bond0: Enslaving bond_slave_1 as an active interface with an up link ------------[ cut here ]------------ IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready team0: Port device team_slave_0 added ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 kernel/workqueue.c:4941 WARNING: CPU: 0 PID: 310 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 lib/debugobjects.c:325 IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready Kernel panic - not syncing: panic_on_warn set ... team0: Port device team_slave_1 added CPU: 0 PID: 310 Comm: kworker/u4:5 Not tainted 4.19.91-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready panic+0x26a/0x50e kernel/panic.c:186 IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready __warn.cold+0x20/0x53 kernel/panic.c:541 report_bug+0x263/0x2b0 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037 RIP: 0010:debug_print_object+0x168/0x250 lib/debugobjects.c:325 Code: dd e0 63 ea 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd e0 63 ea 87 48 c7 c7 20 59 ea 87 e8 a6 46 dc fd <0f> 0b 83 05 ab 96 6a 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 RSP: 0018:ffff8880a951f838 EFLAGS: 00010086 kobject: 'veth0_to_hsr' (000000001196be56): kobject_add_internal: parent: 'net', set: 'devices' RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 kobject: 'veth0_to_hsr' (000000001196be56): kobject_uevent_env RDX: 0000000000000000 RSI: ffffffff8155bb16 RDI: ffffed10152a3ef9 kobject: 'veth0_to_hsr' (000000001196be56): fill_kobj_path: path = '/devices/virtual/net/veth0_to_hsr' RBP: ffff8880a951f878 R08: ffff8880a94865c0 R09: ffffed1015d03ee3 kobject: 'queues' (00000000ab98f81d): kobject_add_internal: parent: 'veth0_to_hsr', set: '' R10: ffffed1015d03ee2 R11: ffff8880ae81f717 R12: 0000000000000001 kobject: 'queues' (00000000ab98f81d): kobject_uevent_env R13: ffffffff88fa43a0 R14: ffffffff815b30d0 R15: ffff888092052b20 kobject: 'queues' (00000000ab98f81d): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (00000000f8fb4b3f): kobject_add_internal: parent: 'queues', set: 'queues' __debug_check_no_obj_freed lib/debugobjects.c:785 [inline] debug_check_no_obj_freed+0x29f/0x464 lib/debugobjects.c:817 kfree+0xbd/0x220 mm/slab.c:3821 kobject: 'rx-0' (00000000f8fb4b3f): kobject_uevent_env kvfree+0x61/0x70 mm/util.c:452 kobject: 'rx-0' (00000000f8fb4b3f): fill_kobj_path: path = '/devices/virtual/net/veth0_to_hsr/queues/rx-0' netdev_freemem+0x4c/0x60 net/core/dev.c:8914 kobject: 'tx-0' (00000000f306b2bf): kobject_add_internal: parent: 'queues', set: 'queues' netdev_release+0x86/0xb0 net/core/net-sysfs.c:1645 kobject: 'tx-0' (00000000f306b2bf): kobject_uevent_env kobject: 'tx-0' (00000000f306b2bf): fill_kobj_path: path = '/devices/virtual/net/veth0_to_hsr/queues/tx-0' device_release+0x7b/0x210 drivers/base/core.c:892 kobject: 'batman_adv' (00000000bfc72851): kobject_add_internal: parent: 'veth0_to_hsr', set: '' kobject_cleanup lib/kobject.c:662 [inline] kobject_release lib/kobject.c:691 [inline] kref_put include/linux/kref.h:70 [inline] kobject_put.cold+0x289/0x2e6 lib/kobject.c:708 netdev_run_todo+0x53b/0x7a0 net/core/dev.c:8819 kobject: 'hsr_slave_0' (000000000151614b): kobject_add_internal: parent: 'net', set: 'devices' rtnl_unlock+0xe/0x10 net/core/rtnetlink.c:117 kobject: 'hsr_slave_0' (000000000151614b): kobject_uevent_env default_device_exit_batch+0x358/0x410 net/core/dev.c:9602 kobject: 'hsr_slave_0' (000000000151614b): fill_kobj_path: path = '/devices/virtual/net/hsr_slave_0' kobject: 'queues' (00000000bac4bec3): kobject_add_internal: parent: 'hsr_slave_0', set: '' ops_exit_list.isra.0+0xfc/0x150 net/core/net_namespace.c:156 kobject: 'queues' (00000000bac4bec3): kobject_uevent_env cleanup_net+0x404/0x960 net/core/net_namespace.c:553 process_one_work+0x989/0x1750 kernel/workqueue.c:2153 kobject: 'queues' (00000000bac4bec3): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (000000006024908d): kobject_add_internal: parent: 'queues', set: 'queues' worker_thread+0x98/0xe40 kernel/workqueue.c:2296 kthread+0x354/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 kobject: 'rx-0' (000000006024908d): kobject_uevent_env ======================================================