[ 8.776631][ T180] ip (180) used greatest stack depth: 23952 bytes left [ 8.822294][ T182] eth0: renamed from lag1 [ 8.883589][ T183] eth0: renamed from lag1-end [ 8.986417][ T188] eth1: renamed from lag1 [ 9.030602][ T191] eth1: renamed from lag1-end [ 9.173064][ T199] br0: port 1(eth0) entered blocking state [ 9.173413][ T199] br0: port 1(eth0) entered disabled state [ 9.175788][ T199] eth0: entered allmulticast mode [ 9.178025][ T199] eth0: entered promiscuous mode [ 9.236865][ T202] br0: port 2(eth1) entered blocking state [ 9.237176][ T202] br0: port 2(eth1) entered disabled state [ 9.237779][ T202] eth1: entered allmulticast mode [ 9.238953][ T202] eth1: entered promiscuous mode [ 9.239378][ T202] br0: port 2(eth1) entered blocking state [ 9.239799][ T202] br0: port 2(eth1) entered forwarding state [ 9.581043][ T222] ================================================================== [ 9.581259][ T222] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr+0x864/0xd70 [ 9.581450][ T222] Write of size 8 at addr ff110000021eccf8 by task ip/222 [ 9.581602][ T222] [ 9.581668][ T222] CPU: 1 UID: 0 PID: 222 Comm: ip Not tainted 7.2.0-virtme #1 PREEMPT(full) [ 9.581671][ T222] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 9.581673][ T222] Call Trace: [ 9.581675][ T222] [ 9.581676][ T222] dump_stack_lvl+0x6f/0xa0 [ 9.581682][ T222] print_address_description.constprop.0+0x56/0x2d0 [ 9.581686][ T222] print_report+0xfc/0x1fa [ 9.581688][ T222] ? __virt_addr_valid+0x102/0x440 [ 9.581691][ T222] ? __virt_addr_valid+0x1da/0x440 [ 9.581693][ T222] kasan_report+0x108/0x130 [ 9.581696][ T222] ? bond_update_slave_arr+0x864/0xd70 [ 9.581698][ T222] ? bond_update_slave_arr+0x864/0xd70 [ 9.581700][ T222] bond_update_slave_arr+0x864/0xd70 [ 9.581702][ T222] ? bond_slave_arr_work_rearm+0x80/0x80 [ 9.581703][ T222] ? bond_xdp_check+0x80/0x80 [ 9.581706][ T222] ? netdev_upper_dev_link+0xb0/0xb0 [ 9.581709][ T222] ? sysfs_create_files+0x75/0x1c0 [ 9.581713][ T222] bond_enslave+0x447f/0x5100 [ 9.581715][ T222] ? bond_update_slave_arr+0xd70/0xd70 [ 9.581717][ T222] ? find_held_lock+0x2b/0x80 [ 9.581720][ T222] ? mark_usage+0x61/0x170 [ 9.581722][ T222] ? __lock_acquire+0x518/0xc20 [ 9.581724][ T222] ? __lock_acquire+0x518/0xc20 [ 9.581727][ T222] ? is_bpf_text_address+0x68/0x110 [ 9.581731][ T222] ? rtnl_af_lookup+0x290/0x290 [ 9.581734][ T222] do_set_master+0x3b2/0x780 [ 9.581736][ T222] do_setlink.isra.0+0x9f4/0x2bb0 [ 9.581739][ T222] ? rtnl_link_get_size+0x350/0x350 [ 9.581741][ T222] ? stack_trace_save+0x93/0xc0 [ 9.581744][ T222] ? rcu_lockdep_current_cpu_online+0x3f/0x1b0 [ 9.581747][ T222] ? rcu_read_lock_any_held+0x66/0x90 [ 9.581750][ T222] ? stack_depot_save_flags+0x38e/0x790 [ 9.581753][ T222] ? rcu_lockdep_current_cpu_online+0x3f/0x1b0 [ 9.581754][ T222] ? rcu_read_lock_any_held+0x3c/0x90 [ 9.581756][ T222] ? validate_chain+0x38b/0xc20 [ 9.581758][ T222] ? kasan_save_stack+0x3d/0x50 [ 9.581760][ T222] ? kasan_save_stack+0x2f/0x50 [ 9.581761][ T222] ? kasan_save_track+0x14/0x30 [ 9.581762][ T222] ? __lock_acquire+0x518/0xc20 [ 9.581764][ T222] ? __netlink_dump_start+0x4be/0x8c0 [ 9.581767][ T222] ? ___sys_sendmsg+0x100/0x1d0 [ 9.581771][ T222] ? lock_acquire.part.0+0xd4/0x280 [ 9.581772][ T222] ? rtnl_newlink+0x9a8/0x11c0 [ 9.581774][ T222] ? rcu_is_watching+0x16/0xd0 [ 9.581776][ T222] ? lock_acquire+0x13c/0x160 [ 9.581778][ T222] ? rcu_is_watching+0x16/0xd0 [ 9.581779][ T222] ? rcu_is_watching+0x16/0xd0 [ 9.581780][ T222] ? trace_contention_end+0xb3/0x180 [ 9.581782][ T222] ? __mutex_lock+0x1db/0x1ea0 [ 9.581785][ T222] ? __mutex_lock+0x9a3/0x1ea0 [ 9.581786][ T222] ? rtnl_newlink+0x9a8/0x11c0 [ 9.581788][ T222] ? ww_mutex_lock+0x160/0x160 [ 9.581790][ T222] ? nla_get_range_signed+0x3d0/0x3d0 [ 9.581793][ T222] ? __rtnl_newlink+0x3fa/0xa50 [ 9.581796][ T222] rtnl_newlink+0x9f1/0x11c0 [ 9.581799][ T222] ? rtnl_bridge_getlink+0x850/0x850 [ 9.581801][ T222] ? __lock_acquire+0x518/0xc20 [ 9.581803][ T222] ? lock_acquire.part.0+0xd4/0x280 [ 9.581805][ T222] ? find_held_lock+0x2b/0x80 [ 9.581807][ T222] ? rtnl_bridge_getlink+0x850/0x850 [ 9.581809][ T222] ? __lock_release.isra.0+0x69/0x1a0 [ 9.581811][ T222] ? rtnl_bridge_getlink+0x850/0x850 [ 9.581813][ T222] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 9.581815][ T222] ? rtnl_link_fill+0x900/0x900 [ 9.581817][ T222] ? __lock_acquire+0x518/0xc20 [ 9.581820][ T222] ? lock_acquire.part.0+0xd4/0x280 [ 9.581821][ T222] ? find_held_lock+0x2b/0x80 [ 9.581823][ T222] netlink_rcv_skb+0x14e/0x3a0 [ 9.581825][ T222] ? rtnl_link_fill+0x900/0x900 [ 9.581827][ T222] ? netlink_ack+0xcd0/0xcd0 [ 9.581830][ T222] ? netlink_deliver_tap+0xc5/0x330 [ 9.581832][ T222] ? netlink_deliver_tap+0x13c/0x330 [ 9.581834][ T222] netlink_unicast+0x486/0x750 [ 9.581836][ T222] ? netlink_attachskb+0x810/0x810 [ 9.581838][ T222] ? __lock_acquire+0x518/0xc20 [ 9.581840][ T222] netlink_sendmsg+0x735/0xc60 [ 9.581842][ T222] ? netlink_unicast+0x750/0x750 [ 9.581844][ T222] ? __might_fault+0x97/0x140 [ 9.581848][ T222] ____sys_sendmsg+0x415/0x880 [ 9.581850][ T222] ? copy_msghdr_from_user+0x279/0x420 [ 9.581852][ T222] ? get_timestamp.constprop.0+0x3a0/0x3a0 [ 9.581853][ T222] ? move_addr_to_kernel+0x40/0x40 [ 9.581856][ T222] ___sys_sendmsg+0x14e/0x1d0 [ 9.581857][ T222] ? copy_msghdr_from_user+0x420/0x420 [ 9.581863][ T222] __sys_sendmsg+0x12c/0x1d0 [ 9.581865][ T222] ? __sys_sendmsg_sock+0x20/0x20 [ 9.581867][ T222] ? rcu_is_watching+0x16/0xd0 [ 9.581869][ T222] do_syscall_64+0xff/0x530 [ 9.581871][ T222] ? exc_page_fault+0xee/0x100 [ 9.581874][ T222] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 9.581876][ T222] RIP: 0033:0x7f5ccdec954e [ 9.581879][ T222] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa [ 9.581881][ T222] RSP: 002b:00007fff52a19850 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 9.581884][ T222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5ccdec954e [ 9.581886][ T222] RDX: 0000000000000000 RSI: 00007fff52a19900 RDI: 0000000000000005 [ 9.581887][ T222] RBP: 00007fff52a19860 R08: 0000000000000000 R09: 0000000000000000 [ 9.581887][ T222] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994552 [ 9.581888][ T222] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007fff52a19fc0 [ 9.581891][ T222] [ 9.581891][ T222] [ 9.594615][ T222] Allocated by task 222: [ 9.594711][ T222] kasan_save_stack+0x2f/0x50 [ 9.594837][ T222] kasan_save_track+0x14/0x30 [ 9.594957][ T222] __kasan_kmalloc+0x7b/0x90 [ 9.595082][ T222] __kmalloc_noprof+0x2e3/0x760 [ 9.595205][ T222] bond_update_slave_arr+0x166/0xd70 [ 9.595327][ T222] bond_enslave+0x447f/0x5100 [ 9.595447][ T222] do_set_master+0x3b2/0x780 [ 9.595569][ T222] do_setlink.isra.0+0x9f4/0x2bb0 [ 9.595692][ T222] rtnl_newlink+0x9f1/0x11c0 [ 9.595814][ T222] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 9.595936][ T222] netlink_rcv_skb+0x14e/0x3a0 [ 9.596064][ T222] netlink_unicast+0x486/0x750 [ 9.596185][ T222] netlink_sendmsg+0x735/0xc60 [ 9.596308][ T222] ____sys_sendmsg+0x415/0x880 [ 9.596428][ T222] ___sys_sendmsg+0x14e/0x1d0 [ 9.596548][ T222] __sys_sendmsg+0x12c/0x1d0 [ 9.596670][ T222] do_syscall_64+0xff/0x530 [ 9.596793][ T222] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 9.596943][ T222] [ 9.597009][ T222] The buggy address belongs to the object at ff110000021ecce0 [ 9.597009][ T222] which belongs to the cache kmalloc-32 of size 32 [ 9.597319][ T222] The buggy address is located 0 bytes to the right of [ 9.597319][ T222] allocated 24-byte region [ff110000021ecce0, ff110000021eccf8) [ 9.597647][ T222] [ 9.597711][ T222] The buggy address belongs to the physical page: [ 9.597866][ T222] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xff110000021ece60 pfn:0x21ec [ 9.598123][ T222] flags: 0x80000000000200(workingset|node=0|zone=1) [ 9.598286][ T222] page_type: f5(slab) [ 9.598384][ T222] raw: 0080000000000200 ff1100000103c940 ffd4000000263f50 ff11000001032808 [ 9.598608][ T222] raw: ff110000021ece60 0000000000150010 00000000f5000000 0000000000000000 [ 9.598831][ T222] page dumped because: kasan: bad access detected [ 9.598984][ T222] [ 9.599048][ T222] Memory state around the buggy address: [ 9.599170][ T222] ff110000021ecb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 9.599353][ T222] ff110000021ecc00: fc fc fc fc fa fb fb fb fc fc fc fc fc fc fc fc [ 9.599533][ T222] >ff110000021ecc80: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 fc [ 9.599713][ T222] ^ [ 9.599893][ T222] ff110000021ecd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 9.600074][ T222] ff110000021ecd80: fc fc fc fc 00 00 00 00 fc fc fc fc fc fc fc fc [ 9.600255][ T222] ================================================================== [ 9.600696][ T222] Disabling lock debugging due to kernel taint [ 9.600852][ T222] bond0: (slave eth0): Enslaving as an active interface with an up link [ 9.601084][ T37] br0: port 2(eth1) entered disabled state [ 9.603668][ T37] br0: port 1(eth0) entered blocking state [ 9.603822][ T37] br0: port 1(eth0) entered forwarding state [ 9.608872][ T222] ip (222) used greatest stack depth: 23656 bytes left [ 9.632810][ T224] bond0: (slave eth1): Enslaving as an active interface with an up link [ 9.633290][ T39] br0: port 2(eth1) entered blocking state [ 9.633446][ T39] br0: port 2(eth1) entered forwarding state [ 10.811774][ T230] br0: port 1(eth0) entered disabled state [ 10.813298][ T223] bond0: (slave eth0): link status definitely down, disabling slave [ 12.854675][ T38] br0: port 1(eth0) entered blocking state [ 12.854885][ T38] br0: port 1(eth0) entered forwarding state [ 12.885275][ T233] br0: port 2(eth1) entered disabled state [ 12.892308][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 12.892615][ T223] bond0: (slave eth1): link status definitely down, disabling slave [ 14.021439][ T238] bond0 (unregistering): (slave eth0): Releasing backup interface [ 14.027749][ T238] bond0 (unregistering): (slave eth1): Releasing backup interface [ 14.036497][ T238] bond0 (unregistering): Released all slaves [ 14.039841][ T38] br0: port 1(eth0) entered disabled state [ 14.156679][ T241] [Right Redzone overwritten] 0xff110000056bc1c0-0xff110000056bc1c7 @offset=448. First byte 0x0 instead of 0xcc [ 14.156981][ T241] ============================================================================= [ 14.157207][ T241] BUG kmalloc-32 (Tainted: G B ): Object corrupt [ 14.157396][ T241] ----------------------------------------------------------------------------- [ 14.157396][ T241] [ 14.157648][ T241] Allocated in bond_update_slave_arr+0x166/0xd70 age=4525 cpu=3 pid=224 [ 14.157844][ T241] bond_update_slave_arr+0x166/0xd70 [ 14.157975][ T241] bond_enslave+0x447f/0x5100 [ 14.158111][ T241] do_set_master+0x3b2/0x780 [ 14.158242][ T241] do_setlink.isra.0+0x9f4/0x2bb0 [ 14.158370][ T241] rtnl_newlink+0x9f1/0x11c0 [ 14.158498][ T241] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 14.158626][ T241] netlink_rcv_skb+0x14e/0x3a0 [ 14.158754][ T241] netlink_unicast+0x486/0x750 [ 14.158897][ T241] netlink_sendmsg+0x735/0xc60 [ 14.159025][ T241] ____sys_sendmsg+0x415/0x880 [ 14.159156][ T241] ___sys_sendmsg+0x14e/0x1d0 [ 14.159283][ T241] __sys_sendmsg+0x12c/0x1d0 [ 14.159411][ T241] do_syscall_64+0xff/0x530 [ 14.159540][ T241] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 14.159698][ T241] Freed in qlist_free_all+0x57/0x110 age=4613 cpu=2 pid=222 [ 14.159891][ T241] kasan_quarantine_reduce+0x196/0x240 [ 14.160019][ T241] __kasan_slab_alloc+0x4b/0x70 [ 14.160148][ T241] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 14.160276][ T241] fuse_request_alloc+0x27/0x210 [ 14.160405][ T241] fuse_get_req+0x1e5/0x370 [ 14.160530][ T241] fuse_chan_send+0x56c/0x7a0 [ 14.160656][ T241] fuse_readlink_folio+0x261/0x480 [ 14.160782][ T241] fuse_get_link+0x131/0x350 [ 14.160907][ T241] ovl_get_link+0x6d/0xf0 [ 14.161002][ T241] pick_link+0xf6e/0x1920 [ 14.161102][ T241] step_into_slowpath+0x4c8/0x1240 [ 14.161229][ T241] open_last_lookups+0x7e3/0x1030 [ 14.161355][ T241] path_openat+0x136/0x3b0 [ 14.161480][ T241] do_file_open+0x209/0x480 [ 14.161607][ T241] do_sys_openat2+0xe0/0x170 [ 14.161739][ T241] __x64_sys_openat+0x10e/0x210 [ 14.161868][ T241] Slab 0xffd400000015af00 objects=21 used=11 fp=0xff110000056bcc20 flags=0x80000000000200(workingset|node=0|zone=1) [ 14.162152][ T241] Object 0xff110000056bc1a0 @offset=416 fp=0xff110000056bc7a0 [ 14.162152][ T241] [ 14.162373][ T241] Redzone ff110000056bc180: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 14.162630][ T241] Redzone ff110000056bc190: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 14.162882][ T241] Object ff110000056bc1a0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 14.163142][ T241] Object ff110000056bc1b0: 00 00 00 00 00 00 00 00 00 64 dc 09 00 00 11 ff .........d...... [ 14.163396][ T241] Redzone ff110000056bc1c0: 00 e4 6c 0a 00 00 11 ff ..l..... [ 14.163621][ T241] Padding ff110000056bc238: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 14.163860][ T241] ------------[ cut here ]------------ [ 14.163993][ T241] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/241 [ 14.164197][ T241] Modules linked in: [ 14.164305][ T241] CPU: 2 UID: 0 PID: 241 Comm: ip Tainted: G B 7.2.0-virtme #1 PREEMPT(full) [ 14.164574][ T241] Tainted: [B]=BAD_PAGE [ 14.164675][ T241] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 14.164845][ T241] RIP: 0010:object_err+0x68/0x70 [ 14.164986][ T241] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 14.165463][ T241] RSP: 0018:ffa0000001a879e8 EFLAGS: 00010046 [ 14.165632][ T241] RAX: 0000000000000020 RBX: ff110000056bc1a0 RCX: 0000000000000001 [ 14.165831][ T241] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 14.166033][ T241] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 14.166242][ T241] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000015af00 [ 14.166445][ T241] R13: ff110000056bc1c0 R14: ff1100000103c940 R15: ffd400000015af00 [ 14.166650][ T241] FS: 0000000000000000(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000 [ 14.166886][ T241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 14.167055][ T241] CR2: 00007f9fa533c574 CR3: 0000000019d3c006 CR4: 0000000000771ef0 [ 14.167260][ T241] PKRU: 55555554 [ 14.167363][ T241] Call Trace: [ 14.167463][ T241] [ 14.167533][ T241] check_bytes_and_report.cold+0x43/0x5f [ 14.167669][ T241] check_object+0x19c/0x340 [ 14.167802][ T241] free_debug_processing+0x135/0x230 [ 14.167932][ T241] ? qlist_free_all+0x57/0x110 [ 14.168064][ T241] free_to_partial_list+0x83/0x310 [ 14.168199][ T241] ? qlist_free_all+0x57/0x110 [ 14.168330][ T241] qlist_free_all+0x5c/0x110 [ 14.168460][ T241] kasan_quarantine_reduce+0x196/0x240 [ 14.168592][ T241] __kasan_slab_alloc+0x4b/0x70 [ 14.168723][ T241] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 14.168855][ T241] ? fuse_request_alloc+0x27/0x210 [ 14.168986][ T241] fuse_request_alloc+0x27/0x210 [ 14.169120][ T241] fuse_chan_send+0x78/0x7a0 [ 14.169250][ T241] fuse_file_put+0x286/0x470 [ 14.169381][ T241] ? fuse_file_release+0x57/0x290 [ 14.169511][ T241] fuse_release+0x12c/0x230 [ 14.169641][ T241] __fput+0x363/0xac0 [ 14.169743][ T241] ? trace_hardirqs_on+0x36/0x40 [ 14.169875][ T241] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 14.170037][ T241] task_work_run+0x12b/0x240 [ 14.170172][ T241] ? task_work_cancel+0x30/0x30 [ 14.170304][ T241] ? kmem_cache_free+0xf8/0x550 [ 14.170435][ T241] do_exit+0x614/0xdc0 [ 14.170534][ T241] ? exit_notify+0x890/0x890 [ 14.170665][ T241] ? posixtimer_sig_unignore.isra.0+0x5f0/0x5f0 [ 14.170832][ T241] ? rcu_is_watching+0x16/0xd0 [ 14.170963][ T241] do_group_exit+0xb8/0x370 [ 14.171097][ T241] __x64_sys_exit_group+0x3c/0x50 [ 14.171227][ T241] x64_sys_call+0x1567/0x1570 [ 14.171360][ T241] do_syscall_64+0xff/0x530 [ 14.171490][ T241] ? exc_page_fault+0xee/0x100 [ 14.171622][ T241] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 14.171784][ T241] RIP: 0033:0x7f9fa55261b8 [ 14.171924][ T241] Code: Unable to access opcode bytes at 0x7f9fa552618e. [ 14.172099][ T241] RSP: 002b:00007ffd5d056508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 14.172300][ T241] RAX: ffffffffffffffda RBX: 00007f9fa5656f88 RCX: 00007f9fa55261b8 [ 14.172499][ T241] RDX: 00007f9fa5270fc8 RSI: fffffffffffffeb8 RDI: 0000000000000000 [ 14.172697][ T241] RBP: 00007ffd5d056560 R08: 0000000000000000 R09: 0000000000000050 [ 14.172897][ T241] R10: 00007ffd5d056320 R11: 0000000000000246 R12: 0000000000000001 [ 14.173100][ T241] R13: 0000000000000000 R14: 00007f9fa5655680 R15: 00007f9fa5656fa0 [ 14.173300][ T241] [ 14.173401][ T241] irq event stamp: 0 [ 14.173502][ T241] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 14.173669][ T241] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 14.173900][ T241] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 14.174135][ T241] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 14.174301][ T241] ---[ end trace 0000000000000000 ]--- [ 14.174433][ T241] FIX kmalloc-32: Restoring Right Redzone 0xff110000056bc1c0-0xff110000056bc1c7=0xcc [ 14.174653][ T241] FIX kmalloc-32: Object at 0xff110000056bc1a0 not freed [ 14.174864][ T241] [Right Redzone overwritten] 0xff110000056bc7c0-0xff110000056bc7c7 @offset=1984. First byte 0x0 instead of 0xcc [ 14.175158][ T241] ============================================================================= [ 14.175379][ T241] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 14.175566][ T241] ----------------------------------------------------------------------------- [ 14.175566][ T241] [ 14.175814][ T241] Allocated in bond_update_slave_arr+0x106/0xd70 age=4543 cpu=3 pid=224 [ 14.176001][ T241] bond_update_slave_arr+0x106/0xd70 [ 14.176134][ T241] bond_enslave+0x447f/0x5100 [ 14.176261][ T241] do_set_master+0x3b2/0x780 [ 14.176388][ T241] do_setlink.isra.0+0x9f4/0x2bb0 [ 14.176513][ T241] rtnl_newlink+0x9f1/0x11c0 [ 14.176640][ T241] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 14.176766][ T241] netlink_rcv_skb+0x14e/0x3a0 [ 14.176892][ T241] netlink_unicast+0x486/0x750 [ 14.177018][ T241] netlink_sendmsg+0x735/0xc60 [ 14.177144][ T241] ____sys_sendmsg+0x415/0x880 [ 14.177270][ T241] ___sys_sendmsg+0x14e/0x1d0 [ 14.177396][ T241] __sys_sendmsg+0x12c/0x1d0 [ 14.177520][ T241] do_syscall_64+0xff/0x530 [ 14.177645][ T241] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 14.177802][ T241] Freed in qlist_free_all+0x57/0x110 age=4631 cpu=2 pid=222 [ 14.177989][ T241] kasan_quarantine_reduce+0x196/0x240 [ 14.178120][ T241] __kasan_slab_alloc+0x4b/0x70 [ 14.178245][ T241] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 14.178371][ T241] fuse_request_alloc+0x27/0x210 [ 14.178497][ T241] fuse_get_req+0x1e5/0x370 [ 14.178624][ T241] fuse_chan_send+0x56c/0x7a0 [ 14.178749][ T241] fuse_readlink_folio+0x261/0x480 [ 14.178874][ T241] fuse_get_link+0x131/0x350 [ 14.178998][ T241] ovl_get_link+0x6d/0xf0 [ 14.179097][ T241] pick_link+0xf6e/0x1920 [ 14.179194][ T241] step_into_slowpath+0x4c8/0x1240 [ 14.179320][ T241] open_last_lookups+0x7e3/0x1030 [ 14.179446][ T241] path_openat+0x136/0x3b0 [ 14.179572][ T241] do_file_open+0x209/0x480 [ 14.179698][ T241] do_sys_openat2+0xe0/0x170 [ 14.179822][ T241] __x64_sys_openat+0x10e/0x210 [ 14.179947][ T241] Slab 0xffd400000015af00 objects=21 used=11 fp=0xff110000056bcc20 flags=0x80000000000200(workingset|node=0|zone=1) [ 14.180228][ T241] Object 0xff110000056bc7a0 @offset=1952 fp=0x0000000000000000 [ 14.180228][ T241] [ 14.180442][ T241] Redzone ff110000056bc780: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 14.180694][ T241] Redzone ff110000056bc790: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 14.180944][ T241] Object ff110000056bc7a0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 14.181201][ T241] Object ff110000056bc7b0: 00 00 00 00 00 00 00 00 00 64 dc 09 00 00 11 ff .........d...... [ 14.181451][ T241] Redzone ff110000056bc7c0: 00 e4 6c 0a 00 00 11 ff ..l..... [ 14.181673][ T241] Padding ff110000056bc838: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 14.181898][ T241] ------------[ cut here ]------------ [ 14.182025][ T241] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/241 [ 14.182223][ T241] Modules linked in: [ 14.182324][ T241] CPU: 2 UID: 0 PID: 241 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 14.182584][ T241] Tainted: [B]=BAD_PAGE, [W]=WARN [ 14.182715][ T241] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 14.182880][ T241] RIP: 0010:object_err+0x68/0x70 [ 14.183016][ T241] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 14.183481][ T241] RSP: 0018:ffa0000001a879e8 EFLAGS: 00010046 [ 14.183694][ T241] RAX: 0000000000000220 RBX: ff110000056bc7a0 RCX: 0000000000000001 [ 14.183891][ T241] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 14.184136][ T241] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 14.184330][ T241] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000015af00 [ 14.184575][ T241] R13: ff110000056bc7c0 R14: ff1100000103c940 R15: ffd400000015af00 [ 14.184774][ T241] FS: 0000000000000000(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000 [ 14.185048][ T241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 14.185262][ T241] CR2: 00007f9fa533c574 CR3: 0000000019d3c006 CR4: 0000000000771ef0 [ 14.185505][ T241] PKRU: 55555554 [ 14.185603][ T241] Call Trace: [ 14.185702][ T241] [ 14.185814][ T241] check_bytes_and_report.cold+0x43/0x5f [ 14.185945][ T241] check_object+0x19c/0x340 [ 14.186126][ T241] free_debug_processing+0x135/0x230 [ 14.186257][ T241] ? qlist_free_all+0x57/0x110 [ 14.186433][ T241] free_to_partial_list+0x83/0x310 [ 14.186560][ T241] ? qlist_free_all+0x57/0x110 [ 14.186733][ T241] qlist_free_all+0x5c/0x110 [ 14.186864][ T241] kasan_quarantine_reduce+0x196/0x240 [ 14.187039][ T241] __kasan_slab_alloc+0x4b/0x70 [ 14.187172][ T241] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 14.187349][ T241] ? fuse_request_alloc+0x27/0x210 [ 14.187479][ T241] fuse_request_alloc+0x27/0x210 [ 14.187654][ T241] fuse_chan_send+0x78/0x7a0 [ 14.187784][ T241] fuse_file_put+0x286/0x470 [ 14.187960][ T241] ? fuse_file_release+0x57/0x290 [ 14.188092][ T241] fuse_release+0x12c/0x230 [ 14.188265][ T241] __fput+0x363/0xac0 [ 14.188364][ T241] ? trace_hardirqs_on+0x36/0x40 [ 14.188537][ T241] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 14.188701][ T241] task_work_run+0x12b/0x240 [ 14.188874][ T241] ? task_work_cancel+0x30/0x30 [ 14.189004][ T241] ? kmem_cache_free+0xf8/0x550 [ 14.189184][ T241] do_exit+0x614/0xdc0 [ 14.189284][ T241] ? exit_notify+0x890/0x890 [ 14.189457][ T241] ? posixtimer_sig_unignore.isra.0+0x5f0/0x5f0 [ 14.189617][ T241] ? rcu_is_watching+0x16/0xd0 [ 14.189791][ T241] do_group_exit+0xb8/0x370 [ 14.189922][ T241] __x64_sys_exit_group+0x3c/0x50 [ 14.190099][ T241] x64_sys_call+0x1567/0x1570 [ 14.190229][ T241] do_syscall_64+0xff/0x530 [ 14.190403][ T241] ? exc_page_fault+0xee/0x100 [ 14.190533][ T241] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 14.190737][ T241] RIP: 0033:0x7f9fa55261b8 [ 14.190872][ T241] Code: Unable to access opcode bytes at 0x7f9fa552618e. [ 14.191090][ T241] RSP: 002b:00007ffd5d056508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 14.191288][ T241] RAX: ffffffffffffffda RBX: 00007f9fa5656f88 RCX: 00007f9fa55261b8 [ 14.191485][ T241] RDX: 00007f9fa5270fc8 RSI: fffffffffffffeb8 RDI: 0000000000000000 [ 14.191682][ T241] RBP: 00007ffd5d056560 R08: 0000000000000000 R09: 0000000000000050 [ 14.191921][ T241] R10: 00007ffd5d056320 R11: 0000000000000246 R12: 0000000000000001 [ 14.192167][ T241] R13: 0000000000000000 R14: 00007f9fa5655680 R15: 00007f9fa5656fa0 [ 14.192368][ T241] [ 14.192510][ T241] irq event stamp: 0 [ 14.192608][ T241] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 14.192813][ T241] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 14.193086][ T241] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 14.193358][ T241] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 14.193520][ T241] ---[ end trace 0000000000000000 ]--- [ 14.193691][ T241] FIX kmalloc-32: Restoring Right Redzone 0xff110000056bc7c0-0xff110000056bc7c7=0xcc [ 14.193946][ T241] FIX kmalloc-32: Object at 0xff110000056bc7a0 not freed [ 14.303056][ T245] bond0: (slave eth0): Enslaving as an active interface with an up link [ 14.303359][ T39] br0: port 1(eth0) entered blocking state [ 14.303511][ T39] br0: port 1(eth0) entered forwarding state [ 14.337955][ T246] bond0: (slave eth1): Enslaving as an active interface with an up link [ 14.338512][ T38] br0: port 2(eth1) entered blocking state [ 14.338699][ T38] br0: port 2(eth1) entered forwarding state [ 14.366618][ T12] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 14.370604][ T12] bond0: active interface up! [ 14.477305][ T12] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 15.489430][ T252] br0: port 1(eth0) entered disabled state [ 15.517300][ T12] bond0: (slave eth0): link status definitely down, disabling slave [ 17.528451][ T38] br0: port 1(eth0) entered blocking state [ 17.528623][ T38] br0: port 1(eth0) entered forwarding state [ 17.554203][ T255] br0: port 2(eth1) entered disabled state [ 17.597231][ T12] bond0: (slave eth0): link status up, enabling it in 0 ms [ 17.597514][ T12] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 17.597824][ T12] bond0: (slave eth1): link status definitely down, disabling slave [ 18.692934][ T260] bond0 (unregistering): (slave eth0): Releasing backup interface [ 18.700718][ T260] bond0 (unregistering): (slave eth1): Releasing backup interface [ 18.708470][ T260] bond0 (unregistering): Released all slaves [ 18.715466][ T39] br0: port 1(eth0) entered disabled state [ 18.872358][ T265] [kmalloc Redzone overwritten] 0xff11000009243cf8-0xff11000009243cff @offset=3320. First byte 0x0 instead of 0xcc [ 18.872673][ T265] ============================================================================= [ 18.872904][ T265] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 18.873109][ T265] ----------------------------------------------------------------------------- [ 18.873109][ T265] [ 18.873370][ T265] Allocated in bond_update_slave_arr+0x166/0xd70 age=4571 cpu=3 pid=245 [ 18.873576][ T265] bond_update_slave_arr+0x166/0xd70 [ 18.873713][ T265] bond_enslave+0x447f/0x5100 [ 18.873844][ T265] do_set_master+0x3b2/0x780 [ 18.873977][ T265] do_setlink.isra.0+0x9f4/0x2bb0 [ 18.874110][ T265] rtnl_newlink+0x9f1/0x11c0 [ 18.874245][ T265] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 18.874377][ T265] netlink_rcv_skb+0x14e/0x3a0 [ 18.874511][ T265] netlink_unicast+0x486/0x750 [ 18.874642][ T265] netlink_sendmsg+0x735/0xc60 [ 18.874775][ T265] ____sys_sendmsg+0x415/0x880 [ 18.874907][ T265] ___sys_sendmsg+0x14e/0x1d0 [ 18.875038][ T265] __sys_sendmsg+0x12c/0x1d0 [ 18.875176][ T265] do_syscall_64+0xff/0x530 [ 18.875310][ T265] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.875476][ T265] Freed in qlist_free_all+0x57/0x110 age=4748 cpu=2 pid=240 [ 18.875677][ T265] kasan_quarantine_reduce+0x196/0x240 [ 18.875812][ T265] __kasan_slab_alloc+0x4b/0x70 [ 18.875943][ T265] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 18.876075][ T265] fuse_request_alloc+0x27/0x210 [ 18.876209][ T265] fuse_chan_send+0x78/0x7a0 [ 18.876341][ T265] fuse_file_put+0x286/0x470 [ 18.876472][ T265] fuse_release+0x12c/0x230 [ 18.876601][ T265] __fput+0x363/0xac0 [ 18.876702][ T265] task_work_run+0x12b/0x240 [ 18.876835][ T265] do_exit+0x614/0xdc0 [ 18.876935][ T265] do_group_exit+0xb8/0x370 [ 18.877064][ T265] __x64_sys_exit_group+0x3c/0x50 [ 18.877199][ T265] x64_sys_call+0x1567/0x1570 [ 18.877335][ T265] do_syscall_64+0xff/0x530 [ 18.877463][ T265] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.877624][ T265] Slab 0xffd40000002490c0 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 18.877884][ T265] Object 0xff11000009243ce0 @offset=3296 fp=0x0000000000000000 [ 18.877884][ T265] [ 18.878114][ T265] Redzone ff11000009243cc0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 18.878380][ T265] Redzone ff11000009243cd0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 18.878643][ T265] Object ff11000009243ce0: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 18.878910][ T265] Object ff11000009243cf0: 00 00 00 00 00 00 00 00 00 04 d3 0c 00 00 11 ff ................ [ 18.879175][ T265] Redzone ff11000009243d00: cc cc cc cc cc cc cc cc ........ [ 18.879404][ T265] Padding ff11000009243d78: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 18.879649][ T265] ------------[ cut here ]------------ [ 18.879783][ T265] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/265 [ 18.879987][ T265] Modules linked in: [ 18.880096][ T265] CPU: 2 UID: 0 PID: 265 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 18.880376][ T265] Tainted: [B]=BAD_PAGE, [W]=WARN [ 18.880512][ T265] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.880683][ T265] RIP: 0010:object_err+0x68/0x70 [ 18.880827][ T265] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 18.881314][ T265] RSP: 0018:ffa0000001bb7660 EFLAGS: 00010046 [ 18.881485][ T265] RAX: 0000000000000220 RBX: ff11000009243ce0 RCX: 0000000000000001 [ 18.881689][ T265] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 18.881896][ T265] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 18.882102][ T265] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000002490c0 [ 18.882311][ T265] R13: ff11000009243cf8 R14: ff1100000103c940 R15: ffd40000002490c0 [ 18.882521][ T265] FS: 00007fdab54e0cc0(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000 [ 18.882764][ T265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.882935][ T265] CR2: 00007fff228cfedc CR3: 000000000c72a004 CR4: 0000000000771ef0 [ 18.883145][ T265] PKRU: 55555554 [ 18.883250][ T265] Call Trace: [ 18.883355][ T265] [ 18.883427][ T265] check_bytes_and_report.cold+0x43/0x5f [ 18.883565][ T265] check_object+0x31f/0x340 [ 18.883701][ T265] free_debug_processing+0x135/0x230 [ 18.883837][ T265] ? qlist_free_all+0x57/0x110 [ 18.883971][ T265] free_to_partial_list+0x83/0x310 [ 18.884108][ T265] ? qlist_free_all+0x57/0x110 [ 18.884241][ T265] qlist_free_all+0x5c/0x110 [ 18.884376][ T265] kasan_quarantine_reduce+0x196/0x240 [ 18.884511][ T265] __kasan_slab_alloc+0x4b/0x70 [ 18.884646][ T265] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 18.884780][ T265] ? __alloc_object+0x30/0x260 [ 18.884914][ T265] __alloc_object+0x30/0x260 [ 18.885049][ T265] ? rcu_is_watching+0x16/0xd0 [ 18.885188][ T265] __create_object+0x30/0x110 [ 18.885323][ T265] pcpu_alloc_noprof+0x76b/0xd70 [ 18.885460][ T265] ? lockdep_init_map_type+0x5d/0x250 [ 18.885600][ T265] __percpu_init_rwsem+0x3b/0x170 [ 18.885735][ T265] alloc_super.isra.0+0x1df/0xbf0 [ 18.885872][ T265] ? lock_release+0x184/0x1f0 [ 18.886009][ T265] ? kernfs_encode_fh+0x160/0x160 [ 18.886155][ T265] sget_fc+0x15a/0xd30 [ 18.886259][ T265] ? kernfs_statfs+0x130/0x130 [ 18.886393][ T265] ? fs_bdev_freeze+0x3d0/0x3d0 [ 18.886528][ T265] ? kasan_save_track+0x14/0x30 [ 18.886665][ T265] ? __kasan_kmalloc+0x7b/0x90 [ 18.886800][ T265] ? __kmalloc_cache_noprof+0x29a/0x620 [ 18.886937][ T265] ? kernfs_get_tree+0xcb/0x7b0 [ 18.887073][ T265] kernfs_get_tree+0x1e2/0x7b0 [ 18.887215][ T265] ? kmemdup_nul+0x56/0xb0 [ 18.887351][ T265] ? kernfs_super_ns+0x80/0x80 [ 18.887486][ T265] ? lock_release+0x184/0x1f0 [ 18.887620][ T265] ? do_raw_spin_unlock+0x59/0x250 [ 18.887755][ T265] ? vfs_parse_fs_param+0x350/0x350 [ 18.887892][ T265] ? _raw_spin_unlock+0x2d/0x50 [ 18.888028][ T265] vfs_get_tree+0x92/0x2a0 [ 18.888167][ T265] fc_mount+0x1a/0x220 [ 18.888271][ T265] do_new_mount+0x2be/0x540 [ 18.888405][ T265] ? do_add_mount+0x480/0x480 [ 18.888539][ T265] ? rcu_is_watching+0x16/0xd0 [ 18.888673][ T265] ? cap_capable+0x1d7/0x3d0 [ 18.888810][ T265] path_mount+0x4f3/0x1c80 [ 18.888946][ T265] ? finish_automount+0x2b0/0x2b0 [ 18.889080][ T265] ? trace_irq_disable.constprop.0+0x9b/0x160 [ 18.889254][ T265] ? trace_hardirqs_on+0x36/0x40 [ 18.889388][ T265] ? kmem_cache_free+0xf8/0x550 [ 18.889522][ T265] ? __x64_sys_mount+0x204/0x270 [ 18.889656][ T265] __x64_sys_mount+0x204/0x270 [ 18.889790][ T265] ? copy_mnt_ns+0xf50/0xf50 [ 18.889924][ T265] ? rcu_is_watching+0x16/0xd0 [ 18.890059][ T265] ? fpregs_restore_userregs+0x14b/0x300 [ 18.890198][ T265] ? rcu_is_watching+0x16/0xd0 [ 18.890335][ T265] do_syscall_64+0xff/0x530 [ 18.890470][ T265] ? exc_page_fault+0xee/0x100 [ 18.890605][ T265] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.890773][ T265] RIP: 0033:0x7fdab57cd5be [ 18.890915][ T265] Code: 48 8b 0d 3d 78 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 0a 78 0f 00 f7 d8 64 89 01 48 [ 18.891408][ T265] RSP: 002b:00007fff228d0568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 18.891662][ T265] RAX: ffffffffffffffda RBX: 00007fff228d47f6 RCX: 00007fdab57cd5be [ 18.891914][ T265] RDX: 0000000000480d89 RSI: 0000000000480d84 RDI: 00007fff228d47f6 [ 18.892170][ T265] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 18.892377][ T265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 18.892629][ T265] R13: 0000000000000065 R14: 00007fff228d4800 R15: 00007fff228d3a48 [ 18.892882][ T265] [ 18.892986][ T265] irq event stamp: 0 [ 18.893140][ T265] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 18.893310][ T265] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 18.893595][ T265] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 18.893874][ T265] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 18.894088][ T265] ---[ end trace 0000000000000000 ]--- [ 18.894226][ T265] FIX kmalloc-32: Restoring kmalloc Redzone 0xff11000009243cf8-0xff11000009243cff=0xcc [ 18.894496][ T265] FIX kmalloc-32: Object at 0xff11000009243ce0 not freed [ 18.948061][ T267] [kmalloc Redzone overwritten] 0xff110000021eccf8-0xff110000021eccff @offset=3320. First byte 0x0 instead of 0xcc [ 18.948355][ T267] ============================================================================= [ 18.948580][ T267] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 18.948771][ T267] ----------------------------------------------------------------------------- [ 18.948771][ T267] [ 18.949022][ T267] Allocated in bond_update_slave_arr+0x166/0xd70 age=9368 cpu=1 pid=222 [ 18.949219][ T267] bond_update_slave_arr+0x166/0xd70 [ 18.949348][ T267] bond_enslave+0x447f/0x5100 [ 18.949475][ T267] do_set_master+0x3b2/0x780 [ 18.949603][ T267] do_setlink.isra.0+0x9f4/0x2bb0 [ 18.949730][ T267] rtnl_newlink+0x9f1/0x11c0 [ 18.949856][ T267] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 18.949982][ T267] netlink_rcv_skb+0x14e/0x3a0 [ 18.950110][ T267] netlink_unicast+0x486/0x750 [ 18.950237][ T267] netlink_sendmsg+0x735/0xc60 [ 18.950362][ T267] ____sys_sendmsg+0x415/0x880 [ 18.950491][ T267] ___sys_sendmsg+0x14e/0x1d0 [ 18.950617][ T267] __sys_sendmsg+0x12c/0x1d0 [ 18.950744][ T267] do_syscall_64+0xff/0x530 [ 18.950870][ T267] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.951026][ T267] Freed in qlist_free_all+0x57/0x110 age=9448 cpu=3 pid=220 [ 18.951221][ T267] kasan_quarantine_reduce+0x196/0x240 [ 18.951348][ T267] __kasan_slab_alloc+0x4b/0x70 [ 18.951471][ T267] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 18.951595][ T267] vm_area_dup+0x23/0x910 [ 18.951692][ T267] __split_vma+0x192/0xb90 [ 18.951818][ T267] vma_modify+0x315/0x430 [ 18.951912][ T267] vma_modify_flags+0x281/0x440 [ 18.952035][ T267] mprotect_fixup+0x226/0xba0 [ 18.952164][ T267] do_mprotect_pkey+0x6d9/0xb10 [ 18.952288][ T267] __x64_sys_mprotect+0x78/0xd0 [ 18.952411][ T267] do_syscall_64+0xff/0x530 [ 18.952534][ T267] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.952690][ T267] Slab 0xffd4000000087b00 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 18.952936][ T267] Object 0xff110000021ecce0 @offset=3296 fp=0xff110000021ec7a0 [ 18.952936][ T267] [ 18.953155][ T267] Redzone ff110000021eccc0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 18.953407][ T267] Redzone ff110000021eccd0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 18.953655][ T267] Object ff110000021ecce0: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 18.953904][ T267] Object ff110000021eccf0: 00 00 00 00 00 00 00 00 00 64 dc 09 00 00 11 ff .........d...... [ 18.954151][ T267] Redzone ff110000021ecd00: cc cc cc cc cc cc cc cc ........ [ 18.954370][ T267] Padding ff110000021ecd78: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 18.954600][ T267] ------------[ cut here ]------------ [ 18.954729][ T267] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/267 [ 18.954926][ T267] Modules linked in: [ 18.955029][ T267] CPU: 3 UID: 0 PID: 267 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 18.955298][ T267] Tainted: [B]=BAD_PAGE, [W]=WARN [ 18.955429][ T267] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.955593][ T267] RIP: 0010:object_err+0x68/0x70 [ 18.955731][ T267] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 18.956198][ T267] RSP: 0018:ffa0000001bb7728 EFLAGS: 00010046 [ 18.956363][ T267] RAX: 0000000000000220 RBX: ff110000021ecce0 RCX: 0000000000000001 [ 18.956558][ T267] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 18.956755][ T267] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 18.956951][ T267] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd4000000087b00 [ 18.957150][ T267] R13: ff110000021eccf8 R14: ff1100000103c940 R15: ffd4000000087b00 [ 18.957348][ T267] FS: 0000000000000000(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000 [ 18.957578][ T267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.957743][ T267] CR2: 00007eff2c2067a0 CR3: 000000000ce2a002 CR4: 0000000000771ef0 [ 18.957940][ T267] PKRU: 55555554 [ 18.958040][ T267] Call Trace: [ 18.958141][ T267] [ 18.958207][ T267] check_bytes_and_report.cold+0x43/0x5f [ 18.958338][ T267] check_object+0x31f/0x340 [ 18.958467][ T267] free_debug_processing+0x135/0x230 [ 18.958595][ T267] ? qlist_free_all+0x57/0x110 [ 18.958726][ T267] free_to_partial_list+0x83/0x310 [ 18.958856][ T267] ? qlist_free_all+0x57/0x110 [ 18.958987][ T267] qlist_free_all+0x5c/0x110 [ 18.959118][ T267] kasan_quarantine_reduce+0x196/0x240 [ 18.959247][ T267] __kasan_slab_alloc+0x4b/0x70 [ 18.959376][ T267] __kmalloc_cache_noprof+0x23e/0x620 [ 18.959506][ T267] ? ovl_open+0x1ef/0x2f0 [ 18.959605][ T267] ovl_open+0x1ef/0x2f0 [ 18.959704][ T267] ? ovl_llseek+0x2e0/0x2e0 [ 18.959832][ T267] ? rcu_is_watching+0x16/0xd0 [ 18.959962][ T267] ? lock_release+0x184/0x1f0 [ 18.960092][ T267] ? do_raw_spin_unlock+0x59/0x250 [ 18.960224][ T267] ? ovl_llseek+0x2e0/0x2e0 [ 18.960352][ T267] do_dentry_open+0x408/0x1310 [ 18.960484][ T267] vfs_open+0x7a/0x440 [ 18.960582][ T267] ? may_open+0xe6/0x330 [ 18.960682][ T267] do_open+0x646/0xdd0 [ 18.960781][ T267] ? open_last_lookups+0x7e3/0x1030 [ 18.960911][ T267] path_openat+0x1d0/0x3b0 [ 18.961041][ T267] ? kernel_tmpfile_open+0x70/0x70 [ 18.961174][ T267] ? stack_trace_save+0x93/0xc0 [ 18.961306][ T267] do_file_open+0x209/0x480 [ 18.961436][ T267] ? path_openat+0x3b0/0x3b0 [ 18.961566][ T267] ? page_get_link_raw+0x70/0x70 [ 18.961697][ T267] ? _raw_spin_unlock+0x2d/0x50 [ 18.961827][ T267] ? alloc_fd+0x33a/0x600 [ 18.961928][ T267] do_sys_openat2+0xe0/0x170 [ 18.962055][ T267] ? build_open_flags+0x6e0/0x6e0 [ 18.962188][ T267] ? rcu_is_watching+0x16/0xd0 [ 18.962317][ T267] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 18.962478][ T267] __x64_sys_openat+0x10e/0x210 [ 18.962607][ T267] ? fput_close_sync+0xde/0x1b0 [ 18.962739][ T267] ? __ia32_sys_open+0x1b0/0x1b0 [ 18.962868][ T267] ? fpregs_restore_userregs+0x14b/0x300 [ 18.962999][ T267] ? rcu_is_watching+0x16/0xd0 [ 18.963131][ T267] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 18.963293][ T267] ? trace_hardirqs_off_finish+0x147/0x1a0 [ 18.963454][ T267] do_syscall_64+0xff/0x530 [ 18.963584][ T267] ? exc_page_fault+0xee/0x100 [ 18.963713][ T267] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.963874][ T267] RIP: 0033:0x7eff2c3026e5 [ 18.964011][ T267] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00 [ 18.964476][ T267] RSP: 002b:00007ffc43eff740 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 18.964674][ T267] RAX: ffffffffffffffda RBX: 00007ffc43eff9d0 RCX: 00007eff2c3026e5 [ 18.964870][ T267] RDX: 0000000000080000 RSI: 00007ffc43eff7c0 RDI: 00000000ffffff9c [ 18.965065][ T267] RBP: 00007ffc43eff740 R08: 00007ffc43eff9b7 R09: 0000000000000000 [ 18.965264][ T267] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc43eff7c0 [ 18.965459][ T267] R13: 00007ffc43eff7c0 R14: 00007eff2c2d4000 R15: 0000000000000000 [ 18.965656][ T267] [ 18.965754][ T267] irq event stamp: 0 [ 18.965854][ T267] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 18.966064][ T267] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 18.966340][ T267] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 18.966567][ T267] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 18.966771][ T267] ---[ end trace 0000000000000000 ]--- [ 18.966943][ T267] FIX kmalloc-32: Restoring kmalloc Redzone 0xff110000021eccf8-0xff110000021eccff=0xcc [ 18.967165][ T267] FIX kmalloc-32: Object at 0xff110000021ecce0 not freed [ 18.967528][ T267] [kmalloc Redzone overwritten] 0xff110000021ec7b8-0xff110000021ec7bf @offset=1976. First byte 0x0 instead of 0xcc [ 18.967797][ T267] ============================================================================= [ 18.968019][ T267] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 18.968206][ T267] ----------------------------------------------------------------------------- [ 18.968206][ T267] [ 18.968494][ T267] Allocated in bond_update_slave_arr+0x106/0xd70 age=9388 cpu=1 pid=222 [ 18.968720][ T267] bond_update_slave_arr+0x106/0xd70 [ 18.968887][ T267] bond_enslave+0x447f/0x5100 [ 18.969012][ T267] do_set_master+0x3b2/0x780 [ 18.969182][ T267] do_setlink.isra.0+0x9f4/0x2bb0 [ 18.969309][ T267] rtnl_newlink+0x9f1/0x11c0 [ 18.969477][ T267] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 18.969602][ T267] netlink_rcv_skb+0x14e/0x3a0 [ 18.969768][ T267] netlink_unicast+0x486/0x750 [ 18.969893][ T267] netlink_sendmsg+0x735/0xc60 [ 18.970060][ T267] ____sys_sendmsg+0x415/0x880 [ 18.970189][ T267] ___sys_sendmsg+0x14e/0x1d0 [ 18.970357][ T267] __sys_sendmsg+0x12c/0x1d0 [ 18.970481][ T267] do_syscall_64+0xff/0x530 [ 18.970649][ T267] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.970805][ T267] Freed in qlist_free_all+0x57/0x110 age=9468 cpu=3 pid=220 [ 18.971031][ T267] kasan_quarantine_reduce+0x196/0x240 [ 18.971161][ T267] __kasan_slab_alloc+0x4b/0x70 [ 18.971327][ T267] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 18.971450][ T267] vm_area_dup+0x23/0x910 [ 18.971586][ T267] __split_vma+0x192/0xb90 [ 18.971710][ T267] vma_modify+0x315/0x430 [ 18.971843][ T267] vma_modify_flags+0x281/0x440 [ 18.971965][ T267] mprotect_fixup+0x226/0xba0 [ 18.972132][ T267] do_mprotect_pkey+0x6d9/0xb10 [ 18.972254][ T267] __x64_sys_mprotect+0x78/0xd0 [ 18.972419][ T267] do_syscall_64+0xff/0x530 [ 18.972542][ T267] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.972738][ T267] Slab 0xffd4000000087b00 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 18.973025][ T267] Object 0xff110000021ec7a0 @offset=1952 fp=0x0000000000000000 [ 18.973025][ T267] [ 18.973284][ T267] Redzone ff110000021ec780: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 18.973578][ T267] Redzone ff110000021ec790: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 18.973869][ T267] Object ff110000021ec7a0: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 18.974166][ T267] Object ff110000021ec7b0: 00 00 00 00 00 00 00 00 00 64 dc 09 00 00 11 ff .........d...... [ 18.974456][ T267] Redzone ff110000021ec7c0: cc cc cc cc cc cc cc cc ........ [ 18.974715][ T267] Padding ff110000021ec838: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 18.974940][ T267] ------------[ cut here ]------------ [ 18.975112][ T267] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/267 [ 18.975347][ T267] Modules linked in: [ 18.975446][ T267] CPU: 3 UID: 0 PID: 267 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 18.975754][ T267] Tainted: [B]=BAD_PAGE, [W]=WARN [ 18.975929][ T267] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.976094][ T267] RIP: 0010:object_err+0x68/0x70 [ 18.976279][ T267] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 18.976789][ T267] RSP: 0018:ffa0000001bb7728 EFLAGS: 00010046 [ 18.977000][ T267] RAX: 0000000000000220 RBX: ff110000021ec7a0 RCX: 0000000000000001 [ 18.977245][ T267] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 18.977486][ T267] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 18.977682][ T267] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd4000000087b00 [ 18.977925][ T267] R13: ff110000021ec7b8 R14: ff1100000103c940 R15: ffd4000000087b00 [ 18.978169][ T267] FS: 0000000000000000(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000 [ 18.978444][ T267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.978609][ T267] CR2: 00007eff2c2067a0 CR3: 000000000ce2a002 CR4: 0000000000771ef0 [ 18.978852][ T267] PKRU: 55555554 [ 18.978951][ T267] Call Trace: [ 18.979094][ T267] [ 18.979164][ T267] check_bytes_and_report.cold+0x43/0x5f [ 18.979338][ T267] check_object+0x31f/0x340 [ 18.979469][ T267] free_debug_processing+0x135/0x230 [ 18.979644][ T267] ? qlist_free_all+0x57/0x110 [ 18.979773][ T267] free_to_partial_list+0x83/0x310 [ 18.979946][ T267] ? qlist_free_all+0x57/0x110 [ 18.980077][ T267] qlist_free_all+0x5c/0x110 [ 18.980253][ T267] kasan_quarantine_reduce+0x196/0x240 [ 18.980383][ T267] __kasan_slab_alloc+0x4b/0x70 [ 18.980559][ T267] __kmalloc_cache_noprof+0x23e/0x620 [ 18.980689][ T267] ? ovl_open+0x1ef/0x2f0 [ 18.980789][ T267] ovl_open+0x1ef/0x2f0 [ 18.980930][ T267] ? ovl_llseek+0x2e0/0x2e0 [ 18.981062][ T267] ? rcu_is_watching+0x16/0xd0 [ 18.981239][ T267] ? lock_release+0x184/0x1f0 [ 18.981373][ T267] ? do_raw_spin_unlock+0x59/0x250 [ 18.981544][ T267] ? ovl_llseek+0x2e0/0x2e0 [ 18.981673][ T267] do_dentry_open+0x408/0x1310 [ 18.981846][ T267] vfs_open+0x7a/0x440 [ 18.981945][ T267] ? may_open+0xe6/0x330 [ 18.982088][ T267] do_open+0x646/0xdd0 [ 18.982189][ T267] ? open_last_lookups+0x7e3/0x1030 [ 18.982319][ T267] path_openat+0x1d0/0x3b0 [ 18.982492][ T267] ? kernel_tmpfile_open+0x70/0x70 [ 18.982623][ T267] ? stack_trace_save+0x93/0xc0 [ 18.982796][ T267] do_file_open+0x209/0x480 [ 18.982925][ T267] ? path_openat+0x3b0/0x3b0 [ 18.983102][ T267] ? page_get_link_raw+0x70/0x70 [ 18.983234][ T267] ? _raw_spin_unlock+0x2d/0x50 [ 18.983409][ T267] ? alloc_fd+0x33a/0x600 [ 18.983507][ T267] do_sys_openat2+0xe0/0x170 [ 18.983679][ T267] ? build_open_flags+0x6e0/0x6e0 [ 18.983809][ T267] ? rcu_is_watching+0x16/0xd0 [ 18.983980][ T267] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 18.984145][ T267] __x64_sys_openat+0x10e/0x210 [ 18.984319][ T267] ? fput_close_sync+0xde/0x1b0 [ 18.984449][ T267] ? __ia32_sys_open+0x1b0/0x1b0 [ 18.984623][ T267] ? fpregs_restore_userregs+0x14b/0x300 [ 18.984754][ T267] ? rcu_is_watching+0x16/0xd0 [ 18.984926][ T267] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 18.985135][ T267] ? trace_hardirqs_off_finish+0x147/0x1a0 [ 18.985296][ T267] do_syscall_64+0xff/0x530 [ 18.985469][ T267] ? exc_page_fault+0xee/0x100 [ 18.985599][ T267] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.985804][ T267] RIP: 0033:0x7eff2c3026e5 [ 18.985938][ T267] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00 [ 18.986497][ T267] RSP: 002b:00007ffc43eff740 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 18.986740][ T267] RAX: ffffffffffffffda RBX: 00007ffc43eff9d0 RCX: 00007eff2c3026e5 [ 18.986982][ T267] RDX: 0000000000080000 RSI: 00007ffc43eff7c0 RDI: 00000000ffffff9c [ 18.987178][ T267] RBP: 00007ffc43eff740 R08: 00007ffc43eff9b7 R09: 0000000000000000 [ 18.987372][ T267] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc43eff7c0 [ 18.987614][ T267] R13: 00007ffc43eff7c0 R14: 00007eff2c2d4000 R15: 0000000000000000 [ 18.987857][ T267] [ 18.987955][ T267] irq event stamp: 0 [ 18.988052][ T267] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 18.988259][ T267] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 18.988527][ T267] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 18.988796][ T267] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 18.988956][ T267] ---[ end trace 0000000000000000 ]--- [ 18.989129][ T267] FIX kmalloc-32: Restoring kmalloc Redzone 0xff110000021ec7b8-0xff110000021ec7bf=0xcc [ 18.989386][ T267] FIX kmalloc-32: Object at 0xff110000021ec7a0 not freed [ 18.995003][ T267] bond0: (slave eth0): Enslaving as an active interface with an up link [ 18.995343][ T39] br0: port 1(eth0) entered blocking state [ 18.995530][ T39] br0: port 1(eth0) entered forwarding state [ 19.001714][ T168] [Right Redzone overwritten] 0xff11000009370d00-0xff11000009370d07 @offset=3328. First byte 0x0 instead of 0xcc [ 19.001991][ T168] ============================================================================= [ 19.002203][ T168] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 19.002383][ T168] ----------------------------------------------------------------------------- [ 19.002383][ T168] [ 19.002624][ T168] Allocated in bond_update_slave_arr+0x166/0xd70 age=4664 cpu=2 pid=246 [ 19.002805][ T168] bond_update_slave_arr+0x166/0xd70 [ 19.002928][ T168] bond_enslave+0x447f/0x5100 [ 19.003048][ T168] do_set_master+0x3b2/0x780 [ 19.003170][ T168] do_setlink.isra.0+0x9f4/0x2bb0 [ 19.003288][ T168] rtnl_newlink+0x9f1/0x11c0 [ 19.003407][ T168] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 19.003526][ T168] netlink_rcv_skb+0x14e/0x3a0 [ 19.003645][ T168] netlink_unicast+0x486/0x750 [ 19.003764][ T168] netlink_sendmsg+0x735/0xc60 [ 19.003882][ T168] ____sys_sendmsg+0x415/0x880 [ 19.004000][ T168] ___sys_sendmsg+0x14e/0x1d0 [ 19.004120][ T168] __sys_sendmsg+0x12c/0x1d0 [ 19.004238][ T168] do_syscall_64+0xff/0x530 [ 19.004356][ T168] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 19.004504][ T168] Freed in qlist_free_all+0x57/0x110 age=4806 cpu=2 pid=241 [ 19.004682][ T168] kasan_quarantine_reduce+0x196/0x240 [ 19.004801][ T168] __kasan_slab_alloc+0x4b/0x70 [ 19.004919][ T168] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 19.005035][ T168] fuse_request_alloc+0x27/0x210 [ 19.005156][ T168] fuse_chan_send+0x78/0x7a0 [ 19.005274][ T168] fuse_file_put+0x286/0x470 [ 19.005391][ T168] fuse_release+0x12c/0x230 [ 19.005507][ T168] __fput+0x363/0xac0 [ 19.005596][ T168] task_work_run+0x12b/0x240 [ 19.005714][ T168] do_exit+0x614/0xdc0 [ 19.005801][ T168] do_group_exit+0xb8/0x370 [ 19.005919][ T168] __x64_sys_exit_group+0x3c/0x50 [ 19.006036][ T168] x64_sys_call+0x1567/0x1570 [ 19.006158][ T168] do_syscall_64+0xff/0x530 [ 19.006274][ T168] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 19.006420][ T168] Slab 0xffd400000024dc00 objects=21 used=20 fp=0xff11000009370860 flags=0x80000000000200(workingset|node=0|zone=1) [ 19.006682][ T168] Object 0xff11000009370ce0 @offset=3296 fp=0xff110000093703e0 [ 19.006682][ T168] [ 19.006886][ T168] Redzone ff11000009370cc0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 19.007127][ T168] Redzone ff11000009370cd0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 19.007364][ T168] Object ff11000009370ce0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 19.007601][ T168] Object ff11000009370cf0: 00 00 00 00 00 00 00 00 00 04 d3 0c 00 00 11 ff ................ [ 19.007837][ T168] Redzone ff11000009370d00: 00 9c 8e 0d 00 00 11 ff ........ [ 19.008046][ T168] Padding ff11000009370d78: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 19.008266][ T168] ------------[ cut here ]------------ [ 19.008388][ T168] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: mode-2-recovery/168 [ 19.008601][ T168] Modules linked in: [ 19.008697][ T168] CPU: 0 UID: 0 PID: 168 Comm: mode-2-recovery Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 19.009004][ T168] Tainted: [B]=BAD_PAGE, [W]=WARN [ 19.009130][ T168] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 19.009286][ T168] RIP: 0010:object_err+0x68/0x70 [ 19.009415][ T168] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 19.009857][ T168] RSP: 0018:ffa00000018578a8 EFLAGS: 00010046 [ 19.010014][ T168] RAX: 0000000000000220 RBX: ff11000009370ce0 RCX: 0000000000000001 [ 19.010200][ T168] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 19.010387][ T168] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 19.010572][ T168] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000024dc00 [ 19.010759][ T168] R13: ff11000009370d00 R14: ff1100000103c940 R15: ffd400000024dc00 [ 19.010945][ T168] FS: 00007f149c463b80(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000 [ 19.011165][ T168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.011322][ T168] CR2: 0000557f3d023348 CR3: 000000000c6c2004 CR4: 0000000000771ef0 [ 19.011508][ T168] PKRU: 55555554 [ 19.011601][ T168] Call Trace: [ 19.011693][ T168] [ 19.011757][ T168] check_bytes_and_report.cold+0x43/0x5f [ 19.011880][ T168] check_object+0x19c/0x340 [ 19.012004][ T168] free_debug_processing+0x135/0x230 [ 19.012131][ T168] ? qlist_free_all+0x57/0x110 [ 19.012256][ T168] free_to_partial_list+0x83/0x310 [ 19.012380][ T168] ? qlist_free_all+0x57/0x110 [ 19.012502][ T168] qlist_free_all+0x5c/0x110 [ 19.012624][ T168] kasan_quarantine_reduce+0x196/0x240 [ 19.012748][ T168] __kasan_slab_alloc+0x4b/0x70 [ 19.012870][ T168] kmem_cache_alloc_node_noprof+0x25c/0x660 [ 19.013023][ T168] ? do_raw_spin_lock+0x131/0x280 [ 19.013150][ T168] ? dup_task_struct+0x39/0x830 [ 19.013276][ T168] dup_task_struct+0x39/0x830 [ 19.013399][ T168] copy_process+0x3f4/0x6240 [ 19.013521][ T168] ? restore_fpregs_from_user+0x490/0x490 [ 19.013646][ T168] ? pidfd_prepare+0x150/0x150 [ 19.013771][ T168] ? handle_pte_fault+0x448/0x710 [ 19.013896][ T168] kernel_clone+0x1a4/0x6c0 [ 19.014019][ T168] ? create_io_thread+0x130/0x130 [ 19.014145][ T168] ? __pmd_alloc+0x840/0x840 [ 19.014270][ T168] ? rcu_is_watching+0x16/0xd0 [ 19.014393][ T168] ? rcu_is_watching+0x16/0xd0 [ 19.014516][ T168] __do_sys_clone+0xe3/0x130 [ 19.014640][ T168] ? kernel_clone+0x6c0/0x6c0 [ 19.014764][ T168] ? rcu_is_watching+0x16/0xd0 [ 19.014885][ T168] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 19.015037][ T168] ? trace_hardirqs_off_finish+0x147/0x1a0 [ 19.015192][ T168] do_syscall_64+0xff/0x530 [ 19.015317][ T168] ? exc_page_fault+0xee/0x100 [ 19.015441][ T168] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 19.015592][ T168] RIP: 0033:0x7f149c525126 [ 19.015722][ T168] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00 [ 19.016165][ T168] RSP: 002b:00007ffdd7fbe3b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 19.016352][ T168] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f149c525126 [ 19.016536][ T168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 19.016723][ T168] RBP: 00007ffdd7fbe3d0 R08: 0000000000000000 R09: 0000000000000030 [ 19.016907][ T168] R10: 00007f149c463e50 R11: 0000000000000246 R12: 0000557f3d0263d0 [ 19.017094][ T168] R13: 0000557f3d117530 R14: 0000000000000000 R15: 00000000ffffffff [ 19.017286][ T168] [ 19.017380][ T168] irq event stamp: 58216 [ 19.017473][ T168] hardirqs last enabled at (58215): [] _raw_spin_unlock_irqrestore+0x53/0x80 [ 19.017719][ T168] hardirqs last disabled at (58216): [] __schedule+0x1246/0x20e0 [ 19.017935][ T168] softirqs last enabled at (57996): [] fpu_clone+0xd9/0x410 [ 19.018152][ T168] softirqs last disabled at (57994): [] fpu_clone+0x82/0x410 [ 19.018365][ T168] ---[ end trace 0000000000000000 ]--- [ 19.018486][ T168] FIX kmalloc-32: Restoring Right Redzone 0xff11000009370d00-0xff11000009370d07=0xcc [ 19.018689][ T168] FIX kmalloc-32: Object at 0xff11000009370ce0 not freed [ 19.047034][ T268] bond0: (slave eth1): Enslaving as an active interface with an up link [ 19.048264][ T39] br0: port 2(eth1) entered blocking state [ 19.048416][ T39] br0: port 2(eth1) entered forwarding state [ 19.081354][ T12] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 19.081574][ T12] bond0: active interface up! [ 19.605306][ T223] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 20.222994][ T274] br0: port 1(eth0) entered disabled state [ 20.228297][ T223] bond0: (slave eth0): link status definitely down, disabling slave [ 22.262442][ T39] br0: port 1(eth0) entered blocking state [ 22.262613][ T39] br0: port 1(eth0) entered forwarding state [ 22.295956][ T277] br0: port 2(eth1) entered disabled state [ 22.309248][ T223] bond0: (slave eth0): link status up, enabling it in 0 ms [ 22.309534][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 22.309786][ T223] bond0: (slave eth1): link status definitely down, disabling slave [ 23.427809][ T282] bond0 (unregistering): (slave eth0): Releasing backup interface [ 23.433739][ T282] bond0 (unregistering): (slave eth1): Releasing backup interface [ 23.441497][ T282] bond0 (unregistering): Released all slaves [ 23.447657][ T38] br0: port 1(eth0) entered disabled state [ 23.644227][ T289] [Right Redzone overwritten] 0xff110000090ba640-0xff110000090ba647 @offset=1600. First byte 0x0 instead of 0xcc [ 23.644541][ T289] ============================================================================= [ 23.644776][ T289] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 23.644976][ T289] ----------------------------------------------------------------------------- [ 23.644976][ T289] [ 23.645243][ T289] Allocated in bond_update_slave_arr+0x166/0xd70 age=4599 cpu=3 pid=268 [ 23.645447][ T289] bond_update_slave_arr+0x166/0xd70 [ 23.645586][ T289] bond_enslave+0x447f/0x5100 [ 23.645718][ T289] do_set_master+0x3b2/0x780 [ 23.645856][ T289] do_setlink.isra.0+0x9f4/0x2bb0 [ 23.645989][ T289] rtnl_newlink+0x9f1/0x11c0 [ 23.646120][ T289] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 23.646257][ T289] netlink_rcv_skb+0x14e/0x3a0 [ 23.646394][ T289] netlink_unicast+0x486/0x750 [ 23.646526][ T289] netlink_sendmsg+0x735/0xc60 [ 23.646658][ T289] ____sys_sendmsg+0x415/0x880 [ 23.646795][ T289] ___sys_sendmsg+0x14e/0x1d0 [ 23.646929][ T289] __sys_sendmsg+0x12c/0x1d0 [ 23.647061][ T289] do_syscall_64+0xff/0x530 [ 23.647198][ T289] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 23.647366][ T289] Freed in qlist_free_all+0x57/0x110 age=4648 cpu=2 pid=39 [ 23.647567][ T289] kasan_quarantine_reduce+0x196/0x240 [ 23.647702][ T289] __kasan_slab_alloc+0x4b/0x70 [ 23.647834][ T289] kmem_cache_alloc_node_noprof+0x25c/0x660 [ 23.647999][ T289] __alloc_skb+0xde/0x5f0 [ 23.648099][ T289] rtmsg_ifinfo_build_skb+0x86/0x250 [ 23.648235][ T289] rtmsg_ifinfo_event.part.0+0x2c/0x130 [ 23.648367][ T289] rtmsg_ifinfo+0x5c/0xb0 [ 23.648467][ T289] netif_state_change+0x155/0x3d0 [ 23.648600][ T289] __linkwatch_run_queue+0x350/0x850 [ 23.648731][ T289] linkwatch_event+0x7f/0xb0 [ 23.648862][ T289] process_one_work+0xe3e/0x1560 [ 23.648996][ T289] worker_thread+0x4f1/0xd60 [ 23.649126][ T289] kthread+0x367/0x460 [ 23.649228][ T289] ret_from_fork+0x474/0x6b0 [ 23.649360][ T289] ret_from_fork_asm+0x11/0x20 [ 23.649494][ T289] Slab 0xffd4000000242e80 objects=21 used=12 fp=0xff110000090ba860 flags=0x80000000000200(workingset|node=0|zone=1) [ 23.649786][ T289] Object 0xff110000090ba620 @offset=1568 fp=0x0000000000000000 [ 23.649786][ T289] [ 23.650014][ T289] Redzone ff110000090ba600: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 23.650286][ T289] Redzone ff110000090ba610: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 23.650551][ T289] Object ff110000090ba620: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 23.650824][ T289] Object ff110000090ba630: 00 00 00 00 00 00 00 00 00 04 16 0d 00 00 11 ff ................ [ 23.651092][ T289] Redzone ff110000090ba640: 00 84 dd 09 00 00 11 ff ........ [ 23.651378][ T289] Padding ff110000090ba6b8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 23.651675][ T289] ------------[ cut here ]------------ [ 23.651861][ T289] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/289 [ 23.652068][ T289] Modules linked in: [ 23.652227][ T289] CPU: 3 UID: 0 PID: 289 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 23.652556][ T289] Tainted: [B]=BAD_PAGE, [W]=WARN [ 23.652695][ T289] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 23.652919][ T289] RIP: 0010:object_err+0x68/0x70 [ 23.653064][ T289] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 23.653663][ T289] RSP: 0018:ffa0000001cb70a0 EFLAGS: 00010046 [ 23.653890][ T289] RAX: 0000000000000220 RBX: ff110000090ba620 RCX: 0000000000000001 [ 23.654097][ T289] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 23.654358][ T289] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 23.654616][ T289] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd4000000242e80 [ 23.654874][ T289] R13: ff110000090ba640 R14: ff1100000103c940 R15: ffd4000000242e80 [ 23.655083][ T289] FS: 0000000000000000(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000 [ 23.655380][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.655603][ T289] CR2: 00007f5bf90ec830 CR3: 000000000925c004 CR4: 0000000000771ef0 [ 23.655862][ T289] PKRU: 55555554 [ 23.655968][ T289] Call Trace: [ 23.656073][ T289] [ 23.656196][ T289] check_bytes_and_report.cold+0x43/0x5f [ 23.656336][ T289] check_object+0x19c/0x340 [ 23.656524][ T289] free_debug_processing+0x135/0x230 [ 23.656667][ T289] ? qlist_free_all+0x57/0x110 [ 23.656853][ T289] free_to_partial_list+0x83/0x310 [ 23.656993][ T289] ? qlist_free_all+0x57/0x110 [ 23.657181][ T289] qlist_free_all+0x5c/0x110 [ 23.657317][ T289] kasan_quarantine_reduce+0x196/0x240 [ 23.657501][ T289] __kasan_slab_alloc+0x4b/0x70 [ 23.657638][ T289] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 23.657825][ T289] ? __alloc_object+0x30/0x260 [ 23.657962][ T289] __alloc_object+0x30/0x260 [ 23.658145][ T289] __create_object+0x30/0x110 [ 23.658283][ T289] ? kasan_save_track+0x14/0x30 [ 23.658468][ T289] kmem_cache_alloc_noprof+0x467/0x5c0 [ 23.658606][ T289] ? mas_preallocate+0xabc/0x1220 [ 23.658792][ T289] mas_preallocate+0xabc/0x1220 [ 23.658929][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.659115][ T289] ? lock_acquire+0x13c/0x160 [ 23.659257][ T289] ? mas_wr_slot_store+0x1230/0x1230 [ 23.659442][ T289] ? unwind_get_return_address+0x67/0xd0 [ 23.659580][ T289] ? __asan_memset+0x27/0x50 [ 23.659765][ T289] ? init_multi_vma_prep+0x2b/0x780 [ 23.659903][ T289] commit_merge+0x27b/0x1a50 [ 23.660088][ T289] ? vms_gather_munmap_vmas+0xf90/0xf90 [ 23.660227][ T289] ? stack_trace_save+0x93/0xc0 [ 23.660413][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.660550][ T289] ? __vma_start_exclude_readers+0x6f0/0x6f0 [ 23.660771][ T289] vma_expand+0x595/0x1120 [ 23.660911][ T289] relocate_vma_down+0x364/0x580 [ 23.661096][ T289] ? lock_acquire+0x13c/0x160 [ 23.661235][ T289] ? __install_special_mapping+0x8f0/0x8f0 [ 23.661452][ T289] ? lock_release+0x184/0x1f0 [ 23.661592][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.661776][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.661913][ T289] ? is_bpf_text_address+0x3e/0x110 [ 23.662099][ T289] ? is_bpf_text_address+0x72/0x110 [ 23.662240][ T289] ? kernel_text_address+0x149/0x170 [ 23.662425][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.662563][ T289] ? down_write_killable+0xcd/0x260 [ 23.662747][ T289] ? down_write_killable+0x15b/0x260 [ 23.662882][ T289] ? down_write+0x1f0/0x1f0 [ 23.663066][ T289] setup_arg_pages+0x65e/0xbd0 [ 23.663206][ T289] ? open_exec+0x40/0x40 [ 23.663357][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.663492][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.663676][ T289] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 23.663848][ T289] load_elf_binary+0x565/0x2cd0 [ 23.664033][ T289] ? __ia32_sys_llseek+0x220/0x220 [ 23.664174][ T289] ? bm_fill_super+0x350/0x350 [ 23.664357][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.664493][ T289] ? lock_acquire+0x13c/0x160 [ 23.664678][ T289] ? lock_release+0x184/0x1f0 [ 23.664817][ T289] ? load_elf_interp.isra.0+0xaa0/0xaa0 [ 23.665000][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.665139][ T289] ? lock_acquire+0x13c/0x160 [ 23.665323][ T289] ? rcu_is_watching+0x16/0xd0 [ 23.665461][ T289] exec_binprm+0x269/0x780 [ 23.665645][ T289] ? check_unsafe_exec+0x540/0x540 [ 23.665781][ T289] bprm_execve+0x190/0x4d0 [ 23.665966][ T289] do_execveat_common.isra.0+0x3e4/0x4f0 [ 23.666102][ T289] __x64_sys_execve+0x91/0xc0 [ 23.666290][ T289] do_syscall_64+0xff/0x530 [ 23.666426][ T289] ? exc_page_fault+0xee/0x100 [ 23.666609][ T289] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 23.666828][ T289] RIP: 0033:0x7f5bf90edf4b [ 23.666976][ T289] Code: Unable to access opcode bytes at 0x7f5bf90edf21. [ 23.667207][ T289] RSP: 002b:00007fff5ecdc1c8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 23.667416][ T289] RAX: ffffffffffffffda RBX: 00007fff5ecdee57 RCX: 00007f5bf90edf4b [ 23.667671][ T289] RDX: 00007fff5ecdc670 RSI: 00007fff5ecdc638 RDI: 00007fff5ecdc1d0 [ 23.667926][ T289] RBP: 00007fff5ecdc2e0 R08: 0000000000000000 R09: 000000000000009f [ 23.668186][ T289] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff5ecdee3e [ 23.668394][ T289] R13: 00007fff5ecdc670 R14: 00007fff5ecdc1d0 R15: 00007fff5ecdc638 [ 23.668652][ T289] [ 23.668804][ T289] irq event stamp: 0 [ 23.668910][ T289] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 23.669132][ T289] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 23.669376][ T289] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 23.669662][ T289] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 23.669879][ T289] ---[ end trace 0000000000000000 ]--- [ 23.670017][ T289] FIX kmalloc-32: Restoring Right Redzone 0xff110000090ba640-0xff110000090ba647=0xcc [ 23.670295][ T289] FIX kmalloc-32: Object at 0xff110000090ba620 not freed [ 23.689279][ T289] bond0: (slave eth0): Enslaving as an active interface with an up link [ 23.689568][ T39] br0: port 1(eth0) entered blocking state [ 23.689716][ T39] br0: port 1(eth0) entered forwarding state [ 23.719611][ T290] bond0: (slave eth1): Enslaving as an active interface with an up link [ 23.720152][ T38] br0: port 2(eth1) entered blocking state [ 23.720314][ T38] br0: port 2(eth1) entered forwarding state [ 23.752298][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 23.752559][ T223] bond0: active interface up! [ 23.793783][ T294] [kmalloc Redzone overwritten] 0xff11000007917f38-0xff11000007917f3f @offset=3896. First byte 0x0 instead of 0xcc [ 23.794074][ T294] ============================================================================= [ 23.794301][ T294] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 23.794490][ T294] ----------------------------------------------------------------------------- [ 23.794490][ T294] [ 23.794742][ T294] Allocated in bond_update_slave_arr+0x166/0xd70 age=4799 cpu=3 pid=267 [ 23.794938][ T294] bond_update_slave_arr+0x166/0xd70 [ 23.795067][ T294] bond_enslave+0x447f/0x5100 [ 23.795197][ T294] do_set_master+0x3b2/0x780 [ 23.795325][ T294] do_setlink.isra.0+0x9f4/0x2bb0 [ 23.795449][ T294] rtnl_newlink+0x9f1/0x11c0 [ 23.795575][ T294] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 23.795699][ T294] netlink_rcv_skb+0x14e/0x3a0 [ 23.795825][ T294] netlink_unicast+0x486/0x750 [ 23.795950][ T294] netlink_sendmsg+0x735/0xc60 [ 23.796074][ T294] ____sys_sendmsg+0x415/0x880 [ 23.796202][ T294] ___sys_sendmsg+0x14e/0x1d0 [ 23.796328][ T294] __sys_sendmsg+0x12c/0x1d0 [ 23.796453][ T294] do_syscall_64+0xff/0x530 [ 23.796579][ T294] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 23.796735][ T294] Freed in qlist_free_all+0x57/0x110 age=5017 cpu=2 pid=262 [ 23.796926][ T294] kasan_quarantine_reduce+0x196/0x240 [ 23.797053][ T294] __kasan_slab_alloc+0x4b/0x70 [ 23.797181][ T294] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 23.797306][ T294] __alloc_object+0x30/0x260 [ 23.797430][ T294] __create_object+0x30/0x110 [ 23.797554][ T294] kmem_cache_alloc_noprof+0x467/0x5c0 [ 23.797678][ T294] alloc_vfsmnt+0x27/0x6f0 [ 23.797804][ T294] clone_mnt+0x54/0x960 [ 23.797897][ T294] copy_tree+0x271/0xd00 [ 23.797991][ T294] copy_mnt_ns+0x291/0xf50 [ 23.798116][ T294] create_new_namespaces+0xe6/0xa10 [ 23.798245][ T294] unshare_nsproxy_namespaces+0xa5/0x150 [ 23.798371][ T294] ksys_unshare+0x2b8/0x750 [ 23.798497][ T294] __x64_sys_unshare+0x34/0x50 [ 23.798622][ T294] do_syscall_64+0xff/0x530 [ 23.798746][ T294] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 23.798900][ T294] Slab 0xffd40000001e45c0 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 23.799149][ T294] Object 0xff11000007917f20 @offset=3872 fp=0xff110000079177a0 [ 23.799149][ T294] [ 23.799368][ T294] Redzone ff11000007917f00: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 23.799621][ T294] Redzone ff11000007917f10: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 23.799869][ T294] Object ff11000007917f20: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 23.800122][ T294] Object ff11000007917f30: 00 00 00 00 00 00 00 00 00 04 16 0d 00 00 11 ff ................ [ 23.800375][ T294] Redzone ff11000007917f40: cc cc cc cc cc cc cc cc ........ [ 23.800596][ T294] Padding ff11000007917fb8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 23.800830][ T294] ------------[ cut here ]------------ [ 23.800959][ T294] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: date/294 [ 23.801158][ T294] Modules linked in: [ 23.801262][ T294] CPU: 0 UID: 0 PID: 294 Comm: date Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 23.801528][ T294] Tainted: [B]=BAD_PAGE, [W]=WARN [ 23.801660][ T294] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 23.801824][ T294] RIP: 0010:object_err+0x68/0x70 [ 23.801964][ T294] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 23.802432][ T294] RSP: 0018:ffa0000001cb7888 EFLAGS: 00010046 [ 23.802596][ T294] RAX: 0000000000000220 RBX: ff11000007917f20 RCX: 0000000000000001 [ 23.802795][ T294] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 23.802993][ T294] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 23.803192][ T294] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000001e45c0 [ 23.803389][ T294] R13: ff11000007917f38 R14: ff1100000103c940 R15: ffd40000001e45c0 [ 23.803588][ T294] FS: 0000000000000000(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000 [ 23.803819][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.803985][ T294] CR2: 00007f2754ca284c CR3: 000000000c735002 CR4: 0000000000771ef0 [ 23.804185][ T294] PKRU: 55555554 [ 23.804285][ T294] Call Trace: [ 23.804384][ T294] [ 23.804452][ T294] check_bytes_and_report.cold+0x43/0x5f [ 23.804586][ T294] check_object+0x31f/0x340 [ 23.804716][ T294] free_debug_processing+0x135/0x230 [ 23.804846][ T294] ? qlist_free_all+0x57/0x110 [ 23.804975][ T294] free_to_partial_list+0x83/0x310 [ 23.805105][ T294] ? qlist_free_all+0x57/0x110 [ 23.805239][ T294] qlist_free_all+0x5c/0x110 [ 23.805367][ T294] kasan_quarantine_reduce+0x196/0x240 [ 23.805497][ T294] __kasan_slab_alloc+0x4b/0x70 [ 23.805626][ T294] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 23.805755][ T294] ? vm_area_alloc+0x1f/0x150 [ 23.805886][ T294] vm_area_alloc+0x1f/0x150 [ 23.806014][ T294] __install_special_mapping+0x90/0x8f0 [ 23.806149][ T294] ? vma_mmu_pagesize+0xa0/0xa0 [ 23.806279][ T294] ? down_write_killable+0xcd/0x260 [ 23.806410][ T294] ? down_write_killable+0x15b/0x260 [ 23.806539][ T294] ? __get_unmapped_area+0x190/0x2c0 [ 23.806672][ T294] map_vdso+0x14b/0x450 [ 23.806772][ T294] load_elf_binary+0x17f7/0x2cd0 [ 23.806904][ T294] ? load_elf_interp.isra.0+0xaa0/0xaa0 [ 23.807034][ T294] ? rcu_is_watching+0x16/0xd0 [ 23.807170][ T294] ? lock_acquire+0x13c/0x160 [ 23.807302][ T294] ? rcu_is_watching+0x16/0xd0 [ 23.807432][ T294] exec_binprm+0x269/0x780 [ 23.807562][ T294] ? check_unsafe_exec+0x540/0x540 [ 23.807692][ T294] bprm_execve+0x190/0x4d0 [ 23.807822][ T294] do_execveat_common.isra.0+0x3e4/0x4f0 [ 23.807953][ T294] __x64_sys_execve+0x91/0xc0 [ 23.808083][ T294] do_syscall_64+0xff/0x530 [ 23.808217][ T294] ? exc_page_fault+0xee/0x100 [ 23.808347][ T294] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 23.808509][ T294] RIP: 0033:0x7f149c525f4b [ 23.808648][ T294] Code: Unable to access opcode bytes at 0x7f149c525f21. [ 23.808815][ T294] RSP: 002b:00007ffdd7fbc778 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 23.809013][ T294] RAX: ffffffffffffffda RBX: 0000557f3d11df20 RCX: 00007f149c525f4b [ 23.809213][ T294] RDX: 0000557f3d11dfa0 RSI: 0000557f3d021d80 RDI: 0000557f3d11df20 [ 23.809411][ T294] RBP: 00007ffdd7fbc860 R08: 00007ffdd7fbc6a0 R09: 0000000000000000 [ 23.809607][ T294] R10: 0000000000000008 R11: 0000000000000202 R12: 0000557f3d11df20 [ 23.809804][ T294] R13: 0000000000000000 R14: 0000557f3d021d80 R15: 0000557f3d11dfa0 [ 23.810002][ T294] [ 23.810102][ T294] irq event stamp: 0 [ 23.810203][ T294] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 23.810367][ T294] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 23.810593][ T294] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 23.810821][ T294] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 23.810985][ T294] ---[ end trace 0000000000000000 ]--- [ 23.811114][ T294] FIX kmalloc-32: Restoring kmalloc Redzone 0xff11000007917f38-0xff11000007917f3f=0xcc [ 23.811335][ T294] FIX kmalloc-32: Object at 0xff11000007917f20 not freed [ 24.693317][ T223] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 24.887536][ T296] br0: port 1(eth0) entered disabled state [ 24.901307][ T223] bond0: (slave eth0): link status definitely down, disabling slave [ 26.934105][ T39] br0: port 1(eth0) entered blocking state [ 26.934285][ T39] br0: port 1(eth0) entered forwarding state [ 26.963921][ T299] br0: port 2(eth1) entered disabled state [ 26.981235][ T223] bond0: (slave eth0): link status up, enabling it in 0 ms [ 26.985178][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 26.985449][ T223] bond0: (slave eth1): link status definitely down, disabling slave [ 28.098869][ T304] bond0 (unregistering): (slave eth0): Releasing backup interface [ 28.105715][ T304] bond0 (unregistering): (slave eth1): Releasing backup interface [ 28.114466][ T304] bond0 (unregistering): Released all slaves [ 28.117714][ T39] br0: port 1(eth0) entered disabled state [ 28.324831][ T311] bond0: (slave eth0): Enslaving as an active interface with an up link [ 28.325137][ T39] br0: port 1(eth0) entered blocking state [ 28.325308][ T39] br0: port 1(eth0) entered forwarding state [ 28.352447][ T312] bond0: (slave eth1): Enslaving as an active interface with an up link [ 28.352977][ T39] br0: port 2(eth1) entered blocking state [ 28.353135][ T39] br0: port 2(eth1) entered forwarding state [ 28.392304][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 28.392530][ T223] bond0: active interface up! [ 28.426448][ T315] [kmalloc Redzone overwritten] 0xff1100000969c9f8-0xff1100000969c9ff @offset=2552. First byte 0x0 instead of 0xcc [ 28.426730][ T315] ============================================================================= [ 28.426939][ T315] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 28.427118][ T315] ----------------------------------------------------------------------------- [ 28.427118][ T315] [ 28.427359][ T315] Allocated in bond_update_slave_arr+0x166/0xd70 age=4738 cpu=3 pid=289 [ 28.427542][ T315] bond_update_slave_arr+0x166/0xd70 [ 28.427665][ T315] bond_enslave+0x447f/0x5100 [ 28.427782][ T315] do_set_master+0x3b2/0x780 [ 28.427902][ T315] do_setlink.isra.0+0x9f4/0x2bb0 [ 28.428021][ T315] rtnl_newlink+0x9f1/0x11c0 [ 28.428138][ T315] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 28.428259][ T315] netlink_rcv_skb+0x14e/0x3a0 [ 28.428379][ T315] netlink_unicast+0x486/0x750 [ 28.428498][ T315] netlink_sendmsg+0x735/0xc60 [ 28.428618][ T315] ____sys_sendmsg+0x415/0x880 [ 28.428740][ T315] ___sys_sendmsg+0x14e/0x1d0 [ 28.428859][ T315] __sys_sendmsg+0x12c/0x1d0 [ 28.428977][ T315] do_syscall_64+0xff/0x530 [ 28.429097][ T315] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 28.429247][ T315] Freed in qlist_free_all+0x57/0x110 age=4938 cpu=3 pid=283 [ 28.429427][ T315] kasan_quarantine_reduce+0x196/0x240 [ 28.429553][ T315] __kasan_slab_alloc+0x4b/0x70 [ 28.429671][ T315] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 28.429791][ T315] fuse_request_alloc+0x27/0x210 [ 28.429909][ T315] fuse_chan_send+0x78/0x7a0 [ 28.430025][ T315] fuse_file_put+0x286/0x470 [ 28.430143][ T315] fuse_release+0x12c/0x230 [ 28.430265][ T315] __fput+0x363/0xac0 [ 28.430354][ T315] task_work_run+0x12b/0x240 [ 28.430473][ T315] do_exit+0x614/0xdc0 [ 28.430562][ T315] do_group_exit+0xb8/0x370 [ 28.430680][ T315] __x64_sys_exit_group+0x3c/0x50 [ 28.430798][ T315] x64_sys_call+0x1567/0x1570 [ 28.430916][ T315] do_syscall_64+0xff/0x530 [ 28.431032][ T315] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 28.431179][ T315] Slab 0xffd400000025a700 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 28.431416][ T315] Object 0xff1100000969c9e0 @offset=2528 fp=0xff1100000969c4a0 [ 28.431416][ T315] [ 28.431623][ T315] Redzone ff1100000969c9c0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 28.431863][ T315] Redzone ff1100000969c9d0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 28.432101][ T315] Object ff1100000969c9e0: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 28.432340][ T315] Object ff1100000969c9f0: 00 00 00 00 00 00 00 00 00 58 90 0d 00 00 11 ff .........X...... [ 28.432574][ T315] Redzone ff1100000969ca00: cc cc cc cc cc cc cc cc ........ [ 28.432784][ T315] Padding ff1100000969ca78: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 28.433007][ T315] ------------[ cut here ]------------ [ 28.433130][ T315] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: mode-2-recovery/315 [ 28.433347][ T315] Modules linked in: [ 28.433445][ T315] CPU: 3 UID: 0 PID: 315 Comm: mode-2-recovery Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 28.433726][ T315] Tainted: [B]=BAD_PAGE, [W]=WARN [ 28.433851][ T315] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 28.434008][ T315] RIP: 0010:object_err+0x68/0x70 [ 28.434139][ T315] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 28.434590][ T315] RSP: 0018:ffa0000001df78b8 EFLAGS: 00010046 [ 28.434750][ T315] RAX: 0000000000000220 RBX: ff1100000969c9e0 RCX: 0000000000000001 [ 28.434937][ T315] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 28.435126][ T315] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 28.435316][ T315] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000025a700 [ 28.435504][ T315] R13: ff1100000969c9f8 R14: ff1100000103c940 R15: ffd400000025a700 [ 28.435692][ T315] FS: 00007f149c463b80(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000 [ 28.435911][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.436072][ T315] CR2: 00007f149c621888 CR3: 00000000058a4005 CR4: 0000000000771ef0 [ 28.436262][ T315] PKRU: 55555554 [ 28.436357][ T315] Call Trace: [ 28.436450][ T315] [ 28.436515][ T315] check_bytes_and_report.cold+0x43/0x5f [ 28.436641][ T315] check_object+0x31f/0x340 [ 28.436764][ T315] free_debug_processing+0x135/0x230 [ 28.436887][ T315] ? qlist_free_all+0x57/0x110 [ 28.437011][ T315] free_to_partial_list+0x83/0x310 [ 28.437134][ T315] ? qlist_free_all+0x57/0x110 [ 28.437260][ T315] qlist_free_all+0x5c/0x110 [ 28.437383][ T315] kasan_quarantine_reduce+0x196/0x240 [ 28.437506][ T315] __kasan_slab_alloc+0x4b/0x70 [ 28.437669][ T315] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 28.437792][ T315] ? copy_fs_struct+0x50/0x340 [ 28.437956][ T315] copy_fs_struct+0x50/0x340 [ 28.438078][ T315] copy_process+0x20af/0x6240 [ 28.438243][ T315] ? mas_next_slot+0x1330/0x1330 [ 28.438367][ T315] ? pidfd_prepare+0x150/0x150 [ 28.438529][ T315] ? rcu_is_watching+0x16/0xd0 [ 28.438654][ T315] kernel_clone+0x1a4/0x6c0 [ 28.438817][ T315] ? create_io_thread+0x130/0x130 [ 28.438941][ T315] ? rcu_is_watching+0x16/0xd0 [ 28.439104][ T315] __do_sys_clone+0xe3/0x130 [ 28.439231][ T315] ? kernel_clone+0x6c0/0x6c0 [ 28.439397][ T315] ? rcu_is_watching+0x16/0xd0 [ 28.439520][ T315] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 28.439714][ T315] ? trace_hardirqs_off_finish+0x147/0x1a0 [ 28.439867][ T315] do_syscall_64+0xff/0x530 [ 28.440029][ T315] ? exc_page_fault+0xee/0x100 [ 28.440151][ T315] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 28.440349][ T315] RIP: 0033:0x7f149c525126 [ 28.440523][ T315] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00 [ 28.441005][ T315] RSP: 002b:00007ffdd7fbc780 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 28.441236][ T315] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f149c525126 [ 28.441462][ T315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 28.441687][ T315] RBP: 00007ffdd7fbc7a0 R08: 0000000000000000 R09: 0000000000000200 [ 28.441872][ T315] R10: 00007f149c463e50 R11: 0000000000000246 R12: 00007ffdd7fbcf20 [ 28.442096][ T315] R13: 00000000ffffffff R14: 000000000000000c R15: 0000000000000000 [ 28.442327][ T315] [ 28.442421][ T315] irq event stamp: 0 [ 28.442553][ T315] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 28.442709][ T315] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 28.442960][ T315] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 28.443215][ T315] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 28.443408][ T315] ---[ end trace 0000000000000000 ]--- [ 28.443534][ T315] FIX kmalloc-32: Restoring kmalloc Redzone 0xff1100000969c9f8-0xff1100000969c9ff=0xcc [ 28.443773][ T315] FIX kmalloc-32: Object at 0xff1100000969c9e0 not freed [ 29.568969][ T318] br0: port 1(eth0) entered disabled state [ 29.644301][ T223] bond0: (slave eth0): link status definitely down, disabling slave [ 29.644585][ T223] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 31.606443][ T39] br0: port 1(eth0) entered blocking state [ 31.606683][ T39] br0: port 1(eth0) entered forwarding state [ 31.620229][ T223] bond0: (slave eth0): link status up, enabling it in 2000 ms [ 31.636283][ T321] br0: port 2(eth1) entered disabled state [ 31.724303][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 31.724579][ T223] bond0: (slave eth1): link status definitely down, disabling slave [ 32.875187][ T326] bond0 (unregistering): (slave eth0): Releasing backup interface [ 32.882726][ T326] bond0 (unregistering): (slave eth1): Releasing backup interface [ 32.886477][ T326] bond0 (unregistering): Released all slaves [ 32.889784][ T37] br0: port 1(eth0) entered disabled state [ 32.945920][ T328] [Right Redzone overwritten] 0xff1100000a77ca00-0xff1100000a77ca07 @offset=2560. First byte 0x0 instead of 0xcc [ 32.946213][ T328] ============================================================================= [ 32.946436][ T328] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 32.946624][ T328] ----------------------------------------------------------------------------- [ 32.946624][ T328] [ 32.946873][ T328] Allocated in bond_update_slave_arr+0x166/0xd70 age=9226 cpu=2 pid=290 [ 32.947068][ T328] bond_update_slave_arr+0x166/0xd70 [ 32.947204][ T328] bond_enslave+0x447f/0x5100 [ 32.947332][ T328] do_set_master+0x3b2/0x780 [ 32.947459][ T328] do_setlink.isra.0+0x9f4/0x2bb0 [ 32.947584][ T328] rtnl_newlink+0x9f1/0x11c0 [ 32.947712][ T328] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 32.947838][ T328] netlink_rcv_skb+0x14e/0x3a0 [ 32.947967][ T328] netlink_unicast+0x486/0x750 [ 32.948093][ T328] netlink_sendmsg+0x735/0xc60 [ 32.948222][ T328] ____sys_sendmsg+0x415/0x880 [ 32.948349][ T328] ___sys_sendmsg+0x14e/0x1d0 [ 32.948474][ T328] __sys_sendmsg+0x12c/0x1d0 [ 32.948600][ T328] do_syscall_64+0xff/0x530 [ 32.948725][ T328] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 32.948885][ T328] Freed in qlist_free_all+0x57/0x110 age=9438 cpu=2 pid=284 [ 32.949076][ T328] kasan_quarantine_reduce+0x196/0x240 [ 32.949208][ T328] __kasan_slab_alloc+0x4b/0x70 [ 32.949333][ T328] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 32.949457][ T328] mas_preallocate+0xabc/0x1220 [ 32.949580][ T328] commit_merge+0x27b/0x1a50 [ 32.949705][ T328] vma_expand+0x595/0x1120 [ 32.949829][ T328] relocate_vma_down+0x364/0x580 [ 32.949952][ T328] setup_arg_pages+0x65e/0xbd0 [ 32.950075][ T328] load_elf_binary+0x565/0x2cd0 [ 32.950203][ T328] exec_binprm+0x269/0x780 [ 32.950329][ T328] bprm_execve+0x190/0x4d0 [ 32.950451][ T328] do_execveat_common.isra.0+0x3e4/0x4f0 [ 32.950573][ T328] __x64_sys_execve+0x91/0xc0 [ 32.950696][ T328] do_syscall_64+0xff/0x530 [ 32.950819][ T328] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 32.950972][ T328] Slab 0xffd400000029df00 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 32.951221][ T328] Object 0xff1100000a77c9e0 @offset=2528 fp=0x0000000000000000 [ 32.951221][ T328] [ 32.951436][ T328] Redzone ff1100000a77c9c0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 32.951687][ T328] Redzone ff1100000a77c9d0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 32.951935][ T328] Object ff1100000a77c9e0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 32.952185][ T328] Object ff1100000a77c9f0: 00 00 00 00 00 00 00 00 00 58 90 0d 00 00 11 ff .........X...... [ 32.952438][ T328] Redzone ff1100000a77ca00: 00 a8 8e 0d 00 00 11 ff ........ [ 32.952657][ T328] Padding ff1100000a77ca78: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 32.952892][ T328] ------------[ cut here ]------------ [ 32.953020][ T328] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/328 [ 32.953219][ T328] Modules linked in: [ 32.953324][ T328] CPU: 0 UID: 0 PID: 328 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 32.953585][ T328] Tainted: [B]=BAD_PAGE, [W]=WARN [ 32.953716][ T328] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 32.953879][ T328] RIP: 0010:object_err+0x68/0x70 [ 32.954016][ T328] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 32.954488][ T328] RSP: 0018:ffa00000018e7970 EFLAGS: 00010046 [ 32.954655][ T328] RAX: 0000000000000220 RBX: ff1100000a77c9e0 RCX: 0000000000000001 [ 32.954898][ T328] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 32.955140][ T328] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 32.955384][ T328] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000029df00 [ 32.955579][ T328] R13: ff1100000a77ca00 R14: ff1100000103c940 R15: ffd400000029df00 [ 32.955823][ T328] FS: 00007f43b5e5fcc0(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000 [ 32.956096][ T328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.956310][ T328] CR2: 00007ffc716f1dcc CR3: 000000000c710002 CR4: 0000000000771ef0 [ 32.956505][ T328] PKRU: 55555554 [ 32.956604][ T328] Call Trace: [ 32.956702][ T328] [ 32.956770][ T328] check_bytes_and_report.cold+0x43/0x5f [ 32.956902][ T328] check_object+0x19c/0x340 [ 32.957031][ T328] free_debug_processing+0x135/0x230 [ 32.957159][ T328] ? qlist_free_all+0x57/0x110 [ 32.957292][ T328] free_to_partial_list+0x83/0x310 [ 32.957420][ T328] ? qlist_free_all+0x57/0x110 [ 32.957548][ T328] qlist_free_all+0x5c/0x110 [ 32.957720][ T328] kasan_quarantine_reduce+0x196/0x240 [ 32.957850][ T328] __kasan_slab_alloc+0x4b/0x70 [ 32.958022][ T328] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 32.958150][ T328] ? alloc_vfsmnt+0x27/0x6f0 [ 32.958327][ T328] alloc_vfsmnt+0x27/0x6f0 [ 32.958456][ T328] clone_mnt+0x54/0x960 [ 32.958596][ T328] ? lock_release+0x184/0x1f0 [ 32.958727][ T328] ? do_raw_spin_unlock+0x59/0x250 [ 32.958899][ T328] copy_tree+0x271/0xd00 [ 32.958996][ T328] copy_mnt_ns+0x291/0xf50 [ 32.959170][ T328] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 32.959335][ T328] ? do_raw_spin_unlock+0x59/0x250 [ 32.959509][ T328] ? do_mount+0x100/0x100 [ 32.959606][ T328] ? kmem_cache_alloc_noprof+0x268/0x5c0 [ 32.959779][ T328] ? _raw_spin_unlock_irqrestore+0x40/0x80 [ 32.959941][ T328] ? create_new_namespaces+0x3b/0xa10 [ 32.960116][ T328] create_new_namespaces+0xe6/0xa10 [ 32.960248][ T328] ? rcu_is_watching+0x16/0xd0 [ 32.960424][ T328] unshare_nsproxy_namespaces+0xa5/0x150 [ 32.960552][ T328] ksys_unshare+0x2b8/0x750 [ 32.960727][ T328] ? walk_process_tree+0x350/0x350 [ 32.960857][ T328] ? fput_close_sync+0xde/0x1b0 [ 32.961031][ T328] ? alloc_file_clone+0xe0/0xe0 [ 32.961159][ T328] ? lock_release+0x184/0x1f0 [ 32.961336][ T328] ? do_raw_spin_unlock+0x59/0x250 [ 32.961465][ T328] __x64_sys_unshare+0x34/0x50 [ 32.961638][ T328] ? trace_hardirqs_on+0x36/0x40 [ 32.961766][ T328] do_syscall_64+0xff/0x530 [ 32.961938][ T328] ? exc_page_fault+0xee/0x100 [ 32.962068][ T328] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 32.962274][ T328] RIP: 0033:0x7f43b614c88b [ 32.962409][ T328] Code: 73 01 c3 48 8b 0d 6d 75 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3d 75 0f 00 f7 d8 64 89 01 48 [ 32.962963][ T328] RSP: 002b:00007ffc716f2458 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 32.963205][ T328] RAX: ffffffffffffffda RBX: 00007ffc716f781c RCX: 00007f43b614c88b [ 32.963446][ T328] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000020000 [ 32.963641][ T328] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 [ 32.963881][ T328] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc716f781c [ 32.964122][ T328] R13: 0000000000000065 R14: 00007ffc716f7826 R15: 00007ffc716f5938 [ 32.964369][ T328] [ 32.964467][ T328] irq event stamp: 0 [ 32.964566][ T328] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 32.964772][ T328] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 32.965041][ T328] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 32.965273][ T328] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 32.965433][ T328] ---[ end trace 0000000000000000 ]--- [ 32.965561][ T328] FIX kmalloc-32: Restoring Right Redzone 0xff1100000a77ca00-0xff1100000a77ca07=0xcc [ 32.965817][ T328] FIX kmalloc-32: Object at 0xff1100000a77c9e0 not freed [ 33.117438][ T333] bond0: (slave eth0): Enslaving as an active interface with an up link [ 33.117773][ T39] br0: port 1(eth0) entered blocking state [ 33.117964][ T39] br0: port 1(eth0) entered forwarding state [ 33.149037][ T334] bond0: (slave eth1): Enslaving as an active interface with an up link [ 33.149857][ T103] br0: port 2(eth1) entered blocking state [ 33.150011][ T103] br0: port 2(eth1) entered forwarding state [ 33.181293][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 33.181512][ T223] bond0: active interface up! [ 34.299066][ T340] br0: port 1(eth0) entered disabled state [ 34.324290][ T223] bond0: (slave eth0): link status definitely down, disabling slave [ 34.324552][ T223] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 36.342649][ T103] br0: port 1(eth0) entered blocking state [ 36.342852][ T103] br0: port 1(eth0) entered forwarding state [ 36.371260][ T343] br0: port 2(eth1) entered disabled state [ 36.404229][ T223] bond0: (slave eth0): link status up, enabling it in 0 ms [ 36.404487][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 36.404728][ T223] bond0: (slave eth1): link status definitely down, disabling slave [ 37.505404][ T348] bond0 (unregistering): (slave eth0): Releasing backup interface [ 37.514749][ T348] bond0 (unregistering): (slave eth1): Releasing backup interface [ 37.518498][ T348] bond0 (unregistering): Released all slaves [ 37.525438][ T103] br0: port 1(eth0) entered disabled state [ 37.709681][ T355] [kmalloc Redzone overwritten] 0xff1100000568ac38-0xff1100000568ac3f @offset=3128. First byte 0x0 instead of 0xcc [ 37.709964][ T355] ============================================================================= [ 37.710172][ T355] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 37.710400][ T355] ----------------------------------------------------------------------------- [ 37.710400][ T355] [ 37.710633][ T355] Allocated in bond_update_slave_arr+0x166/0xd70 age=4593 cpu=3 pid=333 [ 37.710817][ T355] bond_update_slave_arr+0x166/0xd70 [ 37.710937][ T355] bond_enslave+0x447f/0x5100 [ 37.711055][ T355] do_set_master+0x3b2/0x780 [ 37.711175][ T355] do_setlink.isra.0+0x9f4/0x2bb0 [ 37.711301][ T355] rtnl_newlink+0x9f1/0x11c0 [ 37.711420][ T355] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 37.711538][ T355] netlink_rcv_skb+0x14e/0x3a0 [ 37.711659][ T355] netlink_unicast+0x486/0x750 [ 37.711777][ T355] netlink_sendmsg+0x735/0xc60 [ 37.711895][ T355] ____sys_sendmsg+0x415/0x880 [ 37.712014][ T355] ___sys_sendmsg+0x14e/0x1d0 [ 37.712136][ T355] __sys_sendmsg+0x12c/0x1d0 [ 37.712260][ T355] do_syscall_64+0xff/0x530 [ 37.712379][ T355] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 37.712530][ T355] Freed in qlist_free_all+0x57/0x110 age=4722 cpu=0 pid=328 [ 37.712713][ T355] kasan_quarantine_reduce+0x196/0x240 [ 37.712833][ T355] __kasan_slab_alloc+0x4b/0x70 [ 37.712949][ T355] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 37.713069][ T355] fuse_request_alloc+0x27/0x210 [ 37.713187][ T355] fuse_chan_send+0x78/0x7a0 [ 37.713307][ T355] fuse_file_put+0x286/0x470 [ 37.713424][ T355] fuse_release+0x12c/0x230 [ 37.713540][ T355] __fput+0x363/0xac0 [ 37.713629][ T355] task_work_run+0x12b/0x240 [ 37.713749][ T355] do_exit+0x614/0xdc0 [ 37.713838][ T355] do_group_exit+0xb8/0x370 [ 37.713953][ T355] __x64_sys_exit_group+0x3c/0x50 [ 37.714071][ T355] x64_sys_call+0x1567/0x1570 [ 37.714190][ T355] do_syscall_64+0xff/0x530 [ 37.714311][ T355] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 37.714454][ T355] Slab 0xffd400000015a280 objects=21 used=15 fp=0xff1100000568ace0 flags=0x80000000000200(workingset|node=0|zone=1) [ 37.714712][ T355] Object 0xff1100000568ac20 @offset=3104 fp=0xff1100000568a920 [ 37.714712][ T355] [ 37.714914][ T355] Redzone ff1100000568ac00: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 37.715152][ T355] Redzone ff1100000568ac10: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 37.715392][ T355] Object ff1100000568ac20: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 37.715627][ T355] Object ff1100000568ac30: 00 00 00 00 00 00 00 00 00 1c 7c 0c 00 00 11 ff ..........|..... [ 37.715860][ T355] Redzone ff1100000568ac40: cc cc cc cc cc cc cc cc ........ [ 37.716066][ T355] Padding ff1100000568acb8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 37.716296][ T355] ------------[ cut here ]------------ [ 37.716419][ T355] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/355 [ 37.716601][ T355] Modules linked in: [ 37.716701][ T355] CPU: 2 UID: 0 PID: 355 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 37.716950][ T355] Tainted: [B]=BAD_PAGE, [W]=WARN [ 37.717075][ T355] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 37.717235][ T355] RIP: 0010:object_err+0x68/0x70 [ 37.717367][ T355] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 37.717804][ T355] RSP: 0018:ffa0000001f97bc0 EFLAGS: 00010046 [ 37.717961][ T355] RAX: 0000000000000220 RBX: ff1100000568ac20 RCX: 0000000000000001 [ 37.718146][ T355] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 37.718335][ T355] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 37.718521][ T355] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000015a280 [ 37.718707][ T355] R13: ff1100000568ac38 R14: ff1100000103c940 R15: ffd400000015a280 [ 37.718892][ T355] FS: 00007fc0b21d4cc0(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000 [ 37.719111][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.719271][ T355] CR2: 000000001a79b008 CR3: 000000000b950004 CR4: 0000000000771ef0 [ 37.719458][ T355] PKRU: 55555554 [ 37.719551][ T355] Call Trace: [ 37.719645][ T355] [ 37.719709][ T355] check_bytes_and_report.cold+0x43/0x5f [ 37.719835][ T355] check_object+0x31f/0x340 [ 37.719958][ T355] free_debug_processing+0x135/0x230 [ 37.720080][ T355] ? qlist_free_all+0x57/0x110 [ 37.720204][ T355] free_to_partial_list+0x83/0x310 [ 37.720331][ T355] ? qlist_free_all+0x57/0x110 [ 37.720452][ T355] qlist_free_all+0x5c/0x110 [ 37.720574][ T355] kasan_quarantine_reduce+0x196/0x240 [ 37.720696][ T355] __kasan_slab_alloc+0x4b/0x70 [ 37.720819][ T355] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 37.720941][ T355] ? do_getname.isra.0+0x32/0x240 [ 37.721066][ T355] do_getname.isra.0+0x32/0x240 [ 37.721187][ T355] ? trace_hardirqs_on+0x36/0x40 [ 37.721316][ T355] do_faccessat+0xe6/0x9a0 [ 37.721481][ T355] ? generic_file_open+0xa0/0xa0 [ 37.721604][ T355] ? lock_release+0x184/0x1f0 [ 37.721767][ T355] ? do_raw_spin_unlock+0x59/0x250 [ 37.721891][ T355] __x64_sys_access+0x5a/0x90 [ 37.722054][ T355] ? trace_hardirqs_on+0x36/0x40 [ 37.722174][ T355] do_syscall_64+0xff/0x530 [ 37.722341][ T355] ? exc_page_fault+0xee/0x100 [ 37.722465][ T355] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 37.722656][ T355] RIP: 0033:0x7fc0b24ae40b [ 37.722789][ T355] Code: 0f 1e fa 8b 87 10 01 00 00 89 06 31 c0 c3 90 f3 0f 1e fa 89 b7 10 01 00 00 31 c0 c3 0f 1f 00 f3 0f 1e fa b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 8b 15 b9 a9 10 00 f7 d8 [ 37.723318][ T355] RSP: 002b:00007ffe9652fb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 37.723545][ T355] RAX: ffffffffffffffda RBX: 00007fc0b21d4b78 RCX: 00007fc0b24ae40b [ 37.723731][ T355] RDX: 000000000000000f RSI: 0000000000000000 RDI: 00007fc0b268b271 [ 37.723957][ T355] RBP: 00007ffe9652fba0 R08: 000000001a79b680 R09: 00000000000001e0 [ 37.724182][ T355] R10: 00000000000001e1 R11: 0000000000000246 R12: 0000000000000000 [ 37.724415][ T355] R13: 00007ffe9652fc48 R14: 00007ffe9652fca0 R15: 00007fc0b2693710 [ 37.724600][ T355] [ 37.724734][ T355] irq event stamp: 0 [ 37.724828][ T355] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 37.725018][ T355] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 37.725275][ T355] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 37.725528][ T355] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 37.725680][ T355] ---[ end trace 0000000000000000 ]--- [ 37.725841][ T355] FIX kmalloc-32: Restoring kmalloc Redzone 0xff1100000568ac38-0xff1100000568ac3f=0xcc [ 37.726081][ T355] FIX kmalloc-32: Object at 0xff1100000568ac20 not freed [ 37.748238][ T355] bond0: (slave eth0): Enslaving as an active interface with an up link [ 37.748582][ T103] br0: port 1(eth0) entered blocking state [ 37.748765][ T103] br0: port 1(eth0) entered forwarding state [ 37.778858][ T356] bond0: (slave eth1): Enslaving as an active interface with an up link [ 37.779593][ T46] br0: port 2(eth1) entered blocking state [ 37.779744][ T46] br0: port 2(eth1) entered forwarding state [ 37.812463][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 37.812692][ T223] bond0: active interface up! [ 37.957650][ T358] [Right Redzone overwritten] 0xff1100000b342100-0xff1100000b342107 @offset=256. First byte 0x0 instead of 0xcc [ 37.957970][ T358] ============================================================================= [ 37.958196][ T358] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 37.958393][ T358] ----------------------------------------------------------------------------- [ 37.958393][ T358] [ 37.958647][ T358] Allocated in bond_update_slave_arr+0x166/0xd70 age=9606 cpu=3 pid=312 [ 37.958842][ T358] bond_update_slave_arr+0x166/0xd70 [ 37.958973][ T358] bond_enslave+0x447f/0x5100 [ 37.959098][ T358] do_set_master+0x3b2/0x780 [ 37.959229][ T358] do_setlink.isra.0+0x9f4/0x2bb0 [ 37.959355][ T358] rtnl_newlink+0x9f1/0x11c0 [ 37.959484][ T358] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 37.959609][ T358] netlink_rcv_skb+0x14e/0x3a0 [ 37.959736][ T358] netlink_unicast+0x486/0x750 [ 37.959861][ T358] netlink_sendmsg+0x735/0xc60 [ 37.959986][ T358] ____sys_sendmsg+0x415/0x880 [ 37.960112][ T358] ___sys_sendmsg+0x14e/0x1d0 [ 37.960239][ T358] __sys_sendmsg+0x12c/0x1d0 [ 37.960363][ T358] do_syscall_64+0xff/0x530 [ 37.960490][ T358] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 37.960646][ T358] Freed in qlist_free_all+0x57/0x110 age=9727 cpu=3 pid=308 [ 37.960835][ T358] kasan_quarantine_reduce+0x196/0x240 [ 37.960962][ T358] __kasan_slab_alloc+0x4b/0x70 [ 37.961087][ T358] __kmalloc_cache_noprof+0x23e/0x620 [ 37.961211][ T358] ovl_open+0x1ef/0x2f0 [ 37.961309][ T358] do_dentry_open+0x408/0x1310 [ 37.961434][ T358] vfs_open+0x7a/0x440 [ 37.961528][ T358] do_open+0x646/0xdd0 [ 37.961621][ T358] path_openat+0x1d0/0x3b0 [ 37.961744][ T358] do_file_open+0x209/0x480 [ 37.961867][ T358] do_sys_openat2+0xe0/0x170 [ 37.961989][ T358] __x64_sys_openat+0x10e/0x210 [ 37.962111][ T358] do_syscall_64+0xff/0x530 [ 37.962236][ T358] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 37.962390][ T358] Slab 0xffd40000002cd080 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 37.962634][ T358] Object 0xff1100000b3420e0 @offset=224 fp=0xff1100000b342e60 [ 37.962634][ T358] [ 37.962848][ T358] Redzone ff1100000b3420c0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 37.963101][ T358] Redzone ff1100000b3420d0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 37.963353][ T358] Object ff1100000b3420e0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 37.963600][ T358] Object ff1100000b3420f0: 00 00 00 00 00 00 00 00 00 28 7c 0c 00 00 11 ff .........(|..... [ 37.963846][ T358] Redzone ff1100000b342100: 00 4c 90 0d 00 00 11 ff .L...... [ 37.964071][ T358] Padding ff1100000b342178: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 37.964303][ T358] ------------[ cut here ]------------ [ 37.964431][ T358] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: kworker/1:2/358 [ 37.964624][ T358] Modules linked in: [ 37.964728][ T358] CPU: 1 UID: 0 PID: 358 Comm: kworker/1:2 Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 37.964990][ T358] Tainted: [B]=BAD_PAGE, [W]=WARN [ 37.965121][ T358] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 37.965288][ T358] Workqueue: mld mld_ifc_work [ 37.965424][ T358] RIP: 0010:object_err+0x68/0x70 [ 37.965562][ T358] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 37.966023][ T358] RSP: 0018:ffa0000001f876a0 EFLAGS: 00010046 [ 37.966188][ T358] RAX: 0000000000000220 RBX: ff1100000b3420e0 RCX: 0000000000000001 [ 37.966384][ T358] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 37.966578][ T358] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 37.966775][ T358] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000002cd080 [ 37.966968][ T358] R13: ff1100000b342100 R14: ff1100000103c940 R15: ffd40000002cd080 [ 37.967163][ T358] FS: 0000000000000000(0000) GS:ff1100008c92e000(0000) knlGS:0000000000000000 [ 37.967395][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.967560][ T358] CR2: 0000557efed6e130 CR3: 0000000019d3c002 CR4: 0000000000771ef0 [ 37.967753][ T358] PKRU: 55555554 [ 37.967852][ T358] Call Trace: [ 37.967951][ T358] [ 37.968018][ T358] check_bytes_and_report.cold+0x43/0x5f [ 37.968148][ T358] check_object+0x19c/0x340 [ 37.968282][ T358] free_debug_processing+0x135/0x230 [ 37.968411][ T358] ? qlist_free_all+0x57/0x110 [ 37.968540][ T358] free_to_partial_list+0x83/0x310 [ 37.968666][ T358] ? qlist_free_all+0x57/0x110 [ 37.968792][ T358] qlist_free_all+0x5c/0x110 [ 37.968921][ T358] kasan_quarantine_reduce+0x196/0x240 [ 37.969048][ T358] __kasan_slab_alloc+0x4b/0x70 [ 37.969175][ T358] kmem_cache_alloc_node_noprof+0x25c/0x660 [ 37.969338][ T358] ? __alloc_skb+0xde/0x5f0 [ 37.969468][ T358] __alloc_skb+0xde/0x5f0 [ 37.969562][ T358] ? __alloc_skb+0x4c5/0x5f0 [ 37.969689][ T358] ? napi_skb_cache_get+0x830/0x830 [ 37.969816][ T358] mld_newpack+0x177/0xa40 [ 37.969944][ T358] ? mld_sendpack+0xda0/0xda0 [ 37.970069][ T358] ? lock_acquire+0x13c/0x160 [ 37.970197][ T358] ? __rwlock_init+0x150/0x150 [ 37.970330][ T358] ? do_raw_spin_unlock+0x59/0x250 [ 37.970458][ T358] ? add_grhead+0x256/0x360 [ 37.970585][ T358] add_grhead+0x256/0x360 [ 37.970680][ T358] ? trace_contention_end+0xb3/0x180 [ 37.970807][ T358] add_grec+0xb87/0x14b0 [ 37.970903][ T358] ? mld_ifc_work+0x2e/0x190 [ 37.971030][ T358] ? rcu_is_watching+0x16/0xd0 [ 37.971158][ T358] ? ww_mutex_lock+0x160/0x160 [ 37.971290][ T358] ? add_grhead+0x360/0x360 [ 37.971419][ T358] mld_send_cr+0x2ba/0x820 [ 37.971546][ T358] ? mld_ifc_work+0x2e/0x190 [ 37.971672][ T358] mld_ifc_work+0x36/0x190 [ 37.971799][ T358] ? process_one_work+0xdfc/0x1560 [ 37.971928][ T358] process_one_work+0xe3e/0x1560 [ 37.972055][ T358] ? __queue_delayed_work+0x470/0x470 [ 37.972182][ T358] ? lock_release+0x184/0x1f0 [ 37.972315][ T358] ? __mutex_unlock_slowpath+0x9e/0x740 [ 37.972443][ T358] ? __rwlock_init+0x150/0x150 [ 37.972571][ T358] worker_thread+0x4f1/0xd60 [ 37.972698][ T358] ? rescuer_thread+0x1340/0x1340 [ 37.972824][ T358] ? __kthread_parkme+0xbd/0x210 [ 37.972951][ T358] ? rescuer_thread+0x1340/0x1340 [ 37.973077][ T358] ? rescuer_thread+0x1340/0x1340 [ 37.973204][ T358] kthread+0x367/0x460 [ 37.973304][ T358] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 37.973463][ T358] ? kthread_affine_preferred+0x4c0/0x4c0 [ 37.973590][ T358] ret_from_fork+0x474/0x6b0 [ 37.973720][ T358] ? arch_exit_to_user_mode_prepare.isra.0+0x120/0x120 [ 37.973878][ T358] ? __switch_to+0x5a3/0xe00 [ 37.974007][ T358] ? kthread_affine_preferred+0x4c0/0x4c0 [ 37.974135][ T358] ret_from_fork_asm+0x11/0x20 [ 37.974268][ T358] [ 37.974366][ T358] irq event stamp: 0 [ 37.974465][ T358] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 37.974625][ T358] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 37.974848][ T358] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 37.975073][ T358] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 37.975232][ T358] ---[ end trace 0000000000000000 ]--- [ 37.975360][ T358] FIX kmalloc-32: Restoring Right Redzone 0xff1100000b342100-0xff1100000b342107=0xcc [ 37.975572][ T358] FIX kmalloc-32: Object at 0xff1100000b3420e0 not freed [ 37.975914][ T358] [kmalloc Redzone overwritten] 0xff1100000a792938-0xff1100000a79293f @offset=2360. First byte 0x0 instead of 0xcc [ 37.976179][ T358] ============================================================================= [ 37.976402][ T358] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 37.976585][ T358] ----------------------------------------------------------------------------- [ 37.976585][ T358] [ 37.976827][ T358] Allocated in bond_update_slave_arr+0x166/0xd70 age=9652 cpu=3 pid=311 [ 37.977014][ T358] bond_update_slave_arr+0x166/0xd70 [ 37.977142][ T358] bond_enslave+0x447f/0x5100 [ 37.977268][ T358] do_set_master+0x3b2/0x780 [ 37.977390][ T358] do_setlink.isra.0+0x9f4/0x2bb0 [ 37.977512][ T358] rtnl_newlink+0x9f1/0x11c0 [ 37.977635][ T358] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 37.977758][ T358] netlink_rcv_skb+0x14e/0x3a0 [ 37.977883][ T358] netlink_unicast+0x486/0x750 [ 37.978005][ T358] netlink_sendmsg+0x735/0xc60 [ 37.978129][ T358] ____sys_sendmsg+0x415/0x880 [ 37.978256][ T358] ___sys_sendmsg+0x14e/0x1d0 [ 37.978379][ T358] __sys_sendmsg+0x12c/0x1d0 [ 37.978504][ T358] do_syscall_64+0xff/0x530 [ 37.978626][ T358] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 37.978779][ T358] Freed in qlist_free_all+0x57/0x110 age=9787 cpu=3 pid=306 [ 37.978965][ T358] kasan_quarantine_reduce+0x196/0x240 [ 37.979088][ T358] __kasan_slab_alloc+0x4b/0x70 [ 37.979211][ T358] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 37.979336][ T358] fuse_request_alloc+0x27/0x210 [ 37.979461][ T358] fuse_chan_send+0x78/0x7a0 [ 37.979583][ T358] fuse_file_put+0x286/0x470 [ 37.979706][ T358] fuse_release+0x12c/0x230 [ 37.979828][ T358] __fput+0x363/0xac0 [ 37.979962][ T358] task_work_run+0x12b/0x240 [ 37.980085][ T358] do_exit+0x614/0xdc0 [ 37.980178][ T358] do_group_exit+0xb8/0x370 [ 37.980342][ T358] __x64_sys_exit_group+0x3c/0x50 [ 37.980465][ T358] x64_sys_call+0x1567/0x1570 [ 37.980629][ T358] do_syscall_64+0xff/0x530 [ 37.980752][ T358] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 37.980944][ T358] Slab 0xffd400000029e480 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 37.981227][ T358] Object 0xff1100000a792920 @offset=2336 fp=0x0000000000000000 [ 37.981227][ T358] [ 37.981476][ T358] Redzone ff1100000a792900: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 37.981762][ T358] Redzone ff1100000a792910: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 37.982050][ T358] Object ff1100000a792920: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 37.982340][ T358] Object ff1100000a792930: 00 00 00 00 00 00 00 00 00 28 7c 0c 00 00 11 ff .........(|..... [ 37.982626][ T358] Redzone ff1100000a792940: cc cc cc cc cc cc cc cc ........ [ 37.982883][ T358] Padding ff1100000a7929b8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 37.983147][ T358] ------------[ cut here ]------------ [ 37.983276][ T358] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: kworker/1:2/358 [ 37.983506][ T358] Modules linked in: [ 37.983604][ T358] CPU: 1 UID: 0 PID: 358 Comm: kworker/1:2 Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 37.983905][ T358] Tainted: [B]=BAD_PAGE, [W]=WARN [ 37.984077][ T358] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 37.984240][ T358] Workqueue: mld mld_ifc_work [ 37.984415][ T358] RIP: 0010:object_err+0x68/0x70 [ 37.984547][ T358] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 37.985093][ T358] RSP: 0018:ffa0000001f876b0 EFLAGS: 00010046 [ 37.985301][ T358] RAX: 0000000000000220 RBX: ff1100000a792920 RCX: 0000000000000001 [ 37.985541][ T358] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 37.985735][ T358] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 37.986003][ T358] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000029e480 [ 37.986242][ T358] R13: ff1100000a792938 R14: ff1100000103c940 R15: ffd400000029e480 [ 37.986477][ T358] FS: 0000000000000000(0000) GS:ff1100008c92e000(0000) knlGS:0000000000000000 [ 37.986701][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.986907][ T358] CR2: 0000557efed6e130 CR3: 0000000019d3c002 CR4: 0000000000771ef0 [ 37.987140][ T358] PKRU: 55555554 [ 37.987239][ T358] Call Trace: [ 37.987379][ T358] [ 37.987444][ T358] check_bytes_and_report.cold+0x43/0x5f [ 37.987571][ T358] check_object+0x31f/0x340 [ 37.987741][ T358] free_debug_processing+0x135/0x230 [ 37.987869][ T358] ? qlist_free_all+0x57/0x110 [ 37.988036][ T358] free_to_partial_list+0x83/0x310 [ 37.988161][ T358] ? qlist_free_all+0x57/0x110 [ 37.988292][ T358] qlist_free_all+0x5c/0x110 [ 37.988422][ T358] kasan_quarantine_reduce+0x196/0x240 [ 37.988592][ T358] __kasan_slab_alloc+0x4b/0x70 [ 37.988718][ T358] kmem_cache_alloc_node_noprof+0x25c/0x660 [ 37.988919][ T358] ? __alloc_skb+0xde/0x5f0 [ 37.989048][ T358] __alloc_skb+0xde/0x5f0 [ 37.989185][ T358] ? __alloc_skb+0x4c5/0x5f0 [ 37.989315][ T358] ? napi_skb_cache_get+0x830/0x830 [ 37.989484][ T358] mld_newpack+0x177/0xa40 [ 37.989611][ T358] ? mld_sendpack+0xda0/0xda0 [ 37.989780][ T358] ? lock_acquire+0x13c/0x160 [ 37.989907][ T358] ? __rwlock_init+0x150/0x150 [ 37.990077][ T358] ? do_raw_spin_unlock+0x59/0x250 [ 37.990204][ T358] ? add_grhead+0x256/0x360 [ 37.990376][ T358] add_grhead+0x256/0x360 [ 37.990471][ T358] ? trace_contention_end+0xb3/0x180 [ 37.990638][ T358] add_grec+0xb87/0x14b0 [ 37.990734][ T358] ? mld_ifc_work+0x2e/0x190 [ 37.990905][ T358] ? rcu_is_watching+0x16/0xd0 [ 37.991033][ T358] ? ww_mutex_lock+0x160/0x160 [ 37.991203][ T358] ? add_grhead+0x360/0x360 [ 37.991334][ T358] mld_send_cr+0x2ba/0x820 [ 37.991504][ T358] ? mld_ifc_work+0x2e/0x190 [ 37.991631][ T358] mld_ifc_work+0x36/0x190 [ 37.991799][ T358] ? process_one_work+0xdfc/0x1560 [ 37.991925][ T358] process_one_work+0xe3e/0x1560 [ 37.992094][ T358] ? __queue_delayed_work+0x470/0x470 [ 37.992219][ T358] ? lock_release+0x184/0x1f0 [ 37.992393][ T358] ? __mutex_unlock_slowpath+0x9e/0x740 [ 37.992519][ T358] ? __rwlock_init+0x150/0x150 [ 37.992688][ T358] worker_thread+0x4f1/0xd60 [ 37.992816][ T358] ? rescuer_thread+0x1340/0x1340 [ 37.992986][ T358] ? __kthread_parkme+0xbd/0x210 [ 37.993112][ T358] ? rescuer_thread+0x1340/0x1340 [ 37.993283][ T358] ? rescuer_thread+0x1340/0x1340 [ 37.993411][ T358] kthread+0x367/0x460 [ 37.993510][ T358] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 37.993711][ T358] ? kthread_affine_preferred+0x4c0/0x4c0 [ 37.993881][ T358] ret_from_fork+0x474/0x6b0 [ 37.994009][ T358] ? arch_exit_to_user_mode_prepare.isra.0+0x120/0x120 [ 37.994209][ T358] ? __switch_to+0x5a3/0xe00 [ 37.994339][ T358] ? kthread_affine_preferred+0x4c0/0x4c0 [ 37.994510][ T358] ret_from_fork_asm+0x11/0x20 [ 37.994639][ T358] [ 37.994777][ T358] irq event stamp: 0 [ 37.994873][ T358] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 37.995074][ T358] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 37.995297][ T358] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 37.995562][ T358] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 37.995762][ T358] ---[ end trace 0000000000000000 ]--- [ 37.995887][ T358] FIX kmalloc-32: Restoring kmalloc Redzone 0xff1100000a792938-0xff1100000a79293f=0xcc [ 37.996139][ T358] FIX kmalloc-32: Object at 0xff1100000a792920 not freed [ 38.892777][ T363] [Right Redzone overwritten] 0xff1100000b353b80-0xff1100000b353b87 @offset=2944. First byte 0x0 instead of 0xcc [ 38.893100][ T363] ============================================================================= [ 38.893344][ T363] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 38.893547][ T363] ----------------------------------------------------------------------------- [ 38.893547][ T363] [ 38.893820][ T363] Allocated in bond_update_slave_arr+0x166/0xd70 age=5744 cpu=2 pid=334 [ 38.894025][ T363] bond_update_slave_arr+0x166/0xd70 [ 38.894163][ T363] bond_enslave+0x447f/0x5100 [ 38.894304][ T363] do_set_master+0x3b2/0x780 [ 38.894440][ T363] do_setlink.isra.0+0x9f4/0x2bb0 [ 38.894575][ T363] rtnl_newlink+0x9f1/0x11c0 [ 38.894712][ T363] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 38.894848][ T363] netlink_rcv_skb+0x14e/0x3a0 [ 38.894986][ T363] netlink_unicast+0x486/0x750 [ 38.895121][ T363] netlink_sendmsg+0x735/0xc60 [ 38.895258][ T363] ____sys_sendmsg+0x415/0x880 [ 38.895395][ T363] ___sys_sendmsg+0x14e/0x1d0 [ 38.895530][ T363] __sys_sendmsg+0x12c/0x1d0 [ 38.895664][ T363] do_syscall_64+0xff/0x530 [ 38.895799][ T363] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 38.895966][ T363] Freed in qlist_free_all+0x57/0x110 age=5841 cpu=2 pid=331 [ 38.896170][ T363] kasan_quarantine_reduce+0x196/0x240 [ 38.896309][ T363] __kasan_slab_alloc+0x4b/0x70 [ 38.896445][ T363] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 38.896578][ T363] do_getname.isra.0+0x32/0x240 [ 38.896712][ T363] do_faccessat+0xe6/0x9a0 [ 38.896846][ T363] __x64_sys_access+0x5a/0x90 [ 38.896980][ T363] do_syscall_64+0xff/0x530 [ 38.897112][ T363] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 38.897283][ T363] Slab 0xffd40000002cd4c0 objects=21 used=21 fp=0x0000000000000000 flags=0x80000000000000(node=0|zone=1) [ 38.897549][ T363] Object 0xff1100000b353b60 @offset=2912 fp=0xff1100000b3539e0 [ 38.897549][ T363] [ 38.897782][ T363] Redzone ff1100000b353b40: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 38.898053][ T363] Redzone ff1100000b353b50: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 38.898322][ T363] Object ff1100000b353b60: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 38.898589][ T363] Object ff1100000b353b70: 00 00 00 00 00 00 00 00 00 1c 7c 0c 00 00 11 ff ..........|..... [ 38.898853][ T363] Redzone ff1100000b353b80: 00 04 b2 0d 00 00 11 ff ........ [ 38.899089][ T363] Padding ff1100000b353bf8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 38.899338][ T363] ------------[ cut here ]------------ [ 38.899472][ T363] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/363 [ 38.899676][ T363] Modules linked in: [ 38.899784][ T363] CPU: 0 UID: 0 PID: 363 Comm: ip Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 38.900061][ T363] Tainted: [B]=BAD_PAGE, [W]=WARN [ 38.900199][ T363] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 38.900374][ T363] RIP: 0010:object_err+0x68/0x70 [ 38.900517][ T363] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 38.901008][ T363] RSP: 0018:ffa0000001fd76b8 EFLAGS: 00010046 [ 38.901183][ T363] RAX: 0000000000000220 RBX: ff1100000b353b60 RCX: 0000000000000001 [ 38.901394][ T363] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660 [ 38.901600][ T363] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc [ 38.901805][ T363] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000002cd4c0 [ 38.902012][ T363] R13: ff1100000b353b80 R14: ff1100000103c940 R15: ffd40000002cd4c0 [ 38.902218][ T363] FS: 00007f178b8a4cc0(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000 [ 38.902463][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.902636][ T363] CR2: 00007efcb66c6c84 CR3: 0000000004d1d003 CR4: 0000000000771ef0 [ 38.902841][ T363] PKRU: 55555554 [ 38.902944][ T363] Call Trace: [ 38.903046][ T363] [ 38.903116][ T363] check_bytes_and_report.cold+0x43/0x5f [ 38.903256][ T363] check_object+0x19c/0x340 [ 38.903394][ T363] free_debug_processing+0x135/0x230 [ 38.903531][ T363] ? qlist_free_all+0x57/0x110 [ 38.903668][ T363] free_to_partial_list+0x83/0x310 [ 38.903805][ T363] ? qlist_free_all+0x57/0x110 [ 38.903945][ T363] qlist_free_all+0x5c/0x110 [ 38.904082][ T363] kasan_quarantine_reduce+0x196/0x240 [ 38.904220][ T363] __kasan_slab_alloc+0x4b/0x70 [ 38.904360][ T363] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 38.904496][ T363] ? __alloc_object+0x30/0x260 [ 38.904633][ T363] __alloc_object+0x30/0x260 [ 38.904770][ T363] __create_object+0x30/0x110 [ 38.904905][ T363] ? kasan_save_track+0x14/0x30 [ 38.905042][ T363] kmem_cache_alloc_noprof+0x467/0x5c0 [ 38.905177][ T363] ? __pmd_alloc+0x87/0x840 [ 38.905318][ T363] __pmd_alloc+0x87/0x840 [ 38.905420][ T363] ? __p4d_alloc+0x211/0x470 [ 38.905557][ T363] __handle_mm_fault+0x46e/0x5b0 [ 38.905694][ T363] ? __pmd_alloc+0x840/0x840 [ 38.905831][ T363] handle_mm_fault+0x182/0x4a0 [ 38.905966][ T363] ? vma_pgtable_walk_end+0x1f/0x60 [ 38.906103][ T363] faultin_page+0x6a/0x170 [ 38.906240][ T363] __get_user_pages+0x293/0x7e0 [ 38.906377][ T363] ? follow_page_mask+0x3f0/0x3f0 [ 38.906513][ T363] ? find_vma_intersection+0xa3/0x130 [ 38.906650][ T363] ? rcu_is_watching+0x16/0xd0 [ 38.906786][ T363] ? rcu_is_watching+0x16/0xd0 [ 38.906922][ T363] get_user_pages_remote+0x353/0x810 [ 38.907060][ T363] ? down_read+0xc1/0x540 [ 38.907163][ T363] ? down_read+0x14c/0x540 [ 38.907302][ T363] ? __get_user_pages+0x7e0/0x7e0 [ 38.907439][ T363] ? lock_acquire+0x13c/0x160 [ 38.907576][ T363] get_arg_page+0xe1/0x2b0 [ 38.907711][ T363] ? alloc_bprm+0x5f0/0x5f0 [ 38.907846][ T363] ? lock_acquire+0x13c/0x160 [ 38.907981][ T363] ? __rwlock_init+0x150/0x150 [ 38.908118][ T363] copy_string_kernel+0xf1/0x340 [ 38.908256][ T363] ? get_user_arg_ptr.isra.0+0x3b/0x80 [ 38.908393][ T363] do_execveat_common.isra.0+0x278/0x4f0 [ 38.908529][ T363] __x64_sys_execve+0x91/0xc0 [ 38.908665][ T363] do_syscall_64+0xff/0x530 [ 38.908800][ T363] ? exc_page_fault+0xee/0x100 [ 38.908935][ T363] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 38.909102][ T363] RIP: 0033:0x7f178bb5af4b [ 38.909251][ T363] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48 [ 38.909738][ T363] RSP: 002b:00007ffe2947a628 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 38.909946][ T363] RAX: ffffffffffffffda RBX: 00007ffe2947ce57 RCX: 00007f178bb5af4b [ 38.910151][ T363] RDX: 00007ffe2947aac8 RSI: 00007ffe2947aa98 RDI: 00007ffe2947a630 [ 38.910361][ T363] RBP: 00007ffe2947a740 R08: 0000000000000000 R09: 000000000000009f [ 38.910567][ T363] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe2947ce3e [ 38.910773][ T363] R13: 00007ffe2947aac8 R14: 00007ffe2947a630 R15: 00007ffe2947aa98 [ 38.910982][ T363] [ 38.911085][ T363] irq event stamp: 0 [ 38.911187][ T363] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 38.911360][ T363] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 38.911597][ T363] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 38.911833][ T363] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 38.912003][ T363] ---[ end trace 0000000000000000 ]--- [ 38.912138][ T363] FIX kmalloc-32: Restoring Right Redzone 0xff1100000b353b80-0xff1100000b353b87=0xcc [ 38.912368][ T363] FIX kmalloc-32: Object at 0xff1100000b353b60 not freed [ 38.934745][ T363] br0: port 1(eth0) entered disabled state [ 38.957318][ T223] bond0: (slave eth0): link status definitely down, disabling slave [ 38.957574][ T223] bond0: (slave eth1): link status definitely up, 10000 Mbps full duplex [ 40.972419][ T39] br0: port 1(eth0) entered blocking state [ 40.972585][ T39] br0: port 1(eth0) entered forwarding state [ 41.002855][ T366] br0: port 2(eth1) entered disabled state [ 41.037257][ T223] bond0: (slave eth0): link status up, enabling it in 0 ms [ 41.037542][ T223] bond0: (slave eth0): link status definitely up, 10000 Mbps full duplex [ 41.037786][ T223] bond0: (slave eth1): link status definitely down, disabling slave [ 42.109143][ T371] bond0 (unregistering): (slave eth0): Releasing backup interface [ 42.115744][ T371] bond0 (unregistering): (slave eth1): Releasing backup interface [ 42.128385][ T371] bond0 (unregistering): Released all slaves [ 42.131569][ T103] br0: port 1(eth0) entered disabled state [ 42.216891][ T223] eth1: left allmulticast mode [ 42.217027][ T223] eth1: left promiscuous mode [ 42.217197][ T223] br0: port 2(eth1) entered disabled state [ 42.217856][ T223] eth0: left allmulticast mode [ 42.217973][ T223] eth0: left promiscuous mode [ 42.218128][ T223] br0: port 1(eth0) entered disabled state