[ 10.654052][ T240] ip (240) used greatest stack depth: 23736 bytes left [ 10.748244][ T242] eth0: renamed from lag1 [ 10.889326][ T247] eth0: renamed from lag1-end [ 11.007220][ T249] ip (249) used greatest stack depth: 23664 bytes left [ 11.115455][ T253] eth1: renamed from lag1 [ 11.215048][ T259] eth1: renamed from lag1-end [ 11.590451][ T262] br0: port 1(eth0) entered blocking state [ 11.590838][ T262] br0: port 1(eth0) entered disabled state [ 11.591272][ T262] eth0: entered allmulticast mode [ 11.592540][ T262] eth0: entered promiscuous mode [ 11.802673][ T263] br0: port 2(eth1) entered blocking state [ 11.802931][ T263] br0: port 2(eth1) entered disabled state [ 11.803172][ T263] eth1: entered allmulticast mode [ 11.804368][ T263] eth1: entered promiscuous mode [ 12.635253][ T270] bond0: (slave eth0): Enslaving as an active interface with an up link [ 12.636756][ T37] br0: port 1(eth0) entered blocking state [ 12.637238][ T37] br0: port 1(eth0) entered forwarding state [ 12.795813][ T271] bond0: (slave eth1): Enslaving as an active interface with an up link [ 12.796959][ T85] br0: port 2(eth1) entered blocking state [ 12.797199][ T85] br0: port 2(eth1) entered forwarding state [ 14.482235][ T277] br0: port 1(eth0) entered disabled state [ 14.505174][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 16.738417][ T85] br0: port 1(eth0) entered blocking state [ 16.738719][ T85] br0: port 1(eth0) entered forwarding state [ 16.793849][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 16.913032][ T281] br0: port 2(eth1) entered disabled state [ 17.000756][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 18.654637][ T285] bond0 (unregistering): (slave eth0): Releasing backup interface [ 18.672449][ T285] bond0 (unregistering): (slave eth1): Releasing backup interface [ 18.695595][ T285] bond0 (unregistering): Released all slaves [ 18.714868][ T85] br0: port 1(eth0) entered disabled state [ 19.789541][ T292] bond0: (slave eth0): Enslaving as an active interface with an up link [ 19.790128][ T85] br0: port 1(eth0) entered blocking state [ 19.790355][ T85] br0: port 1(eth0) entered forwarding state [ 20.004477][ T293] bond0: (slave eth1): Enslaving as an active interface with an up link [ 20.006029][ T40] br0: port 2(eth1) entered blocking state [ 20.006356][ T40] br0: port 2(eth1) entered forwarding state [ 20.162956][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 20.163654][ T11] bond0: active interface up! [ 20.264765][ T11] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 21.729262][ T298] br0: port 1(eth0) entered disabled state [ 21.824938][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 23.976262][ T40] br0: port 1(eth0) entered blocking state [ 23.976640][ T40] br0: port 1(eth0) entered forwarding state [ 24.008612][ T11] bond0: (slave eth0): link status up, enabling it in 200 ms [ 24.009017][ T11] bond0: (slave eth0): invalid new link 3 on slave [ 24.144979][ T301] br0: port 2(eth1) entered disabled state [ 24.217731][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 24.218227][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 25.801333][ T305] bond0 (unregistering): (slave eth0): Releasing backup interface [ 25.819436][ T305] bond0 (unregistering): (slave eth1): Releasing backup interface [ 25.843440][ T305] bond0 (unregistering): Released all slaves [ 25.860923][ T241] br0: port 1(eth0) entered disabled state [ 27.062585][ T312] bond0: (slave eth0): Enslaving as an active interface with an up link [ 27.063528][ T241] br0: port 1(eth0) entered blocking state [ 27.063904][ T241] br0: port 1(eth0) entered forwarding state [ 27.228759][ T313] bond0: (slave eth1): Enslaving as an active interface with an up link [ 27.230118][ T37] br0: port 2(eth1) entered blocking state [ 27.230397][ T37] br0: port 2(eth1) entered forwarding state [ 27.409188][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 27.410203][ T11] bond0: active interface up! [ 27.832361][ T11] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 28.999442][ T318] br0: port 1(eth0) entered disabled state [ 29.080900][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 31.215772][ T85] br0: port 1(eth0) entered blocking state [ 31.216244][ T85] br0: port 1(eth0) entered forwarding state [ 31.265308][ T11] bond0: (slave eth0): link status up, enabling it in 500 ms [ 31.265756][ T11] bond0: (slave eth0): invalid new link 3 on slave [ 31.381688][ T322] br0: port 2(eth1) entered disabled state [ 31.472863][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 31.473577][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 33.067030][ T326] bond0 (unregistering): (slave eth0): Releasing backup interface [ 33.092130][ T326] bond0 (unregistering): (slave eth1): Releasing backup interface [ 33.115706][ T326] bond0 (unregistering): Released all slaves [ 33.131319][ T85] br0: port 1(eth0) entered disabled state [ 34.155033][ T333] bond0: (slave eth0): Enslaving as an active interface with an up link [ 34.155693][ T38] br0: port 1(eth0) entered blocking state [ 34.155995][ T38] br0: port 1(eth0) entered forwarding state [ 34.353059][ T334] bond0: (slave eth1): Enslaving as an active interface with an up link [ 34.354693][ T40] br0: port 2(eth1) entered blocking state [ 34.354969][ T40] br0: port 2(eth1) entered forwarding state [ 34.539246][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 34.540390][ T11] bond0: active interface up! [ 35.481033][ T11] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 36.130078][ T339] br0: port 1(eth0) entered disabled state [ 36.208906][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 38.354386][ T40] br0: port 1(eth0) entered blocking state [ 38.354810][ T40] br0: port 1(eth0) entered forwarding state [ 38.392521][ T11] bond0: (slave eth0): link status up, enabling it in 1000 ms [ 38.392968][ T11] bond0: (slave eth0): invalid new link 3 on slave [ 38.558581][ T342] br0: port 2(eth1) entered disabled state [ 38.600786][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 38.601277][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 40.270197][ T346] bond0 (unregistering): (slave eth0): Releasing backup interface [ 40.288254][ T346] bond0 (unregistering): (slave eth1): Releasing backup interface [ 40.300324][ T346] bond0 (unregistering): Released all slaves [ 40.308626][ T40] br0: port 1(eth0) entered disabled state [ 41.359161][ T353] bond0: (slave eth0): Enslaving as an active interface with an up link [ 41.359787][ T40] br0: port 1(eth0) entered blocking state [ 41.360009][ T40] br0: port 1(eth0) entered forwarding state [ 41.517255][ T354] bond0: (slave eth1): Enslaving as an active interface with an up link [ 41.518428][ T37] br0: port 2(eth1) entered blocking state [ 41.518690][ T37] br0: port 2(eth1) entered forwarding state [ 41.702045][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 41.703027][ T11] bond0: active interface up! [ 43.265243][ T359] br0: port 1(eth0) entered disabled state [ 43.268749][ T272] bond0: (slave eth0): link status definitely down, disabling slave [ 43.269310][ T272] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 45.506432][ T37] br0: port 1(eth0) entered blocking state [ 45.506752][ T37] br0: port 1(eth0) entered forwarding state [ 45.560610][ T272] bond0: (slave eth0): link status up, enabling it in 2000 ms [ 45.561033][ T272] bond0: (slave eth0): invalid new link 3 on slave [ 45.680247][ T362] br0: port 2(eth1) entered disabled state [ 45.768791][ T272] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 45.769293][ T272] bond0: (slave eth1): link status definitely down, disabling slave [ 47.403255][ T366] bond0 (unregistering): (slave eth0): Releasing backup interface [ 47.425877][ T366] bond0 (unregistering): (slave eth1): Releasing backup interface [ 47.447075][ T366] bond0 (unregistering): Released all slaves [ 47.472940][ T40] br0: port 1(eth0) entered disabled state [ 48.463851][ T373] bond0: (slave eth0): Enslaving as an active interface with an up link [ 48.464778][ T85] br0: port 1(eth0) entered blocking state [ 48.465030][ T85] br0: port 1(eth0) entered forwarding state [ 48.634024][ T374] bond0: (slave eth1): Enslaving as an active interface with an up link [ 48.635257][ T40] br0: port 2(eth1) entered blocking state [ 48.635522][ T40] br0: port 2(eth1) entered forwarding state [ 48.799973][ T272] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 48.800603][ T272] bond0: active interface up! [ 50.391894][ T379] br0: port 1(eth0) entered disabled state [ 50.472144][ T272] bond0: (slave eth0): link status definitely down, disabling slave [ 50.472723][ T272] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 52.615598][ T85] br0: port 1(eth0) entered blocking state [ 52.615985][ T85] br0: port 1(eth0) entered forwarding state [ 52.657553][ T272] bond0: (slave eth0): link status up, enabling it in 5000 ms [ 52.657989][ T272] bond0: (slave eth0): invalid new link 3 on slave [ 52.807841][ T382] br0: port 2(eth1) entered disabled state [ 52.864921][ T272] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 52.865675][ T272] bond0: (slave eth1): link status definitely down, disabling slave [ 54.570251][ T386] bond0 (unregistering): (slave eth0): Releasing backup interface [ 54.587275][ T386] bond0 (unregistering): (slave eth1): Releasing backup interface [ 54.607481][ T386] bond0 (unregistering): Released all slaves [ 54.622527][ T85] br0: port 1(eth0) entered disabled state [ 55.759422][ T393] bond0: (slave eth0): Enslaving as an active interface with an up link [ 55.760303][ T40] br0: port 1(eth0) entered blocking state [ 55.760627][ T40] br0: port 1(eth0) entered forwarding state [ 55.933146][ T394] bond0: (slave eth1): Enslaving as an active interface with an up link [ 55.945064][ T37] br0: port 2(eth1) entered blocking state [ 55.945489][ T37] br0: port 2(eth1) entered forwarding state [ 56.106060][ T272] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 56.106744][ T272] bond0: active interface up! [ 57.653814][ T399] br0: port 1(eth0) entered disabled state [ 57.664720][ T272] bond0: (slave eth0): link status definitely down, disabling slave [ 57.665275][ T272] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 59.877113][ T40] br0: port 1(eth0) entered blocking state [ 59.877392][ T40] br0: port 1(eth0) entered forwarding state [ 59.952551][ T272] bond0: (slave eth0): link status up, enabling it in 10000 ms [ 59.952996][ T272] bond0: (slave eth0): invalid new link 3 on slave [ 60.052437][ T402] br0: port 2(eth1) entered disabled state [ 60.056814][ T272] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 60.057595][ T272] bond0: (slave eth1): link status definitely down, disabling slave [ 61.763091][ T406] bond0 (unregistering): (slave eth0): Releasing backup interface [ 61.784110][ T406] bond0 (unregistering): (slave eth1): Releasing backup interface [ 61.803690][ T406] bond0 (unregistering): Released all slaves [ 61.820160][ T40] br0: port 1(eth0) entered disabled state [ 62.262325][ T272] eth1: left allmulticast mode [ 62.262650][ T272] eth1: left promiscuous mode [ 62.263036][ T272] br0: port 2(eth1) entered disabled state [ 62.264941][ T272] eth0: left allmulticast mode [ 62.265107][ T272] eth0: left promiscuous mode [ 62.265495][ T272] br0: port 1(eth0) entered disabled state [ 62.698525][ T272] ================================================================== [ 62.698818][ T272] BUG: KASAN: slab-use-after-free in cleanup_net+0x932/0xa40 [ 62.699037][ T272] Read of size 8 at addr ffff88800b7d00f8 by task kworker/u16:2/272 [ 62.699241][ T272] [ 62.699308][ T272] CPU: 3 UID: 0 PID: 272 Comm: kworker/u16:2 Not tainted 6.12.0-virtme #1 [ 62.699510][ T272] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 62.699683][ T272] Workqueue: netns cleanup_net [ 62.699831][ T272] Call Trace: [ 62.699938][ T272] [ 62.700017][ T272] dump_stack_lvl+0x82/0xd0 [ 62.700164][ T272] print_address_description.constprop.0+0x2c/0x3b0 [ 62.700342][ T272] ? cleanup_net+0x932/0xa40 [ 62.700484][ T272] print_report+0xb4/0x270 [ 62.700617][ T272] ? kasan_addr_to_slab+0x25/0x80 [ 62.700754][ T272] kasan_report+0xbd/0xf0 [ 62.700859][ T272] ? cleanup_net+0x932/0xa40 [ 62.700994][ T272] cleanup_net+0x932/0xa40 [ 62.701128][ T272] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 62.701268][ T272] ? __pfx_cleanup_net+0x10/0x10 [ 62.701406][ T272] ? trace_lock_acquire+0x148/0x1f0 [ 62.701542][ T272] ? lock_acquire+0x32/0xc0 [ 62.701685][ T272] ? process_one_work+0xe0b/0x16d0 [ 62.701823][ T272] process_one_work+0xe55/0x16d0 [ 62.701959][ T272] ? __pfx___lock_release+0x10/0x10 [ 62.702094][ T272] ? __pfx_process_one_work+0x10/0x10 [ 62.702236][ T272] ? assign_work+0x16c/0x240 [ 62.702370][ T272] worker_thread+0x58c/0xce0 [ 62.702505][ T272] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 62.702673][ T272] ? __pfx_worker_thread+0x10/0x10 [ 62.702814][ T272] ? __pfx_worker_thread+0x10/0x10 [ 62.702942][ T272] kthread+0x28a/0x350 [ 62.703041][ T272] ? __pfx_kthread+0x10/0x10 [ 62.703174][ T272] ret_from_fork+0x31/0x70 [ 62.703309][ T272] ? __pfx_kthread+0x10/0x10 [ 62.703448][ T272] ret_from_fork_asm+0x1a/0x30 [ 62.703588][ T272] [ 62.703695][ T272] [ 62.703763][ T272] Allocated by task 238: [ 62.703871][ T272] kasan_save_stack+0x24/0x50 [ 62.704009][ T272] kasan_save_track+0x14/0x30 [ 62.704145][ T272] __kasan_slab_alloc+0x59/0x70 [ 62.704280][ T272] kmem_cache_alloc_noprof+0x10b/0x350 [ 62.704413][ T272] copy_net_ns+0xc6/0x340 [ 62.704510][ T272] create_new_namespaces+0x35f/0x920 [ 62.704647][ T272] unshare_nsproxy_namespaces+0x8d/0x130 [ 62.704777][ T272] ksys_unshare+0x2a9/0x660 [ 62.704913][ T272] __x64_sys_unshare+0x31/0x40 [ 62.705048][ T272] do_syscall_64+0xc1/0x1d0 [ 62.705184][ T272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.705353][ T272] [ 62.705422][ T272] Freed by task 272: [ 62.705520][ T272] kasan_save_stack+0x24/0x50 [ 62.705661][ T272] kasan_save_track+0x14/0x30 [ 62.705797][ T272] kasan_save_free_info+0x3b/0x60 [ 62.705931][ T272] __kasan_slab_free+0x38/0x50 [ 62.706063][ T272] kmem_cache_free+0xf8/0x330 [ 62.706199][ T272] cleanup_net+0x5a8/0xa40 [ 62.706331][ T272] process_one_work+0xe55/0x16d0 [ 62.706462][ T272] worker_thread+0x58c/0xce0 [ 62.706598][ T272] kthread+0x28a/0x350 [ 62.706702][ T272] ret_from_fork+0x31/0x70 [ 62.706834][ T272] ret_from_fork_asm+0x1a/0x30 [ 62.706968][ T272] [ 62.707039][ T272] Last potentially related work creation: [ 62.707176][ T272] kasan_save_stack+0x24/0x50 [ 62.707313][ T272] __kasan_record_aux_stack+0x8e/0xa0 [ 62.707444][ T272] insert_work+0x34/0x230 [ 62.707541][ T272] __queue_work+0x5fd/0xa40 [ 62.707678][ T272] queue_delayed_work_on+0x8c/0xa0 [ 62.707811][ T272] __inet_insert_ifa+0x751/0xb10 [ 62.707945][ T272] inet_rtm_newaddr+0x833/0xbd0 [ 62.708083][ T272] rtnetlink_rcv_msg+0x712/0xc10 [ 62.708220][ T272] netlink_rcv_skb+0x130/0x360 [ 62.708356][ T272] netlink_unicast+0x44b/0x710 [ 62.708488][ T272] netlink_sendmsg+0x723/0xbe0 [ 62.708626][ T272] ____sys_sendmsg+0x7ac/0xa10 [ 62.708763][ T272] ___sys_sendmsg+0xee/0x170 [ 62.708898][ T272] __sys_sendmsg+0x109/0x1a0 [ 62.709030][ T272] do_syscall_64+0xc1/0x1d0 [ 62.709173][ T272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.709335][ T272] [ 62.709404][ T272] The buggy address belongs to the object at ffff88800b7d0040 [ 62.709404][ T272] which belongs to the cache net_namespace of size 5696 [ 62.709762][ T272] The buggy address is located 184 bytes inside of [ 62.709762][ T272] freed 5696-byte region [ffff88800b7d0040, ffff88800b7d1680) [ 62.710087][ T272] [ 62.710159][ T272] The buggy address belongs to the physical page: [ 62.710322][ T272] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88800b7d2fc0 pfn:0xb7d0 [ 62.710593][ T272] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 62.710803][ T272] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 62.710982][ T272] page_type: f5(slab) [ 62.711099][ T272] raw: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 62.711347][ T272] raw: ffff88800b7d2fc0 0000000000050002 00000001f5000000 0000000000000000 [ 62.711579][ T272] head: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 62.711830][ T272] head: ffff88800b7d2fc0 0000000000050002 00000001f5000000 0000000000000000 [ 62.712081][ T272] head: 0080000000000003 ffffea00002df401 ffffffffffffffff 0000000000000000 [ 62.712306][ T272] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 62.712537][ T272] page dumped because: kasan: bad access detected [ 62.712703][ T272] [ 62.712781][ T272] Memory state around the buggy address: [ 62.712912][ T272] ffff88800b7cff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.713108][ T272] ffff88800b7d0000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 62.713301][ T272] >ffff88800b7d0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.713493][ T272] ^ [ 62.713689][ T272] ffff88800b7d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.713882][ T272] ffff88800b7d0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.714075][ T272] ================================================================== [ 62.714298][ T272] Disabling lock debugging due to kernel taint