------------[ cut here ]------------ kobject: 'ip6tnl0' (00000000c69b70bc): kobject_add_internal: parent: 'net', set: 'devices' ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 kernel/workqueue.c:4941 kobject: 'ip6tnl0' (00000000c69b70bc): kobject_uevent_env WARNING: CPU: 1 PID: 31335 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 lib/debugobjects.c:325 Kernel panic - not syncing: panic_on_warn set ... kobject: 'ip6tnl0' (00000000c69b70bc): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' CPU: 1 PID: 31335 Comm: kworker/u4:6 Not tainted 4.19.92-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net kobject: 'queues' (0000000051c02c2f): kobject_add_internal: parent: 'ip6tnl0', set: '' Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 panic+0x26a/0x50e kernel/panic.c:186 kobject: 'queues' (0000000051c02c2f): kobject_uevent_env kobject: 'queues' (0000000051c02c2f): kobject_uevent_env: filter function caused the event to drop! __warn.cold+0x20/0x53 kernel/panic.c:541 report_bug+0x263/0x2b0 lib/bug.c:186 kobject: 'rx-0' (00000000ff775e75): kobject_add_internal: parent: 'queues', set: 'queues' fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296 kobject: 'rx-0' (00000000ff775e75): kobject_uevent_env kobject: 'rx-0' (00000000ff775e75): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037 RIP: 0010:debug_print_object+0x168/0x250 lib/debugobjects.c:325 Code: dd 20 65 ea 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 20 65 ea 87 48 c7 c7 60 5a ea 87 e8 66 3d dc fd <0f> 0b 83 05 ab 90 6a 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 kobject: 'tx-0' (00000000e3b6c610): kobject_add_internal: parent: 'queues', set: 'queues' RSP: 0018:ffff8880a41cf838 EFLAGS: 00010086 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8155bc56 RDI: ffffed1014839ef9 RBP: ffff8880a41cf878 R08: ffff8880935fe280 R09: fffffbfff11f19bd R10: fffffbfff11f19bc R11: ffffffff88f8cde3 R12: 0000000000000001 R13: ffffffff88fa4420 R14: ffffffff815b3210 R15: ffff88808a6563e0 kobject: 'tx-0' (00000000e3b6c610): kobject_uevent_env kobject: 'tx-0' (00000000e3b6c610): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' __debug_check_no_obj_freed lib/debugobjects.c:785 [inline] debug_check_no_obj_freed+0x29f/0x464 lib/debugobjects.c:817 kfree+0xbd/0x220 mm/slab.c:3821 kvfree+0x61/0x70 mm/util.c:452 netdev_freemem+0x4c/0x60 net/core/dev.c:8914 kobject: 'ip6gre0' (00000000d3a733ec): kobject_add_internal: parent: 'net', set: 'devices' netdev_release+0x86/0xb0 net/core/net-sysfs.c:1645 kobject: 'ip6gre0' (00000000d3a733ec): kobject_uevent_env device_release+0x7b/0x210 drivers/base/core.c:892 kobject_cleanup lib/kobject.c:662 [inline] kobject_release lib/kobject.c:691 [inline] kref_put include/linux/kref.h:70 [inline] kobject_put.cold+0x289/0x2e6 lib/kobject.c:708 netdev_run_todo+0x53b/0x7a0 net/core/dev.c:8819 kobject: 'ip6gre0' (00000000d3a733ec): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' kobject: 'queues' (00000000ef3fbb20): kobject_add_internal: parent: 'ip6gre0', set: '' rtnl_unlock+0xe/0x10 net/core/rtnetlink.c:117 kobject: 'queues' (00000000ef3fbb20): kobject_uevent_env default_device_exit_batch+0x358/0x410 net/core/dev.c:9602 kobject: 'queues' (00000000ef3fbb20): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (00000000d0b761db): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (00000000d0b761db): kobject_uevent_env ops_exit_list.isra.0+0xfc/0x150 net/core/net_namespace.c:156 kobject: 'rx-0' (00000000d0b761db): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' cleanup_net+0x404/0x960 net/core/net_namespace.c:553 process_one_work+0x989/0x1750 kernel/workqueue.c:2153 kobject: 'tx-0' (000000008aa2e44e): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (000000008aa2e44e): kobject_uevent_env worker_thread+0x98/0xe40 kernel/workqueue.c:2296 kobject: 'tx-0' (000000008aa2e44e): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' kthread+0x354/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ======================================================