[ 10.655067][ T262] ip (262) used greatest stack depth: 23912 bytes left
[ 12.956518][ T11] ==================================================================
[ 12.956831][ T11] BUG: KASAN: use-after-free in page_pool_item_uninit+0x100/0x130
[ 12.957043][ T11] Read of size 8 at addr ffff88800b308008 by task kworker/u16:0/11
[ 12.957245][ T11]
[ 12.957318][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u16:0 Not tainted 6.13.0-rc5-virtme #1
[ 12.957564][ T11] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 12.957735][ T11] Workqueue: netns cleanup_net
[ 12.957882][ T11] Call Trace:
[ 12.957988][ T11]
[ 12.958072][ T11] dump_stack_lvl+0x82/0xd0
[ 12.958218][ T11] print_address_description.constprop.0+0x2c/0x3b0
[ 12.958396][ T11] ? page_pool_item_uninit+0x100/0x130
[ 12.958542][ T11] print_report+0xb4/0x270
[ 12.958687][ T11] ? kasan_addr_to_slab+0x25/0x80
[ 12.958827][ T11] kasan_report+0xbd/0xf0
[ 12.958933][ T11] ? page_pool_item_uninit+0x100/0x130
[ 12.959074][ T11] page_pool_item_uninit+0x100/0x130
[ 12.959213][ T11] page_pool_release+0x44a/0x5b0
[ 12.959350][ T11] ? __folio_put+0x1a0/0x280
[ 12.959490][ T11] ? __pfx_page_pool_release+0x10/0x10
[ 12.959632][ T11] ? __page_pool_return_page+0x27c/0x3c0
[ 12.959776][ T11] page_pool_destroy+0x11e/0x560
[ 12.959914][ T11] veth_napi_del_range+0x34d/0x580
[ 12.960056][ T11] ? mark_held_locks+0x9e/0xe0
[ 12.960199][ T11] veth_disable_xdp+0x24e/0x2d0
[ 12.960338][ T11] veth_close+0x8e/0x190
[ 12.960441][ T11] __dev_close_many+0x1a0/0x2d0
[ 12.960579][ T11] ? __pfx___dev_close_many+0x10/0x10
[ 12.960722][ T11] dev_close_many+0x202/0x650
[ 12.960859][ T11] ? fou_exit_net+0x2f/0xf0
[ 12.960996][ T11] ? __pfx_dev_close_many+0x10/0x10
[ 12.961133][ T11] ? __mutex_trylock_common+0xfa/0x260
[ 12.961274][ T11] ? __pfx___mutex_trylock_common+0x10/0x10
[ 12.961448][ T11] unregister_netdevice_many_notify+0x8ed/0x1580
[ 12.961621][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 12.961794][ T11] ? default_device_exit_batch+0x81/0x2e0
[ 12.961933][ T11] ? mutex_is_locked+0x1c/0x60
[ 12.962072][ T11] ? rtnl_is_locked+0x15/0x20
[ 12.962210][ T11] ? unregister_netdevice_queue+0x70/0x410
[ 12.962382][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 12.962553][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 12.962732][ T11] default_device_exit_batch+0x241/0x2e0
[ 12.962888][ T11] ? __pfx_default_device_exit_batch+0x10/0x10
[ 12.963059][ T11] ? ops_exit_list+0xb4/0x170
[ 12.963198][ T11] cleanup_net+0x4ef/0xba0
[ 12.963336][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 12.963476][ T11] ? __pfx_cleanup_net+0x10/0x10
[ 12.963613][ T11] ? trace_lock_acquire+0x14c/0x1f0
[ 12.963755][ T11] ? lock_acquire+0x32/0xc0
[ 12.963892][ T11] ? process_one_work+0xe0b/0x16d0
[ 12.964036][ T11] process_one_work+0xe55/0x16d0
[ 12.964176][ T11] ? __pfx___lock_release+0x10/0x10
[ 12.964314][ T11] ? __pfx_process_one_work+0x10/0x10
[ 12.964454][ T11] ? assign_work+0x16c/0x240
[ 12.964594][ T11] worker_thread+0x58c/0xce0
[ 12.964735][ T11] ? __pfx_worker_thread+0x10/0x10
[ 12.964875][ T11] kthread+0x28a/0x350
[ 12.964981][ T11] ? __pfx_kthread+0x10/0x10
[ 12.965122][ T11] ret_from_fork+0x31/0x70
[ 12.965262][ T11] ? __pfx_kthread+0x10/0x10
[ 12.965400][ T11] ret_from_fork_asm+0x1a/0x30
[ 12.965545][ T11]
[ 12.965660][ T11]
[ 12.965730][ T11] The buggy address belongs to the physical page:
[ 12.965900][ T11] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb308
[ 12.966147][ T11] flags: 0x80000000000000(node=0|zone=1)
[ 12.966287][ T11] page_type: f5(slab)
[ 12.966400][ T11] raw: 0080000000000000 ffff8880010427c0 ffffea00001429d0 ffffea00002518d0
[ 12.966644][ T11] raw: 0000000000000000 0000000000190019 00000001f5000000 0000000000000000
[ 12.966890][ T11] page dumped because: kasan: bad access detected
[ 12.967061][ T11]
[ 12.967136][ T11] Memory state around the buggy address:
[ 12.967272][ T11] ffff88800b307f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 12.967470][ T11] ffff88800b307f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 12.967668][ T11] >ffff88800b308000: fc fc fa fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 12.967879][ T11] ^
[ 12.967982][ T11] ffff88800b308080: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc
[ 12.968180][ T11] ffff88800b308100: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc
[ 12.968379][ T11] ==================================================================
[ 12.968674][ T11] Disabling lock debugging due to kernel taint
[ 12.968879][ T11] Oops: general protection fault, probably for non-canonical address 0xf99995999999999c: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 12.969202][ T11] KASAN: maybe wild-memory-access in range [0xcccccccccccccce0-0xcccccccccccccce7]
[ 12.969433][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u16:0 Tainted: G B 6.13.0-rc5-virtme #1
[ 12.969712][ T11] Tainted: [B]=BAD_PAGE
[ 12.969815][ T11] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 12.969981][ T11] Workqueue: netns cleanup_net
[ 12.970124][ T11] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 12.970298][ T11] Code: ba 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 12.970772][ T11] RSP: 0018:ffffc900000b7658 EFLAGS: 00010a06
[ 12.970941][ T11] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffffb929f6e3
[ 12.971138][ T11] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 12.971338][ T11] RBP: fffffbfff7524c78 R08: 0000000000000000 R09: fffffbfff78ff688
[ 12.971539][ T11] R10: ffffffffbc7fb447 R11: 205d313154202020 R12: ffff88800b0a3620
[ 12.971736][ T11] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: ffffea00002518c0
[ 12.971935][ T11] FS: 0000000000000000(0000) GS:ffff88806d080000(0000) knlGS:0000000000000000
[ 12.972164][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 12.972335][ T11] CR2: 00007fd320f08270 CR3: 000000005273a003 CR4: 0000000000772ef0
[ 12.972537][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 12.972735][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 12.972945][ T11] PKRU: 55555554
[ 12.973045][ T11] Call Trace:
[ 12.973144][ T11]
[ 12.973218][ T11] ? die_addr+0x41/0xa0
[ 12.973322][ T11] ? exc_general_protection+0x14d/0x230
[ 12.973460][ T11] ? asm_exc_general_protection+0x26/0x30
[ 12.973594][ T11] ? page_pool_item_uninit+0x73/0x130
[ 12.973727][ T11] ? page_pool_item_uninit+0x7a/0x130
[ 12.973860][ T11] ? page_pool_item_uninit+0x73/0x130
[ 12.973996][ T11] page_pool_release+0x44a/0x5b0
[ 12.974135][ T11] ? __folio_put+0x1a0/0x280
[ 12.974269][ T11] ? __pfx_page_pool_release+0x10/0x10
[ 12.974401][ T11] ? __page_pool_return_page+0x27c/0x3c0
[ 12.974537][ T11] page_pool_destroy+0x11e/0x560
[ 12.974670][ T11] veth_napi_del_range+0x34d/0x580
[ 12.974806][ T11] ? mark_held_locks+0x9e/0xe0
[ 12.974942][ T11] veth_disable_xdp+0x24e/0x2d0
[ 12.975080][ T11] veth_close+0x8e/0x190
[ 12.975180][ T11] __dev_close_many+0x1a0/0x2d0
[ 12.975312][ T11] ? __pfx___dev_close_many+0x10/0x10
[ 12.975447][ T11] dev_close_many+0x202/0x650
[ 12.975582][ T11] ? fou_exit_net+0x2f/0xf0
[ 12.975715][ T11] ? __pfx_dev_close_many+0x10/0x10
[ 12.975846][ T11] ? __mutex_trylock_common+0xfa/0x260
[ 12.975980][ T11] ? __pfx___mutex_trylock_common+0x10/0x10
[ 12.976149][ T11] unregister_netdevice_many_notify+0x8ed/0x1580
[ 12.976316][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 12.976478][ T11] ? default_device_exit_batch+0x81/0x2e0
[ 12.976612][ T11] ? mutex_is_locked+0x1c/0x60
[ 12.976747][ T11] ? rtnl_is_locked+0x15/0x20
[ 12.976880][ T11] ? unregister_netdevice_queue+0x70/0x410
[ 12.977046][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 12.977211][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 12.977377][ T11] default_device_exit_batch+0x241/0x2e0
[ 12.977510][ T11] ? __pfx_default_device_exit_batch+0x10/0x10
[ 12.977677][ T11] ? ops_exit_list+0xb4/0x170
[ 12.977811][ T11] cleanup_net+0x4ef/0xba0
[ 12.977944][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 12.978079][ T11] ? __pfx_cleanup_net+0x10/0x10
[ 12.978211][ T11] ? trace_lock_acquire+0x14c/0x1f0
[ 12.978343][ T11] ? lock_acquire+0x32/0xc0
[ 12.978475][ T11] ? process_one_work+0xe0b/0x16d0
[ 12.978611][ T11] process_one_work+0xe55/0x16d0
[ 12.978746][ T11] ? __pfx___lock_release+0x10/0x10
[ 12.978880][ T11] ? __pfx_process_one_work+0x10/0x10
[ 12.979017][ T11] ? assign_work+0x16c/0x240
[ 12.979152][ T11] worker_thread+0x58c/0xce0
[ 12.979288][ T11] ? __pfx_worker_thread+0x10/0x10
[ 12.979421][ T11] kthread+0x28a/0x350
[ 12.979522][ T11] ? __pfx_kthread+0x10/0x10
[ 12.979657][ T11] ret_from_fork+0x31/0x70
[ 12.979791][ T11] ? __pfx_kthread+0x10/0x10
[ 12.979925][ T11] ret_from_fork_asm+0x1a/0x30
[ 12.980065][ T11]
[ 12.980165][ T11] Modules linked in: nft_compat nf_tables libcrc32c
[ 12.980391][ T11] ---[ end trace 0000000000000000 ]---
[ 12.980527][ T11] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 12.980695][ T11] Code: ba 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 12.981158][ T11] RSP: 0018:ffffc900000b7658 EFLAGS: 00010a06
[ 12.981363][ T11] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffffb929f6e3
[ 12.981560][ T11] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 12.981755][ T11] RBP: fffffbfff7524c78 R08: 0000000000000000 R09: fffffbfff78ff688
[ 12.981953][ T11] R10: ffffffffbc7fb447 R11: 205d313154202020 R12: ffff88800b0a3620
[ 12.982148][ T11] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: ffffea00002518c0
[ 12.982348][ T11] FS: 0000000000000000(0000) GS:ffff88806d080000(0000) knlGS:0000000000000000
[ 12.982577][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 12.982746][ T11] CR2: 00007fd320f08270 CR3: 000000005273a003 CR4: 0000000000772ef0
[ 12.982959][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 12.983155][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 12.983358][ T11] PKRU: 55555554
[ 12.983462][ T11] Kernel panic - not syncing: Fatal exception
[ 12.983691][ T11] Kernel Offset: 0x35c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 12.983996][ T11] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr