[ 294.684081][ T66] ==================================================================
[ 294.684358][ T66] BUG: KASAN: use-after-free in page_pool_item_uninit+0x100/0x130
[ 294.684599][ T66] Read of size 8 at addr ffff888005439008 by task kworker/u16:1/66
[ 294.684840][ T66]
[ 294.684922][ T66] CPU: 3 UID: 0 PID: 66 Comm: kworker/u16:1 Not tainted 6.13.0-rc5-virtme #1
[ 294.685203][ T66] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 294.685401][ T66] Workqueue: netns cleanup_net
[ 294.685568][ T66] Call Trace:
[ 294.685690][ T66]
[ 294.685774][ T66] dump_stack_lvl+0x82/0xd0
[ 294.685942][ T66] print_address_description.constprop.0+0x2c/0x3b0
[ 294.686149][ T66] ? page_pool_item_uninit+0x100/0x130
[ 294.686313][ T66] print_report+0xb4/0x270
[ 294.686473][ T66] ? kasan_addr_to_slab+0x25/0x80
[ 294.686633][ T66] kasan_report+0xbd/0xf0
[ 294.686754][ T66] ? page_pool_item_uninit+0x100/0x130
[ 294.686917][ T66] page_pool_item_uninit+0x100/0x130
[ 294.687077][ T66] page_pool_release+0x44a/0x5b0
[ 294.687234][ T66] ? __pfx_page_pool_release+0x10/0x10
[ 294.687393][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 294.687595][ T66] page_pool_destroy+0x11e/0x560
[ 294.687756][ T66] veth_napi_del_range+0x34d/0x580
[ 294.687919][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 294.688118][ T66] veth_close+0x104/0x190
[ 294.688240][ T66] __dev_close_many+0x1a0/0x2d0
[ 294.688404][ T66] ? __pfx___dev_close_many+0x10/0x10
[ 294.688564][ T66] dev_close_many+0x202/0x650
[ 294.688724][ T66] ? fou_exit_net+0x2f/0xf0
[ 294.688894][ T66] ? __pfx_dev_close_many+0x10/0x10
[ 294.689054][ T66] ? __mutex_trylock_common+0xfa/0x260
[ 294.689217][ T66] ? __pfx___mutex_trylock_common+0x10/0x10
[ 294.689414][ T66] unregister_netdevice_many_notify+0x8ed/0x1580
[ 294.689616][ T66] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 294.689820][ T66] ? default_device_exit_batch+0x81/0x2e0
[ 294.689986][ T66] ? mutex_is_locked+0x1c/0x60
[ 294.690149][ T66] ? rtnl_is_locked+0x15/0x20
[ 294.690317][ T66] ? unregister_netdevice_queue+0x70/0x410
[ 294.690524][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 294.690723][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 294.690929][ T66] default_device_exit_batch+0x241/0x2e0
[ 294.691095][ T66] ? __pfx_default_device_exit_batch+0x10/0x10
[ 294.691296][ T66] ? ops_exit_list+0xb4/0x170
[ 294.691450][ T66] cleanup_net+0x4ef/0xba0
[ 294.691611][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 294.691773][ T66] ? __pfx_cleanup_net+0x10/0x10
[ 294.691934][ T66] ? trace_lock_acquire+0x14c/0x1f0
[ 294.692095][ T66] ? lock_acquire+0x32/0xc0
[ 294.692257][ T66] ? process_one_work+0xe0b/0x16d0
[ 294.692419][ T66] process_one_work+0xe55/0x16d0
[ 294.692580][ T66] ? __pfx___lock_release+0x10/0x10
[ 294.692750][ T66] ? __pfx_process_one_work+0x10/0x10
[ 294.692910][ T66] ? assign_work+0x16c/0x240
[ 294.693069][ T66] worker_thread+0x58c/0xce0
[ 294.693227][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 294.693427][ T66] ? __pfx_worker_thread+0x10/0x10
[ 294.693588][ T66] ? __pfx_worker_thread+0x10/0x10
[ 294.693747][ T66] kthread+0x28a/0x350
[ 294.693873][ T66] ? __pfx_kthread+0x10/0x10
[ 294.694033][ T66] ret_from_fork+0x31/0x70
[ 294.694203][ T66] ? __pfx_kthread+0x10/0x10
[ 294.694363][ T66] ret_from_fork_asm+0x1a/0x30
[ 294.694526][ T66]
[ 294.694647][ T66]
[ 294.694729][ T66] The buggy address belongs to the physical page:
[ 294.694941][ T66] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5439
[ 294.695225][ T66] flags: 0x80000000000000(node=0|zone=1)
[ 294.695392][ T66] page_type: f5(slab)
[ 294.695521][ T66] raw: 0080000000000000 ffff8880010427c0 ffffea0000132cd0 ffff8880010406e8
[ 294.695805][ T66] raw: 0000000000000000 0000000000190019 00000001f5000000 0000000000000000
[ 294.696087][ T66] page dumped because: kasan: bad access detected
[ 294.696295][ T66]
[ 294.696378][ T66] Memory state around the buggy address:
[ 294.696537][ T66] ffff888005438f00: fc fc fc fc 00 00 00 00 00 00 00 00 00 fc fc fc
[ 294.696768][ T66] ffff888005438f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 294.697005][ T66] >ffff888005439000: fc fc fa fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 294.697243][ T66] ^
[ 294.697366][ T66] ffff888005439080: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc
[ 294.697598][ T66] ffff888005439100: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc
[ 294.697828][ T66] ==================================================================
[ 294.698523][ T66] Disabling lock debugging due to kernel taint
[ 294.698741][ T66] Oops: general protection fault, probably for non-canonical address 0xf99995999999999c: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 294.699129][ T66] KASAN: maybe wild-memory-access in range [0xcccccccccccccce0-0xcccccccccccccce7]
[ 294.699390][ T66] CPU: 3 UID: 0 PID: 66 Comm: kworker/u16:1 Tainted: G B 6.13.0-rc5-virtme #1
[ 294.699709][ T66] Tainted: [B]=BAD_PAGE
[ 294.699831][ T66] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 294.700027][ T66] Workqueue: netns cleanup_net
[ 294.700198][ T66] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 294.700398][ T66] Code: 88 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 294.700953][ T66] RSP: 0018:ffffc90000477698 EFLAGS: 00010a06
[ 294.701149][ T66] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffff86a9f6e3
[ 294.701381][ T66] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 294.701615][ T66] RBP: fffffbfff1024c78 R08: 0000000000000000 R09: fffffbfff13ff688
[ 294.701854][ T66] R10: ffffffff89ffb447 R11: 205d363654202020 R12: ffff8880023e5a20
[ 294.702083][ T66] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 294.702321][ T66] FS: 0000000000000000(0000) GS:ffff888066180000(0000) knlGS:0000000000000000
[ 294.702592][ T66] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 294.702797][ T66] CR2: 00007f083f1a0bd0 CR3: 00000000095f2004 CR4: 0000000000772ef0
[ 294.703032][ T66] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 294.703261][ T66] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 294.703488][ T66] PKRU: 55555554
[ 294.703605][ T66] Call Trace:
[ 294.703725][ T66]
[ 294.703806][ T66] ? die_addr+0x41/0xa0
[ 294.703930][ T66] ? exc_general_protection+0x14d/0x230
[ 294.704090][ T66] ? asm_exc_general_protection+0x26/0x30
[ 294.704251][ T66] ? page_pool_item_uninit+0x73/0x130
[ 294.704409][ T66] ? page_pool_item_uninit+0x7a/0x130
[ 294.704584][ T66] ? page_pool_item_uninit+0x73/0x130
[ 294.704738][ T66] page_pool_release+0x44a/0x5b0
[ 294.704907][ T66] ? __pfx_page_pool_release+0x10/0x10
[ 294.705063][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 294.705259][ T66] page_pool_destroy+0x11e/0x560
[ 294.705416][ T66] veth_napi_del_range+0x34d/0x580
[ 294.705569][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 294.705766][ T66] veth_close+0x104/0x190
[ 294.705884][ T66] __dev_close_many+0x1a0/0x2d0
[ 294.706042][ T66] ? __pfx___dev_close_many+0x10/0x10
[ 294.706198][ T66] dev_close_many+0x202/0x650
[ 294.706354][ T66] ? fou_exit_net+0x2f/0xf0
[ 294.706505][ T66] ? __pfx_dev_close_many+0x10/0x10
[ 294.706666][ T66] ? __mutex_trylock_common+0xfa/0x260
[ 294.706826][ T66] ? __pfx___mutex_trylock_common+0x10/0x10
[ 294.707023][ T66] unregister_netdevice_many_notify+0x8ed/0x1580
[ 294.707226][ T66] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 294.707424][ T66] ? default_device_exit_batch+0x81/0x2e0
[ 294.707586][ T66] ? mutex_is_locked+0x1c/0x60
[ 294.707740][ T66] ? rtnl_is_locked+0x15/0x20
[ 294.707899][ T66] ? unregister_netdevice_queue+0x70/0x410
[ 294.708089][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 294.708284][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 294.708473][ T66] default_device_exit_batch+0x241/0x2e0
[ 294.708624][ T66] ? __pfx_default_device_exit_batch+0x10/0x10
[ 294.708816][ T66] ? ops_exit_list+0xb4/0x170
[ 294.708970][ T66] cleanup_net+0x4ef/0xba0
[ 294.709121][ T66] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 294.709270][ T66] ? __pfx_cleanup_net+0x10/0x10
[ 294.709504][ T66] ? trace_lock_acquire+0x14c/0x1f0
[ 294.709680][ T66] ? lock_acquire+0x32/0xc0
[ 294.709835][ T66] ? process_one_work+0xe0b/0x16d0
[ 294.709989][ T66] process_one_work+0xe55/0x16d0
[ 294.710148][ T66] ? __pfx___lock_release+0x10/0x10
[ 294.710307][ T66] ? __pfx_process_one_work+0x10/0x10
[ 294.710545][ T66] ? assign_work+0x16c/0x240
[ 294.710707][ T66] worker_thread+0x58c/0xce0
[ 294.710938][ T66] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 294.711135][ T66] ? __pfx_worker_thread+0x10/0x10
[ 294.711292][ T66] ? __pfx_worker_thread+0x10/0x10
[ 294.711519][ T66] kthread+0x28a/0x350
[ 294.711639][ T66] ? __pfx_kthread+0x10/0x10
[ 294.711796][ T66] ret_from_fork+0x31/0x70
[ 294.712031][ T66] ? __pfx_kthread+0x10/0x10
[ 294.712186][ T66] ret_from_fork_asm+0x1a/0x30
[ 294.712345][ T66]
[ 294.712461][ T66] Modules linked in: vxlan
[ 294.712686][ T66] ---[ end trace 0000000000000000 ]---
[ 294.712845][ T66] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 294.713051][ T66] Code: 88 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 294.713747][ T66] RSP: 0018:ffffc90000477698 EFLAGS: 00010a06
[ 294.713943][ T66] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffff86a9f6e3
[ 294.714178][ T66] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 294.714460][ T66] RBP: fffffbfff1024c78 R08: 0000000000000000 R09: fffffbfff13ff688
[ 294.714695][ T66] R10: ffffffff89ffb447 R11: 205d363654202020 R12: ffff8880023e5a20
[ 294.715008][ T66] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 294.715294][ T66] FS: 0000000000000000(0000) GS:ffff888066180000(0000) knlGS:0000000000000000
[ 294.715649][ T66] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 294.715848][ T66] CR2: 00007f083f1a0bd0 CR3: 00000000095f2004 CR4: 0000000000772ef0
[ 294.716077][ T66] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 294.716364][ T66] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 294.716680][ T66] PKRU: 55555554
[ 294.716806][ T66] Kernel panic - not syncing: Fatal exception
[ 294.717090][ T66] Kernel Offset: 0x3400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 294.717510][ T66] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr