[ 16.227820][ T250] ip (250) used greatest stack depth: 24608 bytes left
[ 16.746681][ T259] ip (259) used greatest stack depth: 24400 bytes left
[ 20.499969][ T300] 8021q: 802.1Q VLAN Support v1.8
[ 25.699359][ T344] br1: port 1(vx10) entered blocking state
[ 25.700065][ T344] br1: port 1(vx10) entered disabled state
[ 25.700780][ T344] vx10: entered allmulticast mode
[ 25.704456][ T344] vx10: entered promiscuous mode
[ 25.705464][ T344] br1: port 1(vx10) entered blocking state
[ 25.706238][ T344] br1: port 1(vx10) entered forwarding state
[ 26.192776][ T349] br1: port 2(vx20) entered blocking state
[ 26.193228][ T349] br1: port 2(vx20) entered disabled state
[ 26.193677][ T349] vx20: entered allmulticast mode
[ 26.206823][ T349] vx20: entered promiscuous mode
[ 26.207951][ T349] br1: port 2(vx20) entered blocking state
[ 26.208382][ T349] br1: port 2(vx20) entered forwarding state
[ 26.432484][ T351] br1: port 3(veth1) entered blocking state
[ 26.433110][ T351] br1: port 3(veth1) entered disabled state
[ 26.444404][ T351] veth1: entered allmulticast mode
[ 26.449291][ T351] veth1: entered promiscuous mode
[ 26.586706][ T126] br1: port 3(veth1) entered blocking state
[ 26.587319][ T126] br1: port 3(veth1) entered forwarding state
[ 26.977146][ T356] br1: port 4(veth2) entered blocking state
[ 26.977651][ T356] br1: port 4(veth2) entered disabled state
[ 26.978258][ T356] veth2: entered allmulticast mode
[ 26.981809][ T356] veth2: entered promiscuous mode
[ 27.087096][ T46] br1: port 4(veth2) entered blocking state
[ 27.087538][ T46] br1: port 4(veth2) entered forwarding state
[ 32.582447][ T407] br2: port 1(w1) entered blocking state
[ 32.582809][ T407] br2: port 1(w1) entered disabled state
[ 32.583197][ T407] w1: entered allmulticast mode
[ 32.586817][ T407] w1: entered promiscuous mode
[ 33.563492][ T415] br2: port 2(vx10) entered blocking state
[ 33.564115][ T415] br2: port 2(vx10) entered disabled state
[ 33.564536][ T415] vx10: entered allmulticast mode
[ 33.568127][ T415] vx10: entered promiscuous mode
[ 33.569212][ T415] br2: port 2(vx10) entered blocking state
[ 33.569622][ T415] br2: port 2(vx10) entered forwarding state
[ 34.524491][ T422] br2: port 3(vx20) entered blocking state
[ 34.524936][ T422] br2: port 3(vx20) entered disabled state
[ 34.525353][ T422] vx20: entered allmulticast mode
[ 34.528670][ T422] vx20: entered promiscuous mode
[ 34.529465][ T422] br2: port 3(vx20) entered blocking state
[ 34.529870][ T422] br2: port 3(vx20) entered forwarding state
[ 35.621440][ T126] br2: port 1(w1) entered blocking state
[ 35.622341][ T126] br2: port 1(w1) entered forwarding state
[ 39.076102][ T462] br2: port 1(w1) entered blocking state
[ 39.076525][ T462] br2: port 1(w1) entered disabled state
[ 39.076912][ T462] w1: entered allmulticast mode
[ 39.080713][ T462] w1: entered promiscuous mode
[ 40.062107][ T470] br2: port 2(vx10) entered blocking state
[ 40.062589][ T470] br2: port 2(vx10) entered disabled state
[ 40.063066][ T470] vx10: entered allmulticast mode
[ 40.066717][ T470] vx10: entered promiscuous mode
[ 40.068227][ T470] br2: port 2(vx10) entered blocking state
[ 40.068932][ T470] br2: port 2(vx10) entered forwarding state
[ 41.055243][ T477] br2: port 3(vx20) entered blocking state
[ 41.055902][ T477] br2: port 3(vx20) entered disabled state
[ 41.056422][ T477] vx20: entered allmulticast mode
[ 41.063540][ T477] vx20: entered promiscuous mode
[ 41.064963][ T477] br2: port 3(vx20) entered blocking state
[ 41.065578][ T477] br2: port 3(vx20) entered forwarding state
[ 42.085355][ T126] br2: port 1(w1) entered blocking state
[ 42.085872][ T126] br2: port 1(w1) entered forwarding state
[ 60.575790][ T592] GACT probability NOT on
[ 156.918896][ T1832] veth3: entered promiscuous mode
[ 230.469685][ T2759] veth3: left promiscuous mode
[ 231.194100][ T2765] veth3: entered promiscuous mode
[ 305.193488][ T3692] veth3: left promiscuous mode
[ 306.566630][ T3710] vx20: left allmulticast mode
[ 306.567099][ T3710] vx20: left promiscuous mode
[ 306.567668][ T3710] br1: port 2(vx20) entered disabled state
[ 306.679657][ T3711] vx10: left allmulticast mode
[ 306.680039][ T3711] vx10: left promiscuous mode
[ 306.680660][ T3711] br1: port 1(vx10) entered disabled state
[ 312.297249][ T3716] br1: port 1(vx10) entered blocking state
[ 312.297718][ T3716] br1: port 1(vx10) entered disabled state
[ 312.298194][ T3716] vx10: entered allmulticast mode
[ 312.301973][ T3716] vx10: entered promiscuous mode
[ 312.302896][ T3716] br1: port 1(vx10) entered blocking state
[ 312.303311][ T3716] br1: port 1(vx10) entered forwarding state
[ 312.580171][ T3718] br1: port 2(vx20) entered blocking state
[ 312.580614][ T3718] br1: port 2(vx20) entered disabled state
[ 312.581257][ T3718] vx20: entered allmulticast mode
[ 312.584726][ T3718] vx20: entered promiscuous mode
[ 312.585792][ T3718] br1: port 2(vx20) entered blocking state
[ 312.586234][ T3718] br1: port 2(vx20) entered forwarding state
[ 422.779968][ T5015] veth3: entered promiscuous mode
[ 494.641832][ T5942] veth3: left promiscuous mode
[ 495.392986][ T5948] veth3: entered promiscuous mode
[ 569.113151][ T6875] veth3: left promiscuous mode
[ 570.973835][ T6898] vx20: left allmulticast mode
[ 570.974445][ T6898] vx20: left promiscuous mode
[ 570.975067][ T6898] br1: port 2(vx20) entered disabled state
[ 571.099719][ T6899] vx10: left allmulticast mode
[ 571.100396][ T6899] vx10: left promiscuous mode
[ 571.100911][ T6899] br1: port 1(vx10) entered disabled state
[ 576.672998][ T6904] br1: port 1(vx10) entered blocking state
[ 576.673418][ T6904] br1: port 1(vx10) entered disabled state
[ 576.673819][ T6904] vx10: entered allmulticast mode
[ 576.677208][ T6904] vx10: entered promiscuous mode
[ 576.677988][ T6904] br1: port 1(vx10) entered blocking state
[ 576.678364][ T6904] br1: port 1(vx10) entered forwarding state
[ 576.898772][ T6906] br1: port 2(vx20) entered blocking state
[ 576.899419][ T6906] br1: port 2(vx20) entered disabled state
[ 576.899881][ T6906] vx20: entered allmulticast mode
[ 576.903297][ T6906] vx20: entered promiscuous mode
[ 576.904110][ T6906] br1: port 2(vx20) entered blocking state
[ 576.904622][ T6906] br1: port 2(vx20) entered forwarding state
[ 961.015313][T10181] vx20: left allmulticast mode
[ 961.015710][T10181] vx20: left promiscuous mode
[ 961.016237][T10181] br1: port 2(vx20) entered disabled state
[ 961.141658][T10182] vx10: left allmulticast mode
[ 961.142274][T10182] vx10: left promiscuous mode
[ 961.143136][T10182] br1: port 1(vx10) entered disabled state
[ 966.686555][T10187] br1: port 1(vx10) entered blocking state
[ 966.687267][T10187] br1: port 1(vx10) entered disabled state
[ 966.687737][T10187] vx10: entered allmulticast mode
[ 966.691209][T10187] vx10: entered promiscuous mode
[ 966.692031][T10187] br1: port 1(vx10) entered blocking state
[ 966.692469][T10187] br1: port 1(vx10) entered forwarding state
[ 966.933425][T10189] br1: port 2(vx20) entered blocking state
[ 966.933857][T10189] br1: port 2(vx20) entered disabled state
[ 966.934347][T10189] vx20: entered allmulticast mode
[ 966.938236][T10189] vx20: entered promiscuous mode
[ 966.939076][T10189] br1: port 2(vx20) entered blocking state
[ 966.939501][T10189] br1: port 2(vx20) entered forwarding state
[ 1108.825713][ T12] vx20: left allmulticast mode
[ 1108.826725][ T12] vx20: left promiscuous mode
[ 1108.830192][ T12] br2: port 3(vx20) entered disabled state
[ 1108.838419][ T12] vx10: left allmulticast mode
[ 1108.838771][ T12] vx10: left promiscuous mode
[ 1108.839278][ T12] br2: port 2(vx10) entered disabled state
[ 1108.843106][ T12] w1: left allmulticast mode
[ 1108.843457][ T12] w1: left promiscuous mode
[ 1108.843961][ T12] br2: port 1(w1) entered disabled state
[ 1108.937270][ T12] ==================================================================
[ 1108.937615][ T12] BUG: KASAN: slab-use-after-free in kobject_put+0xbb/0xd0
[ 1108.937920][ T12] Read of size 1 at addr ffff88800908c6ac by task kworker/u16:0/12
[ 1108.938197][ T12]
[ 1108.938310][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u16:0 Not tainted 6.18.0-rc4-virtme #1 PREEMPT(full)
[ 1108.938316][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1108.938319][ T12] Workqueue: netns cleanup_net
[ 1108.938330][ T12] Call Trace:
[ 1108.938333][ T12]
[ 1108.938336][ T12] dump_stack_lvl+0x82/0xc0
[ 1108.938344][ T12] print_address_description.constprop.0+0x2c/0x3a0
[ 1108.938351][ T12] ? kobject_put+0xbb/0xd0
[ 1108.938355][ T12] print_report+0xb4/0x270
[ 1108.938358][ T12] ? kobject_put+0xbb/0xd0
[ 1108.938362][ T12] ? kasan_addr_to_slab+0x21/0x70
[ 1108.938365][ T12] ? kobject_put+0xbb/0xd0
[ 1108.938368][ T12] kasan_report+0xca/0x100
[ 1108.938372][ T12] ? kobject_put+0xbb/0xd0
[ 1108.938377][ T12] kobject_put+0xbb/0xd0
[ 1108.938381][ T12] netdev_run_todo+0x5f0/0xc60
[ 1108.938385][ T12] ? rtnl_is_locked+0x15/0x20
[ 1108.938391][ T12] ? dev_ingress_queue_create+0x190/0x190
[ 1108.938394][ T12] ? generic_xdp_install+0x410/0x410
[ 1108.938400][ T12] ops_undo_list+0x714/0x890
[ 1108.938405][ T12] ? netns_get+0x110/0x110
[ 1108.938407][ T12] ? cleanup_net+0x2d6/0x830
[ 1108.938413][ T12] cleanup_net+0x3b2/0x830
[ 1108.938416][ T12] ? net_passive_dec+0x190/0x190
[ 1108.938421][ T12] ? rcu_is_watching+0x12/0xb0
[ 1108.938429][ T12] process_one_work+0xe35/0x1650
[ 1108.938438][ T12] ? pwq_dec_nr_in_flight+0x550/0x550
[ 1108.938444][ T12] ? assign_work+0x168/0x240
[ 1108.938448][ T12] worker_thread+0x591/0xcf0
[ 1108.938453][ T12] ? rescuer_thread+0xd10/0xd10
[ 1108.938457][ T12] kthread+0x37b/0x5f0
[ 1108.938461][ T12] ? kthread_is_per_cpu+0xc0/0xc0
[ 1108.938464][ T12] ? ret_from_fork+0x1b/0x270
[ 1108.938468][ T12] ? __lock_release+0x5d/0x170
[ 1108.938478][ T12] ? rcu_is_watching+0x12/0xb0
[ 1108.938482][ T12] ? kthread_is_per_cpu+0xc0/0xc0
[ 1108.938488][ T12] ret_from_fork+0x1db/0x270
[ 1108.938490][ T12] ? kthread_is_per_cpu+0xc0/0xc0
[ 1108.938493][ T12] ret_from_fork_asm+0x11/0x20
[ 1108.938502][ T12]
[ 1108.938504][ T12]
[ 1108.945500][ T12] Allocated by task 441:
[ 1108.945630][ T12] kasan_save_stack+0x24/0x40
[ 1108.945812][ T12] kasan_save_track+0x14/0x30
[ 1108.945977][ T12] __kasan_kmalloc+0x7b/0x90
[ 1108.946159][ T12] __kvmalloc_node_noprof+0x2e5/0x8e0
[ 1108.946353][ T12] alloc_netdev_mqs+0x7d/0x1370
[ 1108.946539][ T12] sit_init_net+0x169/0x550
[ 1108.946717][ T12] ops_init+0x189/0x550
[ 1108.946866][ T12] setup_net+0xf1/0x380
[ 1108.947000][ T12] copy_net_ns+0x21a/0x380
[ 1108.947180][ T12] create_new_namespaces+0x35f/0x900
[ 1108.947367][ T12] unshare_nsproxy_namespaces+0x89/0x120
[ 1108.947548][ T12] ksys_unshare+0x2a3/0x660
[ 1108.947728][ T12] __x64_sys_unshare+0x31/0x40
[ 1108.947898][ T12] do_syscall_64+0xc1/0xfd0
[ 1108.948074][ T12] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 1108.948315][ T12]
[ 1108.948407][ T12] Freed by task 12:
[ 1108.948535][ T12] kasan_save_stack+0x24/0x40
[ 1108.948719][ T12] kasan_save_track+0x14/0x30
[ 1108.948889][ T12] __kasan_save_free_info+0x3b/0x60
[ 1108.949058][ T12] __kasan_slab_free+0x3f/0x60
[ 1108.949240][ T12] kfree+0x21d/0x540
[ 1108.949396][ T12] device_release+0x9c/0x210
[ 1108.949586][ T12] kobject_cleanup+0xfe/0x360
[ 1108.949768][ T12] netdev_run_todo+0x81f/0xc60
[ 1108.949942][ T12] ops_undo_list+0x714/0x890
[ 1108.950106][ T12] cleanup_net+0x3b2/0x830
[ 1108.950299][ T12] process_one_work+0xe35/0x1650
[ 1108.950489][ T12] worker_thread+0x591/0xcf0
[ 1108.950667][ T12] kthread+0x37b/0x5f0
[ 1108.950809][ T12] ret_from_fork+0x1db/0x270
[ 1108.950982][ T12] ret_from_fork_asm+0x11/0x20
[ 1108.951171][ T12]
[ 1108.951261][ T12] The buggy address belongs to the object at ffff88800908c000
[ 1108.951261][ T12] which belongs to the cache kmalloc-4k of size 4096
[ 1108.951726][ T12] The buggy address is located 1708 bytes inside of
[ 1108.951726][ T12] freed 4096-byte region [ffff88800908c000, ffff88800908d000)
[ 1108.952163][ T12]
[ 1108.952253][ T12] The buggy address belongs to the physical page:
[ 1108.952505][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9088
[ 1108.952820][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1108.953087][ T12] flags: 0x80000000000040(head|node=0|zone=1)
[ 1108.953335][ T12] page_type: f5(slab)
[ 1108.953493][ T12] raw: 0080000000000040 ffff888001043700 ffffea0000403410 ffffea0000134210
[ 1108.953809][ T12] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1108.954105][ T12] head: 0080000000000040 ffff888001043700 ffffea0000403410 ffffea0000134210
[ 1108.954439][ T12] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 1108.954756][ T12] head: 0080000000000003 ffffea0000242201 00000000ffffffff 00000000ffffffff
[ 1108.955059][ T12] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 1108.955385][ T12] page dumped because: kasan: bad access detected
[ 1108.955610][ T12]
[ 1108.955702][ T12] Memory state around the buggy address:
[ 1108.955873][ T12] ffff88800908c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1108.956127][ T12] ffff88800908c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1108.956397][ T12] >ffff88800908c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1108.956660][ T12] ^
[ 1108.956839][ T12] ffff88800908c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1108.957082][ T12] ffff88800908c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1108.957341][ T12] ==================================================================
[ 1108.957738][ T12] Disabling lock debugging due to kernel taint
[ 1108.957990][ T12] ------------[ cut here ]------------
[ 1108.958198][ T12] refcount_t: underflow; use-after-free.
[ 1108.958445][ T12] WARNING: CPU: 2 PID: 12 at lib/refcount.c:28 refcount_warn_saturate+0x16f/0x1b0
[ 1108.958797][ T12] Modules linked in: act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth
[ 1108.959251][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u16:0 Tainted: G B 6.18.0-rc4-virtme #1 PREEMPT(full)
[ 1108.959728][ T12] Tainted: [B]=BAD_PAGE
[ 1108.959900][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1108.960150][ T12] Workqueue: netns cleanup_net
[ 1108.960383][ T12] RIP: 0010:refcount_warn_saturate+0x16f/0x1b0
[ 1108.960640][ T12] Code: 7d 93 02 80 fb 01 0f 87 bb 99 d9 fe 83 e3 01 0f 85 51 ff ff ff c6 05 a8 7d 93 02 01 90 48 c7 c7 60 8d 25 84 e8 32 bf 18 ff 90 <0f> 0b 90 90 e9 33 ff ff ff 48 89 df e8 b0 63 a1 ff e9 ba fe ff ff
[ 1108.961315][ T12] RSP: 0018:ffffc900000c7a08 EFLAGS: 00010282
[ 1108.961567][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1108.961841][ T12] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000001
[ 1108.962147][ T12] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff097e134
[ 1108.962444][ T12] R10: 0000000000000003 R11: ffffc900000c7580 R12: 0000000000000001
[ 1108.962738][ T12] R13: dffffc0000000000 R14: dead000000000122 R15: dead000000000100
[ 1108.963034][ T12] FS: 0000000000000000(0000) GS:ffff8880aa6f2000(0000) knlGS:0000000000000000
[ 1108.963385][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1108.963640][ T12] CR2: 00005582df9364a8 CR3: 0000000034935003 CR4: 0000000000772ef0
[ 1108.964000][ T12] PKRU: 55555554
[ 1108.964219][ T12] Call Trace:
[ 1108.964449][ T12]
[ 1108.964627][ T12] netdev_run_todo+0x5f0/0xc60
[ 1108.964903][ T12] ? rtnl_is_locked+0x15/0x20
[ 1108.965176][ T12] ? dev_ingress_queue_create+0x190/0x190
[ 1108.965447][ T12] ? generic_xdp_install+0x410/0x410
[ 1108.965706][ T12] ops_undo_list+0x714/0x890
[ 1108.965984][ T12] ? netns_get+0x110/0x110
[ 1108.966295][ T12] ? cleanup_net+0x2d6/0x830
[ 1108.966572][ T12] cleanup_net+0x3b2/0x830
[ 1108.966826][ T12] ? net_passive_dec+0x190/0x190
[ 1108.967093][ T12] ? rcu_is_watching+0x12/0xb0
[ 1108.967388][ T12] process_one_work+0xe35/0x1650
[ 1108.967654][ T12] ? pwq_dec_nr_in_flight+0x550/0x550
[ 1108.967938][ T12] ? assign_work+0x168/0x240
[ 1108.968194][ T12] worker_thread+0x591/0xcf0
[ 1108.968460][ T12] ? rescuer_thread+0xd10/0xd10
[ 1108.968727][ T12] kthread+0x37b/0x5f0
[ 1108.968948][ T12] ? kthread_is_per_cpu+0xc0/0xc0
[ 1108.969223][ T12] ? ret_from_fork+0x1b/0x270
[ 1108.969518][ T12] ? __lock_release+0x5d/0x170
[ 1108.969775][ T12] ? rcu_is_watching+0x12/0xb0
[ 1108.970036][ T12] ? kthread_is_per_cpu+0xc0/0xc0
[ 1108.970304][ T12] ret_from_fork+0x1db/0x270
[ 1108.970571][ T12] ? kthread_is_per_cpu+0xc0/0xc0
[ 1108.970821][ T12] ret_from_fork_asm+0x11/0x20
[ 1108.971082][ T12]
[ 1108.971318][ T12] irq event stamp: 138599
[ 1108.971556][ T12] hardirqs last enabled at (138599): [] finish_task_switch.isra.0+0x245/0x960
[ 1108.971989][ T12] hardirqs last disabled at (138598): [] __schedule+0x94a/0x1b10
[ 1108.972402][ T12] softirqs last enabled at (138072): [] handle_softirqs+0x352/0x610
[ 1108.972827][ T12] softirqs last disabled at (137189): [] irq_exit_rcu+0xab/0x100
[ 1108.973243][ T12] ---[ end trace 0000000000000000 ]---
[ 1109.136236][ T12] vx20: left allmulticast mode
[ 1109.136521][ T12] vx20: left promiscuous mode
[ 1109.136873][ T12] br2: port 3(vx20) entered disabled state
[ 1109.142026][ T12] vx10: left allmulticast mode
[ 1109.142246][ T12] vx10: left promiscuous mode
[ 1109.142583][ T12] br2: port 2(vx10) entered disabled state
[ 1109.145191][ T12] w1: left allmulticast mode
[ 1109.145418][ T12] w1: left promiscuous mode
[ 1109.145771][ T12] br2: port 1(w1) entered disabled state
[ 1110.853652][T12092] br1: port 4(veth2) entered disabled state
[ 1110.928374][T12093] veth2: left allmulticast mode
[ 1110.928599][T12093] veth2: left promiscuous mode
[ 1110.928919][T12093] br1: port 4(veth2) entered disabled state
[ 1111.125283][T12096] br1: port 3(veth1) entered disabled state
[ 1111.203274][T12097] veth1: left allmulticast mode
[ 1111.203589][T12097] veth1: left promiscuous mode
[ 1111.203964][T12097] br1: port 3(veth1) entered disabled state
[ 1111.345513][T12099] vx20: left allmulticast mode
[ 1111.345778][T12099] vx20: left promiscuous mode
[ 1111.346142][T12099] br1: port 2(vx20) entered disabled state
[ 1111.658463][T12103] vx10: left allmulticast mode
[ 1111.658709][T12103] vx10: left promiscuous mode
[ 1111.659307][T12103] br1: port 1(vx10) entered disabled state