device bridge_slave_1 entered promiscuous mode ------------[ cut here ]------------ kobject: 'bonding_slave' (00000000a558bde5): kobject_add_internal: parent: 'bond_slave_0', set: '' bond0: Enslaving bond_slave_0 as an active interface with an up link ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 kernel/workqueue.c:4941 WARNING: CPU: 0 PID: 48 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 lib/debugobjects.c:325 kobject: 'bonding_slave' (000000005ccf5e46): kobject_add_internal: parent: 'bond_slave_1', set: '' Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 48 Comm: kworker/u4:2 Not tainted 4.19.91-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x197/0x210 lib/dump_stack.c:118 panic+0x26a/0x50e kernel/panic.c:186 bond0: Enslaving bond_slave_1 as an active interface with an up link kobject: 'veth0_to_team' (000000003e36d851): kobject_add_internal: parent: 'net', set: 'devices' __warn.cold+0x20/0x53 kernel/panic.c:541 kobject: 'veth0_to_team' (000000003e36d851): kobject_uevent_env report_bug+0x263/0x2b0 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x204/0x360 arch/x86/kernel/traps.c:296 kobject: 'veth0_to_team' (000000003e36d851): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team' kobject: 'queues' (000000006c1f5d5a): kobject_add_internal: parent: 'veth0_to_team', set: '' kobject: 'queues' (000000006c1f5d5a): kobject_uevent_env kobject: 'queues' (000000006c1f5d5a): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (00000000a3515f74): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (00000000a3515f74): kobject_uevent_env do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316 kobject: 'rx-0' (00000000a3515f74): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/rx-0' invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037 kobject: 'tx-0' (000000003dcee92e): kobject_add_internal: parent: 'queues', set: 'queues' RIP: 0010:debug_print_object+0x168/0x250 lib/debugobjects.c:325 kobject: 'tx-0' (000000003dcee92e): kobject_uevent_env Code: dd e0 63 ea 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd e0 63 ea 87 48 c7 c7 20 59 ea 87 e8 a6 46 dc fd <0f> 0b 83 05 ab 96 6a 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 RSP: 0018:ffff8880a9ab7838 EFLAGS: 00010086 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8155bb16 RDI: ffffed1015356ef9 RBP: ffff8880a9ab7878 R08: ffff8880a9aa8500 R09: fffffbfff11f19ad R10: fffffbfff11f19ac R11: ffffffff88f8cd63 R12: 0000000000000001 R13: ffffffff88fa43a0 R14: ffffffff815b30d0 R15: ffff88802d106d20 kobject: 'tx-0' (000000003dcee92e): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/tx-0' kobject: 'batman_adv' (0000000088e0c2d6): kobject_add_internal: parent: 'veth0_to_team', set: '' __debug_check_no_obj_freed lib/debugobjects.c:785 [inline] debug_check_no_obj_freed+0x29f/0x464 lib/debugobjects.c:817 kfree+0xbd/0x220 mm/slab.c:3821 kvfree+0x61/0x70 mm/util.c:452 netdev_freemem+0x4c/0x60 net/core/dev.c:8914 kobject: 'team_slave_0' (0000000059eab0c4): kobject_add_internal: parent: 'net', set: 'devices' netdev_release+0x86/0xb0 net/core/net-sysfs.c:1645 device_release+0x7b/0x210 drivers/base/core.c:892 kobject_cleanup lib/kobject.c:662 [inline] kobject_release lib/kobject.c:691 [inline] kref_put include/linux/kref.h:70 [inline] kobject_put.cold+0x289/0x2e6 lib/kobject.c:708 kobject: 'team_slave_0' (0000000059eab0c4): kobject_uevent_env netdev_run_todo+0x53b/0x7a0 net/core/dev.c:8819 kobject: 'team_slave_0' (0000000059eab0c4): fill_kobj_path: path = '/devices/virtual/net/team_slave_0' rtnl_unlock+0xe/0x10 net/core/rtnetlink.c:117 kobject: 'queues' (000000000bca4069): kobject_add_internal: parent: 'team_slave_0', set: '' default_device_exit_batch+0x358/0x410 net/core/dev.c:9602 kobject: 'queues' (000000000bca4069): kobject_uevent_env kobject: 'queues' (000000000bca4069): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (000000003924f829): kobject_add_internal: parent: 'queues', set: 'queues' ops_exit_list.isra.0+0xfc/0x150 net/core/net_namespace.c:156 cleanup_net+0x404/0x960 net/core/net_namespace.c:553 kobject: 'rx-0' (000000003924f829): kobject_uevent_env process_one_work+0x989/0x1750 kernel/workqueue.c:2153 kobject: 'rx-0' (000000003924f829): fill_kobj_path: path = '/devices/virtual/net/team_slave_0/queues/rx-0' kobject: 'tx-0' (0000000047b414e0): kobject_add_internal: parent: 'queues', set: 'queues' worker_thread+0x98/0xe40 kernel/workqueue.c:2296 kobject: 'tx-0' (0000000047b414e0): kobject_uevent_env kthread+0x354/0x420 kernel/kthread.c:246 kobject: 'tx-0' (0000000047b414e0): fill_kobj_path: path = '/devices/virtual/net/team_slave_0/queues/tx-0' ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ======================================================