[ 11.957384][ T244] eth0: renamed from lag1 [ 12.109792][ T249] eth0: renamed from lag1-end [ 12.416706][ T259] eth1: renamed from lag1 [ 12.566270][ T262] eth1: renamed from lag1-end [ 12.925864][ T264] br0: port 1(eth0) entered blocking state [ 12.926325][ T264] br0: port 1(eth0) entered disabled state [ 12.927745][ T264] eth0: entered allmulticast mode [ 12.929315][ T264] eth0: entered promiscuous mode [ 13.141534][ T265] br0: port 2(eth1) entered blocking state [ 13.141938][ T265] br0: port 2(eth1) entered disabled state [ 13.142747][ T265] eth1: entered allmulticast mode [ 13.144769][ T265] eth1: entered promiscuous mode [ 14.003270][ T271] bond0: (slave eth0): Enslaving as an active interface with an up link [ 14.012186][ T39] br0: port 1(eth0) entered blocking state [ 14.012612][ T39] br0: port 1(eth0) entered forwarding state [ 14.198775][ T272] bond0: (slave eth1): Enslaving as an active interface with an up link [ 14.199956][ T37] br0: port 2(eth1) entered blocking state [ 14.200182][ T37] br0: port 2(eth1) entered forwarding state [ 15.913425][ T277] br0: port 1(eth0) entered disabled state [ 16.011552][ T68] bond0: (slave eth0): link status definitely down, disabling slave [ 18.136934][ T39] br0: port 1(eth0) entered blocking state [ 18.137275][ T39] br0: port 1(eth0) entered forwarding state [ 18.194815][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 18.335077][ T280] br0: port 2(eth1) entered disabled state [ 18.404641][ T68] bond0: (slave eth1): link status definitely down, disabling slave [ 19.989016][ T284] bond0 (unregistering): (slave eth0): Releasing backup interface [ 20.006520][ T284] bond0 (unregistering): (slave eth1): Releasing backup interface [ 20.030526][ T284] bond0 (unregistering): Released all slaves [ 20.048217][ T40] br0: port 1(eth0) entered disabled state [ 21.125817][ T292] bond0: (slave eth0): Enslaving as an active interface with an up link [ 21.126531][ T37] br0: port 1(eth0) entered blocking state [ 21.126805][ T37] br0: port 1(eth0) entered forwarding state [ 21.277979][ T293] bond0: (slave eth1): Enslaving as an active interface with an up link [ 21.279138][ T39] br0: port 2(eth1) entered blocking state [ 21.279398][ T39] br0: port 2(eth1) entered forwarding state [ 21.428839][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 21.429977][ T68] bond0: active interface up! [ 21.530804][ T68] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 23.023538][ T298] br0: port 1(eth0) entered disabled state [ 23.090887][ T68] bond0: (slave eth0): link status definitely down, disabling slave [ 25.243099][ T40] br0: port 1(eth0) entered blocking state [ 25.243372][ T40] br0: port 1(eth0) entered forwarding state [ 25.274677][ T68] bond0: (slave eth0): link status up, enabling it in 200 ms [ 25.275248][ T68] bond0: (slave eth0): invalid new link 3 on slave [ 25.408426][ T301] br0: port 2(eth1) entered disabled state [ 25.482762][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 25.483283][ T68] bond0: (slave eth1): link status definitely down, disabling slave [ 27.125254][ T305] bond0 (unregistering): (slave eth0): Releasing backup interface [ 27.138573][ T305] bond0 (unregistering): (slave eth1): Releasing backup interface [ 27.162031][ T305] bond0 (unregistering): Released all slaves [ 27.171484][ T40] br0: port 1(eth0) entered disabled state [ 28.221418][ T312] bond0: (slave eth0): Enslaving as an active interface with an up link [ 28.223283][ T39] br0: port 1(eth0) entered blocking state [ 28.223663][ T39] br0: port 1(eth0) entered forwarding state [ 28.384594][ T313] bond0: (slave eth1): Enslaving as an active interface with an up link [ 28.386175][ T40] br0: port 2(eth1) entered blocking state [ 28.386413][ T40] br0: port 2(eth1) entered forwarding state [ 28.542069][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 28.542990][ T68] bond0: active interface up! [ 28.859788][ T68] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 30.109194][ T318] br0: port 1(eth0) entered disabled state [ 30.111709][ T68] bond0: (slave eth0): link status definitely down, disabling slave [ 32.360114][ T40] br0: port 1(eth0) entered blocking state [ 32.360380][ T40] br0: port 1(eth0) entered forwarding state [ 32.402576][ T68] bond0: (slave eth0): link status up, enabling it in 500 ms [ 32.403048][ T68] bond0: (slave eth0): invalid new link 3 on slave [ 32.530955][ T321] br0: port 2(eth1) entered disabled state [ 32.610791][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 32.611400][ T68] bond0: (slave eth1): link status definitely down, disabling slave [ 34.240185][ T325] bond0 (unregistering): (slave eth0): Releasing backup interface [ 34.266220][ T325] bond0 (unregistering): (slave eth1): Releasing backup interface [ 34.285359][ T325] bond0 (unregistering): Released all slaves [ 34.307610][ T40] br0: port 1(eth0) entered disabled state [ 35.380114][ T332] bond0: (slave eth0): Enslaving as an active interface with an up link [ 35.380784][ T40] br0: port 1(eth0) entered blocking state [ 35.381066][ T40] br0: port 1(eth0) entered forwarding state [ 35.532219][ T333] bond0: (slave eth1): Enslaving as an active interface with an up link [ 35.533731][ T40] br0: port 2(eth1) entered blocking state [ 35.534125][ T40] br0: port 2(eth1) entered forwarding state [ 35.691084][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 35.692163][ T68] bond0: active interface up! [ 36.626871][ T68] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 37.337125][ T338] br0: port 1(eth0) entered disabled state [ 37.354869][ T68] bond0: (slave eth0): link status definitely down, disabling slave [ 39.561300][ T40] br0: port 1(eth0) entered blocking state [ 39.561686][ T40] br0: port 1(eth0) entered forwarding state [ 39.642565][ T68] bond0: (slave eth0): link status up, enabling it in 1000 ms [ 39.643175][ T68] bond0: (slave eth0): invalid new link 3 on slave [ 39.751648][ T341] br0: port 2(eth1) entered disabled state [ 39.850793][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 39.851355][ T68] bond0: (slave eth1): link status definitely down, disabling slave [ 41.512250][ T345] bond0 (unregistering): (slave eth0): Releasing backup interface [ 41.537325][ T345] bond0 (unregistering): (slave eth1): Releasing backup interface [ 41.561952][ T345] bond0 (unregistering): Released all slaves [ 41.579394][ T40] br0: port 1(eth0) entered disabled state [ 42.707447][ T352] bond0: (slave eth0): Enslaving as an active interface with an up link [ 42.708117][ T39] br0: port 1(eth0) entered blocking state [ 42.708365][ T39] br0: port 1(eth0) entered forwarding state [ 42.876789][ T353] bond0: (slave eth1): Enslaving as an active interface with an up link [ 42.878321][ T40] br0: port 2(eth1) entered blocking state [ 42.878724][ T40] br0: port 2(eth1) entered forwarding state [ 43.039256][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 43.039935][ T68] bond0: active interface up! [ 44.640301][ T358] br0: port 1(eth0) entered disabled state [ 44.706905][ T68] bond0: (slave eth0): link status definitely down, disabling slave [ 44.708076][ T68] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 46.888591][ T39] br0: port 1(eth0) entered blocking state [ 46.889016][ T39] br0: port 1(eth0) entered forwarding state [ 46.890533][ T68] bond0: (slave eth0): link status up, enabling it in 2000 ms [ 46.890990][ T68] bond0: (slave eth0): invalid new link 3 on slave [ 47.074001][ T361] br0: port 2(eth1) entered disabled state [ 47.099981][ T68] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 47.100880][ T68] bond0: (slave eth1): link status definitely down, disabling slave [ 48.802212][ T365] bond0 (unregistering): (slave eth0): Releasing backup interface [ 48.823970][ T365] bond0 (unregistering): (slave eth1): Releasing backup interface [ 48.843264][ T365] bond0 (unregistering): Released all slaves [ 48.867786][ T40] br0: port 1(eth0) entered disabled state [ 50.012943][ T372] bond0: (slave eth0): Enslaving as an active interface with an up link [ 50.013656][ T39] br0: port 1(eth0) entered blocking state [ 50.013916][ T39] br0: port 1(eth0) entered forwarding state [ 50.179452][ T373] bond0: (slave eth1): Enslaving as an active interface with an up link [ 50.180776][ T70] br0: port 2(eth1) entered blocking state [ 50.181022][ T70] br0: port 2(eth1) entered forwarding state [ 50.351995][ T285] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 50.352866][ T285] bond0: active interface up! [ 51.973783][ T378] br0: port 1(eth0) entered disabled state [ 52.019875][ T285] bond0: (slave eth0): link status definitely down, disabling slave [ 52.020637][ T285] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 54.196406][ T243] br0: port 1(eth0) entered blocking state [ 54.196899][ T243] br0: port 1(eth0) entered forwarding state [ 54.202517][ T285] bond0: (slave eth0): link status up, enabling it in 5000 ms [ 54.202967][ T285] bond0: (slave eth0): invalid new link 3 on slave [ 54.414540][ T381] br0: port 2(eth1) entered disabled state [ 54.515804][ T285] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 54.516286][ T285] bond0: (slave eth1): link status definitely down, disabling slave [ 56.203529][ T385] bond0 (unregistering): (slave eth0): Releasing backup interface [ 56.220527][ T385] bond0 (unregistering): (slave eth1): Releasing backup interface [ 56.248904][ T385] bond0 (unregistering): Released all slaves [ 56.264166][ T154] br0: port 1(eth0) entered disabled state [ 57.339557][ T392] bond0: (slave eth0): Enslaving as an active interface with an up link [ 57.340337][ T243] br0: port 1(eth0) entered blocking state [ 57.340722][ T243] br0: port 1(eth0) entered forwarding state [ 57.548276][ T393] bond0: (slave eth1): Enslaving as an active interface with an up link [ 57.549701][ T154] br0: port 2(eth1) entered blocking state [ 57.549938][ T154] br0: port 2(eth1) entered forwarding state [ 57.708938][ T285] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 57.709693][ T285] bond0: active interface up! [ 59.268268][ T398] br0: port 1(eth0) entered disabled state [ 59.370931][ T285] bond0: (slave eth0): link status definitely down, disabling slave [ 59.371848][ T285] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 61.488448][ T243] br0: port 1(eth0) entered blocking state [ 61.488752][ T243] br0: port 1(eth0) entered forwarding state [ 61.554790][ T285] bond0: (slave eth0): link status up, enabling it in 10000 ms [ 61.555363][ T285] bond0: (slave eth0): invalid new link 3 on slave [ 61.651825][ T401] br0: port 2(eth1) entered disabled state [ 61.658734][ T285] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 61.659575][ T285] bond0: (slave eth1): link status definitely down, disabling slave [ 63.194158][ T405] bond0 (unregistering): (slave eth0): Releasing backup interface [ 63.212768][ T405] bond0 (unregistering): (slave eth1): Releasing backup interface [ 63.221114][ T405] bond0 (unregistering): Released all slaves [ 63.243077][ T243] br0: port 1(eth0) entered disabled state [ 63.786790][ T285] eth1: left allmulticast mode [ 63.787204][ T285] eth1: left promiscuous mode [ 63.787665][ T285] br0: port 2(eth1) entered disabled state [ 63.790012][ T285] eth0: left allmulticast mode [ 63.790265][ T285] eth0: left promiscuous mode [ 63.790698][ T285] br0: port 1(eth0) entered disabled state [ 64.229549][ T285] ================================================================== [ 64.230097][ T285] BUG: KASAN: slab-use-after-free in cleanup_net+0x932/0xa40 [ 64.230436][ T285] Read of size 8 at addr ffff88800a5d80f8 by task kworker/u16:2/285 [ 64.230711][ T285] [ 64.230794][ T285] CPU: 3 UID: 0 PID: 285 Comm: kworker/u16:2 Not tainted 6.12.0-virtme #1 [ 64.231356][ T285] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 64.231750][ T285] Workqueue: netns cleanup_net [ 64.231962][ T285] Call Trace: [ 64.232111][ T285] [ 64.232209][ T285] dump_stack_lvl+0x82/0xd0 [ 64.232408][ T285] print_address_description.constprop.0+0x2c/0x3b0 [ 64.232669][ T285] ? cleanup_net+0x932/0xa40 [ 64.232890][ T285] print_report+0xb4/0x270 [ 64.233088][ T285] ? kasan_addr_to_slab+0x25/0x80 [ 64.233287][ T285] kasan_report+0xbd/0xf0 [ 64.233428][ T285] ? cleanup_net+0x932/0xa40 [ 64.233625][ T285] cleanup_net+0x932/0xa40 [ 64.233811][ T285] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 64.234011][ T285] ? __pfx_cleanup_net+0x10/0x10 [ 64.234218][ T285] ? trace_lock_acquire+0x148/0x1f0 [ 64.234397][ T285] ? lock_acquire+0x32/0xc0 [ 64.234567][ T285] ? process_one_work+0xe0b/0x16d0 [ 64.234760][ T285] process_one_work+0xe55/0x16d0 [ 64.234968][ T285] ? __pfx___lock_release+0x10/0x10 [ 64.235169][ T285] ? __pfx_process_one_work+0x10/0x10 [ 64.235350][ T285] ? assign_work+0x16c/0x240 [ 64.235523][ T285] worker_thread+0x58c/0xce0 [ 64.235701][ T285] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 64.235958][ T285] ? __pfx_worker_thread+0x10/0x10 [ 64.236150][ T285] ? __pfx_worker_thread+0x10/0x10 [ 64.236340][ T285] kthread+0x28a/0x350 [ 64.236484][ T285] ? __pfx_kthread+0x10/0x10 [ 64.236667][ T285] ret_from_fork+0x31/0x70 [ 64.236841][ T285] ? __pfx_kthread+0x10/0x10 [ 64.237033][ T285] ret_from_fork_asm+0x1a/0x30 [ 64.237245][ T285] [ 64.237399][ T285] [ 64.237500][ T285] Allocated by task 240: [ 64.237638][ T285] kasan_save_stack+0x24/0x50 [ 64.237823][ T285] kasan_save_track+0x14/0x30 [ 64.237995][ T285] __kasan_slab_alloc+0x59/0x70 [ 64.238178][ T285] kmem_cache_alloc_noprof+0x10b/0x350 [ 64.238354][ T285] copy_net_ns+0xc6/0x340 [ 64.238490][ T285] create_new_namespaces+0x35f/0x920 [ 64.238684][ T285] unshare_nsproxy_namespaces+0x8d/0x130 [ 64.238855][ T285] ksys_unshare+0x2a9/0x660 [ 64.239013][ T285] __x64_sys_unshare+0x31/0x40 [ 64.239201][ T285] do_syscall_64+0xc1/0x1d0 [ 64.239389][ T285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.239617][ T285] [ 64.239712][ T285] Freed by task 285: [ 64.239844][ T285] kasan_save_stack+0x24/0x50 [ 64.240000][ T285] kasan_save_track+0x14/0x30 [ 64.240156][ T285] kasan_save_free_info+0x3b/0x60 [ 64.240319][ T285] __kasan_slab_free+0x38/0x50 [ 64.240484][ T285] kmem_cache_free+0xf8/0x330 [ 64.240635][ T285] cleanup_net+0x5a8/0xa40 [ 64.240808][ T285] process_one_work+0xe55/0x16d0 [ 64.240986][ T285] worker_thread+0x58c/0xce0 [ 64.241150][ T285] kthread+0x28a/0x350 [ 64.241296][ T285] ret_from_fork+0x31/0x70 [ 64.241476][ T285] ret_from_fork_asm+0x1a/0x30 [ 64.241671][ T285] [ 64.241753][ T285] Last potentially related work creation: [ 64.241914][ T285] kasan_save_stack+0x24/0x50 [ 64.242079][ T285] __kasan_record_aux_stack+0x8e/0xa0 [ 64.242238][ T285] insert_work+0x34/0x230 [ 64.242357][ T285] __queue_work+0x5fd/0xa40 [ 64.242512][ T285] queue_delayed_work_on+0x8c/0xa0 [ 64.242706][ T285] __inet_insert_ifa+0x751/0xb10 [ 64.242881][ T285] inet_rtm_newaddr+0x833/0xbd0 [ 64.243066][ T285] rtnetlink_rcv_msg+0x712/0xc10 [ 64.243247][ T285] netlink_rcv_skb+0x130/0x360 [ 64.243421][ T285] netlink_unicast+0x44b/0x710 [ 64.243607][ T285] netlink_sendmsg+0x723/0xbe0 [ 64.243794][ T285] ____sys_sendmsg+0x7ac/0xa10 [ 64.243969][ T285] ___sys_sendmsg+0xee/0x170 [ 64.244145][ T285] __sys_sendmsg+0x109/0x1a0 [ 64.244313][ T285] do_syscall_64+0xc1/0x1d0 [ 64.244503][ T285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.244738][ T285] [ 64.244831][ T285] The buggy address belongs to the object at ffff88800a5d8040 [ 64.244831][ T285] which belongs to the cache net_namespace of size 5696 [ 64.245335][ T285] The buggy address is located 184 bytes inside of [ 64.245335][ T285] freed 5696-byte region [ffff88800a5d8040, ffff88800a5d9680) [ 64.245768][ T285] [ 64.245857][ T285] The buggy address belongs to the physical page: [ 64.246155][ T285] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88800a5dafc0 pfn:0xa5d8 [ 64.246670][ T285] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 64.246954][ T285] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 64.247204][ T285] page_type: f5(slab) [ 64.247419][ T285] raw: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 64.247768][ T285] raw: ffff88800a5dafc0 0000000000050002 00000001f5000000 0000000000000000 [ 64.248082][ T285] head: 0080000000000240 ffff888001965240 ffff88800196a088 ffff88800196a088 [ 64.248490][ T285] head: ffff88800a5dafc0 0000000000050002 00000001f5000000 0000000000000000 [ 64.248838][ T285] head: 0080000000000003 ffffea0000297601 ffffffffffffffff 0000000000000000 [ 64.249227][ T285] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 64.249522][ T285] page dumped because: kasan: bad access detected [ 64.249713][ T285] [ 64.249795][ T285] Memory state around the buggy address: [ 64.249949][ T285] ffff88800a5d7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.250210][ T285] ffff88800a5d8000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 64.250439][ T285] >ffff88800a5d8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.250660][ T285] ^ [ 64.250886][ T285] ffff88800a5d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.251113][ T285] ffff88800a5d8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.251348][ T285] ================================================================== [ 64.251606][ T285] Disabling lock debugging due to kernel taint