====================================== | [ 368.695445][ T8780] ================================================================== | [ 368.695666][ T8780] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196) | [ 368.695869][ T8780] Write of size 8 at addr ff11000009556b78 by task ip/8780 | [ 368.696068][ T8780] [ 368.696141][ T8780] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 368.696143][ T8780] Call Trace: [ 368.696145][ T8780] [ 368.696146][ T8780] dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120) [ 368.696152][ T8780] print_address_description.constprop.0 (mm/kasan/report.c:378) [ 368.696157][ T8780] print_report (mm/kasan/report.c:482) [ 368.696159][ T8780] ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54) [ 368.696163][ T8780] ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1)) [ 368.696165][ T8780] kasan_report (mm/kasan/report.c:595) [ 368.696168][ T8780] ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196) [ 368.696169][ T8780] ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196) [ 368.696172][ T8780] bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196) [ 368.696173][ T8780] ? __mutex_unlock_slowpath (./include/linux/preempt.h:500 (discriminator 1) kernel/locking/mutex.c:999 (discriminator 1)) [ 368.696177][ T8780] ? bond_slave_arr_work_rearm (drivers/net/bonding/bond_main.c:5078) [ 368.696179][ T8780] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554) [ 368.696183][ T8780] bond_enslave (drivers/net/bonding/bond_main.c:2337) [ 368.696186][ T8780] ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5218 (discriminator 9)) [ 368.696187][ T8780] ? find_held_lock (kernel/locking/lockdep.c:5367) [ 368.696190][ T8780] ? mark_usage (kernel/locking/lockdep.c:4690) [ 368.696192][ T8780] ? __lock_acquire (kernel/locking/lockdep.c:5254) [ 368.696194][ T8780] ? __lock_acquire (kernel/locking/lockdep.c:5254) [ 368.696197][ T8780] ? is_bpf_text_address (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) kernel/bpf/core.c:751 (discriminator 2)) [ 368.696201][ T8780] ? rtnl_af_lookup (net/core/rtnetlink.c:794 (discriminator 1)) [ 368.696205][ T8780] do_set_master (net/core/rtnetlink.c:3088) [ 368.696208][ T8780] do_setlink.isra.0 (net/core/rtnetlink.c:3290 (discriminator 1)) [ 368.696210][ T8780] ? rtnl_link_get_size (net/core/rtnetlink.c:747) [ 368.696212][ T8780] ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1)) [ 368.696216][ T8780] ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3)) [ 368.696219][ T8780] ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:388 kernel/rcu/update.c:380) [ 368.696222][ T8780] ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 2) lib/stackdepot.c:676 (discriminator 2)) [ 368.696225][ T8780] ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3)) [ 368.696226][ T8780] ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 368.696228][ T8780] ? validate_chain (kernel/locking/lockdep.c:3817 (discriminator 2) kernel/locking/lockdep.c:3837 (discriminator 2) kernel/locking/lockdep.c:3892 (discriminator 2)) [ 368.696230][ T8780] ? kasan_save_stack (mm/kasan/common.c:58) [ 368.696232][ T8780] ? kasan_save_stack (mm/kasan/common.c:57) [ 368.696233][ T8780] ? kasan_save_track (mm/kasan/common.c:78) [ 368.696235][ T8780] ? __lock_acquire (kernel/locking/lockdep.c:5254) [ 368.696237][ T8780] ? __netlink_dump_start (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) net/netlink/af_netlink.c:2433 (discriminator 1)) [ 368.696240][ T8780] ? ___sys_sendmsg (net/socket.c:2758 (discriminator 1)) [ 368.696243][ T8780] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2)) [ 368.696245][ T8780] ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240) [ 368.696247][ T8780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 368.696249][ T8780] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22)) [ 368.696251][ T8780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 368.696252][ T8780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 368.696254][ T8780] ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22)) [ 368.696256][ T8780] ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821) [ 368.696257][ T8780] ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1)) [ 368.696258][ T8780] ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240) [ 368.696261][ T8780] ? ww_mutex_lock (kernel/locking/mutex.c:934) [ 368.696262][ T8780] ? nla_get_range_signed (lib/nlattr.c:270) [ 368.696266][ T8780] ? __rtnl_newlink (net/core/rtnetlink.c:4089) [ 368.696269][ T8780] rtnl_newlink (net/core/rtnetlink.c:4241) [ 368.696272][ T8780] ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584) [ 368.696274][ T8780] ? __lock_acquire (kernel/locking/lockdep.c:5254) [ 368.696277][ T8780] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2)) [ 368.696279][ T8780] ? find_held_lock (kernel/locking/lockdep.c:5367) [ 368.696280][ T8780] ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584) [ 368.696282][ T8780] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554) [ 368.696285][ T8780] ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584) [ 368.696287][ T8780] rtnetlink_rcv_msg (net/core/rtnetlink.c:7158) [ 368.696290][ T8780] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 368.696292][ T8780] ? __lock_acquire (kernel/locking/lockdep.c:5254) [ 368.696294][ T8780] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2)) [ 368.696296][ T8780] ? find_held_lock (kernel/locking/lockdep.c:5367) [ 368.696298][ T8780] netlink_rcv_skb (net/netlink/af_netlink.c:2556) [ 368.696300][ T8780] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 368.696303][ T8780] ? netlink_ack (./include/linux/skbuff.h:2718) [ 368.696306][ T8780] ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2)) [ 368.696307][ T8780] ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2)) [ 368.696310][ T8780] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345) [ 368.696312][ T8780] ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1)) [ 368.696314][ T8780] ? __lock_acquire (kernel/locking/lockdep.c:5254) [ 368.696317][ T8780] netlink_sendmsg (net/netlink/af_netlink.c:1900) [ 368.696319][ T8780] ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7)) [ 368.696321][ T8780] ? __might_fault (mm/memory.c:7482 (discriminator 5)) [ 368.696325][ T8780] ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4)) [ 368.696327][ T8780] ? copy_msghdr_from_user (net/socket.c:2650) [ 368.696329][ T8780] ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405) [ 368.696330][ T8780] ? move_addr_to_kernel (net/socket.c:258) [ 368.696334][ T8780] ___sys_sendmsg (net/socket.c:2767) [ 368.696335][ T8780] ? copy_msghdr_from_user (net/socket.c:2619) [ 368.696341][ T8780] __sys_sendmsg (net/socket.c:2799) [ 368.696348][ T8780] ? __sys_sendmsg_sock (net/socket.c:2780) [ 368.696351][ T8780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 368.696353][ T8780] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 368.696356][ T8780] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 368.696358][ T8780] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 368.696360][ T8780] RIP: 0033:0x7fb281cc454e [ 368.696364][ T8780] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 368.696366][ T8780] RSP: 002b:00007ffc0febe5d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 368.696369][ T8780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb281cc454e [ 368.696371][ T8780] RDX: 0000000000000000 RSI: 00007ffc0febe680 RDI: 0000000000000005 [ 368.696372][ T8780] RBP: 00007ffc0febe5e0 R08: 0000000000000000 R09: 0000000000000000 [ 368.696373][ T8780] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a993d14 [ 368.696374][ T8780] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffc0febed50 | [ 374.926293][ T8815] ------------[ cut here ]------------ | [ 374.926452][ T8815] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/8815 | [ 374.926687][ T8815] Modules linked in: cls_matchall | [ 374.927178][ T8815] Tainted: [B]=BAD_PAGE [ 374.927299][ T8815] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 374.927501][ T8815] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 374.927675][ T8815] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 374.928246][ T8815] RSP: 0018:ffa000000c02f3c0 EFLAGS: 00010046 [ 374.928453][ T8815] RAX: 0000000000000020 RBX: ff1100000a7e30e0 RCX: 0000000000000001 [ 374.928690][ T8815] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 374.928938][ T8815] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 374.929187][ T8815] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd400000029f8c0 [ 374.929488][ T8815] R13: ff1100000a7e3100 R14: ff1100000103c940 R15: ffd400000029f8c0 [ 374.929785][ T8815] FS: 0000000000000000(0000) GS:ff1100009e6ae000(0000) knlGS:0000000000000000 [ 374.930116][ T8815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.930316][ T8815] CR2: 00007f5593f38000 CR3: 000000000c8a2001 CR4: 0000000000771ef0 [ 374.930609][ T8815] PKRU: 55555554 [ 374.930782][ T8815] Call Trace: [ 374.930902][ T8815] [ 374.930981][ T8815] check_bytes_and_report.cold (mm/slub.c:1359) [ 374.931194][ T8815] check_object (mm/slub.c:1507) [ 374.931349][ T8815] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 374.931557][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.931713][ T8815] free_to_partial_list (mm/slub.c:5631) [ 374.931925][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.932086][ T8815] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.932293][ T8815] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 374.932456][ T8815] __kasan_slab_alloc (mm/kasan/common.c:350) [ 374.932660][ T8815] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 374.932815][ T8815] ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 374.933027][ T8815] fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 374.933179][ T8815] fuse_get_req (fs/fuse/dev.c:133) [ 374.933391][ T8815] ? kasan_unpoison (mm/kasan/shadow.c:146 mm/kasan/shadow.c:178) [ 374.933542][ T8815] ? fuse_dev_open (fs/fuse/dev.c:1687) [ 374.933746][ T8815] ? __kasan_unpoison_pages (mm/kasan/common.c:140 (discriminator 2)) [ 374.933899][ T8815] ? post_alloc_hook (./include/linux/kasan.h:126 mm/page_alloc.c:1855) [ 374.934115][ T8815] ? from_vfsuid (fs/mnt_idmapping.c:165) [ 374.934266][ T8815] ? fuse_invalid_attr (fs/fuse/dir.c:559 (discriminator 2)) [ 374.934472][ T8815] fuse_chan_send (fs/fuse/dev.c:833) [ 374.934624][ T8815] fuse_readlink_folio (fs/fuse/fuse_i.h:1012 fs/fuse/dir.c:1847) [ 374.934828][ T8815] ? fuse_invalidate_attr_mask (fs/fuse/dir.c:314) [ 374.935017][ T8815] ? __alloc_pages_slowpath.constprop.0 (mm/page_alloc.c:4857 (discriminator 1)) [ 374.935257][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.935413][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 374.935622][ T8815] fuse_get_link (fs/fuse/dir.c:1886) [ 374.935773][ T8815] ovl_get_link (fs/overlayfs/inode.c:348 (discriminator 1) fs/overlayfs/inode.c:340 (discriminator 1)) [ 374.935945][ T8815] pick_link (fs/namei.c:2068) [ 374.936061][ T8815] step_into_slowpath (fs/namei.c:2127) [ 374.936263][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 374.936422][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.936622][ T8815] ? pick_link (fs/namei.c:798 (discriminator 12)) [ 374.936775][ T8815] ? ovl_dentry_revalidate_common (fs/overlayfs/super.c:150) [ 374.937019][ T8815] ? lookup_fast (fs/namei.c:1035 fs/namei.c:1031 fs/namei.c:1881) [ 374.937169][ T8815] open_last_lookups (fs/namei.c:2152 fs/namei.c:4780) [ 374.937377][ T8815] path_openat (fs/namei.c:4997) [ 374.937531][ T8815] ? kernel_tmpfile_open (fs/namei.c:4942) [ 374.937736][ T8815] ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1)) [ 374.937893][ T8815] do_file_open (fs/namei.c:5029) [ 374.938116][ T8815] ? path_openat (./include/linux/mount.h:68 (discriminator 3)) [ 374.938271][ T8815] ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1)) [ 374.938479][ T8815] ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610) [ 374.938595][ T8815] do_sys_openat2 (fs/open.c:1417 (discriminator 5)) [ 374.938748][ T8815] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 374.938900][ T8815] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 374.939099][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.939252][ T8815] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 374.939455][ T8815] ? __ia32_sys_open (fs/open.c:1427) [ 374.939605][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.939806][ T8815] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 374.939995][ T8815] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 374.940232][ T8815] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 374.940386][ T8815] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 374.940591][ T8815] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 374.940831][ T8815] RIP: 0033:0x7f55942676e5 [ 374.940992][ T8815] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00 All code ======== 0: 48 89 e5 mov %rsp,%rbp 3: 48 89 55 e0 mov %rdx,-0x20(%rbp) 7: 41 83 e2 40 and $0x40,%r10d b: 75 28 jne 0x35 d: 89 f2 mov %esi,%edx f: f7 d2 not %edx 11: 81 e2 00 00 41 00 and $0x410000,%edx 17: 74 1c je 0x35 19: 89 f2 mov %esi,%edx 1b: bf 9c ff ff ff mov $0xffffff9c,%edi 20: 48 89 c6 mov %rax,%rsi 23: b8 01 01 00 00 mov $0x101,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 23 ja 0x55 32: 5d pop %rbp 33: c3 ret 34: 90 nop 35: 48 8d 4d 10 lea 0x10(%rbp),%rcx 39: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 23 ja 0x2b 8: 5d pop %rbp 9: c3 ret a: 90 nop b: 48 8d 4d 10 lea 0x10(%rbp),%rcx f: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) [ 374.941645][ T8815] RSP: 002b:00007ffd4395b810 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 374.941943][ T8815] RAX: ffffffffffffffda RBX: 00007ffd4395baa0 RCX: 00007f55942676e5 [ 374.942177][ T8815] RDX: 0000000000080000 RSI: 00007ffd4395b890 RDI: 00000000ffffff9c [ 374.942467][ T8815] RBP: 00007ffd4395b810 R08: 00007ffd4395ba87 R09: 0000000000000000 [ 374.942752][ T8815] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd4395b890 [ 374.943038][ T8815] R13: 00007ffd4395b890 R14: 00007f5594239000 R15: 0000000000000000 | [ 374.954624][ T8815] ------------[ cut here ]------------ | [ 374.954839][ T8815] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/8815 | [ 374.955085][ T8815] Modules linked in: cls_matchall | [ 374.955650][ T8815] Tainted: [B]=BAD_PAGE, [W]=WARN [ 374.955800][ T8815] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 374.956056][ T8815] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 374.956259][ T8815] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 374.956852][ T8815] RSP: 0018:ffa000000c02f3c0 EFLAGS: 00010046 [ 374.957098][ T8815] RAX: 0000000000000220 RBX: ff1100000a7e31a0 RCX: 0000000000000001 [ 374.957378][ T8815] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 374.957609][ T8815] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 374.957890][ T8815] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd400000029f8c0 [ 374.958168][ T8815] R13: ff1100000a7e31c0 R14: ff1100000103c940 R15: ffd400000029f8c0 [ 374.958456][ T8815] FS: 0000000000000000(0000) GS:ff1100009e6ae000(0000) knlGS:0000000000000000 [ 374.958774][ T8815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.958970][ T8815] CR2: 00007f5593f38000 CR3: 000000000c8a2001 CR4: 0000000000771ef0 [ 374.959246][ T8815] PKRU: 55555554 [ 374.959358][ T8815] Call Trace: [ 374.959523][ T8815] [ 374.959598][ T8815] check_bytes_and_report.cold (mm/slub.c:1359) [ 374.959750][ T8815] check_object (mm/slub.c:1507) [ 374.959961][ T8815] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 374.960119][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.960314][ T8815] free_to_partial_list (mm/slub.c:5631) [ 374.960463][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.960655][ T8815] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.960804][ T8815] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 374.961015][ T8815] __kasan_slab_alloc (mm/kasan/common.c:350) [ 374.961167][ T8815] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 374.961359][ T8815] ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 374.961508][ T8815] fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 374.961703][ T8815] fuse_get_req (fs/fuse/dev.c:133) [ 374.961853][ T8815] ? kasan_unpoison (mm/kasan/shadow.c:146 mm/kasan/shadow.c:178) [ 374.962049][ T8815] ? fuse_dev_open (fs/fuse/dev.c:1687) [ 374.962196][ T8815] ? __kasan_unpoison_pages (mm/kasan/common.c:140 (discriminator 2)) [ 374.962392][ T8815] ? post_alloc_hook (./include/linux/kasan.h:126 mm/page_alloc.c:1855) [ 374.962541][ T8815] ? from_vfsuid (fs/mnt_idmapping.c:165) [ 374.962737][ T8815] ? fuse_invalid_attr (fs/fuse/dir.c:559 (discriminator 2)) [ 374.962888][ T8815] fuse_chan_send (fs/fuse/dev.c:833) [ 374.963084][ T8815] fuse_readlink_folio (fs/fuse/fuse_i.h:1012 fs/fuse/dir.c:1847) [ 374.963232][ T8815] ? fuse_invalidate_attr_mask (fs/fuse/dir.c:314) [ 374.963462][ T8815] ? __alloc_pages_slowpath.constprop.0 (mm/page_alloc.c:4857 (discriminator 1)) [ 374.963691][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.963840][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 374.964045][ T8815] fuse_get_link (fs/fuse/dir.c:1886) [ 374.964192][ T8815] ovl_get_link (fs/overlayfs/inode.c:348 (discriminator 1) fs/overlayfs/inode.c:340 (discriminator 1)) [ 374.964351][ T8815] pick_link (fs/namei.c:2068) [ 374.964466][ T8815] step_into_slowpath (fs/namei.c:2127) [ 374.964613][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 374.964806][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.964957][ T8815] ? pick_link (fs/namei.c:798 (discriminator 12)) [ 374.965160][ T8815] ? ovl_dentry_revalidate_common (fs/overlayfs/super.c:150) [ 374.965397][ T8815] ? lookup_fast (fs/namei.c:1035 fs/namei.c:1031 fs/namei.c:1881) [ 374.965546][ T8815] open_last_lookups (fs/namei.c:2152 fs/namei.c:4780) [ 374.965743][ T8815] path_openat (fs/namei.c:4997) [ 374.965893][ T8815] ? kernel_tmpfile_open (fs/namei.c:4942) [ 374.966088][ T8815] ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1)) [ 374.966233][ T8815] do_file_open (fs/namei.c:5029) [ 374.966431][ T8815] ? path_openat (./include/linux/mount.h:68 (discriminator 3)) [ 374.966582][ T8815] ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1)) [ 374.966776][ T8815] ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610) [ 374.966891][ T8815] do_sys_openat2 (fs/open.c:1417 (discriminator 5)) [ 374.967036][ T8815] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 374.967230][ T8815] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 374.967382][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.967575][ T8815] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 374.967720][ T8815] ? __ia32_sys_open (fs/open.c:1427) [ 374.967919][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.968066][ T8815] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 374.968300][ T8815] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 374.968535][ T8815] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 374.968684][ T8815] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 374.968890][ T8815] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 374.969092][ T8815] RIP: 0033:0x7f55942676e5 [ 374.969304][ T8815] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00 All code ======== 0: 48 89 e5 mov %rsp,%rbp 3: 48 89 55 e0 mov %rdx,-0x20(%rbp) 7: 41 83 e2 40 and $0x40,%r10d b: 75 28 jne 0x35 d: 89 f2 mov %esi,%edx f: f7 d2 not %edx 11: 81 e2 00 00 41 00 and $0x410000,%edx 17: 74 1c je 0x35 19: 89 f2 mov %esi,%edx 1b: bf 9c ff ff ff mov $0xffffff9c,%edi 20: 48 89 c6 mov %rax,%rsi 23: b8 01 01 00 00 mov $0x101,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 23 ja 0x55 32: 5d pop %rbp 33: c3 ret 34: 90 nop 35: 48 8d 4d 10 lea 0x10(%rbp),%rcx 39: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 23 ja 0x2b 8: 5d pop %rbp 9: c3 ret a: 90 nop b: 48 8d 4d 10 lea 0x10(%rbp),%rcx f: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) [ 374.969962][ T8815] RSP: 002b:00007ffd4395b810 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 374.970188][ T8815] RAX: ffffffffffffffda RBX: 00007ffd4395baa0 RCX: 00007f55942676e5 [ 374.970460][ T8815] RDX: 0000000000080000 RSI: 00007ffd4395b890 RDI: 00000000ffffff9c [ 374.970734][ T8815] RBP: 00007ffd4395b810 R08: 00007ffd4395ba87 R09: 0000000000000000 [ 374.971026][ T8815] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd4395b890 [ 374.971245][ T8815] R13: 00007ffd4395b890 R14: 00007f5594239000 R15: 0000000000000000 | [ 374.982857][ T8815] ------------[ cut here ]------------ | [ 374.983001][ T8815] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: ip/8815 | [ 374.983212][ T8815] Modules linked in: cls_matchall | [ 374.983660][ T8815] Tainted: [B]=BAD_PAGE, [W]=WARN [ 374.983807][ T8815] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 374.983988][ T8815] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 374.984139][ T8815] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 374.984655][ T8815] RSP: 0018:ffa000000c02f3d0 EFLAGS: 00010046 [ 374.984840][ T8815] RAX: 0000000000000220 RBX: ff11000009556b60 RCX: 0000000000000001 [ 374.985055][ T8815] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 374.985273][ T8815] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 374.985491][ T8815] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000255580 [ 374.985708][ T8815] R13: ff11000009556b78 R14: ff1100000103c940 R15: ffd4000000255580 [ 374.985927][ T8815] FS: 0000000000000000(0000) GS:ff1100009e72e000(0000) knlGS:0000000000000000 [ 374.986179][ T8815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.986362][ T8815] CR2: 000055dd56531118 CR3: 000000000c8a2003 CR4: 0000000000771ef0 [ 374.986581][ T8815] PKRU: 55555554 [ 374.986691][ T8815] Call Trace: [ 374.986797][ T8815] [ 374.986869][ T8815] check_bytes_and_report.cold (mm/slub.c:1359) [ 374.987020][ T8815] check_object (mm/slub.c:1515) [ 374.987162][ T8815] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 374.987303][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.987450][ T8815] free_to_partial_list (mm/slub.c:5631) [ 374.987593][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.987736][ T8815] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 374.987879][ T8815] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 374.988021][ T8815] __kasan_slab_alloc (mm/kasan/common.c:350) [ 374.988166][ T8815] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 374.988308][ T8815] ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 374.988453][ T8815] fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 374.988594][ T8815] fuse_get_req (fs/fuse/dev.c:133) [ 374.988743][ T8815] ? kasan_unpoison (mm/kasan/shadow.c:146 mm/kasan/shadow.c:178) [ 374.988890][ T8815] ? fuse_dev_open (fs/fuse/dev.c:1687) [ 374.989034][ T8815] ? __kasan_unpoison_pages (mm/kasan/common.c:140 (discriminator 2)) [ 374.989177][ T8815] ? post_alloc_hook (./include/linux/kasan.h:126 mm/page_alloc.c:1855) [ 374.989321][ T8815] ? from_vfsuid (fs/mnt_idmapping.c:165) [ 374.989467][ T8815] ? fuse_invalid_attr (fs/fuse/dir.c:559 (discriminator 2)) [ 374.989610][ T8815] fuse_chan_send (fs/fuse/dev.c:833) [ 374.989751][ T8815] fuse_readlink_folio (fs/fuse/fuse_i.h:1012 fs/fuse/dir.c:1847) [ 374.989897][ T8815] ? fuse_invalidate_attr_mask (fs/fuse/dir.c:314) [ 374.990074][ T8815] ? __alloc_pages_slowpath.constprop.0 (mm/page_alloc.c:4857 (discriminator 1)) [ 374.990250][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.990399][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 374.990542][ T8815] fuse_get_link (fs/fuse/dir.c:1886) [ 374.990683][ T8815] ovl_get_link (fs/overlayfs/inode.c:348 (discriminator 1) fs/overlayfs/inode.c:340 (discriminator 1)) [ 374.990790][ T8815] pick_link (fs/namei.c:2068) [ 374.990900][ T8815] step_into_slowpath (fs/namei.c:2127) [ 374.991044][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 374.991184][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.991324][ T8815] ? pick_link (fs/namei.c:798 (discriminator 12)) [ 374.991471][ T8815] ? ovl_dentry_revalidate_common (fs/overlayfs/super.c:150) [ 374.991650][ T8815] ? lookup_fast (fs/namei.c:1035 fs/namei.c:1031 fs/namei.c:1881) [ 374.991793][ T8815] open_last_lookups (fs/namei.c:2152 fs/namei.c:4780) [ 374.991937][ T8815] path_openat (fs/namei.c:4997) [ 374.992081][ T8815] ? kernel_tmpfile_open (fs/namei.c:4942) [ 374.992223][ T8815] ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1)) [ 374.992366][ T8815] do_file_open (fs/namei.c:5029) [ 374.992509][ T8815] ? path_openat (./include/linux/mount.h:68 (discriminator 3)) [ 374.992652][ T8815] ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1)) [ 374.992797][ T8815] ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610) [ 374.992916][ T8815] do_sys_openat2 (fs/open.c:1417 (discriminator 5)) [ 374.993073][ T8815] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 374.993219][ T8815] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 374.993363][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.993511][ T8815] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 374.993659][ T8815] ? __ia32_sys_open (fs/open.c:1427) [ 374.993809][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 374.993966][ T8815] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 374.994150][ T8815] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 374.994325][ T8815] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 374.994482][ T8815] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 374.994625][ T8815] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 374.994799][ T8815] RIP: 0033:0x7f55942676e5 [ 374.994949][ T8815] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00 All code ======== 0: 48 89 e5 mov %rsp,%rbp 3: 48 89 55 e0 mov %rdx,-0x20(%rbp) 7: 41 83 e2 40 and $0x40,%r10d b: 75 28 jne 0x35 d: 89 f2 mov %esi,%edx f: f7 d2 not %edx 11: 81 e2 00 00 41 00 and $0x410000,%edx 17: 74 1c je 0x35 19: 89 f2 mov %esi,%edx 1b: bf 9c ff ff ff mov $0xffffff9c,%edi 20: 48 89 c6 mov %rax,%rsi 23: b8 01 01 00 00 mov $0x101,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 23 ja 0x55 32: 5d pop %rbp 33: c3 ret 34: 90 nop 35: 48 8d 4d 10 lea 0x10(%rbp),%rcx 39: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 23 ja 0x2b 8: 5d pop %rbp 9: c3 ret a: 90 nop b: 48 8d 4d 10 lea 0x10(%rbp),%rcx f: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) [ 374.995462][ T8815] RSP: 002b:00007ffd4395b810 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 374.995680][ T8815] RAX: ffffffffffffffda RBX: 00007ffd4395baa0 RCX: 00007f55942676e5 [ 374.995895][ T8815] RDX: 0000000000080000 RSI: 00007ffd4395b890 RDI: 00000000ffffff9c [ 374.996110][ T8815] RBP: 00007ffd4395b810 R08: 00007ffd4395ba87 R09: 0000000000000000 [ 374.996329][ T8815] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd4395b890 [ 374.996546][ T8815] R13: 00007ffd4395b890 R14: 00007f5594239000 R15: 0000000000000000 | [ 375.006934][ T8815] ------------[ cut here ]------------ | [ 375.007094][ T8815] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: ip/8815 | [ 375.007325][ T8815] Modules linked in: cls_matchall | [ 375.007774][ T8815] Tainted: [B]=BAD_PAGE, [W]=WARN [ 375.007920][ T8815] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 375.008102][ T8815] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 375.008252][ T8815] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 375.008767][ T8815] RSP: 0018:ffa000000c02f3d0 EFLAGS: 00010046 [ 375.008948][ T8815] RAX: 0000000000000220 RBX: ff11000009556560 RCX: 0000000000000001 [ 375.009164][ T8815] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 375.009384][ T8815] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 375.009599][ T8815] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000255580 [ 375.009812][ T8815] R13: ff11000009556578 R14: ff1100000103c940 R15: ffd4000000255580 [ 375.010031][ T8815] FS: 0000000000000000(0000) GS:ff1100009e72e000(0000) knlGS:0000000000000000 [ 375.010281][ T8815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.010464][ T8815] CR2: 000055dd56531118 CR3: 000000000c8a2003 CR4: 0000000000771ef0 [ 375.010678][ T8815] PKRU: 55555554 [ 375.010786][ T8815] Call Trace: [ 375.010894][ T8815] [ 375.010966][ T8815] check_bytes_and_report.cold (mm/slub.c:1359) [ 375.011112][ T8815] check_object (mm/slub.c:1515) [ 375.011256][ T8815] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 375.011400][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 375.011542][ T8815] free_to_partial_list (mm/slub.c:5631) [ 375.011685][ T8815] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 375.011829][ T8815] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 375.011970][ T8815] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 375.012113][ T8815] __kasan_slab_alloc (mm/kasan/common.c:350) [ 375.012255][ T8815] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 375.012400][ T8815] ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 375.012542][ T8815] fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 375.012686][ T8815] fuse_get_req (fs/fuse/dev.c:133) [ 375.012828][ T8815] ? kasan_unpoison (mm/kasan/shadow.c:146 mm/kasan/shadow.c:178) [ 375.012969][ T8815] ? fuse_dev_open (fs/fuse/dev.c:1687) [ 375.013113][ T8815] ? __kasan_unpoison_pages (mm/kasan/common.c:140 (discriminator 2)) [ 375.013254][ T8815] ? post_alloc_hook (./include/linux/kasan.h:126 mm/page_alloc.c:1855) [ 375.013401][ T8815] ? from_vfsuid (fs/mnt_idmapping.c:165) [ 375.013544][ T8815] ? fuse_invalid_attr (fs/fuse/dir.c:559 (discriminator 2)) [ 375.013685][ T8815] fuse_chan_send (fs/fuse/dev.c:833) [ 375.013826][ T8815] fuse_readlink_folio (fs/fuse/fuse_i.h:1012 fs/fuse/dir.c:1847) [ 375.013970][ T8815] ? fuse_invalidate_attr_mask (fs/fuse/dir.c:314) [ 375.014144][ T8815] ? __alloc_pages_slowpath.constprop.0 (mm/page_alloc.c:4857 (discriminator 1)) [ 375.014321][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 375.014468][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 375.014610][ T8815] fuse_get_link (fs/fuse/dir.c:1886) [ 375.014750][ T8815] ovl_get_link (fs/overlayfs/inode.c:348 (discriminator 1) fs/overlayfs/inode.c:340 (discriminator 1)) [ 375.014858][ T8815] pick_link (fs/namei.c:2068) [ 375.014965][ T8815] step_into_slowpath (fs/namei.c:2127) [ 375.015107][ T8815] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 375.015247][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 375.015396][ T8815] ? pick_link (fs/namei.c:798 (discriminator 12)) [ 375.015537][ T8815] ? ovl_dentry_revalidate_common (fs/overlayfs/super.c:150) [ 375.015716][ T8815] ? lookup_fast (fs/namei.c:1035 fs/namei.c:1031 fs/namei.c:1881) [ 375.015856][ T8815] open_last_lookups (fs/namei.c:2152 fs/namei.c:4780) [ 375.015996][ T8815] path_openat (fs/namei.c:4997) [ 375.016136][ T8815] ? kernel_tmpfile_open (fs/namei.c:4942) [ 375.016298][ T8815] ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1)) [ 375.016444][ T8815] do_file_open (fs/namei.c:5029) [ 375.016584][ T8815] ? path_openat (./include/linux/mount.h:68 (discriminator 3)) [ 375.016727][ T8815] ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1)) [ 375.016871][ T8815] ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610) [ 375.016982][ T8815] do_sys_openat2 (fs/open.c:1417 (discriminator 5)) [ 375.017123][ T8815] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 375.017264][ T8815] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 375.017411][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 375.017552][ T8815] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 375.017692][ T8815] ? __ia32_sys_open (fs/open.c:1427) [ 375.017831][ T8815] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 375.017974][ T8815] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 375.018147][ T8815] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 375.018319][ T8815] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 375.018461][ T8815] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 375.018602][ T8815] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 375.018777][ T8815] RIP: 0033:0x7f55942676e5 [ 375.018926][ T8815] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00 All code ======== 0: 48 89 e5 mov %rsp,%rbp 3: 48 89 55 e0 mov %rdx,-0x20(%rbp) 7: 41 83 e2 40 and $0x40,%r10d b: 75 28 jne 0x35 d: 89 f2 mov %esi,%edx f: f7 d2 not %edx 11: 81 e2 00 00 41 00 and $0x410000,%edx 17: 74 1c je 0x35 19: 89 f2 mov %esi,%edx 1b: bf 9c ff ff ff mov $0xffffff9c,%edi 20: 48 89 c6 mov %rax,%rsi 23: b8 01 01 00 00 mov $0x101,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 23 ja 0x55 32: 5d pop %rbp 33: c3 ret 34: 90 nop 35: 48 8d 4d 10 lea 0x10(%rbp),%rcx 39: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 23 ja 0x2b 8: 5d pop %rbp 9: c3 ret a: 90 nop b: 48 8d 4d 10 lea 0x10(%rbp),%rcx f: c7 45 b8 10 00 00 00 movl $0x10,-0x48(%rbp) [ 375.019433][ T8815] RSP: 002b:00007ffd4395b810 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 375.019647][ T8815] RAX: ffffffffffffffda RBX: 00007ffd4395baa0 RCX: 00007f55942676e5 [ 375.019860][ T8815] RDX: 0000000000080000 RSI: 00007ffd4395b890 RDI: 00000000ffffff9c [ 375.020079][ T8815] RBP: 00007ffd4395b810 R08: 00007ffd4395ba87 R09: 0000000000000000 [ 375.020294][ T8815] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd4395b890 [ 375.020509][ T8815] R13: 00007ffd4395b890 R14: 00007f5594239000 R15: 0000000000000000 | [ 388.111844][ T8893] ------------[ cut here ]------------ | [ 388.111998][ T8893] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: bond_macvlan_ip/8893 | [ 388.112279][ T8893] Modules linked in: cls_matchall | [ 388.112822][ T8893] Tainted: [B]=BAD_PAGE, [W]=WARN [ 388.112958][ T8893] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 388.113167][ T8893] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 388.113306][ T8893] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 388.113885][ T8893] RSP: 0018:ffa0000009d0fc70 EFLAGS: 00010046 [ 388.114093][ T8893] RAX: 0000000000000220 RBX: ff110000085e00e0 RCX: 0000000000000001 [ 388.114338][ T8893] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 388.114536][ T8893] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 388.114782][ T8893] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000217800 [ 388.115031][ T8893] R13: ff110000085e00f8 R14: ff1100000103c940 R15: ffd4000000217800 [ 388.115272][ T8893] FS: 00007f21fc4e3b80(0000) GS:ff1100009e72e000(0000) knlGS:0000000000000000 [ 388.115516][ T8893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.115731][ T8893] CR2: 000055dd565206d8 CR3: 000000000d453003 CR4: 0000000000771ef0 [ 388.115997][ T8893] PKRU: 55555554 [ 388.116111][ T8893] Call Trace: [ 388.116259][ T8893] [ 388.116325][ T8893] check_bytes_and_report.cold (mm/slub.c:1359) [ 388.116463][ T8893] check_object (mm/slub.c:1515) [ 388.116633][ T8893] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 388.116769][ T8893] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 388.116948][ T8893] free_to_partial_list (mm/slub.c:5631) [ 388.117078][ T8893] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 388.117254][ T8893] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 388.117385][ T8893] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 388.117562][ T8893] __kasan_slab_alloc (mm/kasan/common.c:350) [ 388.117692][ T8893] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 388.117867][ T8893] ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 388.118002][ T8893] do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 388.118173][ T8893] __x64_sys_execve (./include/linux/fs.h:2557 ./include/linux/fs.h:2584 fs/exec.c:2017 fs/exec.c:2012 fs/exec.c:2012) [ 388.118303][ T8893] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 388.118485][ T8893] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 388.118617][ T8893] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 388.118785][ T8893] RIP: 0033:0x7f21fc5a5f4b [ 388.118928][ T8893] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48 All code ======== 0: 0f 1e fa nop %edx 3: 48 8b 05 75 e0 12 00 mov 0x12e075(%rip),%rax # 0x12e07f a: 48 8b 10 mov (%rax),%rdx d: e9 0d 00 00 00 jmp 0x1f 12: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 19: 00 00 00 1c: 0f 1f 00 nopl (%rax) 1f: f3 0f 1e fa endbr64 23: b8 3b 00 00 00 mov $0x3b,%eax 28: 0f 05 syscall 2a:* 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 30: 73 01 jae 0x33 32: c3 ret 33: 48 8b 0d 7d de 12 00 mov 0x12de7d(%rip),%rcx # 0x12deb7 3a: f7 d8 neg %eax 3c: 64 89 01 mov %eax,%fs:(%rcx) 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax 6: 73 01 jae 0x9 8: c3 ret 9: 48 8b 0d 7d de 12 00 mov 0x12de7d(%rip),%rcx # 0x12de8d 10: f7 d8 neg %eax 12: 64 89 01 mov %eax,%fs:(%rcx) 15: 48 rex.W [ 388.119493][ T8893] RSP: 002b:00007fff947f4538 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 388.119736][ T8893] RAX: ffffffffffffffda RBX: 000055dd56522420 RCX: 00007f21fc5a5f4b [ 388.119984][ T8893] RDX: 000055dd56498f00 RSI: 000055dd565206d0 RDI: 000055dd56522420 [ 388.120180][ T8893] RBP: 00007fff947f4620 R08: 000055dd564297c0 R09: 0000000000000020 [ 388.120419][ T8893] R10: 0000000000000021 R11: 0000000000000202 R12: 000055dd56522420 [ 388.120662][ T8893] R13: 0000000000000000 R14: 000055dd565206d0 R15: 000055dd56498f00 | [ 388.130140][ T8893] ------------[ cut here ]------------ | [ 388.130268][ T8893] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: bond_macvlan_ip/8893 | [ 388.130499][ T8893] Modules linked in: cls_matchall | [ 388.130924][ T8893] Tainted: [B]=BAD_PAGE, [W]=WARN [ 388.131054][ T8893] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 388.131216][ T8893] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 388.131348][ T8893] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 388.131806][ T8893] RSP: 0018:ffa0000009d0fc70 EFLAGS: 00010046 [ 388.132234][ T8893] RAX: 0000000000000220 RBX: ff110000085e0c20 RCX: 0000000000000001 [ 388.132431][ T8893] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 388.132627][ T8893] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 388.132828][ T8893] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000217800 [ 388.133022][ T8893] R13: ff110000085e0c38 R14: ff1100000103c940 R15: ffd4000000217800 [ 388.133219][ T8893] FS: 00007f21fc4e3b80(0000) GS:ff1100009e72e000(0000) knlGS:0000000000000000 [ 388.133453][ T8893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.133618][ T8893] CR2: 000055dd565206d8 CR3: 000000000d453003 CR4: 0000000000771ef0 [ 388.133817][ T8893] PKRU: 55555554 [ 388.133916][ T8893] Call Trace: [ 388.134012][ T8893] [ 388.134081][ T8893] check_bytes_and_report.cold (mm/slub.c:1359) [ 388.134208][ T8893] check_object (mm/slub.c:1515) [ 388.134338][ T8893] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 388.134469][ T8893] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 388.134597][ T8893] free_to_partial_list (mm/slub.c:5631) [ 388.134724][ T8893] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 388.134856][ T8893] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 388.134986][ T8893] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 388.135114][ T8893] __kasan_slab_alloc (mm/kasan/common.c:350) [ 388.135241][ T8893] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 388.135370][ T8893] ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 388.135504][ T8893] do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 388.135631][ T8893] __x64_sys_execve (./include/linux/fs.h:2557 ./include/linux/fs.h:2584 fs/exec.c:2017 fs/exec.c:2012 fs/exec.c:2012) [ 388.135759][ T8893] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 388.135889][ T8893] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 388.136029][ T8893] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 388.136187][ T8893] RIP: 0033:0x7f21fc5a5f4b [ 388.136321][ T8893] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48 All code ======== 0: 0f 1e fa nop %edx 3: 48 8b 05 75 e0 12 00 mov 0x12e075(%rip),%rax # 0x12e07f a: 48 8b 10 mov (%rax),%rdx d: e9 0d 00 00 00 jmp 0x1f 12: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 19: 00 00 00 1c: 0f 1f 00 nopl (%rax) 1f: f3 0f 1e fa endbr64 23: b8 3b 00 00 00 mov $0x3b,%eax 28: 0f 05 syscall 2a:* 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 30: 73 01 jae 0x33 32: c3 ret 33: 48 8b 0d 7d de 12 00 mov 0x12de7d(%rip),%rcx # 0x12deb7 3a: f7 d8 neg %eax 3c: 64 89 01 mov %eax,%fs:(%rcx) 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax 6: 73 01 jae 0x9 8: c3 ret 9: 48 8b 0d 7d de 12 00 mov 0x12de7d(%rip),%rcx # 0x12de8d 10: f7 d8 neg %eax 12: 64 89 01 mov %eax,%fs:(%rcx) 15: 48 rex.W [ 388.136786][ T8893] RSP: 002b:00007fff947f4538 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 388.136984][ T8893] RAX: ffffffffffffffda RBX: 000055dd56522420 RCX: 00007f21fc5a5f4b [ 388.137177][ T8893] RDX: 000055dd56498f00 RSI: 000055dd565206d0 RDI: 000055dd56522420 [ 388.137369][ T8893] RBP: 00007fff947f4620 R08: 000055dd564297c0 R09: 0000000000000020 [ 388.137569][ T8893] R10: 0000000000000021 R11: 0000000000000202 R12: 000055dd56522420 [ 388.137769][ T8893] R13: 0000000000000000 R14: 000055dd565206d0 R15: 000055dd56498f00 | [ 393.100193][ T8922] ------------[ cut here ]------------ | [ 393.100328][ T8922] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/8922 | [ 393.100533][ T8922] Modules linked in: cls_matchall | [ 393.100945][ T8922] Tainted: [B]=BAD_PAGE, [W]=WARN [ 393.101080][ T8922] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 393.101247][ T8922] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 393.101386][ T8922] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 393.101867][ T8922] RSP: 0018:ffa000000bf3f9e8 EFLAGS: 00010046 [ 393.102039][ T8922] RAX: 0000000000000220 RBX: ff1100000e7839e0 RCX: 0000000000000001 [ 393.102239][ T8922] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 393.102439][ T8922] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 393.102647][ T8922] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd400000039e0c0 [ 393.102850][ T8922] R13: ff1100000e783a00 R14: ff1100000103c940 R15: ffd400000039e0c0 [ 393.103056][ T8922] FS: 0000000000000000(0000) GS:ff1100009e82e000(0000) knlGS:0000000000000000 [ 393.103290][ T8922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.103463][ T8922] CR2: 00007f8e6db4a574 CR3: 000000002fb3c004 CR4: 0000000000771ef0 [ 393.103667][ T8922] PKRU: 55555554 [ 393.103768][ T8922] Call Trace: [ 393.103871][ T8922] [ 393.103940][ T8922] check_bytes_and_report.cold (mm/slub.c:1359) [ 393.104076][ T8922] check_object (mm/slub.c:1507) [ 393.104209][ T8922] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 393.104342][ T8922] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 393.104479][ T8922] free_to_partial_list (mm/slub.c:5631) [ 393.104613][ T8922] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 393.104747][ T8922] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 393.104881][ T8922] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 393.105017][ T8922] __kasan_slab_alloc (mm/kasan/common.c:350) [ 393.105150][ T8922] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 393.105286][ T8922] ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 393.105420][ T8922] fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 393.105559][ T8922] fuse_chan_send (fs/fuse/dev.c:827) [ 393.105692][ T8922] fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101) [ 393.105825][ T8922] ? fuse_file_release (fs/fuse/file.c:360) [ 393.105959][ T8922] fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1)) [ 393.106090][ T8922] __fput (fs/file_table.c:512) [ 393.106193][ T8922] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 393.106328][ T8922] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 393.106495][ T8922] task_work_run (kernel/task_work.c:233) [ 393.106628][ T8922] ? task_work_cancel (kernel/task_work.c:190) [ 393.106762][ T8922] ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626) [ 393.106899][ T8922] do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008) [ 393.107001][ T8922] ? exit_notify (kernel/exit.c:780) [ 393.107133][ T8922] ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3)) [ 393.107298][ T8922] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 393.107483][ T8922] do_group_exit (kernel/exit.c:1151) [ 393.107619][ T8922] __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160) [ 393.107796][ T8922] x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232) [ 393.107931][ T8922] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 393.108109][ T8922] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 393.108240][ T8922] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 393.108450][ T8922] RIP: 0033:0x7f8e6dd341b8 [ 393.108594][ T8922] Code: Unable to access opcode bytes at 0x7f8e6dd3418e. Code starting with the faulting instruction =========================================== [ 393.108767][ T8922] RSP: 002b:00007fff303cb468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 393.109017][ T8922] RAX: ffffffffffffffda RBX: 00007f8e6de64f88 RCX: 00007f8e6dd341b8 [ 393.109219][ T8922] RDX: 00007f8e6da7efc8 RSI: fffffffffffffeb8 RDI: 0000000000000000 [ 393.109469][ T8922] RBP: 00007fff303cb4c0 R08: 0000000000000000 R09: 0000000000000050 [ 393.109719][ T8922] R10: 00007fff303cb280 R11: 0000000000000246 R12: 0000000000000001 [ 393.109967][ T8922] R13: 0000000000000000 R14: 00007f8e6de63680 R15: 00007f8e6de64fa0 | [ 393.119764][ T8922] ------------[ cut here ]------------ | [ 393.119941][ T8922] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/8922 | [ 393.120188][ T8922] Modules linked in: cls_matchall | [ 393.120641][ T8922] Tainted: [B]=BAD_PAGE, [W]=WARN [ 393.120824][ T8922] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 393.120997][ T8922] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 393.121185][ T8922] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 393.121711][ T8922] RSP: 0018:ffa000000bf3f9e8 EFLAGS: 00010046 [ 393.121925][ T8922] RAX: 0000000000000220 RBX: ff1100000e783560 RCX: 0000000000000001 [ 393.122171][ T8922] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 393.122416][ T8922] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 393.122619][ T8922] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd400000039e0c0 [ 393.122868][ T8922] R13: ff1100000e783580 R14: ff1100000103c940 R15: ffd400000039e0c0 [ 393.123115][ T8922] FS: 0000000000000000(0000) GS:ff1100009e82e000(0000) knlGS:0000000000000000 [ 393.123397][ T8922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.123569][ T8922] CR2: 00007f8e6db4a574 CR3: 000000002fb3c004 CR4: 0000000000771ef0 [ 393.123820][ T8922] PKRU: 55555554 [ 393.123926][ T8922] Call Trace: [ 393.124071][ T8922] [ 393.124139][ T8922] check_bytes_and_report.cold (mm/slub.c:1359) [ 393.124318][ T8922] check_object (mm/slub.c:1507) [ 393.124453][ T8922] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 393.124638][ T8922] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 393.124772][ T8922] free_to_partial_list (mm/slub.c:5631) [ 393.124953][ T8922] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 393.125087][ T8922] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 393.125266][ T8922] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 393.125399][ T8922] __kasan_slab_alloc (mm/kasan/common.c:350) [ 393.125583][ T8922] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 393.125716][ T8922] ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 393.125898][ T8922] fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7)) [ 393.126031][ T8922] fuse_chan_send (fs/fuse/dev.c:827) [ 393.126209][ T8922] fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101) [ 393.126341][ T8922] ? fuse_file_release (fs/fuse/file.c:360) [ 393.126527][ T8922] fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1)) [ 393.126660][ T8922] __fput (fs/file_table.c:512) [ 393.126761][ T8922] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 393.126940][ T8922] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 393.127153][ T8922] task_work_run (kernel/task_work.c:233) [ 393.127289][ T8922] ? task_work_cancel (kernel/task_work.c:190) [ 393.127467][ T8922] ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626) [ 393.127600][ T8922] do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008) [ 393.127703][ T8922] ? exit_notify (kernel/exit.c:780) [ 393.127882][ T8922] ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3)) [ 393.128092][ T8922] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 393.128224][ T8922] do_group_exit (kernel/exit.c:1151) [ 393.128404][ T8922] __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160) [ 393.128542][ T8922] x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232) [ 393.128675][ T8922] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 393.128808][ T8922] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 393.128992][ T8922] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 393.129158][ T8922] RIP: 0033:0x7f8e6dd341b8 [ 393.129347][ T8922] Code: Unable to access opcode bytes at 0x7f8e6dd3418e. Code starting with the faulting instruction =========================================== [ 393.129520][ T8922] RSP: 002b:00007fff303cb468 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 393.129773][ T8922] RAX: ffffffffffffffda RBX: 00007f8e6de64f88 RCX: 00007f8e6dd341b8 [ 393.130022][ T8922] RDX: 00007f8e6da7efc8 RSI: fffffffffffffeb8 RDI: 0000000000000000 [ 393.130269][ T8922] RBP: 00007fff303cb4c0 R08: 0000000000000000 R09: 0000000000000050 [ 393.130471][ T8922] R10: 00007fff303cb280 R11: 0000000000000246 R12: 0000000000000001 [ 393.130720][ T8922] R13: 0000000000000000 R14: 00007f8e6de63680 R15: 00007f8e6de64fa0 | [ 401.318832][ T8971] ------------[ cut here ]------------ | [ 401.318966][ T8971] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/8971 | [ 401.319172][ T8971] Modules linked in: cls_matchall | [ 401.319649][ T8971] Tainted: [B]=BAD_PAGE, [W]=WARN [ 401.319791][ T8971] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 401.320007][ T8971] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 401.320151][ T8971] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 401.320726][ T8971] RSP: 0018:ffa00000097af5c8 EFLAGS: 00010046 [ 401.320945][ T8971] RAX: 0000000000000220 RBX: ff11000005fa9860 RCX: 0000000000000001 [ 401.321151][ T8971] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 401.321397][ T8971] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 401.321654][ T8971] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd400000017ea40 [ 401.321906][ T8971] R13: ff11000005fa9880 R14: ff1100000103c940 R15: ffd400000017ea40 [ 401.322112][ T8971] FS: 00007f1a07e094c0(0000) GS:ff1100009e7ae000(0000) knlGS:0000000000000000 [ 401.322394][ T8971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.322614][ T8971] CR2: 00005586bbee70a8 CR3: 000000000d167006 CR4: 0000000000771ef0 [ 401.322859][ T8971] PKRU: 55555554 [ 401.322964][ T8971] Call Trace: [ 401.323065][ T8971] [ 401.323178][ T8971] check_bytes_and_report.cold (mm/slub.c:1359) [ 401.323321][ T8971] check_object (mm/slub.c:1507) [ 401.323508][ T8971] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 401.323645][ T8971] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.323826][ T8971] free_to_partial_list (mm/slub.c:5631) [ 401.323960][ T8971] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.324141][ T8971] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.324277][ T8971] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 401.324457][ T8971] __kasan_slab_alloc (mm/kasan/common.c:350) [ 401.324595][ T8971] kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068) [ 401.324811][ T8971] ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.324949][ T8971] __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.325094][ T8971] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2)) [ 401.325229][ T8971] ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1)) [ 401.325411][ T8971] ? inet6_dump_ifinfo (net/ipv6/addrconf.c:6179) [ 401.325552][ T8971] __ip6_append_data (./include/linux/skbuff.h:1384 net/ipv6/ip6_output.c:1701) [ 401.325734][ T8971] ? raw6_destroy (net/ipv6/raw.c:1184) [ 401.325872][ T8971] ? ip6_mtu (./include/linux/rcupdate.h:850 ./include/net/ip6_route.h:380 net/ipv6/route.c:3290) [ 401.325978][ T8971] ? ip6_mtu (./include/linux/rcupdate.h:882 ./include/net/ip6_route.h:384 net/ipv6/route.c:3290) [ 401.326129][ T8971] ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116) [ 401.326266][ T8971] ? neigh_hh_output (./include/linux/seqlock.h:228 (discriminator 4)) [ 401.326449][ T8971] ? ip6_append_data (net/ipv6/ip6_output.c:1878 net/ipv6/ip6_output.c:1860) [ 401.326589][ T8971] ? raw6_destroy (net/ipv6/raw.c:1184) [ 401.326777][ T8971] rawv6_sendmsg (net/ipv6/raw.c:913) [ 401.326917][ T8971] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.327106][ T8971] ? rawv6_send_hdrinc (./include/net/sock.h:2939 (discriminator 1)) [ 401.327242][ T8971] ? ____sys_recvmsg (./include/trace/events/sock.h:304 (discriminator 2) net/socket.c:1155 (discriminator 2) net/socket.c:1173 (discriminator 2) net/socket.c:2933 (discriminator 2)) [ 401.327423][ T8971] ? import_iovec (lib/iov_iter.c:1440 (discriminator 1)) [ 401.327570][ T8971] ? trace_kfree (./include/trace/events/kmem.h:97 (discriminator 22)) [ 401.327755][ T8971] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.327893][ T8971] ? __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4)) [ 401.328076][ T8971] __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4)) [ 401.328214][ T8971] ? __ia32_sys_getpeername (net/socket.c:2235) [ 401.328397][ T8971] __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284) [ 401.328537][ T8971] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 401.328754][ T8971] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 401.328968][ T8971] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 401.329104][ T8971] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 401.329286][ T8971] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 401.329423][ T8971] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 401.329640][ T8971] RIP: 0033:0x7f1a0802754e [ 401.329782][ T8971] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 401.330362][ T8971] RSP: 002b:00007ffe6acbb2a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 401.330619][ T8971] RAX: ffffffffffffffda RBX: 00005586bbed70a0 RCX: 00007f1a0802754e [ 401.330825][ T8971] RDX: 0000000000000040 RSI: 00005586bbed70a4 RDI: 0000000000000006 [ 401.331075][ T8971] RBP: 00007ffe6acbb2b0 R08: 00005586bbee92b4 R09: 000000000000001c [ 401.331326][ T8971] R10: 0000000000000800 R11: 0000000000000202 R12: 00005586bbed70a4 [ 401.331586][ T8971] R13: 0000000000000040 R14: 00007ffe6acbc5a0 R15: 00005586bbed70a0 | [ 401.342175][ T8971] ------------[ cut here ]------------ | [ 401.342341][ T8971] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/8971 | [ 401.342581][ T8971] Modules linked in: cls_matchall | [ 401.343022][ T8971] Tainted: [B]=BAD_PAGE, [W]=WARN [ 401.343195][ T8971] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 401.343360][ T8971] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 401.343545][ T8971] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 401.344099][ T8971] RSP: 0018:ffa00000097af5c8 EFLAGS: 00010046 [ 401.344262][ T8971] RAX: 0000000000000220 RBX: ff11000005fa9e60 RCX: 0000000000000001 [ 401.344506][ T8971] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 401.344703][ T8971] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 401.344898][ T8971] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd400000017ea40 [ 401.345138][ T8971] R13: ff11000005fa9e80 R14: ff1100000103c940 R15: ffd400000017ea40 [ 401.345377][ T8971] FS: 00007f1a07e094c0(0000) GS:ff1100009e7ae000(0000) knlGS:0000000000000000 [ 401.345652][ T8971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.345820][ T8971] CR2: 00005586bbee70a8 CR3: 000000000d167006 CR4: 0000000000771ef0 [ 401.346063][ T8971] PKRU: 55555554 [ 401.346203][ T8971] Call Trace: [ 401.346306][ T8971] [ 401.346375][ T8971] check_bytes_and_report.cold (mm/slub.c:1359) [ 401.346555][ T8971] check_object (mm/slub.c:1507) [ 401.346683][ T8971] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 401.346856][ T8971] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.346989][ T8971] free_to_partial_list (mm/slub.c:5631) [ 401.347159][ T8971] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.347289][ T8971] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.347459][ T8971] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 401.347595][ T8971] __kasan_slab_alloc (mm/kasan/common.c:350) [ 401.347768][ T8971] kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068) [ 401.347927][ T8971] ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.348100][ T8971] __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.348200][ T8971] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2)) [ 401.348373][ T8971] ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1)) [ 401.348503][ T8971] ? inet6_dump_ifinfo (net/ipv6/addrconf.c:6179) [ 401.348676][ T8971] __ip6_append_data (./include/linux/skbuff.h:1384 net/ipv6/ip6_output.c:1701) [ 401.348809][ T8971] ? raw6_destroy (net/ipv6/raw.c:1184) [ 401.348982][ T8971] ? ip6_mtu (./include/linux/rcupdate.h:850 ./include/net/ip6_route.h:380 net/ipv6/route.c:3290) [ 401.349080][ T8971] ? ip6_mtu (./include/linux/rcupdate.h:882 ./include/net/ip6_route.h:384 net/ipv6/route.c:3290) [ 401.349176][ T8971] ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116) [ 401.349348][ T8971] ? neigh_hh_output (./include/linux/seqlock.h:228 (discriminator 4)) [ 401.349479][ T8971] ? ip6_append_data (net/ipv6/ip6_output.c:1878 net/ipv6/ip6_output.c:1860) [ 401.349654][ T8971] ? raw6_destroy (net/ipv6/raw.c:1184) [ 401.349783][ T8971] rawv6_sendmsg (net/ipv6/raw.c:913) [ 401.349957][ T8971] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.350093][ T8971] ? rawv6_send_hdrinc (./include/net/sock.h:2939 (discriminator 1)) [ 401.350268][ T8971] ? ____sys_recvmsg (./include/trace/events/sock.h:304 (discriminator 2) net/socket.c:1155 (discriminator 2) net/socket.c:1173 (discriminator 2) net/socket.c:2933 (discriminator 2)) [ 401.350398][ T8971] ? import_iovec (lib/iov_iter.c:1440 (discriminator 1)) [ 401.350579][ T8971] ? trace_kfree (./include/trace/events/kmem.h:97 (discriminator 22)) [ 401.350715][ T8971] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.350890][ T8971] ? __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4)) [ 401.351023][ T8971] __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4)) [ 401.351199][ T8971] ? __ia32_sys_getpeername (net/socket.c:2235) [ 401.351331][ T8971] __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284) [ 401.351504][ T8971] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 401.351707][ T8971] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 401.351868][ T8971] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 401.352041][ T8971] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 401.352167][ T8971] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 401.352340][ T8971] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 401.352509][ T8971] RIP: 0033:0x7f1a0802754e [ 401.352690][ T8971] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 401.353243][ T8971] RSP: 002b:00007ffe6acbb2a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 401.353442][ T8971] RAX: ffffffffffffffda RBX: 00005586bbed70a0 RCX: 00007f1a0802754e [ 401.353685][ T8971] RDX: 0000000000000040 RSI: 00005586bbed70a4 RDI: 0000000000000006 [ 401.353930][ T8971] RBP: 00007ffe6acbb2b0 R08: 00005586bbee92b4 R09: 000000000000001c [ 401.354170][ T8971] R10: 0000000000000800 R11: 0000000000000202 R12: 00005586bbed70a4 [ 401.354375][ T8971] R13: 0000000000000040 R14: 00007ffe6acbc5a0 R15: 00005586bbed70a0 | [ 401.926370][ T8974] ------------[ cut here ]------------ | [ 401.926510][ T8974] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: ping/8974 | [ 401.926716][ T8974] Modules linked in: cls_matchall | [ 401.927132][ T8974] Tainted: [B]=BAD_PAGE, [W]=WARN [ 401.927270][ T8974] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 401.927442][ T8974] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 401.927586][ T8974] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 401.928068][ T8974] RSP: 0018:ffa000000977f5c8 EFLAGS: 00010046 [ 401.928238][ T8974] RAX: 0000000000000220 RBX: ff11000004cd69e0 RCX: 0000000000000001 [ 401.928448][ T8974] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 401.928654][ T8974] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 401.928862][ T8974] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000133580 [ 401.929078][ T8974] R13: ff11000004cd69f8 R14: ff1100000103c940 R15: ffd4000000133580 [ 401.929283][ T8974] FS: 00007f963eb094c0(0000) GS:ff1100009e72e000(0000) knlGS:0000000000000000 [ 401.929532][ T8974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.929707][ T8974] CR2: 00007f963ede0000 CR3: 000000000e459004 CR4: 0000000000771ef0 [ 401.929916][ T8974] PKRU: 55555554 [ 401.930023][ T8974] Call Trace: [ 401.930131][ T8974] [ 401.930205][ T8974] check_bytes_and_report.cold (mm/slub.c:1359) [ 401.930345][ T8974] check_object (mm/slub.c:1515) [ 401.930485][ T8974] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 401.930632][ T8974] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.930773][ T8974] free_to_partial_list (mm/slub.c:5631) [ 401.930912][ T8974] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.931049][ T8974] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.931191][ T8974] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 401.931331][ T8974] __kasan_slab_alloc (mm/kasan/common.c:350) [ 401.931466][ T8974] kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068) [ 401.931634][ T8974] ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.931769][ T8974] __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.931869][ T8974] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2)) [ 401.932001][ T8974] ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1)) [ 401.932136][ T8974] __ip_append_data (./include/linux/skbuff.h:1384 net/ipv4/ip_output.c:1136) [ 401.932274][ T8974] ? raw_destroy (net/ipv4/raw.c:704) [ 401.932409][ T8974] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22)) [ 401.932547][ T8974] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:850 ./include/net/ip.h:475) [ 401.932714][ T8974] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:882 ./include/net/ip.h:504) [ 401.932890][ T8974] ? ip_fraglist_init (net/ipv4/ip_output.c:606) [ 401.933022][ T8974] ? rt_is_expired (./include/net/net_namespace.h:435 (discriminator 4)) [ 401.933156][ T8974] ? ip_route_output_key_hash_rcu (net/ipv4/route.c:2879) [ 401.933323][ T8974] ip_append_data (net/ipv4/ip_output.c:1381 (discriminator 1) net/ipv4/ip_output.c:1360 (discriminator 1)) [ 401.933455][ T8974] ? raw_destroy (net/ipv4/raw.c:704) [ 401.933589][ T8974] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 401.933757][ T8974] raw_sendmsg (net/ipv4/raw.c:659) [ 401.933898][ T8974] ? raw_send_hdrinc (./include/net/ip.h:606 (discriminator 1)) [ 401.934037][ T8974] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.934177][ T8974] ? kernel_sendmsg (net/socket.c:862) [ 401.934316][ T8974] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.934449][ T8974] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 401.934587][ T8974] ? kfree (mm/slub.c:6778 (discriminator 1)) [ 401.934689][ T8974] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.934821][ T8974] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 401.934961][ T8974] ? __might_fault (mm/memory.c:7482 (discriminator 5)) [ 401.935100][ T8974] ? inet_send_prepare (net/ipv4/af_inet.c:846) [ 401.935238][ T8974] __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4)) [ 401.935373][ T8974] ? __ia32_sys_getpeername (net/socket.c:2235) [ 401.935518][ T8974] __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284) [ 401.935661][ T8974] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 401.935832][ T8974] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 401.936007][ T8974] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 401.936145][ T8974] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 401.936286][ T8974] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 401.936425][ T8974] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 401.936604][ T8974] RIP: 0033:0x7f963ed2754e [ 401.936753][ T8974] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 401.937242][ T8974] RSP: 002b:00007ffe19a93bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 401.937452][ T8974] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f963ed2754e [ 401.937667][ T8974] RDX: 0000000000000040 RSI: 000055d9132c30a4 RDI: 0000000000000005 [ 401.937875][ T8974] RBP: 00007ffe19a93be0 R08: 000055d9132d5320 R09: 0000000000000010 [ 401.938083][ T8974] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db [ 401.938288][ T8974] R13: 00007f963eb09470 R14: 000055d9132d63e0 R15: 000055d9132c30a0 | [ 401.947665][ T8974] ------------[ cut here ]------------ | [ 401.947801][ T8974] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: ping/8974 | [ 401.948011][ T8974] Modules linked in: cls_matchall | [ 401.948431][ T8974] Tainted: [B]=BAD_PAGE, [W]=WARN [ 401.948575][ T8974] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 401.948752][ T8974] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 401.948898][ T8974] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 401.949396][ T8974] RSP: 0018:ffa000000977f5c8 EFLAGS: 00010046 [ 401.949577][ T8974] RAX: 0000000000000220 RBX: ff11000004cd6620 RCX: 0000000000000001 [ 401.949790][ T8974] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 401.950002][ T8974] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 401.950211][ T8974] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000133580 [ 401.950419][ T8974] R13: ff11000004cd6638 R14: ff1100000103c940 R15: ffd4000000133580 [ 401.950631][ T8974] FS: 00007f963eb094c0(0000) GS:ff1100009e72e000(0000) knlGS:0000000000000000 [ 401.950878][ T8974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.951054][ T8974] CR2: 00007f963ede0000 CR3: 000000000e459004 CR4: 0000000000771ef0 [ 401.951257][ T8974] PKRU: 55555554 [ 401.951360][ T8974] Call Trace: [ 401.951465][ T8974] [ 401.951535][ T8974] check_bytes_and_report.cold (mm/slub.c:1359) [ 401.951671][ T8974] check_object (mm/slub.c:1515) [ 401.951808][ T8974] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 401.951946][ T8974] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.952083][ T8974] free_to_partial_list (mm/slub.c:5631) [ 401.952227][ T8974] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.952361][ T8974] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 401.952494][ T8974] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 401.952634][ T8974] __kasan_slab_alloc (mm/kasan/common.c:350) [ 401.952772][ T8974] kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068) [ 401.952944][ T8974] ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.953085][ T8974] __alloc_skb (net/core/skbuff.c:704 (discriminator 7)) [ 401.953189][ T8974] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2)) [ 401.953326][ T8974] ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1)) [ 401.953466][ T8974] __ip_append_data (./include/linux/skbuff.h:1384 net/ipv4/ip_output.c:1136) [ 401.953611][ T8974] ? raw_destroy (net/ipv4/raw.c:704) [ 401.953753][ T8974] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22)) [ 401.953896][ T8974] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:850 ./include/net/ip.h:475) [ 401.954067][ T8974] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:882 ./include/net/ip.h:504) [ 401.954242][ T8974] ? ip_fraglist_init (net/ipv4/ip_output.c:606) [ 401.954379][ T8974] ? rt_is_expired (./include/net/net_namespace.h:435 (discriminator 4)) [ 401.954521][ T8974] ? ip_route_output_key_hash_rcu (net/ipv4/route.c:2879) [ 401.954696][ T8974] ip_append_data (net/ipv4/ip_output.c:1381 (discriminator 1) net/ipv4/ip_output.c:1360 (discriminator 1)) [ 401.954840][ T8974] ? raw_destroy (net/ipv4/raw.c:704) [ 401.954978][ T8974] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 401.955150][ T8974] raw_sendmsg (net/ipv4/raw.c:659) [ 401.955292][ T8974] ? raw_send_hdrinc (./include/net/ip.h:606 (discriminator 1)) [ 401.955431][ T8974] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.955573][ T8974] ? kernel_sendmsg (net/socket.c:862) [ 401.955714][ T8974] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.955850][ T8974] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 401.955992][ T8974] ? kfree (mm/slub.c:6778 (discriminator 1)) [ 401.956095][ T8974] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 401.956228][ T8974] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22)) [ 401.956362][ T8974] ? __might_fault (mm/memory.c:7482 (discriminator 5)) [ 401.956506][ T8974] ? inet_send_prepare (net/ipv4/af_inet.c:846) [ 401.956642][ T8974] __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4)) [ 401.956777][ T8974] ? __ia32_sys_getpeername (net/socket.c:2235) [ 401.956918][ T8974] __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284) [ 401.957061][ T8974] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 401.957235][ T8974] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 401.957407][ T8974] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 401.957551][ T8974] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 401.957690][ T8974] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 401.957829][ T8974] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 401.957997][ T8974] RIP: 0033:0x7f963ed2754e [ 401.958141][ T8974] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 401.958617][ T8974] RSP: 002b:00007ffe19a93bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 401.958822][ T8974] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f963ed2754e [ 401.959028][ T8974] RDX: 0000000000000040 RSI: 000055d9132c30a4 RDI: 0000000000000005 [ 401.959228][ T8974] RBP: 00007ffe19a93be0 R08: 000055d9132d5320 R09: 0000000000000010 [ 401.959429][ T8974] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db [ 401.959634][ T8974] R13: 00007f963eb09470 R14: 000055d9132d63e0 R15: 000055d9132c30a0 | [ 415.749975][ T9056] ------------[ cut here ]------------ | [ 415.750114][ T9056] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/9056 | [ 415.750315][ T9056] Modules linked in: cls_matchall | [ 415.750740][ T9056] Tainted: [B]=BAD_PAGE, [W]=WARN [ 415.750880][ T9056] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 415.751052][ T9056] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 415.751195][ T9056] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 415.751684][ T9056] RSP: 0018:ffa000000a71fb18 EFLAGS: 00010046 [ 415.751857][ T9056] RAX: 0000000000000220 RBX: ff11000001e02560 RCX: 0000000000000001 [ 415.752064][ T9056] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 415.752274][ T9056] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 415.752477][ T9056] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000078080 [ 415.752687][ T9056] R13: ff11000001e02580 R14: ff1100000103c940 R15: ffd4000000078080 [ 415.752890][ T9056] FS: 00007f0f30e60cc0(0000) GS:ff1100009e82e000(0000) knlGS:0000000000000000 [ 415.753131][ T9056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.753306][ T9056] CR2: 00007ffe4ffe6fa8 CR3: 000000000e5e1003 CR4: 0000000000771ef0 [ 415.753514][ T9056] PKRU: 55555554 [ 415.753671][ T9056] Call Trace: [ 415.753777][ T9056] [ 415.753850][ T9056] check_bytes_and_report.cold (mm/slub.c:1359) [ 415.754030][ T9056] check_object (mm/slub.c:1507) [ 415.754166][ T9056] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 415.754343][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.754481][ T9056] free_to_partial_list (mm/slub.c:5631) [ 415.754665][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.754800][ T9056] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.754977][ T9056] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 415.755111][ T9056] __kasan_slab_alloc (mm/kasan/common.c:350) [ 415.755285][ T9056] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 415.755420][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.755601][ T9056] ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.755734][ T9056] do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.755907][ T9056] ? finish_task_switch.isra.0 (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:1383 ./include/linux/sched/mm.h:54 ./include/linux/sched/mm.h:83 ./include/linux/sched/mm.h:110 kernel/sched/core.c:5402) [ 415.756075][ T9056] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 415.756249][ T9056] do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416) [ 415.756381][ T9056] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 415.756559][ T9056] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 415.756697][ T9056] ? trace_irq_enable.constprop.0 (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/linux/cpumask.h:650 ./include/linux/cpumask.h:1232 ./include/trace/events/preemptirq.h:40) [ 415.756913][ T9056] ? __ia32_sys_open (fs/open.c:1427) [ 415.757088][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.757218][ T9056] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 415.757425][ T9056] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 415.757591][ T9056] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 415.757763][ T9056] ? irq_exit_rcu (kernel/softirq.c:786) [ 415.757897][ T9056] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 415.758099][ T9056] RIP: 0033:0x7f0f310c554e [ 415.758238][ T9056] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 415.758793][ T9056] RSP: 002b:00007ffe4ffe6f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 415.759037][ T9056] RAX: ffffffffffffffda RBX: 00007ffe4ffeb816 RCX: 00007f0f310c554e [ 415.759281][ T9056] RDX: 0000000000080000 RSI: 00007ffe4ffe7130 RDI: ffffffffffffff9c [ 415.759477][ T9056] RBP: 00007ffe4ffe6f10 R08: 0000000000000000 R09: 0000000000000000 [ 415.759725][ T9056] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe4ffeb816 [ 415.759966][ T9056] R13: 0000000000000065 R14: 00007ffe4ffeb824 R15: 00007ffe4ffea488 | [ 415.770023][ T9056] ------------[ cut here ]------------ | [ 415.770194][ T9056] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/9056 | [ 415.770432][ T9056] Modules linked in: cls_matchall | [ 415.770839][ T9056] Tainted: [B]=BAD_PAGE, [W]=WARN [ 415.771016][ T9056] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 415.771181][ T9056] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 415.771364][ T9056] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 415.771932][ T9056] RSP: 0018:ffa000000a71fb18 EFLAGS: 00010046 [ 415.772100][ T9056] RAX: 0000000000000220 RBX: ff11000001e02920 RCX: 0000000000000001 [ 415.772342][ T9056] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 415.772586][ T9056] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 415.772784][ T9056] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000078080 [ 415.773025][ T9056] R13: ff11000001e02940 R14: ff1100000103c940 R15: ffd4000000078080 [ 415.773266][ T9056] FS: 00007f0f30e60cc0(0000) GS:ff1100009e82e000(0000) knlGS:0000000000000000 [ 415.773541][ T9056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.773715][ T9056] CR2: 00007ffe4ffe6fa8 CR3: 000000000e5e1003 CR4: 0000000000771ef0 [ 415.773968][ T9056] PKRU: 55555554 [ 415.774117][ T9056] Call Trace: [ 415.774215][ T9056] [ 415.774282][ T9056] check_bytes_and_report.cold (mm/slub.c:1359) [ 415.774457][ T9056] check_object (mm/slub.c:1507) [ 415.774595][ T9056] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 415.774726][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.774859][ T9056] free_to_partial_list (mm/slub.c:5631) [ 415.775031][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.775162][ T9056] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.775336][ T9056] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 415.775470][ T9056] __kasan_slab_alloc (mm/kasan/common.c:350) [ 415.775647][ T9056] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 415.775780][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.775957][ T9056] ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.776089][ T9056] do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.776261][ T9056] ? finish_task_switch.isra.0 (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:1383 ./include/linux/sched/mm.h:54 ./include/linux/sched/mm.h:83 ./include/linux/sched/mm.h:110 kernel/sched/core.c:5402) [ 415.776425][ T9056] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 415.776605][ T9056] do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416) [ 415.776735][ T9056] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 415.776909][ T9056] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 415.777040][ T9056] ? trace_irq_enable.constprop.0 (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/linux/cpumask.h:650 ./include/linux/cpumask.h:1232 ./include/trace/events/preemptirq.h:40) [ 415.777251][ T9056] ? __ia32_sys_open (fs/open.c:1427) [ 415.777379][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.777555][ T9056] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 415.777766][ T9056] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 415.777930][ T9056] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 415.778103][ T9056] ? irq_exit_rcu (kernel/softirq.c:786) [ 415.778236][ T9056] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 415.778444][ T9056] RIP: 0033:0x7f0f310c554e [ 415.778585][ T9056] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 415.779148][ T9056] RSP: 002b:00007ffe4ffe6f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 415.779395][ T9056] RAX: ffffffffffffffda RBX: 00007ffe4ffeb816 RCX: 00007f0f310c554e [ 415.779652][ T9056] RDX: 0000000000080000 RSI: 00007ffe4ffe7130 RDI: ffffffffffffff9c [ 415.779855][ T9056] RBP: 00007ffe4ffe6f10 R08: 0000000000000000 R09: 0000000000000000 [ 415.780097][ T9056] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe4ffeb816 [ 415.780339][ T9056] R13: 0000000000000065 R14: 00007ffe4ffeb824 R15: 00007ffe4ffea488 | [ 415.790553][ T9056] ------------[ cut here ]------------ | [ 415.790691][ T9056] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/9056 | [ 415.790941][ T9056] Modules linked in: cls_matchall | [ 415.791439][ T9056] Tainted: [B]=BAD_PAGE, [W]=WARN [ 415.791578][ T9056] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 415.791750][ T9056] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 415.791894][ T9056] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 415.792491][ T9056] RSP: 0018:ffa000000a71fb28 EFLAGS: 00010046 [ 415.792715][ T9056] RAX: 0000000000000220 RBX: ff11000008d19c20 RCX: 0000000000000001 [ 415.792918][ T9056] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 415.793166][ T9056] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 415.793415][ T9056] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000234640 [ 415.793664][ T9056] R13: ff11000008d19c38 R14: ff1100000103c940 R15: ffd4000000234640 [ 415.793868][ T9056] FS: 00007f0f30e60cc0(0000) GS:ff1100009e82e000(0000) knlGS:0000000000000000 [ 415.794151][ T9056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.794367][ T9056] CR2: 00007ffe4ffe6fa8 CR3: 000000000e5e1003 CR4: 0000000000771ef0 [ 415.794620][ T9056] PKRU: 55555554 [ 415.794723][ T9056] Call Trace: [ 415.794823][ T9056] [ 415.794936][ T9056] check_bytes_and_report.cold (mm/slub.c:1359) [ 415.795072][ T9056] check_object (mm/slub.c:1515) [ 415.795253][ T9056] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 415.795388][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.795566][ T9056] free_to_partial_list (mm/slub.c:5631) [ 415.795708][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.795887][ T9056] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.796022][ T9056] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 415.796199][ T9056] __kasan_slab_alloc (mm/kasan/common.c:350) [ 415.796334][ T9056] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 415.796512][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.796649][ T9056] ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.796827][ T9056] do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.796960][ T9056] ? finish_task_switch.isra.0 (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:1383 ./include/linux/sched/mm.h:54 ./include/linux/sched/mm.h:83 ./include/linux/sched/mm.h:110 kernel/sched/core.c:5402) [ 415.797173][ T9056] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 415.797308][ T9056] do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416) [ 415.797483][ T9056] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 415.797622][ T9056] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 415.797756][ T9056] ? trace_irq_enable.constprop.0 (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/linux/cpumask.h:650 ./include/linux/cpumask.h:1232 ./include/trace/events/preemptirq.h:40) [ 415.797921][ T9056] ? __ia32_sys_open (fs/open.c:1427) [ 415.798095][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.798227][ T9056] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 415.798434][ T9056] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 415.798643][ T9056] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 415.798779][ T9056] ? irq_exit_rcu (kernel/softirq.c:786) [ 415.798956][ T9056] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 415.799119][ T9056] RIP: 0033:0x7f0f310c554e [ 415.799304][ T9056] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 415.799867][ T9056] RSP: 002b:00007ffe4ffe6f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 415.800067][ T9056] RAX: ffffffffffffffda RBX: 00007ffe4ffeb816 RCX: 00007f0f310c554e [ 415.800309][ T9056] RDX: 0000000000080000 RSI: 00007ffe4ffe7130 RDI: ffffffffffffff9c [ 415.800550][ T9056] RBP: 00007ffe4ffe6f10 R08: 0000000000000000 R09: 0000000000000000 [ 415.800801][ T9056] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe4ffeb816 [ 415.801001][ T9056] R13: 0000000000000065 R14: 00007ffe4ffeb824 R15: 00007ffe4ffea488 | [ 415.810208][ T9056] ------------[ cut here ]------------ | [ 415.810341][ T9056] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/9056 | [ 415.810535][ T9056] Modules linked in: cls_matchall | [ 415.810941][ T9056] Tainted: [B]=BAD_PAGE, [W]=WARN [ 415.811076][ T9056] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 415.811240][ T9056] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3)) [ 415.811380][ T9056] Code: c7 10 64 4a 95 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 All code ======== 0: c7 (bad) 1: 10 64 4a 95 adc %ah,-0x6b(%rdx,%rcx,2) 5: e8 28 57 fc ff call 0xfffffffffffc5732 a: eb 0e jmp 0x1a c: 48 89 da mov %rbx,%rdx f: 4c 89 e6 mov %r12,%rsi 12: 48 89 ef mov %rbp,%rdi 15: e8 48 fe ff ff call 0xfffffffffffffe62 1a: be 01 00 00 00 mov $0x1,%esi 1f: bf 05 00 00 00 mov $0x5,%edi 24: e8 69 4e 54 00 call 0x544e92 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 5b pop %rbx 2e: 5d pop %rbp 2f: 41 5c pop %r12 31: c3 ret 32: 48 85 ed test %rbp,%rbp 35: 0f 84 7e 01 00 00 je 0x1b9 3b: 4c 89 cf mov %r9,%rdi 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 5b pop %rbx 4: 5d pop %rbp 5: 41 5c pop %r12 7: c3 ret 8: 48 85 ed test %rbp,%rbp b: 0f 84 7e 01 00 00 je 0x18f 11: 4c 89 cf mov %r9,%rdi 14: 48 rex.W 15: 89 .byte 0x89 [ 415.811856][ T9056] RSP: 0018:ffa000000a71fb28 EFLAGS: 00010046 [ 415.812027][ T9056] RAX: 0000000000000220 RBX: ff11000008d19aa0 RCX: 0000000000000001 [ 415.812227][ T9056] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff96bb4660 [ 415.812424][ T9056] RBP: ff1100000103c940 R08: ffffffff923bcf0a R09: 1ffffffff2d768cc [ 415.812627][ T9056] R10: fffffbfff2d768cd R11: fffffbfff2d768cd R12: ffd4000000234640 [ 415.812826][ T9056] R13: ff11000008d19ab8 R14: ff1100000103c940 R15: ffd4000000234640 [ 415.813026][ T9056] FS: 00007f0f30e60cc0(0000) GS:ff1100009e7ae000(0000) knlGS:0000000000000000 [ 415.813259][ T9056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.813423][ T9056] CR2: 000055dd193d8d5c CR3: 000000000e5e1001 CR4: 0000000000771ef0 [ 415.813627][ T9056] PKRU: 55555554 [ 415.813728][ T9056] Call Trace: [ 415.813826][ T9056] [ 415.813892][ T9056] check_bytes_and_report.cold (mm/slub.c:1359) [ 415.814026][ T9056] check_object (mm/slub.c:1515) [ 415.814158][ T9056] free_debug_processing (mm/slub.c:1803 mm/slub.c:4299) [ 415.814290][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.814420][ T9056] free_to_partial_list (mm/slub.c:5631) [ 415.814549][ T9056] ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.814686][ T9056] qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2)) [ 415.814816][ T9056] kasan_quarantine_reduce (mm/kasan/quarantine.c:286) [ 415.814950][ T9056] __kasan_slab_alloc (mm/kasan/common.c:350) [ 415.815079][ T9056] kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010) [ 415.815211][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.815340][ T9056] ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.815473][ T9056] do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11)) [ 415.815607][ T9056] ? finish_task_switch.isra.0 (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:1383 ./include/linux/sched/mm.h:54 ./include/linux/sched/mm.h:83 ./include/linux/sched/mm.h:110 kernel/sched/core.c:5402) [ 415.815773][ T9056] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 415.815904][ T9056] do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416) [ 415.816036][ T9056] ? build_open_flags (fs/open.c:1319 (discriminator 3)) [ 415.816165][ T9056] __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434) [ 415.816297][ T9056] ? trace_irq_enable.constprop.0 (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/linux/cpumask.h:650 ./include/linux/cpumask.h:1232 ./include/trace/events/preemptirq.h:40) [ 415.816462][ T9056] ? __ia32_sys_open (fs/open.c:1427) [ 415.816594][ T9056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3)) [ 415.816727][ T9056] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 415.816897][ T9056] ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22)) [ 415.817061][ T9056] do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84) [ 415.817190][ T9056] ? irq_exit_rcu (kernel/softirq.c:786) [ 415.817324][ T9056] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 415.817485][ T9056] RIP: 0033:0x7f0f310c554e [ 415.817625][ T9056] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 415.818092][ T9056] RSP: 002b:00007ffe4ffe6f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 415.818290][ T9056] RAX: ffffffffffffffda RBX: 00007ffe4ffeb816 RCX: 00007f0f310c554e [ 415.818489][ T9056] RDX: 0000000000080000 RSI: 00007ffe4ffe7130 RDI: ffffffffffffff9c [ 415.818690][ T9056] RBP: 00007ffe4ffe6f10 R08: 0000000000000000 R09: 0000000000000000 [ 415.818889][ T9056] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe4ffeb816 Finger prints: print_report:kasan_report:bond_update_slave_arr:bond_enslave:do_set_master object_err:check_object:free_debug_processing:free_to_partial_list:qlist_free_all