======================================
| [   63.499221][ T1878] ==================================================================
| [   63.499419][ T1878] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
| [   63.499610][ T1878] Write of size 8 at addr ff11000004e72338 by task ip/1878
| [   63.499793][ T1878]
[   63.499863][ T1878] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   63.499865][ T1878] Call Trace:
[   63.499867][ T1878]  <TASK>
[   63.499868][ T1878]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[   63.499873][ T1878]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[   63.499878][ T1878]  print_report (mm/kasan/report.c:482)
[   63.499879][ T1878]  ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54)
[   63.499883][ T1878]  ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[   63.499885][ T1878]  kasan_report (mm/kasan/report.c:595)
[   63.499887][ T1878]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   63.499889][ T1878]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   63.499891][ T1878]  bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   63.499893][ T1878]  ? __mutex_unlock_slowpath (./include/linux/preempt.h:500 (discriminator 1) kernel/locking/mutex.c:999 (discriminator 1))
[   63.499896][ T1878]  ? bond_slave_arr_work_rearm (drivers/net/bonding/bond_main.c:5078)
[   63.499898][ T1878]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[   63.499902][ T1878]  bond_enslave (drivers/net/bonding/bond_main.c:2337)
[   63.499905][ T1878]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5218 (discriminator 9))
[   63.499906][ T1878]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   63.499908][ T1878]  ? mark_usage (kernel/locking/lockdep.c:4690)
[   63.499910][ T1878]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   63.499912][ T1878]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   63.499915][ T1878]  ? is_bpf_text_address (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) kernel/bpf/core.c:751 (discriminator 2))
[   63.499918][ T1878]  ? rtnl_af_lookup (net/core/rtnetlink.c:794 (discriminator 1))
[   63.499922][ T1878]  do_set_master (net/core/rtnetlink.c:3088)
[   63.499925][ T1878]  do_setlink.isra.0 (net/core/rtnetlink.c:3290 (discriminator 1))
[   63.499928][ T1878]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[   63.499929][ T1878]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[   63.499933][ T1878]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[   63.499935][ T1878]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:388 kernel/rcu/update.c:380)
[   63.499938][ T1878]  ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 2) lib/stackdepot.c:676 (discriminator 2))
[   63.499941][ T1878]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[   63.499943][ T1878]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[   63.499944][ T1878]  ? validate_chain (kernel/locking/lockdep.c:3817 (discriminator 2) kernel/locking/lockdep.c:3837 (discriminator 2) kernel/locking/lockdep.c:3892 (discriminator 2))
[   63.499946][ T1878]  ? kasan_save_stack (mm/kasan/common.c:58)
[   63.499948][ T1878]  ? kasan_save_stack (mm/kasan/common.c:57)
[   63.499949][ T1878]  ? kasan_save_track (mm/kasan/common.c:78)
[   63.499950][ T1878]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   63.499952][ T1878]  ? __netlink_dump_start (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) net/netlink/af_netlink.c:2433 (discriminator 1))
[   63.499955][ T1878]  ? ___sys_sendmsg (net/socket.c:2758 (discriminator 1))
[   63.499958][ T1878]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   63.499960][ T1878]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[   63.499962][ T1878]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   63.499964][ T1878]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   63.499965][ T1878]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   63.499967][ T1878]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   63.499968][ T1878]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[   63.499970][ T1878]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[   63.499971][ T1878]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[   63.499972][ T1878]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[   63.499975][ T1878]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[   63.499976][ T1878]  ? nla_get_range_signed (lib/nlattr.c:270)
[   63.499979][ T1878]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[   63.499982][ T1878]  rtnl_newlink (net/core/rtnetlink.c:4241)
[   63.499985][ T1878]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   63.499987][ T1878]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   63.499990][ T1878]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   63.499991][ T1878]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   63.499993][ T1878]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   63.499995][ T1878]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[   63.499997][ T1878]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   63.499999][ T1878]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[   63.500001][ T1878]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   63.500003][ T1878]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   63.500006][ T1878]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   63.500007][ T1878]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   63.500009][ T1878]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[   63.500011][ T1878]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   63.500013][ T1878]  ? netlink_ack (./include/linux/skbuff.h:2718)
[   63.500016][ T1878]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2))
[   63.500018][ T1878]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2))
[   63.500020][ T1878]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[   63.500022][ T1878]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[   63.500024][ T1878]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   63.500026][ T1878]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[   63.500028][ T1878]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[   63.500030][ T1878]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[   63.500034][ T1878]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[   63.500036][ T1878]  ? copy_msghdr_from_user (net/socket.c:2650)
[   63.500037][ T1878]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[   63.500039][ T1878]  ? move_addr_to_kernel (net/socket.c:258)
[   63.500041][ T1878]  ___sys_sendmsg (net/socket.c:2767)
[   63.500043][ T1878]  ? copy_msghdr_from_user (net/socket.c:2619)
[   63.500048][ T1878]  __sys_sendmsg (net/socket.c:2799)
[   63.500050][ T1878]  ? __sys_sendmsg_sock (net/socket.c:2780)
[   63.500053][ T1878]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   63.500055][ T1878]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   63.500057][ T1878]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   63.500059][ T1878]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   63.500062][ T1878] RIP: 0033:0x7fb66c12754e
[   63.500064][ T1878] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   63.500066][ T1878] RSP: 002b:00007ffedaf99120 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[   63.500070][ T1878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb66c12754e
[   63.500071][ T1878] RDX: 0000000000000000 RSI: 00007ffedaf991d0 RDI: 0000000000000005
[   63.500072][ T1878] RBP: 00007ffedaf99130 R08: 0000000000000000 R09: 0000000000000000
[   63.500073][ T1878] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a99390e
[   63.500074][ T1878] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffedaf998a0
| [   68.859638][ T2143] ------------[ cut here ]------------
| [   68.859775][ T2143] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2143
| [   68.859981][ T2143] Modules linked in:
| [   68.860365][ T2143] Tainted: [B]=BAD_PAGE
[   68.860470][ T2143] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   68.860635][ T2143] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   68.860775][ T2143] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   68.861262][ T2143] RSP: 0018:ffa00000041f79f8 EFLAGS: 00010046
[   68.861434][ T2143] RAX: 0000000000000020 RBX: ff11000004f70a40 RCX: 0000000000000001
[   68.861639][ T2143] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   68.861841][ T2143] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   68.862044][ T2143] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dc00
[   68.862245][ T2143] R13: ff11000004f70a68 R14: ff1100000103cac0 R15: ffd400000013dc00
[   68.862452][ T2143] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   68.862690][ T2143] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.862865][ T2143] CR2: 00007fd2210cd000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   68.863068][ T2143] PKRU: 55555554
[   68.863170][ T2143] Call Trace:
[   68.863281][ T2143]  <TASK>
[   68.863353][ T2143]  check_bytes_and_report.cold (mm/slub.c:1359)
[   68.863489][ T2143]  check_object (mm/slub.c:1515)
[   68.863618][ T2143]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   68.863748][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.863881][ T2143]  free_to_partial_list (mm/slub.c:5631)
[   68.864015][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.864153][ T2143]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.864290][ T2143]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   68.864422][ T2143]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   68.864553][ T2143]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   68.864684][ T2143]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.864818][ T2143]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.864951][ T2143]  fuse_chan_send (fs/fuse/dev.c:827)
[   68.865085][ T2143]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   68.865218][ T2143]  ? fuse_file_release (fs/fuse/file.c:360)
[   68.865356][ T2143]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   68.865488][ T2143]  __fput (fs/file_table.c:512)
[   68.865590][ T2143]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   68.865771][ T2143]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   68.865936][ T2143]  task_work_run (kernel/task_work.c:233)
[   68.866116][ T2143]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   68.866246][ T2143]  ? task_work_cancel (kernel/task_work.c:190)
[   68.866428][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.866561][ T2143]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   68.866739][ T2143]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   68.866871][ T2143]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   68.867016][ T2143]  ? exit_notify (kernel/exit.c:780)
[   68.867148][ T2143]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   68.867366][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.867500][ T2143]  do_group_exit (kernel/exit.c:1151)
[   68.867678][ T2143]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   68.867810][ T2143]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   68.867988][ T2143]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   68.868121][ T2143]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   68.868301][ T2143]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   68.868512][ T2143] RIP: 0033:0x7fd220f911b8
[   68.868652][ T2143] Code: Unable to access opcode bytes at 0x7fd220f9118e.

Code starting with the faulting instruction
===========================================
[   68.868826][ T2143] RSP: 002b:00007fffdc10dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   68.869028][ T2143] RAX: ffffffffffffffda RBX: 00007fd2210c1f88 RCX: 00007fd220f911b8
[   68.869281][ T2143] RDX: 00007fd220ecea48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   68.869530][ T2143] RBP: 00007fffdc10dc00 R08: 0000000000000000 R09: 0000000000000000
[   68.869777][ T2143] R10: 00007fffdc10da40 R11: 0000000000000246 R12: 0000000000000002
[   68.869979][ T2143] R13: 0000000000000000 R14: 00007fd2210c0680 R15: 00007fd2210c1fa0
| [   68.880442][ T2143] ------------[ cut here ]------------
| [   68.880617][ T2143] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2143
| [   68.880816][ T2143] Modules linked in:
| [   68.881284][ T2143] Tainted: [B]=BAD_PAGE, [W]=WARN
[   68.881417][ T2143] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   68.881631][ T2143] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   68.881770][ T2143] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   68.882338][ T2143] RSP: 0018:ffa00000041f79f8 EFLAGS: 00010046
[   68.882551][ T2143] RAX: 0000000000000220 RBX: ff11000004f70040 RCX: 0000000000000001
[   68.882749][ T2143] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   68.882994][ T2143] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   68.883238][ T2143] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dc00
[   68.883486][ T2143] R13: ff11000004f70068 R14: ff1100000103cac0 R15: ffd400000013dc00
[   68.883686][ T2143] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   68.883966][ T2143] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.884180][ T2143] CR2: 00007fd2210cd000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   68.884427][ T2143] PKRU: 55555554
[   68.884527][ T2143] Call Trace:
[   68.884628][ T2143]  <TASK>
[   68.884741][ T2143]  check_bytes_and_report.cold (mm/slub.c:1359)
[   68.884876][ T2143]  check_object (mm/slub.c:1515)
[   68.885052][ T2143]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   68.885183][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.885361][ T2143]  free_to_partial_list (mm/slub.c:5631)
[   68.885492][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.885667][ T2143]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.885800][ T2143]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   68.885974][ T2143]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   68.886105][ T2143]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   68.886284][ T2143]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.886418][ T2143]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.886593][ T2143]  fuse_chan_send (fs/fuse/dev.c:827)
[   68.886725][ T2143]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   68.886904][ T2143]  ? fuse_file_release (fs/fuse/file.c:360)
[   68.887035][ T2143]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   68.887210][ T2143]  __fput (fs/file_table.c:512)
[   68.887313][ T2143]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   68.887494][ T2143]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   68.887657][ T2143]  task_work_run (kernel/task_work.c:233)
[   68.887834][ T2143]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   68.887966][ T2143]  ? task_work_cancel (kernel/task_work.c:190)
[   68.888143][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.888277][ T2143]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   68.888453][ T2143]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   68.888583][ T2143]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   68.888729][ T2143]  ? exit_notify (kernel/exit.c:780)
[   68.888861][ T2143]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   68.889068][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.889200][ T2143]  do_group_exit (kernel/exit.c:1151)
[   68.889381][ T2143]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   68.889513][ T2143]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   68.889689][ T2143]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   68.889822][ T2143]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   68.889998][ T2143]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   68.890161][ T2143] RIP: 0033:0x7fd220f911b8
[   68.890350][ T2143] Code: Unable to access opcode bytes at 0x7fd220f9118e.

Code starting with the faulting instruction
===========================================
[   68.890521][ T2143] RSP: 002b:00007fffdc10dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   68.890767][ T2143] RAX: ffffffffffffffda RBX: 00007fd2210c1f88 RCX: 00007fd220f911b8
[   68.891013][ T2143] RDX: 00007fd220ecea48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   68.891261][ T2143] RBP: 00007fffdc10dc00 R08: 0000000000000000 R09: 0000000000000000
[   68.891459][ T2143] R10: 00007fffdc10da40 R11: 0000000000000246 R12: 0000000000000002
[   68.891702][ T2143] R13: 0000000000000000 R14: 00007fd2210c0680 R15: 00007fd2210c1fa0
| [   68.900972][ T2143] ------------[ cut here ]------------
| [   68.901146][ T2143] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2143
| [   68.901386][ T2143] Modules linked in:
| [   68.901794][ T2143] Tainted: [B]=BAD_PAGE, [W]=WARN
[   68.901970][ T2143] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   68.902134][ T2143] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   68.902326][ T2143] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   68.902839][ T2143] RSP: 0018:ffa00000041f79e8 EFLAGS: 00010046
[   68.903049][ T2143] RAX: 0000000000000220 RBX: ff1100000d82a260 RCX: 0000000000000001
[   68.903309][ T2143] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   68.903548][ T2143] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   68.903742][ T2143] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000360a80
[   68.903984][ T2143] R13: ff1100000d82a280 R14: ff1100000103c940 R15: ffd4000000360a80
[   68.904226][ T2143] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   68.904507][ T2143] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.904670][ T2143] CR2: 00007fd2210cd000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   68.904914][ T2143] PKRU: 55555554
[   68.905011][ T2143] Call Trace:
[   68.905157][ T2143]  <TASK>
[   68.905222][ T2143]  check_bytes_and_report.cold (mm/slub.c:1359)
[   68.905399][ T2143]  check_object (mm/slub.c:1507)
[   68.905529][ T2143]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   68.905703][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.905832][ T2143]  free_to_partial_list (mm/slub.c:5631)
[   68.906006][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.906134][ T2143]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.906315][ T2143]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   68.906446][ T2143]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   68.906618][ T2143]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   68.906746][ T2143]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.906923][ T2143]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.907052][ T2143]  fuse_chan_send (fs/fuse/dev.c:827)
[   68.907226][ T2143]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   68.907361][ T2143]  ? fuse_file_release (fs/fuse/file.c:360)
[   68.907534][ T2143]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   68.907663][ T2143]  __fput (fs/file_table.c:512)
[   68.907762][ T2143]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   68.907935][ T2143]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   68.908143][ T2143]  task_work_run (kernel/task_work.c:233)
[   68.908279][ T2143]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   68.908452][ T2143]  ? task_work_cancel (kernel/task_work.c:190)
[   68.908581][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.908757][ T2143]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   68.908886][ T2143]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   68.909059][ T2143]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   68.909155][ T2143]  ? exit_notify (kernel/exit.c:780)
[   68.909287][ T2143]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   68.909494][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.909666][ T2143]  do_group_exit (kernel/exit.c:1151)
[   68.909797][ T2143]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   68.909970][ T2143]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   68.910104][ T2143]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   68.910287][ T2143]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   68.910418][ T2143]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   68.910626][ T2143] RIP: 0033:0x7fd220f911b8
[   68.910762][ T2143] Code: Unable to access opcode bytes at 0x7fd220f9118e.

Code starting with the faulting instruction
===========================================
[   68.910978][ T2143] RSP: 002b:00007fffdc10dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   68.911222][ T2143] RAX: ffffffffffffffda RBX: 00007fd2210c1f88 RCX: 00007fd220f911b8
[   68.911420][ T2143] RDX: 00007fd220ecea48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   68.911660][ T2143] RBP: 00007fffdc10dc00 R08: 0000000000000000 R09: 0000000000000000
[   68.911855][ T2143] R10: 00007fffdc10da40 R11: 0000000000000246 R12: 0000000000000002
[   68.912141][ T2143] R13: 0000000000000000 R14: 00007fd2210c0680 R15: 00007fd2210c1fa0
| [   68.921562][ T2143] ------------[ cut here ]------------
| [   68.921689][ T2143] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2143
| [   68.921925][ T2143] Modules linked in:
| [   68.922342][ T2143] Tainted: [B]=BAD_PAGE, [W]=WARN
[   68.922524][ T2143] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   68.922739][ T2143] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   68.922874][ T2143] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   68.923440][ T2143] RSP: 0018:ffa00000041f79e8 EFLAGS: 00010046
[   68.923608][ T2143] RAX: 0000000000000220 RBX: ff1100000d82a0e0 RCX: 0000000000000001
[   68.923849][ T2143] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   68.924095][ T2143] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   68.924337][ T2143] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000360a80
[   68.924537][ T2143] R13: ff1100000d82a100 R14: ff1100000103c940 R15: ffd4000000360a80
[   68.924784][ T2143] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   68.925066][ T2143] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.925279][ T2143] CR2: 00007fd2210cd000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   68.925480][ T2143] PKRU: 55555554
[   68.925619][ T2143] Call Trace:
[   68.925717][ T2143]  <TASK>
[   68.925786][ T2143]  check_bytes_and_report.cold (mm/slub.c:1359)
[   68.925971][ T2143]  check_object (mm/slub.c:1507)
[   68.926102][ T2143]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   68.926276][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.926412][ T2143]  free_to_partial_list (mm/slub.c:5631)
[   68.926586][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.926714][ T2143]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.926903][ T2143]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   68.927031][ T2143]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   68.927206][ T2143]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   68.927337][ T2143]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.927515][ T2143]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.927645][ T2143]  fuse_chan_send (fs/fuse/dev.c:827)
[   68.927824][ T2143]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   68.927958][ T2143]  ? fuse_file_release (fs/fuse/file.c:360)
[   68.928133][ T2143]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   68.928265][ T2143]  __fput (fs/file_table.c:512)
[   68.928417][ T2143]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   68.928546][ T2143]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   68.928749][ T2143]  task_work_run (kernel/task_work.c:233)
[   68.928885][ T2143]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   68.929060][ T2143]  ? task_work_cancel (kernel/task_work.c:190)
[   68.929189][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.929380][ T2143]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   68.929509][ T2143]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   68.929683][ T2143]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   68.929786][ T2143]  ? exit_notify (kernel/exit.c:780)
[   68.929959][ T2143]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   68.930122][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.930310][ T2143]  do_group_exit (kernel/exit.c:1151)
[   68.930442][ T2143]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   68.930614][ T2143]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   68.930749][ T2143]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   68.930925][ T2143]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   68.931054][ T2143]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   68.931270][ T2143] RIP: 0033:0x7fd220f911b8
[   68.931454][ T2143] Code: Unable to access opcode bytes at 0x7fd220f9118e.

Code starting with the faulting instruction
===========================================
[   68.931621][ T2143] RSP: 002b:00007fffdc10dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   68.931871][ T2143] RAX: ffffffffffffffda RBX: 00007fd2210c1f88 RCX: 00007fd220f911b8
[   68.932117][ T2143] RDX: 00007fd220ecea48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   68.932320][ T2143] RBP: 00007fffdc10dc00 R08: 0000000000000000 R09: 0000000000000000
[   68.932560][ T2143] R10: 00007fffdc10da40 R11: 0000000000000246 R12: 0000000000000002
[   68.932811][ T2143] R13: 0000000000000000 R14: 00007fd2210c0680 R15: 00007fd2210c1fa0
| [   68.942256][ T2143] ------------[ cut here ]------------
| [   68.942434][ T2143] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2143
| [   68.942623][ T2143] Modules linked in:
| [   68.943077][ T2143] Tainted: [B]=BAD_PAGE, [W]=WARN
[   68.943212][ T2143] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   68.943442][ T2143] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   68.943578][ T2143] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   68.944142][ T2143] RSP: 0018:ffa00000041f79f8 EFLAGS: 00010046
[   68.944361][ T2143] RAX: 0000000000000220 RBX: ff110000094d29e0 RCX: 0000000000000001
[   68.944603][ T2143] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   68.944803][ T2143] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   68.945044][ T2143] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000253480
[   68.945296][ T2143] R13: ff110000094d29f8 R14: ff1100000103c940 R15: ffd4000000253480
[   68.945542][ T2143] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   68.945774][ T2143] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.945981][ T2143] CR2: 00007fd2210cd000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   68.946231][ T2143] PKRU: 55555554
[   68.946331][ T2143] Call Trace:
[   68.946471][ T2143]  <TASK>
[   68.946539][ T2143]  check_bytes_and_report.cold (mm/slub.c:1359)
[   68.946674][ T2143]  check_object (mm/slub.c:1515)
[   68.946850][ T2143]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   68.946979][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.947160][ T2143]  free_to_partial_list (mm/slub.c:5631)
[   68.947293][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.947469][ T2143]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.947605][ T2143]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   68.947777][ T2143]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   68.947906][ T2143]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   68.948090][ T2143]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.948220][ T2143]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.948396][ T2143]  fuse_chan_send (fs/fuse/dev.c:827)
[   68.948530][ T2143]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   68.948704][ T2143]  ? fuse_file_release (fs/fuse/file.c:360)
[   68.948838][ T2143]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   68.949018][ T2143]  __fput (fs/file_table.c:512)
[   68.949116][ T2143]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   68.949295][ T2143]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   68.949456][ T2143]  task_work_run (kernel/task_work.c:233)
[   68.949636][ T2143]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   68.949765][ T2143]  ? task_work_cancel (kernel/task_work.c:190)
[   68.949940][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.950076][ T2143]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   68.950249][ T2143]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   68.950382][ T2143]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   68.950534][ T2143]  ? exit_notify (kernel/exit.c:780)
[   68.950662][ T2143]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   68.950866][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.951000][ T2143]  do_group_exit (kernel/exit.c:1151)
[   68.951178][ T2143]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   68.951309][ T2143]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   68.951490][ T2143]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   68.951617][ T2143]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   68.951792][ T2143]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   68.951957][ T2143] RIP: 0033:0x7fd220f911b8
[   68.952138][ T2143] Code: Unable to access opcode bytes at 0x7fd220f9118e.

Code starting with the faulting instruction
===========================================
[   68.952361][ T2143] RSP: 002b:00007fffdc10dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   68.952568][ T2143] RAX: ffffffffffffffda RBX: 00007fd2210c1f88 RCX: 00007fd220f911b8
[   68.952806][ T2143] RDX: 00007fd220ecea48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   68.953053][ T2143] RBP: 00007fffdc10dc00 R08: 0000000000000000 R09: 0000000000000000
[   68.953296][ T2143] R10: 00007fffdc10da40 R11: 0000000000000246 R12: 0000000000000002
[   68.953500][ T2143] R13: 0000000000000000 R14: 00007fd2210c0680 R15: 00007fd2210c1fa0
| [   68.962975][ T2143] ------------[ cut here ]------------
| [   68.963104][ T2143] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2143
| [   68.963350][ T2143] Modules linked in:
| [   68.963753][ T2143] Tainted: [B]=BAD_PAGE, [W]=WARN
[   68.963935][ T2143] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   68.964100][ T2143] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   68.964291][ T2143] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   68.964856][ T2143] RSP: 0018:ffa00000041f79f8 EFLAGS: 00010046
[   68.965019][ T2143] RAX: 0000000000000220 RBX: ff11000004e72320 RCX: 0000000000000001
[   68.965278][ T2143] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   68.965520][ T2143] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   68.965719][ T2143] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000139c80
[   68.965962][ T2143] R13: ff11000004e72338 R14: ff1100000103c940 R15: ffd4000000139c80
[   68.966210][ T2143] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   68.966490][ T2143] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.966659][ T2143] CR2: 00007fd2210cd000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   68.966898][ T2143] PKRU: 55555554
[   68.967041][ T2143] Call Trace:
[   68.967143][ T2143]  <TASK>
[   68.967211][ T2143]  check_bytes_and_report.cold (mm/slub.c:1359)
[   68.967391][ T2143]  check_object (mm/slub.c:1515)
[   68.967523][ T2143]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   68.967704][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.967834][ T2143]  free_to_partial_list (mm/slub.c:5631)
[   68.968008][ T2143]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.968143][ T2143]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   68.968325][ T2143]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   68.968457][ T2143]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   68.968634][ T2143]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   68.968763][ T2143]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.968939][ T2143]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   68.969078][ T2143]  fuse_chan_send (fs/fuse/dev.c:827)
[   68.969259][ T2143]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   68.969388][ T2143]  ? fuse_file_release (fs/fuse/file.c:360)
[   68.969593][ T2143]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   68.969722][ T2143]  __fput (fs/file_table.c:512)
[   68.969863][ T2143]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   68.969992][ T2143]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   68.970208][ T2143]  task_work_run (kernel/task_work.c:233)
[   68.970338][ T2143]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   68.970510][ T2143]  ? task_work_cancel (kernel/task_work.c:190)
[   68.970644][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.970827][ T2143]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   68.970956][ T2143]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   68.971134][ T2143]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   68.971232][ T2143]  ? exit_notify (kernel/exit.c:780)
[   68.971411][ T2143]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   68.971580][ T2143]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   68.971755][ T2143]  do_group_exit (kernel/exit.c:1151)
[   68.971885][ T2143]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   68.972069][ T2143]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   68.972198][ T2143]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   68.972375][ T2143]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   68.972511][ T2143]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   68.972720][ T2143] RIP: 0033:0x7fd220f911b8
[   68.972854][ T2143] Code: Unable to access opcode bytes at 0x7fd220f9118e.

Code starting with the faulting instruction
===========================================
[   68.973072][ T2143] RSP: 002b:00007fffdc10dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   68.973323][ T2143] RAX: ffffffffffffffda RBX: 00007fd2210c1f88 RCX: 00007fd220f911b8
[   68.973523][ T2143] RDX: 00007fd220ecea48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   68.973765][ T2143] RBP: 00007fffdc10dc00 R08: 0000000000000000 R09: 0000000000000000
[   68.974012][ T2143] R10: 00007fffdc10da40 R11: 0000000000000246 R12: 0000000000000002
[   68.974257][ T2143] R13: 0000000000000000 R14: 00007fd2210c0680 R15: 00007fd2210c1fa0
| [   86.775705][ T2781] ------------[ cut here ]------------
| [   86.775841][ T2781] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2781
| [   86.776046][ T2781] Modules linked in:
| [   86.776433][ T2781] Tainted: [B]=BAD_PAGE, [W]=WARN
[   86.776569][ T2781] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   86.776737][ T2781] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   86.776881][ T2781] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   86.777363][ T2781] RSP: 0018:ffa0000004f579f8 EFLAGS: 00010046
[   86.777538][ T2781] RAX: 0000000000000220 RBX: ff11000008638e40 RCX: 0000000000000001
[   86.777744][ T2781] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   86.777953][ T2781] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   86.778155][ T2781] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000218e00
[   86.778362][ T2781] R13: ff11000008638e68 R14: ff1100000103cac0 R15: ffd4000000218e00
[   86.778573][ T2781] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   86.778814][ T2781] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.778989][ T2781] CR2: 00007f647cc48000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   86.779195][ T2781] PKRU: 55555554
[   86.779297][ T2781] Call Trace:
[   86.779399][ T2781]  <TASK>
[   86.779476][ T2781]  check_bytes_and_report.cold (mm/slub.c:1359)
[   86.779616][ T2781]  check_object (mm/slub.c:1515)
[   86.779752][ T2781]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   86.779886][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.780023][ T2781]  free_to_partial_list (mm/slub.c:5631)
[   86.780159][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.780295][ T2781]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.780433][ T2781]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   86.780568][ T2781]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   86.780704][ T2781]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   86.780838][ T2781]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.780975][ T2781]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.781108][ T2781]  fuse_chan_send (fs/fuse/dev.c:827)
[   86.781247][ T2781]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   86.781378][ T2781]  ? fuse_file_release (fs/fuse/file.c:360)
[   86.781516][ T2781]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   86.781649][ T2781]  __fput (fs/file_table.c:512)
[   86.781752][ T2781]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   86.781888][ T2781]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   86.782057][ T2781]  task_work_run (kernel/task_work.c:233)
[   86.782195][ T2781]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   86.782328][ T2781]  ? task_work_cancel (kernel/task_work.c:190)
[   86.782467][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.782601][ T2781]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   86.782735][ T2781]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   86.782871][ T2781]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   86.782972][ T2781]  ? exit_notify (kernel/exit.c:780)
[   86.783106][ T2781]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   86.783276][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.783412][ T2781]  do_group_exit (kernel/exit.c:1151)
[   86.783545][ T2781]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   86.783678][ T2781]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   86.783815][ T2781]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   86.783953][ T2781]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   86.784091][ T2781]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   86.784261][ T2781] RIP: 0033:0x7f647cb0c1b8
[   86.784409][ T2781] Code: Unable to access opcode bytes at 0x7f647cb0c18e.

Code starting with the faulting instruction
===========================================
[   86.784582][ T2781] RSP: 002b:00007ffd797fc5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   86.784786][ T2781] RAX: ffffffffffffffda RBX: 00007f647cc3cf88 RCX: 00007f647cb0c1b8
[   86.784987][ T2781] RDX: 00007f647ca49a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   86.785191][ T2781] RBP: 00007ffd797fc630 R08: 0000000000000000 R09: 0000000000000000
[   86.785392][ T2781] R10: 00007ffd797fc470 R11: 0000000000000246 R12: 0000000000000002
[   86.785596][ T2781] R13: 0000000000000000 R14: 00007f647cc3b680 R15: 00007f647cc3cfa0
| [   86.795481][ T2781] ------------[ cut here ]------------
| [   86.795658][ T2781] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2781
| [   86.795856][ T2781] Modules linked in:
| [   86.796318][ T2781] Tainted: [B]=BAD_PAGE, [W]=WARN
[   86.796457][ T2781] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   86.796669][ T2781] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   86.796810][ T2781] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   86.797376][ T2781] RSP: 0018:ffa0000004f579f8 EFLAGS: 00010046
[   86.797592][ T2781] RAX: 0000000000000220 RBX: ff11000008638f40 RCX: 0000000000000001
[   86.797793][ T2781] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   86.798038][ T2781] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   86.798286][ T2781] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000218e00
[   86.798538][ T2781] R13: ff11000008638f68 R14: ff1100000103cac0 R15: ffd4000000218e00
[   86.798739][ T2781] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   86.799021][ T2781] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.799236][ T2781] CR2: 00007f647cc48000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   86.799492][ T2781] PKRU: 55555554
[   86.799597][ T2781] Call Trace:
[   86.799703][ T2781]  <TASK>
[   86.799818][ T2781]  check_bytes_and_report.cold (mm/slub.c:1359)
[   86.799952][ T2781]  check_object (mm/slub.c:1515)
[   86.800131][ T2781]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   86.800262][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.800443][ T2781]  free_to_partial_list (mm/slub.c:5631)
[   86.800577][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.800753][ T2781]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.800886][ T2781]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   86.801059][ T2781]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   86.801189][ T2781]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   86.801366][ T2781]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.801503][ T2781]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.801677][ T2781]  fuse_chan_send (fs/fuse/dev.c:827)
[   86.801810][ T2781]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   86.801986][ T2781]  ? fuse_file_release (fs/fuse/file.c:360)
[   86.802117][ T2781]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   86.802295][ T2781]  __fput (fs/file_table.c:512)
[   86.802394][ T2781]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   86.802575][ T2781]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   86.802738][ T2781]  task_work_run (kernel/task_work.c:233)
[   86.802913][ T2781]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   86.803045][ T2781]  ? task_work_cancel (kernel/task_work.c:190)
[   86.803220][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.803352][ T2781]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   86.803532][ T2781]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   86.803661][ T2781]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   86.803804][ T2781]  ? exit_notify (kernel/exit.c:780)
[   86.803936][ T2781]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   86.804145][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.804275][ T2781]  do_group_exit (kernel/exit.c:1151)
[   86.804456][ T2781]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   86.804588][ T2781]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   86.804762][ T2781]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   86.804895][ T2781]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   86.805069][ T2781]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   86.805232][ T2781] RIP: 0033:0x7f647cb0c1b8
[   86.805421][ T2781] Code: Unable to access opcode bytes at 0x7f647cb0c18e.

Code starting with the faulting instruction
===========================================
[   86.805590][ T2781] RSP: 002b:00007ffd797fc5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   86.805837][ T2781] RAX: ffffffffffffffda RBX: 00007f647cc3cf88 RCX: 00007f647cb0c1b8
[   86.806083][ T2781] RDX: 00007f647ca49a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   86.806326][ T2781] RBP: 00007ffd797fc630 R08: 0000000000000000 R09: 0000000000000000
[   86.806530][ T2781] R10: 00007ffd797fc470 R11: 0000000000000246 R12: 0000000000000002
[   86.806773][ T2781] R13: 0000000000000000 R14: 00007f647cc3b680 R15: 00007f647cc3cfa0
| [   86.816457][ T2781] ------------[ cut here ]------------
| [   86.816628][ T2781] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2781
| [   86.816864][ T2781] Modules linked in:
| [   86.817278][ T2781] Tainted: [B]=BAD_PAGE, [W]=WARN
[   86.817412][ T2781] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   86.817621][ T2781] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   86.817804][ T2781] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   86.818316][ T2781] RSP: 0018:ffa0000004f579e8 EFLAGS: 00010046
[   86.818532][ T2781] RAX: 0000000000000220 RBX: ff11000005bd36e0 RCX: 0000000000000001
[   86.818772][ T2781] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   86.818967][ T2781] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   86.819211][ T2781] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000016f4c0
[   86.819455][ T2781] R13: ff11000005bd3700 R14: ff1100000103c940 R15: ffd400000016f4c0
[   86.819698][ T2781] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   86.819976][ T2781] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.820142][ T2781] CR2: 00007f647cc48000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   86.820383][ T2781] PKRU: 55555554
[   86.820486][ T2781] Call Trace:
[   86.820627][ T2781]  <TASK>
[   86.820694][ T2781]  check_bytes_and_report.cold (mm/slub.c:1359)
[   86.820825][ T2781]  check_object (mm/slub.c:1507)
[   86.821002][ T2781]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   86.821131][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.821306][ T2781]  free_to_partial_list (mm/slub.c:5631)
[   86.821441][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.821615][ T2781]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.821743][ T2781]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   86.821918][ T2781]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   86.822046][ T2781]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   86.822221][ T2781]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.822353][ T2781]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.822530][ T2781]  fuse_chan_send (fs/fuse/dev.c:827)
[   86.822658][ T2781]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   86.822833][ T2781]  ? fuse_file_release (fs/fuse/file.c:360)
[   86.822962][ T2781]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   86.823135][ T2781]  __fput (fs/file_table.c:512)
[   86.823232][ T2781]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   86.823410][ T2781]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   86.823575][ T2781]  task_work_run (kernel/task_work.c:233)
[   86.823750][ T2781]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   86.823880][ T2781]  ? task_work_cancel (kernel/task_work.c:190)
[   86.824056][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.824187][ T2781]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   86.824361][ T2781]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   86.824493][ T2781]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   86.824634][ T2781]  ? exit_notify (kernel/exit.c:780)
[   86.824769][ T2781]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   86.824975][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.825106][ T2781]  do_group_exit (kernel/exit.c:1151)
[   86.825283][ T2781]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   86.825416][ T2781]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   86.825592][ T2781]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   86.825722][ T2781]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   86.825899][ T2781]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   86.826105][ T2781] RIP: 0033:0x7f647cb0c1b8
[   86.826241][ T2781] Code: Unable to access opcode bytes at 0x7f647cb0c18e.

Code starting with the faulting instruction
===========================================
[   86.826459][ T2781] RSP: 002b:00007ffd797fc5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   86.826657][ T2781] RAX: ffffffffffffffda RBX: 00007f647cc3cf88 RCX: 00007f647cb0c1b8
[   86.826899][ T2781] RDX: 00007f647ca49a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   86.827143][ T2781] RBP: 00007ffd797fc630 R08: 0000000000000000 R09: 0000000000000000
[   86.827383][ T2781] R10: 00007ffd797fc470 R11: 0000000000000246 R12: 0000000000000002
[   86.827579][ T2781] R13: 0000000000000000 R14: 00007f647cc3b680 R15: 00007f647cc3cfa0
| [   86.837161][ T2781] ------------[ cut here ]------------
| [   86.837288][ T2781] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2781
| [   86.837526][ T2781] Modules linked in:
| [   86.837936][ T2781] Tainted: [B]=BAD_PAGE, [W]=WARN
[   86.838113][ T2781] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   86.838276][ T2781] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   86.838463][ T2781] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   86.839023][ T2781] RSP: 0018:ffa0000004f579e8 EFLAGS: 00010046
[   86.839200][ T2781] RAX: 0000000000000220 RBX: ff11000005bd30e0 RCX: 0000000000000001
[   86.839445][ T2781] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   86.839687][ T2781] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   86.839884][ T2781] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000016f4c0
[   86.840124][ T2781] R13: ff11000005bd3100 R14: ff1100000103c940 R15: ffd400000016f4c0
[   86.840367][ T2781] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   86.840644][ T2781] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.840809][ T2781] CR2: 00007f647cc48000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   86.841049][ T2781] PKRU: 55555554
[   86.841190][ T2781] Call Trace:
[   86.841288][ T2781]  <TASK>
[   86.841353][ T2781]  check_bytes_and_report.cold (mm/slub.c:1359)
[   86.841530][ T2781]  check_object (mm/slub.c:1507)
[   86.841660][ T2781]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   86.841835][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.841964][ T2781]  free_to_partial_list (mm/slub.c:5631)
[   86.842136][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.842267][ T2781]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.842444][ T2781]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   86.842572][ T2781]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   86.842745][ T2781]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   86.842877][ T2781]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.843050][ T2781]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.843180][ T2781]  fuse_chan_send (fs/fuse/dev.c:827)
[   86.843352][ T2781]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   86.843485][ T2781]  ? fuse_file_release (fs/fuse/file.c:360)
[   86.843659][ T2781]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   86.843788][ T2781]  __fput (fs/file_table.c:512)
[   86.843929][ T2781]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   86.844061][ T2781]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   86.844269][ T2781]  task_work_run (kernel/task_work.c:233)
[   86.844397][ T2781]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   86.844574][ T2781]  ? task_work_cancel (kernel/task_work.c:190)
[   86.844704][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.844877][ T2781]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   86.845006][ T2781]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   86.845181][ T2781]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   86.845279][ T2781]  ? exit_notify (kernel/exit.c:780)
[   86.845456][ T2781]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   86.845617][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.845790][ T2781]  do_group_exit (kernel/exit.c:1151)
[   86.845920][ T2781]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   86.846095][ T2781]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   86.846224][ T2781]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   86.846401][ T2781]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   86.846535][ T2781]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   86.846739][ T2781] RIP: 0033:0x7f647cb0c1b8
[   86.846874][ T2781] Code: Unable to access opcode bytes at 0x7f647cb0c18e.

Code starting with the faulting instruction
===========================================
[   86.847094][ T2781] RSP: 002b:00007ffd797fc5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   86.847334][ T2781] RAX: ffffffffffffffda RBX: 00007f647cc3cf88 RCX: 00007f647cb0c1b8
[   86.847534][ T2781] RDX: 00007f647ca49a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   86.847775][ T2781] RBP: 00007ffd797fc630 R08: 0000000000000000 R09: 0000000000000000
[   86.848017][ T2781] R10: 00007ffd797fc470 R11: 0000000000000246 R12: 0000000000000002
[   86.848256][ T2781] R13: 0000000000000000 R14: 00007f647cc3b680 R15: 00007f647cc3cfa0
| [   86.857312][ T2781] ------------[ cut here ]------------
| [   86.857487][ T2781] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2781
| [   86.857723][ T2781] Modules linked in:
| [   86.858131][ T2781] Tainted: [B]=BAD_PAGE, [W]=WARN
[   86.858261][ T2781] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   86.858474][ T2781] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   86.858656][ T2781] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   86.859167][ T2781] RSP: 0018:ffa0000004f579f8 EFLAGS: 00010046
[   86.859375][ T2781] RAX: 0000000000000220 RBX: ff110000056d0320 RCX: 0000000000000001
[   86.859618][ T2781] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   86.859813][ T2781] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   86.860052][ T2781] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000015b400
[   86.860294][ T2781] R13: ff110000056d0338 R14: ff1100000103c940 R15: ffd400000015b400
[   86.860539][ T2781] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   86.860815][ T2781] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.860981][ T2781] CR2: 00007f647cc48000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   86.861225][ T2781] PKRU: 55555554
[   86.861321][ T2781] Call Trace:
[   86.861468][ T2781]  <TASK>
[   86.861540][ T2781]  check_bytes_and_report.cold (mm/slub.c:1359)
[   86.861670][ T2781]  check_object (mm/slub.c:1515)
[   86.861844][ T2781]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   86.861972][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.862146][ T2781]  free_to_partial_list (mm/slub.c:5631)
[   86.862275][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.862449][ T2781]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.862577][ T2781]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   86.862748][ T2781]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   86.862876][ T2781]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   86.863049][ T2781]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.863178][ T2781]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.863351][ T2781]  fuse_chan_send (fs/fuse/dev.c:827)
[   86.863500][ T2781]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   86.863671][ T2781]  ? fuse_file_release (fs/fuse/file.c:360)
[   86.863798][ T2781]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   86.863972][ T2781]  __fput (fs/file_table.c:512)
[   86.864069][ T2781]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   86.864241][ T2781]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   86.864408][ T2781]  task_work_run (kernel/task_work.c:233)
[   86.864582][ T2781]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   86.864711][ T2781]  ? task_work_cancel (kernel/task_work.c:190)
[   86.864884][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.865013][ T2781]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   86.865188][ T2781]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   86.865318][ T2781]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   86.865461][ T2781]  ? exit_notify (kernel/exit.c:780)
[   86.865591][ T2781]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   86.865797][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.865928][ T2781]  do_group_exit (kernel/exit.c:1151)
[   86.866101][ T2781]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   86.866229][ T2781]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   86.866406][ T2781]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   86.866535][ T2781]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   86.866706][ T2781]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   86.866913][ T2781] RIP: 0033:0x7f647cb0c1b8
[   86.867048][ T2781] Code: Unable to access opcode bytes at 0x7f647cb0c18e.

Code starting with the faulting instruction
===========================================
[   86.867261][ T2781] RSP: 002b:00007ffd797fc5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   86.867458][ T2781] RAX: ffffffffffffffda RBX: 00007f647cc3cf88 RCX: 00007f647cb0c1b8
[   86.867697][ T2781] RDX: 00007f647ca49a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   86.867938][ T2781] RBP: 00007ffd797fc630 R08: 0000000000000000 R09: 0000000000000000
[   86.868175][ T2781] R10: 00007ffd797fc470 R11: 0000000000000246 R12: 0000000000000002
[   86.868371][ T2781] R13: 0000000000000000 R14: 00007f647cc3b680 R15: 00007f647cc3cfa0
| [   86.878629][ T2781] ------------[ cut here ]------------
| [   86.878798][ T2781] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/2781
| [   86.878992][ T2781] Modules linked in:
| [   86.879442][ T2781] Tainted: [B]=BAD_PAGE, [W]=WARN
[   86.879600][ T2781] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   86.879809][ T2781] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   86.879944][ T2781] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   86.880502][ T2781] RSP: 0018:ffa0000004f579f8 EFLAGS: 00010046
[   86.880709][ T2781] RAX: 0000000000000220 RBX: ff11000005869320 RCX: 0000000000000001
[   86.880950][ T2781] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   86.881144][ T2781] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   86.881385][ T2781] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000161a40
[   86.881627][ T2781] R13: ff11000005869338 R14: ff1100000103c940 R15: ffd4000000161a40
[   86.881869][ T2781] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   86.882098][ T2781] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.882307][ T2781] CR2: 00007f647cc48000 CR3: 000000003333c006 CR4: 0000000000771ef0
[   86.882550][ T2781] PKRU: 55555554
[   86.882649][ T2781] Call Trace:
[   86.882791][ T2781]  <TASK>
[   86.882856][ T2781]  check_bytes_and_report.cold (mm/slub.c:1359)
[   86.882986][ T2781]  check_object (mm/slub.c:1515)
[   86.883161][ T2781]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   86.883290][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.883466][ T2781]  free_to_partial_list (mm/slub.c:5631)
[   86.883596][ T2781]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.883769][ T2781]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   86.883900][ T2781]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   86.884073][ T2781]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   86.884202][ T2781]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   86.884373][ T2781]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.884509][ T2781]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   86.884682][ T2781]  fuse_chan_send (fs/fuse/dev.c:827)
[   86.884810][ T2781]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   86.884981][ T2781]  ? fuse_file_release (fs/fuse/file.c:360)
[   86.885111][ T2781]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   86.885282][ T2781]  __fput (fs/file_table.c:512)
[   86.885379][ T2781]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   86.885556][ T2781]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   86.885715][ T2781]  task_work_run (kernel/task_work.c:233)
[   86.885888][ T2781]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   86.886017][ T2781]  ? task_work_cancel (kernel/task_work.c:190)
[   86.886189][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.886317][ T2781]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   86.886492][ T2781]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   86.886620][ T2781]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   86.886761][ T2781]  ? exit_notify (kernel/exit.c:780)
[   86.886890][ T2781]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   86.887095][ T2781]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   86.887224][ T2781]  do_group_exit (kernel/exit.c:1151)
[   86.887396][ T2781]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   86.887532][ T2781]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   86.887705][ T2781]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   86.887834][ T2781]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   86.888007][ T2781]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   86.888169][ T2781] RIP: 0033:0x7f647cb0c1b8
[   86.888349][ T2781] Code: Unable to access opcode bytes at 0x7f647cb0c18e.

Code starting with the faulting instruction
===========================================
[   86.888566][ T2781] RSP: 002b:00007ffd797fc5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   86.888762][ T2781] RAX: ffffffffffffffda RBX: 00007f647cc3cf88 RCX: 00007f647cb0c1b8
[   86.889002][ T2781] RDX: 00007f647ca49a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   86.889242][ T2781] RBP: 00007ffd797fc630 R08: 0000000000000000 R09: 0000000000000000
[   86.889485][ T2781] R10: 00007ffd797fc470 R11: 0000000000000246 R12: 0000000000000002
[   86.889680][ T2781] R13: 0000000000000000 R14: 00007f647cc3b680 R15: 00007f647cc3cfa0
| [   98.628813][ T3387] ------------[ cut here ]------------
| [   98.628937][ T3387] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/3387
| [   98.629124][ T3387] Modules linked in:
| [   98.629479][ T3387] Tainted: [B]=BAD_PAGE, [W]=WARN
[   98.629610][ T3387] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   98.629772][ T3387] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   98.629906][ T3387] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   98.630353][ T3387] RSP: 0018:ffa0000005a87bd0 EFLAGS: 00010046
[   98.630521][ T3387] RAX: 0000000000000220 RBX: ff11000004f74560 RCX: 0000000000000001
[   98.630709][ T3387] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   98.630898][ T3387] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   98.631084][ T3387] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dd00
[   98.631314][ T3387] R13: ff11000004f74580 R14: ff1100000103c940 R15: ffd400000013dd00
[   98.631546][ T3387] FS:  00007fb5eff04cc0(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   98.631767][ T3387] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.631969][ T3387] CR2: 00007fb5f0136af0 CR3: 000000001003e001 CR4: 0000000000771ef0
[   98.632198][ T3387] PKRU: 55555554
[   98.632293][ T3387] Call Trace:
[   98.632428][ T3387]  <TASK>
[   98.632493][ T3387]  check_bytes_and_report.cold (mm/slub.c:1359)
[   98.632625][ T3387]  check_object (mm/slub.c:1507)
[   98.632794][ T3387]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   98.632919][ T3387]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   98.633083][ T3387]  free_to_partial_list (mm/slub.c:5631)
[   98.633209][ T3387]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   98.633373][ T3387]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   98.633496][ T3387]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   98.633664][ T3387]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   98.633790][ T3387]  __kmalloc_node_track_caller_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5413 mm/slub.c:5545)
[   98.633984][ T3387]  ? strndup_user (mm/util.c:280)
[   98.634109][ T3387]  memdup_user (mm/util.c:221 (discriminator 9))
[   98.634242][ T3387]  strndup_user (mm/util.c:280)
[   98.634334][ T3387]  __x64_sys_mount (fs/namespace.c:4076 (discriminator 1) fs/namespace.c:4382 (discriminator 1) fs/namespace.c:4374 (discriminator 1) fs/namespace.c:4374 (discriminator 1))
[   98.634499][ T3387]  ? copy_mnt_ns (fs/namespace.c:4330 (discriminator 1))
[   98.634625][ T3387]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   98.634790][ T3387]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[   98.634918][ T3387]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   98.635084][ T3387]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   98.635207][ T3387]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   98.635372][ T3387]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   98.635530][ T3387] RIP: 0033:0x7fb5f01f15be
[   98.635704][ T3387] Code: 48 8b 0d 3d 78 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 0a 78 0f 00 f7 d8 64 89 01 48
All code
========
   0:	48 8b 0d 3d 78 0f 00 	mov    0xf783d(%rip),%rcx        # 0xf7844
   7:	f7 d8                	neg    %eax
   9:	64 89 01             	mov    %eax,%fs:(%rcx)
   c:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  10:	c3                   	ret
  11:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  18:	00 00 00 
  1b:	90                   	nop
  1c:	f3 0f 1e fa          	endbr64
  20:	49 89 ca             	mov    %rcx,%r10
  23:	b8 a5 00 00 00       	mov    $0xa5,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf7844
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf781a
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[   98.636238][ T3387] RSP: 002b:00007ffda84c6dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   98.636428][ T3387] RAX: ffffffffffffffda RBX: 00007ffda84cb831 RCX: 00007fb5f01f15be
[   98.636663][ T3387] RDX: 0000000000480d89 RSI: 0000000000480d84 RDI: 00007ffda84cb831
[   98.636853][ T3387] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[   98.637083][ T3387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.637271][ T3387] R13: 00007ffda84cb82b R14: 0000000000000000 R15: 00000000004a0138
| [   98.646676][ T3387] ------------[ cut here ]------------
| [   98.646838][ T3387] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/3387
| [   98.647059][ T3387] Modules linked in:
| [   98.647449][ T3387] Tainted: [B]=BAD_PAGE, [W]=WARN
[   98.647577][ T3387] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   98.647773][ T3387] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   98.647947][ T3387] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   98.648427][ T3387] RSP: 0018:ffa0000005a87bd0 EFLAGS: 00010046
[   98.648630][ T3387] RAX: 0000000000000220 RBX: ff11000004f746e0 RCX: 0000000000000001
[   98.648857][ T3387] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[   98.649043][ T3387] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[   98.649268][ T3387] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dd00
[   98.649494][ T3387] R13: ff11000004f74700 R14: ff1100000103c940 R15: ffd400000013dd00
[   98.649727][ T3387] FS:  00007fb5eff04cc0(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[   98.649984][ T3387] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   98.650139][ T3387] CR2: 00007fb5f0136af0 CR3: 000000001003e001 CR4: 0000000000771ef0
[   98.650366][ T3387] PKRU: 55555554
[   98.650458][ T3387] Call Trace:
[   98.650597][ T3387]  <TASK>
[   98.650661][ T3387]  check_bytes_and_report.cold (mm/slub.c:1359)
[   98.650786][ T3387]  check_object (mm/slub.c:1507)
[   98.650949][ T3387]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   98.651071][ T3387]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   98.651234][ T3387]  free_to_partial_list (mm/slub.c:5631)
[   98.651356][ T3387]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   98.651523][ T3387]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   98.651643][ T3387]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   98.651806][ T3387]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   98.651929][ T3387]  __kmalloc_node_track_caller_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5413 mm/slub.c:5545)
[   98.652119][ T3387]  ? strndup_user (mm/util.c:280)
[   98.652281][ T3387]  memdup_user (mm/util.c:221 (discriminator 9))
[   98.652372][ T3387]  strndup_user (mm/util.c:280)
[   98.652464][ T3387]  __x64_sys_mount (fs/namespace.c:4076 (discriminator 1) fs/namespace.c:4382 (discriminator 1) fs/namespace.c:4374 (discriminator 1) fs/namespace.c:4374 (discriminator 1))
[   98.652630][ T3387]  ? copy_mnt_ns (fs/namespace.c:4330 (discriminator 1))
[   98.652750][ T3387]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   98.652900][   T68] bond0: (slave eth1): link status definitely down, disabling slave
[   98.652916][ T3387]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[   98.653215][ T3387]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   98.653374][ T3387]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   98.653495][ T3387]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   98.653662][ T3387]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   98.653813][ T3387] RIP: 0033:0x7fb5f01f15be
[   98.653983][ T3387] Code: 48 8b 0d 3d 78 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 0a 78 0f 00 f7 d8 64 89 01 48
All code
========
   0:	48 8b 0d 3d 78 0f 00 	mov    0xf783d(%rip),%rcx        # 0xf7844
   7:	f7 d8                	neg    %eax
   9:	64 89 01             	mov    %eax,%fs:(%rcx)
   c:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  10:	c3                   	ret
  11:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  18:	00 00 00 
  1b:	90                   	nop
  1c:	f3 0f 1e fa          	endbr64
  20:	49 89 ca             	mov    %rcx,%r10
  23:	b8 a5 00 00 00       	mov    $0xa5,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf7844
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf781a
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[   98.654503][ T3387] RSP: 002b:00007ffda84c6dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   98.654693][ T3387] RAX: ffffffffffffffda RBX: 00007ffda84cb831 RCX: 00007fb5f01f15be
[   98.654920][ T3387] RDX: 0000000000480d89 RSI: 0000000000480d84 RDI: 00007ffda84cb831
[   98.655146][ T3387] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[   98.655371][ T3387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.655558][ T3387] R13: 00007ffda84cb82b R14: 0000000000000000 R15: 00000000004a0138
| [  102.959103][ T3507] ------------[ cut here ]------------
| [  102.959237][ T3507] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: date/3507
| [  102.959439][ T3507] Modules linked in:
| [  102.959819][ T3507] Tainted: [B]=BAD_PAGE, [W]=WARN
[  102.959951][ T3507] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  102.960120][ T3507] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  102.960262][ T3507] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  102.960742][ T3507] RSP: 0018:ffa0000005b479f8 EFLAGS: 00010046
[  102.960910][ T3507] RAX: 0000000000000220 RBX: ff11000004f70940 RCX: 0000000000000001
[  102.961110][ T3507] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  102.961313][ T3507] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  102.961571][ T3507] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dc00
[  102.961772][ T3507] R13: ff11000004f70968 R14: ff1100000103cac0 R15: ffd400000013dc00
[  102.961981][ T3507] FS:  0000000000000000(0000) GS:ff110000a452e000(0000) knlGS:0000000000000000
[  102.962266][ T3507] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.962480][ T3507] CR2: 00007fee1f853000 CR3: 000000003333c003 CR4: 0000000000771ef0
[  102.962689][ T3507] PKRU: 55555554
[  102.962835][ T3507] Call Trace:
[  102.962935][ T3507]  <TASK>
[  102.963004][ T3507]  check_bytes_and_report.cold (mm/slub.c:1359)
[  102.963185][ T3507]  check_object (mm/slub.c:1515)
[  102.963319][ T3507]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  102.963496][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  102.963631][ T3507]  free_to_partial_list (mm/slub.c:5631)
[  102.963808][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  102.963938][ T3507]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  102.964114][ T3507]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  102.964245][ T3507]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  102.964420][ T3507]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  102.964556][ T3507]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  102.964736][ T3507]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  102.964868][ T3507]  fuse_chan_send (fs/fuse/dev.c:827)
[  102.965046][ T3507]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  102.965180][ T3507]  ? fuse_file_release (fs/fuse/file.c:360)
[  102.965355][ T3507]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  102.965488][ T3507]  __fput (fs/file_table.c:512)
[  102.965637][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  102.965770][ T3507]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  102.965981][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  102.966115][ T3507]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  102.966292][ T3507]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:220 (discriminator 1) kernel/locking/spinlock.c:229 (discriminator 1))
[  102.966423][ T3507]  task_work_run (kernel/task_work.c:233)
[  102.966607][ T3507]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  102.966738][ T3507]  ? task_work_cancel (kernel/task_work.c:190)
[  102.966916][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  102.967051][ T3507]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  102.967229][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  102.967359][ T3507]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  102.967503][ T3507]  ? exit_notify (kernel/exit.c:780)
[  102.967637][ T3507]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  102.967844][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  102.967977][ T3507]  do_group_exit (kernel/exit.c:1151)
[  102.968156][ T3507]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  102.968287][ T3507]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  102.968462][ T3507]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  102.968597][ T3507]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  102.968772][ T3507]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  102.968978][ T3507] RIP: 0033:0x7fee1f7171b8
[  102.969118][ T3507] Code: Unable to access opcode bytes at 0x7fee1f71718e.

Code starting with the faulting instruction
===========================================
[  102.969336][ T3507] RSP: 002b:00007ffcfde8b528 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  102.969537][ T3507] RAX: ffffffffffffffda RBX: 00007fee1f847f88 RCX: 00007fee1f7171b8
[  102.969788][ T3507] RDX: 00007fee1f654a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  102.970032][ T3507] RBP: 00007ffcfde8b580 R08: 0000000000000000 R09: 0000000000001010
[  102.970299][ T3507] R10: 00007ffcfde8b3c0 R11: 0000000000000246 R12: 0000000000000002
[  102.970504][ T3507] R13: 0000000000000000 R14: 00007fee1f846680 R15: 00007fee1f847fa0
| [  102.981432][ T3507] ------------[ cut here ]------------
| [  102.981609][ T3507] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: date/3507
| [  102.981804][ T3507] Modules linked in:
| [  102.982265][ T3507] Tainted: [B]=BAD_PAGE, [W]=WARN
[  102.982398][ T3507] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  102.982614][ T3507] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  102.982751][ T3507] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  102.983264][ T3507] RSP: 0018:ffa0000005b479f8 EFLAGS: 00010046
[  102.983476][ T3507] RAX: 0000000000000220 RBX: ff11000004f70340 RCX: 0000000000000001
[  102.983679][ T3507] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  102.983921][ T3507] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  102.984163][ T3507] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dc00
[  102.984408][ T3507] R13: ff11000004f70368 R14: ff1100000103cac0 R15: ffd400000013dc00
[  102.984612][ T3507] FS:  0000000000000000(0000) GS:ff110000a452e000(0000) knlGS:0000000000000000
[  102.984889][ T3507] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.985100][ T3507] CR2: 00007fee1f853000 CR3: 000000003333c003 CR4: 0000000000771ef0
[  102.985346][ T3507] PKRU: 55555554
[  102.985445][ T3507] Call Trace:
[  102.985551][ T3507]  <TASK>
[  102.985663][ T3507]  check_bytes_and_report.cold (mm/slub.c:1359)
[  102.985795][ T3507]  check_object (mm/slub.c:1515)
[  102.985972][ T3507]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  102.986102][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  102.986277][ T3507]  free_to_partial_list (mm/slub.c:5631)
[  102.986407][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  102.986586][ T3507]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  102.986718][ T3507]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  102.986848][ T3507]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  102.986976][ T3507]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  102.987154][ T3507]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  102.987291][ T3507]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  102.987466][ T3507]  fuse_chan_send (fs/fuse/dev.c:827)
[  102.987601][ T3507]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  102.987776][ T3507]  ? fuse_file_release (fs/fuse/file.c:360)
[  102.987908][ T3507]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  102.988083][ T3507]  __fput (fs/file_table.c:512)
[  102.988181][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  102.988355][ T3507]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  102.988518][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  102.988696][ T3507]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  102.988826][ T3507]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:220 (discriminator 1) kernel/locking/spinlock.c:229 (discriminator 1))
[  102.989002][ T3507]  task_work_run (kernel/task_work.c:233)
[  102.989134][ T3507]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  102.989308][ T3507]  ? task_work_cancel (kernel/task_work.c:190)
[  102.989439][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  102.989619][ T3507]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  102.989751][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  102.989925][ T3507]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  102.990025][ T3507]  ? exit_notify (kernel/exit.c:780)
[  102.990201][ T3507]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  102.990365][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  102.990540][ T3507]  do_group_exit (kernel/exit.c:1151)
[  102.990676][ T3507]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  102.990850][ T3507]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  102.990980][ T3507]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  102.991158][ T3507]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  102.991289][ T3507]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  102.991494][ T3507] RIP: 0033:0x7fee1f7171b8
[  102.991633][ T3507] Code: Unable to access opcode bytes at 0x7fee1f71718e.

Code starting with the faulting instruction
===========================================
[  102.991848][ T3507] RSP: 002b:00007ffcfde8b528 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  102.992090][ T3507] RAX: ffffffffffffffda RBX: 00007fee1f847f88 RCX: 00007fee1f7171b8
[  102.992291][ T3507] RDX: 00007fee1f654a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  102.992537][ T3507] RBP: 00007ffcfde8b580 R08: 0000000000000000 R09: 0000000000001010
[  102.992782][ T3507] R10: 00007ffcfde8b3c0 R11: 0000000000000246 R12: 0000000000000002
[  102.993025][ T3507] R13: 0000000000000000 R14: 00007fee1f846680 R15: 00007fee1f847fa0
| [  103.002603][ T3507] ------------[ cut here ]------------
| [  103.002731][ T3507] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: date/3507
| [  103.002970][ T3507] Modules linked in:
| [  103.003374][ T3507] Tainted: [B]=BAD_PAGE, [W]=WARN
[  103.003553][ T3507] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  103.003717][ T3507] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  103.003900][ T3507] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  103.004493][ T3507] RSP: 0018:ffa0000005b479f8 EFLAGS: 00010046
[  103.004662][ T3507] RAX: 0000000000000220 RBX: ff110000055ac860 RCX: 0000000000000001
[  103.004913][ T3507] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  103.005153][ T3507] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  103.005348][ T3507] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000156b00
[  103.005598][ T3507] R13: ff110000055ac878 R14: ff1100000103c940 R15: ffd4000000156b00
[  103.005842][ T3507] FS:  0000000000000000(0000) GS:ff110000a452e000(0000) knlGS:0000000000000000
[  103.006122][ T3507] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.006286][ T3507] CR2: 00007fee1f853000 CR3: 000000003333c003 CR4: 0000000000771ef0
[  103.006531][ T3507] PKRU: 55555554
[  103.006677][ T3507] Call Trace:
[  103.006773][ T3507]  <TASK>
[  103.006845][ T3507]  check_bytes_and_report.cold (mm/slub.c:1359)
[  103.007020][ T3507]  check_object (mm/slub.c:1515)
[  103.007150][ T3507]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  103.007323][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  103.007458][ T3507]  free_to_partial_list (mm/slub.c:5631)
[  103.007641][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  103.007770][ T3507]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  103.007951][ T3507]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  103.008081][ T3507]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  103.008255][ T3507]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  103.008390][ T3507]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  103.008568][ T3507]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  103.008697][ T3507]  fuse_chan_send (fs/fuse/dev.c:827)
[  103.008832][ T3507]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  103.008963][ T3507]  ? fuse_file_release (fs/fuse/file.c:360)
[  103.009142][ T3507]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  103.009277][ T3507]  __fput (fs/file_table.c:512)
[  103.009419][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  103.009550][ T3507]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  103.009761][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  103.009890][ T3507]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  103.010063][ T3507]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:220 (discriminator 1) kernel/locking/spinlock.c:229 (discriminator 1))
[  103.010210][ T3507]  task_work_run (kernel/task_work.c:233)
[  103.010385][ T3507]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  103.010513][ T3507]  ? task_work_cancel (kernel/task_work.c:190)
[  103.010695][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  103.010824][ T3507]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  103.010998][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  103.011126][ T3507]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  103.011273][ T3507]  ? exit_notify (kernel/exit.c:780)
[  103.011402][ T3507]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  103.011614][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  103.011751][ T3507]  do_group_exit (kernel/exit.c:1151)
[  103.011925][ T3507]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  103.012055][ T3507]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  103.012236][ T3507]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  103.012364][ T3507]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  103.012539][ T3507]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  103.012712][ T3507] RIP: 0033:0x7fee1f7171b8
[  103.012894][ T3507] Code: Unable to access opcode bytes at 0x7fee1f71718e.

Code starting with the faulting instruction
===========================================
[  103.013069][ T3507] RSP: 002b:00007ffcfde8b528 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  103.013323][ T3507] RAX: ffffffffffffffda RBX: 00007fee1f847f88 RCX: 00007fee1f7171b8
[  103.013566][ T3507] RDX: 00007fee1f654a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  103.013814][ T3507] RBP: 00007ffcfde8b580 R08: 0000000000000000 R09: 0000000000001010
[  103.014012][ T3507] R10: 00007ffcfde8b3c0 R11: 0000000000000246 R12: 0000000000000002
[  103.014262][ T3507] R13: 0000000000000000 R14: 00007fee1f846680 R15: 00007fee1f847fa0
| [  103.026427][ T3507] ------------[ cut here ]------------
| [  103.026558][ T3507] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: date/3507
| [  103.026758][ T3507] Modules linked in:
| [  103.027123][ T3507] Tainted: [B]=BAD_PAGE, [W]=WARN
[  103.027255][ T3507] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  103.027418][ T3507] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  103.027562][ T3507] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  103.028034][ T3507] RSP: 0018:ffa0000005b479f8 EFLAGS: 00010046
[  103.028199][ T3507] RAX: 0000000000000220 RBX: ff110000055acc20 RCX: 0000000000000001
[  103.028399][ T3507] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  103.028599][ T3507] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  103.028799][ T3507] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000156b00
[  103.028993][ T3507] R13: ff110000055acc38 R14: ff1100000103c940 R15: ffd4000000156b00
[  103.029196][ T3507] FS:  0000000000000000(0000) GS:ff110000a452e000(0000) knlGS:0000000000000000
[  103.029422][ T3507] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.029595][ T3507] CR2: 00007fee1f853000 CR3: 000000003333c003 CR4: 0000000000771ef0
[  103.029789][ T3507] PKRU: 55555554
[  103.029886][ T3507] Call Trace:
[  103.029983][ T3507]  <TASK>
[  103.030054][ T3507]  check_bytes_and_report.cold (mm/slub.c:1359)
[  103.030186][ T3507]  check_object (mm/slub.c:1515)
[  103.030320][ T3507]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  103.030454][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  103.030585][ T3507]  free_to_partial_list (mm/slub.c:5631)
[  103.030717][ T3507]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  103.030853][ T3507]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  103.030983][ T3507]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  103.031113][ T3507]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  103.031253][ T3507]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  103.031382][ T3507]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  103.031512][ T3507]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  103.031643][ T3507]  fuse_chan_send (fs/fuse/dev.c:827)
[  103.031781][ T3507]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  103.031910][ T3507]  ? fuse_file_release (fs/fuse/file.c:360)
[  103.032039][ T3507]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  103.032174][ T3507]  __fput (fs/file_table.c:512)
[  103.032276][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  103.032407][ T3507]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  103.032575][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  103.032704][ T3507]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  103.032839][ T3507]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:220 (discriminator 1) kernel/locking/spinlock.c:229 (discriminator 1))
[  103.032973][ T3507]  task_work_run (kernel/task_work.c:233)
[  103.033104][ T3507]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  103.033237][ T3507]  ? task_work_cancel (kernel/task_work.c:190)
[  103.033375][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  103.033503][ T3507]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  103.033634][ T3507]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  103.033768][ T3507]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  103.033866][ T3507]  ? exit_notify (kernel/exit.c:780)
[  103.033999][ T3507]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  103.034165][ T3507]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  103.034298][ T3507]  do_group_exit (kernel/exit.c:1151)
[  103.034431][ T3507]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  103.034568][ T3507]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  103.034697][ T3507]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  103.034826][ T3507]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  103.034958][ T3507]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  103.035125][ T3507] RIP: 0033:0x7fee1f7171b8
[  103.035260][ T3507] Code: Unable to access opcode bytes at 0x7fee1f71718e.

Code starting with the faulting instruction
===========================================
[  103.035435][ T3507] RSP: 002b:00007ffcfde8b528 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  103.035638][ T3507] RAX: ffffffffffffffda RBX: 00007fee1f847f88 RCX: 00007fee1f7171b8
[  103.035840][ T3507] RDX: 00007fee1f654a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  103.036039][ T3507] RBP: 00007ffcfde8b580 R08: 0000000000000000 R09: 0000000000001010
[  103.036243][ T3507] R10: 00007ffcfde8b3c0 R11: 0000000000000246 R12: 0000000000000002
[  103.036439][ T3507] R13: 0000000000000000 R14: 00007fee1f846680 R15: 00007fee1f847fa0
| [  116.035519][ T4125] ------------[ cut here ]------------
| [  116.035647][ T4125] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: jq/4125
| [  116.035845][ T4125] Modules linked in:
| [  116.036211][ T4125] Tainted: [B]=BAD_PAGE, [W]=WARN
[  116.036342][ T4125] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  116.036507][ T4125] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  116.036643][ T4125] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  116.037112][ T4125] RSP: 0018:ffa0000006927858 EFLAGS: 00010046
[  116.037276][ T4125] RAX: 0000000000000220 RBX: ff11000005f2a620 RCX: 0000000000000001
[  116.037472][ T4125] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  116.037670][ T4125] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  116.037872][ T4125] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000017ca80
[  116.038067][ T4125] R13: ff11000005f2a638 R14: ff1100000103c940 R15: ffd400000017ca80
[  116.038262][ T4125] FS:  00007f445ce7e740(0000) GS:ff110000a462e000(0000) knlGS:0000000000000000
[  116.038500][ T4125] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.038666][ T4125] CR2: 00007f445d245fa0 CR3: 000000000db28002 CR4: 0000000000771ef0
[  116.038864][ T4125] PKRU: 55555554
[  116.038963][ T4125] Call Trace:
[  116.039061][ T4125]  <TASK>
[  116.039127][ T4125]  check_bytes_and_report.cold (mm/slub.c:1359)
[  116.039260][ T4125]  check_object (mm/slub.c:1515)
[  116.039390][ T4125]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  116.039518][ T4125]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.039648][ T4125]  free_to_partial_list (mm/slub.c:5631)
[  116.039783][ T4125]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.039913][ T4125]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.040042][ T4125]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  116.040172][ T4125]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  116.040305][ T4125]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  116.040433][ T4125]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  116.040563][ T4125]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  116.040697][ T4125]  __create_object (mm/kmemleak.c:801)
[  116.040826][ T4125]  ? kasan_save_track (mm/kasan/common.c:78)
[  116.040954][ T4125]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  116.041083][ T4125]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  116.041212][ T4125]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  116.041340][ T4125]  do_brk_flags (mm/vma.c:3032)
[  116.041470][ T4125]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.041601][ T4125]  ? arch_get_unmapped_area (./include/linux/mm.h:4361)
[  116.041735][ T4125]  ? do_fault_around (./include/linux/rcupdate.h:882 mm/memory.c:5961)
[  116.041862][ T4125]  ? mmap_region (mm/vma.c:2957)
[  116.041992][ T4125]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.042119][ T4125]  ? mm_get_unmapped_area_vmaflags (mm/mmap.c:820 (discriminator 1))
[  116.042279][ T4125]  ? mtree_range_walk (lib/maple_tree.c:676 (discriminator 4) lib/maple_tree.c:2118 (discriminator 4))
[  116.042408][ T4125]  ? mas_lock_check (lib/maple_tree.c:1187)
[  116.042534][ T4125]  ? mas_prev (lib/maple_tree.c:5308)
[  116.042636][ T4125]  ? mas_prev_range (lib/maple_tree.c:5336)
[  116.042769][ T4125]  __do_sys_brk (mm/mmap.c:196)
[  116.042899][ T4125]  ? check_brk_limits (./include/linux/sched/signal.h:761 (discriminator 4))
[  116.043030][ T4125]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.043160][ T4125]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.043290][ T4125]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  116.043418][ T4125]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  116.043548][ T4125]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  116.043713][ T4125] RIP: 0033:0x7f445d08520b
[  116.043848][ T4125] Code: d6 4c 89 fe 4c 8b 7d f8 eb cc 4c 8b 7d f8 eb bd 48 89 f7 e8 07 56 f1 ff eb e7 0f 1f 44 00 00 f3 0f 1e fa b8 0c 00 00 00 0f 05 <48> 8b 15 26 3c 10 00 48 89 02 48 39 f8 72 06 31 c0 c3 0f 1f 00 48
All code
========
   0:	d6                   	udb
   1:	4c 89 fe             	mov    %r15,%rsi
   4:	4c 8b 7d f8          	mov    -0x8(%rbp),%r15
   8:	eb cc                	jmp    0xffffffffffffffd6
   a:	4c 8b 7d f8          	mov    -0x8(%rbp),%r15
   e:	eb bd                	jmp    0xffffffffffffffcd
  10:	48 89 f7             	mov    %rsi,%rdi
  13:	e8 07 56 f1 ff       	call   0xfffffffffff1561f
  18:	eb e7                	jmp    0x1
  1a:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 0c 00 00 00       	mov    $0xc,%eax
  28:	0f 05                	syscall
  2a:*	48 8b 15 26 3c 10 00 	mov    0x103c26(%rip),%rdx        # 0x103c57		<-- trapping instruction
  31:	48 89 02             	mov    %rax,(%rdx)
  34:	48 39 f8             	cmp    %rdi,%rax
  37:	72 06                	jb     0x3f
  39:	31 c0                	xor    %eax,%eax
  3b:	c3                   	ret
  3c:	0f 1f 00             	nopl   (%rax)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 8b 15 26 3c 10 00 	mov    0x103c26(%rip),%rdx        # 0x103c2d
   7:	48 89 02             	mov    %rax,(%rdx)
   a:	48 39 f8             	cmp    %rdi,%rax
   d:	72 06                	jb     0x15
   f:	31 c0                	xor    %eax,%eax
  11:	c3                   	ret
  12:	0f 1f 00             	nopl   (%rax)
  15:	48                   	rex.W
[  116.044316][ T4125] RSP: 002b:00007fff45403a78 EFLAGS: 00000206 ORIG_RAX: 000000000000000c
[  116.044513][ T4125] RAX: ffffffffffffffda RBX: 00007f445d189ac0 RCX: 00007f445d08520b
[  116.044715][ T4125] RDX: 000055570bf44000 RSI: 00007f445d189ac0 RDI: 000055570bf65000
[  116.044911][ T4125] RBP: 00007fff45403a90 R08: 0000000000000110 R09: 0000000000000000
[  116.045106][ T4125] R10: 00007f445d189ac8 R11: 0000000000000206 R12: 0000000000000000
[  116.045304][ T4125] R13: 0000000000000120 R14: 0000000000001000 R15: 00007f445d189ac8
| [  116.054923][ T4125] ------------[ cut here ]------------
| [  116.055092][ T4125] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: jq/4125
| [  116.055282][ T4125] Modules linked in:
| [  116.055733][ T4125] Tainted: [B]=BAD_PAGE, [W]=WARN
[  116.055866][ T4125] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  116.056076][ T4125] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  116.056214][ T4125] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  116.056763][ T4125] RSP: 0018:ffa0000006927858 EFLAGS: 00010046
[  116.056971][ T4125] RAX: 0000000000000220 RBX: ff11000008ad5260 RCX: 0000000000000001
[  116.057207][ T4125] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  116.057403][ T4125] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  116.057638][ T4125] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000022b540
[  116.057881][ T4125] R13: ff11000008ad5278 R14: ff1100000103c940 R15: ffd400000022b540
[  116.058120][ T4125] FS:  00007f445ce7e740(0000) GS:ff110000a462e000(0000) knlGS:0000000000000000
[  116.058345][ T4125] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.058550][ T4125] CR2: 00007f445d245fa0 CR3: 000000000db28002 CR4: 0000000000771ef0
[  116.058793][ T4125] PKRU: 55555554
[  116.058889][ T4125] Call Trace:
[  116.059028][ T4125]  <TASK>
[  116.059094][ T4125]  check_bytes_and_report.cold (mm/slub.c:1359)
[  116.059225][ T4125]  check_object (mm/slub.c:1515)
[  116.059397][ T4125]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  116.059523][ T4125]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.059695][ T4125]  free_to_partial_list (mm/slub.c:5631)
[  116.059823][ T4125]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.059994][ T4125]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.060124][ T4125]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  116.060294][ T4125]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  116.060423][ T4125]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  116.060595][ T4125]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  116.060728][ T4125]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  116.060856][ T4125]  __create_object (mm/kmemleak.c:801)
[  116.060985][ T4125]  ? kasan_save_track (mm/kasan/common.c:78)
[  116.061157][ T4125]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  116.061284][ T4125]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  116.061455][ T4125]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  116.061583][ T4125]  do_brk_flags (mm/vma.c:3032)
[  116.061755][ T4125]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.061884][ T4125]  ? arch_get_unmapped_area (./include/linux/mm.h:4361)
[  116.062057][ T4125]  ? do_fault_around (./include/linux/rcupdate.h:882 mm/memory.c:5961)
[  116.062185][ T4125]  ? mmap_region (mm/vma.c:2957)
[  116.062355][ T4125]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.062482][ T4125]  ? mm_get_unmapped_area_vmaflags (mm/mmap.c:820 (discriminator 1))
[  116.062688][ T4125]  ? mtree_range_walk (lib/maple_tree.c:676 (discriminator 4) lib/maple_tree.c:2118 (discriminator 4))
[  116.062817][ T4125]  ? mas_lock_check (lib/maple_tree.c:1187)
[  116.062988][ T4125]  ? mas_prev (lib/maple_tree.c:5308)
[  116.063084][ T4125]  ? mas_prev_range (lib/maple_tree.c:5336)
[  116.063253][ T4125]  __do_sys_brk (mm/mmap.c:196)
[  116.063381][ T4125]  ? check_brk_limits (./include/linux/sched/signal.h:761 (discriminator 4))
[  116.063555][ T4125]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.063686][ T4125]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.063855][ T4125]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  116.063983][ T4125]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  116.064153][ T4125]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  116.064310][ T4125] RIP: 0033:0x7f445d08520b
[  116.064487][ T4125] Code: d6 4c 89 fe 4c 8b 7d f8 eb cc 4c 8b 7d f8 eb bd 48 89 f7 e8 07 56 f1 ff eb e7 0f 1f 44 00 00 f3 0f 1e fa b8 0c 00 00 00 0f 05 <48> 8b 15 26 3c 10 00 48 89 02 48 39 f8 72 06 31 c0 c3 0f 1f 00 48
All code
========
   0:	d6                   	udb
   1:	4c 89 fe             	mov    %r15,%rsi
   4:	4c 8b 7d f8          	mov    -0x8(%rbp),%r15
   8:	eb cc                	jmp    0xffffffffffffffd6
   a:	4c 8b 7d f8          	mov    -0x8(%rbp),%r15
   e:	eb bd                	jmp    0xffffffffffffffcd
  10:	48 89 f7             	mov    %rsi,%rdi
  13:	e8 07 56 f1 ff       	call   0xfffffffffff1561f
  18:	eb e7                	jmp    0x1
  1a:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 0c 00 00 00       	mov    $0xc,%eax
  28:	0f 05                	syscall
  2a:*	48 8b 15 26 3c 10 00 	mov    0x103c26(%rip),%rdx        # 0x103c57		<-- trapping instruction
  31:	48 89 02             	mov    %rax,(%rdx)
  34:	48 39 f8             	cmp    %rdi,%rax
  37:	72 06                	jb     0x3f
  39:	31 c0                	xor    %eax,%eax
  3b:	c3                   	ret
  3c:	0f 1f 00             	nopl   (%rax)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 8b 15 26 3c 10 00 	mov    0x103c26(%rip),%rdx        # 0x103c2d
   7:	48 89 02             	mov    %rax,(%rdx)
   a:	48 39 f8             	cmp    %rdi,%rax
   d:	72 06                	jb     0x15
   f:	31 c0                	xor    %eax,%eax
  11:	c3                   	ret
  12:	0f 1f 00             	nopl   (%rax)
  15:	48                   	rex.W
[  116.065043][ T4125] RSP: 002b:00007fff45403a78 EFLAGS: 00000206 ORIG_RAX: 000000000000000c
[  116.065238][ T4125] RAX: ffffffffffffffda RBX: 00007f445d189ac0 RCX: 00007f445d08520b
[  116.065472][ T4125] RDX: 000055570bf44000 RSI: 00007f445d189ac0 RDI: 000055570bf65000
[  116.065712][ T4125] RBP: 00007fff45403a90 R08: 0000000000000110 R09: 0000000000000000
[  116.065949][ T4125] R10: 00007f445d189ac8 R11: 0000000000000206 R12: 0000000000000000
[  116.066140][ T4125] R13: 0000000000000120 R14: 0000000000001000 R15: 00007f445d189ac8
| [  116.226469][ T4134] ------------[ cut here ]------------
| [  116.226604][ T4134] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: jq/4134
| [  116.226812][ T4134] Modules linked in:
| [  116.227199][ T4134] Tainted: [B]=BAD_PAGE, [W]=WARN
[  116.227339][ T4134] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  116.227509][ T4134] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  116.227653][ T4134] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  116.228140][ T4134] RSP: 0018:ffa0000006967178 EFLAGS: 00010046
[  116.228314][ T4134] RAX: 0000000000000220 RBX: ff11000004a65840 RCX: 0000000000000001
[  116.228518][ T4134] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  116.228722][ T4134] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  116.228927][ T4134] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000129940
[  116.229130][ T4134] R13: ff11000004a65868 R14: ff1100000103cac0 R15: ffd4000000129940
[  116.229333][ T4134] FS:  0000000000000000(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  116.229570][ T4134] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.229745][ T4134] CR2: 00007fbb448a9888 CR3: 0000000004cf7006 CR4: 0000000000771ef0
[  116.229946][ T4134] PKRU: 55555554
[  116.230048][ T4134] Call Trace:
[  116.230152][ T4134]  <TASK>
[  116.230220][ T4134]  check_bytes_and_report.cold (mm/slub.c:1359)
[  116.230354][ T4134]  check_object (mm/slub.c:1515)
[  116.230488][ T4134]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  116.230624][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.230763][ T4134]  free_to_partial_list (mm/slub.c:5631)
[  116.230896][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.231030][ T4134]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.231164][ T4134]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  116.231297][ T4134]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  116.231430][ T4134]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  116.231562][ T4134]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.231701][ T4134]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.231835][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.231969][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.232103][ T4134]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  116.232237][ T4134]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  116.232369][ T4134]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  116.232501][ T4134]  ? init_multi_vma_prep (mm/vma.c:174)
[  116.232637][ T4134]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  116.232775][ T4134]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  116.232906][ T4134]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  116.233040][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.233174][ T4134]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  116.233342][ T4134]  vma_expand (mm/vma.c:1302)
[  116.233477][ T4134]  relocate_vma_down (mm/vma_exec.c:63)
[  116.233609][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.233747][ T4134]  ? __install_special_mapping (??:?)
[  116.233923][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.234056][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.234188][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.234323][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  116.234454][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  116.234586][ T4134]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  116.234726][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.234860][ T4134]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  116.234993][ T4134]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  116.235126][ T4134]  ? down_write (kernel/locking/rwsem.c:1633)
[  116.235258][ T4134]  setup_arg_pages (fs/exec.c:695)
[  116.235392][ T4134]  ? open_exec (fs/exec.c:823)
[  116.235492][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.235627][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.235764][ T4134]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  116.235932][ T4134]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  116.236068][ T4134]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  116.236200][ T4134]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  116.236332][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.236466][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.236597][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.236734][ T4134]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  116.236868][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.237001][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.237132][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.237265][ T4134]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  116.237397][ T4134]  ? check_unsafe_exec (fs/exec.c:1617)
[  116.237530][ T4134]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  116.237666][ T4134]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  116.237800][ T4134]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  116.237932][ T4134]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  116.238066][ T4134]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  116.238198][ T4134]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  116.238362][ T4134] RIP: 0033:0x7fbb447adf4b
[  116.238505][ T4134] Code: Unable to access opcode bytes at 0x7fbb447adf21.

Code starting with the faulting instruction
===========================================
[  116.238683][ T4134] RSP: 002b:00007ffc4d2ecf18 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  116.238890][ T4134] RAX: ffffffffffffffda RBX: 0000560d8eedb6b0 RCX: 00007fbb447adf4b
[  116.239092][ T4134] RDX: 0000560d8ee10830 RSI: 0000560d8eedce50 RDI: 0000560d8eedb6b0
[  116.239294][ T4134] RBP: 00007ffc4d2ed000 R08: 00007ffc4d2ece40 R09: 0000000000000000
[  116.239499][ T4134] R10: 0000000000000008 R11: 0000000000000202 R12: 0000560d8eedb6b0
[  116.239718][ T4134] R13: 0000000000000000 R14: 0000560d8eedce50 R15: 0000560d8ee10830
| [  116.250737][ T4134] ------------[ cut here ]------------
| [  116.250915][ T4134] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: jq/4134
| [  116.251110][ T4134] Modules linked in:
| [  116.251572][ T4134] Tainted: [B]=BAD_PAGE, [W]=WARN
[  116.251708][ T4134] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  116.251878][ T4134] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  116.252016][ T4134] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  116.252586][ T4134] RSP: 0018:ffa0000006967178 EFLAGS: 00010046
[  116.252805][ T4134] RAX: 0000000000000220 RBX: ff11000004e06940 RCX: 0000000000000001
[  116.253006][ T4134] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  116.253253][ T4134] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  116.253504][ T4134] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000138180
[  116.253753][ T4134] R13: ff11000004e06968 R14: ff1100000103cac0 R15: ffd4000000138180
[  116.253955][ T4134] FS:  0000000000000000(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  116.254234][ T4134] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.254450][ T4134] CR2: 00007fbb447adf21 CR3: 0000000004cf7006 CR4: 0000000000771ef0
[  116.254700][ T4134] PKRU: 55555554
[  116.254801][ T4134] Call Trace:
[  116.254901][ T4134]  <TASK>
[  116.255013][ T4134]  check_bytes_and_report.cold (mm/slub.c:1359)
[  116.255147][ T4134]  check_object (mm/slub.c:1515)
[  116.255325][ T4134]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  116.255456][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.255632][ T4134]  free_to_partial_list (mm/slub.c:5631)
[  116.255767][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.255945][ T4134]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.256076][ T4134]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  116.256252][ T4134]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  116.256384][ T4134]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  116.256559][ T4134]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.256696][ T4134]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.256830][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.256962][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.257144][ T4134]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  116.257292][ T4134]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  116.257471][ T4134]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  116.257601][ T4134]  ? init_multi_vma_prep (mm/vma.c:174)
[  116.257781][ T4134]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  116.257913][ T4134]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  116.258090][ T4134]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  116.258222][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.258398][ T4134]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  116.258564][ T4134]  vma_expand (mm/vma.c:1302)
[  116.258747][ T4134]  relocate_vma_down (mm/vma_exec.c:63)
[  116.258880][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.259056][ T4134]  ? __install_special_mapping (??:?)
[  116.259219][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.259396][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.259527][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.259709][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  116.259841][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  116.260018][ T4134]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  116.260151][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.260327][ T4134]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  116.260458][ T4134]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  116.260636][ T4134]  ? down_write (kernel/locking/rwsem.c:1633)
[  116.260771][ T4134]  setup_arg_pages (fs/exec.c:695)
[  116.260949][ T4134]  ? open_exec (fs/exec.c:823)
[  116.261049][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.261226][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.261359][ T4134]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  116.261572][ T4134]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  116.261708][ T4134]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  116.261886][ T4134]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  116.262019][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.262200][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.262332][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.262508][ T4134]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  116.262639][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.262819][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.262951][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.263127][ T4134]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  116.263260][ T4134]  ? check_unsafe_exec (fs/exec.c:1617)
[  116.263438][ T4134]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  116.263569][ T4134]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  116.263750][ T4134]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  116.263882][ T4134]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  116.264059][ T4134]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  116.264189][ T4134]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  116.264401][ T4134] RIP: 0033:0x7fbb447adf4b
[  116.264604][ T4134] Code: Unable to access opcode bytes at 0x7fbb447adf21.

Code starting with the faulting instruction
===========================================
[  116.264777][ T4134] RSP: 002b:00007ffc4d2ecf18 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  116.265027][ T4134] RAX: ffffffffffffffda RBX: 0000560d8eedb6b0 RCX: 00007fbb447adf4b
[  116.265272][ T4134] RDX: 0000560d8ee10830 RSI: 0000560d8eedce50 RDI: 0000560d8eedb6b0
[  116.265473][ T4134] RBP: 00007ffc4d2ed000 R08: 00007ffc4d2ece40 R09: 0000000000000000
[  116.265722][ T4134] R10: 0000000000000008 R11: 0000000000000202 R12: 0000560d8eedb6b0
[  116.265966][ T4134] R13: 0000000000000000 R14: 0000560d8eedce50 R15: 0000560d8ee10830
| [  116.276249][ T4134] ------------[ cut here ]------------
| [  116.276424][ T4134] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: jq/4134
| [  116.276619][ T4134] Modules linked in:
| [  116.277083][ T4134] Tainted: [B]=BAD_PAGE, [W]=WARN
[  116.277217][ T4134] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  116.277431][ T4134] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  116.277569][ T4134] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  116.278137][ T4134] RSP: 0018:ffa0000006967168 EFLAGS: 00010046
[  116.278353][ T4134] RAX: 0000000000000220 RBX: ff1100000a708c20 RCX: 0000000000000001
[  116.278596][ T4134] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  116.278799][ T4134] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  116.279044][ T4134] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000029c200
[  116.279292][ T4134] R13: ff1100000a708c40 R14: ff1100000103c940 R15: ffd400000029c200
[  116.279536][ T4134] FS:  0000000000000000(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  116.279771][ T4134] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.279984][ T4134] CR2: 00007fbb447adf21 CR3: 0000000004cf7006 CR4: 0000000000771ef0
[  116.280231][ T4134] PKRU: 55555554
[  116.280333][ T4134] Call Trace:
[  116.280479][ T4134]  <TASK>
[  116.280545][ T4134]  check_bytes_and_report.cold (mm/slub.c:1359)
[  116.280682][ T4134]  check_object (mm/slub.c:1507)
[  116.280873][ T4134]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  116.281004][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.281182][ T4134]  free_to_partial_list (mm/slub.c:5631)
[  116.281319][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.281501][ T4134]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.281633][ T4134]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  116.281818][ T4134]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  116.281949][ T4134]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  116.282127][ T4134]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.282265][ T4134]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.282441][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.282573][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.282756][ T4134]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  116.282889][ T4134]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  116.283067][ T4134]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  116.283202][ T4134]  ? init_multi_vma_prep (mm/vma.c:174)
[  116.283381][ T4134]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  116.283512][ T4134]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  116.283695][ T4134]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  116.283829][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.284006][ T4134]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  116.284173][ T4134]  vma_expand (mm/vma.c:1302)
[  116.284350][ T4134]  relocate_vma_down (mm/vma_exec.c:63)
[  116.284481][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.284664][ T4134]  ? __install_special_mapping (??:?)
[  116.284873][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.285006][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.285184][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.285317][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  116.285494][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  116.285627][ T4134]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  116.285809][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.285942][ T4134]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  116.286119][ T4134]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  116.286250][ T4134]  ? down_write (kernel/locking/rwsem.c:1633)
[  116.286426][ T4134]  setup_arg_pages (fs/exec.c:695)
[  116.286561][ T4134]  ? open_exec (fs/exec.c:823)
[  116.286666][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.286844][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.286976][ T4134]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  116.287188][ T4134]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  116.287367][ T4134]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  116.287498][ T4134]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  116.287680][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.287814][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.287991][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.288126][ T4134]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  116.288302][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.288433][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.288610][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.288746][ T4134]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  116.288923][ T4134]  ? check_unsafe_exec (fs/exec.c:1617)
[  116.289056][ T4134]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  116.289233][ T4134]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  116.289365][ T4134]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  116.289542][ T4134]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  116.289676][ T4134]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  116.289808][ T4134]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  116.289972][ T4134] RIP: 0033:0x7fbb447adf4b
[  116.290160][ T4134] Code: Unable to access opcode bytes at 0x7fbb447adf21.

Code starting with the faulting instruction
===========================================
[  116.290331][ T4134] RSP: 002b:00007ffc4d2ecf18 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  116.290575][ T4134] RAX: ffffffffffffffda RBX: 0000560d8eedb6b0 RCX: 00007fbb447adf4b
[  116.290828][ T4134] RDX: 0000560d8ee10830 RSI: 0000560d8eedce50 RDI: 0000560d8eedb6b0
[  116.291075][ T4134] RBP: 00007ffc4d2ed000 R08: 00007ffc4d2ece40 R09: 0000000000000000
[  116.291273][ T4134] R10: 0000000000000008 R11: 0000000000000202 R12: 0000560d8eedb6b0
[  116.291522][ T4134] R13: 0000000000000000 R14: 0000560d8eedce50 R15: 0000560d8ee10830
| [  116.301753][ T4134] ------------[ cut here ]------------
| [  116.301928][ T4134] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: jq/4134
| [  116.302169][ T4134] Modules linked in:
| [  116.302581][ T4134] Tainted: [B]=BAD_PAGE, [W]=WARN
[  116.302715][ T4134] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  116.302928][ T4134] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  116.303113][ T4134] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  116.303632][ T4134] RSP: 0018:ffa0000006967168 EFLAGS: 00010046
[  116.303847][ T4134] RAX: 0000000000000220 RBX: ff1100000a708f20 RCX: 0000000000000001
[  116.304095][ T4134] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  116.304293][ T4134] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  116.304553][ T4134] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000029c200
[  116.304811][ T4134] R13: ff1100000a708f40 R14: ff1100000103c940 R15: ffd400000029c200
[  116.305062][ T4134] FS:  0000000000000000(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  116.305344][ T4134] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.305516][ T4134] CR2: 00007fbb447adf21 CR3: 0000000004cf7006 CR4: 0000000000771ef0
[  116.305778][ T4134] PKRU: 55555554
[  116.305877][ T4134] Call Trace:
[  116.306028][ T4134]  <TASK>
[  116.306100][ T4134]  check_bytes_and_report.cold (mm/slub.c:1359)
[  116.306232][ T4134]  check_object (mm/slub.c:1507)
[  116.306408][ T4134]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  116.306544][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.306732][ T4134]  free_to_partial_list (mm/slub.c:5631)
[  116.306864][ T4134]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.307043][ T4134]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  116.307183][ T4134]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  116.307362][ T4134]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  116.307492][ T4134]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  116.307676][ T4134]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.307808][ T4134]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  116.307994][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.308132][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.308306][ T4134]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  116.308438][ T4134]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  116.308625][ T4134]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  116.308758][ T4134]  ? init_multi_vma_prep (mm/vma.c:174)
[  116.308890][ T4134]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  116.309031][ T4134]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  116.309209][ T4134]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  116.309340][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.309540][ T4134]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  116.309752][ T4134]  vma_expand (mm/vma.c:1302)
[  116.309888][ T4134]  relocate_vma_down (mm/vma_exec.c:63)
[  116.310071][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.310203][ T4134]  ? __install_special_mapping (??:?)
[  116.310419][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.310556][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.310734][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.310866][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  116.311050][ T4134]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  116.311181][ T4134]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  116.311361][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.311501][ T4134]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  116.311684][ T4134]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  116.311815][ T4134]  ? down_write (kernel/locking/rwsem.c:1633)
[  116.311996][ T4134]  setup_arg_pages (fs/exec.c:695)
[  116.312128][ T4134]  ? open_exec (fs/exec.c:823)
[  116.312276][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.312410][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.312593][ T4134]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  116.312762][ T4134]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  116.312943][ T4134]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  116.313083][ T4134]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  116.313262][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.313392][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.313577][ T4134]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  116.313716][ T4134]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  116.313895][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.314032][ T4134]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  116.314213][ T4134]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  116.314344][ T4134]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  116.314526][ T4134]  ? check_unsafe_exec (fs/exec.c:1617)
[  116.314659][ T4134]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  116.314839][ T4134]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  116.314980][ T4134]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  116.315160][ T4134]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  116.315291][ T4134]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  116.315475][ T4134]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  116.315638][ T4134] RIP: 0033:0x7fbb447adf4b
[  116.315846][ T4134] Code: Unable to access opcode bytes at 0x7fbb447adf21.

Code starting with the faulting instruction
===========================================
[  116.316021][ T4134] RSP: 002b:00007ffc4d2ecf18 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  116.316272][ T4134] RAX: ffffffffffffffda RBX: 0000560d8eedb6b0 RCX: 00007fbb447adf4b
[  116.316525][ T4134] RDX: 0000560d8ee10830 RSI: 0000560d8eedce50 RDI: 0000560d8eedb6b0
[  116.316778][ T4134] RBP: 00007ffc4d2ed000 R08: 00007ffc4d2ece40 R09: 0000000000000000
[  116.316982][ T4134] R10: 0000000000000008 R11: 0000000000000202 R12: 0000560d8eedb6b0
[  116.317230][ T4134] R13: 0000000000000000 R14: 0000560d8eedce50 R15: 0000560d8ee10830
| [  135.379979][ T4899] ------------[ cut here ]------------
| [  135.380116][ T4899] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/4899
| [  135.380322][ T4899] Modules linked in:
| [  135.380713][ T4899] Tainted: [B]=BAD_PAGE, [W]=WARN
[  135.380859][ T4899] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  135.381030][ T4899] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  135.381175][ T4899] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  135.381666][ T4899] RSP: 0018:ffa00000078072e8 EFLAGS: 00010046
[  135.381842][ T4899] RAX: 0000000000000220 RBX: ff11000004f70740 RCX: 0000000000000001
[  135.382050][ T4899] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  135.382261][ T4899] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  135.382468][ T4899] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dc00
[  135.382674][ T4899] R13: ff11000004f70768 R14: ff1100000103cac0 R15: ffd400000013dc00
[  135.382887][ T4899] FS:  0000000000000000(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  135.383138][ T4899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.383319][ T4899] CR2: 00007ff39db882c8 CR3: 000000001099b001 CR4: 0000000000771ef0
[  135.383526][ T4899] PKRU: 55555554
[  135.383632][ T4899] Call Trace:
[  135.383741][ T4899]  <TASK>
[  135.383814][ T4899]  check_bytes_and_report.cold (mm/slub.c:1359)
[  135.383957][ T4899]  check_object (mm/slub.c:1515)
[  135.384096][ T4899]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  135.384233][ T4899]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  135.384370][ T4899]  free_to_partial_list (mm/slub.c:5631)
[  135.384505][ T4899]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  135.384642][ T4899]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  135.384780][ T4899]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  135.384922][ T4899]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  135.385057][ T4899]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  135.385197][ T4899]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  135.385336][ T4899]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  135.385471][ T4899]  __mmap_new_vma (mm/vma.c:2648)
[  135.385609][ T4899]  ? __kernel_text_address (kernel/extable.c:79)
[  135.385748][ T4899]  ? __mmap_new_file_vma (./include/linux/maple_tree.h:627)
[  135.385888][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.386028][ T4899]  ? xas_reload (./include/linux/xarray.h:1226 (discriminator 5) ./include/linux/xarray.h:1624 (discriminator 5))
[  135.386167][ T4899]  ? filemap_get_read_batch (./include/linux/rcupdate.h:882 mm/filemap.c:2507)
[  135.386302][ T4899]  __mmap_region (mm/vma.c:2879)
[  135.386440][ T4899]  ? vma_merge_new_range (./include/linux/mm.h:4474)
[  135.386575][ T4899]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[  135.386714][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.386853][ T4899]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  135.386992][ T4899]  ? mas_rev_awalk (lib/maple_tree.c:676 (discriminator 4) lib/maple_tree.c:709 (discriminator 4) lib/maple_tree.c:4329 (discriminator 4))
[  135.387143][ T4899]  ? unmapped_area_topdown (./include/linux/mm.h:1688 mm/vma.c:3163)
[  135.387284][ T4899]  mmap_region (mm/vma.c:2964)
[  135.387420][ T4899]  ? mm_take_all_locks (mm/vma.c:2365)
[  135.387555][ T4899]  ? __get_unmapped_area (./include/linux/security.h:1188 mm/mmap.c:877)
[  135.387691][ T4899]  do_mmap (mm/mmap.c:573)
[  135.387795][ T4899]  ? __ia32_sys_brk (mm/mmap.c:117)
[  135.387933][ T4899]  ? do_numa_page.isra.0 (mm/memory.c:6319 (discriminator 1))
[  135.388067][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.388201][ T4899]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  135.388337][ T4899]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  135.388472][ T4899]  ? down_write (kernel/locking/rwsem.c:1633)
[  135.388608][ T4899]  ? __pmd_alloc (./include/linux/mm.h:1762)
[  135.388747][ T4899]  vm_mmap_pgoff (mm/util.c:581)
[  135.388887][ T4899]  ? randomize_page (mm/util.c:387)
[  135.389021][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.389154][ T4899]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  135.389289][ T4899]  ? __fget_files (./include/linux/rcupdate.h:850 fs/file.c:1098)
[  135.389423][ T4899]  ? __fget_files (./include/linux/rcupdate.h:882 fs/file.c:1100)
[  135.389557][ T4899]  ksys_mmap_pgoff (mm/mmap.c:619)
[  135.389691][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.389832][ T4899]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  135.389967][ T4899]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  135.390101][ T4899]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  135.390235][ T4899]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  135.390402][ T4899] RIP: 0033:0x7ff39dc8091c
[  135.390546][ T4899] Code: 1e fa 41 f7 c1 ff 0f 00 00 75 33 55 48 89 e5 41 54 41 89 cc 53 48 89 fb 48 85 ff 74 51 45 89 e2 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 24 5b 41 5c 5d c3 0f 1f 80 00 00 00 00 c7 05
All code
========
   0:	1e                   	(bad)
   1:	fa                   	cli
   2:	41 f7 c1 ff 0f 00 00 	test   $0xfff,%r9d
   9:	75 33                	jne    0x3e
   b:	55                   	push   %rbp
   c:	48 89 e5             	mov    %rsp,%rbp
   f:	41 54                	push   %r12
  11:	41 89 cc             	mov    %ecx,%r12d
  14:	53                   	push   %rbx
  15:	48 89 fb             	mov    %rdi,%rbx
  18:	48 85 ff             	test   %rdi,%rdi
  1b:	74 51                	je     0x6e
  1d:	45 89 e2             	mov    %r12d,%r10d
  20:	48 89 df             	mov    %rbx,%rdi
  23:	b8 09 00 00 00       	mov    $0x9,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 24                	ja     0x56
  32:	5b                   	pop    %rbx
  33:	41 5c                	pop    %r12
  35:	5d                   	pop    %rbp
  36:	c3                   	ret
  37:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  3e:	c7                   	.byte 0xc7
  3f:	05                   	.byte 0x5

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 24                	ja     0x2c
   8:	5b                   	pop    %rbx
   9:	41 5c                	pop    %r12
   b:	5d                   	pop    %rbp
   c:	c3                   	ret
   d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  14:	c7                   	.byte 0xc7
  15:	05                   	.byte 0x5
[  135.391031][ T4899] RSP: 002b:00007ffd438bb9a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  135.391236][ T4899] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff39dc8091c
[  135.391442][ T4899] RDX: 0000000000000005 RSI: 000000000002c1c8 RDI: 0000000000000000
[  135.391647][ T4899] RBP: 00007ffd438bb9b0 R08: 0000000000000005 R09: 0000000000000000
[  135.391859][ T4899] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000802
[  135.392066][ T4899] R13: 0000000000000002 R14: 00007ffd438bbe30 R15: 0000000000000000
| [  135.402667][ T4899] ------------[ cut here ]------------
| [  135.402801][ T4899] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/4899
| [  135.403054][ T4899] Modules linked in:
| [  135.403481][ T4899] Tainted: [B]=BAD_PAGE, [W]=WARN
[  135.403663][ T4899] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  135.403837][ T4899] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  135.404026][ T4899] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  135.404605][ T4899] RSP: 0018:ffa00000078072e8 EFLAGS: 00010046
[  135.404776][ T4899] RAX: 0000000000000220 RBX: ff11000004f70840 RCX: 0000000000000001
[  135.405036][ T4899] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  135.405287][ T4899] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  135.405539][ T4899] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000013dc00
[  135.405746][ T4899] R13: ff11000004f70868 R14: ff1100000103cac0 R15: ffd400000013dc00
[  135.405956][ T4899] FS:  0000000000000000(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  135.406245][ T4899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.406465][ T4899] CR2: 00007ff39db882c8 CR3: 000000001099b001 CR4: 0000000000771ef0
[  135.406669][ T4899] PKRU: 55555554
[  135.406823][ T4899] Call Trace:
[  135.406928][ T4899]  <TASK>
[  135.406997][ T4899]  check_bytes_and_report.cold (mm/slub.c:1359)
[  135.407177][ T4899]  check_object (mm/slub.c:1515)
[  135.407315][ T4899]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  135.407499][ T4899]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  135.407636][ T4899]  free_to_partial_list (mm/slub.c:5631)
[  135.407816][ T4899]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  135.407956][ T4899]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  135.408137][ T4899]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  135.408273][ T4899]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  135.408453][ T4899]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  135.408587][ T4899]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  135.408772][ T4899]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  135.408914][ T4899]  __mmap_new_vma (mm/vma.c:2648)
[  135.409094][ T4899]  ? __kernel_text_address (kernel/extable.c:79)
[  135.409229][ T4899]  ? __mmap_new_file_vma (./include/linux/maple_tree.h:627)
[  135.409410][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.409547][ T4899]  ? xas_reload (./include/linux/xarray.h:1226 (discriminator 5) ./include/linux/xarray.h:1624 (discriminator 5))
[  135.409727][ T4899]  ? filemap_get_read_batch (./include/linux/rcupdate.h:882 mm/filemap.c:2507)
[  135.409868][ T4899]  __mmap_region (mm/vma.c:2879)
[  135.410048][ T4899]  ? vma_merge_new_range (./include/linux/mm.h:4474)
[  135.410182][ T4899]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[  135.410363][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.410498][ T4899]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  135.410678][ T4899]  ? mas_rev_awalk (lib/maple_tree.c:676 (discriminator 4) lib/maple_tree.c:709 (discriminator 4) lib/maple_tree.c:4329 (discriminator 4))
[  135.410822][ T4899]  ? unmapped_area_topdown (./include/linux/mm.h:1688 mm/vma.c:3163)
[  135.411004][ T4899]  mmap_region (mm/vma.c:2964)
[  135.411141][ T4899]  ? mm_take_all_locks (mm/vma.c:2365)
[  135.411322][ T4899]  ? __get_unmapped_area (./include/linux/security.h:1188 mm/mmap.c:877)
[  135.411461][ T4899]  do_mmap (mm/mmap.c:573)
[  135.411607][ T4899]  ? __ia32_sys_brk (mm/mmap.c:117)
[  135.411740][ T4899]  ? do_numa_page.isra.0 (mm/memory.c:6319 (discriminator 1))
[  135.411924][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.412061][ T4899]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  135.412246][ T4899]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  135.412383][ T4899]  ? down_write (kernel/locking/rwsem.c:1633)
[  135.412566][ T4899]  ? __pmd_alloc (./include/linux/mm.h:1762)
[  135.412712][ T4899]  vm_mmap_pgoff (mm/util.c:581)
[  135.412853][ T4899]  ? randomize_page (mm/util.c:387)
[  135.412989][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.413170][ T4899]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  135.413307][ T4899]  ? __fget_files (./include/linux/rcupdate.h:850 fs/file.c:1098)
[  135.413490][ T4899]  ? __fget_files (./include/linux/rcupdate.h:882 fs/file.c:1100)
[  135.413625][ T4899]  ksys_mmap_pgoff (mm/mmap.c:619)
[  135.413806][ T4899]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.413949][ T4899]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  135.414131][ T4899]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  135.414265][ T4899]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  135.414444][ T4899]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  135.414612][ T4899] RIP: 0033:0x7ff39dc8091c
[  135.414805][ T4899] Code: 1e fa 41 f7 c1 ff 0f 00 00 75 33 55 48 89 e5 41 54 41 89 cc 53 48 89 fb 48 85 ff 74 51 45 89 e2 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 24 5b 41 5c 5d c3 0f 1f 80 00 00 00 00 c7 05
All code
========
   0:	1e                   	(bad)
   1:	fa                   	cli
   2:	41 f7 c1 ff 0f 00 00 	test   $0xfff,%r9d
   9:	75 33                	jne    0x3e
   b:	55                   	push   %rbp
   c:	48 89 e5             	mov    %rsp,%rbp
   f:	41 54                	push   %r12
  11:	41 89 cc             	mov    %ecx,%r12d
  14:	53                   	push   %rbx
  15:	48 89 fb             	mov    %rdi,%rbx
  18:	48 85 ff             	test   %rdi,%rdi
  1b:	74 51                	je     0x6e
  1d:	45 89 e2             	mov    %r12d,%r10d
  20:	48 89 df             	mov    %rbx,%rdi
  23:	b8 09 00 00 00       	mov    $0x9,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 24                	ja     0x56
  32:	5b                   	pop    %rbx
  33:	41 5c                	pop    %r12
  35:	5d                   	pop    %rbp
  36:	c3                   	ret
  37:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  3e:	c7                   	.byte 0xc7
  3f:	05                   	.byte 0x5

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 24                	ja     0x2c
   8:	5b                   	pop    %rbx
   9:	41 5c                	pop    %r12
   b:	5d                   	pop    %rbp
   c:	c3                   	ret
   d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  14:	c7                   	.byte 0xc7
  15:	05                   	.byte 0x5
[  135.415391][ T4899] RSP: 002b:00007ffd438bb9a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  135.415598][ T4899] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff39dc8091c
[  135.415854][ T4899] RDX: 0000000000000005 RSI: 000000000002c1c8 RDI: 0000000000000000
[  135.416104][ T4899] RBP: 00007ffd438bb9b0 R08: 0000000000000005 R09: 0000000000000000
[  135.416354][ T4899] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000802
[  135.416561][ T4899] R13: 0000000000000002 R14: 00007ffd438bbe30 R15: 0000000000000000
| [  139.159146][ T4972] ------------[ cut here ]------------
| [  139.159282][ T4972] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/4972
| [  139.159534][ T4972] Modules linked in:
| [  139.159972][ T4972] Tainted: [B]=BAD_PAGE, [W]=WARN
[  139.160160][ T4972] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  139.160332][ T4972] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  139.160527][ T4972] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  139.161118][ T4972] RSP: 0018:ffa0000007a27718 EFLAGS: 00010046
[  139.161295][ T4972] RAX: 0000000000000220 RBX: ff1100000f8503e0 RCX: 0000000000000001
[  139.161555][ T4972] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  139.161809][ T4972] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  139.162018][ T4972] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd40000003e1400
[  139.162270][ T4972] R13: ff1100000f850400 R14: ff1100000103c940 R15: ffd40000003e1400
[  139.162532][ T4972] FS:  00007f1f007f7cc0(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  139.162822][ T4972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.163002][ T4972] CR2: 00007f1f00aac830 CR3: 00000000100ba001 CR4: 0000000000771ef0
[  139.163258][ T4972] PKRU: 55555554
[  139.163409][ T4972] Call Trace:
[  139.163514][ T4972]  <TASK>
[  139.163585][ T4972]  check_bytes_and_report.cold (mm/slub.c:1359)
[  139.163767][ T4972]  check_object (mm/slub.c:1507)
[  139.163906][ T4972]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  139.164040][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.164178][ T4972]  free_to_partial_list (mm/slub.c:5631)
[  139.164313][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.164449][ T4972]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.164584][ T4972]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  139.164719][ T4972]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  139.164859][ T4972]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  139.164995][ T4972]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.165146][ T4972]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.165249][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.165388][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.165570][ T4972]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  139.165708][ T4972]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  139.165897][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.166037][ T4972]  do_dentry_open (fs/open.c:996)
[  139.166222][ T4972]  vfs_open (fs/open.c:1101)
[  139.166324][ T4972]  ? may_open (fs/namei.c:4269)
[  139.166472][ T4972]  do_open (fs/namei.c:4837)
[  139.166574][ T4972]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  139.166754][ T4972]  path_openat (fs/namei.c:5000)
[  139.166894][ T4972]  ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.167109][ T4972]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  139.167244][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.167425][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.167562][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.167742][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.167884][ T4972]  do_file_open (fs/namei.c:5029)
[  139.168065][ T4972]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  139.168201][ T4972]  ? __kernel_text_address (kernel/extable.c:79)
[  139.168381][ T4972]  ? write_profile (profile.c:?)
[  139.168518][ T4972]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  139.168699][ T4972]  ? page_get_link_raw (fs/namei.c:6482)
[  139.168838][ T4972]  ? kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  139.169022][ T4972]  do_open_execat (fs/exec.c:786)
[  139.169159][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.169340][ T4972]  ? count.constprop.0.isra.0 (./include/linux/signal.h:87)
[  139.169472][ T4972]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  139.169687][ T4972]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  139.169824][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.170009][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.170143][ T4972]  ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 22))
[  139.170324][ T4972]  alloc_bprm (fs/exec.c:1496)
[  139.170428][ T4972]  do_execveat_common.isra.0 (fs/exec.c:1561 fs/exec.c:1898)
[  139.170607][ T4972]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  139.170740][ T4972]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  139.170927][ T4972]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  139.171062][ T4972]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.171277][ T4972] RIP: 0033:0x7f1f00aadf4b
[  139.171421][ T4972] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48
All code
========
   0:	0f 1e fa             	nop    %edx
   3:	48 8b 05 75 e0 12 00 	mov    0x12e075(%rip),%rax        # 0x12e07f
   a:	48 8b 10             	mov    (%rax),%rdx
   d:	e9 0d 00 00 00       	jmp    0x1f
  12:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  19:	00 00 00 
  1c:	0f 1f 00             	nopl   (%rax)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 3b 00 00 00       	mov    $0x3b,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12deb7
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12de8d
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[  139.171957][ T4972] RSP: 002b:00007ffe6142e988 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  139.172212][ T4972] RAX: ffffffffffffffda RBX: 00007ffe6142fe97 RCX: 00007f1f00aadf4b
[  139.172466][ T4972] RDX: 00007ffe6142ee38 RSI: 00007ffe6142ee08 RDI: 00007ffe6142e990
[  139.172669][ T4972] RBP: 00007ffe6142eab0 R08: 0000000000000000 R09: 00000000000000a2
[  139.172924][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe6142fe93
[  139.173174][ T4972] R13: 00007ffe6142ee38 R14: 00007ffe6142e990 R15: 00007ffe6142ee08
| [  139.182633][ T4972] ------------[ cut here ]------------
| [  139.182766][ T4972] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/4972
| [  139.183017][ T4972] Modules linked in:
| [  139.183440][ T4972] Tainted: [B]=BAD_PAGE, [W]=WARN
[  139.183623][ T4972] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  139.183791][ T4972] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  139.183984][ T4972] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  139.184562][ T4972] RSP: 0018:ffa0000007a27718 EFLAGS: 00010046
[  139.184734][ T4972] RAX: 0000000000000220 RBX: ff1100000f850020 RCX: 0000000000000001
[  139.184992][ T4972] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  139.185241][ T4972] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  139.185445][ T4972] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd40000003e1400
[  139.185693][ T4972] R13: ff1100000f850040 R14: ff1100000103c940 R15: ffd40000003e1400
[  139.185902][ T4972] FS:  00007f1f007f7cc0(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  139.186186][ T4972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.186357][ T4972] CR2: 00007f1f00aac830 CR3: 00000000100ba001 CR4: 0000000000771ef0
[  139.186606][ T4972] PKRU: 55555554
[  139.186753][ T4972] Call Trace:
[  139.186860][ T4972]  <TASK>
[  139.186929][ T4972]  check_bytes_and_report.cold (mm/slub.c:1359)
[  139.187109][ T4972]  check_object (mm/slub.c:1507)
[  139.187246][ T4972]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  139.187434][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.187568][ T4972]  free_to_partial_list (mm/slub.c:5631)
[  139.187748][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.187888][ T4972]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.188066][ T4972]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  139.188199][ T4972]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  139.188379][ T4972]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  139.188515][ T4972]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.188664][ T4972]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.188764][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.188902][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.189082][ T4972]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  139.189218][ T4972]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  139.189397][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.189531][ T4972]  do_dentry_open (fs/open.c:996)
[  139.189713][ T4972]  vfs_open (fs/open.c:1101)
[  139.189816][ T4972]  ? may_open (fs/namei.c:4269)
[  139.189968][ T4972]  do_open (fs/namei.c:4837)
[  139.190070][ T4972]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  139.190250][ T4972]  path_openat (fs/namei.c:5000)
[  139.190383][ T4972]  ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.190597][ T4972]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  139.190730][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.190915][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.191052][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.191232][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.191365][ T4972]  do_file_open (fs/namei.c:5029)
[  139.191544][ T4972]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  139.191679][ T4972]  ? __kernel_text_address (kernel/extable.c:79)
[  139.191863][ T4972]  ? write_profile (profile.c:?)
[  139.192000][ T4972]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  139.192181][ T4972]  ? page_get_link_raw (fs/namei.c:6482)
[  139.192317][ T4972]  ? kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  139.192498][ T4972]  do_open_execat (fs/exec.c:786)
[  139.192631][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.192810][ T4972]  ? count.constprop.0.isra.0 (./include/linux/signal.h:87)
[  139.192951][ T4972]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  139.193164][ T4972]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  139.193297][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.193477][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.193612][ T4972]  ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 22))
[  139.193792][ T4972]  alloc_bprm (fs/exec.c:1496)
[  139.193898][ T4972]  do_execveat_common.isra.0 (fs/exec.c:1561 fs/exec.c:1898)
[  139.194079][ T4972]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  139.194213][ T4972]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  139.194393][ T4972]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  139.194524][ T4972]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.194755][ T4972] RIP: 0033:0x7f1f00aadf4b
[  139.194901][ T4972] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48
All code
========
   0:	0f 1e fa             	nop    %edx
   3:	48 8b 05 75 e0 12 00 	mov    0x12e075(%rip),%rax        # 0x12e07f
   a:	48 8b 10             	mov    (%rax),%rdx
   d:	e9 0d 00 00 00       	jmp    0x1f
  12:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  19:	00 00 00 
  1c:	0f 1f 00             	nopl   (%rax)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 3b 00 00 00       	mov    $0x3b,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12deb7
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12de8d
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[  139.195479][ T4972] RSP: 002b:00007ffe6142e988 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  139.195735][ T4972] RAX: ffffffffffffffda RBX: 00007ffe6142fe97 RCX: 00007f1f00aadf4b
[  139.195986][ T4972] RDX: 00007ffe6142ee38 RSI: 00007ffe6142ee08 RDI: 00007ffe6142e990
[  139.196192][ T4972] RBP: 00007ffe6142eab0 R08: 0000000000000000 R09: 00000000000000a2
[  139.196438][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe6142fe93
[  139.196691][ T4972] R13: 00007ffe6142ee38 R14: 00007ffe6142e990 R15: 00007ffe6142ee08
| [  139.207209][ T4972] ------------[ cut here ]------------
| [  139.207343][ T4972] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/4972
| [  139.207539][ T4972] Modules linked in:
| [  139.207915][ T4972] Tainted: [B]=BAD_PAGE, [W]=WARN
[  139.208047][ T4972] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  139.208216][ T4972] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  139.208356][ T4972] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  139.208832][ T4972] RSP: 0018:ffa0000007a27728 EFLAGS: 00010046
[  139.209006][ T4972] RAX: 0000000000000220 RBX: ff1100000586ab60 RCX: 0000000000000001
[  139.209207][ T4972] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  139.209408][ T4972] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  139.209609][ T4972] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000161a80
[  139.209808][ T4972] R13: ff1100000586ab78 R14: ff1100000103c940 R15: ffd4000000161a80
[  139.210018][ T4972] FS:  00007f1f007f7cc0(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  139.210250][ T4972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.210421][ T4972] CR2: 00007f1f00aac830 CR3: 00000000100ba001 CR4: 0000000000771ef0
[  139.210620][ T4972] PKRU: 55555554
[  139.210721][ T4972] Call Trace:
[  139.210821][ T4972]  <TASK>
[  139.210894][ T4972]  check_bytes_and_report.cold (mm/slub.c:1359)
[  139.211029][ T4972]  check_object (mm/slub.c:1515)
[  139.211164][ T4972]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  139.211295][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.211428][ T4972]  free_to_partial_list (mm/slub.c:5631)
[  139.211563][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.211697][ T4972]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.211832][ T4972]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  139.211972][ T4972]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  139.212109][ T4972]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  139.212242][ T4972]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.212344][ T4972]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.212445][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.212577][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.212711][ T4972]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  139.212846][ T4972]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  139.212997][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.213129][ T4972]  do_dentry_open (fs/open.c:996)
[  139.213263][ T4972]  vfs_open (fs/open.c:1101)
[  139.213363][ T4972]  ? may_open (fs/namei.c:4269)
[  139.213463][ T4972]  do_open (fs/namei.c:4837)
[  139.213562][ T4972]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  139.213696][ T4972]  path_openat (fs/namei.c:5000)
[  139.213828][ T4972]  ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.213996][ T4972]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  139.214130][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.214263][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.214394][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.214527][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.214659][ T4972]  do_file_open (fs/namei.c:5029)
[  139.214791][ T4972]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  139.214930][ T4972]  ? __kernel_text_address (kernel/extable.c:79)
[  139.215063][ T4972]  ? write_profile (profile.c:?)
[  139.215195][ T4972]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  139.215330][ T4972]  ? page_get_link_raw (fs/namei.c:6482)
[  139.215463][ T4972]  ? kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  139.215596][ T4972]  do_open_execat (fs/exec.c:786)
[  139.215729][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.215867][ T4972]  ? count.constprop.0.isra.0 (./include/linux/signal.h:87)
[  139.216004][ T4972]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  139.216173][ T4972]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  139.216307][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.216441][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.216577][ T4972]  ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 22))
[  139.216712][ T4972]  alloc_bprm (fs/exec.c:1496)
[  139.216813][ T4972]  do_execveat_common.isra.0 (fs/exec.c:1561 fs/exec.c:1898)
[  139.216952][ T4972]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  139.217085][ T4972]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  139.217217][ T4972]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  139.217350][ T4972]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.217520][ T4972] RIP: 0033:0x7f1f00aadf4b
[  139.217659][ T4972] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48
All code
========
   0:	0f 1e fa             	nop    %edx
   3:	48 8b 05 75 e0 12 00 	mov    0x12e075(%rip),%rax        # 0x12e07f
   a:	48 8b 10             	mov    (%rax),%rdx
   d:	e9 0d 00 00 00       	jmp    0x1f
  12:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  19:	00 00 00 
  1c:	0f 1f 00             	nopl   (%rax)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 3b 00 00 00       	mov    $0x3b,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12deb7
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12de8d
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[  139.218138][ T4972] RSP: 002b:00007ffe6142e988 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  139.218341][ T4972] RAX: ffffffffffffffda RBX: 00007ffe6142fe97 RCX: 00007f1f00aadf4b
[  139.218542][ T4972] RDX: 00007ffe6142ee38 RSI: 00007ffe6142ee08 RDI: 00007ffe6142e990
[  139.218743][ T4972] RBP: 00007ffe6142eab0 R08: 0000000000000000 R09: 00000000000000a2
[  139.218947][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe6142fe93
[  139.219149][ T4972] R13: 00007ffe6142ee38 R14: 00007ffe6142e990 R15: 00007ffe6142ee08
| [  139.228653][ T4972] ------------[ cut here ]------------
| [  139.228785][ T4972] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/4972
| [  139.228989][ T4972] Modules linked in:
| [  139.229359][ T4972] Tainted: [B]=BAD_PAGE, [W]=WARN
[  139.229495][ T4972] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  139.229663][ T4972] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  139.229802][ T4972] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  139.230280][ T4972] RSP: 0018:ffa0000007a27728 EFLAGS: 00010046
[  139.230447][ T4972] RAX: 0000000000000220 RBX: ff1100000586a320 RCX: 0000000000000001
[  139.230648][ T4972] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  139.230847][ T4972] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  139.231055][ T4972] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000161a80
[  139.231255][ T4972] R13: ff1100000586a338 R14: ff1100000103c940 R15: ffd4000000161a80
[  139.231457][ T4972] FS:  00007f1f007f7cc0(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  139.231691][ T4972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.231867][ T4972] CR2: 00007f1f00aac830 CR3: 00000000100ba001 CR4: 0000000000771ef0
[  139.232067][ T4972] PKRU: 55555554
[  139.232170][ T4972] Call Trace:
[  139.232269][ T4972]  <TASK>
[  139.232336][ T4972]  check_bytes_and_report.cold (mm/slub.c:1359)
[  139.232469][ T4972]  check_object (mm/slub.c:1515)
[  139.232603][ T4972]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  139.232736][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.232872][ T4972]  free_to_partial_list (mm/slub.c:5631)
[  139.233005][ T4972]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.233138][ T4972]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  139.233270][ T4972]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  139.233402][ T4972]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  139.233534][ T4972]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  139.233666][ T4972]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.233767][ T4972]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  139.233873][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.234005][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.234138][ T4972]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  139.234272][ T4972]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  139.234403][ T4972]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  139.234533][ T4972]  do_dentry_open (fs/open.c:996)
[  139.234667][ T4972]  vfs_open (fs/open.c:1101)
[  139.234767][ T4972]  ? may_open (fs/namei.c:4269)
[  139.234873][ T4972]  do_open (fs/namei.c:4837)
[  139.234973][ T4972]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  139.235108][ T4972]  path_openat (fs/namei.c:5000)
[  139.235240][ T4972]  ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.235405][ T4972]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  139.235537][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.235668][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.235800][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.235939][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.236072][ T4972]  do_file_open (fs/namei.c:5029)
[  139.236205][ T4972]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  139.236338][ T4972]  ? __kernel_text_address (kernel/extable.c:79)
[  139.236472][ T4972]  ? write_profile (profile.c:?)
[  139.236604][ T4972]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  139.236737][ T4972]  ? page_get_link_raw (fs/namei.c:6482)
[  139.236877][ T4972]  ? kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  139.237011][ T4972]  do_open_execat (fs/exec.c:786)
[  139.237144][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.237278][ T4972]  ? count.constprop.0.isra.0 (./include/linux/signal.h:87)
[  139.237410][ T4972]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  139.237574][ T4972]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  139.237706][ T4972]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  139.237838][ T4972]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  139.237975][ T4972]  ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 22))
[  139.238110][ T4972]  alloc_bprm (fs/exec.c:1496)
[  139.238209][ T4972]  do_execveat_common.isra.0 (fs/exec.c:1561 fs/exec.c:1898)
[  139.238341][ T4972]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  139.238484][ T4972]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  139.238616][ T4972]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  139.238748][ T4972]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  139.238923][ T4972] RIP: 0033:0x7f1f00aadf4b
[  139.239061][ T4972] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48
All code
========
   0:	0f 1e fa             	nop    %edx
   3:	48 8b 05 75 e0 12 00 	mov    0x12e075(%rip),%rax        # 0x12e07f
   a:	48 8b 10             	mov    (%rax),%rdx
   d:	e9 0d 00 00 00       	jmp    0x1f
  12:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  19:	00 00 00 
  1c:	0f 1f 00             	nopl   (%rax)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 3b 00 00 00       	mov    $0x3b,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12deb7
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12de8d
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[  139.239542][ T4972] RSP: 002b:00007ffe6142e988 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  139.239749][ T4972] RAX: ffffffffffffffda RBX: 00007ffe6142fe97 RCX: 00007f1f00aadf4b
[  139.239954][ T4972] RDX: 00007ffe6142ee38 RSI: 00007ffe6142ee08 RDI: 00007ffe6142e990
[  139.240156][ T4972] RBP: 00007ffe6142eab0 R08: 0000000000000000 R09: 00000000000000a2
[  139.240358][ T4972] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe6142fe93
[  139.240558][ T4972] R13: 00007ffe6142ee38 R14: 00007ffe6142e990 R15: 00007ffe6142ee08
| [  153.663469][ T5657] ------------[ cut here ]------------
| [  153.663605][ T5657] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/5657
| [  153.663808][ T5657] Modules linked in:
| [  153.664190][ T5657] Tainted: [B]=BAD_PAGE, [W]=WARN
[  153.664331][ T5657] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  153.664500][ T5657] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  153.664645][ T5657] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  153.665136][ T5657] RSP: 0000:ffa00000088b7928 EFLAGS: 00010046
[  153.665307][ T5657] RAX: 0000000000000220 RBX: ff1100000863a140 RCX: 0000000000000001
[  153.665514][ T5657] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  153.665715][ T5657] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  153.665920][ T5657] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000218e80
[  153.666124][ T5657] R13: ff1100000863a168 R14: ff1100000103cac0 R15: ffd4000000218e80
[  153.666329][ T5657] FS:  00007f02dae83cc0(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[  153.666566][ T5657] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.666737][ T5657] CR2: 0000000010c36008 CR3: 0000000010a09001 CR4: 0000000000771ef0
[  153.666943][ T5657] PKRU: 55555554
[  153.667050][ T5657] Call Trace:
[  153.667157][ T5657]  <TASK>
[  153.667227][ T5657]  check_bytes_and_report.cold (mm/slub.c:1359)
[  153.667412][ T5657]  check_object (mm/slub.c:1515)
[  153.667550][ T5657]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  153.667728][ T5657]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.667861][ T5657]  free_to_partial_list (mm/slub.c:5631)
[  153.668051][ T5657]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.668181][ T5657]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.668361][ T5657]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  153.668498][ T5657]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  153.668682][ T5657]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  153.668819][ T5657]  ? ptlock_alloc (mm/memory.c:7721 (discriminator 7))
[  153.669008][ T5657]  ptlock_alloc (mm/memory.c:7721 (discriminator 7))
[  153.669111][ T5657]  pte_alloc_one (./include/linux/mm.h:3884 ./include/linux/mm.h:3933 ./include/asm-generic/pgalloc.h:79 arch/x86/mm/pgtable.c:18)
[  153.669291][ T5657]  __pte_alloc (mm/memory.c:453)
[  153.669395][ T5657]  ? pmd_install (mm/memory.c:445)
[  153.669571][ T5657]  ? do_fault_around (./include/linux/rcupdate.h:882 mm/memory.c:5961)
[  153.669703][ T5657]  ? mmap_region (mm/vma.c:2957)
[  153.669880][ T5657]  do_anonymous_page (mm/memory.c:5444 (discriminator 3))
[  153.670017][ T5657]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  153.670193][ T5657]  handle_pte_fault (mm/memory.c:6558)
[  153.670330][ T5657]  ? mm_get_unmapped_area_vmaflags (mm/mmap.c:820 (discriminator 1))
[  153.670540][ T5657]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.670673][ T5657]  ? do_numa_page.isra.0 (mm/memory.c:6319 (discriminator 1))
[  153.670848][ T5657]  ? mksaveddirty_shift (./arch/x86/include/asm/pgtable.h:373)
[  153.670986][ T5657]  __handle_mm_fault (mm/memory.c:6707)
[  153.671165][ T5657]  ? __pmd_alloc (./include/linux/mm.h:1762)
[  153.671302][ T5657]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.671481][ T5657]  handle_mm_fault (mm/memory.c:6876)
[  153.671614][ T5657]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.671797][ T5657]  do_user_addr_fault (arch/x86/mm/fault.c:1343)
[  153.671935][ T5657]  ? irqentry_enter (./include/linux/irq-entry-common.h:108 ./include/linux/irq-entry-common.h:293 kernel/entry/common.c:116)
[  153.672116][ T5657]  exc_page_fault (arch/x86/mm/fault.c:1483 arch/x86/mm/fault.c:1536)
[  153.672248][ T5657]  asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:595)
[  153.672427][ T5657] RIP: 0033:0x7f02db0f9fe1
[  153.672566][ T5657] Code: 00 00 49 89 ce 4c 01 1d 2d f3 16 00 41 83 e6 0f 0f 85 f3 05 00 00 45 31 c9 49 29 c8 48 89 0d ee ea 16 00 4d 01 c8 49 83 c8 01 <4c> 89 41 08 4c 01 35 04 f3 16 00 4d 85 e4 0f 84 21 fd ff ff 49 83
All code
========
   0:	00 00                	add    %al,(%rax)
   2:	49 89 ce             	mov    %rcx,%r14
   5:	4c 01 1d 2d f3 16 00 	add    %r11,0x16f32d(%rip)        # 0x16f339
   c:	41 83 e6 0f          	and    $0xf,%r14d
  10:	0f 85 f3 05 00 00    	jne    0x609
  16:	45 31 c9             	xor    %r9d,%r9d
  19:	49 29 c8             	sub    %rcx,%r8
  1c:	48 89 0d ee ea 16 00 	mov    %rcx,0x16eaee(%rip)        # 0x16eb11
  23:	4d 01 c8             	add    %r9,%r8
  26:	49 83 c8 01          	or     $0x1,%r8
  2a:*	4c 89 41 08          	mov    %r8,0x8(%rcx)		<-- trapping instruction
  2e:	4c 01 35 04 f3 16 00 	add    %r14,0x16f304(%rip)        # 0x16f339
  35:	4d 85 e4             	test   %r12,%r12
  38:	0f 84 21 fd ff ff    	je     0xfffffffffffffd5f
  3e:	49                   	rex.WB
  3f:	83                   	.byte 0x83

Code starting with the faulting instruction
===========================================
   0:	4c 89 41 08          	mov    %r8,0x8(%rcx)
   4:	4c 01 35 04 f3 16 00 	add    %r14,0x16f304(%rip)        # 0x16f30f
   b:	4d 85 e4             	test   %r12,%r12
   e:	0f 84 21 fd ff ff    	je     0xfffffffffffffd35
  14:	49                   	rex.WB
  15:	83                   	.byte 0x83
[  153.673134][ T5657] RSP: 002b:00007ffc26d4fbc0 EFLAGS: 00010202
[  153.673346][ T5657] RAX: 0000000010c57000 RBX: 00007f02db268ac0 RCX: 0000000010c36000
[  153.673544][ T5657] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  153.673789][ T5657] RBP: 00007ffc26d4fc20 R08: 0000000000021001 R09: 0000000000000000
[  153.674043][ T5657] R10: 00007f02db268ac8 R11: 0000000000021000 R12: 0000000000000000
[  153.674293][ T5657] R13: 00000000000001e0 R14: 0000000000000000 R15: 00007f02db268ac8
| [  153.685599][ T5657] ------------[ cut here ]------------
| [  153.685727][ T5657] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/5657
| [  153.685967][ T5657] Modules linked in:
| [  153.686429][ T5657] Tainted: [B]=BAD_PAGE, [W]=WARN
[  153.686563][ T5657] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  153.686774][ T5657] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  153.686919][ T5657] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  153.687494][ T5657] RSP: 0000:ffa00000088b7928 EFLAGS: 00010046
[  153.687709][ T5657] RAX: 0000000000000220 RBX: ff1100000863ac40 RCX: 0000000000000001
[  153.687919][ T5657] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  153.688168][ T5657] RBP: ff1100000103cac0 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  153.688411][ T5657] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd4000000218e80
[  153.688654][ T5657] R13: ff1100000863ac68 R14: ff1100000103cac0 R15: ffd4000000218e80
[  153.688853][ T5657] FS:  00007f02dae83cc0(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[  153.689139][ T5657] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.689352][ T5657] CR2: 0000000010c36008 CR3: 0000000010a09001 CR4: 0000000000771ef0
[  153.689595][ T5657] PKRU: 55555554
[  153.689695][ T5657] Call Trace:
[  153.689797][ T5657]  <TASK>
[  153.689909][ T5657]  check_bytes_and_report.cold (mm/slub.c:1359)
[  153.690049][ T5657]  check_object (mm/slub.c:1515)
[  153.690228][ T5657]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  153.690361][ T5657]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.690537][ T5657]  free_to_partial_list (mm/slub.c:5631)
[  153.690670][ T5657]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.690805][ T5657]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.690940][ T5657]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  153.691126][ T5657]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  153.691263][ T5657]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  153.691444][ T5657]  ? ptlock_alloc (mm/memory.c:7721 (discriminator 7))
[  153.691577][ T5657]  ptlock_alloc (mm/memory.c:7721 (discriminator 7))
[  153.691677][ T5657]  pte_alloc_one (./include/linux/mm.h:3884 ./include/linux/mm.h:3933 ./include/asm-generic/pgalloc.h:79 arch/x86/mm/pgtable.c:18)
[  153.691857][ T5657]  __pte_alloc (mm/memory.c:453)
[  153.691956][ T5657]  ? pmd_install (mm/memory.c:445)
[  153.692137][ T5657]  ? do_fault_around (./include/linux/rcupdate.h:882 mm/memory.c:5961)
[  153.692272][ T5657]  ? mmap_region (mm/vma.c:2957)
[  153.692455][ T5657]  do_anonymous_page (mm/memory.c:5444 (discriminator 3))
[  153.692592][ T5657]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  153.692769][ T5657]  handle_pte_fault (mm/memory.c:6558)
[  153.692903][ T5657]  ? mm_get_unmapped_area_vmaflags (mm/mmap.c:820 (discriminator 1))
[  153.693122][ T5657]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.693257][ T5657]  ? do_numa_page.isra.0 (mm/memory.c:6319 (discriminator 1))
[  153.693437][ T5657]  ? mksaveddirty_shift (./arch/x86/include/asm/pgtable.h:373)
[  153.693574][ T5657]  __handle_mm_fault (mm/memory.c:6707)
[  153.693749][ T5657]  ? __pmd_alloc (./include/linux/mm.h:1762)
[  153.693883][ T5657]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.694071][ T5657]  handle_mm_fault (mm/memory.c:6876)
[  153.694207][ T5657]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.694387][ T5657]  do_user_addr_fault (arch/x86/mm/fault.c:1343)
[  153.694519][ T5657]  ? irqentry_enter (./include/linux/irq-entry-common.h:108 ./include/linux/irq-entry-common.h:293 kernel/entry/common.c:116)
[  153.694694][ T5657]  exc_page_fault (arch/x86/mm/fault.c:1483 arch/x86/mm/fault.c:1536)
[  153.694832][ T5657]  asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:595)
[  153.695009][ T5657] RIP: 0033:0x7f02db0f9fe1
[  153.695148][ T5657] Code: 00 00 49 89 ce 4c 01 1d 2d f3 16 00 41 83 e6 0f 0f 85 f3 05 00 00 45 31 c9 49 29 c8 48 89 0d ee ea 16 00 4d 01 c8 49 83 c8 01 <4c> 89 41 08 4c 01 35 04 f3 16 00 4d 85 e4 0f 84 21 fd ff ff 49 83
All code
========
   0:	00 00                	add    %al,(%rax)
   2:	49 89 ce             	mov    %rcx,%r14
   5:	4c 01 1d 2d f3 16 00 	add    %r11,0x16f32d(%rip)        # 0x16f339
   c:	41 83 e6 0f          	and    $0xf,%r14d
  10:	0f 85 f3 05 00 00    	jne    0x609
  16:	45 31 c9             	xor    %r9d,%r9d
  19:	49 29 c8             	sub    %rcx,%r8
  1c:	48 89 0d ee ea 16 00 	mov    %rcx,0x16eaee(%rip)        # 0x16eb11
  23:	4d 01 c8             	add    %r9,%r8
  26:	49 83 c8 01          	or     $0x1,%r8
  2a:*	4c 89 41 08          	mov    %r8,0x8(%rcx)		<-- trapping instruction
  2e:	4c 01 35 04 f3 16 00 	add    %r14,0x16f304(%rip)        # 0x16f339
  35:	4d 85 e4             	test   %r12,%r12
  38:	0f 84 21 fd ff ff    	je     0xfffffffffffffd5f
  3e:	49                   	rex.WB
  3f:	83                   	.byte 0x83

Code starting with the faulting instruction
===========================================
   0:	4c 89 41 08          	mov    %r8,0x8(%rcx)
   4:	4c 01 35 04 f3 16 00 	add    %r14,0x16f304(%rip)        # 0x16f30f
   b:	4d 85 e4             	test   %r12,%r12
   e:	0f 84 21 fd ff ff    	je     0xfffffffffffffd35
  14:	49                   	rex.WB
  15:	83                   	.byte 0x83
[  153.695711][ T5657] RSP: 002b:00007ffc26d4fbc0 EFLAGS: 00010202
[  153.695878][ T5657] RAX: 0000000010c57000 RBX: 00007f02db268ac0 RCX: 0000000010c36000
[  153.696127][ T5657] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  153.696326][ T5657] RBP: 00007ffc26d4fc20 R08: 0000000000021001 R09: 0000000000000000
[  153.696571][ T5657] R10: 00007f02db268ac8 R11: 0000000000021000 R12: 0000000000000000
[  153.696817][ T5657] R13: 00000000000001e0 R14: 0000000000000000 R15: 00007f02db268ac8
| [  153.791296][ T5668] ------------[ cut here ]------------
| [  153.791424][ T5668] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/5668
| [  153.791610][ T5668] Modules linked in:
| [  153.791967][ T5668] Tainted: [B]=BAD_PAGE, [W]=WARN
[  153.792099][ T5668] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  153.792257][ T5668] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  153.792388][ T5668] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  153.792830][ T5668] RSP: 0018:ffa00000089b7b18 EFLAGS: 00010046
[  153.792991][ T5668] RAX: 0000000000000220 RBX: ff1100000865bf20 RCX: 0000000000000001
[  153.793179][ T5668] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  153.793367][ T5668] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  153.793553][ T5668] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd40000002196c0
[  153.793741][ T5668] R13: ff1100000865bf40 R14: ff1100000103c940 R15: ffd40000002196c0
[  153.793929][ T5668] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[  153.794154][ T5668] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.794317][ T5668] CR2: 00007f5fcd61d000 CR3: 000000000d234004 CR4: 0000000000771ef0
[  153.794505][ T5668] PKRU: 55555554
[  153.794600][ T5668] Call Trace:
[  153.794699][ T5668]  <TASK>
[  153.794763][ T5668]  check_bytes_and_report.cold (mm/slub.c:1359)
[  153.794894][ T5668]  check_object (mm/slub.c:1507)
[  153.795028][ T5668]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  153.795153][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.795278][ T5668]  free_to_partial_list (mm/slub.c:5631)
[  153.795407][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.795537][ T5668]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.795662][ T5668]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  153.795792][ T5668]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  153.795917][ T5668]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  153.796047][ T5668]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.796171][ T5668]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.796299][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.796424][ T5668]  do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416)
[  153.796553][ T5668]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  153.796681][ T5668]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  153.796811][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.796934][ T5668]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  153.797064][ T5668]  ? __ia32_sys_open (fs/open.c:1427)
[  153.797192][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.797320][ T5668]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  153.797474][ T5668]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  153.797632][ T5668]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  153.797757][ T5668]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  153.797881][ T5668]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  153.798038][ T5668] RIP: 0033:0x7f5fcd71c6e5
[  153.798169][ T5668] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  153.798615][ T5668] RSP: 002b:00007ffecc73dad0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  153.798807][ T5668] RAX: ffffffffffffffda RBX: 00007ffecc73dd60 RCX: 00007f5fcd71c6e5
[  153.798998][ T5668] RDX: 0000000000080000 RSI: 00007ffecc73db50 RDI: 00000000ffffff9c
[  153.799181][ T5668] RBP: 00007ffecc73dad0 R08: 00007ffecc73dd47 R09: 0000000000000000
[  153.799368][ T5668] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffecc73db50
[  153.799551][ T5668] R13: 00007ffecc73db50 R14: 00007f5fcd6ee000 R15: 0000000000000000
| [  153.807938][ T5668] ------------[ cut here ]------------
| [  153.808062][ T5668] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/5668
| [  153.808247][ T5668] Modules linked in:
| [  153.808592][ T5668] Tainted: [B]=BAD_PAGE, [W]=WARN
[  153.808715][ T5668] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  153.808869][ T5668] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  153.809004][ T5668] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  153.809445][ T5668] RSP: 0018:ffa00000089b7b18 EFLAGS: 00010046
[  153.809605][ T5668] RAX: 0000000000000220 RBX: ff1100000865bb60 RCX: 0000000000000001
[  153.809794][ T5668] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  153.809986][ T5668] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  153.810178][ T5668] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd40000002196c0
[  153.810364][ T5668] R13: ff1100000865bb80 R14: ff1100000103c940 R15: ffd40000002196c0
[  153.810556][ T5668] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[  153.810777][ T5668] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.810940][ T5668] CR2: 00007f5fcd61d000 CR3: 000000000d234004 CR4: 0000000000771ef0
[  153.811129][ T5668] PKRU: 55555554
[  153.811225][ T5668] Call Trace:
[  153.811317][ T5668]  <TASK>
[  153.811384][ T5668]  check_bytes_and_report.cold (mm/slub.c:1359)
[  153.811511][ T5668]  check_object (mm/slub.c:1507)
[  153.811635][ T5668]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  153.811757][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.811881][ T5668]  free_to_partial_list (mm/slub.c:5631)
[  153.812006][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.812133][ T5668]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.812257][ T5668]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  153.812378][ T5668]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  153.812521][ T5668]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  153.812642][ T5668]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.812765][ T5668]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.812886][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.813024][ T5668]  do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416)
[  153.813149][ T5668]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  153.813274][ T5668]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  153.813404][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.813526][ T5668]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  153.813648][ T5668]  ? __ia32_sys_open (fs/open.c:1427)
[  153.813780][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.813901][ T5668]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  153.814057][ T5668]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  153.814214][ T5668]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  153.814335][ T5668]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  153.814456][ T5668]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  153.814614][ T5668] RIP: 0033:0x7f5fcd71c6e5
[  153.814743][ T5668] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  153.815189][ T5668] RSP: 002b:00007ffecc73dad0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  153.815380][ T5668] RAX: ffffffffffffffda RBX: 00007ffecc73dd60 RCX: 00007f5fcd71c6e5
[  153.815566][ T5668] RDX: 0000000000080000 RSI: 00007ffecc73db50 RDI: 00000000ffffff9c
[  153.815749][ T5668] RBP: 00007ffecc73dad0 R08: 00007ffecc73dd47 R09: 0000000000000000
[  153.815932][ T5668] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffecc73db50
[  153.816119][ T5668] R13: 00007ffecc73db50 R14: 00007f5fcd6ee000 R15: 0000000000000000
| [  153.825491][ T5668] ------------[ cut here ]------------
| [  153.825615][ T5668] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/5668
| [  153.825807][ T5668] Modules linked in:
| [  153.826167][ T5668] Tainted: [B]=BAD_PAGE, [W]=WARN
[  153.826302][ T5668] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  153.826465][ T5668] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  153.826597][ T5668] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  153.827058][ T5668] RSP: 0018:ffa00000089b7a60 EFLAGS: 00010046
[  153.827224][ T5668] RAX: 0000000000000220 RBX: ff1100000b039020 RCX: 0000000000000001
[  153.827416][ T5668] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  153.827608][ T5668] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  153.827797][ T5668] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd40000002c0e40
[  153.827999][ T5668] R13: ff1100000b039038 R14: ff1100000103c940 R15: ffd40000002c0e40
[  153.828193][ T5668] FS:  0000000000000000(0000) GS:ff110000a45ae000(0000) knlGS:0000000000000000
[  153.828415][ T5668] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.828575][ T5668] CR2: 00007f5fcd61d000 CR3: 000000000d234004 CR4: 0000000000771ef0
[  153.828775][ T5668] PKRU: 55555554
[  153.828870][ T5668] Call Trace:
[  153.828969][ T5668]  <TASK>
[  153.829039][ T5668]  check_bytes_and_report.cold (mm/slub.c:1359)
[  153.829170][ T5668]  check_object (mm/slub.c:1515)
[  153.829296][ T5668]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  153.829421][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.829553][ T5668]  free_to_partial_list (mm/slub.c:5631)
[  153.829677][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.829806][ T5668]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.829932][ T5668]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  153.830062][ T5668]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  153.830186][ T5668]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  153.830312][ T5668]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  153.830438][ T5668]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  153.830564][ T5668]  __create_object (mm/kmemleak.c:801)
[  153.830690][ T5668]  ? kasan_save_track (mm/kasan/common.c:78)
[  153.830815][ T5668]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  153.830939][ T5668]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.831073][ T5668]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.831197][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.831322][ T5668]  do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416)
[  153.831447][ T5668]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  153.831580][ T5668]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  153.831705][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.831829][ T5668]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  153.831956][ T5668]  ? __ia32_sys_open (fs/open.c:1427)
[  153.832084][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.832208][ T5668]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  153.832370][ T5668]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  153.832525][ T5668]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  153.832651][ T5668]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  153.832776][ T5668]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  153.832932][ T5668] RIP: 0033:0x7f5fcd71c6e5
[  153.833070][ T5668] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  153.833527][ T5668] RSP: 002b:00007ffecc73dad0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  153.833725][ T5668] RAX: ffffffffffffffda RBX: 00007ffecc73dd60 RCX: 00007f5fcd71c6e5
[  153.833918][ T5668] RDX: 0000000000080000 RSI: 00007ffecc73db50 RDI: 00000000ffffff9c
[  153.834114][ T5668] RBP: 00007ffecc73dad0 R08: 00007ffecc73dd47 R09: 0000000000000000
[  153.834304][ T5668] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffecc73db50
[  153.834497][ T5668] R13: 00007ffecc73db50 R14: 00007f5fcd6ee000 R15: 0000000000000000
| [  153.842641][ T5668] ------------[ cut here ]------------
| [  153.842765][ T5668] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/5668
| [  153.842956][ T5668] Modules linked in:
| [  153.843316][ T5668] Tainted: [B]=BAD_PAGE, [W]=WARN
[  153.843445][ T5668] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  153.843603][ T5668] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  153.843737][ T5668] Code: c7 10 64 aa 88 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 88          	adc    %ah,-0x78(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  153.844199][ T5668] RSP: 0018:ffa00000089b7a60 EFLAGS: 00010046
[  153.844359][ T5668] RAX: 0000000000000220 RBX: ff1100000c7307a0 RCX: 0000000000000001
[  153.844550][ T5668] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8a1b4660
[  153.844766][ T5668] RBP: ff1100000103c940 R08: ffffffff859bcf0a R09: 1ffffffff14368cc
[  153.844956][ T5668] R10: fffffbfff14368cd R11: fffffbfff14368cd R12: ffd400000031cc00
[  153.845159][ T5668] R13: ff1100000c7307b8 R14: ff1100000103c940 R15: ffd400000031cc00
[  153.845351][ T5668] FS:  0000000000000000(0000) GS:ff110000a44ae000(0000) knlGS:0000000000000000
[  153.845612][ T5668] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.845776][ T5668] CR2: 00007fbb448faf98 CR3: 000000000d234004 CR4: 0000000000771ef0
[  153.845987][ T5668] PKRU: 55555554
[  153.846087][ T5668] Call Trace:
[  153.846185][ T5668]  <TASK>
[  153.846249][ T5668]  check_bytes_and_report.cold (mm/slub.c:1359)
[  153.846388][ T5668]  check_object (mm/slub.c:1515)
[  153.846517][ T5668]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  153.846645][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.846779][ T5668]  free_to_partial_list (mm/slub.c:5631)
[  153.846906][ T5668]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.847036][ T5668]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  153.847173][ T5668]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  153.847302][ T5668]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  153.847428][ T5668]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  153.847560][ T5668]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  153.847688][ T5668]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  153.847813][ T5668]  __create_object (mm/kmemleak.c:801)
[  153.847945][ T5668]  ? kasan_save_track (mm/kasan/common.c:78)
[  153.848077][ T5668]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  153.848205][ T5668]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.848338][ T5668]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  153.848468][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.848595][ T5668]  do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416)
[  153.848720][ T5668]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  153.848852][ T5668]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  153.848983][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.849108][ T5668]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  153.849240][ T5668]  ? __ia32_sys_open (fs/open.c:1427)
[  153.849365][ T5668]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  153.849490][ T5668]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  153.849652][ T5668]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  153.849808][ T5668]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  153.849942][ T5668]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  153.850077][ T5668]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  153.850237][ T5668] RIP: 0033:0x7f5fcd71c6e5
[  153.850379][ T5668] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  153.850838][ T5668] RSP: 002b:00007ffecc73dad0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  153.851032][ T5668] RAX: ffffffffffffffda RBX: 00007ffecc73dd60 RCX: 00007f5fcd71c6e5
[  153.851228][ T5668] RDX: 0000000000080000 RSI: 00007ffecc73db50 RDI: 00000000ffffff9c
[  153.851419][ T5668] RBP: 00007ffecc73dad0 R08: 00007ffecc73dd47 R09: 0000000000000000
[  153.851615][ T5668] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffecc73db50


Finger prints:
print_report:kasan_report:bond_update_slave_arr:bond_enslave:do_set_master
object_err:check_object:free_debug_processing:free_to_partial_list:qlist_free_all