[ 1.960423] netdevsim netdevsim272 eni272np1: renamed from eth0 [ 2.039988] team0: Port device eni272np1 added [ 2.040484] ip (231) used greatest stack depth: 12504 bytes left [ 2.074155] team0 (unregistering): Port device eni272np1 removed [ 2.080359] ------------[ cut here ]------------ [ 2.080446] refcount_t: underflow; use-after-free. [ 2.080506] WARNING: CPU: 3 PID: 235 at lib/refcount.c:28 refcount_warn_saturate+0xbc/0x110 [ 2.080582] Modules linked in: netdevsim [ 2.080615] CPU: 3 UID: 0 PID: 235 Comm: ip Not tainted 6.18.0-rc4-virtme #1 PREEMPT(voluntary) [ 2.080676] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2.080717] RIP: 0010:refcount_warn_saturate+0xbc/0x110 [ 2.080757] Code: a9 e8 88 98 ba ff 90 0f 0b 90 90 c3 80 3d 69 b4 eb 00 00 75 89 c6 05 60 b4 eb 00 01 90 48 c7 c7 98 6e 14 a9 e8 65 98 ba ff 90 <0f> 0b 90 90 c3 80 3d 44 b4 eb 00 00 0f 85 62 ff ff ff c6 05 37 b4 [ 2.080874] RSP: 0018:ffffb6f5002b3730 EFLAGS: 00010282 [ 2.080917] RAX: 0000000000000000 RBX: ffffb6f5002b3740 RCX: 00000000ffffdfff [ 2.080971] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000001 [ 2.081048] RBP: ffffb6f5002b3258 R08: ffffffffa9556a28 R09: 00000000ffffdfff [ 2.081108] R10: ffffffffa9476a40 R11: ffffffffa9526a40 R12: dead000000000122 [ 2.081174] R13: 00000000fffb73b8 R14: 0000000000000001 R15: ffff921542dbe000 [ 2.081235] FS: 00007f4cf1eff800(0000) GS:ffff9215d5137000(0000) knlGS:0000000000000000 [ 2.081295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.081359] CR2: 00007f42619415f0 CR3: 0000000004de2002 CR4: 0000000000772ef0 [ 2.081414] PKRU: 55555554 [ 2.081434] Call Trace: [ 2.081459] [ 2.081481] netdev_run_todo+0x21a/0x550 [ 2.081521] rtnl_dellink+0x15b/0x350 [ 2.081560] ? virtio_fs_enqueue_req+0x352/0x570 [ 2.081608] ? netdev_run_todo+0x63/0x550 [ 2.081639] ? rtnl_bridge_getlink+0x1a0/0x1a0 [ 2.081677] rtnetlink_rcv_msg+0x358/0x400 [ 2.081711] ? get_page_from_freelist+0x15b4/0x1770 [ 2.081757] ? rtnl_calcit.isra.0+0x110/0x110 [ 2.081796] netlink_rcv_skb+0x57/0x100 [ 2.081838] netlink_unicast+0x252/0x380 [ 2.081869] ? __alloc_skb+0xdb/0x190 [ 2.081905] netlink_sendmsg+0x1be/0x3e0 [ 2.081936] ____sys_sendmsg+0x132/0x260 [ 2.081977] ? copy_msghdr_from_user+0x6c/0xa0 [ 2.082014] ___sys_sendmsg+0x87/0xd0 [ 2.082045] ? do_wp_page+0x369/0xe90 [ 2.082075] ? ___pte_offset_map+0x1b/0xd0 [ 2.082107] ? __handle_mm_fault+0x4e6/0xe50 [ 2.082151] ? fsnotify_grab_connector+0x48/0x80 [ 2.082201] ? fsnotify_destroy_marks+0x29/0x150 [ 2.082240] __sys_sendmsg+0x71/0xd0 [ 2.082271] do_syscall_64+0xa4/0xfd0 [ 2.082315] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 2.082357] RIP: 0033:0x7f4cf20cd1d7 [ 2.082401] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 2.082543] RSP: 002b:00007fffbcb86338 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2.082615] RAX: ffffffffffffffda RBX: 00007fffbcb86a60 RCX: 00007f4cf20cd1d7 [ 2.082662] RDX: 0000000000000000 RSI: 00007fffbcb863a0 RDI: 0000000000000005 [ 2.082721] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000078 [ 2.082785] R10: 00007f4cf1fc9f60 R11: 0000000000000246 R12: 0000000000000001 [ 2.082834] R13: 00000000690de85a R14: 0000000000499600 R15: 0000000000000000 [ 2.082896] [ 2.082923] ---[ end trace 0000000000000000 ]--- [ 2.083483] ip (235) used greatest stack depth: 11744 bytes left [ 2.128619] team0: entered promiscuous mode [ 2.142121] dummyteam: entered promiscuous mode [ 2.142261] team0: Port device dummyteam added [ 2.164038] dummyteam: left promiscuous mode [ 2.164229] team0 (unregistering): Port device dummyteam removed [ 2.236719] team0: Port device dummyteam added [ 2.258964] team0: entered promiscuous mode [ 2.259067] dummyteam: entered promiscuous mode [ 2.312131] dummyteam: left promiscuous mode [ 2.312339] team0 (unregistering): Port device dummyteam removed [ 2.415359] ------------[ cut here ]------------ [ 2.415512] kernel BUG at net/core/net-sysfs.c:2246! [ 2.415584] Oops: invalid opcode: 0000 [#1] SMP [ 2.415654] CPU: 0 UID: 0 PID: 220 Comm: propagation.sh Tainted: G W 6.18.0-rc4-virtme #1 PREEMPT(voluntary) [ 2.415767] Tainted: [W]=WARN [ 2.415807] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2.415877] RIP: 0010:netdev_release+0x2d/0x30 [ 2.415940] Code: fa 0f 1f 44 00 00 80 7f e0 04 75 1d 55 48 8d af d0 fa ff ff 48 8b bf 00 fc ff ff e8 cd ff a3 ff 48 89 ef 5d e9 84 06 a4 ff 90 <0f> 0b 90 f3 0f 1e fa 0f 1f 44 00 00 55 48 89 f5 48 8d 97 e8 fb ff [ 2.416111] RSP: 0018:ffffb6f50056fbf0 EFLAGS: 00010297 [ 2.416161] RAX: ffffffffa8b5a5d0 RBX: 00000000ffffffff RCX: 0000000000000002 [ 2.416243] RDX: 0000000000000006 RSI: ffffffffa8953ba4 RDI: ffff9215413c4530 [ 2.416323] RBP: ffff9215413c4530 R08: 0000000000000010 R09: 0000000000000190 [ 2.416401] R10: 0000000000000400 R11: 0000000000000190 R12: ffff921541ae4800 [ 2.416477] R13: ffffffffa8eb1d20 R14: ffff921542e58580 R15: ffff9215413c4000 [ 2.416558] FS: 00007fe712ce4000(0000) GS:ffff9215d4fb7000(0000) knlGS:0000000000000000 [ 2.416643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.416716] CR2: 00007f42619415f0 CR3: 0000000004dc9003 CR4: 0000000000772ef0 [ 2.416803] PKRU: 55555554 [ 2.416832] Call Trace: [ 2.416860] [ 2.416883] device_release+0x35/0x90 [ 2.416930] kobject_put+0x64/0xc0 [ 2.416984] netdev_run_todo+0x21a/0x550 [ 2.417036] nsim_destroy+0x95/0x180 [netdevsim] [ 2.417094] __nsim_dev_port_del+0x47/0x70 [netdevsim] [ 2.417149] nsim_dev_reload_destroy+0x5b/0x110 [netdevsim] [ 2.417208] nsim_drv_remove+0x2f/0xb0 [netdevsim] [ 2.417273] device_release_driver_internal+0x193/0x200 [ 2.417328] bus_remove_device+0xc1/0x100 [ 2.417375] device_del+0x15f/0x480 [ 2.417414] device_unregister+0x12/0x30 [ 2.417452] del_device_store+0x117/0x1a0 [netdevsim] [ 2.417510] kernfs_fop_write_iter+0x12b/0x1c0 [ 2.417569] vfs_write+0x33a/0x470 [ 2.417617] ksys_write+0x65/0xe0 [ 2.417658] do_syscall_64+0xa4/0xfd0 [ 2.417697] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 2.417748] RIP: 0033:0x7fe712de4257 [ 2.417788] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 [ 2.417976] RSP: 002b:00007ffc9dbaccc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2.418050] RAX: ffffffffffffffda RBX: 00007fe712ee0780 RCX: 00007fe712de4257 [ 2.418128] RDX: 0000000000000004 RSI: 00005610a64a0a90 RDI: 0000000000000001 [ 2.418204] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007fe712e96d20 [ 2.418285] R10: 00007fe712e96c20 R11: 0000000000000246 R12: 0000000000000004 [ 2.418363] R13: 00005610a64a0a90 R14: 0000000000000004 R15: 00007fe712edb9c0 [ 2.418445] [ 2.418466] Modules linked in: netdevsim [ 2.418540] ---[ end trace 0000000000000000 ]--- [ 2.418606] RIP: 0010:netdev_release+0x2d/0x30 [ 2.418663] Code: fa 0f 1f 44 00 00 80 7f e0 04 75 1d 55 48 8d af d0 fa ff ff 48 8b bf 00 fc ff ff e8 cd ff a3 ff 48 89 ef 5d e9 84 06 a4 ff 90 <0f> 0b 90 f3 0f 1e fa 0f 1f 44 00 00 55 48 89 f5 48 8d 97 e8 fb ff [ 2.418842] RSP: 0018:ffffb6f50056fbf0 EFLAGS: 00010297 [ 2.418901] RAX: ffffffffa8b5a5d0 RBX: 00000000ffffffff RCX: 0000000000000002 [ 2.418978] RDX: 0000000000000006 RSI: ffffffffa8953ba4 RDI: ffff9215413c4530 [ 2.419058] RBP: ffff9215413c4530 R08: 0000000000000010 R09: 0000000000000190 [ 2.419138] R10: 0000000000000400 R11: 0000000000000190 R12: ffff921541ae4800 [ 2.419216] R13: ffffffffa8eb1d20 R14: ffff921542e58580 R15: ffff9215413c4000 [ 2.419294] FS: 00007fe712ce4000(0000) GS:ffff9215d4fb7000(0000) knlGS:0000000000000000 [ 2.419384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.419450] CR2: 00007f42619415f0 CR3: 0000000004dc9003 CR4: 0000000000772ef0 [ 2.419532] PKRU: 55555554