syzbot

------------[ cut here ]------------
ODEBUG: free active (active state 0) object type: timer_list hint: arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline]
ODEBUG: free active (active state 0) object type: timer_list hint: atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:177 [inline]
ODEBUG: free active (active state 0) object type: timer_list hint: __refcount_sub_and_test include/linux/refcount.h:272 [inline]
ODEBUG: free active (active state 0) object type: timer_list hint: __refcount_dec_and_test include/linux/refcount.h:315 [inline]
ODEBUG: free active (active state 0) object type: timer_list hint: refcount_dec_and_test include/linux/refcount.h:333 [inline]
ODEBUG: free active (active state 0) object type: timer_list hint: kref_put include/linux/kref.h:64 [inline]
ODEBUG: free active (active state 0) object type: timer_list hint: batadv_dat_entry_put net/batman-adv/distributed-arp-table.c:133 [inline]
ODEBUG: free active (active state 0) object type: timer_list hint: batadv_dat_purge+0x0/0x284 net/batman-adv/distributed-arp-table.c:1829
WARNING: CPU: 1 PID: 3202 at lib/debugobjects.c:505 debug_print_object lib/debugobjects.c:502 [inline]
WARNING: CPU: 1 PID: 3202 at lib/debugobjects.c:505 __debug_check_no_obj_freed lib/debugobjects.c:989 [inline]
WARNING: CPU: 1 PID: 3202 at lib/debugobjects.c:505 debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020
Modules linked in:
CPU: 1 PID: 3202 Comm: kworker/u4:3 Not tainted 6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022
Workqueue: netns cleanup_net
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : debug_print_object lib/debugobjects.c:502 [inline]
pc : __debug_check_no_obj_freed lib/debugobjects.c:989 [inline]
pc : debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020
lr : debug_print_object lib/debugobjects.c:502 [inline]
lr : __debug_check_no_obj_freed lib/debugobjects.c:989 [inline]
lr : debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020
sp : ffff800010feb9b0
x29: ffff800010feb9d0 x28: ffff0000cfaef000 x27: ffff0000cfaf0000
x26: ffff0000d0c55168 x25: ffff0000d0c554d8 x24: ffff80000c0cf7d0
x23: ffff0000cfaef4f8 x22: ffff80000c0cf7d0 x21: 0000000000000001
x20: dead000000000100 x19: ffff0000cfaee000 x18: 00000000000000c0
x17: 6e6968207473696c x16: ffff80000dbe6158 x15: ffff0000cd44b480
x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000cd44b480
x11: ff808000081c4d64 x10: 0000000000000000 x9 : 7063867d28873b00
x8 : 7063867d28873b00 x7 : ffff80000c091ebc x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000100000000 x0 : 000000000000005d
Call trace:
 debug_print_object lib/debugobjects.c:502 [inline]
 __debug_check_no_obj_freed lib/debugobjects.c:989 [inline]
 debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020
 slab_free_hook mm/slub.c:1699 [inline]
 slab_free_freelist_hook mm/slub.c:1750 [inline]
 slab_free mm/slub.c:3661 [inline]
 __kmem_cache_free+0x12c/0x314 mm/slub.c:3674
 kfree+0x9c/0x118 mm/slab_common.c:1007
 kvfree+0x40/0x50 mm/util.c:627
 netdev_freemem+0x24/0x34 net/core/dev.c:10542
 netdev_release+0x48/0x60 net/core/net-sysfs.c:1910
 device_release+0x44/0xe0
 kobject_cleanup+0xe8/0x280 lib/kobject.c:673
 kobject_release lib/kobject.c:704 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x94/0xf8 lib/kobject.c:721
 netdev_run_todo+0x650/0x6f0 net/core/dev.c:10370
 rtnl_unlock+0x14/0x20 net/core/rtnetlink.c:147
 default_device_exit_batch+0x3c4/0x424 net/core/dev.c:11342
 ops_exit_list net/core/net_namespace.c:174 [inline]
 cleanup_net+0x3cc/0x648 net/core/net_namespace.c:601
 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289
 worker_thread+0x340/0x610 kernel/workqueue.c:2436
 kthread+0x12c/0x158 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:863
irq event stamp: 2582142
hardirqs last  enabled at (2582141): [<ffff8000081c3048>] __up_console_sem+0xb0/0xfc kernel/printk/printk.c:261
hardirqs last disabled at (2582142): [<ffff80000c084084>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (2582074): [<ffff80000bf670ec>] spin_unlock_bh include/linux/spinlock.h:395 [inline]
softirqs last  enabled at (2582074): [<ffff80000bf670ec>] batadv_tvlv_handler_unregister+0xec/0x1d8 net/batman-adv/tvlv.c:575
softirqs last disabled at (2582072): [<ffff80000bf670bc>] spin_lock_bh include/linux/spinlock.h:355 [inline]
softirqs last disabled at (2582072): [<ffff80000bf670bc>] batadv_tvlv_handler_unregister+0xbc/0x1d8 net/batman-adv/tvlv.c:573
---[ end trace 0000000000000000 ]---
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50