[    3.074784] 8021q: 802.1Q VLAN Support v1.8
[    3.133603] gre: GRE over IPv4 demultiplexer driver
[    3.139761] ip6_gre: GRE over IPv6 tunneling driver
[    8.810300] GACT probability NOT on
[    8.811858] tc (430) used greatest stack depth: 11840 bytes left
[   11.844102] ------------[ cut here ]------------
[   11.844267] refcount_t: underflow; use-after-free.
[   11.844339] WARNING: CPU: 0 PID: 646 at lib/refcount.c:28 refcount_warn_saturate+0xbc/0x110
[   11.844442] Modules linked in: act_gact cls_flower sch_ingress ip6_gre ip6_tunnel tunnel6 gre 8021q dummy vrf veth
[   11.844582] CPU: 0 UID: 0 PID: 646 Comm: ip Not tainted 6.18.0-rc4-virtme #1 PREEMPT(voluntary) 
[   11.844679] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   11.844756] RIP: 0010:refcount_warn_saturate+0xbc/0x110
[   11.844821] Code: aa e8 18 df ba ff 90 0f 0b 90 90 c3 80 3d f9 da eb 00 00 75 89 c6 05 f0 da eb 00 01 90 48 c7 c7 28 e0 91 aa e8 f5 de ba ff 90 <0f> 0b 90 90 c3 80 3d d4 da eb 00 00 0f 85 62 ff ff ff c6 05 c7 da
[   11.845020] RSP: 0018:ffffb1b400d0f730 EFLAGS: 00010282
[   11.845090] RAX: 0000000000000000 RBX: ffffb1b400d0f740 RCX: 00000000ffffdfff
[   11.845185] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000001
[   11.845272] RBP: ffff9ea0884b2000 R08: ffffffffaad56a28 R09: 00000000ffffdfff
[   11.845357] R10: ffffffffaac76a40 R11: ffffffffaad26a40 R12: 0000000000000001
[   11.845445] R13: 00000000fffb99d6 R14: 0000000000000001 R15: ffff9ea0884b2000
[   11.845539] FS:  00007fd85cee7800(0000) GS:ffff9ea1137d9000(0000) knlGS:0000000000000000
[   11.845637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   11.845711] CR2: 00000000004e7430 CR3: 000000000994b004 CR4: 0000000000772ef0
[   11.845798] PKRU: 55555554
[   11.845823] Call Trace:
[   11.845853]  <TASK>
[   11.845880]  netdev_run_todo+0x21a/0x550
[   11.845934]  rtnl_dellink+0x15b/0x350
[   11.845987]  ? virtio_fs_enqueue_req+0x352/0x570
[   11.846062]  ? netdev_run_todo+0x63/0x550
[   11.846115]  ? rtnl_bridge_getlink+0x1a0/0x1a0
[   11.846171]  rtnetlink_rcv_msg+0x358/0x400
[   11.846223]  ? get_page_from_freelist+0x15b4/0x1770
[   11.846289]  ? rtnl_calcit.isra.0+0x110/0x110
[   11.846345]  netlink_rcv_skb+0x57/0x100
[   11.846401]  netlink_unicast+0x252/0x380
[   11.846453]  ? __alloc_skb+0xdb/0x190
[   11.846496]  netlink_sendmsg+0x1be/0x3e0
[   11.846538]  ____sys_sendmsg+0x132/0x260
[   11.846602]  ? copy_msghdr_from_user+0x6c/0xa0
[   11.846656]  ___sys_sendmsg+0x87/0xd0
[   11.846702]  ? do_wp_page+0x369/0xe90
[   11.846749]  ? nfulnl_rcv_nl_event+0x36/0xa0
[   11.846816]  ? fsnotify_grab_connector+0x48/0x80
[   11.846879]  ? fsnotify_destroy_marks+0x29/0x150
[   11.846935]  __sys_sendmsg+0x71/0xd0
[   11.846979]  do_syscall_64+0xa4/0xfd0
[   11.847028]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[   11.847089] RIP: 0033:0x7fd85d0b51d7
[   11.847141] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[   11.847341] RSP: 002b:00007ffd6dd94818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   11.847429] RAX: ffffffffffffffda RBX: 00007ffd6dd94f40 RCX: 00007fd85d0b51d7
[   11.847513] RDX: 0000000000000000 RSI: 00007ffd6dd94880 RDI: 0000000000000005
[   11.847600] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078
[   11.847686] R10: 00007fd85cfb1f60 R11: 0000000000000246 R12: 0000000000000002
[   11.847772] R13: 00000000690dee6f R14: 0000000000499600 R15: 0000000000000000
[   11.847866]  </TASK>
[   11.847902] ---[ end trace 0000000000000000 ]---
[   11.848583] ip (646) used greatest stack depth: 11744 bytes left