[ 9.905868][ T242] ip (242) used greatest stack depth: 23272 bytes left [ 9.996377][ T243] eth0: renamed from lag1 [ 10.103769][ T248] eth0: renamed from lag1-end [ 10.349816][ T252] eth1: renamed from lag1 [ 10.444431][ T259] eth1: renamed from lag1-end [ 10.799742][ T261] br0: port 1(eth0) entered blocking state [ 10.800319][ T261] br0: port 1(eth0) entered disabled state [ 10.800915][ T261] eth0: entered allmulticast mode [ 10.802184][ T261] eth0: entered promiscuous mode [ 10.955211][ T262] br0: port 2(eth1) entered blocking state [ 10.955507][ T262] br0: port 2(eth1) entered disabled state [ 10.955764][ T262] eth1: entered allmulticast mode [ 10.956941][ T262] eth1: entered promiscuous mode [ 11.677608][ T268] bond0: (slave eth0): Enslaving as an active interface with an up link [ 11.686415][ T40] br0: port 1(eth0) entered blocking state [ 11.686730][ T40] br0: port 1(eth0) entered forwarding state [ 11.838370][ T270] bond0: (slave eth1): Enslaving as an active interface with an up link [ 11.839765][ T39] br0: port 2(eth1) entered blocking state [ 11.840011][ T39] br0: port 2(eth1) entered forwarding state [ 13.458507][ T275] br0: port 1(eth0) entered disabled state [ 13.539073][ T269] bond0: (slave eth0): link status definitely down, disabling slave [ 15.670279][ T37] br0: port 1(eth0) entered blocking state [ 15.670550][ T37] br0: port 1(eth0) entered forwarding state [ 15.723643][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 15.825269][ T278] br0: port 2(eth1) entered disabled state [ 15.827013][ T269] bond0: (slave eth1): link status definitely down, disabling slave [ 17.489357][ T282] bond0 (unregistering): (slave eth0): Releasing backup interface [ 17.507727][ T282] bond0 (unregistering): (slave eth1): Releasing backup interface [ 17.528782][ T282] bond0 (unregistering): Released all slaves [ 17.553905][ T38] br0: port 1(eth0) entered disabled state [ 18.507951][ T289] bond0: (slave eth0): Enslaving as an active interface with an up link [ 18.508771][ T40] br0: port 1(eth0) entered blocking state [ 18.509028][ T40] br0: port 1(eth0) entered forwarding state [ 18.676122][ T290] bond0: (slave eth1): Enslaving as an active interface with an up link [ 18.677822][ T39] br0: port 2(eth1) entered blocking state [ 18.678070][ T39] br0: port 2(eth1) entered forwarding state [ 18.822904][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 18.823586][ T269] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 18.824071][ T269] bond0: active interface up! [ 20.318118][ T295] br0: port 1(eth0) entered disabled state [ 20.386820][ T269] bond0: (slave eth0): link status definitely down, disabling slave [ 22.536139][ T71] br0: port 1(eth0) entered blocking state [ 22.536487][ T71] br0: port 1(eth0) entered forwarding state [ 22.570535][ T269] bond0: (slave eth0): link status up, enabling it in 200 ms [ 22.570971][ T269] bond0: (slave eth0): invalid new link 3 on slave [ 22.674229][ T298] br0: port 2(eth1) entered disabled state [ 22.676678][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 22.677155][ T269] bond0: (slave eth1): link status definitely down, disabling slave [ 24.380175][ T302] bond0 (unregistering): (slave eth0): Releasing backup interface [ 24.404978][ T302] bond0 (unregistering): (slave eth1): Releasing backup interface [ 24.428606][ T302] bond0 (unregistering): Released all slaves [ 24.437580][ T37] br0: port 1(eth0) entered disabled state [ 25.424434][ T309] bond0: (slave eth0): Enslaving as an active interface with an up link [ 25.425175][ T71] br0: port 1(eth0) entered blocking state [ 25.425444][ T71] br0: port 1(eth0) entered forwarding state [ 25.562814][ T310] bond0: (slave eth1): Enslaving as an active interface with an up link [ 25.563978][ T39] br0: port 2(eth1) entered blocking state [ 25.564207][ T39] br0: port 2(eth1) entered forwarding state [ 25.718975][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 25.719844][ T269] bond0: active interface up! [ 26.138842][ T269] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 27.214853][ T315] br0: port 1(eth0) entered disabled state [ 27.282677][ T269] bond0: (slave eth0): link status definitely down, disabling slave [ 29.413729][ T71] br0: port 1(eth0) entered blocking state [ 29.414095][ T71] br0: port 1(eth0) entered forwarding state [ 29.466605][ T269] bond0: (slave eth0): link status up, enabling it in 500 ms [ 29.467224][ T269] bond0: (slave eth0): invalid new link 3 on slave [ 29.572123][ T318] br0: port 2(eth1) entered disabled state [ 29.674684][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 29.675216][ T269] bond0: (slave eth1): link status definitely down, disabling slave [ 31.228597][ T322] bond0 (unregistering): (slave eth0): Releasing backup interface [ 31.247641][ T322] bond0 (unregistering): (slave eth1): Releasing backup interface [ 31.271300][ T322] bond0 (unregistering): Released all slaves [ 31.280428][ T37] br0: port 1(eth0) entered disabled state [ 32.260624][ T329] bond0: (slave eth0): Enslaving as an active interface with an up link [ 32.261240][ T39] br0: port 1(eth0) entered blocking state [ 32.261494][ T39] br0: port 1(eth0) entered forwarding state [ 32.427802][ T330] bond0: (slave eth1): Enslaving as an active interface with an up link [ 32.429198][ T71] br0: port 2(eth1) entered blocking state [ 32.429523][ T71] br0: port 2(eth1) entered forwarding state [ 32.588817][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 32.589437][ T269] bond0: active interface up! [ 33.522839][ T269] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 34.136740][ T335] br0: port 1(eth0) entered disabled state [ 34.146732][ T269] bond0: (slave eth0): link status definitely down, disabling slave [ 36.373936][ T71] br0: port 1(eth0) entered blocking state [ 36.374195][ T71] br0: port 1(eth0) entered forwarding state [ 36.434466][ T269] bond0: (slave eth0): link status up, enabling it in 1000 ms [ 36.434915][ T269] bond0: (slave eth0): invalid new link 3 on slave [ 36.539357][ T338] br0: port 2(eth1) entered disabled state [ 36.542642][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 36.543126][ T269] bond0: (slave eth1): link status definitely down, disabling slave [ 38.216732][ T342] bond0 (unregistering): (slave eth0): Releasing backup interface [ 38.241872][ T342] bond0 (unregistering): (slave eth1): Releasing backup interface [ 38.265321][ T342] bond0 (unregistering): Released all slaves [ 38.279446][ T71] br0: port 1(eth0) entered disabled state [ 39.250277][ T349] bond0: (slave eth0): Enslaving as an active interface with an up link [ 39.250922][ T37] br0: port 1(eth0) entered blocking state [ 39.251191][ T37] br0: port 1(eth0) entered forwarding state [ 39.423681][ T350] bond0: (slave eth1): Enslaving as an active interface with an up link [ 39.425228][ T37] br0: port 2(eth1) entered blocking state [ 39.425625][ T37] br0: port 2(eth1) entered forwarding state [ 39.586116][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 39.587143][ T269] bond0: active interface up! [ 41.090425][ T355] br0: port 1(eth0) entered disabled state [ 41.146666][ T269] bond0: (slave eth0): link status definitely down, disabling slave [ 41.147131][ T269] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 43.301574][ T71] br0: port 1(eth0) entered blocking state [ 43.302028][ T71] br0: port 1(eth0) entered forwarding state [ 43.331486][ T269] bond0: (slave eth0): link status up, enabling it in 2000 ms [ 43.331878][ T269] bond0: (slave eth0): invalid new link 3 on slave [ 43.452216][ T359] br0: port 2(eth1) entered disabled state [ 43.538760][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 43.539259][ T269] bond0: (slave eth1): link status definitely down, disabling slave [ 45.115172][ T363] bond0 (unregistering): (slave eth0): Releasing backup interface [ 45.139999][ T363] bond0 (unregistering): (slave eth1): Releasing backup interface [ 45.163627][ T363] bond0 (unregistering): Released all slaves [ 45.178027][ T37] br0: port 1(eth0) entered disabled state [ 46.207374][ T370] bond0: (slave eth0): Enslaving as an active interface with an up link [ 46.208065][ T357] br0: port 1(eth0) entered blocking state [ 46.208324][ T357] br0: port 1(eth0) entered forwarding state [ 46.357205][ T371] bond0: (slave eth1): Enslaving as an active interface with an up link [ 46.358433][ T37] br0: port 2(eth1) entered blocking state [ 46.358649][ T37] br0: port 2(eth1) entered forwarding state [ 46.544920][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 46.545521][ T269] bond0: active interface up! [ 48.050308][ T376] br0: port 1(eth0) entered disabled state [ 48.106677][ T269] bond0: (slave eth0): link status definitely down, disabling slave [ 48.107186][ T269] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 50.257034][ T55] br0: port 1(eth0) entered blocking state [ 50.257509][ T55] br0: port 1(eth0) entered forwarding state [ 50.290447][ T269] bond0: (slave eth0): link status up, enabling it in 5000 ms [ 50.290834][ T269] bond0: (slave eth0): invalid new link 3 on slave [ 50.402099][ T379] br0: port 2(eth1) entered disabled state [ 50.499160][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 50.499658][ T269] bond0: (slave eth1): link status definitely down, disabling slave [ 52.095925][ T383] bond0 (unregistering): (slave eth0): Releasing backup interface [ 52.120572][ T383] bond0 (unregistering): (slave eth1): Releasing backup interface [ 52.144210][ T383] bond0 (unregistering): Released all slaves [ 52.171875][ T230] br0: port 1(eth0) entered disabled state [ 53.081371][ T390] bond0: (slave eth0): Enslaving as an active interface with an up link [ 53.082190][ T230] br0: port 1(eth0) entered blocking state [ 53.082446][ T230] br0: port 1(eth0) entered forwarding state [ 53.226374][ T391] bond0: (slave eth1): Enslaving as an active interface with an up link [ 53.227629][ T71] br0: port 2(eth1) entered blocking state [ 53.227862][ T71] br0: port 2(eth1) entered forwarding state [ 53.401909][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 53.402643][ T269] bond0: active interface up! [ 54.890244][ T396] br0: port 1(eth0) entered disabled state [ 54.962690][ T269] bond0: (slave eth0): link status definitely down, disabling slave [ 54.963264][ T269] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 57.087190][ T55] br0: port 1(eth0) entered blocking state [ 57.087518][ T55] br0: port 1(eth0) entered forwarding state [ 57.154525][ T269] bond0: (slave eth0): link status up, enabling it in 10000 ms [ 57.154939][ T269] bond0: (slave eth0): invalid new link 3 on slave [ 57.233372][ T399] br0: port 2(eth1) entered disabled state [ 57.258742][ T269] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 57.259456][ T269] bond0: (slave eth1): link status definitely down, disabling slave [ 58.845946][ T403] bond0 (unregistering): (slave eth0): Releasing backup interface [ 58.876455][ T403] bond0 (unregistering): (slave eth1): Releasing backup interface [ 58.895178][ T403] bond0 (unregistering): Released all slaves [ 58.903260][ T230] br0: port 1(eth0) entered disabled state [ 59.303206][ T269] eth1: left allmulticast mode [ 59.303543][ T269] eth1: left promiscuous mode [ 59.303895][ T269] br0: port 2(eth1) entered disabled state [ 59.305367][ T269] eth0: left allmulticast mode [ 59.305628][ T269] eth0: left promiscuous mode [ 59.305910][ T269] br0: port 1(eth0) entered disabled state [ 59.742995][ T269] ================================================================== [ 59.743265][ T269] BUG: KASAN: slab-use-after-free in cleanup_net+0x932/0xa40 [ 59.743502][ T269] Read of size 8 at addr ffff88800bd580f8 by task kworker/u16:2/269 [ 59.743715][ T269] [ 59.743789][ T269] CPU: 2 UID: 0 PID: 269 Comm: kworker/u16:2 Not tainted 6.12.0-virtme #1 [ 59.744003][ T269] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 59.744193][ T269] Workqueue: netns cleanup_net [ 59.744339][ T269] Call Trace: [ 59.744448][ T269] [ 59.744529][ T269] dump_stack_lvl+0x82/0xd0 [ 59.744683][ T269] print_address_description.constprop.0+0x2c/0x3b0 [ 59.744869][ T269] ? cleanup_net+0x932/0xa40 [ 59.745015][ T269] print_report+0xb4/0x270 [ 59.745160][ T269] ? kasan_addr_to_slab+0x25/0x80 [ 59.745811][ T269] kasan_report+0xbd/0xf0 [ 59.746080][ T269] ? cleanup_net+0x932/0xa40 [ 59.746233][ T269] cleanup_net+0x932/0xa40 [ 59.746377][ T269] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 59.746528][ T269] ? __pfx_cleanup_net+0x10/0x10 [ 59.746669][ T269] ? trace_lock_acquire+0x148/0x1f0 [ 59.746811][ T269] ? lock_acquire+0x32/0xc0 [ 59.746953][ T269] ? process_one_work+0xe0b/0x16d0 [ 59.747099][ T269] process_one_work+0xe55/0x16d0 [ 59.747245][ T269] ? __pfx___lock_release+0x10/0x10 [ 59.747388][ T269] ? __pfx_process_one_work+0x10/0x10 [ 59.747535][ T269] ? assign_work+0x16c/0x240 [ 59.747678][ T269] worker_thread+0x58c/0xce0 [ 59.747827][ T269] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 59.748008][ T269] ? __pfx_worker_thread+0x10/0x10 [ 59.748151][ T269] ? __pfx_worker_thread+0x10/0x10 [ 59.748294][ T269] kthread+0x28a/0x350 [ 59.748406][ T269] ? __pfx_kthread+0x10/0x10 [ 59.748551][ T269] ret_from_fork+0x31/0x70 [ 59.748695][ T269] ? __pfx_kthread+0x10/0x10 [ 59.748841][ T269] ret_from_fork_asm+0x1a/0x30 [ 59.748991][ T269] [ 59.749099][ T269] [ 59.749172][ T269] Allocated by task 240: [ 59.749282][ T269] kasan_save_stack+0x24/0x50 [ 59.749426][ T269] kasan_save_track+0x14/0x30 [ 59.749574][ T269] __kasan_slab_alloc+0x59/0x70 [ 59.749718][ T269] kmem_cache_alloc_noprof+0x10b/0x350 [ 59.749863][ T269] copy_net_ns+0xc6/0x340 [ 59.749973][ T269] create_new_namespaces+0x35f/0x920 [ 59.750116][ T269] unshare_nsproxy_namespaces+0x8d/0x130 [ 59.750269][ T269] ksys_unshare+0x2a9/0x660 [ 59.750413][ T269] __x64_sys_unshare+0x31/0x40 [ 59.750558][ T269] do_syscall_64+0xc1/0x1d0 [ 59.750702][ T269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.750880][ T269] [ 59.750952][ T269] Freed by task 269: [ 59.751058][ T269] kasan_save_stack+0x24/0x50 [ 59.751202][ T269] kasan_save_track+0x14/0x30 [ 59.751346][ T269] kasan_save_free_info+0x3b/0x60 [ 59.751492][ T269] __kasan_slab_free+0x38/0x50 [ 59.751638][ T269] kmem_cache_free+0xf8/0x330 [ 59.751783][ T269] cleanup_net+0x5a8/0xa40 [ 59.751927][ T269] process_one_work+0xe55/0x16d0 [ 59.752067][ T269] worker_thread+0x58c/0xce0 [ 59.752207][ T269] kthread+0x28a/0x350 [ 59.752313][ T269] ret_from_fork+0x31/0x70 [ 59.752449][ T269] ret_from_fork_asm+0x1a/0x30 [ 59.752591][ T269] [ 59.752663][ T269] Last potentially related work creation: [ 59.752804][ T269] kasan_save_stack+0x24/0x50 [ 59.752947][ T269] __kasan_record_aux_stack+0x8e/0xa0 [ 59.753088][ T269] insert_work+0x34/0x230 [ 59.753194][ T269] __queue_work+0x5fd/0xa40 [ 59.753336][ T269] queue_delayed_work_on+0x8c/0xa0 [ 59.753480][ T269] __inet_insert_ifa+0x751/0xb10 [ 59.753627][ T269] inet_rtm_newaddr+0x833/0xbd0 [ 59.753772][ T269] rtnetlink_rcv_msg+0x712/0xc10 [ 59.753918][ T269] netlink_rcv_skb+0x130/0x360 [ 59.754062][ T269] netlink_unicast+0x44b/0x710 [ 59.754207][ T269] netlink_sendmsg+0x723/0xbe0 [ 59.754350][ T269] ____sys_sendmsg+0x7ac/0xa10 [ 59.754495][ T269] ___sys_sendmsg+0xee/0x170 [ 59.754642][ T269] __sys_sendmsg+0x109/0x1a0 [ 59.754794][ T269] do_syscall_64+0xc1/0x1d0 [ 59.754936][ T269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.755113][ T269] [ 59.755185][ T269] The buggy address belongs to the object at ffff88800bd58040 [ 59.755185][ T269] which belongs to the cache net_namespace of size 5696 [ 59.755579][ T269] The buggy address is located 184 bytes inside of [ 59.755579][ T269] freed 5696-byte region [ffff88800bd58040, ffff88800bd59680) [ 59.755932][ T269] [ 59.756004][ T269] The buggy address belongs to the physical page: [ 59.756179][ T269] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88800bd5afc0 pfn:0xbd58 [ 59.756463][ T269] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 59.756678][ T269] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 59.756857][ T269] page_type: f5(slab) [ 59.756968][ T269] raw: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 59.757232][ T269] raw: ffff88800bd5afc0 0000000000050002 00000001f5000000 0000000000000000 [ 59.757479][ T269] head: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 59.757727][ T269] head: ffff88800bd5afc0 0000000000050002 00000001f5000000 0000000000000000 [ 59.757970][ T269] head: 0080000000000003 ffffea00002f5601 ffffffffffffffff 0000000000000000 [ 59.758220][ T269] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 59.758465][ T269] page dumped because: kasan: bad access detected [ 59.758641][ T269] [ 59.758716][ T269] Memory state around the buggy address: [ 59.758857][ T269] ffff88800bd57f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.759066][ T269] ffff88800bd58000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 59.759276][ T269] >ffff88800bd58080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.759485][ T269] ^ [ 59.759695][ T269] ffff88800bd58100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.759904][ T269] ffff88800bd58180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.760124][ T269] ================================================================== [ 59.760417][ T269] Disabling lock debugging due to kernel taint