======================================
| [  145.687077][ T3188] ==================================================================
| [  145.687267][ T3188] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
| [  145.687460][ T3188] Write of size 8 at addr ff11000009f7f878 by task ip/3188
| [  145.687646][ T3188]
[  145.687716][ T3188] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  145.687718][ T3188] Call Trace:
[  145.687720][ T3188]  <TASK>
[  145.687721][ T3188]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[  145.687727][ T3188]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[  145.687731][ T3188]  print_report (mm/kasan/report.c:482)
[  145.687733][ T3188]  ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54)
[  145.687736][ T3188]  ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[  145.687738][ T3188]  kasan_report (mm/kasan/report.c:595)
[  145.687741][ T3188]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[  145.687742][ T3188]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[  145.687744][ T3188]  bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[  145.687746][ T3188]  ? __mutex_unlock_slowpath (./include/linux/preempt.h:500 (discriminator 1) kernel/locking/mutex.c:999 (discriminator 1))
[  145.687750][ T3188]  ? bond_slave_arr_work_rearm (drivers/net/bonding/bond_main.c:5078)
[  145.687751][ T3188]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[  145.687755][ T3188]  bond_enslave (drivers/net/bonding/bond_main.c:2337)
[  145.687758][ T3188]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5218 (discriminator 9))
[  145.687759][ T3188]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[  145.687761][ T3188]  ? mark_usage (kernel/locking/lockdep.c:4690)
[  145.687763][ T3188]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  145.687765][ T3188]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  145.687768][ T3188]  ? is_bpf_text_address (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) kernel/bpf/core.c:751 (discriminator 2))
[  145.687772][ T3188]  ? rtnl_af_lookup (net/core/rtnetlink.c:794 (discriminator 1))
[  145.687776][ T3188]  do_set_master (net/core/rtnetlink.c:3088)
[  145.687778][ T3188]  do_setlink.isra.0 (net/core/rtnetlink.c:3290 (discriminator 1))
[  145.687781][ T3188]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[  145.687782][ T3188]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  145.687786][ T3188]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[  145.687789][ T3188]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:388 kernel/rcu/update.c:380)
[  145.687791][ T3188]  ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 2) lib/stackdepot.c:676 (discriminator 2))
[  145.687794][ T3188]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[  145.687796][ T3188]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[  145.687797][ T3188]  ? validate_chain (kernel/locking/lockdep.c:3817 (discriminator 2) kernel/locking/lockdep.c:3837 (discriminator 2) kernel/locking/lockdep.c:3892 (discriminator 2))
[  145.687799][ T3188]  ? kasan_save_stack (mm/kasan/common.c:58)
[  145.687801][ T3188]  ? kasan_save_stack (mm/kasan/common.c:57)
[  145.687802][ T3188]  ? kasan_save_track (mm/kasan/common.c:78)
[  145.687804][ T3188]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  145.687805][ T3188]  ? __netlink_dump_start (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) net/netlink/af_netlink.c:2433 (discriminator 1))
[  145.687808][ T3188]  ? ___sys_sendmsg (net/socket.c:2758 (discriminator 1))
[  145.687812][ T3188]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[  145.687813][ T3188]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[  145.687816][ T3188]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  145.687817][ T3188]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  145.687819][ T3188]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  145.687820][ T3188]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  145.687821][ T3188]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[  145.687823][ T3188]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[  145.687824][ T3188]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[  145.687826][ T3188]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[  145.687828][ T3188]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[  145.687829][ T3188]  ? nla_get_range_signed (lib/nlattr.c:270)
[  145.687833][ T3188]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[  145.687835][ T3188]  rtnl_newlink (net/core/rtnetlink.c:4241)
[  145.687838][ T3188]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  145.687840][ T3188]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  145.687842][ T3188]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[  145.687844][ T3188]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[  145.687846][ T3188]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  145.687848][ T3188]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[  145.687850][ T3188]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  145.687852][ T3188]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[  145.687854][ T3188]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  145.687856][ T3188]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  145.687858][ T3188]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[  145.687860][ T3188]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[  145.687862][ T3188]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[  145.687864][ T3188]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  145.687866][ T3188]  ? netlink_ack (./include/linux/skbuff.h:2718)
[  145.687869][ T3188]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2))
[  145.687870][ T3188]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2))
[  145.687872][ T3188]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[  145.687874][ T3188]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[  145.687876][ T3188]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  145.687879][ T3188]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[  145.687881][ T3188]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  145.687883][ T3188]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[  145.687887][ T3188]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  145.687888][ T3188]  ? copy_msghdr_from_user (net/socket.c:2650)
[  145.687890][ T3188]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  145.687891][ T3188]  ? move_addr_to_kernel (net/socket.c:258)
[  145.687894][ T3188]  ___sys_sendmsg (net/socket.c:2767)
[  145.687896][ T3188]  ? copy_msghdr_from_user (net/socket.c:2619)
[  145.687901][ T3188]  __sys_sendmsg (net/socket.c:2799)
[  145.687903][ T3188]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  145.687906][ T3188]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  145.687908][ T3188]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  145.687910][ T3188]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  145.687912][ T3188]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  145.687914][ T3188] RIP: 0033:0x7f8adb18354e
[  145.687917][ T3188] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  145.687919][ T3188] RSP: 002b:00007ffd44878260 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  145.687922][ T3188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8adb18354e
[  145.687924][ T3188] RDX: 0000000000000000 RSI: 00007ffd44878310 RDI: 0000000000000005
[  145.687925][ T3188] RBP: 00007ffd44878270 R08: 0000000000000000 R09: 0000000000000000
[  145.687925][ T3188] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a99416e
[  145.687926][ T3188] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffd448789e0
| [  148.721219][ T1463] ------------[ cut here ]------------
| [  148.721389][ T1463] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: bond_options.sh/1463
| [  148.721656][ T1463] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  148.722239][ T1463] Tainted: [B]=BAD_PAGE
[  148.722339][ T1463] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  148.722544][ T1463] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  148.722682][ T1463] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  148.723231][ T1463] RSP: 0018:ffa0000001b37b60 EFLAGS: 00010046
[  148.723397][ T1463] RAX: 0000000000000020 RBX: ff11000004ad37a0 RCX: 0000000000000001
[  148.723636][ T1463] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  148.723871][ T1463] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  148.724113][ T1463] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012b4c0
[  148.724306][ T1463] R13: ff11000004ad37c0 R14: ff1100000103c940 R15: ffd400000012b4c0
[  148.724546][ T1463] FS:  00007f3b21118b80(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  148.724817][ T1463] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.725028][ T1463] CR2: 000055c7ccfff138 CR3: 000000000c76b005 CR4: 0000000000771ef0
[  148.725225][ T1463] PKRU: 55555554
[  148.725367][ T1463] Call Trace:
[  148.725465][ T1463]  <TASK>
[  148.725534][ T1463]  check_bytes_and_report.cold (mm/slub.c:1359)
[  148.725705][ T1463]  check_object (mm/slub.c:1507)
[  148.725839][ T1463]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  148.726011][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.726138][ T1463]  free_to_partial_list (mm/slub.c:5631)
[  148.726308][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.726437][ T1463]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.726606][ T1463]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  148.726735][ T1463]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  148.726906][ T1463]  kmem_cache_alloc_lru_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5029)
[  148.727114][ T1463]  ? alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.727243][ T1463]  alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.727340][ T1463]  create_pipe_files (./include/linux/fs.h:3044 fs/pipe.c:969 fs/pipe.c:1009)
[  148.727509][ T1463]  __do_pipe_flags (fs/pipe.c:1071)
[  148.727635][ T1463]  do_pipe2 (fs/pipe.c:1119)
[  148.727771][ T1463]  ? __do_pipe_flags (fs/pipe.c:1094)
[  148.727898][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.728071][ T1463]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  148.728200][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.728368][ T1463]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  148.728527][ T1463]  __x64_sys_pipe2 (fs/pipe.c:1137 fs/pipe.c:1135 fs/pipe.c:1135)
[  148.728695][ T1463]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  148.728821][ T1463]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  148.728995][ T1463]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  148.729121][ T1463]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  148.729320][ T1463] RIP: 0033:0x7f3b21202d7d
[  148.729501][ T1463] Code: 07 31 c0 e9 25 ff ff ff 55 48 8d 3d f5 22 0d 00 48 89 e5 e8 05 92 01 00 0f 1f 44 00 00 f3 0f 1e fa 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 0b c3 66 2e 0f 1f 84 00 00 00 00 00 48 8b 15
All code
========
   0:	07                   	(bad)
   1:	31 c0                	xor    %eax,%eax
   3:	e9 25 ff ff ff       	jmp    0xffffffffffffff2d
   8:	55                   	push   %rbp
   9:	48 8d 3d f5 22 0d 00 	lea    0xd22f5(%rip),%rdi        # 0xd2305
  10:	48 89 e5             	mov    %rsp,%rbp
  13:	e8 05 92 01 00       	call   0x1921d
  18:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  1d:	f3 0f 1e fa          	endbr64
  21:	31 f6                	xor    %esi,%esi
  23:	b8 25 01 00 00       	mov    $0x125,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 0b                	ja     0x3d
  32:	c3                   	ret
  33:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  3a:	00 00 00 
  3d:	48                   	rex.W
  3e:	8b                   	.byte 0x8b
  3f:	15                   	.byte 0x15

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 0b                	ja     0x13
   8:	c3                   	ret
   9:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  10:	00 00 00 
  13:	48                   	rex.W
  14:	8b                   	.byte 0x8b
  15:	15                   	.byte 0x15
[  148.730002][ T1463] RSP: 002b:00007ffc92d25428 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  148.730241][ T1463] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f3b21202d7d
[  148.730477][ T1463] RDX: 000055c7ccfed1c0 RSI: 0000000000000000 RDI: 00007ffc92d25458
[  148.730715][ T1463] RBP: 00007ffc92d255d0 R08: 000055c7ccec57b0 R09: 0000000000000200
[  148.730907][ T1463] R10: 0000000000000201 R11: 0000000000000246 R12: 00007ffc92d25730
[  148.731149][ T1463] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000000
| [  148.741156][ T1463] ------------[ cut here ]------------
| [  148.741320][ T1463] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: bond_options.sh/1463
| [  148.741538][ T1463] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  148.742105][ T1463] Tainted: [B]=BAD_PAGE, [W]=WARN
[  148.742276][ T1463] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  148.742435][ T1463] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  148.742610][ T1463] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  148.743154][ T1463] RSP: 0018:ffa0000001b37b60 EFLAGS: 00010046
[  148.743314][ T1463] RAX: 0000000000000220 RBX: ff11000004ad30e0 RCX: 0000000000000001
[  148.743545][ T1463] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  148.743773][ T1463] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  148.744009][ T1463] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012b4c0
[  148.744196][ T1463] R13: ff11000004ad3100 R14: ff1100000103c940 R15: ffd400000012b4c0
[  148.744429][ T1463] FS:  00007f3b21118b80(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  148.744693][ T1463] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.744896][ T1463] CR2: 000055c7ccfff138 CR3: 000000000c76b005 CR4: 0000000000771ef0
[  148.745089][ T1463] PKRU: 55555554
[  148.745226][ T1463] Call Trace:
[  148.745320][ T1463]  <TASK>
[  148.745383][ T1463]  check_bytes_and_report.cold (mm/slub.c:1359)
[  148.745549][ T1463]  check_object (mm/slub.c:1507)
[  148.745675][ T1463]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  148.745846][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.745976][ T1463]  free_to_partial_list (mm/slub.c:5631)
[  148.746141][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.746267][ T1463]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.746433][ T1463]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  148.746556][ T1463]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  148.746724][ T1463]  kmem_cache_alloc_lru_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5029)
[  148.746879][ T1463]  ? alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.747049][ T1463]  alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.747144][ T1463]  create_pipe_files (./include/linux/fs.h:3044 fs/pipe.c:969 fs/pipe.c:1009)
[  148.747308][ T1463]  __do_pipe_flags (fs/pipe.c:1071)
[  148.747433][ T1463]  do_pipe2 (fs/pipe.c:1119)
[  148.747569][ T1463]  ? __do_pipe_flags (fs/pipe.c:1094)
[  148.747693][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.747861][ T1463]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  148.747992][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.748159][ T1463]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  148.748314][ T1463]  __x64_sys_pipe2 (fs/pipe.c:1137 fs/pipe.c:1135 fs/pipe.c:1135)
[  148.748479][ T1463]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  148.748605][ T1463]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  148.748772][ T1463]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  148.748895][ T1463]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  148.749096][ T1463] RIP: 0033:0x7f3b21202d7d
[  148.749228][ T1463] Code: 07 31 c0 e9 25 ff ff ff 55 48 8d 3d f5 22 0d 00 48 89 e5 e8 05 92 01 00 0f 1f 44 00 00 f3 0f 1e fa 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 0b c3 66 2e 0f 1f 84 00 00 00 00 00 48 8b 15
All code
========
   0:	07                   	(bad)
   1:	31 c0                	xor    %eax,%eax
   3:	e9 25 ff ff ff       	jmp    0xffffffffffffff2d
   8:	55                   	push   %rbp
   9:	48 8d 3d f5 22 0d 00 	lea    0xd22f5(%rip),%rdi        # 0xd2305
  10:	48 89 e5             	mov    %rsp,%rbp
  13:	e8 05 92 01 00       	call   0x1921d
  18:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  1d:	f3 0f 1e fa          	endbr64
  21:	31 f6                	xor    %esi,%esi
  23:	b8 25 01 00 00       	mov    $0x125,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 0b                	ja     0x3d
  32:	c3                   	ret
  33:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  3a:	00 00 00 
  3d:	48                   	rex.W
  3e:	8b                   	.byte 0x8b
  3f:	15                   	.byte 0x15

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 0b                	ja     0x13
   8:	c3                   	ret
   9:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  10:	00 00 00 
  13:	48                   	rex.W
  14:	8b                   	.byte 0x8b
  15:	15                   	.byte 0x15
[  148.749773][ T1463] RSP: 002b:00007ffc92d25428 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  148.750009][ T1463] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f3b21202d7d
[  148.750238][ T1463] RDX: 000055c7ccfed1c0 RSI: 0000000000000000 RDI: 00007ffc92d25458
[  148.750428][ T1463] RBP: 00007ffc92d255d0 R08: 000055c7ccec57b0 R09: 0000000000000200
[  148.750659][ T1463] R10: 0000000000000201 R11: 0000000000000246 R12: 00007ffc92d25730
[  148.750890][ T1463] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000000
| [  148.760618][ T1463] ------------[ cut here ]------------
| [  148.760780][ T1463] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: bond_options.sh/1463
| [  148.761041][ T1463] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  148.761595][ T1463] Tainted: [B]=BAD_PAGE, [W]=WARN
[  148.761721][ T1463] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  148.761920][ T1463] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  148.762054][ T1463] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  148.762587][ T1463] RSP: 0018:ffa0000001b37b70 EFLAGS: 00010046
[  148.762788][ T1463] RAX: 0000000000000220 RBX: ff11000009f7f860 RCX: 0000000000000001
[  148.762983][ T1463] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  148.763212][ T1463] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  148.763443][ T1463] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000027dfc0
[  148.763672][ T1463] R13: ff11000009f7f878 R14: ff1100000103c940 R15: ffd400000027dfc0
[  148.763861][ T1463] FS:  00007f3b21118b80(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  148.764125][ T1463] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.764327][ T1463] CR2: 000055c7ccfff138 CR3: 000000000c76b005 CR4: 0000000000771ef0
[  148.764557][ T1463] PKRU: 55555554
[  148.764650][ T1463] Call Trace:
[  148.764744][ T1463]  <TASK>
[  148.764849][ T1463]  check_bytes_and_report.cold (mm/slub.c:1359)
[  148.764979][ T1463]  check_object (mm/slub.c:1515)
[  148.765148][ T1463]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  148.765274][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.765439][ T1463]  free_to_partial_list (mm/slub.c:5631)
[  148.765562][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.765731][ T1463]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.765856][ T1463]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  148.766026][ T1463]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  148.766150][ T1463]  kmem_cache_alloc_lru_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5029)
[  148.766348][ T1463]  ? alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.766474][ T1463]  alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.766609][ T1463]  create_pipe_files (./include/linux/fs.h:3044 fs/pipe.c:969 fs/pipe.c:1009)
[  148.766733][ T1463]  __do_pipe_flags (fs/pipe.c:1071)
[  148.766900][ T1463]  do_pipe2 (fs/pipe.c:1119)
[  148.766997][ T1463]  ? __do_pipe_flags (fs/pipe.c:1094)
[  148.767162][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.767286][ T1463]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  148.767452][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.767578][ T1463]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  148.767773][ T1463]  __x64_sys_pipe2 (fs/pipe.c:1137 fs/pipe.c:1135 fs/pipe.c:1135)
[  148.767898][ T1463]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  148.768067][ T1463]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  148.768192][ T1463]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  148.768359][ T1463]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  148.768513][ T1463] RIP: 0033:0x7f3b21202d7d
[  148.768686][ T1463] Code: 07 31 c0 e9 25 ff ff ff 55 48 8d 3d f5 22 0d 00 48 89 e5 e8 05 92 01 00 0f 1f 44 00 00 f3 0f 1e fa 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 0b c3 66 2e 0f 1f 84 00 00 00 00 00 48 8b 15
All code
========
   0:	07                   	(bad)
   1:	31 c0                	xor    %eax,%eax
   3:	e9 25 ff ff ff       	jmp    0xffffffffffffff2d
   8:	55                   	push   %rbp
   9:	48 8d 3d f5 22 0d 00 	lea    0xd22f5(%rip),%rdi        # 0xd2305
  10:	48 89 e5             	mov    %rsp,%rbp
  13:	e8 05 92 01 00       	call   0x1921d
  18:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  1d:	f3 0f 1e fa          	endbr64
  21:	31 f6                	xor    %esi,%esi
  23:	b8 25 01 00 00       	mov    $0x125,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 0b                	ja     0x3d
  32:	c3                   	ret
  33:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  3a:	00 00 00 
  3d:	48                   	rex.W
  3e:	8b                   	.byte 0x8b
  3f:	15                   	.byte 0x15

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 0b                	ja     0x13
   8:	c3                   	ret
   9:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  10:	00 00 00 
  13:	48                   	rex.W
  14:	8b                   	.byte 0x8b
  15:	15                   	.byte 0x15
[  148.769220][ T1463] RSP: 002b:00007ffc92d25428 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  148.769409][ T1463] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f3b21202d7d
[  148.769638][ T1463] RDX: 000055c7ccfed1c0 RSI: 0000000000000000 RDI: 00007ffc92d25458
[  148.769867][ T1463] RBP: 00007ffc92d255d0 R08: 000055c7ccec57b0 R09: 0000000000000200
[  148.770100][ T1463] R10: 0000000000000201 R11: 0000000000000246 R12: 00007ffc92d25730
[  148.770287][ T1463] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000000
| [  148.779985][ T1463] ------------[ cut here ]------------
| [  148.780107][ T1463] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: bond_options.sh/1463
| [  148.780361][ T1463] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  148.780914][ T1463] Tainted: [B]=BAD_PAGE, [W]=WARN
[  148.781087][ T1463] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  148.781245][ T1463] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  148.781419][ T1463] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  148.781905][ T1463] RSP: 0018:ffa0000001b37b70 EFLAGS: 00010046
[  148.782111][ T1463] RAX: 0000000000000220 RBX: ff11000009f7fce0 RCX: 0000000000000001
[  148.782339][ T1463] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  148.782569][ T1463] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  148.782755][ T1463] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000027dfc0
[  148.782987][ T1463] R13: ff11000009f7fcf8 R14: ff1100000103c940 R15: ffd400000027dfc0
[  148.783220][ T1463] FS:  00007f3b21118b80(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  148.783480][ T1463] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.783640][ T1463] CR2: 000055c7ccfff138 CR3: 000000000c76b005 CR4: 0000000000771ef0
[  148.783870][ T1463] PKRU: 55555554
[  148.783966][ T1463] Call Trace:
[  148.784101][ T1463]  <TASK>
[  148.784165][ T1463]  check_bytes_and_report.cold (mm/slub.c:1359)
[  148.784332][ T1463]  check_object (mm/slub.c:1515)
[  148.784458][ T1463]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  148.784623][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.784747][ T1463]  free_to_partial_list (mm/slub.c:5631)
[  148.784913][ T1463]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.785040][ T1463]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  148.785206][ T1463]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  148.785331][ T1463]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  148.785495][ T1463]  kmem_cache_alloc_lru_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5029)
[  148.785649][ T1463]  ? alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.785815][ T1463]  alloc_inode (fs/inode.c:340 (discriminator 7))
[  148.785909][ T1463]  create_pipe_files (./include/linux/fs.h:3044 fs/pipe.c:969 fs/pipe.c:1009)
[  148.786079][ T1463]  __do_pipe_flags (fs/pipe.c:1071)
[  148.786204][ T1463]  do_pipe2 (fs/pipe.c:1119)
[  148.786298][ T1463]  ? __do_pipe_flags (fs/pipe.c:1094)
[  148.786464][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.786590][ T1463]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  148.786759][ T1463]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  148.786882][ T1463]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  148.787083][ T1463]  __x64_sys_pipe2 (fs/pipe.c:1137 fs/pipe.c:1135 fs/pipe.c:1135)
[  148.787251][ T1463]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  148.787375][ T1463]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  148.787541][ T1463]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  148.787670][ T1463]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  148.787867][ T1463] RIP: 0033:0x7f3b21202d7d
[  148.788000][ T1463] Code: 07 31 c0 e9 25 ff ff ff 55 48 8d 3d f5 22 0d 00 48 89 e5 e8 05 92 01 00 0f 1f 44 00 00 f3 0f 1e fa 31 f6 b8 25 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 0b c3 66 2e 0f 1f 84 00 00 00 00 00 48 8b 15
All code
========
   0:	07                   	(bad)
   1:	31 c0                	xor    %eax,%eax
   3:	e9 25 ff ff ff       	jmp    0xffffffffffffff2d
   8:	55                   	push   %rbp
   9:	48 8d 3d f5 22 0d 00 	lea    0xd22f5(%rip),%rdi        # 0xd2305
  10:	48 89 e5             	mov    %rsp,%rbp
  13:	e8 05 92 01 00       	call   0x1921d
  18:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  1d:	f3 0f 1e fa          	endbr64
  21:	31 f6                	xor    %esi,%esi
  23:	b8 25 01 00 00       	mov    $0x125,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 0b                	ja     0x3d
  32:	c3                   	ret
  33:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  3a:	00 00 00 
  3d:	48                   	rex.W
  3e:	8b                   	.byte 0x8b
  3f:	15                   	.byte 0x15

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 0b                	ja     0x13
   8:	c3                   	ret
   9:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  10:	00 00 00 
  13:	48                   	rex.W
  14:	8b                   	.byte 0x8b
  15:	15                   	.byte 0x15
[  148.788538][ T1463] RSP: 002b:00007ffc92d25428 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  148.788768][ T1463] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f3b21202d7d
[  148.788959][ T1463] RDX: 000055c7ccfed1c0 RSI: 0000000000000000 RDI: 00007ffc92d25458
[  148.789189][ T1463] RBP: 00007ffc92d255d0 R08: 000055c7ccec57b0 R09: 0000000000000200
[  148.789419][ T1463] R10: 0000000000000201 R11: 0000000000000246 R12: 00007ffc92d25730
[  148.789650][ T1463] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000000
| [  151.647705][ T3488] ------------[ cut here ]------------
| [  151.647839][ T3488] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: date/3488
| [  151.648091][ T3488] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  151.648667][ T3488] Tainted: [B]=BAD_PAGE, [W]=WARN
[  151.648806][ T3488] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  151.649028][ T3488] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  151.649172][ T3488] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  151.649747][ T3488] RSP: 0018:ffa00000045c7178 EFLAGS: 00010046
[  151.649971][ T3488] RAX: 0000000000000220 RBX: ff11000001953d40 RCX: 0000000000000001
[  151.650227][ T3488] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  151.650431][ T3488] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  151.650680][ T3488] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000000654c0
[  151.650930][ T3488] R13: ff11000001953d68 R14: ff1100000103cac0 R15: ffd40000000654c0
[  151.651138][ T3488] FS:  0000000000000000(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  151.651380][ T3488] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.651597][ T3488] CR2: 00007f3b212d6888 CR3: 000000000d283004 CR4: 0000000000771ef0
[  151.651848][ T3488] PKRU: 55555554
[  151.651953][ T3488] Call Trace:
[  151.652106][ T3488]  <TASK>
[  151.652177][ T3488]  check_bytes_and_report.cold (mm/slub.c:1359)
[  151.652314][ T3488]  check_object (mm/slub.c:1515)
[  151.652497][ T3488]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  151.652629][ T3488]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  151.652808][ T3488]  free_to_partial_list (mm/slub.c:5631)
[  151.652941][ T3488]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  151.653124][ T3488]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  151.653257][ T3488]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  151.653436][ T3488]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  151.653570][ T3488]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  151.653751][ T3488]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  151.653887][ T3488]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  151.654071][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.654208][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.654390][ T3488]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  151.654525][ T3488]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  151.654704][ T3488]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  151.654836][ T3488]  ? init_multi_vma_prep (mm/vma.c:174)
[  151.655021][ T3488]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  151.655154][ T3488]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  151.655332][ T3488]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  151.655465][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.655644][ T3488]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  151.655812][ T3488]  vma_expand (mm/vma.c:1302)
[  151.655995][ T3488]  relocate_vma_down (mm/vma_exec.c:63)
[  151.656128][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.656308][ T3488]  ? __install_special_mapping (??:?)
[  151.656522][ T3488]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  151.656655][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.656835][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.656974][ T3488]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  151.657108][ T3488]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  151.657242][ T3488]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  151.657377][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.657513][ T3488]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  151.657694][ T3488]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  151.657827][ T3488]  ? down_write (kernel/locking/rwsem.c:1633)
[  151.658009][ T3488]  setup_arg_pages (fs/exec.c:695)
[  151.658144][ T3488]  ? open_exec (fs/exec.c:823)
[  151.658245][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.658423][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.658555][ T3488]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  151.658769][ T3488]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  151.658949][ T3488]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  151.659088][ T3488]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  151.659265][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.659397][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.659578][ T3488]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  151.659711][ T3488]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  151.659888][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.660022][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.660199][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.660331][ T3488]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  151.660508][ T3488]  ? check_unsafe_exec (fs/exec.c:1617)
[  151.660642][ T3488]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  151.660821][ T3488]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  151.660954][ T3488]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  151.661135][ T3488]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  151.661269][ T3488]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  151.661449][ T3488]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  151.661614][ T3488] RIP: 0033:0x7f3b211daf4b
[  151.661806][ T3488] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  151.661984][ T3488] RSP: 002b:00007ffc92d23c98 EFLAGS: 00000206 ORIG_RAX: 000000000000003b
[  151.662234][ T3488] RAX: ffffffffffffffda RBX: 000055c7ccecea10 RCX: 00007f3b211daf4b
[  151.662484][ T3488] RDX: 000055c7ccecea90 RSI: 000055c7ccece9c0 RDI: 000055c7ccecea10
[  151.662732][ T3488] RBP: 00007ffc92d23d80 R08: 00007ffc92d23bc0 R09: 0000000000000000
[  151.662937][ T3488] R10: 0000000000000008 R11: 0000000000000206 R12: 000055c7ccecea10
[  151.663193][ T3488] R13: 0000000000000000 R14: 000055c7ccece9c0 R15: 000055c7ccecea90
| [  151.673718][ T3488] ------------[ cut here ]------------
| [  151.673847][ T3488] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: date/3488
| [  151.674094][ T3488] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  151.674654][ T3488] Tainted: [B]=BAD_PAGE, [W]=WARN
[  151.674786][ T3488] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  151.675004][ T3488] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  151.675142][ T3488] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  151.675706][ T3488] RSP: 0018:ffa00000045c7178 EFLAGS: 00010046
[  151.675922][ T3488] RAX: 0000000000000220 RBX: ff11000001953540 RCX: 0000000000000001
[  151.676125][ T3488] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  151.676371][ T3488] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  151.676618][ T3488] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000000654c0
[  151.676865][ T3488] R13: ff11000001953568 R14: ff1100000103cac0 R15: ffd40000000654c0
[  151.677067][ T3488] FS:  0000000000000000(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  151.677301][ T3488] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.677516][ T3488] CR2: 00007f3b211daf21 CR3: 000000000d283004 CR4: 0000000000771ef0
[  151.677765][ T3488] PKRU: 55555554
[  151.677866][ T3488] Call Trace:
[  151.677966][ T3488]  <TASK>
[  151.678083][ T3488]  check_bytes_and_report.cold (mm/slub.c:1359)
[  151.678218][ T3488]  check_object (mm/slub.c:1515)
[  151.678396][ T3488]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  151.678528][ T3488]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  151.678705][ T3488]  free_to_partial_list (mm/slub.c:5631)
[  151.678836][ T3488]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  151.679026][ T3488]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  151.679158][ T3488]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  151.679334][ T3488]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  151.679466][ T3488]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  151.679646][ T3488]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  151.679778][ T3488]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  151.679954][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.680090][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.680269][ T3488]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  151.680402][ T3488]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  151.680579][ T3488]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  151.680711][ T3488]  ? init_multi_vma_prep (mm/vma.c:174)
[  151.680888][ T3488]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  151.681025][ T3488]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  151.681201][ T3488]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  151.681334][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.681511][ T3488]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  151.681678][ T3488]  vma_expand (mm/vma.c:1302)
[  151.681853][ T3488]  relocate_vma_down (mm/vma_exec.c:63)
[  151.681988][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.682166][ T3488]  ? __install_special_mapping (??:?)
[  151.682331][ T3488]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  151.682510][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.682641][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.682819][ T3488]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  151.682952][ T3488]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  151.683134][ T3488]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  151.683267][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.683446][ T3488]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  151.683580][ T3488]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  151.683756][ T3488]  ? down_write (kernel/locking/rwsem.c:1633)
[  151.683887][ T3488]  setup_arg_pages (fs/exec.c:695)
[  151.684068][ T3488]  ? open_exec (fs/exec.c:823)
[  151.684170][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.684345][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.684478][ T3488]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  151.684691][ T3488]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  151.684827][ T3488]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  151.685007][ T3488]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  151.685140][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.685317][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.685449][ T3488]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  151.685626][ T3488]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  151.685757][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.685934][ T3488]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  151.686071][ T3488]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  151.686203][ T3488]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  151.686334][ T3488]  ? check_unsafe_exec (fs/exec.c:1617)
[  151.686514][ T3488]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  151.686644][ T3488]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  151.686821][ T3488]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  151.686951][ T3488]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  151.687133][ T3488]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  151.687264][ T3488]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  151.687471][ T3488] RIP: 0033:0x7f3b211daf4b
[  151.687658][ T3488] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  151.687829][ T3488] RSP: 002b:00007ffc92d23c98 EFLAGS: 00000206 ORIG_RAX: 000000000000003b
[  151.688079][ T3488] RAX: ffffffffffffffda RBX: 000055c7ccecea10 RCX: 00007f3b211daf4b
[  151.688329][ T3488] RDX: 000055c7ccecea90 RSI: 000055c7ccece9c0 RDI: 000055c7ccecea10
[  151.688528][ T3488] RBP: 00007ffc92d23d80 R08: 00007ffc92d23bc0 R09: 0000000000000000
[  151.688772][ T3488] R10: 0000000000000008 R11: 0000000000000206 R12: 000055c7ccecea10
[  151.689023][ T3488] R13: 0000000000000000 R14: 000055c7ccece9c0 R15: 000055c7ccecea90
| [  164.077649][ T3983] ------------[ cut here ]------------
| [  164.077794][ T3983] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/3983
| [  164.078010][ T3983] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  164.078529][ T3983] Tainted: [B]=BAD_PAGE, [W]=WARN
[  164.078674][ T3983] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  164.078856][ T3983] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  164.079009][ T3983] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  164.079529][ T3983] RSP: 0018:ffa0000004f36c60 EFLAGS: 00010046
[  164.079715][ T3983] RAX: 0000000000000220 RBX: ff11000004b1c3e0 RCX: 0000000000000001
[  164.079933][ T3983] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  164.080151][ T3983] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  164.080370][ T3983] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012c700
[  164.080586][ T3983] R13: ff11000004b1c3f8 R14: ff1100000103c940 R15: ffd400000012c700
[  164.080805][ T3983] FS:  00007f1dfa0fbcc0(0000) GS:ff110000a40ae000(0000) knlGS:0000000000000000
[  164.081062][ T3983] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.081244][ T3983] CR2: 00000000004edad8 CR3: 0000000016da8004 CR4: 0000000000771ef0
[  164.081461][ T3983] PKRU: 55555554
[  164.081569][ T3983] Call Trace:
[  164.081679][ T3983]  <TASK>
[  164.081753][ T3983]  check_bytes_and_report.cold (mm/slub.c:1359)
[  164.081900][ T3983]  check_object (mm/slub.c:1515)
[  164.082045][ T3983]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  164.082188][ T3983]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  164.082332][ T3983]  free_to_partial_list (mm/slub.c:5631)
[  164.082475][ T3983]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  164.082620][ T3983]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  164.082764][ T3983]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  164.082908][ T3983]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  164.083056][ T3983]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  164.083237][ T3983]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  164.083380][ T3983]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  164.083540][ T3983]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  164.083684][ T3983]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  164.083877][ T3983]  ? __igmp_group_dropped (./include/net/net_namespace.h:426 (discriminator 1) ./include/linux/netdevice.h:2809 (discriminator 1) net/ipv4/igmp.c:1362 (discriminator 1))
[  164.084021][ T3983]  ? debug_object_activate (lib/debugobjects.c:884)
[  164.084220][ T3983]  inet_ifmcaddr_notify (./include/linux/skbuff.h:1384 ./include/net/netlink.h:1055 net/ipv4/igmp.c:1546)
[  164.084363][ T3983]  ? inet_fill_ifmcaddr (./include/net/netlink.h:1107 (discriminator 1))
[  164.084559][ T3983]  ? __timer_delete (kernel/time/timer.c:803 kernel/time/timer.c:848 kernel/time/timer.c:1366)
[  164.084701][ T3983]  __ip_mc_dec_group (net/ipv4/igmp.c:1848)
[  164.084894][ T3983]  inetdev_event (net/ipv4/devinet.c:1643)
[  164.085040][ T3983]  ? mutex_is_locked (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.h:48 kernel/locking/mutex.c:65)
[  164.085235][ T3983]  notifier_call_chain (kernel/notifier.c:85)
[  164.085378][ T3983]  __dev_notify_flags (net/core/dev.c:2313 net/core/dev.c:2327 net/core/dev.c:9921)
[  164.085572][ T3983]  ? netif_change_name (net/core/dev.c:1517)
[  164.085715][ T3983]  netif_change_flags (net/core/dev.c:9948)
[  164.085911][ T3983]  do_setlink.isra.0 (net/core/rtnetlink.c:3283 (discriminator 1))
[  164.086060][ T3983]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[  164.086252][ T3983]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  164.086396][ T3983]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  164.086590][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.086736][ T3983]  ? stack_depot_save_flags (lib/stackdepot.c:609 lib/stackdepot.c:676)
[  164.086929][ T3983]  ? kasan_save_stack (mm/kasan/common.c:58)
[  164.087074][ T3983]  ? kasan_save_stack (mm/kasan/common.c:57)
[  164.087268][ T3983]  ? kasan_save_track (mm/kasan/common.c:78)
[  164.087410][ T3983]  ? __kasan_kmalloc (mm/kasan/common.c:398 mm/kasan/common.c:415)
[  164.087602][ T3983]  ? __kmalloc_cache_noprof (./include/linux/kasan.h:263 mm/slub.c:5563)
[  164.087743][ T3983]  ? rtnl_newlink (./include/linux/slab.h:991 (discriminator 1) net/core/rtnetlink.c:4139 (discriminator 1))
[  164.087936][ T3983]  ? rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[  164.088081][ T3983]  ? netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[  164.088274][ T3983]  ? netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[  164.088416][ T3983]  ? netlink_sendmsg (net/netlink/af_netlink.c:1900)
[  164.088611][ T3983]  ? ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  164.088754][ T3983]  ? ___sys_sendmsg (net/socket.c:2767)
[  164.088946][ T3983]  ? __sys_sendmsg (net/socket.c:2799)
[  164.089091][ T3983]  ? do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  164.089284][ T3983]  ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  164.089462][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.089655][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.089800][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.089992][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.090140][ T3983]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[  164.090332][ T3983]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[  164.090476][ T3983]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[  164.090668][ T3983]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[  164.090810][ T3983]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[  164.091005][ T3983]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[  164.091155][ T3983]  rtnl_newlink (net/core/rtnetlink.c:4241)
[  164.091347][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.091490][ T3983]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  164.091685][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.091829][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.092023][ T3983]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  164.092172][ T3983]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  164.092366][ T3983]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  164.092510][ T3983]  ? __kernel_text_address (kernel/extable.c:79)
[  164.092704][ T3983]  ? write_profile (profile.c:?)
[  164.092846][ T3983]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  164.093041][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.093184][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.093375][ T3983]  ? cap_capable (./include/trace/events/capability.h:26 (discriminator 22) security/commoncap.c:130 (discriminator 22))
[  164.093520][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.093713][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.093857][ T3983]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  164.094055][ T3983]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[  164.094198][ T3983]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  164.094393][ T3983]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  164.094537][ T3983]  ? stack_depot_save_flags (lib/stackdepot.c:609 lib/stackdepot.c:676)
[  164.094729][ T3983]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[  164.094872][ T3983]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  164.095070][ T3983]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  164.095214][ T3983]  ? netlink_ack (./include/linux/skbuff.h:2718)
[  164.095408][ T3983]  ? __netlink_lookup (./include/linux/rcupdate.h:850 ./include/linux/rhashtable.h:709 net/netlink/af_netlink.c:499)
[  164.095553][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.095745][ T3983]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  164.095889][ T3983]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[  164.096087][ T3983]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[  164.096233][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.096426][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.096571][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.096763][ T3983]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[  164.096906][ T3983]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  164.097103][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.097247][ T3983]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  164.097441][ T3983]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  164.097584][ T3983]  ? copy_msghdr_from_user (net/socket.c:2650)
[  164.097776][ T3983]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  164.098006][ T3983]  ? move_addr_to_kernel (net/socket.c:258)
[  164.098152][ T3983]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  164.098345][ T3983]  ___sys_sendmsg (net/socket.c:2767)
[  164.098488][ T3983]  ? copy_msghdr_from_user (net/socket.c:2619)
[  164.098685][ T3983]  __sys_sendmsg (net/socket.c:2799)
[  164.098829][ T3983]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  164.099023][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.099171][ T3983]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  164.099365][ T3983]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  164.099508][ T3983]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  164.099736][ T3983] RIP: 0033:0x7f1dfa36054e
[  164.099887][ T3983] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  164.100510][ T3983] RSP: 002b:00007ffe44e10630 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  164.100780][ T3983] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1dfa36054e
[  164.100996][ T3983] RDX: 0000000000000000 RSI: 00007ffe44e106e0 RDI: 0000000000000005
[  164.101267][ T3983] RBP: 00007ffe44e10640 R08: 0000000000000000 R09: 0000000000000000
[  164.101533][ T3983] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994180
[  164.101800][ T3983] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffe44e10db0
| [  164.113103][ T3983] ------------[ cut here ]------------
| [  164.113294][ T3983] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/3983
| [  164.113506][ T3983] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  164.114117][ T3983] Tainted: [B]=BAD_PAGE, [W]=WARN
[  164.114312][ T3983] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  164.114491][ T3983] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  164.114695][ T3983] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  164.115264][ T3983] RSP: 0018:ffa0000004f36c60 EFLAGS: 00010046
[  164.115496][ T3983] RAX: 0000000000000220 RBX: ff11000004b1cc20 RCX: 0000000000000001
[  164.115764][ T3983] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  164.116033][ T3983] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  164.116250][ T3983] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012c700
[  164.116518][ T3983] R13: ff11000004b1cc38 R14: ff1100000103c940 R15: ffd400000012c700
[  164.116787][ T3983] FS:  00007f1dfa0fbcc0(0000) GS:ff110000a40ae000(0000) knlGS:0000000000000000
[  164.117095][ T3983] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.117277][ T3983] CR2: 00000000004edad8 CR3: 0000000016da8004 CR4: 0000000000771ef0
[  164.117545][ T3983] PKRU: 55555554
[  164.117652][ T3983] Call Trace:
[  164.117810][ T3983]  <TASK>
[  164.117882][ T3983]  check_bytes_and_report.cold (mm/slub.c:1359)
[  164.118080][ T3983]  check_object (mm/slub.c:1515)
[  164.118223][ T3983]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  164.118416][ T3983]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  164.118559][ T3983]  free_to_partial_list (mm/slub.c:5631)
[  164.118754][ T3983]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  164.118896][ T3983]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  164.119093][ T3983]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  164.119238][ T3983]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  164.119431][ T3983]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  164.119608][ T3983]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  164.119801][ T3983]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  164.119908][ T3983]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  164.120106][ T3983]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  164.120248][ T3983]  ? __igmp_group_dropped (./include/net/net_namespace.h:426 (discriminator 1) ./include/linux/netdevice.h:2809 (discriminator 1) net/ipv4/igmp.c:1362 (discriminator 1))
[  164.120440][ T3983]  ? debug_object_activate (lib/debugobjects.c:884)
[  164.120583][ T3983]  inet_ifmcaddr_notify (./include/linux/skbuff.h:1384 ./include/net/netlink.h:1055 net/ipv4/igmp.c:1546)
[  164.120777][ T3983]  ? inet_fill_ifmcaddr (./include/net/netlink.h:1107 (discriminator 1))
[  164.120921][ T3983]  ? __timer_delete (kernel/time/timer.c:803 kernel/time/timer.c:848 kernel/time/timer.c:1366)
[  164.121120][ T3983]  __ip_mc_dec_group (net/ipv4/igmp.c:1848)
[  164.121263][ T3983]  inetdev_event (net/ipv4/devinet.c:1643)
[  164.121457][ T3983]  ? mutex_is_locked (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.h:48 kernel/locking/mutex.c:65)
[  164.121599][ T3983]  notifier_call_chain (kernel/notifier.c:85)
[  164.121792][ T3983]  __dev_notify_flags (net/core/dev.c:2313 net/core/dev.c:2327 net/core/dev.c:9921)
[  164.121936][ T3983]  ? netif_change_name (net/core/dev.c:1517)
[  164.122133][ T3983]  netif_change_flags (net/core/dev.c:9948)
[  164.122276][ T3983]  do_setlink.isra.0 (net/core/rtnetlink.c:3283 (discriminator 1))
[  164.122477][ T3983]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[  164.122618][ T3983]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  164.122814][ T3983]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  164.122958][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.123106][ T3983]  ? stack_depot_save_flags (lib/stackdepot.c:609 lib/stackdepot.c:676)
[  164.123248][ T3983]  ? kasan_save_stack (mm/kasan/common.c:58)
[  164.123443][ T3983]  ? kasan_save_stack (mm/kasan/common.c:57)
[  164.123586][ T3983]  ? kasan_save_track (mm/kasan/common.c:78)
[  164.123779][ T3983]  ? __kasan_kmalloc (mm/kasan/common.c:398 mm/kasan/common.c:415)
[  164.123921][ T3983]  ? __kmalloc_cache_noprof (./include/linux/kasan.h:263 mm/slub.c:5563)
[  164.124120][ T3983]  ? rtnl_newlink (./include/linux/slab.h:991 (discriminator 1) net/core/rtnetlink.c:4139 (discriminator 1))
[  164.124263][ T3983]  ? rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[  164.124455][ T3983]  ? netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[  164.124597][ T3983]  ? netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[  164.124792][ T3983]  ? netlink_sendmsg (net/netlink/af_netlink.c:1900)
[  164.124938][ T3983]  ? ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  164.125133][ T3983]  ? ___sys_sendmsg (net/socket.c:2767)
[  164.125275][ T3983]  ? __sys_sendmsg (net/socket.c:2799)
[  164.125469][ T3983]  ? do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  164.125611][ T3983]  ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  164.125838][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.125980][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.126178][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.126319][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.126513][ T3983]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[  164.126654][ T3983]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[  164.126847][ T3983]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[  164.126988][ T3983]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[  164.127185][ T3983]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[  164.127327][ T3983]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[  164.127520][ T3983]  rtnl_newlink (net/core/rtnetlink.c:4241)
[  164.127665][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.127858][ T3983]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  164.127999][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.128144][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.128286][ T3983]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  164.128480][ T3983]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  164.128623][ T3983]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  164.128818][ T3983]  ? __kernel_text_address (kernel/extable.c:79)
[  164.128960][ T3983]  ? write_profile (profile.c:?)
[  164.129157][ T3983]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  164.129300][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.129493][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.129635][ T3983]  ? cap_capable (./include/trace/events/capability.h:26 (discriminator 22) security/commoncap.c:130 (discriminator 22))
[  164.129827][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.129969][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.130168][ T3983]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  164.130310][ T3983]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[  164.130503][ T3983]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  164.130646][ T3983]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  164.130839][ T3983]  ? stack_depot_save_flags (lib/stackdepot.c:609 lib/stackdepot.c:676)
[  164.130980][ T3983]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[  164.131178][ T3983]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  164.131321][ T3983]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  164.131517][ T3983]  ? netlink_ack (./include/linux/skbuff.h:2718)
[  164.131660][ T3983]  ? __netlink_lookup (./include/linux/rcupdate.h:850 ./include/linux/rhashtable.h:709 net/netlink/af_netlink.c:499)
[  164.131855][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.131996][ T3983]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  164.132146][ T3983]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[  164.132288][ T3983]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[  164.132480][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.132622][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.132818][ T3983]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  164.132960][ T3983]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[  164.133157][ T3983]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  164.133297][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.133491][ T3983]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  164.133633][ T3983]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  164.133826][ T3983]  ? copy_msghdr_from_user (net/socket.c:2650)
[  164.133970][ T3983]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  164.134203][ T3983]  ? move_addr_to_kernel (net/socket.c:258)
[  164.134347][ T3983]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  164.134540][ T3983]  ___sys_sendmsg (net/socket.c:2767)
[  164.134682][ T3983]  ? copy_msghdr_from_user (net/socket.c:2619)
[  164.134880][ T3983]  __sys_sendmsg (net/socket.c:2799)
[  164.135023][ T3983]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  164.135222][ T3983]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  164.135367][ T3983]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  164.135561][ T3983]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  164.135702][ T3983]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  164.135930][ T3983] RIP: 0033:0x7f1dfa36054e
[  164.136084][ T3983] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  164.136700][ T3983] RSP: 002b:00007ffe44e10630 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  164.136967][ T3983] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1dfa36054e
[  164.137236][ T3983] RDX: 0000000000000000 RSI: 00007ffe44e106e0 RDI: 0000000000000005
[  164.137454][ T3983] RBP: 00007ffe44e10640 R08: 0000000000000000 R09: 0000000000000000
[  164.137724][ T3983] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994180
[  164.137991][ T3983] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffe44e10db0
| [  165.391486][ T4021] ------------[ cut here ]------------
| [  165.391622][ T4021] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/4021
| [  165.391873][ T4021] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  165.392456][ T4021] Tainted: [B]=BAD_PAGE, [W]=WARN
[  165.392595][ T4021] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  165.392813][ T4021] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  165.392959][ T4021] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  165.393545][ T4021] RSP: 0018:ffa0000004fe7688 EFLAGS: 00010046
[  165.393764][ T4021] RAX: 0000000000000220 RBX: ff11000001ecde40 RCX: 0000000000000001
[  165.393970][ T4021] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  165.394227][ T4021] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  165.394481][ T4021] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000007b340
[  165.394732][ T4021] R13: ff11000001ecde68 R14: ff1100000103cac0 R15: ffd400000007b340
[  165.394939][ T4021] FS:  0000000000000000(0000) GS:ff110000a40ae000(0000) knlGS:0000000000000000
[  165.395230][ T4021] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.395447][ T4021] CR2: 00007f48d0838c20 CR3: 0000000005034002 CR4: 0000000000771ef0
[  165.395698][ T4021] PKRU: 55555554
[  165.395802][ T4021] Call Trace:
[  165.395904][ T4021]  <TASK>
[  165.396021][ T4021]  check_bytes_and_report.cold (mm/slub.c:1359)
[  165.396163][ T4021]  check_object (mm/slub.c:1515)
[  165.396346][ T4021]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  165.396481][ T4021]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  165.396662][ T4021]  free_to_partial_list (mm/slub.c:5631)
[  165.396795][ T4021]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  165.396974][ T4021]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  165.397115][ T4021]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  165.397297][ T4021]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  165.397431][ T4021]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  165.397611][ T4021]  ? alloc_empty_backing_file (fs/file_table.c:332 (discriminator 11))
[  165.397747][ T4021]  alloc_empty_backing_file (fs/file_table.c:332 (discriminator 11))
[  165.397928][ T4021]  backing_file_open (fs/backing-file.c:42)
[  165.398067][ T4021]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  165.398249][ T4021]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  165.398388][ T4021]  ovl_open (fs/overlayfs/file.c:222)
[  165.398535][ T4021]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  165.398668][ T4021]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  165.398850][ T4021]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  165.398988][ T4021]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  165.399174][ T4021]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  165.399308][ T4021]  do_dentry_open (fs/open.c:996)
[  165.399489][ T4021]  vfs_open (fs/open.c:1101)
[  165.399593][ T4021]  ? may_open (fs/namei.c:4269)
[  165.399695][ T4021]  do_open (fs/namei.c:4837)
[  165.399846][ T4021]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  165.399981][ T4021]  path_openat (fs/namei.c:5000)
[  165.400166][ T4021]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  165.400302][ T4021]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  165.400484][ T4021]  do_file_open (fs/namei.c:5029)
[  165.400620][ T4021]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  165.400803][ T4021]  ? page_get_link_raw (fs/namei.c:6482)
[  165.400939][ T4021]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  165.401123][ T4021]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  165.401226][ T4021]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  165.401407][ T4021]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  165.401542][ T4021]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  165.401722][ T4021]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  165.401893][ T4021]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  165.402076][ T4021]  ? fput_close_sync (fs/file_table.c:617)
[  165.402211][ T4021]  ? __ia32_sys_open (fs/open.c:1427)
[  165.402392][ T4021]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  165.402528][ T4021]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  165.402708][ T4021]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  165.402875][ T4021]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  165.403092][ T4021]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  165.403228][ T4021]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  165.403410][ T4021]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  165.403623][ T4021] RIP: 0033:0x7f48d090e6e5
[  165.403766][ T4021] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  165.404350][ T4021] RSP: 002b:00007ffee3faeef0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  165.404603][ T4021] RAX: ffffffffffffffda RBX: 00007ffee3faf180 RCX: 00007f48d090e6e5
[  165.404807][ T4021] RDX: 0000000000080000 RSI: 00007ffee3faef70 RDI: 00000000ffffff9c
[  165.405064][ T4021] RBP: 00007ffee3faeef0 R08: 00007ffee3faf167 R09: 0000000000000000
[  165.405318][ T4021] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffee3faef70
[  165.405570][ T4021] R13: 00007ffee3faef70 R14: 00007f48d08e0000 R15: 0000000000000000
| [  165.416221][ T4021] ------------[ cut here ]------------
| [  165.416352][ T4021] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/4021
| [  165.416597][ T4021] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  165.417175][ T4021] Tainted: [B]=BAD_PAGE, [W]=WARN
[  165.417310][ T4021] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  165.417525][ T4021] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  165.417712][ T4021] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  165.418243][ T4021] RSP: 0018:ffa0000004fe7688 EFLAGS: 00010046
[  165.418461][ T4021] RAX: 0000000000000220 RBX: ff11000002156b40 RCX: 0000000000000001
[  165.418712][ T4021] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  165.418914][ T4021] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  165.419169][ T4021] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000085580
[  165.419421][ T4021] R13: ff11000002156b68 R14: ff1100000103cac0 R15: ffd4000000085580
[  165.419670][ T4021] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  165.419956][ T4021] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.420130][ T4021] CR2: 00007f617a28a1a0 CR3: 0000000005034005 CR4: 0000000000771ef0
[  165.420381][ T4021] PKRU: 55555554
[  165.420482][ T4021] Call Trace:
[  165.420630][ T4021]  <TASK>
[  165.420698][ T4021]  check_bytes_and_report.cold (mm/slub.c:1359)
[  165.420832][ T4021]  check_object (mm/slub.c:1515)
[  165.421013][ T4021]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  165.421151][ T4021]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  165.421331][ T4021]  free_to_partial_list (mm/slub.c:5631)
[  165.421465][ T4021]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  165.421643][ T4021]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  165.421776][ T4021]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  165.421957][ T4021]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  165.422094][ T4021]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  165.422227][ T4021]  ? alloc_empty_backing_file (fs/file_table.c:332 (discriminator 11))
[  165.422364][ T4021]  alloc_empty_backing_file (fs/file_table.c:332 (discriminator 11))
[  165.422543][ T4021]  backing_file_open (fs/backing-file.c:42)
[  165.422676][ T4021]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  165.422858][ T4021]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  165.422993][ T4021]  ovl_open (fs/overlayfs/file.c:222)
[  165.423144][ T4021]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  165.423277][ T4021]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  165.423460][ T4021]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  165.423595][ T4021]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  165.423775][ T4021]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  165.423907][ T4021]  do_dentry_open (fs/open.c:996)
[  165.424091][ T4021]  vfs_open (fs/open.c:1101)
[  165.424191][ T4021]  ? may_open (fs/namei.c:4269)
[  165.424341][ T4021]  do_open (fs/namei.c:4837)
[  165.424442][ T4021]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  165.424575][ T4021]  path_openat (fs/namei.c:5000)
[  165.424753][ T4021]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  165.424888][ T4021]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  165.425072][ T4021]  do_file_open (fs/namei.c:5029)
[  165.425205][ T4021]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  165.425386][ T4021]  ? page_get_link_raw (fs/namei.c:6482)
[  165.425521][ T4021]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  165.425700][ T4021]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  165.425803][ T4021]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  165.425983][ T4021]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  165.426118][ T4021]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  165.426299][ T4021]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  165.426466][ T4021]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  165.426645][ T4021]  ? fput_close_sync (fs/file_table.c:617)
[  165.426780][ T4021]  ? __ia32_sys_open (fs/open.c:1427)
[  165.426961][ T4021]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  165.427100][ T4021]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  165.427234][ T4021]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  165.427449][ T4021]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  165.427615][ T4021]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  165.427798][ T4021]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  165.427931][ T4021]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  165.428148][ T4021] RIP: 0033:0x7f48d090e6e5
[  165.428290][ T4021] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  165.428868][ T4021] RSP: 002b:00007ffee3faeef0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  165.429126][ T4021] RAX: ffffffffffffffda RBX: 00007ffee3faf180 RCX: 00007f48d090e6e5
[  165.429383][ T4021] RDX: 0000000000080000 RSI: 00007ffee3faef70 RDI: 00000000ffffff9c
[  165.429584][ T4021] RBP: 00007ffee3faeef0 R08: 00007ffee3faf167 R09: 0000000000000000
[  165.429835][ T4021] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffee3faef70
[  165.430090][ T4021] R13: 00007ffee3faef70 R14: 00007f48d08e0000 R15: 0000000000000000
| [  169.109480][ T4145] ------------[ cut here ]------------
| [  169.109614][ T4145] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: sleep/4145
| [  169.109864][ T4145] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  169.110447][ T4145] Tainted: [B]=BAD_PAGE, [W]=WARN
[  169.110581][ T4145] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  169.110796][ T4145] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  169.110937][ T4145] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  169.111519][ T4145] RSP: 0018:ffa00000052b7168 EFLAGS: 00010046
[  169.111738][ T4145] RAX: 0000000000000220 RBX: ff11000004b57260 RCX: 0000000000000001
[  169.111987][ T4145] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  169.112195][ T4145] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  169.112444][ T4145] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012d5c0
[  169.112690][ T4145] R13: ff11000004b57280 R14: ff1100000103c940 R15: ffd400000012d5c0
[  169.112940][ T4145] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  169.113185][ T4145] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.113402][ T4145] CR2: 000055c7cd001668 CR3: 000000000dfef002 CR4: 0000000000771ef0
[  169.113653][ T4145] PKRU: 55555554
[  169.113756][ T4145] Call Trace:
[  169.113901][ T4145]  <TASK>
[  169.113970][ T4145]  check_bytes_and_report.cold (mm/slub.c:1359)
[  169.114111][ T4145]  check_object (mm/slub.c:1507)
[  169.114292][ T4145]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  169.114425][ T4145]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  169.114605][ T4145]  free_to_partial_list (mm/slub.c:5631)
[  169.114739][ T4145]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  169.114919][ T4145]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  169.115056][ T4145]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  169.115191][ T4145]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  169.115325][ T4145]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  169.115504][ T4145]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  169.115638][ T4145]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  169.115815][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.115947][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.116131][ T4145]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  169.116264][ T4145]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  169.116444][ T4145]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  169.116577][ T4145]  ? init_multi_vma_prep (mm/vma.c:174)
[  169.116756][ T4145]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  169.116889][ T4145]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  169.117068][ T4145]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  169.117202][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.117379][ T4145]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  169.117547][ T4145]  vma_expand (mm/vma.c:1302)
[  169.117726][ T4145]  relocate_vma_down (mm/vma_exec.c:63)
[  169.117858][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.118035][ T4145]  ? __install_special_mapping (??:?)
[  169.118249][ T4145]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  169.118382][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.118558][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.118691][ T4145]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  169.118869][ T4145]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  169.119001][ T4145]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  169.119183][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.119318][ T4145]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  169.119496][ T4145]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  169.119628][ T4145]  ? down_write (kernel/locking/rwsem.c:1633)
[  169.119807][ T4145]  setup_arg_pages (fs/exec.c:695)
[  169.119941][ T4145]  ? open_exec (fs/exec.c:823)
[  169.120042][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.120221][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.120353][ T4145]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  169.120567][ T4145]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  169.120747][ T4145]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  169.120880][ T4145]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  169.121060][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.121196][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.121372][ T4145]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  169.121507][ T4145]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  169.121683][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.121816][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.121993][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.122129][ T4145]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  169.122304][ T4145]  ? check_unsafe_exec (fs/exec.c:1617)
[  169.122438][ T4145]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  169.122616][ T4145]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  169.122750][ T4145]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  169.122928][ T4145]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  169.123065][ T4145]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  169.123243][ T4145]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  169.123407][ T4145] RIP: 0033:0x7f3b211daf4b
[  169.123599][ T4145] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  169.123771][ T4145] RSP: 002b:00007ffc92d26298 EFLAGS: 00000206 ORIG_RAX: 000000000000003b
[  169.124017][ T4145] RAX: ffffffffffffffda RBX: 000055c7ccff7fb0 RCX: 00007f3b211daf4b
[  169.124268][ T4145] RDX: 000055c7ccf37830 RSI: 000055c7cd001660 RDI: 000055c7ccff7fb0
[  169.124515][ T4145] RBP: 00007ffc92d26380 R08: 000055c7ccec57b0 R09: 0000000000000020
[  169.124719][ T4145] R10: 0000000000000021 R11: 0000000000000206 R12: 000055c7ccff7fb0
[  169.124967][ T4145] R13: 0000000000000000 R14: 000055c7cd001660 R15: 000055c7ccf37830
| [  169.135214][ T4145] ------------[ cut here ]------------
| [  169.135346][ T4145] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: sleep/4145
| [  169.135544][ T4145] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  169.136017][ T4145] Tainted: [B]=BAD_PAGE, [W]=WARN
[  169.136156][ T4145] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  169.136371][ T4145] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  169.136511][ T4145] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  169.137085][ T4145] RSP: 0018:ffa00000052b7168 EFLAGS: 00010046
[  169.137253][ T4145] RAX: 0000000000000220 RBX: ff11000004b577a0 RCX: 0000000000000001
[  169.137503][ T4145] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  169.137753][ T4145] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  169.138002][ T4145] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012d5c0
[  169.138210][ T4145] R13: ff11000004b577c0 R14: ff1100000103c940 R15: ffd400000012d5c0
[  169.138459][ T4145] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  169.138742][ T4145] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.138957][ T4145] CR2: 00007f3b211daf21 CR3: 000000000dfef002 CR4: 0000000000771ef0
[  169.139162][ T4145] PKRU: 55555554
[  169.139310][ T4145] Call Trace:
[  169.139412][ T4145]  <TASK>
[  169.139481][ T4145]  check_bytes_and_report.cold (mm/slub.c:1359)
[  169.139661][ T4145]  check_object (mm/slub.c:1507)
[  169.139795][ T4145]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  169.139974][ T4145]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  169.140115][ T4145]  free_to_partial_list (mm/slub.c:5631)
[  169.140293][ T4145]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  169.140426][ T4145]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  169.140606][ T4145]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  169.140741][ T4145]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  169.140919][ T4145]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  169.141056][ T4145]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  169.141236][ T4145]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[  169.141369][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.141548][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.141680][ T4145]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[  169.141861][ T4145]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  169.141995][ T4145]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[  169.142179][ T4145]  ? init_multi_vma_prep (mm/vma.c:174)
[  169.142312][ T4145]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[  169.142489][ T4145]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[  169.142623][ T4145]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  169.142804][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.142938][ T4145]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[  169.143154][ T4145]  vma_expand (mm/vma.c:1302)
[  169.143333][ T4145]  relocate_vma_down (mm/vma_exec.c:63)
[  169.143465][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.143643][ T4145]  ? __install_special_mapping (??:?)
[  169.143807][ T4145]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  169.143987][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.144125][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.144303][ T4145]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[  169.144434][ T4145]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[  169.144613][ T4145]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  169.144747][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.144925][ T4145]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  169.145060][ T4145]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[  169.145240][ T4145]  ? down_write (kernel/locking/rwsem.c:1633)
[  169.145372][ T4145]  setup_arg_pages (fs/exec.c:695)
[  169.145551][ T4145]  ? open_exec (fs/exec.c:823)
[  169.145652][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.145829][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.145960][ T4145]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  169.146177][ T4145]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[  169.146310][ T4145]  ? __ia32_sys_llseek (fs/read_write.c:426)
[  169.146487][ T4145]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[  169.146620][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.146797][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.146929][ T4145]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  169.147113][ T4145]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  169.147245][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.147423][ T4145]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  169.147555][ T4145]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  169.147735][ T4145]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  169.147867][ T4145]  ? check_unsafe_exec (fs/exec.c:1617)
[  169.148044][ T4145]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  169.148181][ T4145]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  169.148360][ T4145]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  169.148492][ T4145]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  169.148670][ T4145]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  169.148805][ T4145]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  169.149016][ T4145] RIP: 0033:0x7f3b211daf4b
[  169.149161][ T4145] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  169.149381][ T4145] RSP: 002b:00007ffc92d26298 EFLAGS: 00000206 ORIG_RAX: 000000000000003b
[  169.149628][ T4145] RAX: ffffffffffffffda RBX: 000055c7ccff7fb0 RCX: 00007f3b211daf4b
[  169.149828][ T4145] RDX: 000055c7ccf37830 RSI: 000055c7cd001660 RDI: 000055c7ccff7fb0
[  169.150079][ T4145] RBP: 00007ffc92d26380 R08: 000055c7ccec57b0 R09: 0000000000000020
[  169.150327][ T4145] R10: 0000000000000021 R11: 0000000000000206 R12: 000055c7ccff7fb0
[  169.150576][ T4145] R13: 0000000000000000 R14: 000055c7cd001660 R15: 000055c7ccf37830
| [  185.560148][ T4892] ------------[ cut here ]------------
| [  185.560291][ T4892] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/4892
| [  185.560502][ T4892] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  185.561014][ T4892] Tainted: [B]=BAD_PAGE, [W]=WARN
[  185.561163][ T4892] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  185.561341][ T4892] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  185.561493][ T4892] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  185.562003][ T4892] RSP: 0018:ffa00000060d7510 EFLAGS: 00010046
[  185.562188][ T4892] RAX: 0000000000000220 RBX: ff11000005cfc240 RCX: 0000000000000001
[  185.562402][ T4892] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  185.562618][ T4892] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  185.562834][ T4892] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000173f00
[  185.563048][ T4892] R13: ff11000005cfc268 R14: ff1100000103cac0 R15: ffd4000000173f00
[  185.563269][ T4892] FS:  00007fd997221cc0(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  185.563524][ T4892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.563706][ T4892] CR2: 00000000004341e0 CR3: 000000000d0e6002 CR4: 0000000000771ef0
[  185.563921][ T4892] PKRU: 55555554
[  185.564030][ T4892] Call Trace:
[  185.564143][ T4892]  <TASK>
[  185.564217][ T4892]  check_bytes_and_report.cold (mm/slub.c:1359)
[  185.564366][ T4892]  check_object (mm/slub.c:1515)
[  185.564508][ T4892]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  185.564647][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.564787][ T4892]  free_to_partial_list (mm/slub.c:5631)
[  185.564930][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.565070][ T4892]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.565215][ T4892]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  185.565356][ T4892]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  185.565498][ T4892]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  185.565638][ T4892]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  185.565780][ T4892]  ? fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.565921][ T4892]  fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.566063][ T4892]  fuse_file_open (fs/fuse/file.c:150)
[  185.566208][ T4892]  ? do_raw_spin_lock (kernel/locking/spinlock_debug.c:88 (discriminator 3) kernel/locking/spinlock_debug.c:115 (discriminator 3))
[  185.566350][ T4892]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  185.566490][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.566632][ T4892]  fuse_open (fs/fuse/file.c:192 fs/fuse/file.c:281)
[  185.566740][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.566881][ T4892]  ? fuse_finish_open (fs/fuse/file.c:232)
[  185.567023][ T4892]  do_dentry_open (fs/open.c:996)
[  185.567170][ T4892]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  185.567310][ T4892]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4989)
[  185.567451][ T4892]  vfs_open (fs/open.c:1101)
[  185.567559][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.567700][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.567841][ T4892]  backing_file_open (fs/backing-file.c:48)
[  185.567984][ T4892]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  185.568127][ T4892]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  185.568274][ T4892]  ovl_open (fs/overlayfs/file.c:222)
[  185.568380][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.568520][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.568662][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.568802][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.568944][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.569083][ T4892]  do_dentry_open (fs/open.c:996)
[  185.569228][ T4892]  vfs_open (fs/open.c:1101)
[  185.569335][ T4892]  ? may_open (fs/namei.c:4269)
[  185.569443][ T4892]  ? complete_walk (fs/namei.c:1064)
[  185.569584][ T4892]  do_open (fs/namei.c:4837)
[  185.569691][ T4892]  ? open_last_lookups (fs/namei.c:4719 fs/namei.c:4750)
[  185.569832][ T4892]  path_openat (fs/namei.c:5000)
[  185.569973][ T4892]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  185.570116][ T4892]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  185.570260][ T4892]  do_file_open (fs/namei.c:5029)
[  185.570401][ T4892]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  185.570543][ T4892]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  185.570686][ T4892]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  185.570794][ T4892]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  185.570935][ T4892]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  185.571075][ T4892]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  185.571222][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.571362][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.571502][ T4892]  ? __ia32_sys_open (fs/open.c:1427)
[  185.571643][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.571784][ T4892]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  185.572014][ T4892]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  185.572191][ T4892]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  185.572384][ T4892]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  185.572524][ T4892]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  185.572747][ T4892] RIP: 0033:0x7fd99748654e
[  185.572896][ T4892] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  185.573511][ T4892] RSP: 002b:00007ffee236cfb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  185.573776][ T4892] RAX: ffffffffffffffda RBX: 0000000012182010 RCX: 00007fd99748654e
[  185.574039][ T4892] RDX: 0000000000000000 RSI: 0000000000480936 RDI: ffffffffffffff9c
[  185.574255][ T4892] RBP: 00007ffee236cfc0 R08: 0000000000000000 R09: 0000000000000000
[  185.574519][ T4892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  185.574781][ T4892] R13: 0000000000480dc3 R14: 0000000000480dc3 R15: 0000000000000001
| [  185.587107][ T4892] ------------[ cut here ]------------
| [  185.587250][ T4892] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/4892
| [  185.587508][ T4892] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  185.588057][ T4892] Tainted: [B]=BAD_PAGE, [W]=WARN
[  185.588253][ T4892] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  185.588480][ T4892] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  185.588628][ T4892] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  185.589184][ T4892] RSP: 0018:ffa00000060d7510 EFLAGS: 00010046
[  185.589362][ T4892] RAX: 0000000000000220 RBX: ff11000004ca2340 RCX: 0000000000000001
[  185.589622][ T4892] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  185.589884][ T4892] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  185.590148][ T4892] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000132880
[  185.590360][ T4892] R13: ff11000004ca2368 R14: ff1100000103cac0 R15: ffd4000000132880
[  185.590625][ T4892] FS:  00007fd997221cc0(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  185.590874][ T4892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.591105][ T4892] CR2: 00000000004341e0 CR3: 000000000d0e6002 CR4: 0000000000771ef0
[  185.591320][ T4892] PKRU: 55555554
[  185.591476][ T4892] Call Trace:
[  185.591581][ T4892]  <TASK>
[  185.591653][ T4892]  check_bytes_and_report.cold (mm/slub.c:1359)
[  185.591843][ T4892]  check_object (mm/slub.c:1515)
[  185.591983][ T4892]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  185.592177][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.592319][ T4892]  free_to_partial_list (mm/slub.c:5631)
[  185.592508][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.592647][ T4892]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.592838][ T4892]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  185.592979][ T4892]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  185.593175][ T4892]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  185.593315][ T4892]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  185.593508][ T4892]  ? fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.593651][ T4892]  fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.593843][ T4892]  fuse_file_open (fs/fuse/file.c:150)
[  185.593983][ T4892]  ? do_raw_spin_lock (kernel/locking/spinlock_debug.c:88 (discriminator 3) kernel/locking/spinlock_debug.c:115 (discriminator 3))
[  185.594176][ T4892]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  185.594315][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.594505][ T4892]  fuse_open (fs/fuse/file.c:192 fs/fuse/file.c:281)
[  185.594610][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.594800][ T4892]  ? fuse_finish_open (fs/fuse/file.c:232)
[  185.594942][ T4892]  do_dentry_open (fs/open.c:996)
[  185.595137][ T4892]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  185.595276][ T4892]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4989)
[  185.595467][ T4892]  vfs_open (fs/open.c:1101)
[  185.595573][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.595762][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.595901][ T4892]  backing_file_open (fs/backing-file.c:48)
[  185.596091][ T4892]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  185.596237][ T4892]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  185.596427][ T4892]  ovl_open (fs/overlayfs/file.c:222)
[  185.596533][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.596722][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.596862][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.597051][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.597197][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.597388][ T4892]  do_dentry_open (fs/open.c:996)
[  185.597528][ T4892]  vfs_open (fs/open.c:1101)
[  185.597634][ T4892]  ? may_open (fs/namei.c:4269)
[  185.597791][ T4892]  ? complete_walk (fs/namei.c:1064)
[  185.597931][ T4892]  do_open (fs/namei.c:4837)
[  185.598085][ T4892]  ? open_last_lookups (fs/namei.c:4719 fs/namei.c:4750)
[  185.598229][ T4892]  path_openat (fs/namei.c:5000)
[  185.598421][ T4892]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  185.598562][ T4892]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  185.598751][ T4892]  do_file_open (fs/namei.c:5029)
[  185.598891][ T4892]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  185.599085][ T4892]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  185.599229][ T4892]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  185.599388][ T4892]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  185.599527][ T4892]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  185.599717][ T4892]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  185.599858][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.600048][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.600191][ T4892]  ? __ia32_sys_open (fs/open.c:1427)
[  185.600380][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.600521][ T4892]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  185.600747][ T4892]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  185.600920][ T4892]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  185.601111][ T4892]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  185.601255][ T4892]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  185.601478][ T4892] RIP: 0033:0x7fd99748654e
[  185.601625][ T4892] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  185.602234][ T4892] RSP: 002b:00007ffee236cfb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  185.602499][ T4892] RAX: ffffffffffffffda RBX: 0000000012182010 RCX: 00007fd99748654e
[  185.602761][ T4892] RDX: 0000000000000000 RSI: 0000000000480936 RDI: ffffffffffffff9c
[  185.602973][ T4892] RBP: 00007ffee236cfc0 R08: 0000000000000000 R09: 0000000000000000
[  185.603242][ T4892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  185.603505][ T4892] R13: 0000000000480dc3 R14: 0000000000480dc3 R15: 0000000000000001
| [  185.614518][ T4892] ------------[ cut here ]------------
| [  185.614704][ T4892] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/4892
| [  185.614960][ T4892] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  185.615512][ T4892] Tainted: [B]=BAD_PAGE, [W]=WARN
[  185.615703][ T4892] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  185.615931][ T4892] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  185.616080][ T4892] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  185.616690][ T4892] RSP: 0018:ffa00000060d7500 EFLAGS: 00010046
[  185.616868][ T4892] RAX: 0000000000000220 RBX: ff11000004b01c20 RCX: 0000000000000001
[  185.617130][ T4892] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  185.617401][ T4892] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  185.617660][ T4892] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012c040
[  185.617869][ T4892] R13: ff11000004b01c40 R14: ff1100000103c940 R15: ffd400000012c040
[  185.618131][ T4892] FS:  00007fd997221cc0(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  185.618433][ T4892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.618660][ T4892] CR2: 00000000004341e0 CR3: 000000000d0e6002 CR4: 0000000000771ef0
[  185.618869][ T4892] PKRU: 55555554
[  185.619025][ T4892] Call Trace:
[  185.619130][ T4892]  <TASK>
[  185.619205][ T4892]  check_bytes_and_report.cold (mm/slub.c:1359)
[  185.619397][ T4892]  check_object (mm/slub.c:1507)
[  185.619537][ T4892]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  185.619724][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.619863][ T4892]  free_to_partial_list (mm/slub.c:5631)
[  185.620052][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.620195][ T4892]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.620383][ T4892]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  185.620522][ T4892]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  185.620712][ T4892]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  185.620850][ T4892]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  185.621038][ T4892]  ? fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.621184][ T4892]  fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.621373][ T4892]  fuse_file_open (fs/fuse/file.c:150)
[  185.621517][ T4892]  ? do_raw_spin_lock (kernel/locking/spinlock_debug.c:88 (discriminator 3) kernel/locking/spinlock_debug.c:115 (discriminator 3))
[  185.621705][ T4892]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  185.621842][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.622033][ T4892]  fuse_open (fs/fuse/file.c:192 fs/fuse/file.c:281)
[  185.622141][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.622331][ T4892]  ? fuse_finish_open (fs/fuse/file.c:232)
[  185.622469][ T4892]  do_dentry_open (fs/open.c:996)
[  185.622658][ T4892]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  185.622795][ T4892]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4989)
[  185.622983][ T4892]  vfs_open (fs/open.c:1101)
[  185.623088][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.623283][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.623420][ T4892]  backing_file_open (fs/backing-file.c:48)
[  185.623610][ T4892]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  185.623747][ T4892]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  185.623937][ T4892]  ovl_open (fs/overlayfs/file.c:222)
[  185.624042][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.624233][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.624372][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.624562][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.624700][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.624889][ T4892]  do_dentry_open (fs/open.c:996)
[  185.625028][ T4892]  vfs_open (fs/open.c:1101)
[  185.625138][ T4892]  ? may_open (fs/namei.c:4269)
[  185.625294][ T4892]  ? complete_walk (fs/namei.c:1064)
[  185.625432][ T4892]  do_open (fs/namei.c:4837)
[  185.625588][ T4892]  ? open_last_lookups (fs/namei.c:4719 fs/namei.c:4750)
[  185.625725][ T4892]  path_openat (fs/namei.c:5000)
[  185.625915][ T4892]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  185.626054][ T4892]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  185.626245][ T4892]  do_file_open (fs/namei.c:5029)
[  185.626384][ T4892]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  185.626576][ T4892]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  185.626716][ T4892]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  185.626871][ T4892]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  185.627008][ T4892]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  185.627201][ T4892]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  185.627341][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.627528][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.627667][ T4892]  ? __ia32_sys_open (fs/open.c:1427)
[  185.627855][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.627994][ T4892]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  185.628172][ T4892]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  185.628344][ T4892]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  185.628533][ T4892]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  185.628673][ T4892]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  185.628895][ T4892] RIP: 0033:0x7fd99748654e
[  185.629039][ T4892] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  185.629645][ T4892] RSP: 002b:00007ffee236cfb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  185.629903][ T4892] RAX: ffffffffffffffda RBX: 0000000012182010 RCX: 00007fd99748654e
[  185.630165][ T4892] RDX: 0000000000000000 RSI: 0000000000480936 RDI: ffffffffffffff9c
[  185.630375][ T4892] RBP: 00007ffee236cfc0 R08: 0000000000000000 R09: 0000000000000000
[  185.630635][ T4892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  185.630895][ T4892] R13: 0000000000480dc3 R14: 0000000000480dc3 R15: 0000000000000001
| [  185.641372][ T4892] ------------[ cut here ]------------
| [  185.641509][ T4892] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/4892
| [  185.641715][ T4892] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  185.642206][ T4892] Tainted: [B]=BAD_PAGE, [W]=WARN
[  185.642345][ T4892] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  185.642519][ T4892] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  185.642663][ T4892] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  185.643160][ T4892] RSP: 0018:ffa00000060d7500 EFLAGS: 00010046
[  185.643335][ T4892] RAX: 0000000000000220 RBX: ff11000004b01da0 RCX: 0000000000000001
[  185.643544][ T4892] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  185.643752][ T4892] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  185.643962][ T4892] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012c040
[  185.644173][ T4892] R13: ff11000004b01dc0 R14: ff1100000103c940 R15: ffd400000012c040
[  185.644384][ T4892] FS:  00007fd997221cc0(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  185.644678][ T4892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.644905][ T4892] CR2: 00000000004341e0 CR3: 000000000d0e6002 CR4: 0000000000771ef0
[  185.645169][ T4892] PKRU: 55555554
[  185.645275][ T4892] Call Trace:
[  185.645379][ T4892]  <TASK>
[  185.645498][ T4892]  check_bytes_and_report.cold (mm/slub.c:1359)
[  185.645638][ T4892]  check_object (mm/slub.c:1507)
[  185.645828][ T4892]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  185.645966][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.646158][ T4892]  free_to_partial_list (mm/slub.c:5631)
[  185.646299][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.646488][ T4892]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.646625][ T4892]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  185.646815][ T4892]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  185.646954][ T4892]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  185.647145][ T4892]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  185.647284][ T4892]  ? fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.647474][ T4892]  fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.647614][ T4892]  fuse_file_open (fs/fuse/file.c:150)
[  185.647803][ T4892]  ? do_raw_spin_lock (kernel/locking/spinlock_debug.c:88 (discriminator 3) kernel/locking/spinlock_debug.c:115 (discriminator 3))
[  185.647942][ T4892]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  185.648131][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.648275][ T4892]  fuse_open (fs/fuse/file.c:192 fs/fuse/file.c:281)
[  185.648430][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.648569][ T4892]  ? fuse_finish_open (fs/fuse/file.c:232)
[  185.648756][ T4892]  do_dentry_open (fs/open.c:996)
[  185.648898][ T4892]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  185.649087][ T4892]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4989)
[  185.649229][ T4892]  vfs_open (fs/open.c:1101)
[  185.649334][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.649524][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.649662][ T4892]  backing_file_open (fs/backing-file.c:48)
[  185.649852][ T4892]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  185.649992][ T4892]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  185.650187][ T4892]  ovl_open (fs/overlayfs/file.c:222)
[  185.650292][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.650481][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.650618][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.650805][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.650945][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.651137][ T4892]  do_dentry_open (fs/open.c:996)
[  185.651278][ T4892]  vfs_open (fs/open.c:1101)
[  185.651435][ T4892]  ? may_open (fs/namei.c:4269)
[  185.651542][ T4892]  ? complete_walk (fs/namei.c:1064)
[  185.651731][ T4892]  do_open (fs/namei.c:4837)
[  185.651836][ T4892]  ? open_last_lookups (fs/namei.c:4719 fs/namei.c:4750)
[  185.651978][ T4892]  path_openat (fs/namei.c:5000)
[  185.652173][ T4892]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  185.652312][ T4892]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  185.652501][ T4892]  do_file_open (fs/namei.c:5029)
[  185.652641][ T4892]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  185.652832][ T4892]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  185.652973][ T4892]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  185.653127][ T4892]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  185.653269][ T4892]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  185.653457][ T4892]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  185.653596][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.653783][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.653922][ T4892]  ? __ia32_sys_open (fs/open.c:1427)
[  185.654110][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.654252][ T4892]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  185.654472][ T4892]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  185.654695][ T4892]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  185.654835][ T4892]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  185.655025][ T4892]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  185.655201][ T4892] RIP: 0033:0x7fd99748654e
[  185.655400][ T4892] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  185.655945][ T4892] RSP: 002b:00007ffee236cfb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  185.656211][ T4892] RAX: ffffffffffffffda RBX: 0000000012182010 RCX: 00007fd99748654e
[  185.656471][ T4892] RDX: 0000000000000000 RSI: 0000000000480936 RDI: ffffffffffffff9c
[  185.656730][ T4892] RBP: 00007ffee236cfc0 R08: 0000000000000000 R09: 0000000000000000
[  185.656939][ T4892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  185.657202][ T4892] R13: 0000000000480dc3 R14: 0000000000480dc3 R15: 0000000000000001
| [  185.668007][ T4892] ------------[ cut here ]------------
| [  185.668147][ T4892] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/4892
| [  185.668353][ T4892] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  185.668845][ T4892] Tainted: [B]=BAD_PAGE, [W]=WARN
[  185.668986][ T4892] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  185.669164][ T4892] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  185.669308][ T4892] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  185.669803][ T4892] RSP: 0018:ffa00000060d7510 EFLAGS: 00010046
[  185.669980][ T4892] RAX: 0000000000000220 RBX: ff11000004b48320 RCX: 0000000000000001
[  185.670193][ T4892] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  185.670403][ T4892] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  185.670612][ T4892] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000012d200
[  185.670822][ T4892] R13: ff11000004b48338 R14: ff1100000103c940 R15: ffd400000012d200
[  185.671033][ T4892] FS:  00007fd997221cc0(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  185.671282][ T4892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.671459][ T4892] CR2: 00000000004341e0 CR3: 000000000d0e6002 CR4: 0000000000771ef0
[  185.671669][ T4892] PKRU: 55555554
[  185.671772][ T4892] Call Trace:
[  185.671876][ T4892]  <TASK>
[  185.671948][ T4892]  check_bytes_and_report.cold (mm/slub.c:1359)
[  185.672089][ T4892]  check_object (mm/slub.c:1515)
[  185.672232][ T4892]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  185.672372][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.672512][ T4892]  free_to_partial_list (mm/slub.c:5631)
[  185.672650][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.672788][ T4892]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.672929][ T4892]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  185.673069][ T4892]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  185.673212][ T4892]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  185.673354][ T4892]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  185.673492][ T4892]  ? fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.673633][ T4892]  fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.673772][ T4892]  fuse_file_open (fs/fuse/file.c:150)
[  185.673912][ T4892]  ? do_raw_spin_lock (kernel/locking/spinlock_debug.c:88 (discriminator 3) kernel/locking/spinlock_debug.c:115 (discriminator 3))
[  185.674050][ T4892]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  185.674193][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.674331][ T4892]  fuse_open (fs/fuse/file.c:192 fs/fuse/file.c:281)
[  185.674435][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.674575][ T4892]  ? fuse_finish_open (fs/fuse/file.c:232)
[  185.674715][ T4892]  do_dentry_open (fs/open.c:996)
[  185.674855][ T4892]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  185.674993][ T4892]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4989)
[  185.675132][ T4892]  vfs_open (fs/open.c:1101)
[  185.675241][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.675380][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.675519][ T4892]  backing_file_open (fs/backing-file.c:48)
[  185.675659][ T4892]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  185.675797][ T4892]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  185.675936][ T4892]  ovl_open (fs/overlayfs/file.c:222)
[  185.676041][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.676183][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.676321][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.676462][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.676601][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.676738][ T4892]  do_dentry_open (fs/open.c:996)
[  185.676878][ T4892]  vfs_open (fs/open.c:1101)
[  185.676984][ T4892]  ? may_open (fs/namei.c:4269)
[  185.677088][ T4892]  ? complete_walk (fs/namei.c:1064)
[  185.677230][ T4892]  do_open (fs/namei.c:4837)
[  185.677336][ T4892]  ? open_last_lookups (fs/namei.c:4719 fs/namei.c:4750)
[  185.677474][ T4892]  path_openat (fs/namei.c:5000)
[  185.677616][ T4892]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  185.677755][ T4892]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  185.677894][ T4892]  do_file_open (fs/namei.c:5029)
[  185.678033][ T4892]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  185.678180][ T4892]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  185.678318][ T4892]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  185.678424][ T4892]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  185.678562][ T4892]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  185.678704][ T4892]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  185.678842][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.678980][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.679119][ T4892]  ? __ia32_sys_open (fs/open.c:1427)
[  185.679263][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.679401][ T4892]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  185.679573][ T4892]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  185.679745][ T4892]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  185.679884][ T4892]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  185.680022][ T4892]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  185.680196][ T4892] RIP: 0033:0x7fd99748654e
[  185.680342][ T4892] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  185.680833][ T4892] RSP: 002b:00007ffee236cfb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  185.681042][ T4892] RAX: ffffffffffffffda RBX: 0000000012182010 RCX: 00007fd99748654e
[  185.681253][ T4892] RDX: 0000000000000000 RSI: 0000000000480936 RDI: ffffffffffffff9c
[  185.681461][ T4892] RBP: 00007ffee236cfc0 R08: 0000000000000000 R09: 0000000000000000
[  185.681672][ T4892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  185.681879][ T4892] R13: 0000000000480dc3 R14: 0000000000480dc3 R15: 0000000000000001
| [  185.692643][ T4892] ------------[ cut here ]------------
| [  185.692779][ T4892] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/4892
| [  185.692983][ T4892] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  185.693481][ T4892] Tainted: [B]=BAD_PAGE, [W]=WARN
[  185.693620][ T4892] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  185.693796][ T4892] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  185.693941][ T4892] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  185.694441][ T4892] RSP: 0018:ffa00000060d7510 EFLAGS: 00010046
[  185.694616][ T4892] RAX: 0000000000000220 RBX: ff11000016254b60 RCX: 0000000000000001
[  185.694826][ T4892] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  185.695035][ T4892] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  185.695249][ T4892] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000589500
[  185.695457][ T4892] R13: ff11000016254b78 R14: ff1100000103c940 R15: ffd4000000589500
[  185.695668][ T4892] FS:  00007fd997221cc0(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  185.695911][ T4892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.696086][ T4892] CR2: 00007ffc92d22618 CR3: 000000000d0e6006 CR4: 0000000000771ef0
[  185.696300][ T4892] PKRU: 55555554
[  185.696405][ T4892] Call Trace:
[  185.696509][ T4892]  <TASK>
[  185.696582][ T4892]  check_bytes_and_report.cold (mm/slub.c:1359)
[  185.696721][ T4892]  check_object (mm/slub.c:1515)
[  185.696861][ T4892]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  185.697001][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.697146][ T4892]  free_to_partial_list (mm/slub.c:5631)
[  185.697285][ T4892]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.697423][ T4892]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  185.697561][ T4892]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  185.697700][ T4892]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  185.697838][ T4892]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  185.697976][ T4892]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  185.698114][ T4892]  ? fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.698257][ T4892]  fuse_file_alloc (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/fuse/file.c:58 (discriminator 1))
[  185.698396][ T4892]  fuse_file_open (fs/fuse/file.c:150)
[  185.698532][ T4892]  ? do_raw_spin_lock (kernel/locking/spinlock_debug.c:88 (discriminator 3) kernel/locking/spinlock_debug.c:115 (discriminator 3))
[  185.698671][ T4892]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  185.698810][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.698947][ T4892]  fuse_open (fs/fuse/file.c:192 fs/fuse/file.c:281)
[  185.699050][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.699194][ T4892]  ? fuse_finish_open (fs/fuse/file.c:232)
[  185.699334][ T4892]  do_dentry_open (fs/open.c:996)
[  185.699473][ T4892]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  185.699611][ T4892]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4989)
[  185.699751][ T4892]  vfs_open (fs/open.c:1101)
[  185.699855][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.699993][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.700131][ T4892]  backing_file_open (fs/backing-file.c:48)
[  185.700275][ T4892]  ? inode_owner_or_capable (fs/inode.c:2756 (discriminator 1))
[  185.700413][ T4892]  ovl_open_realfile (fs/overlayfs/file.c:51 (discriminator 1))
[  185.700556][ T4892]  ovl_open (fs/overlayfs/file.c:222)
[  185.700660][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.700800][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.700938][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.701077][ T4892]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  185.701217][ T4892]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  185.701355][ T4892]  do_dentry_open (fs/open.c:996)
[  185.701493][ T4892]  vfs_open (fs/open.c:1101)
[  185.701598][ T4892]  ? may_open (fs/namei.c:4269)
[  185.701701][ T4892]  ? complete_walk (fs/namei.c:1064)
[  185.701840][ T4892]  do_open (fs/namei.c:4837)
[  185.701944][ T4892]  ? open_last_lookups (fs/namei.c:4719 fs/namei.c:4750)
[  185.702081][ T4892]  path_openat (fs/namei.c:5000)
[  185.702227][ T4892]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  185.702365][ T4892]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  185.702503][ T4892]  do_file_open (fs/namei.c:5029)
[  185.702641][ T4892]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  185.702781][ T4892]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  185.702921][ T4892]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  185.703025][ T4892]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  185.703167][ T4892]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  185.703305][ T4892]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  185.703442][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.703580][ T4892]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  185.703717][ T4892]  ? __ia32_sys_open (fs/open.c:1427)
[  185.703854][ T4892]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  185.703992][ T4892]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  185.704168][ T4892]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  185.704338][ T4892]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  185.704476][ T4892]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  185.704613][ T4892]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  185.704784][ T4892] RIP: 0033:0x7fd99748654e
[  185.704930][ T4892] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  185.705429][ T4892] RSP: 002b:00007ffee236cfb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  185.705640][ T4892] RAX: ffffffffffffffda RBX: 0000000012182010 RCX: 00007fd99748654e
[  185.705849][ T4892] RDX: 0000000000000000 RSI: 0000000000480936 RDI: ffffffffffffff9c
[  185.706058][ T4892] RBP: 00007ffee236cfc0 R08: 0000000000000000 R09: 0000000000000000
[  185.706271][ T4892] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  185.706478][ T4892] R13: 0000000000480dc3 R14: 0000000000480dc3 R15: 0000000000000001
| [  197.550042][ T5460] ------------[ cut here ]------------
| [  197.550179][ T5460] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: sleep/5460
| [  197.550394][ T5460] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  197.550887][ T5460] Tainted: [B]=BAD_PAGE, [W]=WARN
[  197.551025][ T5460] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  197.551202][ T5460] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  197.551351][ T5460] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  197.551845][ T5460] RSP: 0018:ffa0000006de7920 EFLAGS: 00010046
[  197.552022][ T5460] RAX: 0000000000000220 RBX: ff1100000550f3e0 RCX: 0000000000000001
[  197.552236][ T5460] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  197.552447][ T5460] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  197.552657][ T5460] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000001543c0
[  197.552867][ T5460] R13: ff1100000550f400 R14: ff1100000103c940 R15: ffd40000001543c0
[  197.553079][ T5460] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  197.553329][ T5460] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.553508][ T5460] CR2: 00007f756ac1c000 CR3: 0000000011d3c002 CR4: 0000000000771ef0
[  197.553716][ T5460] PKRU: 55555554
[  197.553822][ T5460] Call Trace:
[  197.553926][ T5460]  <TASK>
[  197.553999][ T5460]  check_bytes_and_report.cold (mm/slub.c:1359)
[  197.554143][ T5460]  check_object (mm/slub.c:1507)
[  197.554285][ T5460]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  197.554424][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.554563][ T5460]  free_to_partial_list (mm/slub.c:5631)
[  197.554701][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.554838][ T5460]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.554973][ T5460]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  197.555113][ T5460]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  197.555252][ T5460]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  197.555390][ T5460]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.555527][ T5460]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.555664][ T5460]  __create_object (mm/kmemleak.c:801)
[  197.555802][ T5460]  ? kasan_save_track (mm/kasan/common.c:78)
[  197.555939][ T5460]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  197.556078][ T5460]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.556222][ T5460]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.556361][ T5460]  fuse_chan_send (fs/fuse/dev.c:827)
[  197.556500][ T5460]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  197.556638][ T5460]  ? fuse_file_release (fs/fuse/file.c:360)
[  197.556776][ T5460]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  197.556915][ T5460]  __fput (fs/file_table.c:512)
[  197.557020][ T5460]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  197.557160][ T5460]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  197.557334][ T5460]  task_work_run (kernel/task_work.c:233)
[  197.557472][ T5460]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  197.557612][ T5460]  ? task_work_cancel (kernel/task_work.c:190)
[  197.557746][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.557884][ T5460]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  197.558022][ T5460]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  197.558159][ T5460]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  197.558267][ T5460]  ? exit_notify (kernel/exit.c:780)
[  197.558405][ T5460]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  197.558574][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.558711][ T5460]  do_group_exit (kernel/exit.c:1151)
[  197.558847][ T5460]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  197.558984][ T5460]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  197.559123][ T5460]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  197.559264][ T5460]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  197.559400][ T5460]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  197.559570][ T5460] RIP: 0033:0x7f756aae01b8
[  197.559714][ T5460] Code: Unable to access opcode bytes at 0x7f756aae018e.

Code starting with the faulting instruction
===========================================
[  197.559889][ T5460] RSP: 002b:00007fff2b13e5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  197.560099][ T5460] RAX: ffffffffffffffda RBX: 00007f756ac10f88 RCX: 00007f756aae01b8
[  197.560312][ T5460] RDX: 00007f756aa1da48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  197.560519][ T5460] RBP: 00007fff2b13e610 R08: 0000000000000000 R09: 0000000000000000
[  197.560727][ T5460] R10: 00007fff2b13e450 R11: 0000000000000246 R12: 0000000000000002
[  197.560934][ T5460] R13: 0000000000000000 R14: 00007f756ac0f680 R15: 00007f756ac10fa0
| [  197.571253][ T5460] ------------[ cut here ]------------
| [  197.571432][ T5460] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: sleep/5460
| [  197.571682][ T5460] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  197.572216][ T5460] Tainted: [B]=BAD_PAGE, [W]=WARN
[  197.572402][ T5460] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  197.572572][ T5460] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  197.572763][ T5460] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  197.573353][ T5460] RSP: 0018:ffa0000006de7920 EFLAGS: 00010046
[  197.573527][ T5460] RAX: 0000000000000220 RBX: ff11000008bcce60 RCX: 0000000000000001
[  197.573779][ T5460] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  197.574034][ T5460] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  197.574290][ T5460] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000022f300
[  197.574495][ T5460] R13: ff11000008bcce80 R14: ff1100000103c940 R15: ffd400000022f300
[  197.574751][ T5460] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  197.575038][ T5460] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.575263][ T5460] CR2: 00007f756ac1c000 CR3: 0000000011d3c002 CR4: 0000000000771ef0
[  197.575470][ T5460] PKRU: 55555554
[  197.575620][ T5460] Call Trace:
[  197.575722][ T5460]  <TASK>
[  197.575793][ T5460]  check_bytes_and_report.cold (mm/slub.c:1359)
[  197.575976][ T5460]  check_object (mm/slub.c:1507)
[  197.576115][ T5460]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  197.576304][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.576442][ T5460]  free_to_partial_list (mm/slub.c:5631)
[  197.576625][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.576764][ T5460]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.576948][ T5460]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  197.577085][ T5460]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  197.577270][ T5460]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  197.577408][ T5460]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.577591][ T5460]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.577727][ T5460]  __create_object (mm/kmemleak.c:801)
[  197.577909][ T5460]  ? kasan_save_track (mm/kasan/common.c:78)
[  197.578045][ T5460]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  197.578231][ T5460]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.578369][ T5460]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.578551][ T5460]  fuse_chan_send (fs/fuse/dev.c:827)
[  197.578689][ T5460]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  197.578871][ T5460]  ? fuse_file_release (fs/fuse/file.c:360)
[  197.579006][ T5460]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  197.579187][ T5460]  __fput (fs/file_table.c:512)
[  197.579294][ T5460]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  197.579477][ T5460]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  197.579648][ T5460]  task_work_run (kernel/task_work.c:233)
[  197.579830][ T5460]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  197.579969][ T5460]  ? task_work_cancel (kernel/task_work.c:190)
[  197.580154][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.580293][ T5460]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  197.580476][ T5460]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  197.580612][ T5460]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  197.580762][ T5460]  ? exit_notify (kernel/exit.c:780)
[  197.580897][ T5460]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  197.581117][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.581258][ T5460]  do_group_exit (kernel/exit.c:1151)
[  197.581442][ T5460]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  197.581577][ T5460]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  197.581760][ T5460]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  197.581896][ T5460]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  197.582079][ T5460]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  197.582252][ T5460] RIP: 0033:0x7f756aae01b8
[  197.582445][ T5460] Code: Unable to access opcode bytes at 0x7f756aae018e.

Code starting with the faulting instruction
===========================================
[  197.582671][ T5460] RSP: 002b:00007fff2b13e5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  197.582878][ T5460] RAX: ffffffffffffffda RBX: 00007f756ac10f88 RCX: 00007f756aae01b8
[  197.583132][ T5460] RDX: 00007f756aa1da48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  197.583389][ T5460] RBP: 00007fff2b13e610 R08: 0000000000000000 R09: 0000000000000000
[  197.583643][ T5460] R10: 00007fff2b13e450 R11: 0000000000000246 R12: 0000000000000002
[  197.583850][ T5460] R13: 0000000000000000 R14: 00007f756ac0f680 R15: 00007f756ac10fa0
| [  197.593475][ T5460] ------------[ cut here ]------------
| [  197.593608][ T5460] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: sleep/5460
| [  197.593858][ T5460] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  197.594437][ T5460] Tainted: [B]=BAD_PAGE, [W]=WARN
[  197.594576][ T5460] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  197.594795][ T5460] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  197.594988][ T5460] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  197.595529][ T5460] RSP: 0018:ffa0000006de7930 EFLAGS: 00010046
[  197.595751][ T5460] RAX: 0000000000000220 RBX: ff11000005508020 RCX: 0000000000000001
[  197.596005][ T5460] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  197.596214][ T5460] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  197.596469][ T5460] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000154200
[  197.596725][ T5460] R13: ff11000005508038 R14: ff1100000103c940 R15: ffd4000000154200
[  197.596978][ T5460] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  197.597273][ T5460] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.597445][ T5460] CR2: 00007f756ac1c000 CR3: 0000000011d3c002 CR4: 0000000000771ef0
[  197.597699][ T5460] PKRU: 55555554
[  197.597803][ T5460] Call Trace:
[  197.597951][ T5460]  <TASK>
[  197.598020][ T5460]  check_bytes_and_report.cold (mm/slub.c:1359)
[  197.598157][ T5460]  check_object (mm/slub.c:1515)
[  197.598345][ T5460]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  197.598483][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.598668][ T5460]  free_to_partial_list (mm/slub.c:5631)
[  197.598804][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.598987][ T5460]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.599126][ T5460]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  197.599310][ T5460]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  197.599444][ T5460]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  197.599626][ T5460]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.599761][ T5460]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.599941][ T5460]  __create_object (mm/kmemleak.c:801)
[  197.600074][ T5460]  ? kasan_save_track (mm/kasan/common.c:78)
[  197.600262][ T5460]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  197.600396][ T5460]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.600579][ T5460]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.600713][ T5460]  fuse_chan_send (fs/fuse/dev.c:827)
[  197.600894][ T5460]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  197.601029][ T5460]  ? fuse_file_release (fs/fuse/file.c:360)
[  197.601216][ T5460]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  197.601351][ T5460]  __fput (fs/file_table.c:512)
[  197.601500][ T5460]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  197.601636][ T5460]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  197.601850][ T5460]  task_work_run (kernel/task_work.c:233)
[  197.601985][ T5460]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  197.602168][ T5460]  ? task_work_cancel (kernel/task_work.c:190)
[  197.602307][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.602487][ T5460]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  197.602625][ T5460]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  197.602806][ T5460]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  197.602909][ T5460]  ? exit_notify (kernel/exit.c:780)
[  197.603090][ T5460]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  197.603264][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.603448][ T5460]  do_group_exit (kernel/exit.c:1151)
[  197.603586][ T5460]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  197.603765][ T5460]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  197.603902][ T5460]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  197.604083][ T5460]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  197.604225][ T5460]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  197.604438][ T5460] RIP: 0033:0x7f756aae01b8
[  197.604628][ T5460] Code: Unable to access opcode bytes at 0x7f756aae018e.

Code starting with the faulting instruction
===========================================
[  197.604802][ T5460] RSP: 002b:00007fff2b13e5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  197.605054][ T5460] RAX: ffffffffffffffda RBX: 00007f756ac10f88 RCX: 00007f756aae01b8
[  197.605308][ T5460] RDX: 00007f756aa1da48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  197.605511][ T5460] RBP: 00007fff2b13e610 R08: 0000000000000000 R09: 0000000000000000
[  197.605761][ T5460] R10: 00007fff2b13e450 R11: 0000000000000246 R12: 0000000000000002
[  197.606011][ T5460] R13: 0000000000000000 R14: 00007f756ac0f680 R15: 00007f756ac10fa0
| [  197.615512][ T5460] ------------[ cut here ]------------
| [  197.615644][ T5460] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: sleep/5460
| [  197.615891][ T5460] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  197.616463][ T5460] Tainted: [B]=BAD_PAGE, [W]=WARN
[  197.616598][ T5460] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  197.616816][ T5460] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  197.616956][ T5460] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  197.617542][ T5460] RSP: 0018:ffa0000006de7930 EFLAGS: 00010046
[  197.617758][ T5460] RAX: 0000000000000220 RBX: ff110000055081a0 RCX: 0000000000000001
[  197.617962][ T5460] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  197.618215][ T5460] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  197.618466][ T5460] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000154200
[  197.618717][ T5460] R13: ff110000055081b8 R14: ff1100000103c940 R15: ffd4000000154200
[  197.618921][ T5460] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  197.619213][ T5460] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.619432][ T5460] CR2: 00007f756ac1c000 CR3: 0000000011d3c002 CR4: 0000000000771ef0
[  197.619682][ T5460] PKRU: 55555554
[  197.619783][ T5460] Call Trace:
[  197.619887][ T5460]  <TASK>
[  197.620003][ T5460]  check_bytes_and_report.cold (mm/slub.c:1359)
[  197.620140][ T5460]  check_object (mm/slub.c:1515)
[  197.620329][ T5460]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  197.620464][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.620646][ T5460]  free_to_partial_list (mm/slub.c:5631)
[  197.620780][ T5460]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.620962][ T5460]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.621097][ T5460]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  197.621283][ T5460]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  197.621419][ T5460]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  197.621599][ T5460]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.621734][ T5460]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[  197.621917][ T5460]  __create_object (mm/kmemleak.c:801)
[  197.622051][ T5460]  ? kasan_save_track (mm/kasan/common.c:78)
[  197.622234][ T5460]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[  197.622373][ T5460]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.622556][ T5460]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[  197.622691][ T5460]  fuse_chan_send (fs/fuse/dev.c:827)
[  197.622873][ T5460]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[  197.623007][ T5460]  ? fuse_file_release (fs/fuse/file.c:360)
[  197.623189][ T5460]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[  197.623327][ T5460]  __fput (fs/file_table.c:512)
[  197.623428][ T5460]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[  197.623609][ T5460]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  197.623824][ T5460]  task_work_run (kernel/task_work.c:233)
[  197.623960][ T5460]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[  197.624140][ T5460]  ? task_work_cancel (kernel/task_work.c:190)
[  197.624280][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.624462][ T5460]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  197.624596][ T5460]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  197.624777][ T5460]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[  197.624880][ T5460]  ? exit_notify (kernel/exit.c:780)
[  197.625015][ T5460]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[  197.625234][ T5460]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.625416][ T5460]  do_group_exit (kernel/exit.c:1151)
[  197.625551][ T5460]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[  197.625733][ T5460]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[  197.625868][ T5460]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  197.626049][ T5460]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  197.626184][ T5460]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  197.626405][ T5460] RIP: 0033:0x7f756aae01b8
[  197.626544][ T5460] Code: Unable to access opcode bytes at 0x7f756aae018e.

Code starting with the faulting instruction
===========================================
[  197.626765][ T5460] RSP: 002b:00007fff2b13e5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  197.627019][ T5460] RAX: ffffffffffffffda RBX: 00007f756ac10f88 RCX: 00007f756aae01b8
[  197.627225][ T5460] RDX: 00007f756aa1da48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[  197.627479][ T5460] RBP: 00007fff2b13e610 R08: 0000000000000000 R09: 0000000000000000
[  197.627730][ T5460] R10: 00007fff2b13e450 R11: 0000000000000246 R12: 0000000000000002
[  197.627981][ T5460] R13: 0000000000000000 R14: 00007f756ac0f680 R15: 00007f756ac10fa0
| [  197.701646][ T5469] ------------[ cut here ]------------
| [  197.701767][ T5469] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/5469
| [  197.701950][ T5469] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  197.702388][ T5469] Tainted: [B]=BAD_PAGE, [W]=WARN
[  197.702511][ T5469] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  197.702666][ T5469] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  197.702795][ T5469] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  197.703237][ T5469] RSP: 0018:ffa0000006e27b28 EFLAGS: 00010046
[  197.703391][ T5469] RAX: 0000000000000220 RBX: ff11000008dfd240 RCX: 0000000000000001
[  197.703576][ T5469] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  197.703761][ T5469] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  197.703947][ T5469] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000237f40
[  197.704130][ T5469] R13: ff11000008dfd268 R14: ff1100000103cac0 R15: ffd4000000237f40
[  197.704319][ T5469] FS:  0000000000000000(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  197.704534][ T5469] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.704692][ T5469] CR2: 00007f941b56a668 CR3: 0000000004f41003 CR4: 0000000000771ef0
[  197.704880][ T5469] PKRU: 55555554
[  197.704973][ T5469] Call Trace:
[  197.705066][ T5469]  <TASK>
[  197.705130][ T5469]  check_bytes_and_report.cold (mm/slub.c:1359)
[  197.705257][ T5469]  check_object (mm/slub.c:1515)
[  197.705379][ T5469]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  197.705503][ T5469]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.705626][ T5469]  free_to_partial_list (mm/slub.c:5631)
[  197.705749][ T5469]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.705871][ T5469]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.705995][ T5469]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  197.706118][ T5469]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  197.706243][ T5469]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  197.706368][ T5469]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  197.706492][ T5469]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  197.706613][ T5469]  ? vfs_fstatat (./include/linux/fs.h:2584 ./include/linux/fs.h:2588 fs/stat.c:368)
[  197.706736][ T5469]  do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416)
[  197.706858][ T5469]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  197.706980][ T5469]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  197.707101][ T5469]  ? __ia32_sys_open (fs/open.c:1427)
[  197.707226][ T5469]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  197.707348][ T5469]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.707471][ T5469]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  197.707622][ T5469]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  197.707774][ T5469]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  197.707896][ T5469]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  197.708019][ T5469]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  197.708171][ T5469] RIP: 0033:0x7f941b59b6e5
[  197.708304][ T5469] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  197.708735][ T5469] RSP: 002b:00007fffc5518bd0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  197.708919][ T5469] RAX: ffffffffffffffda RBX: 00007fffc5518e60 RCX: 00007f941b59b6e5
[  197.709103][ T5469] RDX: 0000000000080000 RSI: 00007fffc5518c50 RDI: 00000000ffffff9c
[  197.709290][ T5469] RBP: 00007fffc5518bd0 R08: 00007fffc5518e47 R09: 0000000000000000
[  197.709473][ T5469] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fffc5518c50
[  197.709657][ T5469] R13: 00007fffc5518c50 R14: 00007f941b56d000 R15: 0000000000000000
| [  197.719276][ T5469] ------------[ cut here ]------------
| [  197.719395][ T5469] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/5469
| [  197.719577][ T5469] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  197.720010][ T5469] Tainted: [B]=BAD_PAGE, [W]=WARN
[  197.720132][ T5469] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  197.720290][ T5469] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  197.720420][ T5469] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  197.720861][ T5469] RSP: 0018:ffa0000006e27b28 EFLAGS: 00010046
[  197.721017][ T5469] RAX: 0000000000000220 RBX: ff11000008dfd540 RCX: 0000000000000001
[  197.721204][ T5469] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  197.721387][ T5469] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  197.721572][ T5469] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000237f40
[  197.721758][ T5469] R13: ff11000008dfd568 R14: ff1100000103cac0 R15: ffd4000000237f40
[  197.721941][ T5469] FS:  0000000000000000(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  197.722159][ T5469] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.722318][ T5469] CR2: 00007f941b56a668 CR3: 0000000004f41003 CR4: 0000000000771ef0
[  197.722501][ T5469] PKRU: 55555554
[  197.722594][ T5469] Call Trace:
[  197.722687][ T5469]  <TASK>
[  197.722749][ T5469]  check_bytes_and_report.cold (mm/slub.c:1359)
[  197.722871][ T5469]  check_object (mm/slub.c:1515)
[  197.722993][ T5469]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  197.723115][ T5469]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.723241][ T5469]  free_to_partial_list (mm/slub.c:5631)
[  197.723363][ T5469]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.723485][ T5469]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  197.723608][ T5469]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  197.723730][ T5469]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  197.723853][ T5469]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  197.723975][ T5469]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  197.724097][ T5469]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  197.724223][ T5469]  ? vfs_fstatat (./include/linux/fs.h:2584 ./include/linux/fs.h:2588 fs/stat.c:368)
[  197.724345][ T5469]  do_sys_openat2 (./include/linux/fs.h:2586 fs/open.c:1416)
[  197.724465][ T5469]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  197.724587][ T5469]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  197.724710][ T5469]  ? __ia32_sys_open (fs/open.c:1427)
[  197.724833][ T5469]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  197.724956][ T5469]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  197.725076][ T5469]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  197.725233][ T5469]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  197.725384][ T5469]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  197.725504][ T5469]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  197.725628][ T5469]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  197.725779][ T5469] RIP: 0033:0x7f941b59b6e5
[  197.725906][ T5469] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  197.726342][ T5469] RSP: 002b:00007fffc5518bd0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  197.726528][ T5469] RAX: ffffffffffffffda RBX: 00007fffc5518e60 RCX: 00007f941b59b6e5
[  197.726711][ T5469] RDX: 0000000000080000 RSI: 00007fffc5518c50 RDI: 00000000ffffff9c
[  197.726895][ T5469] RBP: 00007fffc5518bd0 R08: 00007fffc5518e47 R09: 0000000000000000
[  197.727079][ T5469] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fffc5518c50
[  197.727265][ T5469] R13: 00007fffc5518c50 R14: 00007f941b56d000 R15: 0000000000000000
| [  216.829551][ T6249] ------------[ cut here ]------------
| [  216.829678][ T6249] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6249
| [  216.829869][ T6249] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  216.830330][ T6249] Tainted: [B]=BAD_PAGE, [W]=WARN
[  216.830458][ T6249] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  216.830617][ T6249] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  216.830752][ T6249] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  216.831204][ T6249] RSP: 0018:ffa0000007e27768 EFLAGS: 00010046
[  216.831370][ T6249] RAX: 0000000000000220 RBX: ff11000005cfc740 RCX: 0000000000000001
[  216.831563][ T6249] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  216.831754][ T6249] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  216.831945][ T6249] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000173f00
[  216.832135][ T6249] R13: ff11000005cfc768 R14: ff1100000103cac0 R15: ffd4000000173f00
[  216.832330][ T6249] FS:  00007f5fa531ecc0(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  216.832555][ T6249] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.832716][ T6249] CR2: 0000000000440498 CR3: 0000000016f01001 CR4: 0000000000771ef0
[  216.832906][ T6249] PKRU: 55555554
[  216.833002][ T6249] Call Trace:
[  216.833099][ T6249]  <TASK>
[  216.833164][ T6249]  check_bytes_and_report.cold (mm/slub.c:1359)
[  216.833297][ T6249]  check_object (mm/slub.c:1515)
[  216.833424][ T6249]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  216.833549][ T6249]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  216.833674][ T6249]  free_to_partial_list (mm/slub.c:5631)
[  216.833800][ T6249]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  216.833925][ T6249]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  216.834049][ T6249]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  216.834176][ T6249]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  216.834308][ T6249]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  216.834464][ T6249]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  216.834591][ T6249]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  216.834685][ T6249]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  216.834811][ T6249]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  216.834938][ T6249]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  216.835096][ T6249]  netlink_sendmsg (net/netlink/af_netlink.c:1875)
[  216.835226][ T6249]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  216.835357][ T6249]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  216.835484][ T6249]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  216.835611][ T6249]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  216.835738][ T6249]  ? copy_msghdr_from_user (net/socket.c:2650)
[  216.835863][ T6249]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  216.836019][ T6249]  ? move_addr_to_kernel (net/socket.c:258)
[  216.836146][ T6249]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  216.836272][ T6249]  ___sys_sendmsg (net/socket.c:2767)
[  216.836400][ T6249]  ? copy_msghdr_from_user (net/socket.c:2619)
[  216.836526][ T6249]  ? __ia32_sys_connect (net/socket.c:2186)
[  216.836652][ T6249]  ? __sys_bind (net/socket.c:1945 (discriminator 3) net/socket.c:1976 (discriminator 3))
[  216.836778][ T6249]  __sys_sendmsg (net/socket.c:2799)
[  216.836903][ T6249]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  216.837030][ T6249]  ? __sys_getsockname (net/socket.c:2226)
[  216.837157][ T6249]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  216.837282][ T6249]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  216.837412][ T6249]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  216.837538][ T6249]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  216.837693][ T6249] RIP: 0033:0x7f5fa558354e
[  216.837827][ T6249] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  216.838276][ T6249] RSP: 002b:00007ffd353aa6f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  216.838473][ T6249] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5fa558354e
[  216.838664][ T6249] RDX: 0000000000000000 RSI: 00007ffd353aa7a0 RDI: 0000000000000006
[  216.838855][ T6249] RBP: 00007ffd353aa700 R08: 0000000000000000 R09: 0000000000000000
[  216.839046][ T6249] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a9941b5
[  216.839236][ T6249] R13: 00007ffd353aa850 R14: 000000000e7ecb18 R15: 00007f5fa5704580
| [  216.849265][ T6249] ------------[ cut here ]------------
| [  216.849434][ T6249] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6249
| [  216.849622][ T6249] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  216.850147][ T6249] Tainted: [B]=BAD_PAGE, [W]=WARN
[  216.850320][ T6249] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  216.850480][ T6249] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  216.850658][ T6249] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  216.851196][ T6249] RSP: 0018:ffa0000007e27768 EFLAGS: 00010046
[  216.851360][ T6249] RAX: 0000000000000220 RBX: ff11000005cfcb40 RCX: 0000000000000001
[  216.851590][ T6249] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  216.851824][ T6249] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  216.852013][ T6249] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000173f00
[  216.852243][ T6249] R13: ff11000005cfcb68 R14: ff1100000103cac0 R15: ffd4000000173f00
[  216.852480][ T6249] FS:  00007f5fa531ecc0(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  216.852744][ T6249] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.852903][ T6249] CR2: 0000000000440498 CR3: 0000000016f01001 CR4: 0000000000771ef0
[  216.853135][ T6249] PKRU: 55555554
[  216.853272][ T6249] Call Trace:
[  216.853372][ T6249]  <TASK>
[  216.853437][ T6249]  check_bytes_and_report.cold (mm/slub.c:1359)
[  216.853607][ T6249]  check_object (mm/slub.c:1515)
[  216.853734][ T6249]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  216.853901][ T6249]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  216.854027][ T6249]  free_to_partial_list (mm/slub.c:5631)
[  216.854153][ T6249]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  216.854280][ T6249]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  216.854451][ T6249]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  216.854576][ T6249]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  216.854744][ T6249]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  216.854902][ T6249]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  216.855070][ T6249]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  216.855165][ T6249]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  216.855338][ T6249]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  216.855463][ T6249]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  216.855662][ T6249]  netlink_sendmsg (net/netlink/af_netlink.c:1875)
[  216.855789][ T6249]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  216.855958][ T6249]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  216.856081][ T6249]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  216.856248][ T6249]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  216.856379][ T6249]  ? copy_msghdr_from_user (net/socket.c:2650)
[  216.856546][ T6249]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  216.856703][ T6249]  ? move_addr_to_kernel (net/socket.c:258)
[  216.856869][ T6249]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[  216.856997][ T6249]  ___sys_sendmsg (net/socket.c:2767)
[  216.857164][ T6249]  ? copy_msghdr_from_user (net/socket.c:2619)
[  216.857295][ T6249]  ? __ia32_sys_connect (net/socket.c:2186)
[  216.857461][ T6249]  ? __sys_bind (net/socket.c:1945 (discriminator 3) net/socket.c:1976 (discriminator 3))
[  216.857588][ T6249]  __sys_sendmsg (net/socket.c:2799)
[  216.857754][ T6249]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  216.857881][ T6249]  ? __sys_getsockname (net/socket.c:2226)
[  216.858046][ T6249]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  216.858174][ T6249]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  216.858346][ T6249]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  216.858473][ T6249]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  216.858669][ T6249] RIP: 0033:0x7f5fa558354e
[  216.858847][ T6249] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  216.859299][ T6249] RSP: 002b:00007ffd353aa6f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  216.859531][ T6249] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5fa558354e
[  216.859762][ T6249] RDX: 0000000000000000 RSI: 00007ffd353aa7a0 RDI: 0000000000000006
[  216.859996][ T6249] RBP: 00007ffd353aa700 R08: 0000000000000000 R09: 0000000000000000
[  216.860187][ T6249] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a9941b5
[  216.860424][ T6249] R13: 00007ffd353aa850 R14: 000000000e7ecb18 R15: 00007f5fa5704580
| [  222.839217][ T6382] ------------[ cut here ]------------
| [  222.839362][ T6382] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6382
| [  222.839578][ T6382] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  222.840082][ T6382] Tainted: [B]=BAD_PAGE, [W]=WARN
[  222.840225][ T6382] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  222.840408][ T6382] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  222.840556][ T6382] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  222.841055][ T6382] RSP: 0018:ffa0000008106f48 EFLAGS: 00010046
[  222.841231][ T6382] RAX: 0000000000000220 RBX: ff11000008bc87a0 RCX: 0000000000000001
[  222.841451][ T6382] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  222.841664][ T6382] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  222.841882][ T6382] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000022f200
[  222.842098][ T6382] R13: ff11000008bc87c0 R14: ff1100000103c940 R15: ffd400000022f200
[  222.842311][ T6382] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  222.842566][ T6382] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.842746][ T6382] CR2: 00000000004a8144 CR3: 000000000b2ea005 CR4: 0000000000771ef0
[  222.842955][ T6382] PKRU: 55555554
[  222.843060][ T6382] Call Trace:
[  222.843166][ T6382]  <TASK>
[  222.843237][ T6382]  check_bytes_and_report.cold (mm/slub.c:1359)
[  222.843382][ T6382]  check_object (mm/slub.c:1507)
[  222.843522][ T6382]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  222.843659][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.843801][ T6382]  free_to_partial_list (mm/slub.c:5631)
[  222.843989][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.844129][ T6382]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.844313][ T6382]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  222.844454][ T6382]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  222.844638][ T6382]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  222.844776][ T6382]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.844963][ T6382]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.845104][ T6382]  __mmap_new_vma (mm/vma.c:2648)
[  222.845290][ T6382]  ? __mmap_new_file_vma (./include/linux/maple_tree.h:627)
[  222.845431][ T6382]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  222.845616][ T6382]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  222.845754][ T6382]  ? arch_stack_walk (arch/x86/kernel/stacktrace.c:26)
[  222.845942][ T6382]  __mmap_region (mm/vma.c:2879)
[  222.846082][ T6382]  ? vma_merge_new_range (./include/linux/mm.h:4474)
[  222.846270][ T6382]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  222.846417][ T6382]  ? kasan_save_stack (mm/kasan/common.c:58)
[  222.846599][ T6382]  ? kasan_save_stack (mm/kasan/common.c:57)
[  222.846736][ T6382]  ? kasan_record_aux_stack (mm/kasan/generic.c:556)
[  222.846920][ T6382]  ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3181)
[  222.847142][ T6382]  ? vms_complete_munmap_vmas (mm/vma.c:1441)
[  222.847280][ T6382]  ? do_vmi_align_munmap (mm/vma.c:1684)
[  222.847472][ T6382]  ? do_vmi_munmap (mm/vma.c:1732)
[  222.847609][ T6382]  ? elf_load (fs/binfmt_elf.c:395 fs/binfmt_elf.c:420)
[  222.847715][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.847903][ T6382]  ? load_elf_binary (fs/binfmt_elf.c:1254)
[  222.848051][ T6382]  mmap_region (mm/vma.c:2964)
[  222.848235][ T6382]  ? mm_take_all_locks (mm/vma.c:2365)
[  222.848378][ T6382]  ? __get_unmapped_area (./include/linux/security.h:1188 mm/mmap.c:877)
[  222.848567][ T6382]  do_mmap (mm/mmap.c:573)
[  222.848673][ T6382]  ? __ia32_sys_brk (mm/mmap.c:117)
[  222.848859][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.848996][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.849187][ T6382]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  222.849328][ T6382]  ? down_write (kernel/locking/rwsem.c:1633)
[  222.849514][ T6382]  vm_mmap_pgoff (mm/util.c:581)
[  222.849658][ T6382]  ? randomize_page (mm/util.c:387)
[  222.849843][ T6382]  ? __ia32_sys_remap_file_pages (mm/mmap.c:1101)
[  222.850015][ T6382]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  222.850203][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.850346][ T6382]  elf_load (fs/binfmt_elf.c:397 fs/binfmt_elf.c:420)
[  222.850500][ T6382]  load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.850638][ T6382]  load_elf_binary (fs/binfmt_elf.c:1254)
[  222.850826][ T6382]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  222.850966][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  222.851150][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.851291][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.851479][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.851617][ T6382]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  222.851801][ T6382]  ? check_unsafe_exec (fs/exec.c:1617)
[  222.851940][ T6382]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  222.852126][ T6382]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  222.852266][ T6382]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  222.852456][ T6382]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  222.852593][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.852778][ T6382]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  222.852947][ T6382] RIP: 0033:0x7f3b211daf4b
[  222.853146][ T6382] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  222.853379][ T6382] RSP: 002b:00007ffc92d231a8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  222.853594][ T6382] RAX: ffffffffffffffda RBX: 000055c7cd003c00 RCX: 00007f3b211daf4b
[  222.853852][ T6382] RDX: 000055c7cd003c50 RSI: 000055c7ccff68d0 RDI: 000055c7cd003c00
[  222.854110][ T6382] RBP: 00007ffc92d23290 R08: 00007ffc92d230d0 R09: 0000000000000000
[  222.854373][ T6382] R10: 0000000000000008 R11: 0000000000000202 R12: 000055c7cd003c00
[  222.854584][ T6382] R13: 0000000000000000 R14: 000055c7ccff68d0 R15: 000055c7cd003c50
| [  222.865194][ T6382] ------------[ cut here ]------------
| [  222.865380][ T6382] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6382
| [  222.865634][ T6382] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  222.866170][ T6382] Tainted: [B]=BAD_PAGE, [W]=WARN
[  222.866362][ T6382] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  222.866533][ T6382] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  222.866728][ T6382] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  222.867325][ T6382] RSP: 0018:ffa0000008106f48 EFLAGS: 00010046
[  222.867502][ T6382] RAX: 0000000000000220 RBX: ff11000008bc8620 RCX: 0000000000000001
[  222.867757][ T6382] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  222.868014][ T6382] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  222.868273][ T6382] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd400000022f200
[  222.868484][ T6382] R13: ff11000008bc8640 R14: ff1100000103c940 R15: ffd400000022f200
[  222.868739][ T6382] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  222.869033][ T6382] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.869258][ T6382] CR2: 00007f3b211daf21 CR3: 000000000b2ea005 CR4: 0000000000771ef0
[  222.869471][ T6382] PKRU: 55555554
[  222.869620][ T6382] Call Trace:
[  222.869723][ T6382]  <TASK>
[  222.869793][ T6382]  check_bytes_and_report.cold (mm/slub.c:1359)
[  222.869980][ T6382]  check_object (mm/slub.c:1507)
[  222.870122][ T6382]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  222.870306][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.870448][ T6382]  free_to_partial_list (mm/slub.c:5631)
[  222.870632][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.870769][ T6382]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.870953][ T6382]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  222.871090][ T6382]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  222.871275][ T6382]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  222.871418][ T6382]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.871604][ T6382]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.871740][ T6382]  __mmap_new_vma (mm/vma.c:2648)
[  222.871926][ T6382]  ? __mmap_new_file_vma (./include/linux/maple_tree.h:627)
[  222.872067][ T6382]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  222.872250][ T6382]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  222.872393][ T6382]  ? arch_stack_walk (arch/x86/kernel/stacktrace.c:26)
[  222.872577][ T6382]  __mmap_region (mm/vma.c:2879)
[  222.872713][ T6382]  ? vma_merge_new_range (./include/linux/mm.h:4474)
[  222.872897][ T6382]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  222.873036][ T6382]  ? kasan_save_stack (mm/kasan/common.c:58)
[  222.873172][ T6382]  ? kasan_save_stack (mm/kasan/common.c:57)
[  222.873309][ T6382]  ? kasan_record_aux_stack (mm/kasan/generic.c:556)
[  222.873496][ T6382]  ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3181)
[  222.873668][ T6382]  ? vms_complete_munmap_vmas (mm/vma.c:1441)
[  222.873853][ T6382]  ? do_vmi_align_munmap (mm/vma.c:1684)
[  222.873990][ T6382]  ? do_vmi_munmap (mm/vma.c:1732)
[  222.874175][ T6382]  ? elf_load (fs/binfmt_elf.c:395 fs/binfmt_elf.c:420)
[  222.874279][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.874468][ T6382]  ? load_elf_binary (fs/binfmt_elf.c:1254)
[  222.874612][ T6382]  mmap_region (mm/vma.c:2964)
[  222.874797][ T6382]  ? mm_take_all_locks (mm/vma.c:2365)
[  222.874935][ T6382]  ? __get_unmapped_area (./include/linux/security.h:1188 mm/mmap.c:877)
[  222.875119][ T6382]  do_mmap (mm/mmap.c:573)
[  222.875223][ T6382]  ? __ia32_sys_brk (mm/mmap.c:117)
[  222.875411][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.875548][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.875734][ T6382]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  222.875872][ T6382]  ? down_write (kernel/locking/rwsem.c:1633)
[  222.876059][ T6382]  vm_mmap_pgoff (mm/util.c:581)
[  222.876198][ T6382]  ? randomize_page (mm/util.c:387)
[  222.876386][ T6382]  ? __ia32_sys_remap_file_pages (mm/mmap.c:1101)
[  222.876558][ T6382]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  222.876742][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.876879][ T6382]  elf_load (fs/binfmt_elf.c:397 fs/binfmt_elf.c:420)
[  222.877029][ T6382]  load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.877168][ T6382]  load_elf_binary (fs/binfmt_elf.c:1254)
[  222.877359][ T6382]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  222.877496][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  222.877678][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.877814][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.877999][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.878135][ T6382]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  222.878323][ T6382]  ? check_unsafe_exec (fs/exec.c:1617)
[  222.878461][ T6382]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  222.878646][ T6382]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  222.878782][ T6382]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  222.878966][ T6382]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  222.879101][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.879289][ T6382]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  222.879462][ T6382] RIP: 0033:0x7f3b211daf4b
[  222.879657][ T6382] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  222.879837][ T6382] RSP: 002b:00007ffc92d231a8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  222.880095][ T6382] RAX: ffffffffffffffda RBX: 000055c7cd003c00 RCX: 00007f3b211daf4b
[  222.880355][ T6382] RDX: 000055c7cd003c50 RSI: 000055c7ccff68d0 RDI: 000055c7cd003c00
[  222.880612][ T6382] RBP: 00007ffc92d23290 R08: 00007ffc92d230d0 R09: 0000000000000000
[  222.880821][ T6382] R10: 0000000000000008 R11: 0000000000000202 R12: 000055c7cd003c00
[  222.881078][ T6382] R13: 0000000000000000 R14: 000055c7ccff68d0 R15: 000055c7cd003c50
| [  222.891747][ T6382] ------------[ cut here ]------------
| [  222.891883][ T6382] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6382
| [  222.892133][ T6382] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  222.892719][ T6382] Tainted: [B]=BAD_PAGE, [W]=WARN
[  222.892856][ T6382] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  222.893081][ T6382] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  222.893276][ T6382] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  222.893828][ T6382] RSP: 0018:ffa0000008106f58 EFLAGS: 00010046
[  222.894053][ T6382] RAX: 0000000000000220 RBX: ff1100000949bce0 RCX: 0000000000000001
[  222.894311][ T6382] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  222.894525][ T6382] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  222.894783][ T6382] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000002526c0
[  222.895041][ T6382] R13: ff1100000949bcf8 R14: ff1100000103c940 R15: ffd40000002526c0
[  222.895301][ T6382] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  222.895595][ T6382] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.895771][ T6382] CR2: 00007f3b211daf21 CR3: 000000000b2ea005 CR4: 0000000000771ef0
[  222.896029][ T6382] PKRU: 55555554
[  222.896133][ T6382] Call Trace:
[  222.896285][ T6382]  <TASK>
[  222.896357][ T6382]  check_bytes_and_report.cold (mm/slub.c:1359)
[  222.896495][ T6382]  check_object (mm/slub.c:1515)
[  222.896680][ T6382]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  222.896817][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.897001][ T6382]  free_to_partial_list (mm/slub.c:5631)
[  222.897139][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.897326][ T6382]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.897464][ T6382]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  222.897648][ T6382]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  222.897799][ T6382]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  222.897983][ T6382]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.898122][ T6382]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.898309][ T6382]  __mmap_new_vma (mm/vma.c:2648)
[  222.898451][ T6382]  ? __mmap_new_file_vma (./include/linux/maple_tree.h:627)
[  222.898637][ T6382]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  222.898775][ T6382]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  222.898960][ T6382]  ? arch_stack_walk (arch/x86/kernel/stacktrace.c:26)
[  222.899100][ T6382]  __mmap_region (mm/vma.c:2879)
[  222.899287][ T6382]  ? vma_merge_new_range (./include/linux/mm.h:4474)
[  222.899429][ T6382]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  222.899616][ T6382]  ? kasan_save_stack (mm/kasan/common.c:58)
[  222.899755][ T6382]  ? kasan_save_stack (mm/kasan/common.c:57)
[  222.899940][ T6382]  ? kasan_record_aux_stack (mm/kasan/generic.c:556)
[  222.900077][ T6382]  ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3181)
[  222.900298][ T6382]  ? vms_complete_munmap_vmas (mm/vma.c:1441)
[  222.900486][ T6382]  ? do_vmi_align_munmap (mm/vma.c:1684)
[  222.900623][ T6382]  ? do_vmi_munmap (mm/vma.c:1732)
[  222.900808][ T6382]  ? elf_load (fs/binfmt_elf.c:395 fs/binfmt_elf.c:420)
[  222.900912][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.901050][ T6382]  ? load_elf_binary (fs/binfmt_elf.c:1254)
[  222.901242][ T6382]  mmap_region (mm/vma.c:2964)
[  222.901383][ T6382]  ? mm_take_all_locks (mm/vma.c:2365)
[  222.901567][ T6382]  ? __get_unmapped_area (./include/linux/security.h:1188 mm/mmap.c:877)
[  222.901706][ T6382]  do_mmap (mm/mmap.c:573)
[  222.901857][ T6382]  ? __ia32_sys_brk (mm/mmap.c:117)
[  222.901995][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.902181][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.902325][ T6382]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  222.902511][ T6382]  ? down_write (kernel/locking/rwsem.c:1633)
[  222.902649][ T6382]  vm_mmap_pgoff (mm/util.c:581)
[  222.902833][ T6382]  ? randomize_page (mm/util.c:387)
[  222.902973][ T6382]  ? __ia32_sys_remap_file_pages (mm/mmap.c:1101)
[  222.903190][ T6382]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  222.903330][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.903516][ T6382]  elf_load (fs/binfmt_elf.c:397 fs/binfmt_elf.c:420)
[  222.903621][ T6382]  load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.903806][ T6382]  load_elf_binary (fs/binfmt_elf.c:1254)
[  222.903946][ T6382]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  222.904134][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  222.904272][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.904459][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.904597][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.904784][ T6382]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  222.904920][ T6382]  ? check_unsafe_exec (fs/exec.c:1617)
[  222.905103][ T6382]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  222.905239][ T6382]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  222.905426][ T6382]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  222.905562][ T6382]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  222.905747][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.905883][ T6382]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  222.906098][ T6382] RIP: 0033:0x7f3b211daf4b
[  222.906242][ T6382] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  222.906472][ T6382] RSP: 002b:00007ffc92d231a8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  222.906727][ T6382] RAX: ffffffffffffffda RBX: 000055c7cd003c00 RCX: 00007f3b211daf4b
[  222.906982][ T6382] RDX: 000055c7cd003c50 RSI: 000055c7ccff68d0 RDI: 000055c7cd003c00
[  222.907186][ T6382] RBP: 00007ffc92d23290 R08: 00007ffc92d230d0 R09: 0000000000000000
[  222.907445][ T6382] R10: 0000000000000008 R11: 0000000000000202 R12: 000055c7cd003c00
[  222.907696][ T6382] R13: 0000000000000000 R14: 000055c7ccff68d0 R15: 000055c7cd003c50
| [  222.918201][ T6382] ------------[ cut here ]------------
| [  222.918338][ T6382] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6382
| [  222.918585][ T6382] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  222.919159][ T6382] Tainted: [B]=BAD_PAGE, [W]=WARN
[  222.919296][ T6382] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  222.919518][ T6382] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  222.919659][ T6382] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  222.920249][ T6382] RSP: 0018:ffa0000008106f58 EFLAGS: 00010046
[  222.920475][ T6382] RAX: 0000000000000220 RBX: ff1100000949b320 RCX: 0000000000000001
[  222.920730][ T6382] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  222.920936][ T6382] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  222.921190][ T6382] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000002526c0
[  222.921447][ T6382] R13: ff1100000949b338 R14: ff1100000103c940 R15: ffd40000002526c0
[  222.921698][ T6382] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  222.921939][ T6382] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.922158][ T6382] CR2: 00007f3b211daf21 CR3: 000000000b2ea005 CR4: 0000000000771ef0
[  222.922419][ T6382] PKRU: 55555554
[  222.922521][ T6382] Call Trace:
[  222.922670][ T6382]  <TASK>
[  222.922738][ T6382]  check_bytes_and_report.cold (mm/slub.c:1359)
[  222.922874][ T6382]  check_object (mm/slub.c:1515)
[  222.923059][ T6382]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  222.923195][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.923382][ T6382]  free_to_partial_list (mm/slub.c:5631)
[  222.923520][ T6382]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.923703][ T6382]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  222.923840][ T6382]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  222.924024][ T6382]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  222.924160][ T6382]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  222.924346][ T6382]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.924486][ T6382]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[  222.924671][ T6382]  __mmap_new_vma (mm/vma.c:2648)
[  222.924809][ T6382]  ? __mmap_new_file_vma (./include/linux/maple_tree.h:627)
[  222.924993][ T6382]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[  222.925130][ T6382]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[  222.925318][ T6382]  ? arch_stack_walk (arch/x86/kernel/stacktrace.c:26)
[  222.925455][ T6382]  __mmap_region (mm/vma.c:2879)
[  222.925639][ T6382]  ? vma_merge_new_range (./include/linux/mm.h:4474)
[  222.925776][ T6382]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  222.925963][ T6382]  ? kasan_save_stack (mm/kasan/common.c:58)
[  222.926099][ T6382]  ? kasan_save_stack (mm/kasan/common.c:57)
[  222.926234][ T6382]  ? kasan_record_aux_stack (mm/kasan/generic.c:556)
[  222.926377][ T6382]  ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3181)
[  222.926593][ T6382]  ? vms_complete_munmap_vmas (mm/vma.c:1441)
[  222.926728][ T6382]  ? do_vmi_align_munmap (mm/vma.c:1684)
[  222.926912][ T6382]  ? do_vmi_munmap (mm/vma.c:1732)
[  222.927048][ T6382]  ? elf_load (fs/binfmt_elf.c:395 fs/binfmt_elf.c:420)
[  222.927197][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.927337][ T6382]  ? load_elf_binary (fs/binfmt_elf.c:1254)
[  222.927554][ T6382]  mmap_region (mm/vma.c:2964)
[  222.927690][ T6382]  ? mm_take_all_locks (mm/vma.c:2365)
[  222.927872][ T6382]  ? __get_unmapped_area (./include/linux/security.h:1188 mm/mmap.c:877)
[  222.928016][ T6382]  do_mmap (mm/mmap.c:573)
[  222.928167][ T6382]  ? __ia32_sys_brk (mm/mmap.c:117)
[  222.928303][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.928499][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.928634][ T6382]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[  222.928816][ T6382]  ? down_write (kernel/locking/rwsem.c:1633)
[  222.928958][ T6382]  vm_mmap_pgoff (mm/util.c:581)
[  222.929141][ T6382]  ? randomize_page (mm/util.c:387)
[  222.929277][ T6382]  ? __ia32_sys_remap_file_pages (mm/mmap.c:1101)
[  222.929503][ T6382]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  222.929638][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.929821][ T6382]  elf_load (fs/binfmt_elf.c:397 fs/binfmt_elf.c:420)
[  222.929925][ T6382]  load_elf_interp.isra.0 (fs/binfmt_elf.c:686)
[  222.930114][ T6382]  load_elf_binary (fs/binfmt_elf.c:1254)
[  222.930252][ T6382]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  222.930437][ T6382]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[  222.930580][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.930764][ T6382]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  222.930901][ T6382]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  222.931089][ T6382]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[  222.931226][ T6382]  ? check_unsafe_exec (fs/exec.c:1617)
[  222.931411][ T6382]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[  222.931548][ T6382]  do_execveat_common.isra.0 (fs/exec.c:1945)
[  222.931732][ T6382]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[  222.931868][ T6382]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  222.932052][ T6382]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  222.932188][ T6382]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  222.932411][ T6382] RIP: 0033:0x7f3b211daf4b
[  222.932555][ T6382] Code: Unable to access opcode bytes at 0x7f3b211daf21.

Code starting with the faulting instruction
===========================================
[  222.932780][ T6382] RSP: 002b:00007ffc92d231a8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[  222.933037][ T6382] RAX: ffffffffffffffda RBX: 000055c7cd003c00 RCX: 00007f3b211daf4b
[  222.933242][ T6382] RDX: 000055c7cd003c50 RSI: 000055c7ccff68d0 RDI: 000055c7cd003c00
[  222.933500][ T6382] RBP: 00007ffc92d23290 R08: 00007ffc92d230d0 R09: 0000000000000000
[  222.933754][ T6382] R10: 0000000000000008 R11: 0000000000000202 R12: 000055c7cd003c00
[  222.934008][ T6382] R13: 0000000000000000 R14: 000055c7ccff68d0 R15: 000055c7cd003c50
| [  234.520885][ T6984] ------------[ cut here ]------------
| [  234.521017][ T6984] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6984
| [  234.521215][ T6984] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  234.521687][ T6984] Tainted: [B]=BAD_PAGE, [W]=WARN
[  234.521820][ T6984] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  234.521986][ T6984] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  234.522125][ T6984] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  234.522599][ T6984] RSP: 0018:ffa0000008d27718 EFLAGS: 00010046
[  234.522769][ T6984] RAX: 0000000000000220 RBX: ff1100000557b1a0 RCX: 0000000000000001
[  234.522967][ T6984] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  234.523166][ T6984] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  234.523364][ T6984] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000155ec0
[  234.523565][ T6984] R13: ff1100000557b1c0 R14: ff1100000103c940 R15: ffd4000000155ec0
[  234.523766][ T6984] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  234.523997][ T6984] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.524213][ T6984] CR2: 00007f6120f0f498 CR3: 00000000187f3001 CR4: 0000000000771ef0
[  234.524460][ T6984] PKRU: 55555554
[  234.524560][ T6984] Call Trace:
[  234.524661][ T6984]  <TASK>
[  234.524772][ T6984]  check_bytes_and_report.cold (mm/slub.c:1359)
[  234.524906][ T6984]  check_object (mm/slub.c:1507)
[  234.525083][ T6984]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  234.525215][ T6984]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.525395][ T6984]  free_to_partial_list (mm/slub.c:5631)
[  234.525526][ T6984]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.525699][ T6984]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.525830][ T6984]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  234.526006][ T6984]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  234.526138][ T6984]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  234.526313][ T6984]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  234.526415][ T6984]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  234.526512][ T6984]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  234.526687][ T6984]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.526818][ T6984]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  234.526992][ T6984]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  234.527122][ T6984]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  234.527297][ T6984]  do_dentry_open (fs/open.c:996)
[  234.527433][ T6984]  vfs_open (fs/open.c:1101)
[  234.527577][ T6984]  ? may_open (fs/namei.c:4269)
[  234.527677][ T6984]  do_open (fs/namei.c:4837)
[  234.527821][ T6984]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  234.527954][ T6984]  path_openat (fs/namei.c:5000)
[  234.528128][ T6984]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  234.528258][ T6984]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  234.528437][ T6984]  do_file_open (fs/namei.c:5029)
[  234.528570][ T6984]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  234.528749][ T6984]  ? page_get_link_raw (fs/namei.c:6482)
[  234.528880][ T6984]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  234.529056][ T6984]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  234.529157][ T6984]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  234.529288][ T6984]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  234.529469][ T6984]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.529599][ T6984]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  234.529810][ T6984]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  234.529986][ T6984]  ? fput_close_sync (fs/file_table.c:617)
[  234.530116][ T6984]  ? __ia32_sys_open (fs/open.c:1427)
[  234.530290][ T6984]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  234.530426][ T6984]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.530600][ T6984]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  234.530759][ T6984]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  234.530965][ T6984]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  234.531097][ T6984]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  234.531271][ T6984]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  234.531436][ T6984] RIP: 0033:0x7f61210026e5
[  234.531622][ T6984] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  234.532182][ T6984] RSP: 002b:00007ffd831e0aa0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  234.532384][ T6984] RAX: ffffffffffffffda RBX: 00007ffd831e0d30 RCX: 00007f61210026e5
[  234.532627][ T6984] RDX: 0000000000080000 RSI: 00007ffd831e0b20 RDI: 00000000ffffff9c
[  234.532873][ T6984] RBP: 00007ffd831e0aa0 R08: 00007ffd831e0d17 R09: 0000000000000000
[  234.533114][ T6984] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd831e0b20
[  234.533311][ T6984] R13: 00007ffd831e0b20 R14: 00007f6120fd4000 R15: 0000000000000000
| [  234.543322][ T6984] ------------[ cut here ]------------
| [  234.543613][ T6984] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/6984
| [  234.543850][ T6984] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  234.544412][ T6984] Tainted: [B]=BAD_PAGE, [W]=WARN
[  234.544545][ T6984] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  234.544758][ T6984] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  234.544897][ T6984] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  234.545466][ T6984] RSP: 0018:ffa0000008d27718 EFLAGS: 00010046
[  234.545678][ T6984] RAX: 0000000000000220 RBX: ff1100000557b260 RCX: 0000000000000001
[  234.545879][ T6984] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  234.546121][ T6984] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  234.546363][ T6984] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000155ec0
[  234.546612][ T6984] R13: ff1100000557b280 R14: ff1100000103c940 R15: ffd4000000155ec0
[  234.546811][ T6984] FS:  0000000000000000(0000) GS:ff110000a422e000(0000) knlGS:0000000000000000
[  234.547089][ T6984] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.547301][ T6984] CR2: 00007f6120f0f498 CR3: 00000000187f3001 CR4: 0000000000771ef0
[  234.547546][ T6984] PKRU: 55555554
[  234.547646][ T6984] Call Trace:
[  234.547745][ T6984]  <TASK>
[  234.547857][ T6984]  check_bytes_and_report.cold (mm/slub.c:1359)
[  234.547988][ T6984]  check_object (mm/slub.c:1507)
[  234.548164][ T6984]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  234.548295][ T6984]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.548475][ T6984]  free_to_partial_list (mm/slub.c:5631)
[  234.548604][ T6984]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.548779][ T6984]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.548910][ T6984]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  234.549083][ T6984]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  234.549212][ T6984]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  234.549390][ T6984]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  234.549489][ T6984]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[  234.549586][ T6984]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  234.549759][ T6984]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.549890][ T6984]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  234.550068][ T6984]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  234.550198][ T6984]  ? ovl_llseek (fs/overlayfs/file.c:255)
[  234.550374][ T6984]  do_dentry_open (fs/open.c:996)
[  234.550505][ T6984]  vfs_open (fs/open.c:1101)
[  234.550647][ T6984]  ? may_open (fs/namei.c:4269)
[  234.550747][ T6984]  do_open (fs/namei.c:4837)
[  234.550889][ T6984]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  234.551020][ T6984]  path_openat (fs/namei.c:5000)
[  234.551195][ T6984]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  234.551324][ T6984]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  234.551503][ T6984]  do_file_open (fs/namei.c:5029)
[  234.551633][ T6984]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  234.551808][ T6984]  ? page_get_link_raw (fs/namei.c:6482)
[  234.551938][ T6984]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  234.552113][ T6984]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  234.552213][ T6984]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  234.552343][ T6984]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  234.552521][ T6984]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.552652][ T6984]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  234.552857][ T6984]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  234.553031][ T6984]  ? fput_close_sync (fs/file_table.c:617)
[  234.553161][ T6984]  ? __ia32_sys_open (fs/open.c:1427)
[  234.553335][ T6984]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  234.553471][ T6984]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.553643][ T6984]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  234.553804][ T6984]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  234.554011][ T6984]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  234.554141][ T6984]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  234.554313][ T6984]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  234.554480][ T6984] RIP: 0033:0x7f61210026e5
[  234.554664][ T6984] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[  234.555222][ T6984] RSP: 002b:00007ffd831e0aa0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[  234.555423][ T6984] RAX: ffffffffffffffda RBX: 00007ffd831e0d30 RCX: 00007f61210026e5
[  234.555667][ T6984] RDX: 0000000000080000 RSI: 00007ffd831e0b20 RDI: 00000000ffffff9c
[  234.555911][ T6984] RBP: 00007ffd831e0aa0 R08: 00007ffd831e0d17 R09: 0000000000000000
[  234.556151][ T6984] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd831e0b20
[  234.556348][ T6984] R13: 00007ffd831e0b20 R14: 00007f6120fd4000 R15: 0000000000000000
| [  234.616577][ T6989] ------------[ cut here ]------------
| [  234.616702][ T6989] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/6989
| [  234.616892][ T6989] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  234.617344][ T6989] Tainted: [B]=BAD_PAGE, [W]=WARN
[  234.617476][ T6989] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  234.617635][ T6989] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  234.617770][ T6989] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  234.618220][ T6989] RSP: 0018:ffa0000008d37768 EFLAGS: 00010046
[  234.618383][ T6989] RAX: 0000000000000220 RBX: ff11000008dd2a40 RCX: 0000000000000001
[  234.618579][ T6989] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  234.618772][ T6989] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  234.618963][ T6989] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd4000000237480
[  234.619154][ T6989] R13: ff11000008dd2a68 R14: ff1100000103cac0 R15: ffd4000000237480
[  234.619347][ T6989] FS:  00007f84401c3cc0(0000) GS:ff110000a40ae000(0000) knlGS:0000000000000000
[  234.619578][ T6989] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.619740][ T6989] CR2: 00000000353e99b8 CR3: 000000000d134002 CR4: 0000000000771ef0
[  234.619931][ T6989] PKRU: 55555554
[  234.620028][ T6989] Call Trace:
[  234.620123][ T6989]  <TASK>
[  234.620187][ T6989]  check_bytes_and_report.cold (mm/slub.c:1359)
[  234.620317][ T6989]  check_object (mm/slub.c:1515)
[  234.620448][ T6989]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  234.620573][ T6989]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.620700][ T6989]  free_to_partial_list (mm/slub.c:5631)
[  234.620825][ T6989]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.620952][ T6989]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.621077][ T6989]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  234.621205][ T6989]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  234.621333][ T6989]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  234.621499][ T6989]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  234.621627][ T6989]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  234.621722][ T6989]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  234.621846][ T6989]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  234.621972][ T6989]  ? __alloc_frozen_pages_noprof (mm/page_alloc.c:5459)
[  234.622130][ T6989]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  234.622259][ T6989]  netlink_sendmsg (net/netlink/af_netlink.c:1875)
[  234.622390][ T6989]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  234.622516][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.622644][ T6989]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  234.622770][ T6989]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  234.622896][ T6989]  ? copy_msghdr_from_user (net/socket.c:2650)
[  234.623021][ T6989]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  234.623178][ T6989]  ? move_addr_to_kernel (net/socket.c:258)
[  234.623305][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.623435][ T6989]  ___sys_sendmsg (net/socket.c:2767)
[  234.623560][ T6989]  ? copy_msghdr_from_user (net/socket.c:2619)
[  234.623689][ T6989]  __sys_sendmsg (net/socket.c:2799)
[  234.623816][ T6989]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  234.623942][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.624068][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.624196][ T6989]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  234.624320][ T6989]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  234.624449][ T6989]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  234.624605][ T6989] RIP: 0033:0x7f844042854e
[  234.624737][ T6989] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  234.625193][ T6989] RSP: 002b:00007fff9e316f80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  234.625389][ T6989] RAX: ffffffffffffffda RBX: 00007fff9e31984a RCX: 00007f844042854e
[  234.625582][ T6989] RDX: 0000000000000000 RSI: 00007fff9e317030 RDI: 0000000000000005
[  234.625774][ T6989] RBP: 00007fff9e316f90 R08: 0000000000000000 R09: 0000000000000000
[  234.625967][ T6989] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a9941c7
[  234.626157][ T6989] R13: 00000000004a1620 R14: 000000000000000d R15: 00007fff9e31984a
| [  234.635571][ T6989] ------------[ cut here ]------------
| [  234.635693][ T6989] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/6989
| [  234.635879][ T6989] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  234.636321][ T6989] Tainted: [B]=BAD_PAGE, [W]=WARN
[  234.636455][ T6989] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  234.636612][ T6989] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  234.636743][ T6989] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  234.637194][ T6989] RSP: 0018:ffa0000008d37768 EFLAGS: 00010046
[  234.637355][ T6989] RAX: 0000000000000220 RBX: ff11000002153a40 RCX: 0000000000000001
[  234.637549][ T6989] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  234.637738][ T6989] RBP: ff1100000103cac0 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  234.637930][ T6989] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000000854c0
[  234.638120][ T6989] R13: ff11000002153a68 R14: ff1100000103cac0 R15: ffd40000000854c0
[  234.638311][ T6989] FS:  00007f84401c3cc0(0000) GS:ff110000a40ae000(0000) knlGS:0000000000000000
[  234.638536][ T6989] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.638694][ T6989] CR2: 00000000353e99b8 CR3: 000000000d134002 CR4: 0000000000771ef0
[  234.638884][ T6989] PKRU: 55555554
[  234.638980][ T6989] Call Trace:
[  234.639076][ T6989]  <TASK>
[  234.639140][ T6989]  check_bytes_and_report.cold (mm/slub.c:1359)
[  234.639267][ T6989]  check_object (mm/slub.c:1515)
[  234.639397][ T6989]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  234.639525][ T6989]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.639651][ T6989]  free_to_partial_list (mm/slub.c:5631)
[  234.639776][ T6989]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.639903][ T6989]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  234.640029][ T6989]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  234.640155][ T6989]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  234.640281][ T6989]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[  234.640441][ T6989]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  234.640566][ T6989]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[  234.640660][ T6989]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[  234.640788][ T6989]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[  234.640915][ T6989]  ? __alloc_frozen_pages_noprof (mm/page_alloc.c:5459)
[  234.641073][ T6989]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  234.641199][ T6989]  netlink_sendmsg (net/netlink/af_netlink.c:1875)
[  234.641325][ T6989]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  234.641455][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.641582][ T6989]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  234.641708][ T6989]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  234.641833][ T6989]  ? copy_msghdr_from_user (net/socket.c:2650)
[  234.641959][ T6989]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  234.642117][ T6989]  ? move_addr_to_kernel (net/socket.c:258)
[  234.642244][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.642374][ T6989]  ___sys_sendmsg (net/socket.c:2767)
[  234.642501][ T6989]  ? copy_msghdr_from_user (net/socket.c:2619)
[  234.642628][ T6989]  __sys_sendmsg (net/socket.c:2799)
[  234.642755][ T6989]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  234.642880][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.643006][ T6989]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  234.643132][ T6989]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  234.643300][ T6989]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  234.643430][ T6989]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  234.643628][ T6989] RIP: 0033:0x7f844042854e
[  234.643758][ T6989] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  234.644298][ T6989] RSP: 002b:00007fff9e316f80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  234.644536][ T6989] RAX: ffffffffffffffda RBX: 00007fff9e31984a RCX: 00007f844042854e
[  234.644724][ T6989] RDX: 0000000000000000 RSI: 00007fff9e317030 RDI: 0000000000000005
[  234.644957][ T6989] RBP: 00007fff9e316f90 R08: 0000000000000000 R09: 0000000000000000
[  234.645189][ T6989] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a9941c7
[  234.645424][ T6989] R13: 00000000004a1620 R14: 000000000000000d R15: 00007fff9e31984a
| [  235.654315][ T7006] ------------[ cut here ]------------
| [  235.654439][ T7006] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: jq/7006
| [  235.654625][ T7006] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  235.655058][ T7006] Tainted: [B]=BAD_PAGE, [W]=WARN
[  235.655182][ T7006] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  235.655336][ T7006] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  235.655470][ T7006] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  235.655906][ T7006] RSP: 0018:ffa0000008a57b10 EFLAGS: 00010046
[  235.656060][ T7006] RAX: 0000000000000220 RBX: ff1100001848b1a0 RCX: 0000000000000001
[  235.656245][ T7006] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  235.656432][ T7006] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  235.656618][ T7006] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000006122c0
[  235.656802][ T7006] R13: ff1100001848b1b8 R14: ff1100000103c940 R15: ffd40000006122c0
[  235.656988][ T7006] FS:  0000000000000000(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  235.657206][ T7006] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.657360][ T7006] CR2: 00007f20c0b54668 CR3: 0000000018b1b002 CR4: 0000000000771ef0
[  235.657549][ T7006] PKRU: 55555554
[  235.657643][ T7006] Call Trace:
[  235.657736][ T7006]  <TASK>
[  235.657799][ T7006]  check_bytes_and_report.cold (mm/slub.c:1359)
[  235.657923][ T7006]  check_object (mm/slub.c:1515)
[  235.658044][ T7006]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  235.658168][ T7006]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  235.658288][ T7006]  free_to_partial_list (mm/slub.c:5631)
[  235.658412][ T7006]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  235.658532][ T7006]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  235.658653][ T7006]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  235.658775][ T7006]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  235.658896][ T7006]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  235.659016][ T7006]  ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22))
[  235.659169][ T7006]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  235.659292][ T7006]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  235.659418][ T7006]  vfs_fstatat (./include/linux/fs.h:2557 ./include/linux/fs.h:2564 ./include/linux/fs.h:2588 fs/stat.c:368)
[  235.659509][ T7006]  __do_sys_newfstatat (fs/stat.c:538)
[  235.659630][ T7006]  ? vfs_fstatat (./include/linux/fs.h:2564 (discriminator 1))
[  235.659753][ T7006]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  235.659876][ T7006]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  235.659998][ T7006]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  235.660149][ T7006]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  235.660300][ T7006]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  235.660425][ T7006]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  235.660547][ T7006]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  235.660699][ T7006] RIP: 0033:0x7f20c0b8548e
[  235.660827][ T7006] Code: 0f 1f 40 00 f7 d8 89 05 30 5e 01 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 0b 31 c0 c3 0f 1f 84 00 00 00 00 00 f7 d8 89 05
All code
========
   0:	0f 1f 40 00          	nopl   0x0(%rax)
   4:	f7 d8                	neg    %eax
   6:	89 05 30 5e 01 00    	mov    %eax,0x15e30(%rip)        # 0x15e3c
   c:	b8 ff ff ff ff       	mov    $0xffffffff,%eax
  11:	c3                   	ret
  12:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  19:	00 00 00 
  1c:	f3 0f 1e fa          	endbr64
  20:	41 89 ca             	mov    %ecx,%r10d
  23:	b8 06 01 00 00       	mov    $0x106,%eax
  28:	0f 05                	syscall
  2a:*	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax		<-- trapping instruction
  2f:	77 0b                	ja     0x3c
  31:	31 c0                	xor    %eax,%eax
  33:	c3                   	ret
  34:	0f 1f 84 00 00 00 00 	nopl   0x0(%rax,%rax,1)
  3b:	00 
  3c:	f7 d8                	neg    %eax
  3e:	89                   	.byte 0x89
  3f:	05                   	.byte 0x5

Code starting with the faulting instruction
===========================================
   0:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
   5:	77 0b                	ja     0x12
   7:	31 c0                	xor    %eax,%eax
   9:	c3                   	ret
   a:	0f 1f 84 00 00 00 00 	nopl   0x0(%rax,%rax,1)
  11:	00 
  12:	f7 d8                	neg    %eax
  14:	89                   	.byte 0x89
  15:	05                   	.byte 0x5
[  235.661259][ T7006] RSP: 002b:00007ffd931d6748 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  235.661449][ T7006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20c0b8548e
[  235.661634][ T7006] RDX: 00007ffd931d6800 RSI: 00007ffd931d6750 RDI: 00000000ffffff9c
[  235.661817][ T7006] RBP: 00007ffd931d68c0 R08: 00007ffd931d6947 R09: 0000000000000000
[  235.662001][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e
[  235.662185][ T7006] R13: 00007ffd931d6750 R14: 00007f20c0b57000 R15: 0000000000000000
| [  235.671311][ T7006] ------------[ cut here ]------------
| [  235.671473][ T7006] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: jq/7006
| [  235.671691][ T7006] Modules linked in: 8021q xfrm_user [last unloaded: netdevsim]
| [  235.672159][ T7006] Tainted: [B]=BAD_PAGE, [W]=WARN
[  235.672321][ T7006] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  235.672516][ T7006] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  235.672642][ T7006] Code: c7 10 64 aa 8f e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 aa 8f          	adc    %ah,-0x71(%rdx,%rbp,4)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  235.673158][ T7006] RSP: 0018:ffa0000008a57b10 EFLAGS: 00010046
[  235.673310][ T7006] RAX: 0000000000000220 RBX: ff1100001848bb60 RCX: 0000000000000001
[  235.673536][ T7006] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff911b4660
[  235.673763][ T7006] RBP: ff1100000103c940 R08: ffffffff8c9bcf0a R09: 1ffffffff22368cc
[  235.673986][ T7006] R10: fffffbfff22368cd R11: fffffbfff22368cd R12: ffd40000006122c0
[  235.674168][ T7006] R13: ff1100001848bb78 R14: ff1100000103c940 R15: ffd40000006122c0
[  235.674394][ T7006] FS:  0000000000000000(0000) GS:ff110000a41ae000(0000) knlGS:0000000000000000
[  235.674647][ T7006] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.674842][ T7006] CR2: 00007f20c0b54668 CR3: 0000000018b1b002 CR4: 0000000000771ef0
[  235.675023][ T7006] PKRU: 55555554
[  235.675154][ T7006] Call Trace:
[  235.675244][ T7006]  <TASK>
[  235.675306][ T7006]  check_bytes_and_report.cold (mm/slub.c:1359)
[  235.675471][ T7006]  check_object (mm/slub.c:1515)
[  235.675593][ T7006]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  235.675755][ T7006]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  235.675875][ T7006]  free_to_partial_list (mm/slub.c:5631)
[  235.676035][ T7006]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  235.676159][ T7006]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  235.676319][ T7006]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  235.676443][ T7006]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  235.676605][ T7006]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[  235.676726][ T7006]  ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22))
[  235.676915][ T7006]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  235.677079][ T7006]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[  235.677199][ T7006]  vfs_fstatat (./include/linux/fs.h:2557 ./include/linux/fs.h:2564 ./include/linux/fs.h:2588 fs/stat.c:368)
[  235.677292][ T7006]  __do_sys_newfstatat (fs/stat.c:538)
[  235.677456][ T7006]  ? vfs_fstatat (./include/linux/fs.h:2564 (discriminator 1))
[  235.677577][ T7006]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[  235.677739][ T7006]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  235.677859][ T7006]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  235.678049][ T7006]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  235.678237][ T7006]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  235.678358][ T7006]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  235.678523][ T7006]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  235.678672][ T7006] RIP: 0033:0x7f20c0b8548e
[  235.678842][ T7006] Code: 0f 1f 40 00 f7 d8 89 05 30 5e 01 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 0b 31 c0 c3 0f 1f 84 00 00 00 00 00 f7 d8 89 05
All code
========
   0:	0f 1f 40 00          	nopl   0x0(%rax)
   4:	f7 d8                	neg    %eax
   6:	89 05 30 5e 01 00    	mov    %eax,0x15e30(%rip)        # 0x15e3c
   c:	b8 ff ff ff ff       	mov    $0xffffffff,%eax
  11:	c3                   	ret
  12:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  19:	00 00 00 
  1c:	f3 0f 1e fa          	endbr64
  20:	41 89 ca             	mov    %ecx,%r10d
  23:	b8 06 01 00 00       	mov    $0x106,%eax
  28:	0f 05                	syscall
  2a:*	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax		<-- trapping instruction
  2f:	77 0b                	ja     0x3c
  31:	31 c0                	xor    %eax,%eax
  33:	c3                   	ret
  34:	0f 1f 84 00 00 00 00 	nopl   0x0(%rax,%rax,1)
  3b:	00 
  3c:	f7 d8                	neg    %eax
  3e:	89                   	.byte 0x89
  3f:	05                   	.byte 0x5

Code starting with the faulting instruction
===========================================
   0:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
   5:	77 0b                	ja     0x12
   7:	31 c0                	xor    %eax,%eax
   9:	c3                   	ret
   a:	0f 1f 84 00 00 00 00 	nopl   0x0(%rax,%rax,1)
  11:	00 
  12:	f7 d8                	neg    %eax
  14:	89                   	.byte 0x89
  15:	05                   	.byte 0x5
[  235.679354][ T7006] RSP: 002b:00007ffd931d6748 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  235.679538][ T7006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20c0b8548e
[  235.679760][ T7006] RDX: 00007ffd931d6800 RSI: 00007ffd931d6750 RDI: 00000000ffffff9c
[  235.679982][ T7006] RBP: 00007ffd931d68c0 R08: 00007ffd931d6947 R09: 0000000000000000
[  235.680204][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e


Finger prints:
print_report:kasan_report:bond_update_slave_arr:bond_enslave:do_set_master
object_err:check_object:free_debug_processing:free_to_partial_list:qlist_free_all