[ 11.339518][ T276] ip (276) used greatest stack depth: 24000 bytes left [ 11.510780][ T283] veth0: renamed from veth1 [ 12.439653][ T299] br0: port 1(swp1) entered blocking state [ 12.441121][ T299] br0: port 1(swp1) entered disabled state [ 12.441368][ T299] swp1: entered allmulticast mode [ 12.442577][ T299] swp1: entered promiscuous mode [ 12.444059][ T299] br0: port 1(swp1) entered blocking state [ 12.444349][ T299] br0: port 1(swp1) entered forwarding state [ 12.770292][ T301] br0: port 2(vx0) entered blocking state [ 12.770641][ T301] br0: port 2(vx0) entered disabled state [ 12.770930][ T301] vx0: entered allmulticast mode [ 12.772179][ T301] vx0: entered promiscuous mode [ 12.772672][ T301] br0: port 2(vx0) entered blocking state [ 12.772914][ T301] br0: port 2(vx0) entered forwarding state [ 13.882747][ T316] br0: port 1(swp1) entered blocking state [ 13.883133][ T316] br0: port 1(swp1) entered disabled state [ 13.883506][ T316] swp1: entered allmulticast mode [ 13.886599][ T316] swp1: entered promiscuous mode [ 13.889238][ T316] br0: port 1(swp1) entered blocking state [ 13.889591][ T316] br0: port 1(swp1) entered forwarding state [ 14.055353][ T318] br0: port 2(vx0) entered blocking state [ 14.055628][ T318] br0: port 2(vx0) entered disabled state [ 14.055821][ T318] vx0: entered allmulticast mode [ 14.057015][ T318] vx0: entered promiscuous mode [ 14.057896][ T318] br0: port 2(vx0) entered blocking state [ 14.058095][ T318] br0: port 2(vx0) entered forwarding state [ 19.778155][ T330] GACT probability NOT on [ 21.011745][ T39] br0: port 1(swp1) entered disabled state [ 21.972659][ T39] br0: port 1(swp1) entered blocking state [ 21.972930][ T39] br0: port 1(swp1) entered forwarding state [ 23.125482][ T277] br0: port 1(swp1) entered disabled state [ 24.060106][ T277] br0: port 1(swp1) entered blocking state [ 24.060335][ T277] br0: port 1(swp1) entered forwarding state [ 25.874316][ T37] br0: port 1(swp1) entered disabled state [ 26.890865][ T11] vx0: left allmulticast mode [ 26.891201][ T11] vx0: left promiscuous mode [ 26.891537][ T11] br0: port 2(vx0) entered disabled state [ 26.893662][ T11] swp1: left allmulticast mode [ 26.893851][ T11] swp1: left promiscuous mode [ 26.894154][ T11] br0: port 1(swp1) entered disabled state [ 27.235825][ T11] vx0: left allmulticast mode [ 27.236007][ T11] vx0: left promiscuous mode [ 27.236292][ T11] br0: port 2(vx0) entered disabled state [ 27.237166][ T11] swp1: left allmulticast mode [ 27.237327][ T11] swp1: left promiscuous mode [ 27.237582][ T11] br0: port 1(swp1) entered disabled state [ 27.384129][ T11] ================================================================== [ 27.384341][ T11] BUG: KASAN: slab-use-after-free in cleanup_net+0xa5d/0xb90 [ 27.384528][ T11] Read of size 8 at addr ffff88800cbc00f8 by task kworker/u16:0/11 [ 27.384707][ T11] [ 27.384771][ T11] CPU: 3 UID: 0 PID: 11 Comm: kworker/u16:0 Not tainted 6.12.0-virtme #1 [ 27.384954][ T11] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 27.385107][ T11] Workqueue: netns cleanup_net [ 27.385237][ T11] Call Trace: [ 27.385329][ T11] [ 27.385395][ T11] dump_stack_lvl+0x82/0xd0 [ 27.385525][ T11] print_address_description.constprop.0+0x2c/0x3b0 [ 27.385683][ T11] ? cleanup_net+0xa5d/0xb90 [ 27.385808][ T11] print_report+0xb4/0x270 [ 27.385930][ T11] ? kasan_addr_to_slab+0x25/0x80 [ 27.386054][ T11] kasan_report+0xbd/0xf0 [ 27.386149][ T11] ? cleanup_net+0xa5d/0xb90 [ 27.386274][ T11] cleanup_net+0xa5d/0xb90 [ 27.386397][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 27.386522][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 27.386643][ T11] ? trace_lock_acquire+0x148/0x1f0 [ 27.386768][ T11] ? lock_acquire+0x32/0xc0 [ 27.386891][ T11] ? process_one_work+0xe0b/0x16d0 [ 27.387015][ T11] process_one_work+0xe55/0x16d0 [ 27.387139][ T11] ? __pfx___lock_release+0x10/0x10 [ 27.387261][ T11] ? __pfx_process_one_work+0x10/0x10 [ 27.387386][ T11] ? assign_work+0x16c/0x240 [ 27.387512][ T11] worker_thread+0x58c/0xce0 [ 27.387638][ T11] ? __pfx_worker_thread+0x10/0x10 [ 27.387760][ T11] kthread+0x28a/0x350 [ 27.387853][ T11] ? __pfx_kthread+0x10/0x10 [ 27.387979][ T11] ret_from_fork+0x31/0x70 [ 27.388104][ T11] ? __pfx_kthread+0x10/0x10 [ 27.388228][ T11] ret_from_fork_asm+0x1a/0x30 [ 27.388355][ T11] [ 27.388448][ T11] [ 27.388511][ T11] Allocated by task 263: [ 27.388605][ T11] kasan_save_stack+0x24/0x50 [ 27.388730][ T11] kasan_save_track+0x14/0x30 [ 27.388850][ T11] __kasan_slab_alloc+0x59/0x70 [ 27.388971][ T11] kmem_cache_alloc_noprof+0x10b/0x350 [ 27.389096][ T11] copy_net_ns+0xc6/0x540 [ 27.389189][ T11] create_new_namespaces+0x35f/0x920 [ 27.389311][ T11] unshare_nsproxy_namespaces+0x8a/0x1b0 [ 27.389433][ T11] ksys_unshare+0x2c4/0x6e0 [ 27.389558][ T11] __x64_sys_unshare+0x31/0x40 [ 27.389686][ T11] do_syscall_64+0xc1/0x1d0 [ 27.389805][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.389963][ T11] [ 27.390030][ T11] Freed by task 11: [ 27.390124][ T11] kasan_save_stack+0x24/0x50 [ 27.390251][ T11] kasan_save_track+0x14/0x30 [ 27.390370][ T11] kasan_save_free_info+0x3b/0x60 [ 27.390494][ T11] __kasan_slab_free+0x38/0x50 [ 27.390616][ T11] kmem_cache_free+0xf8/0x330 [ 27.390738][ T11] cleanup_net+0x5a8/0xb90 [ 27.390921][ T11] process_one_work+0xe55/0x16d0 [ 27.391043][ T11] worker_thread+0x58c/0xce0 [ 27.391164][ T11] kthread+0x28a/0x350 [ 27.391260][ T11] ret_from_fork+0x31/0x70 [ 27.391380][ T11] ret_from_fork_asm+0x1a/0x30 [ 27.391502][ T11] [ 27.391565][ T11] Last potentially related work creation: [ 27.391685][ T11] kasan_save_stack+0x24/0x50 [ 27.391807][ T11] __kasan_record_aux_stack+0x8e/0xa0 [ 27.391928][ T11] insert_work+0x34/0x230 [ 27.392021][ T11] __queue_work+0x5fd/0xa40 [ 27.392147][ T11] queue_delayed_work_on+0x8c/0xa0 [ 27.392268][ T11] __inet_insert_ifa+0x751/0xb10 [ 27.392392][ T11] inet_rtm_newaddr+0x833/0xbd0 [ 27.392516][ T11] rtnetlink_rcv_msg+0x712/0xc10 [ 27.392640][ T11] netlink_rcv_skb+0x130/0x360 [ 27.392763][ T11] netlink_unicast+0x44b/0x710 [ 27.392887][ T11] netlink_sendmsg+0x723/0xbe0 [ 27.393009][ T11] ____sys_sendmsg+0x7ac/0xa10 [ 27.393136][ T11] ___sys_sendmsg+0xee/0x170 [ 27.393260][ T11] __sys_sendmsg+0x109/0x1a0 [ 27.393383][ T11] do_syscall_64+0xc1/0x1d0 [ 27.393508][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.393660][ T11] [ 27.393724][ T11] Second to last potentially related work creation: [ 27.393871][ T11] kasan_save_stack+0x24/0x50 [ 27.393994][ T11] __kasan_record_aux_stack+0x8e/0xa0 [ 27.394120][ T11] insert_work+0x34/0x230 [ 27.394211][ T11] __queue_work+0x5fd/0xa40 [ 27.394333][ T11] queue_delayed_work_on+0x8c/0xa0 [ 27.394455][ T11] __inet_insert_ifa+0x751/0xb10 [ 27.394577][ T11] inet_rtm_newaddr+0x833/0xbd0 [ 27.394699][ T11] rtnetlink_rcv_msg+0x712/0xc10 [ 27.394820][ T11] netlink_rcv_skb+0x130/0x360 [ 27.394944][ T11] netlink_unicast+0x44b/0x710 [ 27.395067][ T11] netlink_sendmsg+0x723/0xbe0 [ 27.395188][ T11] ____sys_sendmsg+0x7ac/0xa10 [ 27.395309][ T11] ___sys_sendmsg+0xee/0x170 [ 27.395430][ T11] __sys_sendmsg+0x109/0x1a0 [ 27.395553][ T11] do_syscall_64+0xc1/0x1d0 [ 27.395674][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.395825][ T11] [ 27.395886][ T11] The buggy address belongs to the object at ffff88800cbc0040 [ 27.395886][ T11] which belongs to the cache net_namespace of size 6528 [ 27.396209][ T11] The buggy address is located 184 bytes inside of [ 27.396209][ T11] freed 6528-byte region [ffff88800cbc0040, ffff88800cbc19c0) [ 27.396498][ T11] [ 27.396560][ T11] The buggy address belongs to the physical page: [ 27.396710][ T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88800cbc3640 pfn:0xcbc0 [ 27.396952][ T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 27.397133][ T11] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 27.397287][ T11] page_type: f5(slab) [ 27.397383][ T11] raw: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 27.397602][ T11] raw: ffff88800cbc3640 0000000000040002 00000001f5000000 0000000000000000 [ 27.397828][ T11] head: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 27.398042][ T11] head: ffff88800cbc3640 0000000000040002 00000001f5000000 0000000000000000 [ 27.398260][ T11] head: 0080000000000003 ffffea000032f001 ffffffffffffffff 0000000000000000 [ 27.398476][ T11] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 27.398685][ T11] page dumped because: kasan: bad access detected [ 27.398834][ T11] [ 27.398895][ T11] Memory state around the buggy address: [ 27.399013][ T11] ffff88800cbbff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.399188][ T11] ffff88800cbc0000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 27.399364][ T11] >ffff88800cbc0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.399538][ T11] ^ [ 27.399771][ T11] ffff88800cbc0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.399945][ T11] ffff88800cbc0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.400126][ T11] ================================================================== [ 27.400372][ T11] Disabling lock debugging due to kernel taint [ 28.766838][ T487] veth0: renamed from veth1 [ 29.335471][ T503] br0: port 1(swp1) entered blocking state [ 29.335669][ T503] br0: port 1(swp1) entered disabled state [ 29.335852][ T503] swp1: entered allmulticast mode [ 29.336743][ T503] swp1: entered promiscuous mode [ 29.337795][ T503] br0: port 1(swp1) entered blocking state [ 29.337966][ T503] br0: port 1(swp1) entered forwarding state [ 29.445518][ T505] br0: port 2(vx0) entered blocking state [ 29.445757][ T505] br0: port 2(vx0) entered disabled state [ 29.445904][ T505] vx0: entered allmulticast mode [ 29.446811][ T505] vx0: entered promiscuous mode [ 29.447269][ T505] br0: port 2(vx0) entered blocking state [ 29.447408][ T505] br0: port 2(vx0) entered forwarding state [ 30.139060][ T518] br0: port 1(swp1) entered blocking state [ 30.139329][ T518] br0: port 1(swp1) entered disabled state [ 30.139511][ T518] swp1: entered allmulticast mode [ 30.140385][ T518] swp1: entered promiscuous mode [ 30.141311][ T518] br0: port 1(swp1) entered blocking state [ 30.141487][ T518] br0: port 1(swp1) entered forwarding state [ 30.252851][ T520] br0: port 2(vx0) entered blocking state [ 30.253020][ T520] br0: port 2(vx0) entered disabled state [ 30.253759][ T520] vx0: entered allmulticast mode [ 30.254672][ T520] vx0: entered promiscuous mode [ 30.255117][ T520] br0: port 2(vx0) entered blocking state [ 30.255256][ T520] br0: port 2(vx0) entered forwarding state [ 37.139751][ T277] br0: port 1(swp1) entered disabled state [ 38.261760][ T39] br0: port 1(swp1) entered blocking state [ 38.261992][ T39] br0: port 1(swp1) entered forwarding state [ 39.264125][ T45] br0: port 1(swp1) entered disabled state [ 40.349090][ T277] br0: port 1(swp1) entered blocking state [ 40.349297][ T277] br0: port 1(swp1) entered forwarding state [ 42.623521][ T277] br0: port 1(swp1) entered disabled state [ 43.792403][ T11] vx0: left allmulticast mode [ 43.792565][ T11] vx0: left promiscuous mode [ 43.792798][ T11] br0: port 2(vx0) entered disabled state [ 43.793638][ T11] swp1: left allmulticast mode [ 43.793780][ T11] swp1: left promiscuous mode [ 43.794026][ T11] br0: port 1(swp1) entered disabled state [ 44.070719][ T11] vx0: left allmulticast mode [ 44.070887][ T11] vx0: left promiscuous mode [ 44.071138][ T11] br0: port 2(vx0) entered disabled state [ 44.072181][ T11] swp1: left allmulticast mode [ 44.072322][ T11] swp1: left promiscuous mode [ 44.072544][ T11] br0: port 1(swp1) entered disabled state [ 45.570174][ T749] veth0: renamed from veth1 [ 46.141772][ T766] br0: port 1(swp1) entered blocking state [ 46.142003][ T766] br0: port 1(swp1) entered disabled state [ 46.142232][ T766] swp1: entered allmulticast mode [ 46.143140][ T766] swp1: entered promiscuous mode [ 46.144092][ T766] br0: port 1(swp1) entered blocking state [ 46.144286][ T766] br0: port 1(swp1) entered forwarding state [ 46.252293][ T768] br0: port 2(vx0) entered blocking state [ 46.252558][ T768] br0: port 2(vx0) entered disabled state [ 46.252724][ T768] vx0: entered allmulticast mode [ 46.253646][ T768] vx0: entered promiscuous mode [ 46.254116][ T768] br0: port 2(vx0) entered blocking state [ 46.254274][ T768] br0: port 2(vx0) entered forwarding state [ 46.954808][ T781] br0: port 1(swp1) entered blocking state [ 46.955012][ T781] br0: port 1(swp1) entered disabled state [ 46.955934][ T781] swp1: entered allmulticast mode [ 46.956817][ T781] swp1: entered promiscuous mode [ 46.957730][ T781] br0: port 1(swp1) entered blocking state [ 46.957901][ T781] br0: port 1(swp1) entered forwarding state [ 47.072975][ T783] br0: port 2(vx0) entered blocking state [ 47.073225][ T783] br0: port 2(vx0) entered disabled state [ 47.073379][ T783] vx0: entered allmulticast mode [ 47.074260][ T783] vx0: entered promiscuous mode [ 47.074618][ T783] br0: port 2(vx0) entered blocking state [ 47.074755][ T783] br0: port 2(vx0) entered forwarding state [ 53.474191][ T277] br0: port 1(swp1) entered disabled state [ 58.618320][ T11] vx0: left allmulticast mode [ 58.618473][ T11] vx0: left promiscuous mode [ 58.618709][ T11] br0: port 2(vx0) entered disabled state [ 58.622099][ T11] swp1: left allmulticast mode [ 58.622239][ T11] swp1: left promiscuous mode [ 58.622463][ T11] br0: port 1(swp1) entered disabled state [ 58.881674][ T11] vx0: left allmulticast mode [ 58.881870][ T11] vx0: left promiscuous mode [ 58.882137][ T11] br0: port 2(vx0) entered disabled state [ 58.882859][ T11] swp1: left allmulticast mode [ 58.883012][ T11] swp1: left promiscuous mode [ 58.883286][ T11] br0: port 1(swp1) entered disabled state [ 60.376633][ T981] veth0: renamed from veth1 [ 60.952278][ T999] br0: port 1(swp1) entered blocking state [ 60.952480][ T999] br0: port 1(swp1) entered disabled state [ 60.952667][ T999] swp1: entered allmulticast mode [ 60.953540][ T999] swp1: entered promiscuous mode [ 60.954460][ T999] br0: port 1(swp1) entered blocking state [ 60.954635][ T999] br0: port 1(swp1) entered forwarding state [ 61.061183][ T1001] br0: port 2(vx0) entered blocking state [ 61.061349][ T1001] br0: port 2(vx0) entered disabled state [ 61.061496][ T1001] vx0: entered allmulticast mode [ 61.062386][ T1001] vx0: entered promiscuous mode [ 61.062742][ T1001] br0: port 2(vx0) entered blocking state [ 61.062881][ T1001] br0: port 2(vx0) entered forwarding state [ 61.750762][ T1014] br0: port 1(swp1) entered blocking state [ 61.750966][ T1014] br0: port 1(swp1) entered disabled state [ 61.751156][ T1014] swp1: entered allmulticast mode [ 61.752032][ T1014] swp1: entered promiscuous mode [ 61.752953][ T1014] br0: port 1(swp1) entered blocking state [ 61.753145][ T1014] br0: port 1(swp1) entered forwarding state [ 61.858789][ T1016] br0: port 2(vx0) entered blocking state [ 61.858954][ T1016] br0: port 2(vx0) entered disabled state [ 61.859110][ T1016] vx0: entered allmulticast mode [ 61.860001][ T1016] vx0: entered promiscuous mode [ 61.860370][ T1016] br0: port 2(vx0) entered blocking state [ 61.860511][ T1016] br0: port 2(vx0) entered forwarding state [ 67.926759][ T277] br0: port 1(swp1) entered disabled state [ 68.960238][ T39] br0: port 1(swp1) entered disabled state [ 75.337602][ T11] vx0: left allmulticast mode [ 75.337761][ T11] vx0: left promiscuous mode [ 75.338130][ T11] br0: port 2(vx0) entered disabled state [ 75.341177][ T11] swp1: left allmulticast mode [ 75.341326][ T11] swp1: left promiscuous mode [ 75.341563][ T11] br0: port 1(swp1) entered disabled state [ 75.582128][ T11] vx0: left allmulticast mode [ 75.582298][ T11] vx0: left promiscuous mode [ 75.582532][ T11] br0: port 2(vx0) entered disabled state [ 75.583232][ T11] swp1: left allmulticast mode [ 75.583364][ T11] swp1: left promiscuous mode [ 75.583590][ T11] br0: port 1(swp1) entered disabled state [ 77.061716][ T1143] veth0: renamed from veth1 [ 77.624710][ T1162] br0: port 1(swp1) entered blocking state [ 77.624913][ T1162] br0: port 1(swp1) entered disabled state [ 77.625106][ T1162] swp1: entered allmulticast mode [ 77.625992][ T1162] swp1: entered promiscuous mode [ 77.626893][ T1162] br0: port 1(swp1) entered blocking state [ 77.627072][ T1162] br0: port 1(swp1) entered forwarding state [ 77.737437][ T1164] br0: port 2(vx0) entered blocking state [ 77.737668][ T1164] br0: port 2(vx0) entered disabled state [ 77.737814][ T1164] vx0: entered allmulticast mode [ 77.738884][ T1164] vx0: entered promiscuous mode [ 77.739254][ T1164] br0: port 2(vx0) entered blocking state [ 77.739391][ T1164] br0: port 2(vx0) entered forwarding state [ 78.419204][ T1177] br0: port 1(swp1) entered blocking state [ 78.419420][ T1177] br0: port 1(swp1) entered disabled state [ 78.419598][ T1177] swp1: entered allmulticast mode [ 78.420466][ T1177] swp1: entered promiscuous mode [ 78.421384][ T1177] br0: port 1(swp1) entered blocking state [ 78.421555][ T1177] br0: port 1(swp1) entered forwarding state [ 78.533108][ T1179] br0: port 2(vx0) entered blocking state [ 78.533363][ T1179] br0: port 2(vx0) entered disabled state [ 78.533517][ T1179] vx0: entered allmulticast mode [ 78.534414][ T1179] vx0: entered promiscuous mode [ 78.534858][ T1179] br0: port 2(vx0) entered blocking state [ 78.534997][ T1179] br0: port 2(vx0) entered forwarding state [ 84.143250][ T68] br0: port 1(swp1) entered disabled state [ 114.333260][ T11] vx0: left allmulticast mode [ 114.333430][ T11] vx0: left promiscuous mode [ 114.333708][ T11] br0: port 2(vx0) entered disabled state [ 114.334601][ T11] swp1: left allmulticast mode [ 114.334747][ T11] swp1: left promiscuous mode [ 114.334977][ T11] br0: port 1(swp1) entered disabled state [ 114.628729][ T11] vx0: left allmulticast mode [ 114.628894][ T11] vx0: left promiscuous mode [ 114.629146][ T11] br0: port 2(vx0) entered disabled state [ 114.629745][ T11] swp1: left allmulticast mode [ 114.629882][ T11] swp1: left promiscuous mode [ 114.630124][ T11] br0: port 1(swp1) entered disabled state