ref_tracker: freed in:
 netdev_tracker_free include/linux/netdevice.h:4491 [inline]
 netdev_put include/linux/netdevice.h:4508 [inline]
 netdev_put include/linux/netdevice.h:4504 [inline]
 netdev_watchdog_down net/sched/sch_generic.c:600 [inline]
 dev_deactivate_many+0x28c/0xfe0 net/sched/sch_generic.c:1363
 dev_deactivate+0x109/0x1d0 net/sched/sch_generic.c:1397
 linkwatch_do_dev net/core/link_watch.c:184 [inline]
 linkwatch_do_dev+0xd3/0x120 net/core/link_watch.c:166
 __linkwatch_run_queue+0x3a5/0x810 net/core/link_watch.c:240
 linkwatch_event+0x8f/0xc0 net/core/link_watch.c:314
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314
 process_scheduled_works kernel/workqueue.c:3397 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
------------[ cut here ]------------
1
WARNING: lib/ref_tracker.c:322 at ref_tracker_free.cold+0x116/0x154 lib/ref_tracker.c:322, CPU#1: kworker/1:4/5250
Modules linked in:
CPU: 1 UID: 0 PID: 5250 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: usb_hub_wq hub_event
RIP: 0010:ref_tracker_free.cold+0x116/0x154 lib/ref_tracker.c:322
Code: 48 c1 e0 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 4e 8b 7b 18 e8 f4 b1 ba 01 e8 df 85 8b 00 48 8b 34 24 48 89 ef e8 f3 45 49 06 90 <0f> 0b 90 bb ea ff ff ff e9 0e dc ba 01 4c 89 f7 e8 2d 41 f1 00 e9
RSP: 0018:ffffc900047ff0d8 EFLAGS: 00010202
RAX: 0000000000000201 RBX: ffff888113fb9dc0 RCX: 0000000000000000
RDX: 0000000000000202 RSI: ffffffff890ca24b RDI: 0000000000000001
RBP: ffff88813d420618 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000030fe0 R12: 1ffff920008ffe1d
R13: ffffc900047ff108 R14: ffff888113fb9dd8 R15: 0000000003940360
FS:  0000000000000000(0000) GS:ffff8882687a5000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e7efff8 CR3: 00000001369bc000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 netdev_tracker_free include/linux/netdevice.h:4491 [inline]
 netdev_put include/linux/netdevice.h:4508 [inline]
 netdev_put include/linux/netdevice.h:4504 [inline]
 netdev_watchdog_down net/sched/sch_generic.c:600 [inline]
 dev_deactivate_many+0x28c/0xfe0 net/sched/sch_generic.c:1363
 __dev_close_many+0x156/0x600 net/core/dev.c:1760
 netif_close_many+0x233/0x630 net/core/dev.c:1801
 unregister_netdevice_many_notify+0x7c5/0x2350 net/core/dev.c:12391
 unregister_netdevice_many net/core/dev.c:12484 [inline]
 unregister_netdevice_queue net/core/dev.c:12294 [inline]
 unregister_netdevice_queue+0x30b/0x3c0 net/core/dev.c:12284
 unregister_netdevice include/linux/netdevice.h:3444 [inline]
 unregister_netdev+0x1f/0x60 net/core/dev.c:12502
 usbnet_disconnect+0x10a/0x300 drivers/net/usb/usbnet.c:1685
 usb_unbind_interface+0x1dd/0x9e0 drivers/usb/core/driver.c:458
 device_remove drivers/base/dd.c:621 [inline]
 device_remove+0x12a/0x180 drivers/base/dd.c:613
 __device_release_driver drivers/base/dd.c:1352 [inline]
 device_release_driver_internal+0x44e/0x620 drivers/base/dd.c:1375
 bus_remove_device+0x2bc/0x560 drivers/base/bus.c:657
 device_del+0x376/0x9b0 drivers/base/core.c:3895
 usb_disable_device+0x367/0x810 drivers/usb/core/message.c:1478
 usb_disconnect+0x2e2/0x9a0 drivers/usb/core/hub.c:2345
 hub_port_connect drivers/usb/core/hub.c:5407 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5707 [inline]
 port_event drivers/usb/core/hub.c:5871 [inline]
 hub_event+0x1d0c/0x4af0 drivers/usb/core/hub.c:5953
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314
 process_scheduled_works kernel/workqueue.c:3397 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>