[ 10.268370][ T244] eth0: renamed from lag1 [ 10.390174][ T249] eth0: renamed from lag1-end [ 10.632791][ T253] eth1: renamed from lag1 [ 10.749656][ T259] eth1: renamed from lag1-end [ 10.965203][ T262] ip (262) used greatest stack depth: 24376 bytes left [ 11.126253][ T263] br0: port 1(eth0) entered blocking state [ 11.126732][ T263] br0: port 1(eth0) entered disabled state [ 11.127005][ T263] eth0: entered allmulticast mode [ 11.128308][ T263] eth0: entered promiscuous mode [ 11.271183][ T264] br0: port 2(eth1) entered blocking state [ 11.271453][ T264] br0: port 2(eth1) entered disabled state [ 11.271686][ T264] eth1: entered allmulticast mode [ 11.273564][ T264] eth1: entered promiscuous mode [ 12.066494][ T270] bond0: (slave eth0): making interface the new active one [ 12.067181][ T270] bond0: (slave eth0): Enslaving as an active interface with an up link [ 12.068663][ T56] br0: port 1(eth0) entered blocking state [ 12.069069][ T56] br0: port 1(eth0) entered forwarding state [ 12.217561][ T271] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 12.218706][ T56] br0: port 2(eth1) entered blocking state [ 12.218972][ T56] br0: port 2(eth1) entered forwarding state [ 13.886213][ T277] br0: port 1(eth0) entered disabled state [ 13.895504][ T277] ip (277) used greatest stack depth: 24208 bytes left [ 13.941053][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 13.941456][ T11] bond0: (slave eth1): making interface the new active one [ 16.089352][ T56] br0: port 1(eth0) entered blocking state [ 16.089648][ T56] br0: port 1(eth0) entered forwarding state [ 16.126678][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 16.259621][ T280] br0: port 2(eth1) entered disabled state [ 16.334808][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 16.335098][ T11] bond0: (slave eth0): making interface the new active one [ 17.930540][ T284] bond0 (unregistering): (slave eth0): Releasing backup interface [ 17.948195][ T284] bond0 (unregistering): (slave eth1): Releasing backup interface [ 17.972239][ T284] bond0 (unregistering): Released all slaves [ 17.981654][ T40] br0: port 1(eth0) entered disabled state [ 18.013512][ T284] ip (284) used greatest stack depth: 23984 bytes left [ 18.931436][ T291] bond0: (slave eth0): Enslaving as a backup interface with an up link [ 18.932026][ T37] br0: port 1(eth0) entered blocking state [ 18.932295][ T37] br0: port 1(eth0) entered forwarding state [ 19.083384][ T292] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 19.084434][ T40] br0: port 2(eth1) entered blocking state [ 19.084690][ T40] br0: port 2(eth1) entered forwarding state [ 19.228000][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 19.228467][ T11] bond0: (slave eth0): making interface the new active one [ 19.229321][ T11] bond0: active interface up! [ 19.334741][ T11] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 20.710989][ T297] br0: port 1(eth0) entered disabled state [ 20.790988][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 20.791330][ T11] bond0: (slave eth1): making interface the new active one [ 22.913960][ T153] br0: port 1(eth0) entered blocking state [ 22.914281][ T153] br0: port 1(eth0) entered forwarding state [ 22.974672][ T11] bond0: (slave eth0): link status up, enabling it in 200 ms [ 22.975166][ T11] bond0: (slave eth0): invalid new link 3 on slave [ 23.056635][ T300] br0: port 2(eth1) entered disabled state [ 23.080253][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 23.080594][ T11] bond0: (slave eth0): making interface the new active one 200 ms earlier [ 24.706957][ T305] bond0 (unregistering): (slave eth0): Releasing backup interface [ 24.720265][ T305] bond0 (unregistering): (slave eth1): Releasing backup interface [ 24.737315][ T305] bond0 (unregistering): Released all slaves [ 24.752067][ T40] br0: port 1(eth0) entered disabled state [ 25.702867][ T312] bond0: (slave eth0): Enslaving as a backup interface with an up link [ 25.703522][ T56] br0: port 1(eth0) entered blocking state [ 25.703762][ T56] br0: port 1(eth0) entered forwarding state [ 25.858378][ T313] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 25.859643][ T40] br0: port 2(eth1) entered blocking state [ 25.859898][ T40] br0: port 2(eth1) entered forwarding state [ 26.019859][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 26.020251][ T11] bond0: (slave eth0): making interface the new active one [ 26.021098][ T11] bond0: active interface up! [ 26.438900][ T11] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 27.478946][ T318] br0: port 1(eth0) entered disabled state [ 27.480862][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 27.481140][ T11] bond0: (slave eth1): making interface the new active one [ 29.690808][ T153] br0: port 1(eth0) entered blocking state [ 29.691082][ T153] br0: port 1(eth0) entered forwarding state [ 29.766553][ T11] bond0: (slave eth0): link status up, enabling it in 500 ms [ 29.767102][ T11] bond0: (slave eth0): invalid new link 3 on slave [ 29.866599][ T321] br0: port 2(eth1) entered disabled state [ 29.871776][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 29.872130][ T11] bond0: (slave eth0): making interface the new active one 200 ms earlier [ 31.567092][ T325] bond0 (unregistering): (slave eth0): Releasing backup interface [ 31.588977][ T325] bond0 (unregistering): (slave eth1): Releasing backup interface [ 31.601502][ T325] bond0 (unregistering): Released all slaves [ 31.616856][ T40] br0: port 1(eth0) entered disabled state [ 32.552739][ T332] bond0: (slave eth0): Enslaving as a backup interface with an up link [ 32.553457][ T153] br0: port 1(eth0) entered blocking state [ 32.553738][ T153] br0: port 1(eth0) entered forwarding state [ 32.708840][ T333] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 32.710436][ T56] br0: port 2(eth1) entered blocking state [ 32.710725][ T56] br0: port 2(eth1) entered forwarding state [ 32.853024][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 32.853476][ T11] bond0: (slave eth0): making interface the new active one [ 32.854319][ T11] bond0: active interface up! [ 33.790883][ T11] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 34.330738][ T338] br0: port 1(eth0) entered disabled state [ 34.414856][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 34.415192][ T11] bond0: (slave eth1): making interface the new active one [ 36.543248][ T37] br0: port 1(eth0) entered blocking state [ 36.543561][ T37] br0: port 1(eth0) entered forwarding state [ 36.598562][ T11] bond0: (slave eth0): link status up, enabling it in 1000 ms [ 36.599033][ T11] bond0: (slave eth0): invalid new link 3 on slave [ 36.700157][ T341] br0: port 2(eth1) entered disabled state [ 36.702889][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 36.703176][ T11] bond0: (slave eth0): making interface the new active one 200 ms earlier [ 38.349466][ T345] bond0 (unregistering): (slave eth0): Releasing backup interface [ 38.368250][ T345] bond0 (unregistering): (slave eth1): Releasing backup interface [ 38.391346][ T345] bond0 (unregistering): Released all slaves [ 38.399779][ T56] br0: port 1(eth0) entered disabled state [ 39.360435][ T352] bond0: (slave eth0): Enslaving as a backup interface with an up link [ 39.361119][ T37] br0: port 1(eth0) entered blocking state [ 39.361536][ T37] br0: port 1(eth0) entered forwarding state [ 39.521191][ T353] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 39.522277][ T40] br0: port 2(eth1) entered blocking state [ 39.522538][ T40] br0: port 2(eth1) entered forwarding state [ 39.674958][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 39.675293][ T11] bond0: (slave eth0): making interface the new active one [ 39.676097][ T11] bond0: active interface up! [ 41.176640][ T358] br0: port 1(eth0) entered disabled state [ 41.238874][ T11] bond0: (slave eth0): link status definitely down, disabling slave [ 41.239300][ T11] bond0: (slave eth1): making interface the new active one 1700 ms earlier [ 43.390783][ T40] br0: port 1(eth0) entered blocking state [ 43.391052][ T40] br0: port 1(eth0) entered forwarding state [ 43.423446][ T11] bond0: (slave eth0): link status up, enabling it in 2000 ms [ 43.423873][ T11] bond0: (slave eth0): invalid new link 3 on slave [ 43.536421][ T361] br0: port 2(eth1) entered disabled state [ 43.630870][ T11] bond0: (slave eth1): link status definitely down, disabling slave [ 43.631498][ T11] bond0: (slave eth0): making interface the new active one 300 ms earlier [ 45.236079][ T365] bond0 (unregistering): (slave eth0): Releasing backup interface [ 45.248790][ T365] bond0 (unregistering): (slave eth1): Releasing backup interface [ 45.261460][ T365] bond0 (unregistering): Released all slaves [ 45.275580][ T56] br0: port 1(eth0) entered disabled state [ 46.203040][ T372] bond0: (slave eth0): Enslaving as a backup interface with an up link [ 46.203607][ T37] br0: port 1(eth0) entered blocking state [ 46.203827][ T37] br0: port 1(eth0) entered forwarding state [ 46.355196][ T373] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 46.357180][ T40] br0: port 2(eth1) entered blocking state [ 46.357444][ T40] br0: port 2(eth1) entered forwarding state [ 46.502998][ T11] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 46.503350][ T11] bond0: (slave eth0): making interface the new active one [ 46.504127][ T11] bond0: active interface up! [ 47.988749][ T378] br0: port 1(eth0) entered disabled state [ 48.063062][ T303] bond0: (slave eth0): link status definitely down, disabling slave [ 48.063481][ T303] bond0: (slave eth1): making interface the new active one 1700 ms earlier [ 50.185256][ T40] br0: port 1(eth0) entered blocking state [ 50.185574][ T40] br0: port 1(eth0) entered forwarding state [ 50.246463][ T303] bond0: (slave eth0): link status up, enabling it in 5000 ms [ 50.246878][ T303] bond0: (slave eth0): invalid new link 3 on slave [ 50.349160][ T381] br0: port 2(eth1) entered disabled state [ 50.351795][ T303] bond0: (slave eth1): link status definitely down, disabling slave [ 50.352057][ T303] bond0: (slave eth0): making interface the new active one 200 ms earlier [ 52.026945][ T385] bond0 (unregistering): (slave eth0): Releasing backup interface [ 52.044874][ T385] bond0 (unregistering): (slave eth1): Releasing backup interface [ 52.061506][ T385] bond0 (unregistering): Released all slaves [ 52.069808][ T40] br0: port 1(eth0) entered disabled state [ 53.025167][ T392] bond0: (slave eth0): Enslaving as a backup interface with an up link [ 53.025836][ T40] br0: port 1(eth0) entered blocking state [ 53.026061][ T40] br0: port 1(eth0) entered forwarding state [ 53.166712][ T394] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 53.168050][ T393] br0: port 2(eth1) entered blocking state [ 53.168284][ T393] br0: port 2(eth1) entered forwarding state [ 53.309819][ T303] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 53.310147][ T303] bond0: (slave eth0): making interface the new active one [ 53.310960][ T303] bond0: active interface up! [ 54.784377][ T399] br0: port 1(eth0) entered disabled state [ 54.870958][ T303] bond0: (slave eth0): link status definitely down, disabling slave [ 54.871263][ T303] bond0: (slave eth1): making interface the new active one 1900 ms earlier [ 56.986169][ T393] br0: port 1(eth0) entered blocking state [ 56.986482][ T393] br0: port 1(eth0) entered forwarding state [ 57.055471][ T303] bond0: (slave eth0): link status up, enabling it in 10000 ms [ 57.055873][ T303] bond0: (slave eth0): invalid new link 3 on slave [ 57.127220][ T402] br0: port 2(eth1) entered disabled state [ 57.158812][ T303] bond0: (slave eth1): link status definitely down, disabling slave [ 57.159072][ T303] bond0: (slave eth0): making interface the new active one 200 ms earlier [ 58.808041][ T406] bond0 (unregistering): (slave eth0): Releasing backup interface [ 58.825925][ T406] bond0 (unregistering): (slave eth1): Releasing backup interface [ 58.849433][ T406] bond0 (unregistering): Released all slaves [ 58.864146][ T56] br0: port 1(eth0) entered disabled state [ 59.247832][ T303] eth1: left allmulticast mode [ 59.248338][ T303] eth1: left promiscuous mode [ 59.248868][ T303] br0: port 2(eth1) entered disabled state [ 59.252285][ T303] eth0: left allmulticast mode [ 59.252554][ T303] eth0: left promiscuous mode [ 59.252945][ T303] br0: port 1(eth0) entered disabled state [ 59.712974][ T303] ================================================================== [ 59.713293][ T303] BUG: KASAN: slab-use-after-free in cleanup_net+0x932/0xa40 [ 59.713556][ T303] Read of size 8 at addr ffff88800b3c00f8 by task kworker/u16:2/303 [ 59.713830][ T303] [ 59.713946][ T303] CPU: 3 UID: 0 PID: 303 Comm: kworker/u16:2 Not tainted 6.12.0-virtme #1 [ 59.714363][ T303] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 59.714636][ T303] Workqueue: netns cleanup_net [ 59.714854][ T303] Call Trace: [ 59.715017][ T303] [ 59.715140][ T303] dump_stack_lvl+0x82/0xd0 [ 59.715365][ T303] print_address_description.constprop.0+0x2c/0x3b0 [ 59.715629][ T303] ? cleanup_net+0x932/0xa40 [ 59.715846][ T303] print_report+0xb4/0x270 [ 59.716056][ T303] ? kasan_addr_to_slab+0x25/0x80 [ 59.716268][ T303] kasan_report+0xbd/0xf0 [ 59.716424][ T303] ? cleanup_net+0x932/0xa40 [ 59.716629][ T303] cleanup_net+0x932/0xa40 [ 59.716839][ T303] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 59.717055][ T303] ? __pfx_cleanup_net+0x10/0x10 [ 59.717268][ T303] ? trace_lock_acquire+0x148/0x1f0 [ 59.717488][ T303] ? lock_acquire+0x32/0xc0 [ 59.717701][ T303] ? process_one_work+0xe0b/0x16d0 [ 59.717918][ T303] process_one_work+0xe55/0x16d0 [ 59.718133][ T303] ? __pfx___lock_release+0x10/0x10 [ 59.718336][ T303] ? __pfx_process_one_work+0x10/0x10 [ 59.718546][ T303] ? assign_work+0x16c/0x240 [ 59.718757][ T303] worker_thread+0x58c/0xce0 [ 59.718975][ T303] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 59.719237][ T303] ? __pfx_worker_thread+0x10/0x10 [ 59.719444][ T303] ? __pfx_worker_thread+0x10/0x10 [ 59.719652][ T303] kthread+0x28a/0x350 [ 59.719812][ T303] ? __pfx_kthread+0x10/0x10 [ 59.720017][ T303] ret_from_fork+0x31/0x70 [ 59.720227][ T303] ? __pfx_kthread+0x10/0x10 [ 59.720448][ T303] ret_from_fork_asm+0x1a/0x30 [ 59.720661][ T303] [ 59.720833][ T303] [ 59.720938][ T303] Allocated by task 240: [ 59.721089][ T303] kasan_save_stack+0x24/0x50 [ 59.721302][ T303] kasan_save_track+0x14/0x30 [ 59.721502][ T303] __kasan_slab_alloc+0x59/0x70 [ 59.721707][ T303] kmem_cache_alloc_noprof+0x10b/0x350 [ 59.721903][ T303] copy_net_ns+0xc6/0x340 [ 59.722039][ T303] create_new_namespaces+0x35f/0x920 [ 59.722252][ T303] unshare_nsproxy_namespaces+0x8d/0x130 [ 59.722453][ T303] ksys_unshare+0x2a9/0x660 [ 59.722672][ T303] __x64_sys_unshare+0x31/0x40 [ 59.722885][ T303] do_syscall_64+0xc1/0x1d0 [ 59.723106][ T303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.723375][ T303] [ 59.723490][ T303] Freed by task 303: [ 59.723654][ T303] kasan_save_stack+0x24/0x50 [ 59.723880][ T303] kasan_save_track+0x14/0x30 [ 59.724097][ T303] kasan_save_free_info+0x3b/0x60 [ 59.724315][ T303] __kasan_slab_free+0x38/0x50 [ 59.724531][ T303] kmem_cache_free+0xf8/0x330 [ 59.724740][ T303] cleanup_net+0x5a8/0xa40 [ 59.724955][ T303] process_one_work+0xe55/0x16d0 [ 59.725174][ T303] worker_thread+0x58c/0xce0 [ 59.725387][ T303] kthread+0x28a/0x350 [ 59.725554][ T303] ret_from_fork+0x31/0x70 [ 59.725772][ T303] ret_from_fork_asm+0x1a/0x30 [ 59.725991][ T303] [ 59.726105][ T303] Last potentially related work creation: [ 59.726323][ T303] kasan_save_stack+0x24/0x50 [ 59.726543][ T303] __kasan_record_aux_stack+0x8e/0xa0 [ 59.726762][ T303] insert_work+0x34/0x230 [ 59.726928][ T303] __queue_work+0x5fd/0xa40 [ 59.727149][ T303] queue_delayed_work_on+0x8c/0xa0 [ 59.727370][ T303] __inet_insert_ifa+0x751/0xb10 [ 59.727596][ T303] inet_rtm_newaddr+0x833/0xbd0 [ 59.727819][ T303] rtnetlink_rcv_msg+0x712/0xc10 [ 59.728042][ T303] netlink_rcv_skb+0x130/0x360 [ 59.728264][ T303] netlink_unicast+0x44b/0x710 [ 59.728493][ T303] netlink_sendmsg+0x723/0xbe0 [ 59.728714][ T303] ____sys_sendmsg+0x7ac/0xa10 [ 59.728938][ T303] ___sys_sendmsg+0xee/0x170 [ 59.729162][ T303] __sys_sendmsg+0x109/0x1a0 [ 59.729380][ T303] do_syscall_64+0xc1/0x1d0 [ 59.729601][ T303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.729875][ T303] [ 59.729988][ T303] The buggy address belongs to the object at ffff88800b3c0040 [ 59.729988][ T303] which belongs to the cache net_namespace of size 5696 [ 59.730566][ T303] The buggy address is located 184 bytes inside of [ 59.730566][ T303] freed 5696-byte region [ffff88800b3c0040, ffff88800b3c1680) [ 59.731094][ T303] [ 59.731210][ T303] The buggy address belongs to the physical page: [ 59.731478][ T303] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88800b3c2fc0 pfn:0xb3c0 [ 59.731914][ T303] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 59.732242][ T303] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 59.732521][ T303] page_type: f5(slab) [ 59.732694][ T303] raw: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 59.733098][ T303] raw: ffff88800b3c2fc0 0000000000050002 00000001f5000000 0000000000000000 [ 59.733513][ T303] head: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 59.733932][ T303] head: ffff88800b3c2fc0 0000000000050002 00000001f5000000 0000000000000000 [ 59.734334][ T303] head: 0080000000000003 ffffea00002cf001 ffffffffffffffff 0000000000000000 [ 59.734710][ T303] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 59.735088][ T303] page dumped because: kasan: bad access detected [ 59.735356][ T303] [ 59.735463][ T303] Memory state around the buggy address: [ 59.735674][ T303] ffff88800b3bff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.735997][ T303] ffff88800b3c0000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 59.736304][ T303] >ffff88800b3c0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.736614][ T303] ^ [ 59.736924][ T303] ffff88800b3c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.737258][ T303] ffff88800b3c0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.737564][ T303] ================================================================== [ 59.737918][ T303] Disabling lock debugging due to kernel taint