[   43.502296][  T694] IPVS: Registered protocols (TCP)
[   43.503674][  T694] IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
[   43.505725][  T694] IPVS: ipvs loaded.
[   45.915883][  T718] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[   46.121091][  T720] br0: port 1(veth01) entered blocking state
[   46.121599][  T720] br0: port 1(veth01) entered disabled state
[   46.122014][  T720] veth01: entered allmulticast mode
[   46.124153][  T720] veth01: entered promiscuous mode
[   46.303798][  T721] br0: port 2(veth02) entered blocking state
[   46.304195][  T721] br0: port 2(veth02) entered disabled state
[   46.304511][  T721] veth02: entered allmulticast mode
[   46.306731][  T721] veth02: entered promiscuous mode
[   46.867070][   T37] br0: port 1(veth01) entered blocking state
[   46.867653][   T37] br0: port 1(veth01) entered forwarding state
[   47.949033][   T40] br0: port 2(veth02) entered blocking state
[   47.949645][   T40] br0: port 2(veth02) entered forwarding state
[   49.907085][  T737] IPVS: [rr] scheduler registered.
[   49.921507][   T59] IPVS: starting estimator thread 0...
[   49.985639][  T738] IPVS: using max 44 ests per chain, 105600 per kthread
[   51.782754][   T11] veth02: left allmulticast mode
[   51.783067][   T11] veth02: left promiscuous mode
[   51.783415][   T11] br0: port 2(veth02) entered disabled state
[   51.786302][   T11] veth01: left allmulticast mode
[   51.786550][   T11] veth01: left promiscuous mode
[   51.786855][   T11] br0: port 1(veth01) entered disabled state
[   52.309864][   T11] IPVS: stop unused estimator thread 0...
[   52.325266][   T11] ==================================================================
[   52.325503][   T11] BUG: KASAN: slab-use-after-free in cleanup_net+0x932/0xa40
[   52.325701][   T11] Read of size 8 at addr ffff88800b831c38 by task kworker/u16:0/11
[   52.325917][   T11] 
[   52.325984][   T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u16:0 Not tainted 6.12.0-virtme #1
[   52.326185][   T11] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   52.326351][   T11] Workqueue: netns cleanup_net
[   52.326504][   T11] Call Trace:
[   52.326605][   T11]  <TASK>
[   52.326681][   T11]  dump_stack_lvl+0x82/0xd0
[   52.326813][   T11]  print_address_description.constprop.0+0x2c/0x3b0
[   52.326981][   T11]  ? cleanup_net+0x932/0xa40
[   52.327131][   T11]  print_report+0xb4/0x270
[   52.327262][   T11]  ? kasan_addr_to_slab+0x25/0x80
[   52.327405][   T11]  kasan_report+0xbd/0xf0
[   52.327502][   T11]  ? cleanup_net+0x932/0xa40
[   52.327639][   T11]  cleanup_net+0x932/0xa40
[   52.327770][   T11]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   52.327910][   T11]  ? __pfx_cleanup_net+0x10/0x10
[   52.328035][   T11]  ? trace_lock_acquire+0x148/0x1f0
[   52.328164][   T11]  ? lock_acquire+0x32/0xc0
[   52.328299][   T11]  ? process_one_work+0xe0b/0x16d0
[   52.328429][   T11]  process_one_work+0xe55/0x16d0
[   52.328563][   T11]  ? __pfx___lock_release+0x10/0x10
[   52.328693][   T11]  ? __pfx_process_one_work+0x10/0x10
[   52.328824][   T11]  ? assign_work+0x16c/0x240
[   52.328970][   T11]  worker_thread+0x58c/0xce0
[   52.329104][   T11]  ? __pfx_worker_thread+0x10/0x10
[   52.329230][   T11]  kthread+0x28a/0x350
[   52.329346][   T11]  ? __pfx_kthread+0x10/0x10
[   52.329473][   T11]  ret_from_fork+0x31/0x70
[   52.329621][   T11]  ? __pfx_kthread+0x10/0x10
[   52.329755][   T11]  ret_from_fork_asm+0x1a/0x30
[   52.329918][   T11]  </TASK>
[   52.330019][   T11] 
[   52.330093][   T11] Allocated by task 702:
[   52.330190][   T11]  kasan_save_stack+0x24/0x50
[   52.330324][   T11]  kasan_save_track+0x14/0x30
[   52.330455][   T11]  __kasan_slab_alloc+0x59/0x70
[   52.330579][   T11]  kmem_cache_alloc_noprof+0x10b/0x350
[   52.330711][   T11]  copy_net_ns+0xc6/0x340
[   52.330806][   T11]  create_new_namespaces+0x35f/0x920
[   52.330937][   T11]  unshare_nsproxy_namespaces+0x8d/0x130
[   52.331063][   T11]  ksys_unshare+0x2a9/0x660
[   52.331190][   T11]  __x64_sys_unshare+0x31/0x40
[   52.331327][   T11]  do_syscall_64+0xc1/0x1d0
[   52.331456][   T11]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.331618][   T11] 
[   52.331685][   T11] Freed by task 11:
[   52.331784][   T11]  kasan_save_stack+0x24/0x50
[   52.331917][   T11]  kasan_save_track+0x14/0x30
[   52.332062][   T11]  kasan_save_free_info+0x3b/0x60
[   52.332203][   T11]  __kasan_slab_free+0x38/0x50
[   52.332331][   T11]  kmem_cache_free+0xf8/0x330
[   52.332457][   T11]  cleanup_net+0x5a8/0xa40
[   52.332582][   T11]  process_one_work+0xe55/0x16d0
[   52.332708][   T11]  worker_thread+0x58c/0xce0
[   52.332837][   T11]  kthread+0x28a/0x350
[   52.332933][   T11]  ret_from_fork+0x31/0x70
[   52.333063][   T11]  ret_from_fork_asm+0x1a/0x30
[   52.333190][   T11] 
[   52.333256][   T11] Last potentially related work creation:
[   52.333391][   T11]  kasan_save_stack+0x24/0x50
[   52.333522][   T11]  __kasan_record_aux_stack+0x8e/0xa0
[   52.333649][   T11]  insert_work+0x34/0x230
[   52.333744][   T11]  __queue_work+0x5fd/0xa40
[   52.333871][   T11]  queue_delayed_work_on+0x8c/0xa0
[   52.334002][   T11]  __inet_insert_ifa+0x751/0xb10
[   52.334141][   T11]  inet_rtm_newaddr+0x833/0xbd0
[   52.334266][   T11]  rtnetlink_rcv_msg+0x712/0xc10
[   52.334401][   T11]  netlink_rcv_skb+0x130/0x360
[   52.334547][   T11]  netlink_unicast+0x44b/0x710
[   52.334672][   T11]  netlink_sendmsg+0x723/0xbe0
[   52.334804][   T11]  ____sys_sendmsg+0x7ac/0xa10
[   52.334935][   T11]  ___sys_sendmsg+0xee/0x170
[   52.335064][   T11]  __sys_sendmsg+0x109/0x1a0
[   52.335194][   T11]  do_syscall_64+0xc1/0x1d0
[   52.335321][   T11]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.335492][   T11] 
[   52.335557][   T11] Second to last potentially related work creation:
[   52.335721][   T11]  kasan_save_stack+0x24/0x50
[   52.335853][   T11]  __kasan_record_aux_stack+0x8e/0xa0
[   52.335982][   T11]  insert_work+0x34/0x230
[   52.336081][   T11]  __queue_work+0x5fd/0xa40
[   52.336208][   T11]  queue_delayed_work_on+0x8c/0xa0
[   52.336342][   T11]  __inet_insert_ifa+0x751/0xb10
[   52.336471][   T11]  inetdev_event+0xb18/0xcf0
[   52.336596][   T11]  notifier_call_chain+0xcd/0x150
[   52.336720][   T11]  __dev_notify_flags+0xe6/0x250
[   52.336845][   T11]  dev_change_flags+0xec/0x160
[   52.336971][   T11]  do_setlink.constprop.0+0x79d/0x2300
[   52.337093][   T11]  rtnl_newlink+0x6de/0xa80
[   52.337218][   T11]  rtnetlink_rcv_msg+0x712/0xc10
[   52.337347][   T11]  netlink_rcv_skb+0x130/0x360
[   52.337482][   T11]  netlink_unicast+0x44b/0x710
[   52.337607][   T11]  netlink_sendmsg+0x723/0xbe0
[   52.337735][   T11]  ____sys_sendmsg+0x7ac/0xa10
[   52.337861][   T11]  ___sys_sendmsg+0xee/0x170
[   52.337991][   T11]  __sys_sendmsg+0x109/0x1a0
[   52.338119][   T11]  do_syscall_64+0xc1/0x1d0
[   52.338249][   T11]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.338413][   T11] 
[   52.338478][   T11] The buggy address belongs to the object at ffff88800b831b80
[   52.338478][   T11]  which belongs to the cache net_namespace of size 6592
[   52.338811][   T11] The buggy address is located 184 bytes inside of
[   52.338811][   T11]  freed 6592-byte region [ffff88800b831b80, ffff88800b833540)
[   52.339116][   T11] 
[   52.339185][   T11] The buggy address belongs to the physical page:
[   52.339336][   T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb830
[   52.339560][   T11] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   52.339753][   T11] flags: 0x80000000000040(head|node=0|zone=1)
[   52.339914][   T11] page_type: f5(slab)
[   52.340015][   T11] raw: 0080000000000040 ffff888001963240 ffff8880019680a8 ffff8880019680a8
[   52.340247][   T11] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[   52.340470][   T11] head: 0080000000000040 ffff888001963240 ffff8880019680a8 ffff8880019680a8
[   52.340696][   T11] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[   52.340921][   T11] head: 0080000000000003 ffffea00002e0c01 ffffffffffffffff 0000000000000000
[   52.341217][   T11] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[   52.341438][   T11] page dumped because: kasan: bad access detected
[   52.341660][   T11] 
[   52.341723][   T11] Memory state around the buggy address:
[   52.341843][   T11]  ffff88800b831b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.342026][   T11]  ffff88800b831b80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.342291][   T11] >ffff88800b831c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.342472][   T11]                                         ^
[   52.342621][   T11]  ffff88800b831c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.342868][   T11]  ffff88800b831d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   52.343056][   T11] ==================================================================
[   52.343294][   T11] Disabling lock debugging due to kernel taint
[   54.697912][  T797] br0: port 1(veth01) entered blocking state
[   54.698171][  T797] br0: port 1(veth01) entered disabled state
[   54.698415][  T797] veth01: entered allmulticast mode
[   54.699995][  T797] veth01: entered promiscuous mode
[   54.829762][  T798] br0: port 2(veth02) entered blocking state
[   54.830028][  T798] br0: port 2(veth02) entered disabled state
[   54.830270][  T798] veth02: entered allmulticast mode
[   54.831805][  T798] veth02: entered promiscuous mode
[   55.224992][   T40] br0: port 1(veth01) entered blocking state
[   55.225253][   T40] br0: port 1(veth01) entered forwarding state
[   56.000512][  T150] br0: port 2(veth02) entered blocking state
[   56.000764][  T150] br0: port 2(veth02) entered forwarding state
[   57.564110][   T30] IPVS: starting estimator thread 0...
[   57.626607][  T814] IPVS: using max 94 ests per chain, 225600 per kthread
[   57.944822][  T817] br0: port 2(veth02) entered disabled state
[   58.063813][  T817] veth02 (unregistering): left allmulticast mode
[   58.064063][  T817] veth02 (unregistering): left promiscuous mode
[   58.064259][  T817] br0: port 2(veth02) entered disabled state
[   58.820202][   T11] veth01: left allmulticast mode
[   58.820448][   T11] veth01: left promiscuous mode
[   58.820765][   T11] br0: port 1(veth01) entered disabled state
[   59.202601][   T11] IPVS: stop unused estimator thread 0...
[   61.536024][  T870] br0: port 1(veth01) entered blocking state
[   61.536254][  T870] br0: port 1(veth01) entered disabled state
[   61.536477][  T870] veth01: entered allmulticast mode
[   61.537946][  T870] veth01: entered promiscuous mode
[   61.653491][  T871] br0: port 2(veth02) entered blocking state
[   61.653833][  T871] br0: port 2(veth02) entered disabled state
[   61.654055][  T871] veth02: entered allmulticast mode
[   61.655513][  T871] veth02: entered promiscuous mode
[   62.042841][   T40] br0: port 1(veth01) entered blocking state
[   62.043072][   T40] br0: port 1(veth01) entered forwarding state
[   62.814492][  T150] br0: port 2(veth02) entered blocking state
[   62.814724][  T150] br0: port 2(veth02) entered forwarding state
[   64.315956][  T885] ipip: IPv4 and MPLS over IPv4 tunneling driver
[   64.884644][   T30] IPVS: starting estimator thread 0...
[   64.948582][  T894] IPVS: using max 93 ests per chain, 223200 per kthread
[   66.687016][   T11] veth02: left allmulticast mode
[   66.687319][   T11] veth02: left promiscuous mode
[   66.687740][   T11] br0: port 2(veth02) entered disabled state
[   66.689296][   T11] veth01: left allmulticast mode
[   66.689620][   T11] veth01: left promiscuous mode
[   66.690024][   T11] br0: port 1(veth01) entered disabled state
[   67.110976][   T11] IPVS: stop unused estimator thread 0...