[ 208.041093][ T3916] netdevsim netdevsim312 eni312np1: renamed from eth0
[ 208.136039][ T3914] netdevsim netdevsim525 eni525np1: renamed from eth1
[ 211.170497][ T3912] ==================================================================
[ 211.170861][ T3912] BUG: KASAN: use-after-free in page_pool_item_uninit+0x100/0x130
[ 211.171117][ T3912] Read of size 8 at addr ffff88801540f008 by task busy_poll_test./3912
[ 211.171361][ T3912]
[ 211.171450][ T3912] CPU: 2 UID: 0 PID: 3912 Comm: busy_poll_test. Not tainted 6.13.0-rc5-virtme #1
[ 211.171742][ T3912] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 211.171948][ T3912] Call Trace:
[ 211.172078][ T3912]
[ 211.172167][ T3912] dump_stack_lvl+0x82/0xd0
[ 211.172338][ T3912] print_address_description.constprop.0+0x2c/0x3b0
[ 211.172547][ T3912] ? page_pool_item_uninit+0x100/0x130
[ 211.172715][ T3912] print_report+0xb4/0x270
[ 211.172882][ T3912] ? kasan_addr_to_slab+0x25/0x80
[ 211.173055][ T3912] kasan_report+0xbd/0xf0
[ 211.173181][ T3912] ? page_pool_item_uninit+0x100/0x130
[ 211.173350][ T3912] page_pool_item_uninit+0x100/0x130
[ 211.173517][ T3912] page_pool_release+0x44a/0x5b0
[ 211.173679][ T3912] ? __pfx_autoremove_wake_function+0x10/0x10
[ 211.173887][ T3912] ? __pfx_page_pool_release+0x10/0x10
[ 211.174051][ T3912] ? napi_disable+0x383/0x5b0
[ 211.174222][ T3912] page_pool_destroy+0x11e/0x560
[ 211.174386][ T3912] nsim_stop+0x21a/0x390 [netdevsim]
[ 211.174565][ T3912] __dev_close_many+0x1a0/0x2d0
[ 211.174731][ T3912] ? __pfx___dev_close_many+0x10/0x10
[ 211.174893][ T3912] ? __pfx_validate_chain+0x10/0x10
[ 211.175062][ T3912] ? hlock_class+0x4e/0x130
[ 211.175225][ T3912] ? mark_lock+0x38/0x3e0
[ 211.175362][ T3912] ? hlock_class+0x4e/0x130
[ 211.175528][ T3912] dev_close_many+0x202/0x650
[ 211.175694][ T3912] ? __pfx_dev_close_many+0x10/0x10
[ 211.175862][ T3912] unregister_netdevice_many_notify+0x8ed/0x1580
[ 211.176070][ T3912] ? __mutex_trylock_common+0xfa/0x260
[ 211.176236][ T3912] ? __pfx___mutex_trylock_common+0x10/0x10
[ 211.176439][ T3912] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 211.176648][ T3912] ? lock_acquire+0x32/0xc0
[ 211.176812][ T3912] ? __mutex_lock+0x190/0xbc0
[ 211.176976][ T3912] ? nsim_destroy+0x6b/0x5f0 [netdevsim]
[ 211.177151][ T3912] ? __pfx___mutex_lock+0x10/0x10
[ 211.177316][ T3912] unregister_netdevice_queue+0x2a4/0x410
[ 211.177478][ T3912] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 211.177641][ T3912] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 211.177851][ T3912] nsim_destroy+0xe8/0x5f0 [netdevsim]
[ 211.178027][ T3912] __nsim_dev_port_del+0x17e/0x250 [netdevsim]
[ 211.178241][ T3912] nsim_dev_reload_destroy+0xe0/0x470 [netdevsim]
[ 211.178455][ T3912] nsim_drv_remove+0x51/0x1d0 [netdevsim]
[ 211.178630][ T3912] device_release_driver_internal+0x3bf/0x590
[ 211.178833][ T3912] ? klist_put+0xb1/0x170
[ 211.178962][ T3912] bus_remove_device+0x1f1/0x3f0
[ 211.179127][ T3912] device_del+0x33f/0x8c0
[ 211.179254][ T3912] ? __pfx_device_del+0x10/0x10
[ 211.179417][ T3912] ? lock_acquire.part.0+0xeb/0x330
[ 211.179580][ T3912] ? kernfs_fop_write_iter+0x22e/0x460
[ 211.179745][ T3912] device_unregister+0x17/0xb0
[ 211.179910][ T3912] del_device_store+0x2f3/0x4f0 [netdevsim]
[ 211.180127][ T3912] ? __pfx_del_device_store+0x10/0x10 [netdevsim]
[ 211.180350][ T3912] ? __pfx_sysfs_kf_write+0x10/0x10
[ 211.180512][ T3912] ? sysfs_file_ops+0x11e/0x170
[ 211.180678][ T3912] ? __pfx_sysfs_kf_write+0x10/0x10
[ 211.180839][ T3912] kernfs_fop_write_iter+0x2ba/0x460
[ 211.181003][ T3912] vfs_write+0xa81/0x11e0
[ 211.181127][ T3912] ? __pfx_vfs_write+0x10/0x10
[ 211.181295][ T3912] ? find_held_lock+0x2c/0x110
[ 211.181459][ T3912] ? __pfx___lock_release+0x10/0x10
[ 211.181623][ T3912] ksys_write+0xf8/0x1d0
[ 211.181746][ T3912] ? __pfx_ksys_write+0x10/0x10
[ 211.181912][ T3912] do_syscall_64+0xc1/0x1d0
[ 211.182075][ T3912] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 211.182280][ T3912] RIP: 0033:0x7f26a1094b77
[ 211.182448][ T3912] Code: 0b 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24
[ 211.183024][ T3912] RSP: 002b:00007fff43c0e9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 211.183272][ T3912] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f26a1094b77
[ 211.183515][ T3912] RDX: 0000000000000004 RSI: 000055910b462f80 RDI: 0000000000000001
[ 211.183762][ T3912] RBP: 000055910b462f80 R08: 0000000000000000 R09: 00007f26a11074e0
[ 211.184008][ T3912] R10: 00007f26a11073e0 R11: 0000000000000246 R12: 0000000000000004
[ 211.184259][ T3912] R13: 00007f26a1150760 R14: 0000000000000004 R15: 00007f26a114b9c0
[ 211.184507][ T3912]
[ 211.184636][ T3912]
[ 211.184720][ T3912] The buggy address belongs to the physical page:
[ 211.184920][ T3912] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1540f
[ 211.185215][ T3912] flags: 0x80000000000000(node=0|zone=1)
[ 211.185389][ T3912] page_type: f5(slab)
[ 211.185516][ T3912] raw: 0080000000000000 ffff8880010427c0 ffffea000008d290 ffffea0000703f10
[ 211.185807][ T3912] raw: 0000000000000000 0000000000190019 00000001f5000000 0000000000000000
[ 211.186092][ T3912] page dumped because: kasan: bad access detected
[ 211.186293][ T3912]
[ 211.186376][ T3912] Memory state around the buggy address:
[ 211.186539][ T3912] ffff88801540ef00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 211.186777][ T3912] ffff88801540ef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 211.187017][ T3912] >ffff88801540f000: fc fc fa fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 211.187257][ T3912] ^
[ 211.187378][ T3912] ffff88801540f080: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc
[ 211.187615][ T3912] ffff88801540f100: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc
[ 211.187853][ T3912] ==================================================================
[ 211.188149][ T3912] Disabling lock debugging due to kernel taint
[ 211.188382][ T3912] Oops: general protection fault, probably for non-canonical address 0xf99995999999999c: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 211.188777][ T3912] KASAN: maybe wild-memory-access in range [0xcccccccccccccce0-0xcccccccccccccce7]
[ 211.189055][ T3912] CPU: 2 UID: 0 PID: 3912 Comm: busy_poll_test. Tainted: G B 6.13.0-rc5-virtme #1
[ 211.189373][ T3912] Tainted: [B]=BAD_PAGE
[ 211.189494][ T3912] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 211.189690][ T3912] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 211.189895][ T3912] Code: ba 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 211.190454][ T3912] RSP: 0018:ffffc900006074f0 EFLAGS: 00010a06
[ 211.190658][ T3912] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffffb8a9f6e3
[ 211.190897][ T3912] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 211.191159][ T3912] RBP: fffffbfff7424c78 R08: 0000000000000000 R09: fffffbfff77ff688
[ 211.191401][ T3912] R10: ffffffffbbffb447 R11: 205d323139335420 R12: ffff88800aebda20
[ 211.191638][ T3912] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 211.191875][ T3912] FS: 00007f26a0f53740(0000) GS:ffff888066100000(0000) knlGS:0000000000000000
[ 211.192154][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 211.192358][ T3912] CR2: 000055910b462f80 CR3: 000000001a070001 CR4: 0000000000772ef0
[ 211.192597][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 211.192835][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 211.193069][ T3912] PKRU: 55555554
[ 211.193191][ T3912] Call Trace:
[ 211.193316][ T3912]
[ 211.193399][ T3912] ? die_addr+0x41/0xa0
[ 211.193527][ T3912] ? exc_general_protection+0x14d/0x230
[ 211.193689][ T3912] ? asm_exc_general_protection+0x26/0x30
[ 211.193851][ T3912] ? page_pool_item_uninit+0x73/0x130
[ 211.194010][ T3912] ? page_pool_item_uninit+0x7a/0x130
[ 211.194169][ T3912] page_pool_release+0x44a/0x5b0
[ 211.194330][ T3912] ? __pfx_autoremove_wake_function+0x10/0x10
[ 211.194531][ T3912] ? __pfx_page_pool_release+0x10/0x10
[ 211.194688][ T3912] ? napi_disable+0x383/0x5b0
[ 211.194851][ T3912] page_pool_destroy+0x11e/0x560
[ 211.195009][ T3912] nsim_stop+0x21a/0x390 [netdevsim]
[ 211.195183][ T3912] __dev_close_many+0x1a0/0x2d0
[ 211.195362][ T3912] ? __pfx___dev_close_many+0x10/0x10
[ 211.195519][ T3912] ? __pfx_validate_chain+0x10/0x10
[ 211.195680][ T3912] ? hlock_class+0x4e/0x130
[ 211.195838][ T3912] ? mark_lock+0x38/0x3e0
[ 211.195957][ T3912] ? hlock_class+0x4e/0x130
[ 211.196115][ T3912] dev_close_many+0x202/0x650
[ 211.196275][ T3912] ? __pfx_dev_close_many+0x10/0x10
[ 211.196436][ T3912] unregister_netdevice_many_notify+0x8ed/0x1580
[ 211.196635][ T3912] ? __mutex_trylock_common+0xfa/0x260
[ 211.196796][ T3912] ? __pfx___mutex_trylock_common+0x10/0x10
[ 211.196993][ T3912] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 211.197191][ T3912] ? lock_acquire+0x32/0xc0
[ 211.197350][ T3912] ? __mutex_lock+0x190/0xbc0
[ 211.197510][ T3912] ? nsim_destroy+0x6b/0x5f0 [netdevsim]
[ 211.197680][ T3912] ? __pfx___mutex_lock+0x10/0x10
[ 211.197839][ T3912] unregister_netdevice_queue+0x2a4/0x410
[ 211.198001][ T3912] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 211.198159][ T3912] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 211.198360][ T3912] nsim_destroy+0xe8/0x5f0 [netdevsim]
[ 211.198529][ T3912] __nsim_dev_port_del+0x17e/0x250 [netdevsim]
[ 211.198736][ T3912] nsim_dev_reload_destroy+0xe0/0x470 [netdevsim]
[ 211.198942][ T3912] nsim_drv_remove+0x51/0x1d0 [netdevsim]
[ 211.199114][ T3912] device_release_driver_internal+0x3bf/0x590
[ 211.199310][ T3912] ? klist_put+0xb1/0x170
[ 211.199430][ T3912] bus_remove_device+0x1f1/0x3f0
[ 211.199591][ T3912] device_del+0x33f/0x8c0
[ 211.199712][ T3912] ? __pfx_device_del+0x10/0x10
[ 211.199869][ T3912] ? lock_acquire.part.0+0xeb/0x330
[ 211.200028][ T3912] ? kernfs_fop_write_iter+0x22e/0x460
[ 211.200192][ T3912] device_unregister+0x17/0xb0
[ 211.200350][ T3912] del_device_store+0x2f3/0x4f0 [netdevsim]
[ 211.200557][ T3912] ? __pfx_del_device_store+0x10/0x10 [netdevsim]
[ 211.200765][ T3912] ? __pfx_sysfs_kf_write+0x10/0x10
[ 211.200923][ T3912] ? sysfs_file_ops+0x11e/0x170
[ 211.201082][ T3912] ? __pfx_sysfs_kf_write+0x10/0x10
[ 211.201240][ T3912] kernfs_fop_write_iter+0x2ba/0x460
[ 211.201402][ T3912] vfs_write+0xa81/0x11e0
[ 211.201523][ T3912] ? __pfx_vfs_write+0x10/0x10
[ 211.201681][ T3912] ? find_held_lock+0x2c/0x110
[ 211.201840][ T3912] ? __pfx___lock_release+0x10/0x10
[ 211.202000][ T3912] ksys_write+0xf8/0x1d0
[ 211.202120][ T3912] ? __pfx_ksys_write+0x10/0x10
[ 211.202280][ T3912] do_syscall_64+0xc1/0x1d0
[ 211.202437][ T3912] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 211.202636][ T3912] RIP: 0033:0x7f26a1094b77
[ 211.202799][ T3912] Code: 0b 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24
[ 211.203352][ T3912] RSP: 002b:00007fff43c0e9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 211.203594][ T3912] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f26a1094b77
[ 211.203932][ T3912] RDX: 0000000000000004 RSI: 000055910b462f80 RDI: 0000000000000001
[ 211.204168][ T3912] RBP: 000055910b462f80 R08: 0000000000000000 R09: 00007f26a11074e0
[ 211.204404][ T3912] R10: 00007f26a11073e0 R11: 0000000000000246 R12: 0000000000000004
[ 211.204741][ T3912] R13: 00007f26a1150760 R14: 0000000000000004 R15: 00007f26a114b9c0
[ 211.204981][ T3912]
[ 211.205100][ T3912] Modules linked in: netdevsim psample sch_etf cls_flower sch_fq act_mirred cls_matchall ip6_gre gre sch_ingress xfrm_user l2tp_ip6 l2tp_eth l2tp_ip l2tp_netlink l2tp_core vxlan
[ 211.205865][ T3912] ---[ end trace 0000000000000000 ]---
[ 211.206049][ T3912] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 211.206370][ T3912] Code: ba 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 ad 6d 63 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 211.206943][ T3912] RSP: 0018:ffffc900006074f0 EFLAGS: 00010a06
[ 211.207260][ T3912] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffffb8a9f6e3
[ 211.207514][ T3912] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 211.207760][ T3912] RBP: fffffbfff7424c78 R08: 0000000000000000 R09: fffffbfff77ff688
[ 211.208115][ T3912] R10: ffffffffbbffb447 R11: 205d323139335420 R12: ffff88800aebda20
[ 211.208362][ T3912] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 211.208712][ T3912] FS: 00007f26a0f53740(0000) GS:ffff888066100000(0000) knlGS:0000000000000000
[ 211.209005][ T3912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 211.209217][ T3912] CR2: 000055910b462f80 CR3: 000000001a070001 CR4: 0000000000772ef0
[ 211.209564][ T3912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 211.209811][ T3912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 211.210171][ T3912] PKRU: 55555554
[ 211.210303][ T3912] Kernel panic - not syncing: Fatal exception
[ 211.210623][ T3912] Kernel Offset: 0x35400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 211.211087][ T3912] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr