[ 13.299648][ T282] veth0: renamed from veth1 [ 14.442399][ T299] br0: port 1(swp1) entered blocking state [ 14.443113][ T299] br0: port 1(swp1) entered disabled state [ 14.443512][ T299] swp1: entered allmulticast mode [ 14.445590][ T299] swp1: entered promiscuous mode [ 14.448867][ T299] br0: port 1(swp1) entered blocking state [ 14.449609][ T299] br0: port 1(swp1) entered forwarding state [ 14.835819][ T301] br0: port 2(vx0) entered blocking state [ 14.836236][ T301] br0: port 2(vx0) entered disabled state [ 14.836672][ T301] vx0: entered allmulticast mode [ 14.838006][ T301] vx0: entered promiscuous mode [ 14.838925][ T301] br0: port 2(vx0) entered blocking state [ 14.839189][ T301] br0: port 2(vx0) entered forwarding state [ 16.096997][ T315] br0: port 1(swp1) entered blocking state [ 16.097561][ T315] br0: port 1(swp1) entered disabled state [ 16.097981][ T315] swp1: entered allmulticast mode [ 16.099752][ T315] swp1: entered promiscuous mode [ 16.101410][ T315] br0: port 1(swp1) entered blocking state [ 16.101731][ T315] br0: port 1(swp1) entered forwarding state [ 16.288531][ T317] br0: port 2(vx0) entered blocking state [ 16.288819][ T317] br0: port 2(vx0) entered disabled state [ 16.289012][ T317] vx0: entered allmulticast mode [ 16.290241][ T317] vx0: entered promiscuous mode [ 16.290717][ T317] br0: port 2(vx0) entered blocking state [ 16.290892][ T317] br0: port 2(vx0) entered forwarding state [ 22.146122][ T329] GACT probability NOT on [ 23.442892][ T40] br0: port 1(swp1) entered disabled state [ 24.412418][ T70] br0: port 1(swp1) entered blocking state [ 24.412707][ T70] br0: port 1(swp1) entered forwarding state [ 25.604495][ T70] br0: port 1(swp1) entered disabled state [ 26.576845][ T70] br0: port 1(swp1) entered blocking state [ 26.577139][ T70] br0: port 1(swp1) entered forwarding state [ 28.704784][ T45] br0: port 1(swp1) entered disabled state [ 29.784943][ T66] vx0: left allmulticast mode [ 29.785259][ T66] vx0: left promiscuous mode [ 29.785748][ T66] br0: port 2(vx0) entered disabled state [ 29.787973][ T66] swp1: left allmulticast mode [ 29.788155][ T66] swp1: left promiscuous mode [ 29.788443][ T66] br0: port 1(swp1) entered disabled state [ 30.108743][ T66] vx0: left allmulticast mode [ 30.108962][ T66] vx0: left promiscuous mode [ 30.109265][ T66] br0: port 2(vx0) entered disabled state [ 30.110521][ T66] swp1: left allmulticast mode [ 30.110703][ T66] swp1: left promiscuous mode [ 30.110971][ T66] br0: port 1(swp1) entered disabled state [ 30.269995][ T66] ================================================================== [ 30.270217][ T66] BUG: KASAN: slab-use-after-free in cleanup_net+0xa5d/0xb90 [ 30.270415][ T66] Read of size 8 at addr ffff8880092e80f8 by task kworker/u16:1/66 [ 30.270622][ T66] [ 30.270694][ T66] CPU: 0 UID: 0 PID: 66 Comm: kworker/u16:1 Not tainted 6.12.0-virtme #1 [ 30.270891][ T66] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 30.271060][ T66] Workqueue: netns cleanup_net [ 30.271196][ T66] Call Trace: [ 30.271292][ T66] [ 30.271359][ T66] dump_stack_lvl+0x82/0xd0 [ 30.271492][ T66] print_address_description.constprop.0+0x2c/0x3b0 [ 30.271650][ T66] ? cleanup_net+0xa5d/0xb90 [ 30.271781][ T66] print_report+0xb4/0x270 [ 30.271907][ T66] ? kasan_addr_to_slab+0x25/0x80 [ 30.272044][ T66] kasan_report+0xbd/0xf0 [ 30.272144][ T66] ? cleanup_net+0xa5d/0xb90 [ 30.272268][ T66] cleanup_net+0xa5d/0xb90 [ 30.272391][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 30.272523][ T66] ? __pfx_cleanup_net+0x10/0x10 [ 30.272646][ T66] ? trace_lock_acquire+0x148/0x1f0 [ 30.272785][ T66] ? lock_acquire+0x32/0xc0 [ 30.272921][ T66] ? process_one_work+0xe0b/0x16d0 [ 30.273051][ T66] process_one_work+0xe55/0x16d0 [ 30.273182][ T66] ? __pfx___lock_release+0x10/0x10 [ 30.273320][ T66] ? __pfx_process_one_work+0x10/0x10 [ 30.273454][ T66] ? assign_work+0x16c/0x240 [ 30.273591][ T66] worker_thread+0x58c/0xce0 [ 30.273727][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 30.273885][ T66] ? __pfx_worker_thread+0x10/0x10 [ 30.274022][ T66] ? __pfx_worker_thread+0x10/0x10 [ 30.274152][ T66] kthread+0x28a/0x350 [ 30.274251][ T66] ? __pfx_kthread+0x10/0x10 [ 30.274405][ T66] ret_from_fork+0x31/0x70 [ 30.274535][ T66] ? __pfx_kthread+0x10/0x10 [ 30.274675][ T66] ret_from_fork_asm+0x1a/0x30 [ 30.274818][ T66] [ 30.274914][ T66] [ 30.274981][ T66] Allocated by task 263: [ 30.275087][ T66] kasan_save_stack+0x24/0x50 [ 30.275230][ T66] kasan_save_track+0x14/0x30 [ 30.275366][ T66] __kasan_slab_alloc+0x59/0x70 [ 30.275492][ T66] kmem_cache_alloc_noprof+0x10b/0x350 [ 30.275625][ T66] copy_net_ns+0xc6/0x540 [ 30.275735][ T66] create_new_namespaces+0x35f/0x920 [ 30.275866][ T66] unshare_nsproxy_namespaces+0x8a/0x1b0 [ 30.275992][ T66] ksys_unshare+0x2c4/0x6e0 [ 30.276123][ T66] __x64_sys_unshare+0x31/0x40 [ 30.276255][ T66] do_syscall_64+0xc1/0x1d0 [ 30.276397][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.276569][ T66] [ 30.276637][ T66] Freed by task 66: [ 30.276745][ T66] kasan_save_stack+0x24/0x50 [ 30.276883][ T66] kasan_save_track+0x14/0x30 [ 30.277015][ T66] kasan_save_free_info+0x3b/0x60 [ 30.277166][ T66] __kasan_slab_free+0x38/0x50 [ 30.277301][ T66] kmem_cache_free+0xf8/0x330 [ 30.277428][ T66] cleanup_net+0x5a8/0xb90 [ 30.277554][ T66] process_one_work+0xe55/0x16d0 [ 30.277687][ T66] worker_thread+0x58c/0xce0 [ 30.277809][ T66] kthread+0x28a/0x350 [ 30.277919][ T66] ret_from_fork+0x31/0x70 [ 30.278043][ T66] ret_from_fork_asm+0x1a/0x30 [ 30.278170][ T66] [ 30.278243][ T66] Last potentially related work creation: [ 30.278371][ T66] kasan_save_stack+0x24/0x50 [ 30.278504][ T66] __kasan_record_aux_stack+0x8e/0xa0 [ 30.278631][ T66] insert_work+0x34/0x230 [ 30.278736][ T66] __queue_work+0x5fd/0xa40 [ 30.278859][ T66] queue_delayed_work_on+0x8c/0xa0 [ 30.278986][ T66] __inet_insert_ifa+0x751/0xb10 [ 30.279117][ T66] inet_rtm_newaddr+0x833/0xbd0 [ 30.279254][ T66] rtnetlink_rcv_msg+0x712/0xc10 [ 30.279383][ T66] netlink_rcv_skb+0x130/0x360 [ 30.279515][ T66] netlink_unicast+0x44b/0x710 [ 30.279639][ T66] netlink_sendmsg+0x723/0xbe0 [ 30.279767][ T66] ____sys_sendmsg+0x7ac/0xa10 [ 30.279907][ T66] ___sys_sendmsg+0xee/0x170 [ 30.280036][ T66] __sys_sendmsg+0x109/0x1a0 [ 30.280169][ T66] do_syscall_64+0xc1/0x1d0 [ 30.280299][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.280469][ T66] [ 30.280543][ T66] Second to last potentially related work creation: [ 30.280703][ T66] kasan_save_stack+0x24/0x50 [ 30.280829][ T66] __kasan_record_aux_stack+0x8e/0xa0 [ 30.280954][ T66] insert_work+0x34/0x230 [ 30.281061][ T66] __queue_work+0x5fd/0xa40 [ 30.281187][ T66] queue_delayed_work_on+0x8c/0xa0 [ 30.281314][ T66] __inet_insert_ifa+0x751/0xb10 [ 30.281451][ T66] inet_rtm_newaddr+0x833/0xbd0 [ 30.281578][ T66] rtnetlink_rcv_msg+0x712/0xc10 [ 30.281714][ T66] netlink_rcv_skb+0x130/0x360 [ 30.281843][ T66] netlink_unicast+0x44b/0x710 [ 30.281974][ T66] netlink_sendmsg+0x723/0xbe0 [ 30.282103][ T66] ____sys_sendmsg+0x7ac/0xa10 [ 30.282237][ T66] ___sys_sendmsg+0xee/0x170 [ 30.282361][ T66] __sys_sendmsg+0x109/0x1a0 [ 30.282493][ T66] do_syscall_64+0xc1/0x1d0 [ 30.282619][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.282783][ T66] [ 30.282846][ T66] The buggy address belongs to the object at ffff8880092e8040 [ 30.282846][ T66] which belongs to the cache net_namespace of size 6528 [ 30.283190][ T66] The buggy address is located 184 bytes inside of [ 30.283190][ T66] freed 6528-byte region [ffff8880092e8040, ffff8880092e99c0) [ 30.283506][ T66] [ 30.283571][ T66] The buggy address belongs to the physical page: [ 30.283729][ T66] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880092eb640 pfn:0x92e8 [ 30.283986][ T66] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 30.284192][ T66] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 30.284356][ T66] page_type: f5(slab) [ 30.284454][ T66] raw: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 30.284677][ T66] raw: ffff8880092eb640 0000000000040002 00000001f5000000 0000000000000000 [ 30.284903][ T66] head: 0080000000000240 ffff888001975240 ffff88800197a088 ffff88800197a088 [ 30.285133][ T66] head: ffff8880092eb640 0000000000040002 00000001f5000000 0000000000000000 [ 30.285355][ T66] head: 0080000000000003 ffffea000024ba01 ffffffffffffffff 0000000000000000 [ 30.285574][ T66] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 30.285798][ T66] page dumped because: kasan: bad access detected [ 30.285951][ T66] [ 30.286015][ T66] Memory state around the buggy address: [ 30.286136][ T66] ffff8880092e7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 30.286315][ T66] ffff8880092e8000: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 30.286500][ T66] >ffff8880092e8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.286685][ T66] ^ [ 30.286922][ T66] ffff8880092e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.287113][ T66] ffff8880092e8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.287288][ T66] ================================================================== [ 30.287490][ T66] Disabling lock debugging due to kernel taint [ 31.816268][ T486] veth0: renamed from veth1 [ 32.459552][ T503] br0: port 1(swp1) entered blocking state [ 32.459808][ T503] br0: port 1(swp1) entered disabled state [ 32.460022][ T503] swp1: entered allmulticast mode [ 32.461008][ T503] swp1: entered promiscuous mode [ 32.462003][ T503] br0: port 1(swp1) entered blocking state [ 32.462200][ T503] br0: port 1(swp1) entered forwarding state [ 32.575094][ T505] br0: port 2(vx0) entered blocking state [ 32.575396][ T505] br0: port 2(vx0) entered disabled state [ 32.575570][ T505] vx0: entered allmulticast mode [ 32.576513][ T505] vx0: entered promiscuous mode [ 32.576982][ T505] br0: port 2(vx0) entered blocking state [ 32.577148][ T505] br0: port 2(vx0) entered forwarding state [ 33.299519][ T518] br0: port 1(swp1) entered blocking state [ 33.299729][ T518] br0: port 1(swp1) entered disabled state [ 33.299917][ T518] swp1: entered allmulticast mode [ 33.300838][ T518] swp1: entered promiscuous mode [ 33.301781][ T518] br0: port 1(swp1) entered blocking state [ 33.301952][ T518] br0: port 1(swp1) entered forwarding state [ 33.412421][ T520] br0: port 2(vx0) entered blocking state [ 33.412604][ T520] br0: port 2(vx0) entered disabled state [ 33.412758][ T520] vx0: entered allmulticast mode [ 33.413719][ T520] vx0: entered promiscuous mode [ 33.414170][ T520] br0: port 2(vx0) entered blocking state [ 33.414316][ T520] br0: port 2(vx0) entered forwarding state [ 40.550448][ T40] br0: port 1(swp1) entered disabled state [ 41.897358][ T45] br0: port 1(swp1) entered blocking state [ 41.897623][ T45] br0: port 1(swp1) entered forwarding state [ 42.901509][ T40] br0: port 1(swp1) entered disabled state [ 44.101528][ T70] br0: port 1(swp1) entered blocking state [ 44.101760][ T70] br0: port 1(swp1) entered forwarding state [ 46.525728][ T70] br0: port 1(swp1) entered disabled state [ 47.844037][ T66] vx0: left allmulticast mode [ 47.844251][ T66] vx0: left promiscuous mode [ 47.844548][ T66] br0: port 2(vx0) entered disabled state [ 47.845312][ T66] swp1: left allmulticast mode [ 47.845473][ T66] swp1: left promiscuous mode [ 47.845721][ T66] br0: port 1(swp1) entered disabled state [ 48.078150][ T66] vx0: left allmulticast mode [ 48.078339][ T66] vx0: left promiscuous mode [ 48.078595][ T66] br0: port 2(vx0) entered disabled state [ 48.079310][ T66] swp1: left allmulticast mode [ 48.079450][ T66] swp1: left promiscuous mode [ 48.079683][ T66] br0: port 1(swp1) entered disabled state [ 49.894223][ T744] veth0: renamed from veth1 [ 50.504771][ T761] br0: port 1(swp1) entered blocking state [ 50.505102][ T761] br0: port 1(swp1) entered disabled state [ 50.505330][ T761] swp1: entered allmulticast mode [ 50.506286][ T761] swp1: entered promiscuous mode [ 50.507313][ T761] br0: port 1(swp1) entered blocking state [ 50.507517][ T761] br0: port 1(swp1) entered forwarding state [ 50.628976][ T763] br0: port 2(vx0) entered blocking state [ 50.629265][ T763] br0: port 2(vx0) entered disabled state [ 50.629807][ T763] vx0: entered allmulticast mode [ 50.630727][ T763] vx0: entered promiscuous mode [ 50.631200][ T763] br0: port 2(vx0) entered blocking state [ 50.631367][ T763] br0: port 2(vx0) entered forwarding state [ 51.384834][ T776] br0: port 1(swp1) entered blocking state [ 51.385093][ T776] br0: port 1(swp1) entered disabled state [ 51.385356][ T776] swp1: entered allmulticast mode [ 51.386307][ T776] swp1: entered promiscuous mode [ 51.387283][ T776] br0: port 1(swp1) entered blocking state [ 51.387501][ T776] br0: port 1(swp1) entered forwarding state [ 51.503522][ T778] br0: port 2(vx0) entered blocking state [ 51.503765][ T778] br0: port 2(vx0) entered disabled state [ 51.503940][ T778] vx0: entered allmulticast mode [ 51.504891][ T778] vx0: entered promiscuous mode [ 51.505311][ T778] br0: port 2(vx0) entered blocking state [ 51.505491][ T778] br0: port 2(vx0) entered forwarding state [ 58.028481][ T70] br0: port 1(swp1) entered disabled state [ 63.928052][ T66] vx0: left allmulticast mode [ 63.928349][ T66] vx0: left promiscuous mode [ 63.928663][ T66] br0: port 2(vx0) entered disabled state [ 63.932563][ T66] swp1: left allmulticast mode [ 63.932713][ T66] swp1: left promiscuous mode [ 63.932947][ T66] br0: port 1(swp1) entered disabled state [ 64.209682][ T66] vx0: left allmulticast mode [ 64.209874][ T66] vx0: left promiscuous mode [ 64.210135][ T66] br0: port 2(vx0) entered disabled state [ 64.210945][ T66] swp1: left allmulticast mode [ 64.211098][ T66] swp1: left promiscuous mode [ 64.211345][ T66] br0: port 1(swp1) entered disabled state [ 65.970559][ T978] veth0: renamed from veth1 [ 66.657979][ T994] br0: port 1(swp1) entered blocking state [ 66.658344][ T994] br0: port 1(swp1) entered disabled state [ 66.658599][ T994] swp1: entered allmulticast mode [ 66.659586][ T994] swp1: entered promiscuous mode [ 66.660640][ T994] br0: port 1(swp1) entered blocking state [ 66.660840][ T994] br0: port 1(swp1) entered forwarding state [ 66.793189][ T996] br0: port 2(vx0) entered blocking state [ 66.793808][ T996] br0: port 2(vx0) entered disabled state [ 66.793975][ T996] vx0: entered allmulticast mode [ 66.794958][ T996] vx0: entered promiscuous mode [ 66.795444][ T996] br0: port 2(vx0) entered blocking state [ 66.795587][ T996] br0: port 2(vx0) entered forwarding state [ 67.587112][ T1009] br0: port 1(swp1) entered blocking state [ 67.587396][ T1009] br0: port 1(swp1) entered disabled state [ 67.587621][ T1009] swp1: entered allmulticast mode [ 67.588596][ T1009] swp1: entered promiscuous mode [ 67.590094][ T1009] br0: port 1(swp1) entered blocking state [ 67.590309][ T1009] br0: port 1(swp1) entered forwarding state [ 67.711832][ T1011] br0: port 2(vx0) entered blocking state [ 67.712059][ T1011] br0: port 2(vx0) entered disabled state [ 67.712227][ T1011] vx0: entered allmulticast mode [ 67.713606][ T1011] vx0: entered promiscuous mode [ 67.714002][ T1011] br0: port 2(vx0) entered blocking state [ 67.714161][ T1011] br0: port 2(vx0) entered forwarding state [ 73.928198][ T40] br0: port 1(swp1) entered disabled state [ 74.982647][ T70] br0: port 1(swp1) entered disabled state [ 81.493513][ T66] vx0: left allmulticast mode [ 81.493719][ T66] vx0: left promiscuous mode [ 81.493978][ T66] br0: port 2(vx0) entered disabled state [ 81.494792][ T66] swp1: left allmulticast mode [ 81.494930][ T66] swp1: left promiscuous mode [ 81.495162][ T66] br0: port 1(swp1) entered disabled state [ 81.745149][ T66] vx0: left allmulticast mode [ 81.745343][ T66] vx0: left promiscuous mode [ 81.745601][ T66] br0: port 2(vx0) entered disabled state [ 81.746535][ T66] swp1: left allmulticast mode [ 81.746676][ T66] swp1: left promiscuous mode [ 81.746915][ T66] br0: port 1(swp1) entered disabled state [ 83.345233][ T1136] veth0: renamed from veth1 [ 83.939652][ T1154] br0: port 1(swp1) entered blocking state [ 83.939901][ T1154] br0: port 1(swp1) entered disabled state [ 83.940113][ T1154] swp1: entered allmulticast mode [ 83.941078][ T1154] swp1: entered promiscuous mode [ 83.948191][ T1154] br0: port 1(swp1) entered blocking state [ 83.948429][ T1154] br0: port 1(swp1) entered forwarding state [ 84.065734][ T1156] br0: port 2(vx0) entered blocking state [ 84.065921][ T1156] br0: port 2(vx0) entered disabled state [ 84.066085][ T1156] vx0: entered allmulticast mode [ 84.067029][ T1156] vx0: entered promiscuous mode [ 84.067504][ T1156] br0: port 2(vx0) entered blocking state [ 84.067648][ T1156] br0: port 2(vx0) entered forwarding state [ 84.794158][ T1169] br0: port 1(swp1) entered blocking state [ 84.794384][ T1169] br0: port 1(swp1) entered disabled state [ 84.794600][ T1169] swp1: entered allmulticast mode [ 84.795515][ T1169] swp1: entered promiscuous mode [ 84.796473][ T1169] br0: port 1(swp1) entered blocking state [ 84.796654][ T1169] br0: port 1(swp1) entered forwarding state [ 84.911930][ T1171] br0: port 2(vx0) entered blocking state [ 84.912115][ T1171] br0: port 2(vx0) entered disabled state [ 84.912274][ T1171] vx0: entered allmulticast mode [ 84.913579][ T1171] vx0: entered promiscuous mode [ 84.914045][ T1171] br0: port 2(vx0) entered blocking state [ 84.914186][ T1171] br0: port 2(vx0) entered forwarding state [ 90.553438][ T40] br0: port 1(swp1) entered disabled state [ 120.794141][ T66] vx0: left allmulticast mode [ 120.794346][ T66] vx0: left promiscuous mode [ 120.794610][ T66] br0: port 2(vx0) entered disabled state [ 120.795471][ T66] swp1: left allmulticast mode [ 120.795620][ T66] swp1: left promiscuous mode [ 120.795857][ T66] br0: port 1(swp1) entered disabled state [ 121.050975][ T66] vx0: left allmulticast mode [ 121.051230][ T66] vx0: left promiscuous mode [ 121.051591][ T66] br0: port 2(vx0) entered disabled state [ 121.052534][ T66] swp1: left allmulticast mode [ 121.052738][ T66] swp1: left promiscuous mode [ 121.053030][ T66] br0: port 1(swp1) entered disabled state