[ 1.909824] netconsole: network logging started [ 3.894685] netconsole selftest: netcons_59fHW [ 4.003548] netpoll: netconsole: nsim842 is a slave device, aborting [ 4.049813] ------------[ cut here ]------------ [ 4.049988] refcount_t: underflow; use-after-free. [ 4.050079] WARNING: CPU: 2 PID: 352 at lib/refcount.c:28 refcount_warn_saturate+0xbc/0x110 [ 4.050169] Modules linked in: netconsole netdevsim [ 4.050239] CPU: 2 UID: 0 PID: 352 Comm: ip Not tainted 6.18.0-rc4-virtme #1 PREEMPT(voluntary) [ 4.050329] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 4.050401] RIP: 0010:refcount_warn_saturate+0xbc/0x110 [ 4.050465] Code: 8b e8 88 98 ba ff 90 0f 0b 90 90 c3 80 3d 69 b4 eb 00 00 75 89 c6 05 60 b4 eb 00 01 90 48 c7 c7 98 6e 94 8b e8 65 98 ba ff 90 <0f> 0b 90 90 c3 80 3d 44 b4 eb 00 00 0f 85 62 ff ff ff c6 05 37 b4 [ 4.050615] RSP: 0018:ffffa448406e7730 EFLAGS: 00010282 [ 4.050681] RAX: 0000000000000000 RBX: ffffa448406e7740 RCX: 00000000ffffdfff [ 4.050769] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000001 [ 4.050854] RBP: ffffa448406e7258 R08: ffffffff8bd56a28 R09: 00000000ffffdfff [ 4.050942] R10: ffffffff8bc76a40 R11: ffffffff8bd26a40 R12: dead000000000122 [ 4.051021] R13: 00000000fffb7b73 R14: 0000000000000001 R15: ffff96ae42cae000 [ 4.051113] FS: 00007fd748c33800(0000) GS:ffff96aef28b7000(0000) knlGS:0000000000000000 [ 4.051192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 4.051267] CR2: 00000000004a1778 CR3: 0000000006f04001 CR4: 0000000000772ef0 [ 4.051344] PKRU: 55555554 [ 4.051390] Call Trace: [ 4.051437] [ 4.051489] netdev_run_todo+0x21a/0x550 [ 4.051552] rtnl_dellink+0x15b/0x350 [ 4.051619] ? rtnl_bridge_getlink+0x1a0/0x1a0 [ 4.051689] rtnetlink_rcv_msg+0x358/0x400 [ 4.051760] ? get_page_from_freelist+0x15b4/0x1770 [ 4.051834] ? rtnl_calcit.isra.0+0x110/0x110 [ 4.051908] netlink_rcv_skb+0x57/0x100 [ 4.051969] netlink_unicast+0x252/0x380 [ 4.052023] ? __alloc_skb+0xdb/0x190 [ 4.052087] netlink_sendmsg+0x1be/0x3e0 [ 4.052146] ____sys_sendmsg+0x132/0x260 [ 4.052206] ? copy_msghdr_from_user+0x6c/0xa0 [ 4.052277] ___sys_sendmsg+0x87/0xd0 [ 4.052334] ? do_wp_page+0x369/0xe90 [ 4.052394] ? __handle_mm_fault+0x4e6/0xe50 [ 4.052458] __sys_sendmsg+0x71/0xd0 [ 4.052518] do_syscall_64+0xa4/0xfd0 [ 4.052575] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 4.052649] RIP: 0033:0x7fd748e011d7 [ 4.052714] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 4.052907] RSP: 002b:00007ffc687b4ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 4.053008] RAX: ffffffffffffffda RBX: 00007ffc687b5420 RCX: 00007fd748e011d7 [ 4.053111] RDX: 0000000000000000 RSI: 00007ffc687b4d50 RDI: 0000000000000005 [ 4.053210] RBP: 0000000000000000 R08: 000000000000002c R09: 0000000000000008 [ 4.053324] R10: 0000000000403668 R11: 0000000000000246 R12: 00007ffc687b5438 [ 4.053422] R13: 00000000690ded88 R14: 0000000000499600 R15: 0000000000000000 [ 4.053509] [ 4.053556] ---[ end trace 0000000000000000 ]--- [ 4.412787] ------------[ cut here ]------------ [ 4.412908] kernel BUG at net/core/net-sysfs.c:2246! [ 4.412951] Oops: invalid opcode: 0000 [#1] SMP [ 4.412990] CPU: 1 UID: 0 PID: 227 Comm: bash Tainted: G W 6.18.0-rc4-virtme #1 PREEMPT(voluntary) [ 4.413072] Tainted: [W]=WARN [ 4.413095] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 4.413134] RIP: 0010:netdev_release+0x2d/0x30 [ 4.413177] Code: fa 0f 1f 44 00 00 80 7f e0 04 75 1d 55 48 8d af d0 fa ff ff 48 8b bf 00 fc ff ff e8 cd ff a3 ff 48 89 ef 5d e9 84 06 a4 ff 90 <0f> 0b 90 f3 0f 1e fa 0f 1f 44 00 00 55 48 89 f5 48 8d 97 e8 fb ff [ 4.413334] RSP: 0018:ffffa448405bfbf0 EFLAGS: 00010297 [ 4.413381] RAX: ffffffff8b35a5d0 RBX: 00000000ffffffff RCX: 0000000000000002 [ 4.413433] RDX: 0000000000000006 RSI: ffffffff8b153ba4 RDI: ffff96ae46e30530 [ 4.413484] RBP: ffff96ae46e30530 R08: 000000000000014c R09: 00000000000000e8 [ 4.413531] R10: 0000000000000100 R11: 00000000000000f0 R12: ffff96ae42feba00 [ 4.413585] R13: ffffffff8b6b1d20 R14: ffff96ae41050710 R15: ffff96ae46e30000 [ 4.413643] FS: 00007f3abbe4f000(0000) GS:ffff96aef2837000(0000) knlGS:0000000000000000 [ 4.413697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 4.413742] CR2: 00007f3abbeb14d0 CR3: 00000000032c7003 CR4: 0000000000772ef0 [ 4.413790] PKRU: 55555554 [ 4.413810] Call Trace: [ 4.413828] [ 4.413849] device_release+0x35/0x90 [ 4.413889] kobject_put+0x64/0xc0 [ 4.413922] netdev_run_todo+0x21a/0x550 [ 4.413954] nsim_destroy+0x95/0x180 [netdevsim] [ 4.414000] __nsim_dev_port_del+0x47/0x70 [netdevsim] [ 4.414049] nsim_dev_reload_destroy+0x5b/0x110 [netdevsim] [ 4.414090] nsim_drv_remove+0x2f/0xb0 [netdevsim] [ 4.414129] device_release_driver_internal+0x193/0x200 [ 4.414171] bus_remove_device+0xc1/0x100 [ 4.414201] device_del+0x15f/0x480 [ 4.414232] device_unregister+0x12/0x30 [ 4.414263] del_device_store+0x117/0x1a0 [netdevsim] [ 4.414302] kernfs_fop_write_iter+0x12b/0x1c0 [ 4.414349] vfs_write+0x33a/0x470 [ 4.414381] ksys_write+0x65/0xe0 [ 4.414411] do_syscall_64+0xa4/0xfd0 [ 4.414442] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 4.414481] RIP: 0033:0x7f3abbf4f257 [ 4.414513] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 [ 4.414648] RSP: 002b:00007ffc551dd5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 4.414703] RAX: ffffffffffffffda RBX: 00007f3abc04b780 RCX: 00007f3abbf4f257 [ 4.414750] RDX: 0000000000000004 RSI: 0000564ce78ee470 RDI: 0000000000000001 [ 4.414796] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007f3abc001d20 [ 4.414843] R10: 00007f3abc001c20 R11: 0000000000000246 R12: 0000000000000004 [ 4.414900] R13: 0000564ce78ee470 R14: 0000000000000004 R15: 00007f3abc0469c0 [ 4.414947] [ 4.414969] Modules linked in: netconsole netdevsim [ 4.415017] ---[ end trace 0000000000000000 ]--- [ 4.415062] RIP: 0010:netdev_release+0x2d/0x30 [ 4.415100] Code: fa 0f 1f 44 00 00 80 7f e0 04 75 1d 55 48 8d af d0 fa ff ff 48 8b bf 00 fc ff ff e8 cd ff a3 ff 48 89 ef 5d e9 84 06 a4 ff 90 <0f> 0b 90 f3 0f 1e fa 0f 1f 44 00 00 55 48 89 f5 48 8d 97 e8 fb ff [ 4.415224] RSP: 0018:ffffa448405bfbf0 EFLAGS: 00010297 [ 4.415255] RAX: ffffffff8b35a5d0 RBX: 00000000ffffffff RCX: 0000000000000002 [ 4.415311] RDX: 0000000000000006 RSI: ffffffff8b153ba4 RDI: ffff96ae46e30530 [ 4.415368] RBP: ffff96ae46e30530 R08: 000000000000014c R09: 00000000000000e8 [ 4.415415] R10: 0000000000000100 R11: 00000000000000f0 R12: ffff96ae42feba00 [ 4.415469] R13: ffffffff8b6b1d20 R14: ffff96ae41050710 R15: ffff96ae46e30000 [ 4.415525] FS: 00007f3abbe4f000(0000) GS:ffff96aef2837000(0000) knlGS:0000000000000000 [ 4.415584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 4.415638] CR2: 00007f3abbeb14d0 CR3: 00000000032c7003 CR4: 0000000000772ef0 [ 4.415696] PKRU: 55555554