====================================== | [ 4370.755182][T28208] ================================================================== | [4370.755478][T28208] BUG: KASAN: slab-use-after-free in page_pool_release_retry (net/core/page_pool.c:1117) | [ 4370.755664][T28208] Read of size 8 at addr ffff8880175d26e0 by task kworker/1:2/28208 | [ 4370.755841][T28208] [ 4370.755908][T28208] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 4370.755910][T28208] Workqueue: events page_pool_release_retry [ 4370.755915][T28208] Call Trace: [ 4370.755917][T28208] [4370.755919][T28208] dump_stack_lvl (lib/dump_stack.c:123) [4370.755927][T28208] print_address_description.constprop.0 (mm/kasan/report.c:379) [4370.755934][T28208] ? page_pool_release_retry (net/core/page_pool.c:1117) [4370.755938][T28208] print_report (mm/kasan/report.c:490) [4370.755941][T28208] ? kasan_addr_to_slab (./include/linux/mm.h:1295 mm/kasan/../slab.h:211 mm/kasan/common.c:38) [4370.755944][T28208] kasan_report (mm/kasan/report.c:604) [4370.755948][T28208] ? page_pool_release_retry (net/core/page_pool.c:1117) [4370.755953][T28208] page_pool_release_retry (net/core/page_pool.c:1117) [4370.755958][T28208] process_one_work (kernel/workqueue.c:3236) [4370.755965][T28208] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [4370.755971][T28208] ? __pfx_process_one_work (kernel/workqueue.c:3138) [4370.755976][T28208] ? assign_work (kernel/workqueue.c:1200) [4370.755981][T28208] worker_thread (kernel/workqueue.c:3311 kernel/workqueue.c:3398) [4370.755984][T28208] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4349 kernel/locking/lockdep.c:4408) [4370.755989][T28208] ? __pfx_worker_thread (kernel/workqueue.c:3344) [4370.755993][T28208] kthread (kernel/kthread.c:464) [4370.755997][T28208] ? __pfx_kthread (kernel/kthread.c:413) [4370.756002][T28208] ? __pfx_kthread (kernel/kthread.c:413) [4370.756006][T28208] ret_from_fork (arch/x86/kernel/process.c:148) [4370.756010][T28208] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: print_report:kasan_report:page_pool_release_retry:process_one_work:worker_thread