[ 12.222349][ T233] netdevsim netdevsim294 eni294np1: renamed from eth0
[ 13.160963][ T247] netdevsim netdevsim294 eni294np1: set [0, 0] type 1 family 0 port 4789 - 0
[ 13.873649][ T259] netdevsim netdevsim294 eni294np1: unset [0, 0] type 1 family 0 port 4789 - 0
[ 14.115667][ T262] netdevsim netdevsim294 eni294np1: set [0, 0] type 1 family 0 port 4789 - 0
[ 15.031693][ T278] netdevsim netdevsim294 eni294np1: set [0, 1] type 1 family 0 port 4790 - 0
[ 15.593971][ T289] netdevsim netdevsim294 eni294np1: set [1, 0] type 2 family 0 port 6081 - 0
[ 15.977075][ T301] ==================================================================
[ 15.977368][ T301] BUG: KASAN: use-after-free in page_pool_item_uninit+0x100/0x130
[ 15.977604][ T301] Read of size 8 at addr ffff88800947d008 by task ip/301
[ 15.977791][ T301]
[ 15.977873][ T301] CPU: 2 UID: 0 PID: 301 Comm: ip Not tainted 6.13.0-rc5-virtme #1
[ 15.978111][ T301] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 15.978303][ T301] Call Trace:
[ 15.978480][ T301]
[ 15.978611][ T301] dump_stack_lvl+0x82/0xd0
[ 15.978796][ T301] print_address_description.constprop.0+0x2c/0x3b0
[ 15.978992][ T301] ? page_pool_item_uninit+0x100/0x130
[ 15.979204][ T301] print_report+0xb4/0x270
[ 15.979394][ T301] ? kasan_addr_to_slab+0x25/0x80
[ 15.979602][ T301] kasan_report+0xbd/0xf0
[ 15.979725][ T301] ? page_pool_item_uninit+0x100/0x130
[ 15.979919][ T301] page_pool_item_uninit+0x100/0x130
[ 15.980105][ T301] page_pool_release+0x44a/0x5b0
[ 15.980272][ T301] ? __pfx_autoremove_wake_function+0x10/0x10
[ 15.980536][ T301] ? __pfx_page_pool_release+0x10/0x10
[ 15.980691][ T301] ? napi_disable+0x383/0x5b0
[ 15.980872][ T301] page_pool_destroy+0x11e/0x560
[ 15.981057][ T301] nsim_stop+0x21a/0x390 [netdevsim]
[ 15.981224][ T301] __dev_close_many+0x1a0/0x2d0
[ 15.981429][ T301] ? __pfx___dev_close_many+0x10/0x10
[ 15.981586][ T301] ? mark_held_locks+0x9e/0xe0
[ 15.981787][ T301] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 15.982025][ T301] __dev_change_flags+0x24f/0x6c0
[ 15.982178][ T301] ? __pfx___dev_change_flags+0x10/0x10
[ 15.982370][ T301] ? unwind_get_return_address+0x5e/0xa0
[ 15.982558][ T301] ? __pfx_validate_chain+0x10/0x10
[ 15.982742][ T301] dev_change_flags+0x80/0x160
[ 15.982891][ T301] do_setlink.constprop.0+0x79d/0x2300
[ 15.983051][ T301] ? __pfx_do_setlink.constprop.0+0x10/0x10
[ 15.983238][ T301] ? lock_acquire.part.0+0xeb/0x330
[ 15.983395][ T301] ? rtnl_newlink+0x653/0xa70
[ 15.983552][ T301] ? rtnl_newlink+0xb9/0xa70
[ 15.983700][ T301] ? rtnetlink_rcv_msg+0x712/0xc10
[ 15.983859][ T301] ? __mutex_trylock_common+0xfa/0x260
[ 15.984046][ T301] ? __pfx___mutex_trylock_common+0x10/0x10
[ 15.984281][ T301] ? lock_acquire+0x32/0xc0
[ 15.984502][ T301] ? trace_contention_end+0xef/0x150
[ 15.984691][ T301] ? __mutex_lock+0x190/0xbc0
[ 15.984898][ T301] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 15.985135][ T301] ? rtnl_newlink+0x653/0xa70
[ 15.985484][ T301] ? __pfx___mutex_lock+0x10/0x10
[ 15.985688][ T301] ? __rtnl_newlink+0x40e/0xa40
[ 15.985837][ T301] rtnl_newlink+0x69c/0xa70
[ 15.985987][ T301] ? __pfx_rtnl_newlink+0x10/0x10
[ 15.986135][ T301] ? find_held_lock+0x2c/0x110
[ 15.986294][ T301] ? __pfx___lock_release+0x10/0x10
[ 15.986541][ T301] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 15.986751][ T301] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 15.986900][ T301] ? __pfx_rtnl_newlink+0x10/0x10
[ 15.987051][ T301] rtnetlink_rcv_msg+0x712/0xc10
[ 15.987196][ T301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 15.987355][ T301] ? hlock_class+0x4e/0x130
[ 15.987505][ T301] ? mark_lock+0x38/0x3e0
[ 15.987616][ T301] ? __lock_acquire+0xb9a/0x1680
[ 15.987763][ T301] netlink_rcv_skb+0x130/0x360
[ 15.987915][ T301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 15.988065][ T301] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 15.988218][ T301] ? netlink_deliver_tap+0x13e/0x340
[ 15.988387][ T301] ? netlink_deliver_tap+0xc3/0x340
[ 15.988536][ T301] netlink_unicast+0x44b/0x710
[ 15.988688][ T301] ? __pfx_netlink_unicast+0x10/0x10
[ 15.988837][ T301] ? find_held_lock+0x2c/0x110
[ 15.988994][ T301] netlink_sendmsg+0x723/0xbe0
[ 15.989140][ T301] ? __pfx_netlink_sendmsg+0x10/0x10
[ 15.989298][ T301] ____sys_sendmsg+0x7ac/0xa10
[ 15.989461][ T301] ? __pfx_____sys_sendmsg+0x10/0x10
[ 15.989610][ T301] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 15.989813][ T301] ___sys_sendmsg+0xee/0x170
[ 15.989964][ T301] ? __pfx____sys_sendmsg+0x10/0x10
[ 15.990123][ T301] ? kasan_save_stack+0x34/0x50
[ 15.990272][ T301] ? kasan_save_stack+0x24/0x50
[ 15.990446][ T301] ? __kasan_record_aux_stack+0x8e/0xa0
[ 15.990596][ T301] ? __call_rcu_common.constprop.0+0xa1/0x4b0
[ 15.990781][ T301] ? __x64_sys_close+0x7c/0xd0
[ 15.990927][ T301] ? do_syscall_64+0xc1/0x1d0
[ 15.991074][ T301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 15.991265][ T301] ? __lock_acquire+0xb9a/0x1680
[ 15.991424][ T301] ? find_held_lock+0x2c/0x110
[ 15.991624][ T301] ? __lock_release+0x103/0x460
[ 15.991818][ T301] ? __virt_addr_valid+0x22b/0x430
[ 15.991982][ T301] ? __pfx___lock_release+0x10/0x10
[ 15.992145][ T301] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 15.992319][ T301] __sys_sendmsg+0x109/0x1a0
[ 15.992496][ T301] ? __pfx___sys_sendmsg+0x10/0x10
[ 15.992655][ T301] ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[ 15.992865][ T301] do_syscall_64+0xc1/0x1d0
[ 15.993029][ T301] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 15.993236][ T301] RIP: 0033:0x7fd41075d9a7
[ 15.993419][ T301] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 15.993991][ T301] RSP: 002b:00007ffc7236b2a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 15.994236][ T301] RAX: ffffffffffffffda RBX: 00007ffc7236b9d0 RCX: 00007fd41075d9a7
[ 15.994490][ T301] RDX: 0000000000000000 RSI: 00007ffc7236b310 RDI: 0000000000000005
[ 15.994744][ T301] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000078
[ 15.994987][ T301] R10: 00007fd41061bef8 R11: 0000000000000246 R12: 0000000000000003
[ 15.995233][ T301] R13: 00000000677c4cfa R14: 0000000000498600 R15: 0000000000000000
[ 15.995583][ T301]
[ 15.995712][ T301]
[ 15.995794][ T301] The buggy address belongs to the physical page:
[ 15.995984][ T301] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x947d
[ 15.996251][ T301] flags: 0x80000000000000(node=0|zone=1)
[ 15.996417][ T301] page_type: f5(slab)
[ 15.996535][ T301] raw: 0080000000000000 ffff8880010427c0 ffffea0000226310 ffffea0000385110
[ 15.996802][ T301] raw: 0000000000000000 0000000000190019 00000001f5000000 0000000000000000
[ 15.997068][ T301] page dumped because: kasan: bad access detected
[ 15.997274][ T301]
[ 15.997389][ T301] Memory state around the buggy address:
[ 15.997543][ T301] ffff88800947cf00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 15.997762][ T301] ffff88800947cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 15.997977][ T301] >ffff88800947d000: fc fc fa fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 15.998203][ T301] ^
[ 15.998329][ T301] ffff88800947d080: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc
[ 15.998541][ T301] ffff88800947d100: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc
[ 15.998752][ T301] ==================================================================
[ 15.999137][ T301] Disabling lock debugging due to kernel taint
[ 15.999546][ T301] Oops: general protection fault, probably for non-canonical address 0xf99995999999999c: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 15.999950][ T301] KASAN: maybe wild-memory-access in range [0xcccccccccccccce0-0xcccccccccccccce7]
[ 16.000204][ T301] CPU: 2 UID: 0 PID: 301 Comm: ip Tainted: G B 6.13.0-rc5-virtme #1
[ 16.000481][ T301] Tainted: [B]=BAD_PAGE
[ 16.000590][ T301] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 16.000770][ T301] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 16.000959][ T301] Code: 8f 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 dd 9c 69 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 16.001495][ T301] RSP: 0018:ffffc90000516f98 EFLAGS: 00010a06
[ 16.001675][ T301] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffff8e029ac3
[ 16.001896][ T301] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 16.002110][ T301] RBP: fffffbfff1e98a78 R08: 0000000000000000 R09: fffffbfff225a088
[ 16.002342][ T301] R10: ffffffff912d0447 R11: 205d313033542020 R12: ffff888008d24e20
[ 16.002560][ T301] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 16.002779][ T301] FS: 00007fd410551800(0000) GS:ffff888036100000(0000) knlGS:0000000000000000
[ 16.003031][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 16.003216][ T301] CR2: 00000000004e55b8 CR3: 0000000009a08001 CR4: 0000000000772ef0
[ 16.003456][ T301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 16.003670][ T301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 16.003883][ T301] PKRU: 55555554
[ 16.003995][ T301] Call Trace:
[ 16.004104][ T301]
[ 16.004182][ T301] ? die_addr+0x41/0xa0
[ 16.004314][ T301] ? exc_general_protection+0x14d/0x230
[ 16.004563][ T301] ? asm_exc_general_protection+0x26/0x30
[ 16.004716][ T301] ? page_pool_item_uninit+0x73/0x130
[ 16.004878][ T301] ? page_pool_item_uninit+0x7a/0x130
[ 16.005047][ T301] ? page_pool_item_uninit+0x73/0x130
[ 16.005191][ T301] page_pool_release+0x44a/0x5b0
[ 16.005351][ T301] ? __pfx_autoremove_wake_function+0x10/0x10
[ 16.005542][ T301] ? __pfx_page_pool_release+0x10/0x10
[ 16.005685][ T301] ? napi_disable+0x383/0x5b0
[ 16.005926][ T301] page_pool_destroy+0x11e/0x560
[ 16.006094][ T301] nsim_stop+0x21a/0x390 [netdevsim]
[ 16.006282][ T301] __dev_close_many+0x1a0/0x2d0
[ 16.006454][ T301] ? __pfx___dev_close_many+0x10/0x10
[ 16.006750][ T301] ? mark_held_locks+0x9e/0xe0
[ 16.006901][ T301] ? lockdep_hardirqs_on_prepare+0x275/0x410
[ 16.007079][ T301] __dev_change_flags+0x24f/0x6c0
[ 16.007272][ T301] ? __pfx___dev_change_flags+0x10/0x10
[ 16.007524][ T301] ? unwind_get_return_address+0x5e/0xa0
[ 16.007669][ T301] ? __pfx_validate_chain+0x10/0x10
[ 16.007814][ T301] dev_change_flags+0x80/0x160
[ 16.007956][ T301] do_setlink.constprop.0+0x79d/0x2300
[ 16.008194][ T301] ? __pfx_do_setlink.constprop.0+0x10/0x10
[ 16.008390][ T301] ? lock_acquire.part.0+0xeb/0x330
[ 16.008555][ T301] ? rtnl_newlink+0x653/0xa70
[ 16.008802][ T301] ? rtnl_newlink+0xb9/0xa70
[ 16.008977][ T301] ? rtnetlink_rcv_msg+0x712/0xc10
[ 16.009122][ T301] ? __mutex_trylock_common+0xfa/0x260
[ 16.009309][ T301] ? __pfx___mutex_trylock_common+0x10/0x10
[ 16.009635][ T301] ? lock_acquire+0x32/0xc0
[ 16.009795][ T301] ? trace_contention_end+0xef/0x150
[ 16.009966][ T301] ? __mutex_lock+0x190/0xbc0
[ 16.010112][ T301] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 16.010378][ T301] ? rtnl_newlink+0x653/0xa70
[ 16.010536][ T301] ? __pfx___mutex_lock+0x10/0x10
[ 16.010680][ T301] ? __rtnl_newlink+0x40e/0xa40
[ 16.010867][ T301] rtnl_newlink+0x69c/0xa70
[ 16.011094][ T301] ? __pfx_rtnl_newlink+0x10/0x10
[ 16.011235][ T301] ? find_held_lock+0x2c/0x110
[ 16.011402][ T301] ? __pfx___lock_release+0x10/0x10
[ 16.011581][ T301] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 16.011857][ T301] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 16.012042][ T301] ? __pfx_rtnl_newlink+0x10/0x10
[ 16.012199][ T301] rtnetlink_rcv_msg+0x712/0xc10
[ 16.012419][ T301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 16.012644][ T301] ? hlock_class+0x4e/0x130
[ 16.012792][ T301] ? mark_lock+0x38/0x3e0
[ 16.012943][ T301] ? __lock_acquire+0xb9a/0x1680
[ 16.013105][ T301] netlink_rcv_skb+0x130/0x360
[ 16.013346][ T301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 16.013543][ T301] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 16.013766][ T301] ? netlink_deliver_tap+0x13e/0x340
[ 16.013913][ T301] ? netlink_deliver_tap+0xc3/0x340
[ 16.014138][ T301] netlink_unicast+0x44b/0x710
[ 16.014281][ T301] ? __pfx_netlink_unicast+0x10/0x10
[ 16.014468][ T301] ? find_held_lock+0x2c/0x110
[ 16.014643][ T301] netlink_sendmsg+0x723/0xbe0
[ 16.014929][ T301] ? __pfx_netlink_sendmsg+0x10/0x10
[ 16.015092][ T301] ____sys_sendmsg+0x7ac/0xa10
[ 16.015238][ T301] ? __pfx_____sys_sendmsg+0x10/0x10
[ 16.015422][ T301] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 16.015716][ T301] ___sys_sendmsg+0xee/0x170
[ 16.015915][ T301] ? __pfx____sys_sendmsg+0x10/0x10
[ 16.016063][ T301] ? kasan_save_stack+0x34/0x50
[ 16.016209][ T301] ? kasan_save_stack+0x24/0x50
[ 16.016455][ T301] ? __kasan_record_aux_stack+0x8e/0xa0
[ 16.016628][ T301] ? __call_rcu_common.constprop.0+0xa1/0x4b0
[ 16.016823][ T301] ? __x64_sys_close+0x7c/0xd0
[ 16.016969][ T301] ? do_syscall_64+0xc1/0x1d0
[ 16.017223][ T301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 16.017445][ T301] ? __lock_acquire+0xb9a/0x1680
[ 16.017617][ T301] ? find_held_lock+0x2c/0x110
[ 16.017832][ T301] ? __lock_release+0x103/0x460
[ 16.018107][ T301] ? __virt_addr_valid+0x22b/0x430
[ 16.018308][ T301] ? __pfx___lock_release+0x10/0x10
[ 16.018530][ T301] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 16.018730][ T301] __sys_sendmsg+0x109/0x1a0
[ 16.019103][ T301] ? __pfx___sys_sendmsg+0x10/0x10
[ 16.019319][ T301] ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[ 16.019623][ T301] do_syscall_64+0xc1/0x1d0
[ 16.020004][ T301] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 16.020296][ T301] RIP: 0033:0x7fd41075d9a7
[ 16.020534][ T301] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 16.021472][ T301] RSP: 002b:00007ffc7236b2a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 16.021833][ T301] RAX: ffffffffffffffda RBX: 00007ffc7236b9d0 RCX: 00007fd41075d9a7
[ 16.022340][ T301] RDX: 0000000000000000 RSI: 00007ffc7236b310 RDI: 0000000000000005
[ 16.022692][ T301] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000078
[ 16.023038][ T301] R10: 00007fd41061bef8 R11: 0000000000000246 R12: 0000000000000003
[ 16.023545][ T301] R13: 00000000677c4cfa R14: 0000000000498600 R15: 0000000000000000
[ 16.023894][ T301]
[ 16.024069][ T301] Modules linked in: geneve vxlan ip6_udp_tunnel udp_tunnel netdevsim
[ 16.024845][ T301] ---[ end trace 0000000000000000 ]---
[ 16.025226][ T301] RIP: 0010:page_pool_item_uninit+0x7a/0x130
[ 16.025681][ T301] Code: 8f 48 bb 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 dd 4d 8d 75 1c be 04 00 00 00 4c 89 f7 e8 dd 9c 69 fe 4c 89 f0 48 c1 e8 03 <0f> b6 14 18 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 62 41
[ 16.026599][ T301] RSP: 0018:ffffc90000516f98 EFLAGS: 00010a06
[ 16.026997][ T301] RAX: 199999999999999c RBX: dffffc0000000000 RCX: ffffffff8e029ac3
[ 16.027481][ T301] RDX: 0000000000000000 RSI: 0000000000000004 RDI: cccccccccccccce0
[ 16.027905][ T301] RBP: fffffbfff1e98a78 R08: 0000000000000000 R09: fffffbfff225a088
[ 16.028261][ T301] R10: ffffffff912d0447 R11: 205d313033542020 R12: ffff888008d24e20
[ 16.028636][ T301] R13: ccccccccccccccc4 R14: cccccccccccccce0 R15: 0000000000000000
[ 16.029010][ T301] FS: 00007fd410551800(0000) GS:ffff888036100000(0000) knlGS:0000000000000000
[ 16.029587][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 16.029906][ T301] CR2: 00000000004e55b8 CR3: 0000000009a08001 CR4: 0000000000772ef0
[ 16.030274][ T301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 16.030786][ T301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 16.031049][ T301] PKRU: 55555554
[ 16.031183][ T301] Kernel panic - not syncing: Fatal exception
[ 16.031585][ T301] Kernel Offset: 0xaa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 16.032012][ T301] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr