------------[ cut here ]------------ ODEBUG: free active (active state 0) object type: timer_list hint: arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:177 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: __refcount_sub_and_test include/linux/refcount.h:272 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: __refcount_dec_and_test include/linux/refcount.h:315 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: refcount_dec_and_test include/linux/refcount.h:333 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: kref_put include/linux/kref.h:64 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: batadv_dat_entry_put net/batman-adv/distributed-arp-table.c:133 [inline] ODEBUG: free active (active state 0) object type: timer_list hint: batadv_dat_purge+0x0/0x284 net/batman-adv/distributed-arp-table.c:1829 WARNING: CPU: 0 PID: 9 at lib/debugobjects.c:505 debug_print_object lib/debugobjects.c:502 [inline] WARNING: CPU: 0 PID: 9 at lib/debugobjects.c:505 __debug_check_no_obj_freed lib/debugobjects.c:989 [inline] WARNING: CPU: 0 PID: 9 at lib/debugobjects.c:505 debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020 Modules linked in: CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 Workqueue: netns cleanup_net pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object lib/debugobjects.c:502 [inline] pc : __debug_check_no_obj_freed lib/debugobjects.c:989 [inline] pc : debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020 lr : debug_print_object lib/debugobjects.c:502 [inline] lr : __debug_check_no_obj_freed lib/debugobjects.c:989 [inline] lr : debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020 sp : ffff80000f2039e0 x29: ffff80000f203a00 x28: ffff0000e608b000 x27: ffff0000e608c000 x26: ffff0000c71bad48 x25: ffff0000ddde0aa0 x24: ffff80000bfff5b8 x23: ffff0000e608b4f8 x22: ffff80000bfff5b8 x21: 0000000000000001 x20: dead000000000100 x19: ffff0000e608a000 x18: 00000000000000c0 x17: 6e6968207473696c x16: ffff80000db49158 x15: ffff0000c02d0000 x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000c02d0000 x11: ff808000081c0d5c x10: 0000000000000000 x9 : bcb6e0f33589f100 x8 : bcb6e0f33589f100 x7 : ffff80000819545c x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 000000000000005d Call trace: debug_print_object lib/debugobjects.c:502 [inline] __debug_check_no_obj_freed lib/debugobjects.c:989 [inline] debug_check_no_obj_freed+0x214/0x2b0 lib/debugobjects.c:1020 slab_free_hook mm/slub.c:1734 [inline] slab_free_freelist_hook mm/slub.c:1785 [inline] slab_free mm/slub.c:3539 [inline] kfree+0x14c/0x348 mm/slub.c:4567 kvfree+0x40/0x50 mm/util.c:655 netdev_freemem+0x24/0x34 net/core/dev.c:10557 netdev_release+0x48/0x60 net/core/net-sysfs.c:1910 device_release+0x44/0xe0 kobject_cleanup+0xe8/0x280 lib/kobject.c:673 kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x94/0xf8 lib/kobject.c:721 netdev_run_todo+0x650/0x6f0 net/core/dev.c:10385 rtnl_unlock+0x14/0x20 net/core/rtnetlink.c:147 default_device_exit_batch+0x3c4/0x424 net/core/dev.c:11357 ops_exit_list net/core/net_namespace.c:168 [inline] cleanup_net+0x3cc/0x648 net/core/net_namespace.c:595 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289 worker_thread+0x340/0x610 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 8117866 hardirqs last enabled at (8117865): [] __up_console_sem+0xb0/0xfc kernel/printk/printk.c:264 hardirqs last disabled at (8117866): [] el1_dbg+0x24/0x5c arch/arm64/kernel/entry-common.c:404 softirqs last enabled at (8117796): [] spin_unlock_bh include/linux/spinlock.h:394 [inline] softirqs last enabled at (8117796): [] batadv_tvlv_handler_unregister+0xec/0x1d8 net/batman-adv/tvlv.c:575 softirqs last disabled at (8117794): [] spin_lock_bh include/linux/spinlock.h:354 [inline] softirqs last disabled at (8117794): [] batadv_tvlv_handler_unregister+0xbc/0x1d8 net/batman-adv/tvlv.c:573 ---[ end trace 0000000000000000 ]--- device hsr_slave_0 left promiscuous mode device hsr_slave_1 left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_0 left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state device veth1_macvtap left promiscuous mode device veth0_macvtap left promiscuous mode device veth1_vlan left promiscuous mode device veth0_vlan left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): Released all slaves