IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready refcount_t: increment on 0; use-after-free. 8021q: adding VLAN 0 to HW filter on device batadv0 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 6836 at lib/refcount.c:153 refcount_inc.cold.12+0x13/0x1a lib/refcount.c:153 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 6836 Comm: syz-executor.2 Not tainted 4.14.170-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 panic+0x1b0/0x358 kernel/panic.c:183 IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready __warn.cold.8+0x25/0x2c kernel/panic.c:547 report_bug+0x1a4/0x1f3 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:177 [inline] do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295 IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963 RIP: 0010:refcount_inc.cold.12+0x13/0x1a lib/refcount.c:153 RSP: 0018:ffff888098e27b08 EFLAGS: 00010286 RAX: 000000000000002b RBX: ffff8880a4939000 RCX: 0000000000000000 RDX: 000000000000002b RSI: ffffffff868cf180 RDI: ffffed10131c4f58 hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network RBP: ffff888098e27b08 R08: ffff8880a494cc48 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a4a8ca00 R13: 0000000000000000 R14: ffff888098e27cc8 R15: ffff8880a4a8cab0 sock_hold include/net/sock.h:619 [inline] l2tp_session_add_to_tunnel net/l2tp/l2tp_core.c:374 [inline] l2tp_session_create+0xb31/0x1630 net/l2tp/l2tp_core.c:1846 pppol2tp_connect+0x10c1/0x1900 net/l2tp/l2tp_ppp.c:721 hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network SYSC_connect+0x1e3/0x2a0 net/socket.c:1655 IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready SyS_connect+0x9/0x10 net/socket.c:1636 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x459819 IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready RSP: 002b:00007fe057ebcc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 8021q: adding VLAN 0 to HW filter on device batadv0 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 RDX: 0000000000000026 RSI: 0000000020000180 RDI: 0000000000000004 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe057ebd6d4 R13: 00000000004bfd8b R14: 00000000004d1948 R15: 00000000ffffffff Kernel Offset: disabled Rebooting in 86400 seconds..