[ 11.330926][ T66] ==================================================================
[ 11.331165][ T66] BUG: KASAN: use-after-free in page_pool_item_uninit+0x100/0x130
[ 11.331373][ T66] Read of size 8 at addr ffff88800963d008 by task kworker/u16:1/66
[ 11.331576][ T66]
[ 11.331648][ T66] CPU: 2 UID: 0 PID: 66 Comm: kworker/u16:1 Not tainted 6.13.0-rc5-virtme #1
[ 11.331889][ T66] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 11.332058][ T66] Workqueue: netns cleanup_net
[ 11.332202][ T66] Call Trace:
[ 11.332307][ T66]
[ 11.332382][ T66] dump_stack_lvl+0x82/0xd0
[ 11.332524][ T66] print_address_description.constprop.0+0x2c/0x3b0
[ 11.332694][ T66] ? page_pool_item_uninit+0x100/0x130
[ 11.332832][ T66] print_report+0xb4/0x270
[ 11.332970][ T66] ? kasan_addr_to_slab+0x25/0x80
[ 11.333110][ T66] kasan_report+0xbd/0xf0
[ 11.333212][ T66] ? page_pool_item_uninit+0x100/0x130
[ 11.333349][ T66] page_pool_item_uninit+0x100/0x130
[ 11.333489][ T66] page_pool_release+0x44a/0x5b0
[ 11.333624][ T66] ? __pfx_page_pool_release+0x10/0x10
[ 11.333760][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 11.333931][ T66] page_pool_destroy+0x11e/0x560
[ 11.334068][ T66] veth_napi_del_range+0x34d/0x580
[ 11.334208][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 11.334377][ T66] veth_close+0x104/0x190
[ 11.334481][ T66] __dev_close_many+0x1a0/0x2d0
[ 11.334621][ T66] ? __pfx___dev_close_many+0x10/0x10
[ 11.334762][ T66] dev_close_many+0x202/0x650
[ 11.334900][ T66] ? fou_exit_net+0x2f/0xf0
[ 11.335037][ T66] ? __pfx_dev_close_many+0x10/0x10
[ 11.335177][ T66] ? __mutex_trylock_common+0xfa/0x260
[ 11.335316][ T66] ? __pfx___mutex_trylock_common+0x10/0x10
[ 11.335496][ T66] unregister_netdevice_many_notify+0x8ed/0x1580
[ 11.335670][ T66] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 11.335838][ T66] ? default_device_exit_batch+0x81/0x2e0
[ 11.335974][ T66] ? mutex_is_locked+0x1c/0x60
[ 11.336109][ T66] ? rtnl_is_locked+0x15/0x20
[ 11.336246][ T66] ? unregister_netdevice_queue+0x70/0x410
[ 11.336415][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 11.336584][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 11.336757][ T66] default_device_exit_batch+0x241/0x2e0
[ 11.336896][ T66] ? __pfx_default_device_exit_batch+0x10/0x10
[ 11.337064][ T66] ? ops_exit_list+0xb4/0x170
[ 11.337200][ T66] cleanup_net+0x4ef/0xba0
[ 11.337338][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 11.337478][ T66] ? __pfx_cleanup_net+0x10/0x10
[ 11.337615][ T66] ? trace_lock_acquire+0x14c/0x1f0
[ 11.337757][ T66] ? lock_acquire+0x32/0xc0
[ 11.337895][ T66] ? process_one_work+0xe0b/0x16d0
[ 11.338034][ T66] process_one_work+0xe55/0x16d0
[ 11.338173][ T66] ? __pfx___lock_release+0x10/0x10
[ 11.338314][ T66] ? __pfx_process_one_work+0x10/0x10
[ 11.338454][ T66] ? assign_work+0x16c/0x240
[ 11.338591][ T66] worker_thread+0x58c/0xce0
[ 11.338817][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 11.338995][ T66] ? __pfx_worker_thread+0x10/0x10
[ 11.339135][ T66] ? __pfx_worker_thread+0x10/0x10
[ 11.339273][ T66] kthread+0x28a/0x350
[ 11.339381][ T66] ? __pfx_kthread+0x10/0x10
[ 11.339521][ T66] ret_from_fork+0x31/0x70
[ 11.339663][ T66] ? __pfx_kthread+0x10/0x10
[ 11.339800][ T66] ret_from_fork_asm+0x1a/0x30
[ 11.339944][ T66]
[ 11.340048][ T66]
[ 11.340122][ T66] The buggy address belongs to the physical page:
[ 11.340291][ T66] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x963d
[ 11.340536][ T66] flags: 0x80000000000000(node=0|zone=1)
[ 11.340682][ T66] raw: 0080000000000000 ffffea0000140208 ffff888066142fa0 0000000000000000
[ 11.340928][ T66] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[ 11.341170][ T66] page dumped because: kasan: bad access detected
[ 11.341351][ T66]
[ 11.341425][ T66] Memory state around the buggy address:
[ 11.341564][ T66] ffff88800963cf00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 11.341766][ T66] ffff88800963cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 11.341963][ T66] >ffff88800963d000: fc fc fa fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 11.342161][ T66] ^
[ 11.342264][ T66] ffff88800963d080: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc
[ 11.342458][ T66] ffff88800963d100: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc
[ 11.342656][ T66] ==================================================================
[ 11.342905][ T66] Disabling lock debugging due to kernel taint
[ 11.343101][ T66] Oops: general protection fault, probably for non-canonical address 0xf99995999999999c: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 11.343435][ T66] KASAN: maybe wild-memory-access in range [0xcccccccccccccce0-0xcccccccccccccce7]
[ 11.343666][ T66] CPU: 2 UID: 0 PID: 66 Comm: kworker/u16:1 Tainted: G B 6.13.0-rc5-virtme #1
[ 11.343938][ T66] Tainted: [B]=BAD_PAGE
[ 11.344045][ T66] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 11.344215][ T66] Workqueue: netns cleanup_net
[ 11.344359][ T66] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 11.344539][ T66] Code: 96 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 11.345020][ T66] RSP: 0018:ffffc90000477698 EFLAGS: 00010a06
[ 11.345189][ T66] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffff94e9f6e3
[ 11.345387][ T66] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 11.345599][ T66] RBP: fffffbfff2ca4c78 R08: 0000000000000000 R09: fffffbfff307f688
[ 11.345803][ T66] R10: ffffffff983fb447 R11: 205d363654202020 R12: ffff88800e191e20
[ 11.346009][ T66] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 11.346211][ T66] FS: 0000000000000000(0000) GS:ffff888066100000(0000) knlGS:0000000000000000
[ 11.346447][ T66] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 11.346616][ T66] CR2: 00007f0d1446a270 CR3: 000000006e93a004 CR4: 0000000000772ef0
[ 11.346822][ T66] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 11.347022][ T66] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 11.347223][ T66] PKRU: 55555554
[ 11.347324][ T66] Call Trace:
[ 11.347426][ T66]
[ 11.347493][ T66] ? die_addr+0x41/0xa0
[ 11.347600][ T66] ? exc_general_protection+0x14d/0x230
[ 11.347740][ T66] ? asm_exc_general_protection+0x26/0x30
[ 11.347875][ T66] ? page_pool_item_uninit+0x73/0x130
[ 11.348012][ T66] ? page_pool_item_uninit+0x7a/0x130
[ 11.348146][ T66] ? page_pool_item_uninit+0x73/0x130
[ 11.348280][ T66] page_pool_release+0x44a/0x5b0
[ 11.348418][ T66] ? __pfx_page_pool_release+0x10/0x10
[ 11.348555][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 11.348725][ T66] page_pool_destroy+0x11e/0x560
[ 11.348859][ T66] veth_napi_del_range+0x34d/0x580
[ 11.348997][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 11.349166][ T66] veth_close+0x104/0x190
[ 11.349265][ T66] __dev_close_many+0x1a0/0x2d0
[ 11.349401][ T66] ? __pfx___dev_close_many+0x10/0x10
[ 11.349538][ T66] dev_close_many+0x202/0x650
[ 11.349672][ T66] ? fou_exit_net+0x2f/0xf0
[ 11.349806][ T66] ? __pfx_dev_close_many+0x10/0x10
[ 11.349940][ T66] ? __mutex_trylock_common+0xfa/0x260
[ 11.350076][ T66] ? __pfx___mutex_trylock_common+0x10/0x10
[ 11.350241][ T66] unregister_netdevice_many_notify+0x8ed/0x1580
[ 11.350412][ T66] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 11.350580][ T66] ? default_device_exit_batch+0x81/0x2e0
[ 11.350721][ T66] ? mutex_is_locked+0x1c/0x60
[ 11.350854][ T66] ? rtnl_is_locked+0x15/0x20
[ 11.350989][ T66] ? unregister_netdevice_queue+0x70/0x410
[ 11.351155][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 11.351324][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 11.351494][ T66] default_device_exit_batch+0x241/0x2e0
[ 11.351628][ T66] ? __pfx_default_device_exit_batch+0x10/0x10
[ 11.351795][ T66] ? ops_exit_list+0xb4/0x170
[ 11.351931][ T66] cleanup_net+0x4ef/0xba0
[ 11.352064][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 11.352199][ T66] ? __pfx_cleanup_net+0x10/0x10
[ 11.352337][ T66] ? trace_lock_acquire+0x14c/0x1f0
[ 11.352473][ T66] ? lock_acquire+0x32/0xc0
[ 11.352607][ T66] ? process_one_work+0xe0b/0x16d0
[ 11.352746][ T66] process_one_work+0xe55/0x16d0
[ 11.352882][ T66] ? __pfx___lock_release+0x10/0x10
[ 11.353016][ T66] ? __pfx_process_one_work+0x10/0x10
[ 11.353152][ T66] ? assign_work+0x16c/0x240
[ 11.353286][ T66] worker_thread+0x58c/0xce0
[ 11.353421][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 11.353587][ T66] ? __pfx_worker_thread+0x10/0x10
[ 11.353718][ T66] ? __pfx_worker_thread+0x10/0x10
[ 11.353850][ T66] kthread+0x28a/0x350
[ 11.353952][ T66] ? __pfx_kthread+0x10/0x10
[ 11.354084][ T66] ret_from_fork+0x31/0x70
[ 11.354223][ T66] ? __pfx_kthread+0x10/0x10
[ 11.354358][ T66] ret_from_fork_asm+0x1a/0x30
[ 11.354498][ T66]
[ 11.354599][ T66] Modules linked in:
[ 11.355111][ T66] ---[ end trace 0000000000000000 ]---
[ 11.355676][ T66] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 11.355919][ T66] Code: 96 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 11.356451][ T66] RSP: 0018:ffffc90000477698 EFLAGS: 00010a06
[ 11.356677][ T66] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffff94e9f6e3
[ 11.356955][ T66] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 11.357215][ T66] RBP: fffffbfff2ca4c78 R08: 0000000000000000 R09: fffffbfff307f688
[ 11.357469][ T66] R10: ffffffff983fb447 R11: 205d363654202020 R12: ffff88800e191e20
[ 11.357724][ T66] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 11.357985][ T66] FS: 0000000000000000(0000) GS:ffff888066100000(0000) knlGS:0000000000000000
[ 11.358280][ T66] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 11.358500][ T66] CR2: 00007f0d1446a270 CR3: 000000006e93a004 CR4: 0000000000772ef0
[ 11.358754][ T66] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 11.359022][ T66] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 11.359280][ T66] PKRU: 55555554
[ 11.359442][ T66] Kernel panic - not syncing: Fatal exception
[ 11.359667][ T66] Kernel Offset: 0x11800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 11.359971][ T66] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr