------------[ cut here ]------------ ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline] ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:177 [inline] ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: __refcount_sub_and_test include/linux/refcount.h:272 [inline] ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: __refcount_dec_and_test include/linux/refcount.h:315 [inline] ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: refcount_dec_and_test include/linux/refcount.h:333 [inline] ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: kref_put include/linux/kref.h:64 [inline] ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: batadv_dat_entry_put net/batman-adv/distributed-arp-table.c:133 [inline] ODEBUG: free active (active state 0) object: 000000000329d856 object type: timer_list hint: batadv_dat_purge+0x0/0x154 net/batman-adv/distributed-arp-table.c:1829 WARNING: CPU: 1 PID: 6561 at lib/debugobjects.c:508 debug_print_object lib/debugobjects.c:505 [inline] WARNING: CPU: 1 PID: 6561 at lib/debugobjects.c:508 __debug_check_no_obj_freed lib/debugobjects.c:1023 [inline] WARNING: CPU: 1 PID: 6561 at lib/debugobjects.c:508 debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1054 Modules linked in: CPU: 1 PID: 6561 Comm: kworker/u4:6 Not tainted 6.4.0-rc5-syzkaller-g45010c64f1e4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 Workqueue: netns cleanup_net pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object lib/debugobjects.c:505 [inline] pc : __debug_check_no_obj_freed lib/debugobjects.c:1023 [inline] pc : debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1054 lr : debug_print_object lib/debugobjects.c:505 [inline] lr : __debug_check_no_obj_freed lib/debugobjects.c:1023 [inline] lr : debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1054 sp : ffff8000981675d0 x29: ffff800098167620 x28: ffff80008a5bc420 x27: dfff800000000000 x26: ffff000152de14f8 x25: 0000000000000000 x24: ffff8000924b4ef8 x23: ffff80008a5bc420 x22: ffff000152de14f8 x21: ffff8000924b4ef0 x20: ffff80008aa72c78 x19: ffff000152de0000 x18: 1fffe00036848bc6 x17: ffff80008debd000 x16: ffff8000803122b8 x15: 0000000000000002 x14: 1ffff00011bd80ac x13: dfff800000000000 x12: 0000000000000003 x11: 0000000000000001 x10: 0000000000000003 x9 : b2d5efd2cd427700 x8 : b2d5efd2cd427700 x7 : ffff80008028cadc x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000007 x1 : ffff80008a59dd40 x0 : ffff80012643a000 Call trace: debug_print_object lib/debugobjects.c:505 [inline] __debug_check_no_obj_freed lib/debugobjects.c:1023 [inline] debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1054 slab_free_hook mm/slub.c:1756 [inline] slab_free_freelist_hook mm/slub.c:1807 [inline] slab_free mm/slub.c:3786 [inline] __kmem_cache_free+0x24c/0x49c mm/slub.c:3799 kfree+0xb8/0x19c mm/slab_common.c:1015 kvfree+0x40/0x50 mm/util.c:650 netdev_freemem+0x4c/0x64 net/core/dev.c:10580 netdev_release+0x88/0xb0 net/core/net-sysfs.c:1938 device_release+0x8c/0x1ac kobject_cleanup lib/kobject.c:683 [inline] kobject_release lib/kobject.c:714 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x2a8/0x41c lib/kobject.c:731 netdev_run_todo+0xcf0/0xe08 net/core/dev.c:10400 rtnl_unlock+0x14/0x20 net/core/rtnetlink.c:151 default_device_exit_batch+0x6cc/0x744 net/core/dev.c:11392 ops_exit_list net/core/net_namespace.c:175 [inline] cleanup_net+0x5dc/0x8d0 net/core/net_namespace.c:614 process_one_work+0x788/0x12d4 kernel/workqueue.c:2405 worker_thread+0x8e0/0xfe8 kernel/workqueue.c:2552 kthread+0x288/0x310 kernel/kthread.c:379 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853 irq event stamp: 89351994 hardirqs last enabled at (89351993): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1378 [inline] hardirqs last enabled at (89351993): [] finish_lock_switch+0xbc/0x1e4 kernel/sched/core.c:5095 hardirqs last disabled at (89351994): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:407 softirqs last enabled at (89351914): [] spin_unlock_bh include/linux/spinlock.h:395 [inline] softirqs last enabled at (89351914): [] batadv_tvlv_handler_unregister+0x158/0x254 net/batman-adv/tvlv.c:602 softirqs last disabled at (89351912): [] spin_lock_bh include/linux/spinlock.h:355 [inline] softirqs last disabled at (89351912): [] batadv_tvlv_handler_unregister+0xc4/0x254 net/batman-adv/tvlv.c:600 ---[ end trace 0000000000000000 ]---