[ 3.598430] ------------[ cut here ]------------
[ 3.598515] refcount_t: underflow; use-after-free.
[ 3.598586] WARNING: CPU: 0 PID: 12 at lib/refcount.c:28 refcount_warn_saturate+0xbc/0x110
[ 3.598674] Modules linked in:
[ 3.598720] CPU: 0 UID: 0 PID: 12 Comm: kworker/u16:0 Not tainted 6.18.0-rc4-virtme #1 PREEMPT(voluntary)
[ 3.598831] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 3.598895] Workqueue: netns cleanup_net
[ 3.598944] RIP: 0010:refcount_warn_saturate+0xbc/0x110
[ 3.599001] Code: 8e e8 e8 54 ba ff 90 0f 0b 90 90 c3 80 3d 00 e6 2b 01 00 75 89 c6 05 f7 e5 2b 01 01 90 48 c7 c7 f8 48 95 8e e8 c5 54 ba ff 90 <0f> 0b 90 90 c3 80 3d db e5 2b 01 00 0f 85 62 ff ff ff c6 05 ce e5
[ 3.599157] RSP: 0018:ffffb35380067d50 EFLAGS: 00010286
[ 3.599210] RAX: 0000000000000000 RBX: ffffb35380067d60 RCX: 00000000ffffdfff
[ 3.599281] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000001
[ 3.599366] RBP: ffffb35380067858 R08: ffffffff8f15ba28 R09: 00000000ffffdfff
[ 3.599441] R10: ffffffff8f07ba40 R11: ffffffff8f12ba40 R12: dead000000000122
[ 3.599513] R13: 00000000fffb79ab R14: 0000000000000001 R15: ffff920685c7a000
[ 3.599595] FS: 0000000000000000(0000) GS:ffff92072f391000(0000) knlGS:0000000000000000
[ 3.599671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3.599734] CR2: 00007ffdef039fcc CR3: 0000000004514006 CR4: 0000000000772ef0
[ 3.599803] PKRU: 55555554
[ 3.599833] Call Trace:
[ 3.599860]
[ 3.599887] netdev_run_todo+0x21a/0x550
[ 3.599932] ops_undo_list+0x1e3/0x1f0
[ 3.599980] cleanup_net+0x1b7/0x300
[ 3.600020] process_one_work+0x162/0x380
[ 3.600068] worker_thread+0x299/0x3c0
[ 3.600111] ? rescuer_thread+0x4c0/0x4c0
[ 3.600151] kthread+0x101/0x1f0
[ 3.600194] ? kthreads_online_cpu+0x110/0x110
[ 3.600241] ? kthreads_online_cpu+0x110/0x110
[ 3.600296] ret_from_fork+0x11c/0x140
[ 3.600359] ? kthreads_online_cpu+0x110/0x110
[ 3.600411] ret_from_fork_asm+0x11/0x20
[ 3.600455]
[ 3.600483] ---[ end trace 0000000000000000 ]---
[ 3.943415] GACT probability NOT on
[ 3.944738] tc (296) used greatest stack depth: 11840 bytes left
[ 3.979773] drop_monitor: Initializing network drop monitor service
[ 14.832460] ------------[ cut here ]------------
[ 14.832669] kernel BUG at net/core/net-sysfs.c:2246!
[ 14.832737] Oops: invalid opcode: 0000 [#1] SMP
[ 14.832789] CPU: 2 UID: 0 PID: 320 Comm: echo Tainted: G W 6.18.0-rc4-virtme #1 PREEMPT(voluntary)
[ 14.832875] Tainted: [W]=WARN
[ 14.832907] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 14.832945] RIP: 0010:netdev_release+0x2d/0x30
[ 14.832987] Code: fa 0f 1f 44 00 00 80 7f d8 04 75 1d 55 48 8d af a8 fa ff ff 48 8b bf e0 fb ff ff e8 ed d7 a4 ff 48 89 ef 5d e9 a4 de a4 ff 90 <0f> 0b 90 f3 0f 1e fa 0f 1f 44 00 00 55 48 89 f5 48 8d 97 c8 fb ff
[ 14.833106] RSP: 0018:ffffb35380293bf0 EFLAGS: 00010297
[ 14.833144] RAX: ffffffff8e351ca0 RBX: 00000000ffffffff RCX: 0000000000000002
[ 14.833196] RDX: 0000000000000006 RSI: ffffffff8e158ea4 RDI: ffff920683368558
[ 14.833254] RBP: ffff920683368558 R08: 0000000000000010 R09: 000000000000013d
[ 14.833305] R10: 0000000000000400 R11: 0000000000000140 R12: ffff920682e31600
[ 14.833362] R13: ffffffff8e6b2ea0 R14: ffff920681bf4480 R15: ffff920683368000
[ 14.833419] FS: 00007fed3556ab80(0000) GS:ffff92072f491000(0000) knlGS:0000000000000000
[ 14.833482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 14.833526] CR2: 000055a202d172f8 CR3: 0000000004456006 CR4: 0000000000772ef0
[ 14.833580] PKRU: 55555554
[ 14.833599] Call Trace:
[ 14.833624]
[ 14.833646] device_release+0x35/0x90
[ 14.833685] kobject_put+0x64/0xc0
[ 14.833718] netdev_run_todo+0x21a/0x550
[ 14.833757] nsim_destroy+0x95/0x180 [netdevsim]
[ 14.833808] __nsim_dev_port_del+0x47/0x70 [netdevsim]
[ 14.833848] nsim_dev_reload_destroy+0x5b/0x120 [netdevsim]
[ 14.833885] nsim_drv_remove+0x2f/0xb0 [netdevsim]
[ 14.833928] device_release_driver_internal+0x193/0x200
[ 14.833965] bus_remove_device+0xc1/0x100
[ 14.833993] device_del+0x15f/0x480
[ 14.834022] device_unregister+0x12/0x30
[ 14.834052] del_device_store+0x117/0x1a0 [netdevsim]
[ 14.834093] kernfs_fop_write_iter+0x12b/0x1c0
[ 14.834134] vfs_write+0x33a/0x470
[ 14.834170] ksys_write+0x65/0xe0
[ 14.834201] do_syscall_64+0xa4/0xfd0
[ 14.834233] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 14.834270] RIP: 0033:0x7fed3566b257
[ 14.834299] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24
[ 14.834410] RSP: 002b:00007fff10568228 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 14.834487] RAX: ffffffffffffffda RBX: 00007fed35767780 RCX: 00007fed3566b257
[ 14.834533] RDX: 0000000000000005 RSI: 000055a202d162f0 RDI: 0000000000000001
[ 14.834590] RBP: 0000000000000005 R08: 0000000000000004 R09: 0000000000000077
[ 14.834642] R10: 0000000000000063 R11: 0000000000000246 R12: 0000000000000005
[ 14.834693] R13: 000055a202d162f0 R14: 0000000000000005 R15: 00007fed357629c0
[ 14.834747]
[ 14.834766] Modules linked in: drop_monitor act_gact cls_flower sch_ingress netdevsim psample
[ 14.834890] ---[ end trace 0000000000000000 ]---
[ 14.834948] RIP: 0010:netdev_release+0x2d/0x30
[ 14.835007] Code: fa 0f 1f 44 00 00 80 7f d8 04 75 1d 55 48 8d af a8 fa ff ff 48 8b bf e0 fb ff ff e8 ed d7 a4 ff 48 89 ef 5d e9 a4 de a4 ff 90 <0f> 0b 90 f3 0f 1e fa 0f 1f 44 00 00 55 48 89 f5 48 8d 97 c8 fb ff
[ 14.835148] RSP: 0018:ffffb35380293bf0 EFLAGS: 00010297
[ 14.835210] RAX: ffffffff8e351ca0 RBX: 00000000ffffffff RCX: 0000000000000002
[ 14.835281] RDX: 0000000000000006 RSI: ffffffff8e158ea4 RDI: ffff920683368558
[ 14.835362] RBP: ffff920683368558 R08: 0000000000000010 R09: 000000000000013d
[ 14.835439] R10: 0000000000000400 R11: 0000000000000140 R12: ffff920682e31600
[ 14.835519] R13: ffffffff8e6b2ea0 R14: ffff920681bf4480 R15: ffff920683368000
[ 14.835591] FS: 00007fed3556ab80(0000) GS:ffff92072f491000(0000) knlGS:0000000000000000
[ 14.835663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 14.835732] CR2: 000055a202d172f8 CR3: 0000000004456006 CR4: 0000000000772ef0
[ 14.835828] PKRU: 55555554
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr