------------[ cut here ]------------ ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline] ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:177 [inline] ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: __refcount_sub_and_test include/linux/refcount.h:272 [inline] ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: __refcount_dec_and_test include/linux/refcount.h:315 [inline] ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: refcount_dec_and_test include/linux/refcount.h:333 [inline] ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: kref_put include/linux/kref.h:64 [inline] ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: batadv_dat_entry_put net/batman-adv/distributed-arp-table.c:133 [inline] ODEBUG: free active (active state 0) object: 0000000081d3decf object type: timer_list hint: batadv_dat_purge+0x0/0x27c net/batman-adv/distributed-arp-table.c:1829 WARNING: CPU: 0 PID: 4689 at lib/debugobjects.c:512 debug_print_object lib/debugobjects.c:509 [inline] WARNING: CPU: 0 PID: 4689 at lib/debugobjects.c:512 __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] WARNING: CPU: 0 PID: 4689 at lib/debugobjects.c:512 debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1027 Modules linked in: CPU: 0 PID: 4689 Comm: kworker/u4:8 Not tainted 6.2.0-rc7-syzkaller-17907-g2d3827b3f393 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Workqueue: netns cleanup_net pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object lib/debugobjects.c:509 [inline] pc : __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] pc : debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1027 lr : debug_print_object lib/debugobjects.c:509 [inline] lr : __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] lr : debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1027 sp : ffff8000142db9d0 x29: ffff8000142db9f0 x28: ffff00011799b000 x27: ffff00011799c000 x26: ffff000122636690 x25: ffff80000f130000 x24: ffff00011799b4f8 x23: 0000000000000007 x22: ffff80000bfb0900 x21: 0000000000000001 x20: dead000000000100 x19: ffff00011799a000 x18: 0000000000003b63 x17: 626f206663656433 x16: ffff000117e4d848 x15: ffff80000dbd2118 x14: ffff000117e4ce00 x13: 00000000ffffffff x12: ffff000117e4ce00 x11: ff808000081bbb4c x10: 0000000000000000 x9 : bb113aad65d8e300 x8 : bb113aad65d8e300 x7 : ffff80000bf650d4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000076 Call trace: debug_print_object lib/debugobjects.c:509 [inline] __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1027 slab_free_hook mm/slub.c:1756 [inline] slab_free_freelist_hook mm/slub.c:1807 [inline] slab_free mm/slub.c:3787 [inline] __kmem_cache_free+0x1dc/0x3e4 mm/slub.c:3800 kfree+0x104/0x268 mm/slab_common.c:1020 kvfree+0x40/0x50 mm/util.c:627 netdev_freemem+0x24/0x34 net/core/dev.c:10540 netdev_release+0x4c/0x64 net/core/net-sysfs.c:1910 device_release+0x44/0xe0 kobject_cleanup lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x18c/0x28c lib/kobject.c:721 netdev_run_todo+0x600/0x6a0 net/core/dev.c:10360 rtnl_unlock+0x14/0x20 net/core/rtnetlink.c:148 default_device_exit_batch+0x3a0/0x400 net/core/dev.c:11349 ops_exit_list net/core/net_namespace.c:174 [inline] cleanup_net+0x354/0x5c0 net/core/net_namespace.c:606 process_one_work+0x3ac/0x9d0 kernel/workqueue.c:2289 worker_thread+0x340/0x608 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 irq event stamp: 7301720 hardirqs last enabled at (7301719): [] __up_console_sem+0x60/0xb4 kernel/printk/printk.c:345 hardirqs last disabled at (7301720): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (7301650): [] spin_unlock_bh include/linux/spinlock.h:395 [inline] softirqs last enabled at (7301650): [] batadv_tvlv_handler_unregister+0xdc/0x1b8 net/batman-adv/tvlv.c:575 softirqs last disabled at (7301648): [] spin_lock_bh include/linux/spinlock.h:355 [inline] softirqs last disabled at (7301648): [] batadv_tvlv_handler_unregister+0xac/0x1b8 net/batman-adv/tvlv.c:573 ---[ end trace 0000000000000000 ]---