[ 45.085614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.102262][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.111134][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.122198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.249729][ T1269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.806395][ T3596] can: request_module (can-proto-0) failed. [ 45.826761][ T3596] can: request_module (can-proto-0) failed. [ 45.847871][ T3596] can: request_module (can-proto-0) failed. [ 48.111425][ T1269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.297269][ T3604] syz-executor.0 (3604) used greatest stack depth: 22744 bytes left [ 50.639145][ T1269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.680170][ T1269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.592132][ T1269] device hsr_slave_0 left promiscuous mode [ 51.599991][ T1269] device hsr_slave_1 left promiscuous mode [ 51.607598][ T1269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.616709][ T1269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.627546][ T1269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.636845][ T1269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.647490][ T1269] device bridge_slave_1 left promiscuous mode [ 51.654852][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.670412][ T1269] device bridge_slave_0 left promiscuous mode [ 51.678153][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.699216][ T1269] device veth1_macvtap left promiscuous mode [ 51.706189][ T1269] device veth0_macvtap left promiscuous mode [ 51.712414][ T1269] device veth1_vlan left promiscuous mode [ 51.719791][ T1269] device veth0_vlan left promiscuous mode [ 51.837765][ T1269] team0 (unregistering): Port device team_slave_1 removed [ 51.850584][ T1269] team0 (unregistering): Port device team_slave_0 removed [ 51.865781][ T1269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.881936][ T1269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.926732][ T1269] bond0 (unregistering): Released all slaves [ 52.037423][ T1269] leaked reference. [ 52.041598][ T1269] ethnl_default_notify+0x11c/0x560 [ 52.046856][ T1269] ethnl_netdev_event+0x30/0x40 [ 52.051810][ T1269] notifier_call_chain+0x94/0x170 [ 52.056936][ T1269] netdev_update_features+0xa3/0xb0 [ 52.062136][ T1269] hsr_add_port+0x3a1/0x670 [ 52.066729][ T1269] hsr_dev_finalize+0x439/0x700 [ 52.071669][ T1269] hsr_newlink+0x29b/0x660 [ 52.076180][ T1269] __rtnl_newlink+0xd16/0x13e0 [ 52.080959][ T1269] rtnl_newlink+0x5a/0x90 [ 52.085435][ T1269] rtnetlink_rcv_msg+0x31d/0x8d0 [ 52.090374][ T1269] netlink_rcv_skb+0x118/0x370 [ 52.095139][ T1269] netlink_unicast+0x42e/0x700 [ 52.099913][ T1269] netlink_sendmsg+0x775/0xc10 [ 52.104767][ T1269] sock_sendmsg+0xab/0xe0 [ 52.109191][ T1269] __sys_sendto+0x1a4/0x270 [ 52.114189][ T1269] __x64_sys_sendto+0xd8/0x1b0 [ 52.126136][ T1269] ------------[ cut here ]------------ [ 52.132192][ T1269] WARNING: CPU: 1 PID: 1269 at lib/ref_tracker.c:38 ref_tracker_dir_exit.cold+0x163/0x1b4 [ 52.145025][ T1269] Modules linked in: [ 52.149218][ T1269] CPU: 1 PID: 1269 Comm: kworker/u4:5 Not tainted 5.16.0-rc3-syzkaller #0 [ 52.158678][ T1269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.170774][ T1269] Workqueue: netns cleanup_net [ 52.176165][ T1269] RIP: 0010:ref_tracker_dir_exit.cold+0x163/0x1b4 [ 52.182947][ T1269] Code: c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 16 c7 5f f9 4d 39 f4 49 8b 04 24 4d 89 e7 75 3f 48 8b 74 24 08 48 89 ef e8 3d 8e 33 00 <0f> 0b e9 b0 aa 62 fb 4c 89 ff e8 ee c6 5f f9 e9 a3 fe ff ff e8 d4 [ 52.205561][ T1269] RSP: 0018:ffffc9000533f9c0 EFLAGS: 00010246 [ 52.211824][ T1269] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 52.220184][ T1269] RDX: 0000000000000001 RSI: ffffffff88cb5680 RDI: 0000000000000001 [ 52.229967][ T1269] RBP: ffff8880797aa5b8 R08: 0000000000000001 R09: ffffffff8ee71a0f [ 52.240406][ T1269] R10: 0000000000000001 R11: 000000000007a08a R12: ffff8880797aa600 [ 52.249975][ T1269] R13: ffff8880797aa600 R14: ffff8880797aa600 R15: ffff8880797aa600 [ 52.258722][ T1269] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 52.269333][ T1269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.276283][ T1269] CR2: 00007f81993f4028 CR3: 000000007e8e0000 CR4: 00000000003506e0 [ 52.285773][ T1269] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.294161][ T1269] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.302156][ T1269] Call Trace: [ 52.307051][ T1269] [ 52.310008][ T1269] free_netdev+0x293/0x4f0 [ 52.316106][ T1269] netdev_run_todo+0x74c/0x930 [ 52.320899][ T1269] ? generic_xdp_install+0x3c0/0x3c0 [ 52.327805][ T1269] ? default_device_exit+0x270/0x270 [ 52.333202][ T1269] ? unregister_netdevice_queue+0x13d/0x330 [ 52.339849][ T1269] ? unregister_netdevice_many+0x1600/0x1600 [ 52.348742][ T1269] ? br_dev_delete+0x104/0x190 [ 52.353939][ T1269] default_device_exit_batch+0x2aa/0x360 [ 52.359590][ T1269] ? unregister_netdev+0x20/0x20 [ 52.366176][ T1269] ? default_device_exit+0x1e0/0x270 [ 52.371497][ T1269] ? __init_waitqueue_head+0xd0/0xd0 [ 52.377268][ T1269] ? ops_exit_list+0x8c/0x140 [ 52.382303][ T1269] cleanup_net+0x423/0x980 [ 52.388352][ T1269] ? unregister_pernet_device+0x60/0x60 [ 52.394309][ T1269] process_one_work+0x87f/0x1450 [ 52.399421][ T1269] ? lock_release+0x720/0x720 [ 52.405696][ T1269] ? pwq_dec_nr_in_flight+0x230/0x230 [ 52.411178][ T1269] ? rwlock_bug.part.0+0x90/0x90 [ 52.417443][ T1269] ? _raw_spin_lock_irq+0x41/0x50 [ 52.422600][ T1269] worker_thread+0x598/0x1040 [ 52.428961][ T1269] ? process_one_work+0x1450/0x1450 [ 52.434472][ T1269] kthread+0x3ab/0x480 [ 52.438896][ T1269] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.445862][ T1269] ? set_kthread_struct+0x100/0x100 [ 52.451085][ T1269] ret_from_fork+0x1f/0x30 [ 52.457426][ T1269] [ 52.460463][ T1269] Kernel panic - not syncing: panic_on_warn set ... [ 52.467218][ T1269] CPU: 1 PID: 1269 Comm: kworker/u4:5 Not tainted 5.16.0-rc3-syzkaller #0 [ 52.475809][ T1269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.486316][ T1269] Workqueue: netns cleanup_net [ 52.491182][ T1269] Call Trace: [ 52.494465][ T1269] [ 52.497425][ T1269] dump_stack_lvl+0x57/0x7d [ 52.502043][ T1269] panic+0x214/0x49f [ 52.506028][ T1269] ? __warn_printk+0xee/0xee [ 52.510646][ T1269] ? ref_tracker_dir_exit.cold+0x163/0x1b4 [ 52.516537][ T1269] __warn.cold+0x2b/0x35 [ 52.520781][ T1269] ? ref_tracker_dir_exit.cold+0x163/0x1b4 [ 52.526676][ T1269] report_bug+0x15a/0x1b0 [ 52.531502][ T1269] handle_bug+0x3c/0x60 [ 52.535951][ T1269] exc_invalid_op+0x14/0x40 [ 52.540910][ T1269] asm_exc_invalid_op+0x12/0x20 [ 52.545763][ T1269] RIP: 0010:ref_tracker_dir_exit.cold+0x163/0x1b4 [ 52.552356][ T1269] Code: c1 e8 03 80 3c 18 00 74 08 4c 89 e7 e8 16 c7 5f f9 4d 39 f4 49 8b 04 24 4d 89 e7 75 3f 48 8b 74 24 08 48 89 ef e8 3d 8e 33 00 <0f> 0b e9 b0 aa 62 fb 4c 89 ff e8 ee c6 5f f9 e9 a3 fe ff ff e8 d4 [ 52.572420][ T1269] RSP: 0018:ffffc9000533f9c0 EFLAGS: 00010246 [ 52.578581][ T1269] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 52.586556][ T1269] RDX: 0000000000000001 RSI: ffffffff88cb5680 RDI: 0000000000000001 [ 52.594528][ T1269] RBP: ffff8880797aa5b8 R08: 0000000000000001 R09: ffffffff8ee71a0f [ 52.602508][ T1269] R10: 0000000000000001 R11: 000000000007a08a R12: ffff8880797aa600 [ 52.610578][ T1269] R13: ffff8880797aa600 R14: ffff8880797aa600 R15: ffff8880797aa600 [ 52.618754][ T1269] free_netdev+0x293/0x4f0 [ 52.623180][ T1269] netdev_run_todo+0x74c/0x930 [ 52.628041][ T1269] ? generic_xdp_install+0x3c0/0x3c0 [ 52.633330][ T1269] ? default_device_exit+0x270/0x270 [ 52.638612][ T1269] ? unregister_netdevice_queue+0x13d/0x330 [ 52.644555][ T1269] ? unregister_netdevice_many+0x1600/0x1600 [ 52.650804][ T1269] ? br_dev_delete+0x104/0x190 [ 52.655571][ T1269] default_device_exit_batch+0x2aa/0x360 [ 52.661294][ T1269] ? unregister_netdev+0x20/0x20 [ 52.666289][ T1269] ? default_device_exit+0x1e0/0x270 [ 52.671675][ T1269] ? __init_waitqueue_head+0xd0/0xd0 [ 52.677068][ T1269] ? ops_exit_list+0x8c/0x140 [ 52.681925][ T1269] cleanup_net+0x423/0x980 [ 52.686349][ T1269] ? unregister_pernet_device+0x60/0x60 [ 52.691909][ T1269] process_one_work+0x87f/0x1450 [ 52.696866][ T1269] ? lock_release+0x720/0x720 [ 52.701550][ T1269] ? pwq_dec_nr_in_flight+0x230/0x230 [ 52.706936][ T1269] ? rwlock_bug.part.0+0x90/0x90 [ 52.711873][ T1269] ? _raw_spin_lock_irq+0x41/0x50 [ 52.717339][ T1269] worker_thread+0x598/0x1040 [ 52.722130][ T1269] ? process_one_work+0x1450/0x1450 [ 52.727341][ T1269] kthread+0x3ab/0x480 [ 52.731497][ T1269] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.736697][ T1269] ? set_kthread_struct+0x100/0x100 [ 52.741901][ T1269] ret_from_fork+0x1f/0x30 [ 52.746508][ T1269] [ 52.750003][ T1269] Kernel Offset: disabled [ 52.754625][ T1269] Rebooting in 86400 seconds..