[ 12.259327][ T280] eth0: renamed from r1h1 [ 12.275690][ T280] ip (280) used greatest stack depth: 24144 bytes left [ 12.459777][ T282] eth1: renamed from r1h2 [ 18.534923][ T11] ================================================================== [ 18.535173][ T11] BUG: KASAN: slab-use-after-free in cleanup_net+0xa5d/0xb90 [ 18.535389][ T11] Read of size 8 at addr ffff8880024e00f8 by task kworker/u16:0/11 [ 18.535599][ T11] [ 18.535674][ T11] CPU: 3 UID: 0 PID: 11 Comm: kworker/u16:0 Not tainted 6.12.0-virtme #1 [ 18.535906][ T11] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.536078][ T11] Workqueue: netns cleanup_net [ 18.536231][ T11] Call Trace: [ 18.536341][ T11] [ 18.536422][ T11] dump_stack_lvl+0x82/0xd0 [ 18.536568][ T11] print_address_description.constprop.0+0x2c/0x3b0 [ 18.536742][ T11] ? cleanup_net+0xa5d/0xb90 [ 18.536891][ T11] print_report+0xb4/0x270 [ 18.537031][ T11] ? kasan_addr_to_slab+0x25/0x80 [ 18.537168][ T11] kasan_report+0xbd/0xf0 [ 18.537281][ T11] ? cleanup_net+0xa5d/0xb90 [ 18.537421][ T11] cleanup_net+0xa5d/0xb90 [ 18.537560][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 18.537703][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 18.537843][ T11] ? trace_lock_acquire+0x148/0x1f0 [ 18.537983][ T11] ? lock_acquire+0x32/0xc0 [ 18.538122][ T11] ? process_one_work+0xe0b/0x16d0 [ 18.538263][ T11] process_one_work+0xe55/0x16d0 [ 18.538404][ T11] ? __pfx___lock_release+0x10/0x10 [ 18.538546][ T11] ? __pfx_process_one_work+0x10/0x10 [ 18.538688][ T11] ? assign_work+0x16c/0x240 [ 18.538826][ T11] worker_thread+0x58c/0xce0 [ 18.538973][ T11] ? __pfx_worker_thread+0x10/0x10 [ 18.539115][ T11] kthread+0x28a/0x350 [ 18.539224][ T11] ? __pfx_kthread+0x10/0x10 [ 18.539363][ T11] ret_from_fork+0x31/0x70 [ 18.539506][ T11] ? __pfx_kthread+0x10/0x10 [ 18.539646][ T11] ret_from_fork_asm+0x1a/0x30 [ 18.539790][ T11] [ 18.539903][ T11] [ 18.539973][ T11] Allocated by task 258: [ 18.540080][ T11] kasan_save_stack+0x24/0x50 [ 18.540225][ T11] kasan_save_track+0x14/0x30 [ 18.540366][ T11] __kasan_slab_alloc+0x59/0x70 [ 18.540509][ T11] kmem_cache_alloc_noprof+0x10b/0x350 [ 18.540649][ T11] copy_net_ns+0xc6/0x540 [ 18.540755][ T11] create_new_namespaces+0x35f/0x920 [ 18.540895][ T11] unshare_nsproxy_namespaces+0x8a/0x1b0 [ 18.541038][ T11] ksys_unshare+0x2c4/0x6e0 [ 18.541184][ T11] __x64_sys_unshare+0x31/0x40 [ 18.541319][ T11] do_syscall_64+0xc1/0x1d0 [ 18.541461][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 18.541639][ T11] [ 18.541711][ T11] Freed by task 11: [ 18.541816][ T11] kasan_save_stack+0x24/0x50 [ 18.541950][ T11] kasan_save_track+0x14/0x30 [ 18.542089][ T11] kasan_save_free_info+0x3b/0x60 [ 18.542232][ T11] __kasan_slab_free+0x38/0x50 [ 18.542372][ T11] kmem_cache_free+0xf8/0x330 [ 18.542514][ T11] cleanup_net+0x5a8/0xb90 [ 18.542652][ T11] process_one_work+0xe55/0x16d0 [ 18.542785][ T11] worker_thread+0x58c/0xce0 [ 18.542926][ T11] kthread+0x28a/0x350 [ 18.543029][ T11] ret_from_fork+0x31/0x70 [ 18.543169][ T11] ret_from_fork_asm+0x1a/0x30 [ 18.543305][ T11] [ 18.543383][ T11] Last potentially related work creation: [ 18.543526][ T11] kasan_save_stack+0x24/0x50 [ 18.543668][ T11] __kasan_record_aux_stack+0x8e/0xa0 [ 18.543806][ T11] insert_work+0x34/0x230 [ 18.543911][ T11] __queue_work+0x5fd/0xa40 [ 18.544051][ T11] queue_delayed_work_on+0x8c/0xa0 [ 18.544194][ T11] __inet_insert_ifa+0x751/0xb10 [ 18.544339][ T11] inet_rtm_newaddr+0x833/0xbd0 [ 18.544473][ T11] rtnetlink_rcv_msg+0x712/0xc10 [ 18.544617][ T11] netlink_rcv_skb+0x130/0x360 [ 18.544759][ T11] netlink_unicast+0x44b/0x710 [ 18.544901][ T11] netlink_sendmsg+0x723/0xbe0 [ 18.545041][ T11] ____sys_sendmsg+0x7ac/0xa10 [ 18.545186][ T11] ___sys_sendmsg+0xee/0x170 [ 18.545329][ T11] __sys_sendmsg+0x109/0x1a0 [ 18.545473][ T11] do_syscall_64+0xc1/0x1d0 [ 18.545614][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 18.545792][ T11] [ 18.545865][ T11] Second to last potentially related work creation: [ 18.546043][ T11] kasan_save_stack+0x24/0x50 [ 18.546185][ T11] __kasan_record_aux_stack+0x8e/0xa0 [ 18.546333][ T11] insert_work+0x34/0x230 [ 18.546438][ T11] __queue_work+0x5fd/0xa40 [ 18.546579][ T11] queue_delayed_work_on+0x8c/0xa0 [ 18.546718][ T11] __inet_insert_ifa+0x751/0xb10 [ 18.546868][ T11] inetdev_event+0xb18/0xcf0 [ 18.547007][ T11] notifier_call_chain+0xcd/0x150 [ 18.547144][ T11] __dev_notify_flags+0xe6/0x250 [ 18.547286][ T11] dev_change_flags+0xec/0x160 [ 18.547425][ T11] do_setlink.constprop.0+0x79d/0x2300 [ 18.547567][ T11] rtnl_newlink+0x6de/0xa80 [ 18.547708][ T11] rtnetlink_rcv_msg+0x712/0xc10 [ 18.547845][ T11] netlink_rcv_skb+0x130/0x360 [ 18.547988][ T11] netlink_unicast+0x44b/0x710 [ 18.548130][ T11] netlink_sendmsg+0x723/0xbe0 [ 18.548274][ T11] ____sys_sendmsg+0x7ac/0xa10 [ 18.548414][ T11] ___sys_sendmsg+0xee/0x170 [ 18.548557][ T11] __sys_sendmsg+0x109/0x1a0 [ 18.548697][ T11] do_syscall_64+0xc1/0x1d0 [ 18.548834][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 18.549010][ T11] [ 18.549080][ T11] The buggy address belongs to the object at ffff8880024e0040 [ 18.549080][ T11] which belongs to the cache net_namespace of size 6528 [ 18.549448][ T11] The buggy address is located 184 bytes inside of [ 18.549448][ T11] freed 6528-byte region [ffff8880024e0040, ffff8880024e19c0) [ 18.549783][ T11] [ 18.549852][ T11] The buggy address belongs to the physical page: [ 18.550023][ T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880024e5140 pfn:0x24e0 [ 18.550305][ T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 18.550516][ T11] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 18.550697][ T11] page_type: f5(slab) [ 18.550811][ T11] raw: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 18.551056][ T11] raw: ffff8880024e5140 0000000000040003 00000001f5000000 0000000000000000 [ 18.551298][ T11] head: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 18.551542][ T11] head: ffff8880024e5140 0000000000040003 00000001f5000000 0000000000000000 [ 18.551790][ T11] head: 0080000000000003 ffffea0000093801 ffffffffffffffff 0000000000000000 [ 18.552030][ T11] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 18.552269][ T11] page dumped because: kasan: bad access detected [ 18.552438][ T11] [ 18.552508][ T11] Memory state around the buggy address: [ 18.552641][ T11] ffff8880024dff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 18.552842][ T11] ffff8880024e0000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 18.553041][ T11] >ffff8880024e0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 18.553242][ T11] ^ [ 18.553442][ T11] ffff8880024e0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 18.553643][ T11] ffff8880024e0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 18.553847][ T11] ================================================================== [ 18.554065][ T11] Disabling lock debugging due to kernel taint [ 20.623498][ T376] eth0: renamed from r1h1 [ 20.781993][ T378] eth1: renamed from r1h2 [ 27.949501][ T472] eth0: renamed from r1h1 [ 28.099182][ T474] eth1: renamed from r1h2 [ 35.068805][ T568] eth0: renamed from r1h1 [ 35.235619][ T570] eth1: renamed from r1h2 [ 42.492283][ T661] eth0: renamed from r1h1 [ 42.642057][ T663] eth1: renamed from r1h2 [ 50.769347][ T758] eth0: renamed from r1h1 [ 50.917100][ T760] eth1: renamed from r1h2 [ 59.185990][ T863] eth0: renamed from r1h1 [ 59.329074][ T865] eth0: renamed from r2h1 [ 59.474061][ T867] eth1: renamed from r1h2 [ 59.618062][ T869] eth1: renamed from r2h2 [ 59.906152][ T874] br0: port 1(eth0) entered blocking state [ 59.906439][ T874] br0: port 1(eth0) entered disabled state [ 59.906667][ T874] eth0: entered allmulticast mode [ 59.907805][ T874] eth0: entered promiscuous mode [ 59.910505][ T39] br0: port 1(eth0) entered blocking state [ 59.910754][ T39] br0: port 1(eth0) entered forwarding state [ 59.966685][ T875] br0: port 2(eth1) entered blocking state [ 59.966903][ T875] br0: port 2(eth1) entered disabled state [ 59.967093][ T875] eth1: entered allmulticast mode [ 59.968046][ T875] eth1: entered promiscuous mode [ 59.969145][ T44] br0: port 2(eth1) entered blocking state [ 59.969393][ T44] br0: port 2(eth1) entered forwarding state [ 60.371192][ T882] br0: port 1(eth0) entered blocking state [ 60.371553][ T882] br0: port 1(eth0) entered disabled state [ 60.371743][ T882] eth0: entered allmulticast mode [ 60.372662][ T882] eth0: entered promiscuous mode [ 60.430670][ T883] br0: port 2(eth1) entered blocking state [ 60.430948][ T883] br0: port 2(eth1) entered disabled state [ 60.431131][ T883] eth1: entered allmulticast mode [ 60.432071][ T883] eth1: entered promiscuous mode [ 60.433154][ T513] br0: port 2(eth1) entered blocking state [ 60.433365][ T513] br0: port 2(eth1) entered forwarding state [ 61.187798][ T39] br0: port 1(eth0) entered blocking state [ 61.188119][ T39] br0: port 1(eth0) entered forwarding state [ 64.724367][ T11] eth1: left allmulticast mode [ 64.724568][ T11] eth1: left promiscuous mode [ 64.724868][ T11] br0: port 2(eth1) entered disabled state [ 64.726117][ T11] eth0: left allmulticast mode [ 64.726318][ T11] eth0: left promiscuous mode [ 64.726582][ T11] br0: port 1(eth0) entered disabled state [ 65.009629][ T11] eth1: left allmulticast mode [ 65.009873][ T11] eth1: left promiscuous mode [ 65.010193][ T11] br0: port 2(eth1) entered disabled state [ 65.011670][ T11] eth0: left allmulticast mode [ 65.011861][ T11] eth0: left promiscuous mode [ 65.012119][ T11] br0: port 1(eth0) entered disabled state [ 67.979000][ T987] eth0: renamed from r1h1 [ 68.128989][ T989] eth0: renamed from r2h1 [ 68.258081][ T991] eth1: renamed from r1h2 [ 68.410338][ T993] eth1: renamed from r2h2 [ 68.707577][ T998] br0: port 1(eth0) entered blocking state [ 68.707788][ T998] br0: port 1(eth0) entered disabled state [ 68.707970][ T998] eth0: entered allmulticast mode [ 68.708939][ T998] eth0: entered promiscuous mode [ 68.710510][ T513] br0: port 1(eth0) entered blocking state [ 68.710711][ T513] br0: port 1(eth0) entered forwarding state [ 68.763522][ T999] br0: port 2(eth1) entered blocking state [ 68.763720][ T999] br0: port 2(eth1) entered disabled state [ 68.763904][ T999] eth1: entered allmulticast mode [ 68.764817][ T999] eth1: entered promiscuous mode [ 68.765905][ T44] br0: port 2(eth1) entered blocking state [ 68.766093][ T44] br0: port 2(eth1) entered forwarding state [ 69.212880][ T1006] br0: port 1(eth0) entered blocking state [ 69.213226][ T1006] br0: port 1(eth0) entered disabled state [ 69.213430][ T1006] eth0: entered allmulticast mode [ 69.214767][ T1006] eth0: entered promiscuous mode [ 69.280606][ T1007] br0: port 2(eth1) entered blocking state [ 69.280914][ T1007] br0: port 2(eth1) entered disabled state [ 69.281109][ T1007] eth1: entered allmulticast mode [ 69.282073][ T1007] eth1: entered promiscuous mode [ 69.283196][ T44] br0: port 2(eth1) entered blocking state [ 69.283397][ T44] br0: port 2(eth1) entered forwarding state [ 69.954678][ T513] br0: port 1(eth0) entered blocking state [ 69.954906][ T513] br0: port 1(eth0) entered forwarding state [ 73.567005][ T11] eth1: left allmulticast mode [ 73.567180][ T11] eth1: left promiscuous mode [ 73.567585][ T11] br0: port 2(eth1) entered disabled state [ 73.568971][ T11] eth0: left allmulticast mode [ 73.569119][ T11] eth0: left promiscuous mode [ 73.569372][ T11] br0: port 1(eth0) entered disabled state [ 73.828673][ T11] eth1: left allmulticast mode [ 73.828851][ T11] eth1: left promiscuous mode [ 73.829104][ T11] br0: port 2(eth1) entered disabled state [ 73.830308][ T11] eth0: left allmulticast mode [ 73.830452][ T11] eth0: left promiscuous mode [ 73.830682][ T11] br0: port 1(eth0) entered disabled state [ 76.134350][ T1099] eth0: renamed from r1h1 [ 76.310337][ T1101] eth1: renamed from r1h2 [ 83.634426][ T1200] eth0: renamed from r1h1 [ 83.790062][ T1202] eth1: renamed from r1h2 [ 91.039935][ T1300] eth0: renamed from r1h1 [ 91.182053][ T1302] eth1: renamed from r1h2 [ 98.396612][ T1398] eth0: renamed from r1h1 [ 98.561467][ T1400] eth1: renamed from r1h2 [ 106.604104][ T1500] eth0: renamed from r1h1 [ 106.750191][ T1502] eth1: renamed from r1h2 [ 115.237288][ T1613] eth0: renamed from r1h1 [ 115.385988][ T1615] eth0: renamed from r2h1 [ 115.529046][ T1617] eth1: renamed from r1h2 [ 115.677365][ T1619] eth1: renamed from r2h2 [ 115.982244][ T1624] br0: port 1(eth0) entered blocking state [ 115.982486][ T1624] br0: port 1(eth0) entered disabled state [ 115.982684][ T1624] eth0: entered allmulticast mode [ 115.983619][ T1624] eth0: entered promiscuous mode [ 115.985198][ T39] br0: port 1(eth0) entered blocking state [ 115.985394][ T39] br0: port 1(eth0) entered forwarding state [ 116.049146][ T1625] br0: port 2(eth1) entered blocking state [ 116.049567][ T1625] br0: port 2(eth1) entered disabled state [ 116.049772][ T1625] eth1: entered allmulticast mode [ 116.051011][ T1625] eth1: entered promiscuous mode [ 116.052431][ T39] br0: port 2(eth1) entered blocking state [ 116.052620][ T39] br0: port 2(eth1) entered forwarding state [ 116.477734][ T1632] br0: port 1(eth0) entered blocking state [ 116.478046][ T1632] br0: port 1(eth0) entered disabled state [ 116.478261][ T1632] eth0: entered allmulticast mode [ 116.479283][ T1632] eth0: entered promiscuous mode [ 116.535571][ T1633] br0: port 2(eth1) entered blocking state [ 116.535922][ T1633] br0: port 2(eth1) entered disabled state [ 116.536128][ T1633] eth1: entered allmulticast mode [ 116.537318][ T1633] eth1: entered promiscuous mode [ 116.538611][ T39] br0: port 2(eth1) entered blocking state [ 116.538815][ T39] br0: port 2(eth1) entered forwarding state [ 117.186704][ T38] br0: port 1(eth0) entered blocking state [ 117.186923][ T38] br0: port 1(eth0) entered forwarding state [ 120.890161][ T11] eth1: left allmulticast mode [ 120.890355][ T11] eth1: left promiscuous mode [ 120.890609][ T11] br0: port 2(eth1) entered disabled state [ 120.891666][ T11] eth0: left allmulticast mode [ 120.891806][ T11] eth0: left promiscuous mode [ 120.892036][ T11] br0: port 1(eth0) entered disabled state [ 121.129678][ T11] eth1: left allmulticast mode [ 121.129872][ T11] eth1: left promiscuous mode [ 121.130124][ T11] br0: port 2(eth1) entered disabled state [ 121.131285][ T11] eth0: left allmulticast mode [ 121.131456][ T11] eth0: left promiscuous mode [ 121.131685][ T11] br0: port 1(eth0) entered disabled state [ 124.250085][ T1737] eth0: renamed from r1h1 [ 124.398230][ T1739] eth0: renamed from r2h1 [ 124.530059][ T1741] eth1: renamed from r1h2 [ 124.683632][ T1743] eth1: renamed from r2h2 [ 124.966328][ T1748] br0: port 1(eth0) entered blocking state [ 124.966587][ T1748] br0: port 1(eth0) entered disabled state [ 124.966795][ T1748] eth0: entered allmulticast mode [ 124.968051][ T1748] eth0: entered promiscuous mode [ 124.969824][ T513] br0: port 1(eth0) entered blocking state [ 124.970051][ T513] br0: port 1(eth0) entered forwarding state [ 125.040565][ T1749] br0: port 2(eth1) entered blocking state [ 125.040825][ T1749] br0: port 2(eth1) entered disabled state [ 125.041027][ T1749] eth1: entered allmulticast mode [ 125.043516][ T1749] eth1: entered promiscuous mode [ 125.044988][ T44] br0: port 2(eth1) entered blocking state [ 125.045216][ T44] br0: port 2(eth1) entered forwarding state [ 125.491987][ T1756] br0: port 1(eth0) entered blocking state [ 125.492558][ T1756] br0: port 1(eth0) entered disabled state [ 125.492762][ T1756] eth0: entered allmulticast mode [ 125.493792][ T1756] eth0: entered promiscuous mode [ 125.560974][ T1757] br0: port 2(eth1) entered blocking state [ 125.561305][ T1757] br0: port 2(eth1) entered disabled state [ 125.561515][ T1757] eth1: entered allmulticast mode [ 125.562534][ T1757] eth1: entered promiscuous mode [ 125.564142][ T44] br0: port 2(eth1) entered blocking state [ 125.564345][ T44] br0: port 2(eth1) entered forwarding state [ 126.211671][ T513] br0: port 1(eth0) entered blocking state [ 126.211894][ T513] br0: port 1(eth0) entered forwarding state [ 129.788035][ T11] eth1: left allmulticast mode [ 129.788258][ T11] eth1: left promiscuous mode [ 129.788535][ T11] br0: port 2(eth1) entered disabled state [ 129.789659][ T11] eth0: left allmulticast mode [ 129.789808][ T11] eth0: left promiscuous mode [ 129.790044][ T11] br0: port 1(eth0) entered disabled state [ 130.063963][ T11] eth1: left allmulticast mode [ 130.064142][ T11] eth1: left promiscuous mode [ 130.064399][ T11] br0: port 2(eth1) entered disabled state [ 130.065498][ T11] eth0: left allmulticast mode [ 130.065645][ T11] eth0: left promiscuous mode [ 130.065891][ T11] br0: port 1(eth0) entered disabled state