call_netdevice_notifiers_extack net/core/dev.c:1931 [inline] call_netdevice_notifiers net/core/dev.c:1945 [inline] netdev_features_change net/core/dev.c:1290 [inline] netdev_update_features net/core/dev.c:9385 [inline] netdev_update_features+0xa3/0xb0 net/core/dev.c:9382 hsr_add_port+0x3a1/0x670 net/hsr/hsr_slave.c:193 hsr_dev_finalize+0x439/0x700 net/hsr/hsr_device.c:531 hsr_newlink+0x29b/0x660 net/hsr/hsr_netlink.c:102 __rtnl_newlink+0xd16/0x13e0 net/core/rtnetlink.c:3457 rtnl_newlink+0x5a/0x90 net/core/rtnetlink.c:3505 rtnetlink_rcv_msg+0x31d/0x8d0 net/core/rtnetlink.c:5570 netlink_rcv_skb+0x118/0x370 net/netlink/af_netlink.c:2492 netlink_unicast_kernel net/netlink/af_netlink.c:1315 [inline] netlink_unicast+0x42e/0x700 net/netlink/af_netlink.c:1341 netlink_sendmsg+0x775/0xc10 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg+0xab/0xe0 net/socket.c:724 __sys_sendto+0x1a4/0x270 net/socket.c:2036 __do_sys_sendto net/socket.c:2048 [inline] __se_sys_sendto net/socket.c:2044 [inline] __x64_sys_sendto+0xd8/0x1b0 net/socket.c:2044 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 44 at lib/ref_tracker.c:38 spin_unlock_irqrestore include/linux/spinlock.h:404 [inline] WARNING: CPU: 0 PID: 44 at lib/ref_tracker.c:38 ref_tracker_dir_exit.cold+0x163/0x1b4 lib/ref_tracker.c:37 Modules linked in: CPU: 0 PID: 44 Comm: kworker/u4:2 Not tainted 5.16.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit.cold+0x163/0x1b4 lib/ref_tracker.c:38 Code: c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 16 c7 5f f9 4d 39 f4 49 8b 04 24 4d 89 e7 75 3f 48 8b 74 24 08 48 89 ef e8 3d 8e 33 00 <0f> 0b e9 b0 aa 62 fb 4c 89 ff e8 ee c6 5f f9 e9 a3 fe ff ff e8 d4 RSP: 0018:ffffc9000114f9c0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff88cb5680 RDI: 0000000000000001 RBP: ffff8880777e25b8 R08: 0000000000000001 R09: ffffffff8ee71a0f R10: 0000000000000001 R11: 000000000007a08a R12: ffff8880777e2600 R13: ffff8880777e2600 R14: ffff8880777e2600 R15: ffff8880777e2600 FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5c3f2e4194 CR3: 000000007e4f9000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: free_netdev+0x293/0x4f0 net/core/dev.c:10276 netdev_run_todo+0x74c/0x930 net/core/dev.c:9953 default_device_exit_batch+0x2aa/0x360 net/core/dev.c:10934 cleanup_net+0x423/0x980 net/core/net_namespace.c:593 process_one_work+0x87f/0x1450 kernel/workqueue.c:2298 worker_thread+0x598/0x1040 kernel/workqueue.c:2445 kthread+0x3ab/0x480 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295