IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready refcount_t: decrement hit 0; leaking memory. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6110 at lib/refcount.c:227 refcount_dec.cold.14+0x13/0x1a lib/refcount.c:227 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 6110 Comm: syz-executor5 Not tainted 4.12.0+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:16 [inline] dump_stack+0x145/0x1e1 lib/dump_stack.c:52 panic+0x1a9/0x349 kernel/panic.c:180 __warn.cold.8+0x11a/0x14b kernel/panic.c:541 report_bug+0x1a3/0x227 lib/bug.c:183 fixup_bug arch/x86/kernel/traps.c:190 [inline] do_trap_no_signal arch/x86/kernel/traps.c:224 [inline] do_trap+0x1ef/0x2d0 arch/x86/kernel/traps.c:273 do_error_trap+0x11f/0x390 arch/x86/kernel/traps.c:310 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:323 invalid_op+0x1e/0x30 arch/x86/entry/entry_64.S:845 RIP: 0010:refcount_dec.cold.14+0x13/0x1a lib/refcount.c:227 RSP: 0018:ffff88006c40e9d8 EFLAGS: 00010286 RAX: 000000000000002c RBX: ffff88006367b2c0 RCX: 0000000000000000 RDX: 000000000000002c RSI: ffffffff870c8bc0 RDI: ffffed000d881d32 RBP: ffff88006c40e9d8 R08: ffff88006cd1a8c0 R09: 0000000000000006 kobject: 'loop0' (ffff880069636360): kobject_uevent_env kobject: 'loop0' (ffff880069636360): fill_kobj_path: path = '/devices/virtual/block/loop0' R10: 0000000000000000 R11: dffffc0000000000 R12: 1ffff1000d881d47 R13: ffff88006c40eb98 R14: ffff88006c40ea58 R15: ffff88006367b2dc __in6_ifa_put include/net/addrconf.h:359 [inline] addrconf_del_dad_work+0x21/0x30 net/ipv6/addrconf.c:321 ipv6_del_addr+0x42a/0xab0 net/ipv6/addrconf.c:1212 addrconf_permanent_addr net/ipv6/addrconf.c:3370 [inline] addrconf_notify+0x1c9e/0x26f0 net/ipv6/addrconf.c:3436 notifier_call_chain+0x19e/0x2c0 kernel/notifier.c:93 __raw_notifier_call_chain kernel/notifier.c:394 [inline] raw_notifier_call_chain+0x11/0x20 kernel/notifier.c:401 call_netdevice_notifiers_info+0x4b/0x60 net/core/dev.c:1678 call_netdevice_notifiers net/core/dev.c:1694 [inline] __dev_notify_flags+0xe9/0x2b0 net/core/dev.c:6730 dev_change_flags+0xe6/0x150 net/core/dev.c:6763 do_setlink+0xc66/0x3590 net/core/rtnetlink.c:2088 rtnl_newlink+0x10d8/0x1ab0 net/core/rtnetlink.c:2642 rtnetlink_rcv_msg+0x4c0/0x7e0 net/core/rtnetlink.c:4216 netlink_rcv_skb+0x211/0x490 net/netlink/af_netlink.c:2397 rtnetlink_rcv+0x25/0x30 net/core/rtnetlink.c:4222 netlink_unicast_kernel net/netlink/af_netlink.c:1265 [inline] netlink_unicast+0x426/0x630 net/netlink/af_netlink.c:1291 netlink_sendmsg+0x8c3/0xe80 net/netlink/af_netlink.c:1854 sock_sendmsg_nosec net/socket.c:633 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:643 SYSC_sendto+0x345/0x6a0 net/socket.c:1736 SyS_sendto+0x9/0x10 net/socket.c:1704 entry_SYSCALL_64_fastpath+0x23/0xc2 RIP: 0033:0x411173 RSP: 002b:00007fffe1416368 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000a30070 RCX: 0000000000411173 RDX: 0000000000000038 RSI: 0000000000a30070 RDI: 0000000000000003 RBP: 0000000000000082 R08: 00007fffe1416374 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe1416368 R13: 0000000000000003 R14: 00007fffe1416738 R15: 00007fffe14164b0 Kernel Offset: disabled Rebooting in 86400 seconds..