------------[ cut here ]------------ ODEBUG: free active (active state 0) object type: timer_list hint: arch_local_irq_disable arch/arm64/include/asm/irqflags.h:59 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: arch_local_irq_save arch/arm64/include/asm/irqflags.h:112 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 kernel/workqueue.c:1635 WARNING: CPU: 1 PID: 4030 at lib/debugobjects.c:511 debug_print_object lib/debugobjects.c:508 [inline] WARNING: CPU: 1 PID: 4030 at lib/debugobjects.c:511 __debug_check_no_obj_freed lib/debugobjects.c:1015 [inline] WARNING: CPU: 1 PID: 4030 at lib/debugobjects.c:511 debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1046 Modules linked in: CPU: 1 PID: 4030 Comm: kworker/u4:2 Not tainted 5.15.111-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Workqueue: netns cleanup_net pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object lib/debugobjects.c:508 [inline] pc : __debug_check_no_obj_freed lib/debugobjects.c:1015 [inline] pc : debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1046 lr : debug_print_object lib/debugobjects.c:508 [inline] lr : __debug_check_no_obj_freed lib/debugobjects.c:1015 [inline] lr : debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1046 sp : ffff80001cd57540 x29: ffff80001cd57580 x28: ffff800011ab2e40 x27: dfff800000000000 x26: ffff0000c15594f8 x25: 0000000000000000 x24: ffff80001867afe8 x23: ffff0000c83250e0 x22: ffff800011f40ef8 x21: ffff800011ab2e40 x20: ffff80001867afe0 x19: ffff0000c1558000 x18: 0000000000000001 x17: ff808000083359dc x16: ffff800011948074 x15: ffff8000083359dc x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000000000 x11: ff8080000832c484 x10: 0000000000000000 x9 : 2ea84c170b03d000 x8 : 2ea84c170b03d000 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001cd56cb8 x4 : ffff8000149afce0 x3 : ffff80000854d4e0 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000061 Call trace: debug_print_object lib/debugobjects.c:508 [inline] __debug_check_no_obj_freed lib/debugobjects.c:1015 [inline] debug_check_no_obj_freed+0x3f0/0x50c lib/debugobjects.c:1046 slab_free_hook mm/slub.c:1680 [inline] slab_free_freelist_hook+0x9c/0x1ec mm/slub.c:1731 slab_free mm/slub.c:3499 [inline] kfree+0x178/0x410 mm/slub.c:4559 kvfree+0x40/0x50 mm/util.c:654 netdev_freemem+0x4c/0x64 net/core/dev.c:10769 netdev_release+0x88/0xb0 net/core/net-sysfs.c:1903 device_release+0x8c/0x1ac kobject_cleanup lib/kobject.c:713 [inline] kobject_release lib/kobject.c:744 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x2c4/0x438 lib/kobject.c:761 netdev_run_todo+0x968/0xae0 net/core/dev.c:10633 rtnl_unlock+0x14/0x20 net/core/rtnetlink.c:112 default_device_exit_batch+0x4c4/0x520 net/core/dev.c:11595 ops_exit_list net/core/net_namespace.c:174 [inline] cleanup_net+0x5e0/0x9bc net/core/net_namespace.c:596 process_one_work+0x790/0x11b8 kernel/workqueue.c:2307 worker_thread+0x910/0x1034 kernel/workqueue.c:2454 kthread+0x37c/0x45c kernel/kthread.c:319 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 irq event stamp: 12010146 hardirqs last enabled at (12010145): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (12010146): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387 softirqs last enabled at (12010090): [] spin_unlock_bh include/linux/spinlock.h:408 [inline] softirqs last enabled at (12010090): [] batadv_tvlv_handler_unregister+0x160/0x27c net/batman-adv/tvlv.c:575 softirqs last disabled at (12010088): [] spin_lock_bh include/linux/spinlock.h:368 [inline] softirqs last disabled at (12010088): [] batadv_tvlv_handler_unregister+0xcc/0x27c net/batman-adv/tvlv.c:573 ---[ end trace 1c42567ffd934e16 ]--- netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 device hsr_slave_0 left promiscuous mode device hsr_slave_1 left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_0 left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state device veth1_macvtap left promiscuous mode device veth0_macvtap left promiscuous mode device veth1_vlan left promiscuous mode device veth0_vlan left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): Released all slaves netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0