[ 12.652068][ T281] veth0: renamed from veth1 [ 13.528388][ T299] br0: port 1(swp1) entered blocking state [ 13.528782][ T299] br0: port 1(swp1) entered disabled state [ 13.529028][ T299] swp1: entered allmulticast mode [ 13.530265][ T299] swp1: entered promiscuous mode [ 13.531884][ T299] br0: port 1(swp1) entered blocking state [ 13.532202][ T299] br0: port 1(swp1) entered forwarding state [ 13.820920][ T301] br0: port 2(vx0) entered blocking state [ 13.821445][ T301] br0: port 2(vx0) entered disabled state [ 13.821668][ T301] vx0: entered allmulticast mode [ 13.822996][ T301] vx0: entered promiscuous mode [ 13.823928][ T301] br0: port 2(vx0) entered blocking state [ 13.824247][ T301] br0: port 2(vx0) entered forwarding state [ 14.955600][ T315] br0: port 1(swp1) entered blocking state [ 14.955918][ T315] br0: port 1(swp1) entered disabled state [ 14.956200][ T315] swp1: entered allmulticast mode [ 14.957469][ T315] swp1: entered promiscuous mode [ 14.958813][ T315] br0: port 1(swp1) entered blocking state [ 14.959078][ T315] br0: port 1(swp1) entered forwarding state [ 15.137892][ T317] br0: port 2(vx0) entered blocking state [ 15.138259][ T317] br0: port 2(vx0) entered disabled state [ 15.138493][ T317] vx0: entered allmulticast mode [ 15.140097][ T317] vx0: entered promiscuous mode [ 15.140896][ T317] br0: port 2(vx0) entered blocking state [ 15.141115][ T317] br0: port 2(vx0) entered forwarding state [ 20.933978][ T329] GACT probability NOT on [ 22.155104][ T37] br0: port 1(swp1) entered disabled state [ 23.156182][ T39] br0: port 1(swp1) entered blocking state [ 23.156522][ T39] br0: port 1(swp1) entered forwarding state [ 24.303681][ T37] br0: port 1(swp1) entered disabled state [ 25.270826][ T37] br0: port 1(swp1) entered blocking state [ 25.271083][ T37] br0: port 1(swp1) entered forwarding state [ 27.203057][ T156] br0: port 1(swp1) entered disabled state [ 28.242134][ T66] vx0: left allmulticast mode [ 28.242577][ T66] vx0: left promiscuous mode [ 28.242908][ T66] br0: port 2(vx0) entered disabled state [ 28.244760][ T66] swp1: left allmulticast mode [ 28.245028][ T66] swp1: left promiscuous mode [ 28.245329][ T66] br0: port 1(swp1) entered disabled state [ 28.605122][ T66] vx0: left allmulticast mode [ 28.605364][ T66] vx0: left promiscuous mode [ 28.605665][ T66] br0: port 2(vx0) entered disabled state [ 28.609522][ T66] swp1: left allmulticast mode [ 28.609720][ T66] swp1: left promiscuous mode [ 28.610004][ T66] br0: port 1(swp1) entered disabled state [ 28.772333][ T66] ================================================================== [ 28.772562][ T66] BUG: KASAN: slab-use-after-free in cleanup_net+0xa5d/0xb90 [ 28.772761][ T66] Read of size 8 at addr ffff888005d800f8 by task kworker/u16:1/66 [ 28.772955][ T66] [ 28.773022][ T66] CPU: 3 UID: 0 PID: 66 Comm: kworker/u16:1 Not tainted 6.12.0-virtme #1 [ 28.773221][ T66] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 28.773395][ T66] Workqueue: netns cleanup_net [ 28.773543][ T66] Call Trace: [ 28.773657][ T66] [ 28.773731][ T66] dump_stack_lvl+0x82/0xd0 [ 28.773872][ T66] print_address_description.constprop.0+0x2c/0x3b0 [ 28.774044][ T66] ? cleanup_net+0xa5d/0xb90 [ 28.774183][ T66] print_report+0xb4/0x270 [ 28.774315][ T66] ? kasan_addr_to_slab+0x25/0x80 [ 28.774449][ T66] kasan_report+0xbd/0xf0 [ 28.774557][ T66] ? cleanup_net+0xa5d/0xb90 [ 28.774699][ T66] cleanup_net+0xa5d/0xb90 [ 28.774837][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 28.774978][ T66] ? __pfx_cleanup_net+0x10/0x10 [ 28.775110][ T66] ? trace_lock_acquire+0x148/0x1f0 [ 28.775248][ T66] ? lock_acquire+0x32/0xc0 [ 28.775382][ T66] ? process_one_work+0xe0b/0x16d0 [ 28.775519][ T66] process_one_work+0xe55/0x16d0 [ 28.775647][ T66] ? __pfx___lock_release+0x10/0x10 [ 28.775772][ T66] ? __pfx_process_one_work+0x10/0x10 [ 28.775908][ T66] ? assign_work+0x16c/0x240 [ 28.776037][ T66] worker_thread+0x58c/0xce0 [ 28.776166][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 28.776336][ T66] ? __pfx_worker_thread+0x10/0x10 [ 28.776464][ T66] ? __pfx_worker_thread+0x10/0x10 [ 28.776599][ T66] kthread+0x28a/0x350 [ 28.776694][ T66] ? __pfx_kthread+0x10/0x10 [ 28.776817][ T66] ret_from_fork+0x31/0x70 [ 28.776951][ T66] ? __pfx_kthread+0x10/0x10 [ 28.777073][ T66] ret_from_fork_asm+0x1a/0x30 [ 28.777201][ T66] [ 28.777298][ T66] [ 28.777362][ T66] Allocated by task 263: [ 28.777464][ T66] kasan_save_stack+0x24/0x50 [ 28.777593][ T66] kasan_save_track+0x14/0x30 [ 28.777722][ T66] __kasan_slab_alloc+0x59/0x70 [ 28.777844][ T66] kmem_cache_alloc_noprof+0x10b/0x350 [ 28.777983][ T66] copy_net_ns+0xc6/0x540 [ 28.778082][ T66] create_new_namespaces+0x35f/0x920 [ 28.778216][ T66] unshare_nsproxy_namespaces+0x8a/0x1b0 [ 28.778345][ T66] ksys_unshare+0x2c4/0x6e0 [ 28.778486][ T66] __x64_sys_unshare+0x31/0x40 [ 28.778611][ T66] do_syscall_64+0xc1/0x1d0 [ 28.778736][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.778906][ T66] [ 28.778971][ T66] Freed by task 66: [ 28.779071][ T66] kasan_save_stack+0x24/0x50 [ 28.779195][ T66] kasan_save_track+0x14/0x30 [ 28.779316][ T66] kasan_save_free_info+0x3b/0x60 [ 28.779448][ T66] __kasan_slab_free+0x38/0x50 [ 28.779576][ T66] kmem_cache_free+0xf8/0x330 [ 28.779703][ T66] cleanup_net+0x5a8/0xb90 [ 28.779823][ T66] process_one_work+0xe55/0x16d0 [ 28.779957][ T66] worker_thread+0x58c/0xce0 [ 28.780089][ T66] kthread+0x28a/0x350 [ 28.780192][ T66] ret_from_fork+0x31/0x70 [ 28.780313][ T66] ret_from_fork_asm+0x1a/0x30 [ 28.780446][ T66] [ 28.780517][ T66] Last potentially related work creation: [ 28.780646][ T66] kasan_save_stack+0x24/0x50 [ 28.780771][ T66] __kasan_record_aux_stack+0x8e/0xa0 [ 28.780893][ T66] insert_work+0x34/0x230 [ 28.780992][ T66] __queue_work+0x5fd/0xa40 [ 28.781114][ T66] queue_delayed_work_on+0x8c/0xa0 [ 28.781235][ T66] __inet_insert_ifa+0x751/0xb10 [ 28.781365][ T66] inet_rtm_newaddr+0x833/0xbd0 [ 28.781497][ T66] rtnetlink_rcv_msg+0x712/0xc10 [ 28.781621][ T66] netlink_rcv_skb+0x130/0x360 [ 28.781746][ T66] netlink_unicast+0x44b/0x710 [ 28.781867][ T66] netlink_sendmsg+0x723/0xbe0 [ 28.782005][ T66] ____sys_sendmsg+0x7ac/0xa10 [ 28.782137][ T66] ___sys_sendmsg+0xee/0x170 [ 28.782259][ T66] __sys_sendmsg+0x109/0x1a0 [ 28.782384][ T66] do_syscall_64+0xc1/0x1d0 [ 28.782517][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.782678][ T66] [ 28.782745][ T66] Second to last potentially related work creation: [ 28.782896][ T66] kasan_save_stack+0x24/0x50 [ 28.783024][ T66] __kasan_record_aux_stack+0x8e/0xa0 [ 28.783150][ T66] insert_work+0x34/0x230 [ 28.783247][ T66] __queue_work+0x5fd/0xa40 [ 28.783369][ T66] queue_delayed_work_on+0x8c/0xa0 [ 28.783494][ T66] __inet_insert_ifa+0x751/0xb10 [ 28.783625][ T66] inet_rtm_newaddr+0x833/0xbd0 [ 28.783747][ T66] rtnetlink_rcv_msg+0x712/0xc10 [ 28.783880][ T66] netlink_rcv_skb+0x130/0x360 [ 28.784009][ T66] netlink_unicast+0x44b/0x710 [ 28.784138][ T66] netlink_sendmsg+0x723/0xbe0 [ 28.784261][ T66] ____sys_sendmsg+0x7ac/0xa10 [ 28.784392][ T66] ___sys_sendmsg+0xee/0x170 [ 28.784526][ T66] __sys_sendmsg+0x109/0x1a0 [ 28.784652][ T66] do_syscall_64+0xc1/0x1d0 [ 28.784778][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.784930][ T66] [ 28.784993][ T66] The buggy address belongs to the object at ffff888005d80040 [ 28.784993][ T66] which belongs to the cache net_namespace of size 6528 [ 28.785312][ T66] The buggy address is located 184 bytes inside of [ 28.785312][ T66] freed 6528-byte region [ffff888005d80040, ffff888005d819c0) [ 28.785617][ T66] [ 28.785680][ T66] The buggy address belongs to the physical page: [ 28.785829][ T66] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888005d83640 pfn:0x5d80 [ 28.786076][ T66] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 28.786265][ T66] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 28.786421][ T66] page_type: f5(slab) [ 28.786530][ T66] raw: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 28.786755][ T66] raw: ffff888005d83640 0000000000040002 00000001f5000000 0000000000000000 [ 28.786970][ T66] head: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 28.787187][ T66] head: ffff888005d83640 0000000000040002 00000001f5000000 0000000000000000 [ 28.787411][ T66] head: 0080000000000003 ffffea0000176001 ffffffffffffffff 0000000000000000 [ 28.787642][ T66] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 28.787862][ T66] page dumped because: kasan: bad access detected [ 28.788022][ T66] [ 28.788093][ T66] Memory state around the buggy address: [ 28.788211][ T66] ffff888005d7ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.788400][ T66] ffff888005d80000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 28.788590][ T66] >ffff888005d80080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.788833][ T66] ^ [ 28.789004][ T66] ffff888005d80100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.789194][ T66] ffff888005d80180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.789432][ T66] ================================================================== [ 28.789633][ T66] Disabling lock debugging due to kernel taint [ 30.363036][ T486] veth0: renamed from veth1 [ 31.000064][ T502] br0: port 1(swp1) entered blocking state [ 31.000292][ T502] br0: port 1(swp1) entered disabled state [ 31.000495][ T502] swp1: entered allmulticast mode [ 31.001437][ T502] swp1: entered promiscuous mode [ 31.002413][ T502] br0: port 1(swp1) entered blocking state [ 31.002599][ T502] br0: port 1(swp1) entered forwarding state [ 31.147387][ T504] br0: port 2(vx0) entered blocking state [ 31.147590][ T504] br0: port 2(vx0) entered disabled state [ 31.147754][ T504] vx0: entered allmulticast mode [ 31.148699][ T504] vx0: entered promiscuous mode [ 31.149169][ T504] br0: port 2(vx0) entered blocking state [ 31.149339][ T504] br0: port 2(vx0) entered forwarding state [ 31.973578][ T517] br0: port 1(swp1) entered blocking state [ 31.973801][ T517] br0: port 1(swp1) entered disabled state [ 31.973997][ T517] swp1: entered allmulticast mode [ 31.974923][ T517] swp1: entered promiscuous mode [ 31.975900][ T517] br0: port 1(swp1) entered blocking state [ 31.976076][ T517] br0: port 1(swp1) entered forwarding state [ 32.111848][ T519] br0: port 2(vx0) entered blocking state [ 32.112119][ T519] br0: port 2(vx0) entered disabled state [ 32.112281][ T519] vx0: entered allmulticast mode [ 32.113253][ T519] vx0: entered promiscuous mode [ 32.113671][ T519] br0: port 2(vx0) entered blocking state [ 32.113819][ T519] br0: port 2(vx0) entered forwarding state [ 39.473328][ T44] br0: port 1(swp1) entered disabled state [ 40.776173][ T39] br0: port 1(swp1) entered blocking state [ 40.776465][ T39] br0: port 1(swp1) entered forwarding state [ 41.780014][ T44] br0: port 1(swp1) entered disabled state [ 43.168949][ T39] br0: port 1(swp1) entered blocking state [ 43.169341][ T39] br0: port 1(swp1) entered forwarding state [ 45.734080][ T39] br0: port 1(swp1) entered disabled state [ 47.109925][ T66] vx0: left allmulticast mode [ 47.110108][ T66] vx0: left promiscuous mode [ 47.110364][ T66] br0: port 2(vx0) entered disabled state [ 47.111080][ T66] swp1: left allmulticast mode [ 47.111217][ T66] swp1: left promiscuous mode [ 47.111461][ T66] br0: port 1(swp1) entered disabled state [ 47.374355][ T66] vx0: left allmulticast mode [ 47.374534][ T66] vx0: left promiscuous mode [ 47.374781][ T66] br0: port 2(vx0) entered disabled state [ 47.375558][ T66] swp1: left allmulticast mode [ 47.375694][ T66] swp1: left promiscuous mode [ 47.375919][ T66] br0: port 1(swp1) entered disabled state [ 49.188053][ T744] veth0: renamed from veth1 [ 49.837256][ T761] br0: port 1(swp1) entered blocking state [ 49.837467][ T761] br0: port 1(swp1) entered disabled state [ 49.837662][ T761] swp1: entered allmulticast mode [ 49.838611][ T761] swp1: entered promiscuous mode [ 49.839568][ T761] br0: port 1(swp1) entered blocking state [ 49.839740][ T761] br0: port 1(swp1) entered forwarding state [ 49.958816][ T763] br0: port 2(vx0) entered blocking state [ 49.959098][ T763] br0: port 2(vx0) entered disabled state [ 49.959257][ T763] vx0: entered allmulticast mode [ 49.960163][ T763] vx0: entered promiscuous mode [ 49.960541][ T763] br0: port 2(vx0) entered blocking state [ 49.960684][ T763] br0: port 2(vx0) entered forwarding state [ 50.713612][ T776] br0: port 1(swp1) entered blocking state [ 50.713821][ T776] br0: port 1(swp1) entered disabled state [ 50.714014][ T776] swp1: entered allmulticast mode [ 50.714911][ T776] swp1: entered promiscuous mode [ 50.715849][ T776] br0: port 1(swp1) entered blocking state [ 50.716019][ T776] br0: port 1(swp1) entered forwarding state [ 50.836987][ T778] br0: port 2(vx0) entered blocking state [ 50.837256][ T778] br0: port 2(vx0) entered disabled state [ 50.837407][ T778] vx0: entered allmulticast mode [ 50.838318][ T778] vx0: entered promiscuous mode [ 50.838765][ T778] br0: port 2(vx0) entered blocking state [ 50.838904][ T778] br0: port 2(vx0) entered forwarding state [ 57.430104][ T39] br0: port 1(swp1) entered disabled state [ 63.072884][ T66] vx0: left allmulticast mode [ 63.073117][ T66] vx0: left promiscuous mode [ 63.073503][ T66] br0: port 2(vx0) entered disabled state [ 63.075211][ T66] swp1: left allmulticast mode [ 63.075437][ T66] swp1: left promiscuous mode [ 63.075773][ T66] br0: port 1(swp1) entered disabled state [ 63.424129][ T66] vx0: left allmulticast mode [ 63.424424][ T66] vx0: left promiscuous mode [ 63.424888][ T66] br0: port 2(vx0) entered disabled state [ 63.426674][ T66] swp1: left allmulticast mode [ 63.426938][ T66] swp1: left promiscuous mode [ 63.427374][ T66] br0: port 1(swp1) entered disabled state [ 65.315326][ T978] veth0: renamed from veth1 [ 65.931450][ T994] br0: port 1(swp1) entered blocking state [ 65.931659][ T994] br0: port 1(swp1) entered disabled state [ 65.931848][ T994] swp1: entered allmulticast mode [ 65.932749][ T994] swp1: entered promiscuous mode [ 65.939121][ T994] br0: port 1(swp1) entered blocking state [ 65.939311][ T994] br0: port 1(swp1) entered forwarding state [ 66.056197][ T996] br0: port 2(vx0) entered blocking state [ 66.056443][ T996] br0: port 2(vx0) entered disabled state [ 66.056595][ T996] vx0: entered allmulticast mode [ 66.057484][ T996] vx0: entered promiscuous mode [ 66.057845][ T996] br0: port 2(vx0) entered blocking state [ 66.057984][ T996] br0: port 2(vx0) entered forwarding state [ 66.790306][ T1009] br0: port 1(swp1) entered blocking state [ 66.790507][ T1009] br0: port 1(swp1) entered disabled state [ 66.790697][ T1009] swp1: entered allmulticast mode [ 66.791600][ T1009] swp1: entered promiscuous mode [ 66.793503][ T1009] br0: port 1(swp1) entered blocking state [ 66.793683][ T1009] br0: port 1(swp1) entered forwarding state [ 66.909260][ T1011] br0: port 2(vx0) entered blocking state [ 66.909529][ T1011] br0: port 2(vx0) entered disabled state [ 66.909692][ T1011] vx0: entered allmulticast mode [ 66.910624][ T1011] vx0: entered promiscuous mode [ 66.911079][ T1011] br0: port 2(vx0) entered blocking state [ 66.911245][ T1011] br0: port 2(vx0) entered forwarding state [ 73.024895][ T44] br0: port 1(swp1) entered disabled state [ 74.083371][ T38] br0: port 1(swp1) entered disabled state [ 80.499877][ T66] vx0: left allmulticast mode [ 80.500041][ T66] vx0: left promiscuous mode [ 80.500295][ T66] br0: port 2(vx0) entered disabled state [ 80.501600][ T66] swp1: left allmulticast mode [ 80.501748][ T66] swp1: left promiscuous mode [ 80.501985][ T66] br0: port 1(swp1) entered disabled state [ 80.714606][ T66] vx0: left allmulticast mode [ 80.714772][ T66] vx0: left promiscuous mode [ 80.715042][ T66] br0: port 2(vx0) entered disabled state [ 80.715781][ T66] swp1: left allmulticast mode [ 80.715923][ T66] swp1: left promiscuous mode [ 80.716150][ T66] br0: port 1(swp1) entered disabled state [ 82.413916][ T1136] veth0: renamed from veth1 [ 82.985314][ T1153] br0: port 1(swp1) entered blocking state [ 82.985518][ T1153] br0: port 1(swp1) entered disabled state [ 82.985710][ T1153] swp1: entered allmulticast mode [ 82.986642][ T1153] swp1: entered promiscuous mode [ 82.987579][ T1153] br0: port 1(swp1) entered blocking state [ 82.987755][ T1153] br0: port 1(swp1) entered forwarding state [ 83.102278][ T1155] br0: port 2(vx0) entered blocking state [ 83.102523][ T1155] br0: port 2(vx0) entered disabled state [ 83.102680][ T1155] vx0: entered allmulticast mode [ 83.104787][ T1155] vx0: entered promiscuous mode [ 83.105381][ T1155] br0: port 2(vx0) entered blocking state [ 83.105599][ T1155] br0: port 2(vx0) entered forwarding state [ 83.850220][ T1168] br0: port 1(swp1) entered blocking state [ 83.850566][ T1168] br0: port 1(swp1) entered disabled state [ 83.850770][ T1168] swp1: entered allmulticast mode [ 83.851690][ T1168] swp1: entered promiscuous mode [ 83.852658][ T1168] br0: port 1(swp1) entered blocking state [ 83.852851][ T1168] br0: port 1(swp1) entered forwarding state [ 83.971198][ T1170] br0: port 2(vx0) entered blocking state [ 83.971419][ T1170] br0: port 2(vx0) entered disabled state [ 83.971581][ T1170] vx0: entered allmulticast mode [ 83.972514][ T1170] vx0: entered promiscuous mode [ 83.972907][ T1170] br0: port 2(vx0) entered blocking state [ 83.973061][ T1170] br0: port 2(vx0) entered forwarding state [ 89.600466][ T44] br0: port 1(swp1) entered disabled state [ 119.805574][ T66] vx0: left allmulticast mode [ 119.805747][ T66] vx0: left promiscuous mode [ 119.805993][ T66] br0: port 2(vx0) entered disabled state [ 119.806943][ T66] swp1: left allmulticast mode [ 119.807093][ T66] swp1: left promiscuous mode [ 119.807369][ T66] br0: port 1(swp1) entered disabled state [ 120.105694][ T66] vx0: left allmulticast mode [ 120.105958][ T66] vx0: left promiscuous mode [ 120.106375][ T66] br0: port 2(vx0) entered disabled state [ 120.107680][ T66] swp1: left allmulticast mode [ 120.107910][ T66] swp1: left promiscuous mode [ 120.108294][ T66] br0: port 1(swp1) entered disabled state