[ 27.153671][ T309] eth1: renamed from tmp
[ 71.123951][ T596] ==================================================================
[ 71.124491][ T596] BUG: KASAN: slab-use-after-free in kobject_put+0xbb/0xd0
[ 71.124954][ T596] Read of size 1 at addr ffff888007a016c4 by task ip/596
[ 71.125300][ T596]
[ 71.125469][ T596] CPU: 0 UID: 0 PID: 596 Comm: ip Not tainted 6.18.0-rc4-virtme #1 PREEMPT(full)
[ 71.125479][ T596] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 71.125487][ T596] Call Trace:
[ 71.125493][ T596]
[ 71.125496][ T596] dump_stack_lvl+0x82/0xc0
[ 71.125506][ T596] print_address_description.constprop.0+0x2c/0x3a0
[ 71.125524][ T596] ? kobject_put+0xbb/0xd0
[ 71.125530][ T596] print_report+0xb4/0x270
[ 71.125537][ T596] ? kobject_put+0xbb/0xd0
[ 71.125542][ T596] ? kasan_addr_to_slab+0x21/0x70
[ 71.125547][ T596] ? kobject_put+0xbb/0xd0
[ 71.125552][ T596] kasan_report+0xca/0x100
[ 71.125558][ T596] ? kobject_put+0xbb/0xd0
[ 71.125568][ T596] kobject_put+0xbb/0xd0
[ 71.125573][ T596] netdev_run_todo+0x5f0/0xc60
[ 71.125591][ T596] ? dev_ingress_queue_create+0x190/0x190
[ 71.125600][ T596] ? generic_xdp_install+0x410/0x410
[ 71.125606][ T596] ? unregister_netdevice_many+0x20/0x20
[ 71.125617][ T596] rtnl_dellink+0x350/0xa30
[ 71.125628][ T596] ? valid_bridge_getlink_req.constprop.0+0x640/0x640
[ 71.125665][ T596] ? find_held_lock+0x2b/0x80
[ 71.125685][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.125694][ T596] ? find_held_lock+0x2b/0x80
[ 71.125700][ T596] ? rtnetlink_rcv_msg+0x6e6/0xc00
[ 71.125705][ T596] ? __lock_release+0x5d/0x170
[ 71.125711][ T596] ? valid_bridge_getlink_req.constprop.0+0x640/0x640
[ 71.125717][ T596] rtnetlink_rcv_msg+0x709/0xc00
[ 71.125724][ T596] ? rtnl_port_fill+0x890/0x890
[ 71.125730][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.125742][ T596] netlink_rcv_skb+0x121/0x340
[ 71.125754][ T596] ? rtnl_port_fill+0x890/0x890
[ 71.125761][ T596] ? netlink_ack+0xdf0/0xdf0
[ 71.125773][ T596] ? netlink_deliver_tap+0x13e/0x340
[ 71.125780][ T596] ? netlink_deliver_tap+0xc3/0x340
[ 71.125786][ T596] netlink_unicast+0x4aa/0x780
[ 71.125794][ T596] ? netlink_attachskb+0x810/0x810
[ 71.125800][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.125809][ T596] netlink_sendmsg+0x714/0xbd0
[ 71.125817][ T596] ? netlink_unicast+0x780/0x780
[ 71.125823][ T596] ? __import_iovec+0x230/0x3b0
[ 71.125840][ T596] ? netlink_unicast+0x780/0x780
[ 71.125846][ T596] ____sys_sendmsg+0x3dd/0x890
[ 71.125857][ T596] ? get_timestamp.constprop.0+0x370/0x370
[ 71.125861][ T596] ? __copy_msghdr+0x3c0/0x3c0
[ 71.125873][ T596] ___sys_sendmsg+0xed/0x170
[ 71.125877][ T596] ? kasan_record_aux_stack+0x8c/0xa0
[ 71.125885][ T596] ? __call_rcu_common.constprop.0+0xa8/0x630
[ 71.125894][ T596] ? copy_msghdr_from_user+0x110/0x110
[ 71.125902][ T596] ? find_held_lock+0x2b/0x80
[ 71.125910][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.125919][ T596] ? find_held_lock+0x2b/0x80
[ 71.125925][ T596] ? __virt_addr_valid+0x22a/0x450
[ 71.125943][ T596] ? __lock_release+0x5d/0x170
[ 71.125953][ T596] __sys_sendmsg+0x10b/0x1a0
[ 71.125957][ T596] ? __call_rcu_common.constprop.0+0x318/0x630
[ 71.125962][ T596] ? __sys_sendmsg_sock+0x20/0x20
[ 71.125976][ T596] ? rcu_is_watching+0x12/0xb0
[ 71.125987][ T596] do_syscall_64+0xc1/0xfd0
[ 71.125998][ T596] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 71.126010][ T596] RIP: 0033:0x7fbe465e01d7
[ 71.126021][ T596] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 71.126026][ T596] RSP: 002b:00007fffb9911b28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 71.126037][ T596] RAX: ffffffffffffffda RBX: 00007fffb9912260 RCX: 00007fbe465e01d7
[ 71.126041][ T596] RDX: 0000000000000000 RSI: 00007fffb9911b90 RDI: 0000000000000005
[ 71.126044][ T596] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078
[ 71.126046][ T596] R10: 00007fbe464dc510 R11: 0000000000000246 R12: 0000000000000002
[ 71.126049][ T596] R13: 00000000690de50d R14: 0000000000499600 R15: 0000000000000000
[ 71.126062][ T596]
[ 71.126064][ T596]
[ 71.146706][ T596] Allocated by task 307:
[ 71.146919][ T596] kasan_save_stack+0x24/0x40
[ 71.147212][ T596] kasan_save_track+0x14/0x30
[ 71.147485][ T596] __kasan_kmalloc+0x7b/0x90
[ 71.147762][ T596] __kvmalloc_node_noprof+0x2e5/0x8e0
[ 71.148035][ T596] alloc_netdev_mqs+0x7d/0x1370
[ 71.148226][ T596] rtnl_create_link+0xa9e/0xe20
[ 71.148409][ T596] rtnl_newlink_create+0x203/0x8f0
[ 71.148600][ T596] __rtnl_newlink+0x231/0xa30
[ 71.148779][ T596] rtnl_newlink+0x693/0xa60
[ 71.148964][ T596] rtnetlink_rcv_msg+0x709/0xc00
[ 71.149151][ T596] netlink_rcv_skb+0x121/0x340
[ 71.149393][ T596] netlink_unicast+0x4aa/0x780
[ 71.149662][ T596] netlink_sendmsg+0x714/0xbd0
[ 71.149905][ T596] ____sys_sendmsg+0x3dd/0x890
[ 71.150166][ T596] ___sys_sendmsg+0xed/0x170
[ 71.150433][ T596] __sys_sendmsg+0x10b/0x1a0
[ 71.150691][ T596] do_syscall_64+0xc1/0xfd0
[ 71.150949][ T596] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 71.151263][ T596]
[ 71.151394][ T596] Freed by task 596:
[ 71.151586][ T596] kasan_save_stack+0x24/0x40
[ 71.151840][ T596] kasan_save_track+0x14/0x30
[ 71.152098][ T596] __kasan_save_free_info+0x3b/0x60
[ 71.152358][ T596] __kasan_slab_free+0x3f/0x60
[ 71.152602][ T596] kfree+0x21d/0x540
[ 71.152800][ T596] device_release+0x9c/0x210
[ 71.153073][ T596] kobject_cleanup+0xfe/0x360
[ 71.153353][ T596] netdev_run_todo+0x81f/0xc60
[ 71.153630][ T596] rtnl_dellink+0x350/0xa30
[ 71.153885][ T596] rtnetlink_rcv_msg+0x709/0xc00
[ 71.154166][ T596] netlink_rcv_skb+0x121/0x340
[ 71.154415][ T596] netlink_unicast+0x4aa/0x780
[ 71.154693][ T596] netlink_sendmsg+0x714/0xbd0
[ 71.154970][ T596] ____sys_sendmsg+0x3dd/0x890
[ 71.155213][ T596] ___sys_sendmsg+0xed/0x170
[ 71.155469][ T596] __sys_sendmsg+0x10b/0x1a0
[ 71.155731][ T596] do_syscall_64+0xc1/0xfd0
[ 71.155992][ T596] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 71.156327][ T596]
[ 71.156456][ T596] The buggy address belongs to the object at ffff888007a01000
[ 71.156456][ T596] which belongs to the cache kmalloc-4k of size 4096
[ 71.157112][ T596] The buggy address is located 1732 bytes inside of
[ 71.157112][ T596] freed 4096-byte region [ffff888007a01000, ffff888007a02000)
[ 71.157727][ T596]
[ 71.157859][ T596] The buggy address belongs to the physical page:
[ 71.158207][ T596] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a00
[ 71.158677][ T596] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 71.159069][ T596] flags: 0x80000000000040(head|node=0|zone=1)
[ 71.159436][ T596] page_type: f5(slab)
[ 71.159626][ T596] raw: 0080000000000040 ffff888001043700 ffffea0000365810 ffffea000015ae10
[ 71.160141][ T596] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 71.160643][ T596] head: 0080000000000040 ffff888001043700 ffffea0000365810 ffffea000015ae10
[ 71.161134][ T596] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[ 71.161585][ T596] head: 0080000000000003 ffffea00001e8001 00000000ffffffff 00000000ffffffff
[ 71.162061][ T596] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 71.162519][ T596] page dumped because: kasan: bad access detected
[ 71.162874][ T596]
[ 71.163013][ T596] Memory state around the buggy address:
[ 71.163293][ T596] ffff888007a01580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 71.163675][ T596] ffff888007a01600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 71.164064][ T596] >ffff888007a01680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 71.164475][ T596] ^
[ 71.164833][ T596] ffff888007a01700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 71.165250][ T596] ffff888007a01780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 71.165661][ T596] ==================================================================
[ 71.167769][ T596] Disabling lock debugging due to kernel taint
[ 71.168145][ T596] ------------[ cut here ]------------
[ 71.168382][ T596] refcount_t: underflow; use-after-free.
[ 71.168651][ T596] WARNING: CPU: 2 PID: 596 at lib/refcount.c:28 refcount_warn_saturate+0x16f/0x1b0
[ 71.169091][ T596] Modules linked in:
[ 71.169334][ T596] CPU: 2 UID: 0 PID: 596 Comm: ip Tainted: G B 6.18.0-rc4-virtme #1 PREEMPT(full)
[ 71.169798][ T596] Tainted: [B]=BAD_PAGE
[ 71.169981][ T596] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 71.170298][ T596] RIP: 0010:refcount_warn_saturate+0x16f/0x1b0
[ 71.170557][ T596] Code: cc 38 03 80 fb 01 0f 87 29 33 d7 fe 83 e3 01 0f 85 51 ff ff ff c6 05 17 cc 38 03 01 90 48 c7 c7 40 ba c5 ae e8 62 d6 16 ff 90 <0f> 0b 90 90 e9 33 ff ff ff 48 89 df e8 c0 9d a0 ff e9 ba fe ff ff
[ 71.171429][ T596] RSP: 0018:ffffc900014c71f0 EFLAGS: 00010286
[ 71.171696][ T596] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 71.172035][ T596] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000001
[ 71.172395][ T596] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff5f80934
[ 71.172756][ T596] R10: 0000000000000003 R11: ffffc900014c6d80 R12: 0000000000000001
[ 71.173102][ T596] R13: dffffc0000000000 R14: dead000000000122 R15: dead000000000100
[ 71.173420][ T596] FS: 00007fbe46412800(0000) GS:ffff8880bc008000(0000) knlGS:0000000000000000
[ 71.173741][ T596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 71.174057][ T596] CR2: 00007ff2dd43f000 CR3: 000000000bf19006 CR4: 0000000000772ef0
[ 71.174428][ T596] PKRU: 55555554
[ 71.174582][ T596] Call Trace:
[ 71.174790][ T596]
[ 71.174981][ T596] netdev_run_todo+0x5f0/0xc60
[ 71.175291][ T596] ? dev_ingress_queue_create+0x190/0x190
[ 71.175533][ T596] ? generic_xdp_install+0x410/0x410
[ 71.175753][ T596] ? unregister_netdevice_many+0x20/0x20
[ 71.175994][ T596] rtnl_dellink+0x350/0xa30
[ 71.176229][ T596] ? valid_bridge_getlink_req.constprop.0+0x640/0x640
[ 71.176590][ T596] ? find_held_lock+0x2b/0x80
[ 71.176834][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.177090][ T596] ? find_held_lock+0x2b/0x80
[ 71.177337][ T596] ? rtnetlink_rcv_msg+0x6e6/0xc00
[ 71.177541][ T596] ? __lock_release+0x5d/0x170
[ 71.177758][ T596] ? valid_bridge_getlink_req.constprop.0+0x640/0x640
[ 71.178036][ T596] rtnetlink_rcv_msg+0x709/0xc00
[ 71.178288][ T596] ? rtnl_port_fill+0x890/0x890
[ 71.178604][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.178834][ T596] netlink_rcv_skb+0x121/0x340
[ 71.179075][ T596] ? rtnl_port_fill+0x890/0x890
[ 71.179290][ T596] ? netlink_ack+0xdf0/0xdf0
[ 71.179520][ T596] ? netlink_deliver_tap+0x13e/0x340
[ 71.179730][ T596] ? netlink_deliver_tap+0xc3/0x340
[ 71.180082][ T596] netlink_unicast+0x4aa/0x780
[ 71.180359][ T596] ? netlink_attachskb+0x810/0x810
[ 71.180695][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.181065][ T596] netlink_sendmsg+0x714/0xbd0
[ 71.181393][ T596] ? netlink_unicast+0x780/0x780
[ 71.181702][ T596] ? __import_iovec+0x230/0x3b0
[ 71.182037][ T596] ? netlink_unicast+0x780/0x780
[ 71.182382][ T596] ____sys_sendmsg+0x3dd/0x890
[ 71.182687][ T596] ? get_timestamp.constprop.0+0x370/0x370
[ 71.183079][ T596] ? __copy_msghdr+0x3c0/0x3c0
[ 71.183401][ T596] ___sys_sendmsg+0xed/0x170
[ 71.183739][ T596] ? kasan_record_aux_stack+0x8c/0xa0
[ 71.184047][ T596] ? __call_rcu_common.constprop.0+0xa8/0x630
[ 71.184415][ T596] ? copy_msghdr_from_user+0x110/0x110
[ 71.184725][ T596] ? find_held_lock+0x2b/0x80
[ 71.185022][ T596] ? __lock_acquire+0x449/0x7e0
[ 71.185389][ T596] ? find_held_lock+0x2b/0x80
[ 71.185687][ T596] ? __virt_addr_valid+0x22a/0x450
[ 71.186064][ T596] ? __lock_release+0x5d/0x170
[ 71.186386][ T596] __sys_sendmsg+0x10b/0x1a0
[ 71.186728][ T596] ? __call_rcu_common.constprop.0+0x318/0x630
[ 71.187158][ T596] ? __sys_sendmsg_sock+0x20/0x20
[ 71.187504][ T596] ? rcu_is_watching+0x12/0xb0
[ 71.187917][ T596] do_syscall_64+0xc1/0xfd0
[ 71.188323][ T596] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 71.188686][ T596] RIP: 0033:0x7fbe465e01d7
[ 71.189015][ T596] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 71.190056][ T596] RSP: 002b:00007fffb9911b28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 71.190431][ T596] RAX: ffffffffffffffda RBX: 00007fffb9912260 RCX: 00007fbe465e01d7
[ 71.190751][ T596] RDX: 0000000000000000 RSI: 00007fffb9911b90 RDI: 0000000000000005
[ 71.191050][ T596] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078
[ 71.191351][ T596] R10: 00007fbe464dc510 R11: 0000000000000246 R12: 0000000000000002
[ 71.191662][ T596] R13: 00000000690de50d R14: 0000000000499600 R15: 0000000000000000
[ 71.191964][ T596]
[ 71.192131][ T596] irq event stamp: 47975
[ 71.192293][ T596] hardirqs last enabled at (47975): [] kasan_quarantine_put+0xf9/0x210
[ 71.192669][ T596] hardirqs last disabled at (47974): [] kasan_quarantine_put+0xac/0x210
[ 71.192991][ T596] softirqs last enabled at (47698): [] handle_softirqs+0x352/0x610
[ 71.193334][ T596] softirqs last disabled at (47691): [] irq_exit_rcu+0xab/0x100
[ 71.193672][ T596] ---[ end trace 0000000000000000 ]---
[ 76.833292][ T656] eth1: renamed from tmp
[ 110.512160][ T1004] eth1: renamed from tmp
[ 143.974922][ T1351] eth1: renamed from tmp
[ 176.289356][ T1711] eth1: renamed from tmp
[ 208.984860][ T2072] eth1: renamed from tmp
[ 389.122212][ T3388] eth1: renamed from tmp
[ 404.766210][ T3587] eth2: renamed from tmp
[ 515.270325][ T4476] eth1: renamed from tmp
[ 682.649380][ T5931] eth1: renamed from tmp
[ 735.918393][ T6662] eth1: renamed from tmp
[ 755.743611][ T6882] eth1: renamed from tmp
[ 782.232460][ T7191] eth1: renamed from tmp
[ 797.975414][ T7319] eth1: renamed from tmp
[ 813.888401][ T7448] eth1: renamed from tmp
[ 829.826215][ T7577] eth1: renamed from tmp
[ 846.260081][ T7713] eth1: renamed from tmp
[ 862.565393][ T7848] eth1: renamed from tmp
[ 879.023270][ T7984] eth1: renamed from tmp
[ 895.558267][ T8119] eth1: renamed from tmp
[ 911.749320][ T8254] eth1: renamed from tmp
[ 928.330152][ T8389] eth1: renamed from tmp
[ 944.922575][ T8524] eth1: renamed from tmp
[ 961.176549][ T8659] eth1: renamed from tmp
[ 977.721382][ T8794] eth1: renamed from tmp
[ 994.548602][ T8929] eth1: renamed from tmp
[ 1011.391349][ T9064] eth1: renamed from tmp
[ 1027.703151][ T9199] eth1: renamed from tmp
[ 1044.347517][ T9334] eth1: renamed from tmp
[ 1060.707175][ T9469] eth1: renamed from tmp
[ 1077.153197][ T9604] eth1: renamed from tmp
[ 1093.580479][ T9739] eth1: renamed from tmp
[ 1109.354997][ T9874] eth1: renamed from tmp
[ 1125.433209][T10009] eth1: renamed from tmp
[ 1140.984816][T10144] eth1: renamed from tmp
[ 1160.033024][T10279] eth1: renamed from tmp
[ 1176.240590][T10414] eth1: renamed from tmp
[ 1192.044929][T10549] eth1: renamed from tmp
[ 1207.535585][T10685] eth1: renamed from tmp
[ 1222.994347][T10821] eth1: renamed from tmp
[ 1238.567286][T10956] eth1: renamed from tmp
[ 1253.719299][T11091] eth1: renamed from tmp
[ 1269.147067][T11226] eth1: renamed from tmp
[ 1284.211191][T11361] eth1: renamed from tmp