====================================== | xx__-> [ 4051.903691][T19843] ================================================================== | [4051.903989][T19843] BUG: KASAN: slab-use-after-free in page_pool_release_retry (net/core/page_pool.c:1117) | [ 4051.904182][T19843] Read of size 8 at addr ffff888014f5eee0 by task kworker/3:2/19843 | [ 4051.904361][T19843] [ 4051.904437][T19843] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 4051.904439][T19843] Workqueue: events page_pool_release_retry [ 4051.904446][T19843] Call Trace: [ 4051.904448][T19843] [4051.904450][T19843] dump_stack_lvl (lib/dump_stack.c:123) [4051.904461][T19843] print_address_description.constprop.0 (mm/kasan/report.c:379) [4051.904470][T19843] ? page_pool_release_retry (net/core/page_pool.c:1117) [4051.904474][T19843] print_report (mm/kasan/report.c:490) [4051.904477][T19843] ? kasan_addr_to_slab (./include/linux/mm.h:1295 mm/kasan/../slab.h:211 mm/kasan/common.c:38) [4051.904481][T19843] kasan_report (mm/kasan/report.c:604) [4051.904484][T19843] ? page_pool_release_retry (net/core/page_pool.c:1117) [4051.904491][T19843] page_pool_release_retry (net/core/page_pool.c:1117) [4051.904495][T19843] process_one_work (kernel/workqueue.c:3236) [4051.904504][T19843] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [4051.904511][T19843] ? __pfx_process_one_work (kernel/workqueue.c:3138) [4051.904517][T19843] ? assign_work (kernel/workqueue.c:1200) [4051.904524][T19843] worker_thread (kernel/workqueue.c:3311 kernel/workqueue.c:3398) [4051.904526][T19843] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4349 kernel/locking/lockdep.c:4408) [4051.904532][T19843] ? __pfx_worker_thread (kernel/workqueue.c:3344) [4051.904535][T19843] kthread (kernel/kthread.c:464) [4051.904541][T19843] ? __pfx_kthread (kernel/kthread.c:413) [4051.904546][T19843] ? __pfx_kthread (kernel/kthread.c:413) [4051.904550][T19843] ret_from_fork (arch/x86/kernel/process.c:148) [4051.904556][T19843] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: print_report:kasan_report:page_pool_release_retry:process_one_work:worker_thread