bridge0: port 3(batadv0) entered disabled state ------------[ cut here ]------------ ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline] ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:177 [inline] ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: __refcount_sub_and_test include/linux/refcount.h:272 [inline] ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: __refcount_dec_and_test include/linux/refcount.h:315 [inline] ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: refcount_dec_and_test include/linux/refcount.h:333 [inline] ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: kref_put include/linux/kref.h:64 [inline] ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: batadv_dat_entry_put net/batman-adv/distributed-arp-table.c:133 [inline] ODEBUG: free active (active state 0) object: 00000000f2032a3a object type: timer_list hint: batadv_dat_purge+0x0/0x154 net/batman-adv/distributed-arp-table.c:1829 WARNING: CPU: 0 PID: 10088 at lib/debugobjects.c:512 debug_print_object lib/debugobjects.c:509 [inline] WARNING: CPU: 0 PID: 10088 at lib/debugobjects.c:512 __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] WARNING: CPU: 0 PID: 10088 at lib/debugobjects.c:512 debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1027 Modules linked in: CPU: 0 PID: 10088 Comm: syz-executor.2 Not tainted 6.3.0-rc5-syzkaller-g9a03cbd79d3a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object lib/debugobjects.c:509 [inline] pc : __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] pc : debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1027 lr : debug_print_object lib/debugobjects.c:509 [inline] lr : __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] lr : debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1027 sp : ffff80001fd36df0 x29: ffff80001fd36e40 x28: ffff8000124a9660 x27: dfff800000000000 x26: ffff0001465914f8 x25: 0000000000000000 x24: ffff80001a13b890 x23: ffff8000124a9660 x22: ffff0001465914f8 x21: ffff80001a13b888 x20: ffff800012959e78 x19: ffff000146590000 x18: 1fffe000368517b6 x17: ffff800015c8d000 x16: ffff800008306ccc x15: 0000000000000000 x14: 1ffff00002b920b0 x13: dfff800000000000 x12: 0000000000000003 x11: ff8080000aab53ac x10: 0000000000000003 x9 : 6734a2659ec7bd00 x8 : 6734a2659ec7bd00 x7 : ffff800008281cb4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff80001fd36920 x1 : ffff80001248b8c0 x0 : ffff80019e6ad000 Call trace: debug_print_object lib/debugobjects.c:509 [inline] __debug_check_no_obj_freed lib/debugobjects.c:996 [inline] debug_check_no_obj_freed+0x410/0x528 lib/debugobjects.c:1027 slab_free_hook mm/slub.c:1756 [inline] slab_free_freelist_hook mm/slub.c:1807 [inline] slab_free mm/slub.c:3787 [inline] __kmem_cache_free+0x258/0x4b4 mm/slub.c:3800 kfree+0xc4/0x1a8 mm/slab_common.c:1019 kvfree+0x40/0x50 mm/util.c:649 netdev_freemem+0x4c/0x64 net/core/dev.c:10541 netdev_release+0x88/0xb0 net/core/net-sysfs.c:1938 device_release+0x8c/0x1ac kobject_cleanup lib/kobject.c:681 [inline] kobject_release lib/kobject.c:712 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x2a8/0x41c lib/kobject.c:729 netdev_run_todo+0xcf0/0xe08 net/core/dev.c:10361 rtnl_unlock net/core/rtnetlink.c:148 [inline] rtnetlink_rcv_msg+0xa6c/0xdb8 net/core/rtnetlink.c:6175 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2574 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6192 netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline] netlink_unicast+0x660/0x8d4 net/netlink/af_netlink.c:1365 netlink_sendmsg+0x834/0xb18 net/netlink/af_netlink.c:1942 sock_sendmsg_nosec net/socket.c:724 [inline] sock_sendmsg net/socket.c:747 [inline] ____sys_sendmsg+0x568/0x81c net/socket.c:2501 ___sys_sendmsg net/socket.c:2555 [inline] __sys_sendmsg+0x26c/0x33c net/socket.c:2584 __do_sys_sendmsg net/socket.c:2593 [inline] __se_sys_sendmsg net/socket.c:2591 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2591 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 34366 hardirqs last enabled at (34365): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1378 [inline] hardirqs last enabled at (34365): [] finish_lock_switch+0xbc/0x1e4 kernel/sched/core.c:5065 hardirqs last disabled at (34366): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (34286): [] spin_unlock_bh include/linux/spinlock.h:395 [inline] softirqs last enabled at (34286): [] batadv_tvlv_handler_unregister+0x158/0x254 net/batman-adv/tvlv.c:602 softirqs last disabled at (34284): [] spin_lock_bh include/linux/spinlock.h:355 [inline] softirqs last disabled at (34284): [] batadv_tvlv_handler_unregister+0xc4/0x254 net/batman-adv/tvlv.c:600 ---[ end trace 0000000000000000 ]---