====================================== | xx__-> [ 160.902246][ T955] ================================================================== | [ 160.902549][ T955] BUG: KASAN: slab-use-after-free in page_pool_release_retry (net/core/page_pool.c:1117) | [ 160.902736][ T955] Read of size 8 at addr ffff88800ae8eee0 by task kworker/1:2/955 | [ 160.902919][ T955] [ 160.902988][ T955] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 160.902990][ T955] Workqueue: events page_pool_release_retry [ 160.902996][ T955] Call Trace: [ 160.902998][ T955] [ 160.903000][ T955] dump_stack_lvl (lib/dump_stack.c:123) [ 160.903009][ T955] print_address_description.constprop.0 (mm/kasan/report.c:379) [ 160.903016][ T955] ? page_pool_release_retry (net/core/page_pool.c:1117) [ 160.903020][ T955] print_report (mm/kasan/report.c:490) [ 160.903023][ T955] ? kasan_addr_to_slab (./include/linux/mm.h:1295 mm/kasan/../slab.h:211 mm/kasan/common.c:38) [ 160.903026][ T955] kasan_report (mm/kasan/report.c:604) [ 160.903030][ T955] ? page_pool_release_retry (net/core/page_pool.c:1117) [ 160.903036][ T955] page_pool_release_retry (net/core/page_pool.c:1117) [ 160.903041][ T955] process_one_work (kernel/workqueue.c:3236) [ 160.903048][ T955] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 160.903054][ T955] ? __pfx_process_one_work (kernel/workqueue.c:3138) [ 160.903059][ T955] ? assign_work (kernel/workqueue.c:1200) [ 160.903064][ T955] worker_thread (kernel/workqueue.c:3311 kernel/workqueue.c:3398) [ 160.903068][ T955] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4349 kernel/locking/lockdep.c:4408) [ 160.903073][ T955] ? __pfx_worker_thread (kernel/workqueue.c:3344) [ 160.903076][ T955] kthread (kernel/kthread.c:464) [ 160.903081][ T955] ? __pfx_kthread (kernel/kthread.c:413) [ 160.903086][ T955] ? __pfx_kthread (kernel/kthread.c:413) [ 160.903090][ T955] ret_from_fork (arch/x86/kernel/process.c:148) [ 160.903095][ T955] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: print_report:kasan_report:page_pool_release_retry:process_one_work:worker_thread