[ 7.356104] veth1: entered promiscuous mode [ 7.379237] veth1: left promiscuous mode [ 7.389915] ------------[ cut here ]------------ [ 7.390073] refcount_t: underflow; use-after-free. [ 7.390167] WARNING: CPU: 2 PID: 293 at lib/refcount.c:28 refcount_warn_saturate+0xbc/0x110 [ 7.390274] Modules linked in: macvlan veth [ 7.390348] CPU: 2 UID: 0 PID: 293 Comm: ip Not tainted 6.18.0-rc4-virtme #1 PREEMPT(voluntary) [ 7.390462] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 7.390551] RIP: 0010:refcount_warn_saturate+0xbc/0x110 [ 7.390633] Code: ab e8 18 df ba ff 90 0f 0b 90 90 c3 80 3d f9 da eb 00 00 75 89 c6 05 f0 da eb 00 01 90 48 c7 c7 28 e0 f1 ab e8 f5 de ba ff 90 <0f> 0b 90 90 c3 80 3d d4 da eb 00 00 0f 85 62 ff ff ff c6 05 c7 da [ 7.390831] RSP: 0018:ffffb903002a3730 EFLAGS: 00010282 [ 7.390917] RAX: 0000000000000000 RBX: ffffb903002a3740 RCX: 00000000ffffdfff [ 7.391018] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000001 [ 7.391120] RBP: ffffb903002a3248 R08: ffffffffac356a28 R09: 00000000ffffdfff [ 7.391221] R10: ffffffffac276a40 R11: ffffffffac326a40 R12: dead000000000122 [ 7.391324] R13: 00000000fffb887f R14: 0000000000000001 R15: ffff8e76c2f53000 [ 7.391431] FS: 00007ff2e42f0800(0000) GS:ffff8e77522d9000(0000) knlGS:0000000000000000 [ 7.391534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 7.391625] CR2: 00005618f6b30198 CR3: 0000000003669004 CR4: 0000000000772ef0 [ 7.391730] PKRU: 55555554 [ 7.391784] Call Trace: [ 7.391839] [ 7.391897] netdev_run_todo+0x21a/0x550 [ 7.391972] rtnl_dellink+0x15b/0x350 [ 7.392042] ? virtio_fs_enqueue_req+0x352/0x570 [ 7.392122] ? netdev_run_todo+0x63/0x550 [ 7.392188] ? rtnl_bridge_getlink+0x1a0/0x1a0 [ 7.392265] rtnetlink_rcv_msg+0x358/0x400 [ 7.392330] ? get_page_from_freelist+0x15b4/0x1770 [ 7.392409] ? rtnl_calcit.isra.0+0x110/0x110 [ 7.392487] netlink_rcv_skb+0x57/0x100 [ 7.392554] netlink_unicast+0x252/0x380 [ 7.392621] ? __alloc_skb+0xdb/0x190 [ 7.392691] netlink_sendmsg+0x1be/0x3e0 [ 7.392760] ____sys_sendmsg+0x132/0x260 [ 7.392827] ? copy_msghdr_from_user+0x6c/0xa0 [ 7.392919] ___sys_sendmsg+0x87/0xd0 [ 7.392986] ? do_wp_page+0x369/0xe90 [ 7.393054] ? ___pte_offset_map+0x1b/0xd0 [ 7.393121] ? nfulnl_rcv_nl_event+0x36/0xa0 [ 7.393200] ? fsnotify_grab_connector+0x48/0x80 [ 7.393279] ? fsnotify_destroy_marks+0x29/0x150 [ 7.393356] __sys_sendmsg+0x71/0xd0 [ 7.393422] do_syscall_64+0xa4/0xfd0 [ 7.393490] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 7.393567] RIP: 0033:0x7ff2e44be1d7 [ 7.393637] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 7.393836] RSP: 002b:00007ffd1706d598 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 7.393942] RAX: ffffffffffffffda RBX: 00007ffd1706dcc0 RCX: 00007ff2e44be1d7 [ 7.394031] RDX: 0000000000000000 RSI: 00007ffd1706d600 RDI: 0000000000000005 [ 7.394134] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000078 [ 7.394234] R10: 00007ff2e43baf60 R11: 0000000000000246 R12: 0000000000000001 [ 7.394322] R13: 00000000690de366 R14: 0000000000499600 R15: 0000000000000000 [ 7.394407] [ 7.394452] ---[ end trace 0000000000000000 ]--- [ 7.395091] ip (293) used greatest stack depth: 11744 bytes left [ 7.611179] veth1: entered promiscuous mode [ 31.352354] veth1: entered allmulticast mode [ 36.499540] veth1: left allmulticast mode [ 43.949673] veth1: left promiscuous mode [ 44.360403] br0: port 1(veth1) entered blocking state [ 44.360460] br0: port 1(veth1) entered disabled state [ 44.360513] veth1: entered allmulticast mode [ 44.360589] veth1: entered promiscuous mode [ 44.371722] br0: port 1(veth1) entered blocking state [ 44.371855] br0: port 1(veth1) entered forwarding state [ 44.430552] br0: port 1(veth1) entered disabled state [ 44.430652] br0: port 1(veth1) entered blocking state [ 44.430694] br0: port 1(veth1) entered forwarding state [ 44.502256] br0: entered promiscuous mode [ 68.227480] br0: entered allmulticast mode [ 73.371435] br0: left allmulticast mode [ 75.908190] br0: left promiscuous mode [ 75.957964] br0: port 1(veth1) entered disabled state [ 76.029688] veth1: left allmulticast mode [ 76.029795] veth1: left promiscuous mode [ 76.029879] br0: port 1(veth1) entered disabled state [ 76.275885] br0: port 1(veth1) entered blocking state [ 76.275987] br0: port 1(veth1) entered disabled state [ 76.276059] veth1: entered allmulticast mode [ 76.276159] veth1: entered promiscuous mode [ 76.276221] br0: port 1(veth1) entered blocking state [ 76.276276] br0: port 1(veth1) entered forwarding state [ 76.338934] br0: port 1(veth1) entered disabled state [ 76.339054] br0: port 1(veth1) entered blocking state [ 76.339107] br0: port 1(veth1) entered forwarding state [ 76.401823] br0: entered promiscuous mode [ 100.145868] br0: entered allmulticast mode [ 105.298659] br0: left allmulticast mode [ 107.910605] br0: left promiscuous mode [ 107.956293] br0: port 1(veth1) entered disabled state [ 108.032691] veth1: left allmulticast mode [ 108.032745] veth1: left promiscuous mode [ 108.032783] br0: port 1(veth1) entered disabled state [ 108.256702] veth1: entered promiscuous mode [ 108.283272] veth1: left promiscuous mode [ 108.408022] 8021q: 802.1Q VLAN Support v1.8 [ 108.655019] veth1: entered promiscuous mode [ 125.040677] veth1.100: entered promiscuous mode [ 130.192551] veth1.100: left promiscuous mode [ 132.402283] veth1.100: entered allmulticast mode [ 132.402361] veth1: entered allmulticast mode [ 137.553084] veth1.100: left allmulticast mode [ 137.553153] veth1: left allmulticast mode [ 145.051994] veth1: left promiscuous mode [ 145.342307] veth1: entered promiscuous mode [ 145.366496] veth1: left promiscuous mode [ 145.690265] br0: port 1(veth1) entered blocking state [ 145.690391] br0: port 1(veth1) entered disabled state [ 145.690466] veth1: entered allmulticast mode [ 145.690593] veth1: entered promiscuous mode [ 145.690686] br0: port 1(veth1) entered blocking state [ 145.690754] br0: port 1(veth1) entered forwarding state [ 162.136884] veth1.100: entered promiscuous mode [ 167.304561] veth1.100: left promiscuous mode [ 169.525605] veth1.100: entered allmulticast mode [ 174.678245] veth1.100: left allmulticast mode [ 182.084096] veth1: left allmulticast mode [ 182.084183] veth1: left promiscuous mode [ 182.084245] br0: port 1(veth1) entered disabled state [ 182.413126] veth1: entered promiscuous mode [ 182.439190] veth1: left promiscuous mode [ 182.765606] br0: port 1(veth1) entered blocking state [ 182.765741] br0: port 1(veth1) entered disabled state [ 182.765827] veth1: entered allmulticast mode [ 182.765976] veth1: entered promiscuous mode [ 182.766072] br0: port 1(veth1) entered blocking state [ 182.766153] br0: port 1(veth1) entered forwarding state [ 199.207364] veth1.100: entered promiscuous mode [ 204.362980] veth1.100: left promiscuous mode [ 206.585103] veth1.100: entered allmulticast mode [ 211.736065] veth1.100: left allmulticast mode [ 219.285008] veth1: left allmulticast mode [ 219.285085] veth1: left promiscuous mode [ 219.285142] br0: port 1(veth1) entered disabled state [ 219.702245] br0: port 1(veth1) entered blocking state [ 219.702309] br0: port 1(veth1) entered disabled state [ 219.702366] veth1: entered allmulticast mode [ 219.702467] veth1: entered promiscuous mode [ 219.712647] br0: port 1(veth1) entered blocking state [ 219.712709] br0: port 1(veth1) entered forwarding state [ 219.772163] br0: port 1(veth1) entered disabled state [ 219.772293] br0: port 1(veth1) entered blocking state [ 219.772357] br0: port 1(veth1) entered forwarding state [ 219.866865] br0: entered promiscuous mode [ 236.264313] br0.100: entered promiscuous mode [ 241.432392] br0.100: left promiscuous mode [ 243.651472] br0.100: entered allmulticast mode [ 243.651582] br0: entered allmulticast mode [ 248.798946] br0.100: left allmulticast mode [ 248.799022] br0: left allmulticast mode [ 251.405585] br0: left promiscuous mode [ 251.454169] br0: port 1(veth1) entered disabled state [ 251.531843] veth1: left allmulticast mode [ 251.531931] veth1: left promiscuous mode [ 251.531998] br0: port 1(veth1) entered disabled state [ 251.847165] br0: port 1(veth1) entered blocking state [ 251.847236] br0: port 1(veth1) entered disabled state [ 251.847309] veth1: entered allmulticast mode [ 251.847405] veth1: entered promiscuous mode [ 251.847457] br0: port 1(veth1) entered blocking state [ 251.847513] br0: port 1(veth1) entered forwarding state [ 251.910913] br0: port 1(veth1) entered disabled state [ 251.911027] br0: port 1(veth1) entered blocking state [ 251.911088] br0: port 1(veth1) entered forwarding state [ 252.007728] br0: entered promiscuous mode [ 268.417017] br0.100: entered promiscuous mode [ 273.579920] br0.100: left promiscuous mode [ 275.812022] br0.100: entered allmulticast mode [ 275.812127] br0: entered allmulticast mode [ 280.974424] br0.100: left allmulticast mode [ 280.974493] br0: left allmulticast mode [ 283.624691] br0: left promiscuous mode [ 283.670534] br0: port 1(veth1) entered disabled state [ 283.747225] veth1: left allmulticast mode [ 283.747339] veth1: left promiscuous mode [ 283.747420] br0: port 1(veth1) entered disabled state