======================================
| [   95.262953][  T898] ==================================================================
| [   95.263168][  T898] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
| [   95.263356][  T898] Write of size 8 at addr ff11000008a55f38 by task ip/898
| [   95.263510][  T898]
[   95.263584][  T898] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   95.263586][  T898] Call Trace:
[   95.263588][  T898]  <TASK>
[   95.263589][  T898]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[   95.263595][  T898]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[   95.263599][  T898]  print_report (mm/kasan/report.c:482)
[   95.263600][  T898]  ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54)
[   95.263604][  T898]  ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[   95.263606][  T898]  kasan_report (mm/kasan/report.c:595)
[   95.263609][  T898]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   95.263610][  T898]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   95.263612][  T898]  bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   95.263614][  T898]  ? bond_slave_arr_work_rearm (drivers/net/bonding/bond_main.c:5078)
[   95.263616][  T898]  ? bond_xdp_check (drivers/net/bonding/bond_main.c:347)
[   95.263618][  T898]  ? netdev_upper_dev_link (net/core/dev.c:9100)
[   95.263622][  T898]  ? sysfs_create_files (./include/linux/sysfs.h:774 fs/sysfs/file.c:387)
[   95.263625][  T898]  bond_enslave (drivers/net/bonding/bond_main.c:2337)
[   95.263628][  T898]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5218 (discriminator 9))
[   95.263629][  T898]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   95.263632][  T898]  ? mark_usage (kernel/locking/lockdep.c:4690)
[   95.263634][  T898]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   95.263636][  T898]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   95.263639][  T898]  ? is_bpf_text_address (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) kernel/bpf/core.c:751 (discriminator 2))
[   95.263643][  T898]  ? rtnl_af_lookup (net/core/rtnetlink.c:794 (discriminator 1))
[   95.263646][  T898]  do_set_master (net/core/rtnetlink.c:3088)
[   95.263648][  T898]  do_setlink.isra.0 (net/core/rtnetlink.c:3290 (discriminator 1))
[   95.263651][  T898]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[   95.263653][  T898]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[   95.263656][  T898]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[   95.263659][  T898]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:388 kernel/rcu/update.c:380)
[   95.263661][  T898]  ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 2) lib/stackdepot.c:676 (discriminator 2))
[   95.263664][  T898]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[   95.263666][  T898]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[   95.263667][  T898]  ? validate_chain (kernel/locking/lockdep.c:3817 (discriminator 2) kernel/locking/lockdep.c:3837 (discriminator 2) kernel/locking/lockdep.c:3892 (discriminator 2))
[   95.263669][  T898]  ? kasan_save_stack (mm/kasan/common.c:58)
[   95.263671][  T898]  ? kasan_save_stack (mm/kasan/common.c:57)
[   95.263672][  T898]  ? kasan_save_track (mm/kasan/common.c:78)
[   95.263674][  T898]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   95.263675][  T898]  ? __netlink_dump_start (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) net/netlink/af_netlink.c:2433 (discriminator 1))
[   95.263678][  T898]  ? ___sys_sendmsg (net/socket.c:2758 (discriminator 1))
[   95.263681][  T898]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   95.263683][  T898]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[   95.263685][  T898]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   95.263687][  T898]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   95.263688][  T898]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   95.263690][  T898]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   95.263691][  T898]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[   95.263693][  T898]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[   95.263695][  T898]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[   95.263697][  T898]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[   95.263699][  T898]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[   95.263700][  T898]  ? nla_get_range_signed (lib/nlattr.c:270)
[   95.263704][  T898]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[   95.263707][  T898]  rtnl_newlink (net/core/rtnetlink.c:4241)
[   95.263709][  T898]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   95.263711][  T898]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   95.263714][  T898]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   95.263715][  T898]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   95.263717][  T898]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   95.263719][  T898]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[   95.263721][  T898]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   95.263723][  T898]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[   95.263726][  T898]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   95.263727][  T898]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   95.263730][  T898]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   95.263731][  T898]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   95.263733][  T898]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[   95.263735][  T898]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   95.263737][  T898]  ? netlink_ack (./include/linux/skbuff.h:2718)
[   95.263740][  T898]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2))
[   95.263742][  T898]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2))
[   95.263744][  T898]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[   95.263746][  T898]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[   95.263748][  T898]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   95.263750][  T898]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[   95.263752][  T898]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[   95.263754][  T898]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[   95.263758][  T898]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[   95.263760][  T898]  ? copy_msghdr_from_user (net/socket.c:2650)
[   95.263761][  T898]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[   95.263763][  T898]  ? move_addr_to_kernel (net/socket.c:258)
[   95.263765][  T898]  ___sys_sendmsg (net/socket.c:2767)
[   95.263767][  T898]  ? copy_msghdr_from_user (net/socket.c:2619)
[   95.263772][  T898]  __sys_sendmsg (net/socket.c:2799)
[   95.263774][  T898]  ? __sys_sendmsg_sock (net/socket.c:2780)
[   95.263777][  T898]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   95.263779][  T898]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   95.263781][  T898]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   95.263783][  T898]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   95.263786][  T898] RIP: 0033:0x7ff189d1554e
[   95.263788][  T898] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   95.263790][  T898] RSP: 002b:00007fffd4d4b7b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[   95.263794][  T898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff189d1554e
[   95.263795][  T898] RDX: 0000000000000000 RSI: 00007fffd4d4b860 RDI: 0000000000000005
[   95.263796][  T898] RBP: 00007fffd4d4b7c0 R08: 0000000000000000 R09: 0000000000000000
[   95.263797][  T898] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a993eb6
[   95.263798][  T898] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007fffd4d4bf20
| [  100.015869][  T921] ------------[ cut here ]------------
| [  100.015996][  T921] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/921
| [  100.016191][  T921] Modules linked in:
| [  100.016562][  T921] Tainted: [B]=BAD_PAGE
[  100.016660][  T921] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  100.016825][  T921] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  100.016962][  T921] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  100.017418][  T921] RSP: 0018:ffa00000032a78e0 EFLAGS: 00010046
[  100.017584][  T921] RAX: 0000000000000020 RBX: ff11000008a55f20 RCX: 0000000000000001
[  100.017778][  T921] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  100.017973][  T921] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  100.018164][  T921] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000229540
[  100.018355][  T921] R13: ff11000008a55f38 R14: ff1100000103c940 R15: ffd4000000229540
[  100.018551][  T921] FS:  00007f13344c1cc0(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  100.018779][  T921] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  100.018941][  T921] CR2: 00007ffdd6fb8cac CR3: 0000000001e07003 CR4: 0000000000771ef0
[  100.019134][  T921] PKRU: 55555554
[  100.019230][  T921] Call Trace:
[  100.019327][  T921]  <TASK>
[  100.019396][  T921]  check_bytes_and_report.cold (mm/slub.c:1359)
[  100.019526][  T921]  check_object (mm/slub.c:1515)
[  100.019659][  T921]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  100.019788][  T921]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  100.019916][  T921]  free_to_partial_list (mm/slub.c:5631)
[  100.020046][  T921]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  100.020172][  T921]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  100.020298][  T921]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  100.020424][  T921]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  100.020555][  T921]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  100.020681][  T921]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  100.020809][  T921]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  100.020936][  T921]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  100.021063][  T921]  ? kasan_quarantine_reduce (./include/linux/srcu.h:498 mm/kasan/quarantine.c:287)
[  100.021192][  T921]  __create_object (mm/kmemleak.c:801)
[  100.021318][  T921]  __kmalloc_cache_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5559)
[  100.021445][  T921]  ? user_path_at (./include/linux/fs.h:2584 ./include/linux/fs.h:2586 fs/namei.c:3640)
[  100.021577][  T921]  ? alloc_fs_context (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fs_context.c:267 (discriminator 1))
[  100.021706][  T921]  alloc_fs_context (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fs_context.c:267 (discriminator 1))
[  100.021832][  T921]  do_new_mount (fs/namespace.c:3828)
[  100.021960][  T921]  ? do_add_mount (fs/namespace.c:3752)
[  100.022088][  T921]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  100.022214][  T921]  ? cap_capable (./include/trace/events/capability.h:26 (discriminator 22) security/commoncap.c:130 (discriminator 22))
[  100.022343][  T921]  path_mount (fs/namespace.c:4168)
[  100.022470][  T921]  ? finish_automount (fs/namespace.c:3912)
[  100.022600][  T921]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  100.022726][  T921]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  100.022854][  T921]  ? user_path_at (./include/linux/fs.h:2584 ./include/linux/fs.h:2586 fs/namei.c:3640)
[  100.022980][  T921]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[  100.023108][  T921]  ? __x64_sys_mount (fs/namespace.c:4181 fs/namespace.c:4397 fs/namespace.c:4374 fs/namespace.c:4374)
[  100.023232][  T921]  __x64_sys_mount (fs/namespace.c:4181 fs/namespace.c:4397 fs/namespace.c:4374 fs/namespace.c:4374)
[  100.023358][  T921]  ? copy_mnt_ns (fs/namespace.c:4330 (discriminator 1))
[  100.023485][  T921]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  100.023615][  T921]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  100.023742][  T921]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  100.023870][  T921]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  100.023995][  T921]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  100.024123][  T921]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  100.024279][  T921] RIP: 0033:0x7f13347ae5be
[  100.024415][  T921] Code: 48 8b 0d 3d 78 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 0a 78 0f 00 f7 d8 64 89 01 48
All code
========
   0:	48 8b 0d 3d 78 0f 00 	mov    0xf783d(%rip),%rcx        # 0xf7844
   7:	f7 d8                	neg    %eax
   9:	64 89 01             	mov    %eax,%fs:(%rcx)
   c:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  10:	c3                   	ret
  11:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  18:	00 00 00 
  1b:	90                   	nop
  1c:	f3 0f 1e fa          	endbr64
  20:	49 89 ca             	mov    %rcx,%r10
  23:	b8 a5 00 00 00       	mov    $0xa5,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf7844
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf781a
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[  100.024869][  T921] RSP: 002b:00007ffdd6fb9338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  100.025065][  T921] RAX: ffffffffffffffda RBX: 00007ffdd6fbe812 RCX: 00007f13347ae5be
[  100.025258][  T921] RDX: 0000000000480d89 RSI: 0000000000480d84 RDI: 00007ffdd6fbe812
[  100.025448][  T921] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000
[  100.025645][  T921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.025835][  T921] R13: 0000000000000065 R14: 00007ffdd6fbe81c R15: 00007ffdd6fbc818
| [  100.033486][  T921] ------------[ cut here ]------------
| [  100.033612][  T921] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/921
| [  100.033798][  T921] Modules linked in:
| [  100.034149][  T921] Tainted: [B]=BAD_PAGE, [W]=WARN
[  100.034274][  T921] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  100.034432][  T921] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  100.034569][  T921] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  100.035020][  T921] RSP: 0018:ffa00000032a78e0 EFLAGS: 00010046
[  100.035182][  T921] RAX: 0000000000000220 RBX: ff11000008a55ce0 RCX: 0000000000000001
[  100.035371][  T921] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  100.035564][  T921] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  100.035755][  T921] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000229540
[  100.035942][  T921] R13: ff11000008a55cf8 R14: ff1100000103c940 R15: ffd4000000229540
[  100.036133][  T921] FS:  00007f13344c1cc0(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  100.036353][  T921] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  100.036512][  T921] CR2: 00007ffdd6fb8cac CR3: 0000000001e07003 CR4: 0000000000771ef0
[  100.036708][  T921] PKRU: 55555554
[  100.036803][  T921] Call Trace:
[  100.036898][  T921]  <TASK>
[  100.036962][  T921]  check_bytes_and_report.cold (mm/slub.c:1359)
[  100.037089][  T921]  check_object (mm/slub.c:1515)
[  100.037215][  T921]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  100.037342][  T921]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  100.037467][  T921]  free_to_partial_list (mm/slub.c:5631)
[  100.037598][  T921]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  100.037724][  T921]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  100.037848][  T921]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  100.037973][  T921]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  100.038098][  T921]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  100.038225][  T921]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  100.038350][  T921]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  100.038475][  T921]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  100.038603][  T921]  ? kasan_quarantine_reduce (./include/linux/srcu.h:498 mm/kasan/quarantine.c:287)
[  100.038729][  T921]  __create_object (mm/kmemleak.c:801)
[  100.038854][  T921]  __kmalloc_cache_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5559)
[  100.038979][  T921]  ? user_path_at (./include/linux/fs.h:2584 ./include/linux/fs.h:2586 fs/namei.c:3640)
[  100.039104][  T921]  ? alloc_fs_context (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fs_context.c:267 (discriminator 1))
[  100.039234][  T921]  alloc_fs_context (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fs_context.c:267 (discriminator 1))
[  100.039359][  T921]  do_new_mount (fs/namespace.c:3828)
[  100.039486][  T921]  ? do_add_mount (fs/namespace.c:3752)
[  100.039614][  T921]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  100.039739][  T921]  ? cap_capable (./include/trace/events/capability.h:26 (discriminator 22) security/commoncap.c:130 (discriminator 22))
[  100.039865][  T921]  path_mount (fs/namespace.c:4168)
[  100.039990][  T921]  ? finish_automount (fs/namespace.c:3912)
[  100.040115][  T921]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  100.040246][  T921]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  100.040372][  T921]  ? user_path_at (./include/linux/fs.h:2584 ./include/linux/fs.h:2586 fs/namei.c:3640)
[  100.040497][  T921]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[  100.040628][  T921]  ? __x64_sys_mount (fs/namespace.c:4181 fs/namespace.c:4397 fs/namespace.c:4374 fs/namespace.c:4374)
[  100.040754][  T921]  __x64_sys_mount (fs/namespace.c:4181 fs/namespace.c:4397 fs/namespace.c:4374 fs/namespace.c:4374)
[  100.040879][  T921]  ? copy_mnt_ns (fs/namespace.c:4330 (discriminator 1))
[  100.041004][  T921]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  100.041129][  T921]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  100.041258][  T921]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  100.041383][  T921]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  100.041508][  T921]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  100.041637][  T921]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  100.041796][  T921] RIP: 0033:0x7f13347ae5be
[  100.041927][  T921] Code: 48 8b 0d 3d 78 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 0a 78 0f 00 f7 d8 64 89 01 48
All code
========
   0:	48 8b 0d 3d 78 0f 00 	mov    0xf783d(%rip),%rcx        # 0xf7844
   7:	f7 d8                	neg    %eax
   9:	64 89 01             	mov    %eax,%fs:(%rcx)
   c:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  10:	c3                   	ret
  11:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  18:	00 00 00 
  1b:	90                   	nop
  1c:	f3 0f 1e fa          	endbr64
  20:	49 89 ca             	mov    %rcx,%r10
  23:	b8 a5 00 00 00       	mov    $0xa5,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf7844
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf781a
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[  100.042376][  T921] RSP: 002b:00007ffdd6fb9338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  100.042569][  T921] RAX: ffffffffffffffda RBX: 00007ffdd6fbe812 RCX: 00007f13347ae5be
[  100.042758][  T921] RDX: 0000000000480d89 RSI: 0000000000480d84 RDI: 00007ffdd6fbe812
[  100.042946][  T921] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000
[  100.043136][  T921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.043326][  T921] R13: 0000000000000065 R14: 00007ffdd6fbe81c R15: 00007ffdd6fbc818
| [  104.585538][  T938] ------------[ cut here ]------------
| [  104.585672][  T938] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/938
| [  104.585869][  T938] Modules linked in:
| [  104.586240][  T938] Tainted: [B]=BAD_PAGE, [W]=WARN
[  104.586372][  T938] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  104.586539][  T938] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  104.586680][  T938] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  104.587148][  T938] RSP: 0018:ffa00000033679e8 EFLAGS: 00010046
[  104.587314][  T938] RAX: 0000000000000220 RBX: ff110000049900e0 RCX: 0000000000000001
[  104.587512][  T938] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  104.587714][  T938] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  104.587911][  T938] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000126400
[  104.588111][  T938] R13: ff11000004990100 R14: ff1100000103c940 R15: ffd4000000126400
[  104.588311][  T938] FS:  0000000000000000(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  104.588544][  T938] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.588716][  T938] CR2: 00007f10ab7ca574 CR3: 000000003673c004 CR4: 0000000000771ef0
[  104.588914][  T938] PKRU: 55555554
[  104.589014][  T938] Call Trace:
[  104.589115][  T938]  <TASK>
[  104.589183][  T938]  check_bytes_and_report.cold (mm/slub.c:1359)
[  104.589315][  T938]  check_object (mm/slub.c:1507)
[  104.589445][  T938]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  104.589581][  T938]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  104.589711][  T938]  free_to_partial_list (mm/slub.c:5631)
[  104.589841][  T938]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  104.589971][  T938]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  104.590104][  T938]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  104.590235][  T938]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  104.590364][  T938]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  104.590493][  T938]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  104.590678][  T938]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  104.590810][  T938]  fuse_chan_send (fs/fuse/dev.c:827)
[  104.590985][  T938]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  104.591115][  T938]  ? fuse_file_release (fs/fuse/file.c:360)
[  104.591290][  T938]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  104.591420][  T938]  __fput (fs/file_table.c:512)
[  104.591568][  T938]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  104.591700][  T938]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  104.591907][  T938]  task_work_run (kernel/task_work.c:233)
[  104.592041][  T938]  ? task_work_cancel (kernel/task_work.c:190)
[  104.592216][  T938]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[  104.592345][  T938]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  104.592488][  T938]  ? exit_notify (kernel/exit.c:780)
[  104.592623][  T938]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  104.592832][  T938]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  104.592963][  T938]  do_group_exit (kernel/exit.c:1151)
[  104.593140][  T938]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  104.593272][  T938]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  104.593449][  T938]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  104.593583][  T938]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  104.593762][  T938]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  104.593969][  T938] RIP: 0033:0x7faad1a761b8
[  104.594108][  T938] Code: Unable to access opcode bytes at 0x7faad1a7618e.

Code starting with the faulting instruction
===========================================
[  104.594325][  T938] RSP: 002b:00007fffd0d57e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  104.594527][  T938] RAX: ffffffffffffffda RBX: 00007faad1ba6f88 RCX: 00007faad1a761b8
[  104.594774][  T938] RDX: 00007faad17c0fc8 RSI: fffffffffffffeb8 RDI: 0000000000000000
[  104.595019][  T938] RBP: 00007fffd0d57ea0 R08: 0000000000000000 R09: 0000000000000050
[  104.595263][  T938] R10: 00007fffd0d57c60 R11: 0000000000000246 R12: 0000000000000001
[  104.595464][  T938] R13: 0000000000000000 R14: 00007faad1ba5680 R15: 00007faad1ba6fa0
| [  104.605692][  T938] ------------[ cut here ]------------
| [  104.605821][  T938] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/938
| [  104.606060][  T938] Modules linked in:
| [  104.606475][  T938] Tainted: [B]=BAD_PAGE, [W]=WARN
[  104.606657][  T938] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  104.606820][  T938] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  104.607006][  T938] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  104.607567][  T938] RSP: 0018:ffa00000033679e8 EFLAGS: 00010046
[  104.607735][  T938] RAX: 0000000000000220 RBX: ff11000005c40920 RCX: 0000000000000001
[  104.607976][  T938] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  104.608216][  T938] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  104.608411][  T938] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000171000
[  104.608658][  T938] R13: ff11000005c40940 R14: ff1100000103c940 R15: ffd4000000171000
[  104.608902][  T938] FS:  0000000000000000(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  104.609176][  T938] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.609342][  T938] CR2: 00007f10ab7ca574 CR3: 000000003673c004 CR4: 0000000000771ef0
[  104.609586][  T938] PKRU: 55555554
[  104.609730][  T938] Call Trace:
[  104.609827][  T938]  <TASK>
[  104.609893][  T938]  check_bytes_and_report.cold (mm/slub.c:1359)
[  104.610069][  T938]  check_object (mm/slub.c:1507)
[  104.610201][  T938]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  104.610377][  T938]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  104.610507][  T938]  free_to_partial_list (mm/slub.c:5631)
[  104.610687][  T938]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  104.610818][  T938]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  104.610992][  T938]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  104.611122][  T938]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  104.611296][  T938]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  104.611428][  T938]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  104.611605][  T938]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  104.611734][  T938]  fuse_chan_send (fs/fuse/dev.c:827)
[  104.611908][  T938]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  104.612040][  T938]  ? fuse_file_release (fs/fuse/file.c:360)
[  104.612215][  T938]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  104.612345][  T938]  __fput (fs/file_table.c:512)
[  104.612487][  T938]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  104.612623][  T938]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  104.612829][  T938]  task_work_run (kernel/task_work.c:233)
[  104.612959][  T938]  ? task_work_cancel (kernel/task_work.c:190)
[  104.613135][  T938]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[  104.613266][  T938]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  104.613409][  T938]  ? exit_notify (kernel/exit.c:780)
[  104.613538][  T938]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  104.613746][  T938]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  104.613878][  T938]  do_group_exit (kernel/exit.c:1151)
[  104.614053][  T938]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  104.614183][  T938]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  104.614357][  T938]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  104.614486][  T938]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  104.614666][  T938]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  104.614827][  T938] RIP: 0033:0x7faad1a761b8
[  104.615010][  T938] Code: Unable to access opcode bytes at 0x7faad1a7618e.

Code starting with the faulting instruction
===========================================
[  104.615179][  T938] RSP: 002b:00007fffd0d57e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  104.615420][  T938] RAX: ffffffffffffffda RBX: 00007faad1ba6f88 RCX: 00007faad1a761b8
[  104.615666][  T938] RDX: 00007faad17c0fc8 RSI: fffffffffffffeb8 RDI: 0000000000000000
[  104.615904][  T938] RBP: 00007fffd0d57ea0 R08: 0000000000000000 R09: 0000000000000050
[  104.616099][  T938] R10: 00007fffd0d57c60 R11: 0000000000000246 R12: 0000000000000001
[  104.616341][  T938] R13: 0000000000000000 R14: 00007faad1ba5680 R15: 00007faad1ba6fa0
| [  109.428637][   T64] ------------[ cut here ]------------
| [  109.428763][   T64] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: 2/64
| [  109.428956][   T64] Modules linked in:
| [  109.429319][   T64] Tainted: [B]=BAD_PAGE, [W]=WARN
[  109.429447][   T64] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  109.429611][   T64] Workqueue: mld mld_ifc_work
[  109.429749][   T64] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  109.429883][   T64] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  109.430339][   T64] RSP: 0018:ffa00000004576a0 EFLAGS: 00010046
[  109.430502][   T64] RAX: 0000000000000220 RBX: ff1100000948ac20 RCX: 0000000000000001
[  109.430696][   T64] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  109.430889][   T64] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  109.431084][   T64] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000252280
[  109.431276][   T64] R13: ff1100000948ac40 R14: ff1100000103c940 R15: ffd4000000252280
[  109.431471][   T64] FS:  0000000000000000(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  109.431701][   T64] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.431864][   T64] CR2: 00007f000a4b1f68 CR3: 000000003673c006 CR4: 0000000000771ef0
[  109.432057][   T64] PKRU: 55555554
[  109.432153][   T64] Call Trace:
[  109.432294][   T64]  <TASK>
[  109.432362][   T64]  check_bytes_and_report.cold (mm/slub.c:1359)
[  109.432491][   T64]  check_object (mm/slub.c:1507)
[  109.432667][   T64]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  109.432793][   T64]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  109.432963][   T64]  free_to_partial_list (mm/slub.c:5631)
[  109.433091][   T64]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  109.433259][   T64]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  109.433385][   T64]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  109.433555][   T64]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  109.433684][   T64]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  109.433882][   T64]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  109.434011][   T64]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  109.434109][   T64]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  109.434235][   T64]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  109.434404][   T64]  ? debug_object_free (lib/debugobjects.c:1033)
[  109.434531][   T64]  mld_newpack (./include/linux/skbuff.h:1384 net/ipv6/mcast.c:1810)
[  109.434705][   T64]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  109.434832][   T64]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  109.435003][   T64]  ? mld_sendpack (net/ipv6/mcast.c:1895 (discriminator 3))
[  109.435129][   T64]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  109.435299][   T64]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[  109.435460][   T64]  ? add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[  109.435632][   T64]  add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[  109.435728][   T64]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[  109.435899][   T64]  add_grec (./include/linux/lockdep.h:249 net/ipv4/igmp.c:556)
[  109.435993][   T64]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  109.436163][   T64]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[  109.436288][   T64]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  109.436460][   T64]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[  109.436589][   T64]  ? add_grhead (net/ipv4/igmp.c:511)
[  109.436760][   T64]  mld_send_cr (net/ipv6/mcast.c:2185)
[  109.436886][   T64]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[  109.437057][   T64]  mld_ifc_work (net/ipv6/mcast.c:2739)
[  109.437183][   T64]  ? process_one_work (kernel/workqueue.c:3363 (discriminator 2))
[  109.437353][   T64]  process_one_work (kernel/workqueue.c:3387)
[  109.437480][   T64]  ? __queue_delayed_work (kernel/workqueue.c:2622)
[  109.437656][   T64]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  109.437780][   T64]  worker_thread (kernel/workqueue.c:3470 kernel/workqueue.c:3551)
[  109.437949][   T64]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[  109.438076][   T64]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[  109.438247][   T64]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[  109.438373][   T64]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[  109.438544][   T64]  kthread (kernel/kthread.c:436)
[  109.438644][   T64]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  109.438845][   T64]  ? kthread_affine_preferred (kernel/kthread.c:857)
[  109.438971][   T64]  ret_from_fork (arch/x86/kernel/process.c:158)
[  109.439142][   T64]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/vdso/vma.c:80 (discriminator 1))
[  109.439301][   T64]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[  109.439475][   T64]  ? kthread_affine_preferred (kernel/kthread.c:857)
[  109.439607][   T64]  ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
| [  109.449528][   T64] ------------[ cut here ]------------
| [  109.449699][   T64] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: 2/64
| [  109.449932][   T64] Modules linked in:
| [  109.450330][   T64] Tainted: [B]=BAD_PAGE, [W]=WARN
[  109.450503][   T64] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  109.450670][   T64] Workqueue: mld mld_ifc_work
[  109.450846][   T64] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  109.450979][   T64] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  109.451527][   T64] RSP: 0018:ffa00000004576b0 EFLAGS: 00010046
[  109.451740][   T64] RAX: 0000000000000220 RBX: ff11000005db6f20 RCX: 0000000000000001
[  109.451932][   T64] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  109.452169][   T64] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  109.452405][   T64] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000176d80
[  109.452645][   T64] R13: ff11000005db6f38 R14: ff1100000103c940 R15: ffd4000000176d80
[  109.452837][   T64] FS:  0000000000000000(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  109.453104][   T64] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.453310][   T64] CR2: 00007f000a4b1f68 CR3: 000000003673c006 CR4: 0000000000771ef0
[  109.453546][   T64] PKRU: 55555554
[  109.453645][   T64] Call Trace:
[  109.453741][   T64]  <TASK>
[  109.453849][   T64]  check_bytes_and_report.cold (mm/slub.c:1359)
[  109.453978][   T64]  check_object (mm/slub.c:1515)
[  109.454148][   T64]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  109.454274][   T64]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  109.454445][   T64]  free_to_partial_list (mm/slub.c:5631)
[  109.454573][   T64]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  109.454747][   T64]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  109.454877][   T64]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  109.455046][   T64]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  109.455172][   T64]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  109.455375][   T64]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  109.455501][   T64]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  109.455646][   T64]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  109.455772][   T64]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  109.455942][   T64]  ? debug_object_free (lib/debugobjects.c:1033)
[  109.456069][   T64]  mld_newpack (./include/linux/skbuff.h:1384 net/ipv6/mcast.c:1810)
[  109.456237][   T64]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  109.456366][   T64]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  109.456535][   T64]  ? mld_sendpack (net/ipv6/mcast.c:1895 (discriminator 3))
[  109.456662][   T64]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  109.456831][   T64]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[  109.456991][   T64]  ? add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[  109.457159][   T64]  add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[  109.457253][   T64]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[  109.457422][   T64]  add_grec (./include/linux/lockdep.h:249 net/ipv4/igmp.c:556)
[  109.457518][   T64]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  109.457646][   T64]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[  109.457814][   T64]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  109.457940][   T64]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[  109.458112][   T64]  ? add_grhead (net/ipv4/igmp.c:511)
[  109.458238][   T64]  mld_send_cr (net/ipv6/mcast.c:2185)
[  109.458406][   T64]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[  109.458532][   T64]  mld_ifc_work (net/ipv6/mcast.c:2739)
[  109.458706][   T64]  ? process_one_work (kernel/workqueue.c:3363 (discriminator 2))
[  109.458831][   T64]  process_one_work (kernel/workqueue.c:3387)
[  109.459001][   T64]  ? __queue_delayed_work (kernel/workqueue.c:2622)
[  109.459128][   T64]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  109.459300][   T64]  worker_thread (kernel/workqueue.c:3470 kernel/workqueue.c:3551)
[  109.459424][   T64]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[  109.459594][   T64]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[  109.459719][   T64]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[  109.459889][   T64]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[  109.460014][   T64]  kthread (kernel/kthread.c:436)
[  109.460110][   T64]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  109.460267][   T64]  ? kthread_affine_preferred (kernel/kthread.c:857)
[  109.460438][   T64]  ret_from_fork (arch/x86/kernel/process.c:158)
[  109.460564][   T64]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/vdso/vma.c:80 (discriminator 1))
[  109.460767][   T64]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[  109.460934][   T64]  ? kthread_affine_preferred (kernel/kthread.c:857)
[  109.461060][   T64]  ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
| [  110.575683][  T971] ------------[ cut here ]------------
| [  110.575804][  T971] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/971
| [  110.575984][  T971] Modules linked in:
| [  110.576330][  T971] Tainted: [B]=BAD_PAGE, [W]=WARN
[  110.576452][  T971] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  110.576611][  T971] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  110.576740][  T971] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  110.577175][  T971] RSP: 0018:ffa00000034b7bb0 EFLAGS: 00010046
[  110.577330][  T971] RAX: 0000000000000220 RBX: ff11000004b497a0 RCX: 0000000000000001
[  110.577513][  T971] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  110.577702][  T971] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  110.577883][  T971] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd400000012d240
[  110.578067][  T971] R13: ff11000004b497c0 R14: ff1100000103c940 R15: ffd400000012d240
[  110.578254][  T971] FS:  0000000000000000(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  110.578472][  T971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.578629][  T971] CR2: 00007f734bbda668 CR3: 00000000091f1003 CR4: 0000000000771ef0
[  110.578810][  T971] PKRU: 55555554
[  110.578900][  T971] Call Trace:
[  110.578991][  T971]  <TASK>
[  110.579053][  T971]  check_bytes_and_report.cold (mm/slub.c:1359)
[  110.579177][  T971]  check_object (mm/slub.c:1507)
[  110.579299][  T971]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  110.579421][  T971]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  110.579542][  T971]  free_to_partial_list (mm/slub.c:5631)
[  110.579670][  T971]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  110.579793][  T971]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  110.579915][  T971]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  110.580037][  T971]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  110.580161][  T971]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  110.580283][  T971]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  110.580404][  T971]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  110.580523][  T971]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  110.580649][  T971]  do_faccessat (./include/linux/fs.h:2587 fs/open.c:486)
[  110.580772][  T971]  ? generic_file_open (./include/linux/fs.h:1143 (discriminator 4))
[  110.580893][  T971]  ? ovl_flush (./include/linux/cred.h:188 (discriminator 2) ./include/linux/cred.h:191 (discriminator 2) fs/overlayfs/overlayfs.h:459 (discriminator 2) fs/overlayfs/file.c:642 (discriminator 2))
[  110.581015][  T971]  __x64_sys_access (fs/open.c:547 fs/open.c:545 fs/open.c:545)
[  110.581137][  T971]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  110.581258][  T971]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  110.581379][  T971]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  110.581500][  T971]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  110.581656][  T971] RIP: 0033:0x7f734bc0b42b
[  110.581785][  T971] Code: 40 ff ff ff e8 06 54 00 00 c9 c3 0f 1f 40 00 c9 b8 ff ff ff ff c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 f7 d8 89 05 60 5e 01 00 b8
All code
========
   0:	40 ff                	rex (bad)
   2:	ff                   	(bad)
   3:	ff                   	ljmp   (bad)
   4:	e8 06 54 00 00       	call   0x540f
   9:	c9                   	leave
   a:	c3                   	ret
   b:	0f 1f 40 00          	nopl   0x0(%rax)
   f:	c9                   	leave
  10:	b8 ff ff ff ff       	mov    $0xffffffff,%eax
  15:	c3                   	ret
  16:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
  1d:	00 00 
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 15 00 00 00       	mov    $0x15,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 05                	ja     0x37
  32:	c3                   	ret
  33:	0f 1f 40 00          	nopl   0x0(%rax)
  37:	f7 d8                	neg    %eax
  39:	89 05 60 5e 01 00    	mov    %eax,0x15e60(%rip)        # 0x15e9f
  3f:	b8                   	.byte 0xb8

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 05                	ja     0xd
   8:	c3                   	ret
   9:	0f 1f 40 00          	nopl   0x0(%rax)
   d:	f7 d8                	neg    %eax
   f:	89 05 60 5e 01 00    	mov    %eax,0x15e60(%rip)        # 0x15e75
  15:	b8                   	.byte 0xb8
[  110.582308][  T971] RSP: 002b:00007ffc80e87938 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
[  110.582494][  T971] RAX: ffffffffffffffda RBX: 000000432fa376b2 RCX: 00007f734bc0b42b
[  110.582723][  T971] RDX: 0000004300000000 RSI: 0000000000000004 RDI: 00007f734bc15fc0
[  110.582946][  T971] RBP: 00007ffc80e87bd0 R08: 00007f734bbda010 R09: 000000000000000f
[  110.583169][  T971] R10: 00000000c0010001 R11: 0000000000000246 R12: 0000000000000001
[  110.583355][  T971] R13: 0000000000000001 R14: 00007f734bc212e0 R15: 00007f734bc20da0
| [  110.592198][  T971] ------------[ cut here ]------------
| [  110.592316][  T971] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/971
| [  110.592534][  T971] Modules linked in:
| [  110.592916][  T971] Tainted: [B]=BAD_PAGE, [W]=WARN
[  110.593077][  T971] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  110.593270][  T971] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  110.593396][  T971] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  110.593914][  T971] RSP: 0018:ffa00000034b7bc0 EFLAGS: 00010046
[  110.594066][  T971] RAX: 0000000000000220 RBX: ff11000009cd2f20 RCX: 0000000000000001
[  110.594291][  T971] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  110.594514][  T971] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  110.594742][  T971] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000273480
[  110.594926][  T971] R13: ff11000009cd2f38 R14: ff1100000103c940 R15: ffd4000000273480
[  110.595150][  T971] FS:  0000000000000000(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  110.595403][  T971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.595601][  T971] CR2: 00007f734bbda668 CR3: 00000000091f1003 CR4: 0000000000771ef0
[  110.595783][  T971] PKRU: 55555554
[  110.595913][  T971] Call Trace:
[  110.596006][  T971]  <TASK>
[  110.596068][  T971]  check_bytes_and_report.cold (mm/slub.c:1359)
[  110.596228][  T971]  check_object (mm/slub.c:1515)
[  110.596347][  T971]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  110.596507][  T971]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  110.596632][  T971]  free_to_partial_list (mm/slub.c:5631)
[  110.596790][  T971]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  110.596911][  T971]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  110.597072][  T971]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  110.597192][  T971]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  110.597353][  T971]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  110.597473][  T971]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  110.597637][  T971]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  110.597756][  T971]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  110.597916][  T971]  do_faccessat (./include/linux/fs.h:2587 fs/open.c:486)
[  110.598038][  T971]  ? generic_file_open (./include/linux/fs.h:1143 (discriminator 4))
[  110.598198][  T971]  ? ovl_flush (./include/linux/cred.h:188 (discriminator 2) ./include/linux/cred.h:191 (discriminator 2) fs/overlayfs/overlayfs.h:459 (discriminator 2) fs/overlayfs/file.c:642 (discriminator 2))
[  110.598319][  T971]  __x64_sys_access (fs/open.c:547 fs/open.c:545 fs/open.c:545)
[  110.598478][  T971]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  110.598603][  T971]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  110.598764][  T971]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  110.598884][  T971]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  110.599074][  T971] RIP: 0033:0x7f734bc0b42b
[  110.599243][  T971] Code: 40 ff ff ff e8 06 54 00 00 c9 c3 0f 1f 40 00 c9 b8 ff ff ff ff c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 f7 d8 89 05 60 5e 01 00 b8
All code
========
   0:	40 ff                	rex (bad)
   2:	ff                   	(bad)
   3:	ff                   	ljmp   (bad)
   4:	e8 06 54 00 00       	call   0x540f
   9:	c9                   	leave
   a:	c3                   	ret
   b:	0f 1f 40 00          	nopl   0x0(%rax)
   f:	c9                   	leave
  10:	b8 ff ff ff ff       	mov    $0xffffffff,%eax
  15:	c3                   	ret
  16:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
  1d:	00 00 
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 15 00 00 00       	mov    $0x15,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 05                	ja     0x37
  32:	c3                   	ret
  33:	0f 1f 40 00          	nopl   0x0(%rax)
  37:	f7 d8                	neg    %eax
  39:	89 05 60 5e 01 00    	mov    %eax,0x15e60(%rip)        # 0x15e9f
  3f:	b8                   	.byte 0xb8

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 05                	ja     0xd
   8:	c3                   	ret
   9:	0f 1f 40 00          	nopl   0x0(%rax)
   d:	f7 d8                	neg    %eax
   f:	89 05 60 5e 01 00    	mov    %eax,0x15e60(%rip)        # 0x15e75
  15:	b8                   	.byte 0xb8
[  110.599719][  T971] RSP: 002b:00007ffc80e87938 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
[  110.599952][  T971] RAX: ffffffffffffffda RBX: 000000432fa376b2 RCX: 00007f734bc0b42b
[  110.600177][  T971] RDX: 0000004300000000 RSI: 0000000000000004 RDI: 00007f734bc15fc0
[  110.600398][  T971] RBP: 00007ffc80e87bd0 R08: 00007f734bbda010 R09: 000000000000000f
[  110.600587][  T971] R10: 00000000c0010001 R11: 0000000000000246 R12: 0000000000000001
[  110.600807][  T971] R13: 0000000000000001 R14: 00007f734bc212e0 R15: 00007f734bc20da0
| [  117.360496][  T995] ------------[ cut here ]------------
| [  117.360631][  T995] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/995
| [  117.360827][  T995] Modules linked in:
| [  117.361199][  T995] Tainted: [B]=BAD_PAGE, [W]=WARN
[  117.361331][  T995] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  117.361499][  T995] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  117.361639][  T995] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  117.362103][  T995] RSP: 0018:ffa00000035f7a90 EFLAGS: 00010046
[  117.362269][  T995] RAX: 0000000000000220 RBX: ff1100000b079020 RCX: 0000000000000001
[  117.362465][  T995] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  117.362667][  T995] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  117.362861][  T995] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd40000002c1e40
[  117.363057][  T995] R13: ff1100000b079040 R14: ff1100000103c940 R15: ffd40000002c1e40
[  117.363255][  T995] FS:  0000000000000000(0000) GS:ff1100009f0ae000(0000) knlGS:0000000000000000
[  117.363482][  T995] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.363652][  T995] CR2: 00007ffd5633da09 CR3: 0000000009333001 CR4: 0000000000771ef0
[  117.363845][  T995] PKRU: 55555554
[  117.363943][  T995] Call Trace:
[  117.364040][  T995]  <TASK>
[  117.364107][  T995]  check_bytes_and_report.cold (mm/slub.c:1359)
[  117.364238][  T995]  check_object (mm/slub.c:1507)
[  117.364366][  T995]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  117.364494][  T995]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  117.364627][  T995]  free_to_partial_list (mm/slub.c:5631)
[  117.364756][  T995]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  117.364884][  T995]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  117.365013][  T995]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  117.365144][  T995]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  117.365272][  T995]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  117.365400][  T995]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  117.365531][  T995]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  117.365666][  T995]  fuse_chan_send (fs/fuse/dev.c:827)
[  117.365794][  T995]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  117.365920][  T995]  ? fuse_file_release (fs/fuse/file.c:360)
[  117.366048][  T995]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  117.366177][  T995]  __fput (fs/file_table.c:512)
[  117.366273][  T995]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  117.366403][  T995]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  117.366565][  T995]  task_work_run (kernel/task_work.c:233)
[  117.366698][  T995]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  117.366859][  T995]  ? task_work_cancel (kernel/task_work.c:190)
[  117.366987][  T995]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  117.367117][  T995]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  117.367249][  T995]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  117.367376][  T995]  exit_to_user_mode_loop (./include/linux/resume_user_mode.h:50 kernel/entry/common.c:70 kernel/entry/common.c:101)
[  117.367506][  T995]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  117.367640][  T995]  do_syscall_64 (./include/linux/irq-entry-common.h:207 ./include/linux/irq-entry-common.h:230 ./include/linux/entry-common.h:336 arch/x86/entry/syscall_64.c:89)
[  117.367768][  T995]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  117.367895][  T995]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  117.368056][  T995] RIP: 0033:0x7f3971b9b6c0
[  117.368196][  T995] Code: Unable to access opcode bytes at 0x7f3971b9b696.

Code starting with the faulting instruction
===========================================
[  117.368362][  T995] RSP: 002b:00007ffd5633d6d0 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  117.368558][  T995] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  117.368757][  T995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  117.368996][  T995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  117.369236][  T995] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  117.369432][  T995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
| [  117.379034][  T995] ------------[ cut here ]------------
| [  117.379161][  T995] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/995
| [  117.379393][  T995] Modules linked in:
| [  117.379843][  T995] Tainted: [B]=BAD_PAGE, [W]=WARN
[  117.379974][  T995] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  117.380181][  T995] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  117.380315][  T995] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  117.380868][  T995] RSP: 0018:ffa00000035f7aa0 EFLAGS: 00010046
[  117.381032][  T995] RAX: 0000000000000220 RBX: ff11000009cd07a0 RCX: 0000000000000001
[  117.381226][  T995] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  117.381462][  T995] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  117.381701][  T995] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000273400
[  117.381940][  T995] R13: ff11000009cd07b8 R14: ff1100000103c940 R15: ffd4000000273400
[  117.382135][  T995] FS:  0000000000000000(0000) GS:ff1100009f0ae000(0000) knlGS:0000000000000000
[  117.382408][  T995] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.382616][  T995] CR2: 00007f3971b9b696 CR3: 0000000009333001 CR4: 0000000000771ef0
[  117.382854][  T995] PKRU: 55555554
[  117.382951][  T995] Call Trace:
[  117.383049][  T995]  <TASK>
[  117.383157][  T995]  check_bytes_and_report.cold (mm/slub.c:1359)
[  117.383286][  T995]  check_object (mm/slub.c:1515)
[  117.383460][  T995]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  117.383588][  T995]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  117.383763][  T995]  free_to_partial_list (mm/slub.c:5631)
[  117.383892][  T995]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  117.384064][  T995]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  117.384193][  T995]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  117.384361][  T995]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  117.384489][  T995]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  117.384662][  T995]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  117.384790][  T995]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  117.384964][  T995]  fuse_chan_send (fs/fuse/dev.c:827)
[  117.385094][  T995]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  117.385264][  T995]  ? fuse_file_release (fs/fuse/file.c:360)
[  117.385394][  T995]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  117.385565][  T995]  __fput (fs/file_table.c:512)
[  117.385665][  T995]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  117.385795][  T995]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  117.385998][  T995]  task_work_run (kernel/task_work.c:233)
[  117.386172][  T995]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  117.386332][  T995]  ? task_work_cancel (kernel/task_work.c:190)
[  117.386502][  T995]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  117.386636][  T995]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  117.386808][  T995]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  117.386938][  T995]  exit_to_user_mode_loop (./include/linux/resume_user_mode.h:50 kernel/entry/common.c:70 kernel/entry/common.c:101)
[  117.387066][  T995]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  117.387195][  T995]  do_syscall_64 (./include/linux/irq-entry-common.h:207 ./include/linux/irq-entry-common.h:230 ./include/linux/entry-common.h:336 arch/x86/entry/syscall_64.c:89)
[  117.387369][  T995]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  117.387498][  T995]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  117.387702][  T995] RIP: 0033:0x7f3971b9b6c0
[  117.387839][  T995] Code: Unable to access opcode bytes at 0x7f3971b9b696.

Code starting with the faulting instruction
===========================================
[  117.388051][  T995] RSP: 002b:00007ffd5633d6d0 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  117.388291][  T995] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  117.388488][  T995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  117.388729][  T995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  117.388966][  T995] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  117.389202][  T995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
| [  123.246366][  T838] ------------[ cut here ]------------
| [  123.246491][  T838] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: mode-2-recovery/838
| [  123.246717][  T838] Modules linked in:
| [  123.247109][  T838] Tainted: [B]=BAD_PAGE, [W]=WARN
[  123.247240][  T838] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  123.247401][  T838] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  123.247536][  T838] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  123.247988][  T838] RSP: 0018:ffa0000002fc7648 EFLAGS: 00010046
[  123.248148][  T838] RAX: 0000000000000220 RBX: ff1100000918e020 RCX: 0000000000000001
[  123.248338][  T838] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  123.248528][  T838] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  123.248727][  T838] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000246380
[  123.248916][  T838] R13: ff1100000918e038 R14: ff1100000103c940 R15: ffd4000000246380
[  123.249152][  T838] FS:  00007f8de80b8b80(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  123.249415][  T838] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.249618][  T838] CR2: 000055dfeb2c5c2c CR3: 0000000001f29003 CR4: 0000000000771ef0
[  123.249812][  T838] PKRU: 55555554
[  123.249949][  T838] Call Trace:
[  123.250044][  T838]  <TASK>
[  123.250110][  T838]  check_bytes_and_report.cold (mm/slub.c:1359)
[  123.250279][  T838]  check_object (mm/slub.c:1515)
[  123.250406][  T838]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  123.250575][  T838]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  123.250704][  T838]  free_to_partial_list (mm/slub.c:5631)
[  123.250871][  T838]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  123.250995][  T838]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  123.251161][  T838]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  123.251286][  T838]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  123.251453][  T838]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  123.251579][  T838]  ? __vma_start_write (mm/mmap_lock.c:163)
[  123.251752][  T838]  ? vm_area_dup (mm/vma_init.c:128 (discriminator 7))
[  123.251878][  T838]  vm_area_dup (mm/vma_init.c:128 (discriminator 7))
[  123.252013][  T838]  dup_mmap (mm/mmap.c:1763)
[  123.252110][  T838]  ? mmap_read_lock_maybe_expand (./include/linux/rwsem.h:221 (discriminator 1))
[  123.252310][  T838]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  123.252468][  T838]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  123.252636][  T838]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[  123.252837][  T838]  ? debug_object_activate (lib/debugobjects.c:891 (discriminator 3))
[  123.252964][  T838]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  123.253132][  T838]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  123.253286][  T838]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  123.253455][  T838]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[  123.253612][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.253781][  T838]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  123.253907][  T838]  copy_process (kernel/fork.c:1543 kernel/fork.c:1595 kernel/fork.c:2307)
[  123.254079][  T838]  ? pidfd_prepare (./include/linux/list.h:1037 (discriminator 3) ./include/linux/pid.h:98 (discriminator 3) kernel/fork.c:1936 (discriminator 3))
[  123.254205][  T838]  ? handle_pte_fault (mm/memory.c:6582)
[  123.254369][  T838]  kernel_clone (kernel/fork.c:2766)
[  123.254493][  T838]  ? create_io_thread (kernel/fork.c:2704)
[  123.254664][  T838]  ? __pmd_alloc (./include/linux/mm.h:1762)
[  123.254791][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.254955][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.255081][  T838]  __do_sys_clone (kernel/fork.c:2908)
[  123.255249][  T838]  ? kernel_clone (./include/trace/events/sched.h:396 (discriminator 19))
[  123.255374][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.255537][  T838]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  123.255696][  T838]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  123.255892][  T838]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  123.256056][  T838]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  123.256182][  T838]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  123.256380][  T838] RIP: 0033:0x7f8de817a126
[  123.256512][  T838] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 7d af f5 ff       	call   0xfffffffffff5af84
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 5a                	ja     0x8c
  32:	89 c3                	mov    %eax,%ebx
  34:	85 c0                	test   %eax,%eax
  36:	75 2f                	jne    0x67
  38:	64                   	fs
  39:	48                   	rex.W
  3a:	8b                   	.byte 0x8b
  3b:	04 25                	add    $0x25,%al
  3d:	10 00                	adc    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 5a                	ja     0x62
   8:	89 c3                	mov    %eax,%ebx
   a:	85 c0                	test   %eax,%eax
   c:	75 2f                	jne    0x3d
   e:	64                   	fs
   f:	48                   	rex.W
  10:	8b                   	.byte 0x8b
  11:	04 25                	add    $0x25,%al
  13:	10 00                	adc    %al,(%rax)
	...
[  123.257050][  T838] RSP: 002b:00007fff6bab29e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  123.257281][  T838] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f8de817a126
[  123.257469][  T838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  123.257702][  T838] RBP: 00007fff6bab2a00 R08: 0000000000000000 R09: 0000000000000030
[  123.257931][  T838] R10: 00007f8de80b8e50 R11: 0000000000000246 R12: 000055dfeb3c2030
[  123.258160][  T838] R13: 000055dfeb2d5ce0 R14: 0000000000000000 R15: 00000000ffffffff
| [  123.636221][  T838] ------------[ cut here ]------------
| [  123.636345][  T838] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: mode-2-recovery/838
| [  123.636566][  T838] Modules linked in:
| [  123.636959][  T838] Tainted: [B]=BAD_PAGE, [W]=WARN
[  123.637086][  T838] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  123.637244][  T838] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  123.637427][  T838] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea 8d          	adc    %ah,-0x73(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  123.637922][  T838] RSP: 0018:ffa0000002fc7638 EFLAGS: 00010046
[  123.638125][  T838] RAX: 0000000000000220 RBX: ff11000005cdeaa0 RCX: 0000000000000001
[  123.638358][  T838] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660
[  123.638546][  T838] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc
[  123.638782][  T838] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000173780
[  123.639010][  T838] R13: ff11000005cdeac0 R14: ff1100000103c940 R15: ffd4000000173780
[  123.639243][  T838] FS:  00007f8de80b8b80(0000) GS:ff1100009f1ae000(0000) knlGS:0000000000000000
[  123.639507][  T838] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.639671][  T838] CR2: 000055dfeb331d28 CR3: 0000000001f29005 CR4: 0000000000771ef0
[  123.639905][  T838] PKRU: 55555554
[  123.639999][  T838] Call Trace:
[  123.640135][  T838]  <TASK>
[  123.640200][  T838]  check_bytes_and_report.cold (mm/slub.c:1359)
[  123.640327][  T838]  check_object (mm/slub.c:1507)
[  123.640494][  T838]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  123.640619][  T838]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  123.640789][  T838]  free_to_partial_list (mm/slub.c:5631)
[  123.640912][  T838]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  123.641079][  T838]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  123.641203][  T838]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  123.641367][  T838]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  123.641490][  T838]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  123.641662][  T838]  ? __vma_start_write (mm/mmap_lock.c:163)
[  123.641788][  T838]  ? vm_area_dup (mm/vma_init.c:128 (discriminator 7))
[  123.641953][  T838]  vm_area_dup (mm/vma_init.c:128 (discriminator 7))
[  123.642048][  T838]  dup_mmap (mm/mmap.c:1763)
[  123.642191][  T838]  ? mmap_read_lock_maybe_expand (./include/linux/rwsem.h:221 (discriminator 1))
[  123.642345][  T838]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  123.642540][  T838]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  123.642666][  T838]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[  123.642865][  T838]  ? debug_object_activate (lib/debugobjects.c:891 (discriminator 3))
[  123.643031][  T838]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  123.643157][  T838]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  123.643353][  T838]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  123.643476][  T838]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[  123.643672][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.643796][  T838]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  123.643962][  T838]  copy_process (kernel/fork.c:1543 kernel/fork.c:1595 kernel/fork.c:2307)
[  123.644088][  T838]  ? pidfd_prepare (./include/linux/list.h:1037 (discriminator 3) ./include/linux/pid.h:98 (discriminator 3) kernel/fork.c:1936 (discriminator 3))
[  123.644252][  T838]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  123.644375][  T838]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  123.644539][  T838]  ? __do_pipe_flags (fs/pipe.c:1071)
[  123.644670][  T838]  ? __x64_sys_pipe2 (fs/pipe.c:1137 fs/pipe.c:1135 fs/pipe.c:1135)
[  123.644832][  T838]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  123.644955][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.645122][  T838]  kernel_clone (kernel/fork.c:2766)
[  123.645243][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.645407][  T838]  ? __create_object (mm/kmemleak.c:807 (discriminator 3))
[  123.645531][  T838]  ? create_io_thread (kernel/fork.c:2704)
[  123.645703][  T838]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  123.645827][  T838]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  123.645990][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.646115][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.646279][  T838]  __do_sys_clone (kernel/fork.c:2908)
[  123.646403][  T838]  ? kernel_clone (./include/trace/events/sched.h:396 (discriminator 19))
[  123.646569][  T838]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  123.646696][  T838]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  123.646892][  T838]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  123.647089][  T838]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  123.647213][  T838]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  123.647381][  T838]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  123.647534][  T838] RIP: 0033:0x7f8de817a126
[  123.647714][  T838] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 7d af f5 ff       	call   0xfffffffffff5af84
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 5a                	ja     0x8c
  32:	89 c3                	mov    %eax,%ebx
  34:	85 c0                	test   %eax,%eax
  36:	75 2f                	jne    0x67
  38:	64                   	fs
  39:	48                   	rex.W
  3a:	8b                   	.byte 0x8b
  3b:	04 25                	add    $0x25,%al
  3d:	10 00                	adc    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 5a                	ja     0x62
   8:	89 c3                	mov    %eax,%ebx
   a:	85 c0                	test   %eax,%eax
   c:	75 2f                	jne    0x3d
   e:	64                   	fs
   f:	48                   	rex.W
  10:	8b                   	.byte 0x8b
  11:	04 25                	add    $0x25,%al
  13:	10 00                	adc    %al,(%rax)
	...
[  123.648204][  T838] RSP: 002b:00007fff6bab10c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  123.648435][  T838] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f8de817a126
[  123.648670][  T838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  123.648898][  T838] RBP: 00007fff6bab10e0 R08: 0000000000000000 R09: 0000000000000200
[  123.649086][  T838] R10: 00007f8de80b8e50 R11: 0000000000000246 R12: 00007fff6bab1860


Finger prints:
print_report:kasan_report:bond_update_slave_arr:bond_enslave:do_set_master
object_err:check_object:free_debug_processing:free_to_partial_list:qlist_free_all