711 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[29] -6 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] dst_destroy+0x100/0x2cc net/core/dst.c:115 dst_destroy_rcu+0x20/0x30 net/core/dst.c:133 rcu_do_batch+0x36c/0xbb8 kernel/rcu/tree.c:2654 Call trace for netdevsim2[30] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dst_init+0x6c/0x438 net/core/dst.c:52 dst_alloc+0x118/0x15c net/core/dst.c:94 ip6_dst_alloc+0x38/0xc8 net/ipv6/route.c:342 icmp6_dst_alloc+0x6c/0x260 net/ipv6/route.c:3346 ndisc_send_skb+0x3e4/0x162c net/ipv6/ndisc.c:492 ndisc_send_ns+0xd8/0x168 net/ipv6/ndisc.c:672 addrconf_dad_work+0x77c/0xfe8 net/ipv6/addrconf.c:4318 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[31] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] ___neigh_create+0xc08/0x2340 net/core/neighbour.c:661 __neigh_create+0x80/0xa4 net/core/neighbour.c:740 ip6_finish_output2+0xedc/0x1b68 net/ipv6/ip6_output.c:130 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline] ip6_finish_output+0x230/0x618 net/ipv6/ip6_output.c:221 NF_HOOK_COND include/linux/netfilter.h:314 [inline] ip6_output+0x2d0/0x644 net/ipv6/ip6_output.c:248 dst_output include/net/dst.h:470 [inline] NF_HOOK include/linux/netfilter.h:325 [inline] ndisc_send_skb+0xc18/0x162c net/ipv6/ndisc.c:513 ndisc_send_ns+0xd8/0x168 net/ipv6/ndisc.c:672 addrconf_dad_work+0x77c/0xfe8 net/ipv6/addrconf.c:4318 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[32] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dst_init+0x6c/0x438 net/core/dst.c:52 dst_alloc+0x118/0x15c net/core/dst.c:94 ip6_dst_alloc+0x38/0xc8 net/ipv6/route.c:342 icmp6_dst_alloc+0x6c/0x260 net/ipv6/route.c:3346 mld_sendpack+0x668/0xfec net/ipv6/mcast.c:1859 mld_send_initial_cr+0x238/0x2fc net/ipv6/mcast.c:2288 ipv6_mc_dad_complete+0x74/0x170 net/ipv6/mcast.c:2296 addrconf_dad_completed+0x530/0x9e4 net/ipv6/addrconf.c:4376 addrconf_dad_work+0x8a4/0xfe8 net/ipv6/addrconf.c:-1 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[33] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dst_init+0x6c/0x438 net/core/dst.c:52 dst_alloc+0x118/0x15c net/core/dst.c:94 ip6_dst_alloc+0x38/0xc8 net/ipv6/route.c:342 icmp6_dst_alloc+0x6c/0x260 net/ipv6/route.c:3346 ndisc_send_skb+0x3e4/0x162c net/ipv6/ndisc.c:492 ndisc_send_rs+0x378/0x504 net/ipv6/ndisc.c:724 addrconf_dad_completed+0x580/0x9e4 net/ipv6/addrconf.c:4396 addrconf_dad_work+0x8a4/0xfe8 net/ipv6/addrconf.c:-1 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[34] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] ___neigh_create+0xc08/0x2340 net/core/neighbour.c:661 __neigh_create+0x80/0xa4 net/core/neighbour.c:740 ip6_finish_output2+0xedc/0x1b68 net/ipv6/ip6_output.c:130 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline] ip6_finish_output+0x230/0x618 net/ipv6/ip6_output.c:221 NF_HOOK_COND include/linux/netfilter.h:314 [inline] ip6_output+0x2d0/0x644 net/ipv6/ip6_output.c:248 dst_output include/net/dst.h:470 [inline] NF_HOOK include/linux/netfilter.h:325 [inline] ndisc_send_skb+0xc18/0x162c net/ipv6/ndisc.c:513 ndisc_send_rs+0x378/0x504 net/ipv6/ndisc.c:724 addrconf_dad_completed+0x580/0x9e4 net/ipv6/addrconf.c:4396 addrconf_dad_work+0x8a4/0xfe8 net/ipv6/addrconf.c:-1 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[35] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dst_init+0x6c/0x438 net/core/dst.c:52 dst_alloc+0x118/0x15c net/core/dst.c:94 ip6_dst_alloc+0x38/0xc8 net/ipv6/route.c:342 icmp6_dst_alloc+0x6c/0x260 net/ipv6/route.c:3346 mld_sendpack+0x668/0xfec net/ipv6/mcast.c:1859 mld_send_initial_cr+0x238/0x2fc net/ipv6/mcast.c:2288 mld_dad_work+0x40/0x1d8 net/ipv6/mcast.c:2311 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[36] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] linkwatch_add_event net/core/link_watch.c:131 [inline] linkwatch_fire_event+0x13c/0x238 net/core/link_watch.c:324 netif_carrier_off+0x9c/0x114 net/sched/sch_generic.c:657 nsim_stop+0x90/0x3fc drivers/net/netdevsim/netdev.c:551 __dev_close_many+0x2f4/0x648 net/core/dev.c:1798 netif_close_many+0x1d8/0x51c net/core/dev.c:1824 netif_close_many_and_unlock+0x38/0x15c net/core/dev.c:12425 unregister_netdevice_many_notify+0x5a4/0x176c net/core/dev.c:12495 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[37] -3 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] neigh_destroy+0x328/0x57c net/core/neighbour.c:937 neigh_release include/net/neighbour.h:459 [inline] neigh_cleanup_and_release+0x130/0x46c net/core/neighbour.c:121 neigh_flush_one+0x348/0x3d0 net/core/neighbour.c:415 neigh_flush_dev+0x12c/0x1d4 net/core/neighbour.c:433 __neigh_ifdown+0xb0/0x57c net/core/neighbour.c:466 neigh_ifdown+0x2c/0x40 net/core/neighbour.c:489 rt6_disable_ip+0x55c/0x588 net/ipv6/route.c:5047 addrconf_ifdown+0x134/0x11b4 net/ipv6/addrconf.c:3889 addrconf_notify+0x29c/0xbbc net/ipv6/addrconf.c:-1 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] netif_close_many+0x368/0x51c net/core/dev.c:1829 netif_close_many_and_unlock+0x38/0x15c net/core/dev.c:12425 unregister_netdevice_many_notify+0x5a4/0x176c net/core/dev.c:12495 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 Call trace for netdevsim2[38] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] addr_event+0x288/0x408 drivers/infiniband/core/roce_gid_mgmt.c:870 inet6addr_event+0xa4/0xd8 drivers/infiniband/core/roce_gid_mgmt.c:903 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 atomic_notifier_call_chain+0xf0/0x1ac kernel/notifier.c:223 inet6addr_notifier_call_chain+0x30/0x40 net/ipv6/addrconf_core.c:108 addrconf_ifdown+0xa48/0x11b4 net/ipv6/addrconf.c:4014 addrconf_notify+0x29c/0xbbc net/ipv6/addrconf.c:-1 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] netif_close_many+0x368/0x51c net/core/dev.c:1829 netif_close_many_and_unlock+0x38/0x15c net/core/dev.c:12425 unregister_netdevice_many_notify+0x5a4/0x176c net/core/dev.c:12495 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 Call trace for netdevsim2[39] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] __qdisc_destroy+0x214/0x640 net/sched/sch_generic.c:1126 qdisc_put+0x90/0x120 net/sched/sch_generic.c:1150 dev_shutdown+0x2fc/0x368 net/sched/sch_generic.c:1515 unregister_netdevice_many_notify+0xc08/0x176c net/core/dev.c:12519 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[40] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:674 [inline] netdevice_event+0x424/0x7c0 drivers/infiniband/core/roce_gid_mgmt.c:822 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x176c net/core/dev.c:12532 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[41] +1 at __dev_hold include/linux/netdevice.h:4527 [inline] netdev_hold include/linux/netdevice.h:4569 [inline] dev_hold include/linux/netdevice.h:4592 [inline] netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:675 [inline] netdevice_event+0x4b0/0x7c0 drivers/infiniband/core/roce_gid_mgmt.c:822 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x176c net/core/dev.c:12532 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[42] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] neigh_parms_release+0x14c/0x204 net/core/neighbour.c:1812 inetdev_destroy net/ipv4/devinet.c:335 [inline] inetdev_event+0x590/0x1184 net/ipv4/devinet.c:1655 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x176c net/core/dev.c:12532 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[43] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] in_dev_finish_destroy+0xa0/0x1ac net/ipv4/devinet.c:258 in_dev_put include/linux/inetdevice.h:290 [inline] inetdev_destroy net/ipv4/devinet.c:338 [inline] inetdev_event+0x5e0/0x1184 net/ipv4/devinet.c:1655 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x176c net/core/dev.c:12532 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[44] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] neigh_parms_release+0x14c/0x204 net/core/neighbour.c:1812 addrconf_ifdown+0xe14/0x11b4 net/ipv6/addrconf.c:4043 addrconf_notify+0x29c/0xbbc net/ipv6/addrconf.c:-1 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x176c net/core/dev.c:12532 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[45] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] in6_dev_finish_destroy+0xc8/0x1e0 net/ipv6/addrconf_core.c:176 in6_dev_put include/net/addrconf.h:426 [inline] addrconf_ifdown+0xe64/0x11b4 net/ipv6/addrconf.c:4045 addrconf_notify+0x29c/0xbbc net/ipv6/addrconf.c:-1 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x176c net/core/dev.c:12532 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[46] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] dev_put include/linux/netdevice.h:4604 [inline] udp_tunnel_nic_unregister net/ipv4/udp_tunnel_nic.c:915 [inline] udp_tunnel_nic_netdevice_event+0xf34/0x1444 net/ipv4/udp_tunnel_nic.c:944 notifier_call_chain+0x1a4/0x624 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info+0xb8/0x120 net/core/dev.c:2275 call_netdevice_notifiers_extack net/core/dev.c:2313 [inline] call_netdevice_notifiers net/core/dev.c:2327 [inline] unregister_netdevice_many_notify+0xf24/0x176c net/core/dev.c:12532 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[47] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] rx_queue_release+0x128/0x1b4 net/core/net-sysfs.c:1160 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1dc/0x4b8 lib/kobject.c:737 net_rx_queue_update_kobjects+0x5bc/0x67c net/core/net-sysfs.c:1317 remove_queue_kobjects net/core/net-sysfs.c:2148 [inline] netdev_unregister_kobject+0xe8/0x39c net/core/net-sysfs.c:2304 unregister_netdevice_many_notify+0x123c/0x176c net/core/dev.c:12565 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[48] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] netdev_queue_release+0x68/0xec net/core/net-sysfs.c:1910 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1dc/0x4b8 lib/kobject.c:737 netdev_queue_update_kobjects+0x510/0x5f0 net/core/net-sysfs.c:2052 remove_queue_kobjects net/core/net-sysfs.c:2149 [inline] netdev_unregister_kobject+0xf8/0x39c net/core/net-sysfs.c:2304 unregister_netdevice_many_notify+0x123c/0x176c net/core/dev.c:12565 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[49] -1 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] unregister_netdevice_many_notify+0x1450/0x176c net/core/dev.c:12585 unregister_netdevice_many net/core/dev.c:12603 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12404 unregister_netdevice include/linux/netdevice.h:3492 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1198 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_dev_reload_down+0x9c/0xd0 drivers/net/netdevsim/dev.c:963 devlink_reload+0x19c/0x64c net/devlink/dev.c:462 devlink_pernet_pre_exit+0x1ac/0x30c net/devlink/core.c:578 ops_pre_exit_list net/core/net_namespace.c:161 [inline] ops_undo_list+0x158/0x81c net/core/net_namespace.c:235 cleanup_net+0x474/0x6c4 net/core/net_namespace.c:706 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[50] -1 at __dev_put include/linux/netdevice.h:4515 [inline] __linkwatch_run_queue+0x538/0x79c net/core/link_watch.c:246 linkwatch_event+0x58/0x68 net/core/link_watch.c:314 process_one_work+0x850/0x1154 kernel/workqueue.c:3391 Call trace for netdevsim2[51] -2 at __dev_put include/linux/netdevice.h:4515 [inline] netdev_put include/linux/netdevice.h:4579 [inline] fib_nh_common_release+0x5c/0x268 net/ipv4/fib_semantics.c:204 fib6_nh_release+0x1f8/0x20c net/ipv6/route.c:3740 fib6_info_destroy_rcu+0xc8/0x20c net/ipv6/ip6_fib.c:177 rcu_do_batch+0x36c/0xbb8 kernel/rcu/tree.c:2654 balance as of netdevsim2[51] is 1 Tested on: commit: 5445d641 arm64: Don't read GMID_EL1 when MTE is disabled git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci console output: https://syzkaller.appspot.com/x/log.txt?x=1554fdf9580000 kernel config: https://syzkaller.appspot.com/x/.config?x=56ed23170c168d4c dashboard link: https://syzkaller.appspot.com/bug?extid=e2af46126e0644cbebdd compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8 userspace arch: arm64 patch: https://syzkaller.appspot.com/x/patch.diff?x=16fd9901580000 ^ permalink raw reply [flat|nested] 20+ messages in thread
end of thread, other threads:[~2026-09-15 12:56 UTC | newest]
Thread overview: 20+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-05-10 20:18 [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot
2026-05-14 1:51 ` Forwarded: [syzbot] test patch for unregister_netdevice syzbot
2026-05-14 2:08 ` Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot
2026-05-14 2:36 ` syzbot
2026-05-14 4:02 ` syzbot
2026-05-14 6:48 ` Forwarded: [syzbot] test net main baseline syzbot
2026-05-14 8:24 ` Forwarded: [syzbot] test [PATCH net v2] ipv6: addrconf: skip autoconf on unregistering devices syzbot
2026-05-14 11:12 ` Forwarded: [syzbot] test WARN_ON for addrconf " syzbot
2026-05-14 11:58 ` Forwarded: [syzbot] test baseline for unregister_netdevice ref leak syzbot
2026-09-15 12:14 ` [syzbot] [net?] unregister_netdevice: waiting for DEV to become free (9) syzbot
2026-09-15 12:29 ` Forwarded: " syzbot
[not found] <B2CF7974DC914535+20260514015049.255578-1-raoxu@uniontech.com>
2026-05-14 1:59 ` syzbot
[not found] <950831E2452101D8+20260514020809.275684-1-raoxu@uniontech.com>
2026-05-14 2:17 ` syzbot
[not found] <0CE6AE93FEBA21AC+20260514023628.308904-1-raoxu@uniontech.com>
2026-05-14 2:45 ` syzbot
[not found] <113A84FF927506B4+20260514040220.410747-1-raoxu@uniontech.com>
2026-05-14 5:36 ` syzbot
[not found] <E61E4EBE5175D344+20260514064805.611177-1-raoxu@uniontech.com>
2026-05-14 7:30 ` syzbot
[not found] <BD680186E4DE6711+20260514082426.721996-1-raoxu@uniontech.com>
2026-05-14 9:20 ` syzbot
[not found] <FF91F2BF42AC95B3+20260514111238.1600030-1-raoxu@uniontech.com>
2026-05-14 11:43 ` syzbot
[not found] <FBE6DA28176D6E90+20260514115843.1655377-1-raoxu@uniontech.com>
2026-05-14 12:28 ` syzbot
[not found] <0d52ff78-4135-4761-a54a-d80ecfe1d88e@I-love.SAKURA.ne.jp>
2026-09-15 12:56 ` syzbot
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®