[ 2.406091] 8021q: 802.1Q VLAN Support v1.8 [ 2.831381] GACT probability NOT on [ 2.832831] tc (365) used greatest stack depth: 11840 bytes left [ 3.009370] br10: port 1(veth1.10) entered blocking state [ 3.009428] br10: port 1(veth1.10) entered disabled state [ 3.009517] veth1.10: entered allmulticast mode [ 3.009558] veth1: entered allmulticast mode [ 3.009698] veth1.10: entered promiscuous mode [ 3.009741] veth1: entered promiscuous mode [ 3.069750] br11: port 1(veth1.11) entered blocking state [ 3.069887] br11: port 1(veth1.11) entered disabled state [ 3.070005] veth1.11: entered allmulticast mode [ 3.070144] veth1.11: entered promiscuous mode [ 3.173998] br10: port 2(veth2.10) entered blocking state [ 3.174081] br10: port 2(veth2.10) entered disabled state [ 3.174153] veth2.10: entered allmulticast mode [ 3.174211] veth2: entered allmulticast mode [ 3.174315] veth2.10: entered promiscuous mode [ 3.174377] veth2: entered promiscuous mode [ 3.231784] br11: port 2(veth2.11) entered blocking state [ 3.231867] br11: port 2(veth2.11) entered disabled state [ 3.231974] veth2.11: entered allmulticast mode [ 3.232095] veth2.11: entered promiscuous mode [ 3.283210] br10: port 2(veth2.10) entered blocking state [ 3.283299] br10: port 2(veth2.10) entered forwarding state [ 3.283364] br10: port 1(veth1.10) entered blocking state [ 3.283419] br10: port 1(veth1.10) entered forwarding state [ 3.297809] br11: port 2(veth2.11) entered blocking state [ 3.297893] br11: port 2(veth2.11) entered forwarding state [ 3.297953] br11: port 1(veth1.11) entered blocking state [ 3.298009] br11: port 1(veth1.11) entered forwarding state [ 75.455183] br11: port 2(veth2.11) entered disabled state [ 75.455314] br11: port 1(veth1.11) entered disabled state [ 75.469974] br10: port 2(veth2.10) entered disabled state [ 75.470132] br10: port 1(veth1.10) entered disabled state [ 75.499259] veth2.11: left allmulticast mode [ 75.499396] veth2.11: left promiscuous mode [ 75.499533] br11: port 2(veth2.11) entered disabled state [ 75.519322] ------------[ cut here ]------------ [ 75.519410] refcount_t: underflow; use-after-free. [ 75.519477] WARNING: CPU: 0 PID: 834 at lib/refcount.c:28 refcount_warn_saturate+0xbc/0x110 [ 75.519556] Modules linked in: sch_tbf sch_ets bridge stp llc act_gact cls_flower sch_ingress 8021q vrf veth [ 75.519671] CPU: 0 UID: 0 PID: 834 Comm: ip Not tainted 6.18.0-rc4-virtme #1 PREEMPT(voluntary) [ 75.519739] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 75.519788] RIP: 0010:refcount_warn_saturate+0xbc/0x110 [ 75.519837] Code: 93 e8 18 df ba ff 90 0f 0b 90 90 c3 80 3d f9 da eb 00 00 75 89 c6 05 f0 da eb 00 01 90 48 c7 c7 28 e0 11 93 e8 f5 de ba ff 90 <0f> 0b 90 90 c3 80 3d d4 da eb 00 00 0f 85 62 ff ff ff c6 05 c7 da [ 75.519955] RSP: 0018:ffffa79ac0c4b730 EFLAGS: 00010282 [ 75.520002] RAX: 0000000000000000 RBX: ffffa79ac0c4b740 RCX: 00000000ffffdfff [ 75.520059] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000001 [ 75.520132] RBP: ffffa79ac0c4b248 R08: ffffffff93556a28 R09: 00000000ffffdfff [ 75.520189] R10: ffffffff93476a40 R11: ffffffff93526a40 R12: dead000000000122 [ 75.520247] R13: 00000000fffc9293 R14: 0000000000000001 R15: ffff91bb498c4000 [ 75.520306] FS: 00007f3b5827f800(0000) GS:ffff91bbeafd9000(0000) knlGS:0000000000000000 [ 75.520365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.520413] CR2: 00005588abc48450 CR3: 0000000003012006 CR4: 0000000000772ef0 [ 75.520465] PKRU: 55555554 [ 75.520488] Call Trace: [ 75.520509] [ 75.520532] netdev_run_todo+0x21a/0x550 [ 75.520574] rtnl_dellink+0x15b/0x350 [ 75.520618] ? virtio_fs_enqueue_req+0x352/0x570 [ 75.520676] ? netdev_run_todo+0x63/0x550 [ 75.520707] ? rtnl_bridge_getlink+0x1a0/0x1a0 [ 75.520749] rtnetlink_rcv_msg+0x358/0x400 [ 75.520776] ? get_page_from_freelist+0x15b4/0x1770 [ 75.520830] ? rtnl_calcit.isra.0+0x110/0x110 [ 75.520870] netlink_rcv_skb+0x57/0x100 [ 75.520907] netlink_unicast+0x252/0x380 [ 75.520937] ? __alloc_skb+0xdb/0x190 [ 75.520969] netlink_sendmsg+0x1be/0x3e0 [ 75.521005] ____sys_sendmsg+0x132/0x260 [ 75.521038] ? copy_msghdr_from_user+0x6c/0xa0 [ 75.521079] ___sys_sendmsg+0x87/0xd0 [ 75.521110] ? do_wp_page+0x369/0xe90 [ 75.521153] ? ___pte_offset_map+0x1b/0xd0 [ 75.521185] ? nfulnl_rcv_nl_event+0x36/0xa0 [ 75.521230] ? fsnotify_grab_connector+0x48/0x80 [ 75.521280] ? fsnotify_destroy_marks+0x29/0x150 [ 75.521320] __sys_sendmsg+0x71/0xd0 [ 75.521353] do_syscall_64+0xa4/0xfd0 [ 75.521385] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 75.521431] RIP: 0033:0x7f3b5844d1d7 [ 75.521469] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 75.521595] RSP: 002b:00007ffe068cf238 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.521667] RAX: ffffffffffffffda RBX: 00007ffe068cf960 RCX: 00007f3b5844d1d7 [ 75.521719] RDX: 0000000000000000 RSI: 00007ffe068cf2a0 RDI: 0000000000000005 [ 75.521781] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078 [ 75.521847] R10: 00007f3b58349f60 R11: 0000000000000246 R12: 0000000000000002 [ 75.521898] R13: 00000000690debe9 R14: 0000000000499600 R15: 0000000000000000 [ 75.521955] [ 75.521976] ---[ end trace 0000000000000000 ]--- [ 75.522564] ip (834) used greatest stack depth: 11744 bytes left [ 75.547915] veth2.10: left allmulticast mode [ 75.547990] veth2: left allmulticast mode [ 75.548019] veth2.10: left promiscuous mode [ 75.548049] veth2: left promiscuous mode [ 75.548089] br10: port 2(veth2.10) entered disabled state [ 75.626224] veth1.11: left allmulticast mode [ 75.626303] veth1.11: left promiscuous mode [ 75.626351] br11: port 1(veth1.11) entered disabled state [ 75.675494] veth1.10: left allmulticast mode [ 75.675578] veth1: left allmulticast mode [ 75.675617] veth1.10: left promiscuous mode [ 75.675658] veth1: left promiscuous mode [ 75.675715] br10: port 1(veth1.10) entered disabled state