======================================
| [   35.254843][  T373] ==================================================================
| [   35.255031][  T373] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
| [   35.255219][  T373] Write of size 8 at addr ff110000027b7c38 by task ip/373
| [   35.255371][  T373]
[   35.255439][  T373] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   35.255441][  T373] Call Trace:
[   35.255442][  T373]  <TASK>
[   35.255443][  T373]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[   35.255449][  T373]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[   35.255453][  T373]  print_report (mm/kasan/report.c:482)
[   35.255455][  T373]  ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54)
[   35.255458][  T373]  ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[   35.255460][  T373]  kasan_report (mm/kasan/report.c:595)
[   35.255463][  T373]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   35.255465][  T373]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   35.255467][  T373]  bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[   35.255468][  T373]  ? __mutex_unlock_slowpath (./include/linux/preempt.h:500 (discriminator 1) kernel/locking/mutex.c:999 (discriminator 1))
[   35.255472][  T373]  ? bond_slave_arr_work_rearm (drivers/net/bonding/bond_main.c:5078)
[   35.255474][  T373]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[   35.255478][  T373]  bond_enslave (drivers/net/bonding/bond_main.c:2337)
[   35.255480][  T373]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5218 (discriminator 9))
[   35.255481][  T373]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   35.255483][  T373]  ? mark_usage (kernel/locking/lockdep.c:4690)
[   35.255485][  T373]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   35.255487][  T373]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   35.255490][  T373]  ? is_bpf_text_address (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) kernel/bpf/core.c:751 (discriminator 2))
[   35.255494][  T373]  ? rtnl_af_lookup (net/core/rtnetlink.c:794 (discriminator 1))
[   35.255498][  T373]  do_set_master (net/core/rtnetlink.c:3088)
[   35.255501][  T373]  do_setlink.isra.0 (net/core/rtnetlink.c:3290 (discriminator 1))
[   35.255503][  T373]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[   35.255505][  T373]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[   35.255508][  T373]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[   35.255511][  T373]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:388 kernel/rcu/update.c:380)
[   35.255514][  T373]  ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 2) lib/stackdepot.c:676 (discriminator 2))
[   35.255517][  T373]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[   35.255519][  T373]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[   35.255520][  T373]  ? validate_chain (kernel/locking/lockdep.c:3817 (discriminator 2) kernel/locking/lockdep.c:3837 (discriminator 2) kernel/locking/lockdep.c:3892 (discriminator 2))
[   35.255523][  T373]  ? kasan_save_stack (mm/kasan/common.c:58)
[   35.255524][  T373]  ? kasan_save_stack (mm/kasan/common.c:57)
[   35.255525][  T373]  ? kasan_save_track (mm/kasan/common.c:78)
[   35.255527][  T373]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   35.255528][  T373]  ? __netlink_dump_start (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) net/netlink/af_netlink.c:2433 (discriminator 1))
[   35.255532][  T373]  ? ___sys_sendmsg (net/socket.c:2758 (discriminator 1))
[   35.255535][  T373]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   35.255537][  T373]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[   35.255539][  T373]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   35.255540][  T373]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   35.255542][  T373]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   35.255543][  T373]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   35.255544][  T373]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[   35.255546][  T373]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[   35.255547][  T373]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[   35.255549][  T373]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[   35.255551][  T373]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[   35.255553][  T373]  ? nla_get_range_signed (lib/nlattr.c:270)
[   35.255556][  T373]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[   35.255559][  T373]  rtnl_newlink (net/core/rtnetlink.c:4241)
[   35.255562][  T373]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   35.255563][  T373]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   35.255566][  T373]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   35.255568][  T373]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   35.255569][  T373]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   35.255571][  T373]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[   35.255573][  T373]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[   35.255575][  T373]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[   35.255578][  T373]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   35.255579][  T373]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   35.255582][  T373]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[   35.255584][  T373]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[   35.255585][  T373]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[   35.255587][  T373]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   35.255589][  T373]  ? netlink_ack (./include/linux/skbuff.h:2718)
[   35.255592][  T373]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2))
[   35.255593][  T373]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2))
[   35.255596][  T373]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[   35.255598][  T373]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[   35.255600][  T373]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[   35.255602][  T373]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[   35.255604][  T373]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[   35.255606][  T373]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[   35.255610][  T373]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[   35.255612][  T373]  ? copy_msghdr_from_user (net/socket.c:2650)
[   35.255613][  T373]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[   35.255615][  T373]  ? move_addr_to_kernel (net/socket.c:258)
[   35.255618][  T373]  ___sys_sendmsg (net/socket.c:2767)
[   35.255619][  T373]  ? copy_msghdr_from_user (net/socket.c:2619)
[   35.255624][  T373]  __sys_sendmsg (net/socket.c:2799)
[   35.255626][  T373]  ? __sys_sendmsg_sock (net/socket.c:2780)
[   35.255629][  T373]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[   35.255632][  T373]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   35.255634][  T373]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   35.255636][  T373]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   35.255638][  T373]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   35.255641][  T373] RIP: 0033:0x7ff16b34354e
[   35.255644][  T373] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   35.255646][  T373] RSP: 002b:00007ffd8d180a90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[   35.255649][  T373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff16b34354e
[   35.255651][  T373] RDX: 0000000000000000 RSI: 00007ffd8d180b40 RDI: 0000000000000005
[   35.255652][  T373] RBP: 00007ffd8d180aa0 R08: 0000000000000000 R09: 0000000000000000
[   35.255652][  T373] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994429
[   35.255653][  T373] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffd8d181210
| [   41.413774][  T409] ------------[ cut here ]------------
| [   41.413906][  T409] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/409
| [   41.414114][  T409] Modules linked in:
| [   41.414491][  T409] Tainted: [B]=BAD_PAGE
[   41.414592][  T409] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   41.414761][  T409] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   41.414902][  T409] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   41.415375][  T409] RSP: 0018:ffa00000022879e8 EFLAGS: 00010046
[   41.415545][  T409] RAX: 0000000000000020 RBX: ff1100000a5c8aa0 RCX: 0000000000000001
[   41.415752][  T409] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   41.415953][  T409] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   41.416158][  T409] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd4000000297200
[   41.416358][  T409] R13: ff1100000a5c8ac0 R14: ff1100000103c940 R15: ffd4000000297200
[   41.416560][  T409] FS:  0000000000000000(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   41.416796][  T409] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.416967][  T409] CR2: 00007f628fee6000 CR3: 0000000028f3c003 CR4: 0000000000771ef0
[   41.417170][  T409] PKRU: 55555554
[   41.417270][  T409] Call Trace:
[   41.417370][  T409]  <TASK>
[   41.417440][  T409]  check_bytes_and_report.cold (mm/slub.c:1359)
[   41.417575][  T409]  check_object (mm/slub.c:1507)
[   41.417708][  T409]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   41.417837][  T409]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   41.417971][  T409]  free_to_partial_list (mm/slub.c:5631)
[   41.418107][  T409]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   41.418238][  T409]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   41.418371][  T409]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   41.418504][  T409]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   41.418638][  T409]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   41.418768][  T409]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   41.418900][  T409]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   41.419034][  T409]  fuse_chan_send (fs/fuse/dev.c:827)
[   41.419163][  T409]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   41.419294][  T409]  ? fuse_file_release (fs/fuse/file.c:360)
[   41.419424][  T409]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   41.419599][  T409]  __fput (fs/file_table.c:512)
[   41.419702][  T409]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   41.419878][  T409]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   41.420043][  T409]  task_work_run (kernel/task_work.c:233)
[   41.420218][  T409]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   41.420348][  T409]  ? task_work_cancel (kernel/task_work.c:190)
[   41.420523][  T409]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   41.420653][  T409]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   41.420827][  T409]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   41.420958][  T409]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   41.421105][  T409]  ? exit_notify (kernel/exit.c:780)
[   41.421234][  T409]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   41.421441][  T409]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   41.421570][  T409]  do_group_exit (kernel/exit.c:1151)
[   41.421744][  T409]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   41.421873][  T409]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   41.422054][  T409]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   41.422183][  T409]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   41.422356][  T409]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   41.422564][  T409] RIP: 0033:0x7f628fdaa1b8
[   41.422703][  T409] Code: Unable to access opcode bytes at 0x7f628fdaa18e.

Code starting with the faulting instruction
===========================================
[   41.422920][  T409] RSP: 002b:00007ffc5018eff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   41.423123][  T409] RAX: ffffffffffffffda RBX: 00007f628fedaf88 RCX: 00007f628fdaa1b8
[   41.423371][  T409] RDX: 00007f628fce7a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   41.423614][  T409] RBP: 00007ffc5018f050 R08: 0000000000000000 R09: 0000000000000000
[   41.423859][  T409] R10: 00007ffc5018ee90 R11: 0000000000000246 R12: 0000000000000002
[   41.424062][  T409] R13: 0000000000000000 R14: 00007f628fed9680 R15: 00007f628fedafa0
| [   41.434277][  T409] ------------[ cut here ]------------
| [   41.434446][  T409] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: sleep/409
| [   41.434682][  T409] Modules linked in:
| [   41.435091][  T409] Tainted: [B]=BAD_PAGE, [W]=WARN
[   41.435222][  T409] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   41.435430][  T409] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   41.435613][  T409] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   41.436125][  T409] RSP: 0018:ffa00000022879e8 EFLAGS: 00010046
[   41.436335][  T409] RAX: 0000000000000220 RBX: ff1100000a5c8f20 RCX: 0000000000000001
[   41.436576][  T409] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   41.436773][  T409] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   41.437016][  T409] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd4000000297200
[   41.437256][  T409] R13: ff1100000a5c8f40 R14: ff1100000103c940 R15: ffd4000000297200
[   41.437497][  T409] FS:  0000000000000000(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   41.437770][  T409] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.437934][  T409] CR2: 00007f628fee6000 CR3: 0000000028f3c003 CR4: 0000000000771ef0
[   41.438176][  T409] PKRU: 55555554
[   41.438272][  T409] Call Trace:
[   41.438417][  T409]  <TASK>
[   41.438483][  T409]  check_bytes_and_report.cold (mm/slub.c:1359)
[   41.438612][  T409]  check_object (mm/slub.c:1507)
[   41.438786][  T409]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   41.438914][  T409]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   41.439091][  T409]  free_to_partial_list (mm/slub.c:5631)
[   41.439219][  T409]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   41.439391][  T409]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   41.439519][  T409]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   41.439693][  T409]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   41.439822][  T409]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   41.439995][  T409]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   41.440128][  T409]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   41.440303][  T409]  fuse_chan_send (fs/fuse/dev.c:827)
[   41.440431][  T409]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   41.440603][  T409]  ? fuse_file_release (fs/fuse/file.c:360)
[   41.440731][  T409]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   41.440907][  T409]  __fput (fs/file_table.c:512)
[   41.441008][  T409]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   41.441180][  T409]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   41.441339][  T409]  task_work_run (kernel/task_work.c:233)
[   41.441513][  T409]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   41.441642][  T409]  ? task_work_cancel (kernel/task_work.c:190)
[   41.441815][  T409]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   41.441944][  T409]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   41.442123][  T409]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   41.442252][  T409]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   41.442393][  T409]  ? exit_notify (kernel/exit.c:780)
[   41.442521][  T409]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   41.442728][  T409]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   41.442856][  T409]  do_group_exit (kernel/exit.c:1151)
[   41.443032][  T409]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   41.443161][  T409]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   41.443338][  T409]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   41.443466][  T409]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   41.443639][  T409]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   41.443844][  T409] RIP: 0033:0x7f628fdaa1b8
[   41.443980][  T409] Code: Unable to access opcode bytes at 0x7f628fdaa18e.

Code starting with the faulting instruction
===========================================
[   41.444193][  T409] RSP: 002b:00007ffc5018eff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   41.444390][  T409] RAX: ffffffffffffffda RBX: 00007f628fedaf88 RCX: 00007f628fdaa1b8
[   41.444630][  T409] RDX: 00007f628fce7a48 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   41.444870][  T409] RBP: 00007ffc5018f050 R08: 0000000000000000 R09: 0000000000000000
[   41.445113][  T409] R10: 00007ffc5018ee90 R11: 0000000000000246 R12: 0000000000000002
[   41.445305][  T409] R13: 0000000000000000 R14: 00007f628fed9680 R15: 00007f628fedafa0
| [   47.277742][  T444] ------------[ cut here ]------------
| [   47.277919][  T444] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/444
| [   47.278120][  T444] Modules linked in:
| [   47.278576][  T444] Tainted: [B]=BAD_PAGE, [W]=WARN
[   47.278707][  T444] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   47.278916][  T444] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   47.279055][  T444] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   47.279611][  T444] RSP: 0018:ffa00000024974d0 EFLAGS: 00010046
[   47.279821][  T444] RAX: 0000000000000220 RBX: ff110000027b7c20 RCX: 0000000000000001
[   47.280016][  T444] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   47.280263][  T444] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   47.280504][  T444] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd400000009edc0
[   47.280743][  T444] R13: ff110000027b7c38 R14: ff1100000103c940 R15: ffd400000009edc0
[   47.280939][  T444] FS:  00007fba129d6cc0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   47.281216][  T444] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   47.281429][  T444] CR2: 00000000004ed8e0 CR3: 00000000097bd005 CR4: 0000000000771ef0
[   47.281673][  T444] PKRU: 55555554
[   47.281771][  T444] Call Trace:
[   47.281869][  T444]  <TASK>
[   47.281980][  T444]  check_bytes_and_report.cold (mm/slub.c:1359)
[   47.282115][  T444]  check_object (mm/slub.c:1515)
[   47.282291][  T444]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   47.282419][  T444]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   47.282591][  T444]  free_to_partial_list (mm/slub.c:5631)
[   47.282720][  T444]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   47.282893][  T444]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   47.283021][  T444]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   47.283197][  T444]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   47.283327][  T444]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   47.283530][  T444]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   47.283660][  T444]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   47.283800][  T444]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   47.283926][  T444]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   47.284102][  T444]  ? rtnetlink_rcv_msg (net/core/rtnetlink.c:7170)
[   47.284230][  T444]  netlink_ack (./include/linux/skbuff.h:1384 ./include/net/netlink.h:1055 net/netlink/af_netlink.c:2493)
[   47.284331][  T444]  netlink_rcv_skb (net/netlink/af_netlink.c:2562)
[   47.284459][  T444]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   47.284633][  T444]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   47.284764][  T444]  ? netlink_ack (./include/linux/skbuff.h:2718)
[   47.284937][  T444]  ? __netlink_lookup (./include/linux/rcupdate.h:850 ./include/linux/rhashtable.h:709 net/netlink/af_netlink.c:499)
[   47.285068][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.285244][  T444]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   47.285372][  T444]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[   47.285544][  T444]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[   47.285672][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.285844][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.285972][  T444]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   47.286147][  T444]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[   47.286275][  T444]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[   47.286450][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.286577][  T444]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   47.286750][  T444]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[   47.286880][  T444]  ? copy_msghdr_from_user (net/socket.c:2650)
[   47.287054][  T444]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[   47.287212][  T444]  ? move_addr_to_kernel (net/socket.c:258)
[   47.287385][  T444]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[   47.287517][  T444]  ___sys_sendmsg (net/socket.c:2767)
[   47.287689][  T444]  ? copy_msghdr_from_user (net/socket.c:2619)
[   47.287818][  T444]  __sys_sendmsg (net/socket.c:2799)
[   47.287992][  T444]  ? __sys_sendmsg_sock (net/socket.c:2780)
[   47.288122][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.288294][  T444]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   47.288422][  T444]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   47.288595][  T444]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   47.288755][  T444] RIP: 0033:0x7fba12c3b54e
[   47.288937][  T444] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   47.289492][  T444] RSP: 002b:00007ffd17f3b8a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[   47.289688][  T444] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fba12c3b54e
[   47.289926][  T444] RDX: 0000000000000000 RSI: 00007ffd17f3b950 RDI: 0000000000000005
[   47.290167][  T444] RBP: 00007ffd17f3b8b0 R08: 0000000000000000 R09: 0000000000000000
[   47.290405][  T444] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994435
[   47.290599][  T444] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffd17f3c020
| [   47.299598][  T444] ------------[ cut here ]------------
| [   47.299767][  T444] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/444
| [   47.299955][  T444] Modules linked in:
| [   47.300360][  T444] Tainted: [B]=BAD_PAGE, [W]=WARN
[   47.300488][  T444] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   47.300695][  T444] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   47.300827][  T444] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   47.301380][  T444] RSP: 0018:ffa00000024974d0 EFLAGS: 00010046
[   47.301587][  T444] RAX: 0000000000000220 RBX: ff110000027b73e0 RCX: 0000000000000001
[   47.301779][  T444] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   47.302016][  T444] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   47.302255][  T444] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd400000009edc0
[   47.302492][  T444] R13: ff110000027b73f8 R14: ff1100000103c940 R15: ffd400000009edc0
[   47.302686][  T444] FS:  00007fba129d6cc0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   47.302958][  T444] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   47.303169][  T444] CR2: 00000000004ed8e0 CR3: 00000000097bd005 CR4: 0000000000771ef0
[   47.303361][  T444] PKRU: 55555554
[   47.303457][  T444] Call Trace:
[   47.303553][  T444]  <TASK>
[   47.303663][  T444]  check_bytes_and_report.cold (mm/slub.c:1359)
[   47.303792][  T444]  check_object (mm/slub.c:1515)
[   47.303965][  T444]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   47.304099][  T444]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   47.304271][  T444]  free_to_partial_list (mm/slub.c:5631)
[   47.304400][  T444]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   47.304571][  T444]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   47.304698][  T444]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   47.304869][  T444]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   47.304997][  T444]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   47.305205][  T444]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   47.305334][  T444]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   47.305473][  T444]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   47.305600][  T444]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   47.305773][  T444]  ? rtnetlink_rcv_msg (net/core/rtnetlink.c:7170)
[   47.305902][  T444]  netlink_ack (./include/linux/skbuff.h:1384 ./include/net/netlink.h:1055 net/netlink/af_netlink.c:2493)
[   47.306043][  T444]  netlink_rcv_skb (net/netlink/af_netlink.c:2562)
[   47.306174][  T444]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[   47.306347][  T444]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   47.306476][  T444]  ? netlink_ack (./include/linux/skbuff.h:2718)
[   47.306646][  T444]  ? __netlink_lookup (./include/linux/rcupdate.h:850 ./include/linux/rhashtable.h:709 net/netlink/af_netlink.c:499)
[   47.306774][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.306946][  T444]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   47.307076][  T444]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[   47.307250][  T444]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[   47.307380][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.307551][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.307678][  T444]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   47.307849][  T444]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[   47.307976][  T444]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[   47.308152][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.308280][  T444]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   47.308453][  T444]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[   47.308581][  T444]  ? copy_msghdr_from_user (net/socket.c:2650)
[   47.308755][  T444]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[   47.308913][  T444]  ? move_addr_to_kernel (net/socket.c:258)
[   47.309086][  T444]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[   47.309216][  T444]  ___sys_sendmsg (net/socket.c:2767)
[   47.309389][  T444]  ? copy_msghdr_from_user (net/socket.c:2619)
[   47.309519][  T444]  __sys_sendmsg (net/socket.c:2799)
[   47.309691][  T444]  ? __sys_sendmsg_sock (net/socket.c:2780)
[   47.309820][  T444]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   47.309993][  T444]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   47.310121][  T444]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   47.310293][  T444]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   47.310452][  T444] RIP: 0033:0x7fba12c3b54e
[   47.310635][  T444] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   47.311189][  T444] RSP: 002b:00007ffd17f3b8a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[   47.311383][  T444] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fba12c3b54e
[   47.311619][  T444] RDX: 0000000000000000 RSI: 00007ffd17f3b950 RDI: 0000000000000005
[   47.311860][  T444] RBP: 00007ffd17f3b8b0 R08: 0000000000000000 R09: 0000000000000000
[   47.312101][  T444] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994435
[   47.312292][  T444] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007ffd17f3c020
| [   52.674740][  T477] ------------[ cut here ]------------
| [   52.674870][  T477] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ping/477
| [   52.675067][  T477] Modules linked in:
| [   52.675448][  T477] Tainted: [B]=BAD_PAGE, [W]=WARN
[   52.675582][  T477] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   52.675750][  T477] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   52.675890][  T477] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   52.676371][  T477] RSP: 0018:ffa00000026579e8 EFLAGS: 00010046
[   52.676538][  T477] RAX: 0000000000000220 RBX: ff11000004c11020 RCX: 0000000000000001
[   52.676736][  T477] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   52.676937][  T477] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   52.677137][  T477] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd4000000130440
[   52.677336][  T477] R13: ff11000004c11040 R14: ff1100000103c940 R15: ffd4000000130440
[   52.677536][  T477] FS:  0000000000000000(0000) GS:ff1100007fe2e000(0000) knlGS:0000000000000000
[   52.677773][  T477] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.677941][  T477] CR2: 00007fa9f37ccc84 CR3: 0000000028f3c004 CR4: 0000000000771ef0
[   52.678144][  T477] PKRU: 55555554
[   52.678243][  T477] Call Trace:
[   52.678341][  T477]  <TASK>
[   52.678410][  T477]  check_bytes_and_report.cold (mm/slub.c:1359)
[   52.678542][  T477]  check_object (mm/slub.c:1507)
[   52.678673][  T477]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   52.678804][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.678935][  T477]  free_to_partial_list (mm/slub.c:5631)
[   52.679065][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.679198][  T477]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.679328][  T477]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   52.679461][  T477]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   52.679590][  T477]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   52.679719][  T477]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.679848][  T477]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.679980][  T477]  fuse_chan_send (fs/fuse/dev.c:827)
[   52.680114][  T477]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   52.680244][  T477]  ? fuse_file_release (fs/fuse/file.c:360)
[   52.680376][  T477]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   52.680507][  T477]  __fput (fs/file_table.c:512)
[   52.680607][  T477]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   52.680742][  T477]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   52.680906][  T477]  task_work_run (kernel/task_work.c:233)
[   52.681039][  T477]  ? task_work_cancel (kernel/task_work.c:190)
[   52.681173][  T477]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[   52.681306][  T477]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   52.681407][  T477]  ? exit_notify (kernel/exit.c:780)
[   52.681539][  T477]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   52.681705][  T477]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   52.681886][  T477]  do_group_exit (kernel/exit.c:1151)
[   52.682019][  T477]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   52.682197][  T477]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   52.682330][  T477]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   52.682508][  T477]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   52.682639][  T477]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   52.682843][  T477] RIP: 0033:0x7fa9f3a001b8
[   52.683028][  T477] Code: Unable to access opcode bytes at 0x7fa9f3a0018e.

Code starting with the faulting instruction
===========================================
[   52.683201][  T477] RSP: 002b:00007ffd0907d2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   52.683445][  T477] RAX: ffffffffffffffda RBX: 00007fa9f3b30f88 RCX: 00007fa9f3a001b8
[   52.683692][  T477] RDX: 00007fa9f37917c8 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   52.683894][  T477] RBP: 00007ffd0907d310 R08: 0000000000000000 R09: 0000000000001010
[   52.684144][  T477] R10: 00007ffd0907d130 R11: 0000000000000246 R12: 0000000000000002
[   52.684385][  T477] R13: 0000000000000000 R14: 00007fa9f3b2f680 R15: 00007fa9f3b30fa0
| [   52.694384][  T477] ------------[ cut here ]------------
| [   52.694512][  T477] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ping/477
| [   52.694750][  T477] Modules linked in:
| [   52.695201][  T477] Tainted: [B]=BAD_PAGE, [W]=WARN
[   52.695331][  T477] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   52.695539][  T477] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   52.695676][  T477] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   52.696233][  T477] RSP: 0018:ffa00000026579e8 EFLAGS: 00010046
[   52.696444][  T477] RAX: 0000000000000220 RBX: ff11000009311ce0 RCX: 0000000000000001
[   52.696637][  T477] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   52.696881][  T477] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   52.697122][  T477] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd400000024c440
[   52.697323][  T477] R13: ff11000009311d00 R14: ff1100000103c940 R15: ffd400000024c440
[   52.697523][  T477] FS:  0000000000000000(0000) GS:ff1100007fe2e000(0000) knlGS:0000000000000000
[   52.697800][  T477] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.698009][  T477] CR2: 00007fa9f37ccc84 CR3: 0000000028f3c004 CR4: 0000000000771ef0
[   52.698254][  T477] PKRU: 55555554
[   52.698350][  T477] Call Trace:
[   52.698447][  T477]  <TASK>
[   52.698557][  T477]  check_bytes_and_report.cold (mm/slub.c:1359)
[   52.698688][  T477]  check_object (mm/slub.c:1507)
[   52.698862][  T477]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   52.698991][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.699166][  T477]  free_to_partial_list (mm/slub.c:5631)
[   52.699295][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.699469][  T477]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.699601][  T477]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   52.699774][  T477]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   52.699907][  T477]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   52.700082][  T477]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.700213][  T477]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.700342][  T477]  fuse_chan_send (fs/fuse/dev.c:827)
[   52.700472][  T477]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   52.700646][  T477]  ? fuse_file_release (fs/fuse/file.c:360)
[   52.700776][  T477]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   52.700950][  T477]  __fput (fs/file_table.c:512)
[   52.701048][  T477]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   52.701180][  T477]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   52.701387][  T477]  task_work_run (kernel/task_work.c:233)
[   52.701559][  T477]  ? task_work_cancel (kernel/task_work.c:190)
[   52.701688][  T477]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[   52.701863][  T477]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   52.701960][  T477]  ? exit_notify (kernel/exit.c:780)
[   52.702093][  T477]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   52.702301][  T477]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   52.702477][  T477]  do_group_exit (kernel/exit.c:1151)
[   52.702607][  T477]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   52.702781][  T477]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   52.702915][  T477]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   52.703091][  T477]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   52.703222][  T477]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   52.703429][  T477] RIP: 0033:0x7fa9f3a001b8
[   52.703562][  T477] Code: Unable to access opcode bytes at 0x7fa9f3a0018e.

Code starting with the faulting instruction
===========================================
[   52.703775][  T477] RSP: 002b:00007ffd0907d2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   52.704016][  T477] RAX: ffffffffffffffda RBX: 00007fa9f3b30f88 RCX: 00007fa9f3a001b8
[   52.704213][  T477] RDX: 00007fa9f37917c8 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   52.704455][  T477] RBP: 00007ffd0907d310 R08: 0000000000000000 R09: 0000000000001010
[   52.704694][  T477] R10: 00007ffd0907d130 R11: 0000000000000246 R12: 0000000000000002
[   52.704933][  T477] R13: 0000000000000000 R14: 00007fa9f3b2f680 R15: 00007fa9f3b30fa0
| [   52.714937][  T477] ------------[ cut here ]------------
| [   52.715064][  T477] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ping/477
| [   52.715304][  T477] Modules linked in:
| [   52.715709][  T477] Tainted: [B]=BAD_PAGE, [W]=WARN
[   52.715885][  T477] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   52.716049][  T477] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   52.716232][  T477] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   52.716790][  T477] RSP: 0018:ffa00000026579f8 EFLAGS: 00010046
[   52.716953][  T477] RAX: 0000000000000220 RBX: ff1100000a5d3260 RCX: 0000000000000001
[   52.717196][  T477] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   52.717438][  T477] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   52.717632][  T477] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd40000002974c0
[   52.717872][  T477] R13: ff1100000a5d3278 R14: ff1100000103c940 R15: ffd40000002974c0
[   52.718117][  T477] FS:  0000000000000000(0000) GS:ff1100007fe2e000(0000) knlGS:0000000000000000
[   52.718390][  T477] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.718555][  T477] CR2: 00007fa9f37ccc84 CR3: 0000000028f3c004 CR4: 0000000000771ef0
[   52.718794][  T477] PKRU: 55555554
[   52.718935][  T477] Call Trace:
[   52.719033][  T477]  <TASK>
[   52.719102][  T477]  check_bytes_and_report.cold (mm/slub.c:1359)
[   52.719276][  T477]  check_object (mm/slub.c:1515)
[   52.719406][  T477]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   52.719578][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.719708][  T477]  free_to_partial_list (mm/slub.c:5631)
[   52.719884][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.720013][  T477]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.720189][  T477]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   52.720319][  T477]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   52.720494][  T477]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   52.720623][  T477]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.720798][  T477]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.720928][  T477]  fuse_chan_send (fs/fuse/dev.c:827)
[   52.721107][  T477]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   52.721237][  T477]  ? fuse_file_release (fs/fuse/file.c:360)
[   52.721366][  T477]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   52.721495][  T477]  __fput (fs/file_table.c:512)
[   52.721638][  T477]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   52.721767][  T477]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   52.721972][  T477]  task_work_run (kernel/task_work.c:233)
[   52.722104][  T477]  ? task_work_cancel (kernel/task_work.c:190)
[   52.722280][  T477]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[   52.722410][  T477]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   52.722552][  T477]  ? exit_notify (kernel/exit.c:780)
[   52.722682][  T477]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   52.722890][  T477]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   52.723021][  T477]  do_group_exit (kernel/exit.c:1151)
[   52.723198][  T477]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   52.723327][  T477]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   52.723504][  T477]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   52.723633][  T477]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   52.723808][  T477]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   52.723971][  T477] RIP: 0033:0x7fa9f3a001b8
[   52.724156][  T477] Code: Unable to access opcode bytes at 0x7fa9f3a0018e.

Code starting with the faulting instruction
===========================================
[   52.724323][  T477] RSP: 002b:00007ffd0907d2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   52.724565][  T477] RAX: ffffffffffffffda RBX: 00007fa9f3b30f88 RCX: 00007fa9f3a001b8
[   52.724808][  T477] RDX: 00007fa9f37917c8 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   52.725048][  T477] RBP: 00007ffd0907d310 R08: 0000000000000000 R09: 0000000000001010
[   52.725248][  T477] R10: 00007ffd0907d130 R11: 0000000000000246 R12: 0000000000000002
[   52.725489][  T477] R13: 0000000000000000 R14: 00007fa9f3b2f680 R15: 00007fa9f3b30fa0
| [   52.735483][  T477] ------------[ cut here ]------------
| [   52.735653][  T477] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ping/477
| [   52.735846][  T477] Modules linked in:
| [   52.736294][  T477] Tainted: [B]=BAD_PAGE, [W]=WARN
[   52.736425][  T477] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   52.736635][  T477] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   52.736769][  T477] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   52.737327][  T477] RSP: 0018:ffa00000026579f8 EFLAGS: 00010046
[   52.737535][  T477] RAX: 0000000000000220 RBX: ff1100000a5d37a0 RCX: 0000000000000001
[   52.737776][  T477] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   52.737970][  T477] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   52.738214][  T477] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd40000002974c0
[   52.738409][  T477] R13: ff1100000a5d37b8 R14: ff1100000103c940 R15: ffd40000002974c0
[   52.738650][  T477] FS:  0000000000000000(0000) GS:ff1100007fe2e000(0000) knlGS:0000000000000000
[   52.738879][  T477] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.739089][  T477] CR2: 00007fa9f37ccc84 CR3: 0000000028f3c004 CR4: 0000000000771ef0
[   52.739329][  T477] PKRU: 55555554
[   52.739427][  T477] Call Trace:
[   52.739568][  T477]  <TASK>
[   52.739634][  T477]  check_bytes_and_report.cold (mm/slub.c:1359)
[   52.739764][  T477]  check_object (mm/slub.c:1515)
[   52.739937][  T477]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   52.740067][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.740244][  T477]  free_to_partial_list (mm/slub.c:5631)
[   52.740374][  T477]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.740549][  T477]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   52.740678][  T477]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   52.740852][  T477]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   52.740982][  T477]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   52.741159][  T477]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.741290][  T477]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   52.741465][  T477]  fuse_chan_send (fs/fuse/dev.c:827)
[   52.741593][  T477]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   52.741765][  T477]  ? fuse_file_release (fs/fuse/file.c:360)
[   52.741895][  T477]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   52.742068][  T477]  __fput (fs/file_table.c:512)
[   52.742167][  T477]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   52.742341][  T477]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   52.742505][  T477]  task_work_run (kernel/task_work.c:233)
[   52.742678][  T477]  ? task_work_cancel (kernel/task_work.c:190)
[   52.742807][  T477]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[   52.742983][  T477]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   52.743083][  T477]  ? exit_notify (kernel/exit.c:780)
[   52.743258][  T477]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   52.743419][  T477]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   52.743593][  T477]  do_group_exit (kernel/exit.c:1151)
[   52.743725][  T477]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   52.743899][  T477]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   52.744029][  T477]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   52.744204][  T477]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   52.744335][  T477]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   52.744539][  T477] RIP: 0033:0x7fa9f3a001b8
[   52.744675][  T477] Code: Unable to access opcode bytes at 0x7fa9f3a0018e.

Code starting with the faulting instruction
===========================================
[   52.744888][  T477] RSP: 002b:00007ffd0907d2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   52.745135][  T477] RAX: ffffffffffffffda RBX: 00007fa9f3b30f88 RCX: 00007fa9f3a001b8
[   52.745330][  T477] RDX: 00007fa9f37917c8 RSI: ffffffffffffffb0 RDI: 0000000000000000
[   52.745524][  T477] RBP: 00007ffd0907d310 R08: 0000000000000000 R09: 0000000000001010
[   52.745762][  T477] R10: 00007ffd0907d130 R11: 0000000000000246 R12: 0000000000000002
[   52.746000][  T477] R13: 0000000000000000 R14: 00007fa9f3b2f680 R15: 00007fa9f3b30fa0
| [   65.199417][  T553] ------------[ cut here ]------------
| [   65.199543][  T553] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/553
| [   65.199731][  T553] Modules linked in:
| [   65.200086][  T553] Tainted: [B]=BAD_PAGE, [W]=WARN
[   65.200217][  T553] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   65.200375][  T553] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   65.200507][  T553] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   65.200947][  T553] RSP: 0018:ffa00000029075c8 EFLAGS: 00010046
[   65.201108][  T553] RAX: 0000000000000220 RBX: ff11000009dafb60 RCX: 0000000000000001
[   65.201299][  T553] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   65.201487][  T553] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   65.201679][  T553] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd4000000276bc0
[   65.201870][  T553] R13: ff11000009dafb80 R14: ff1100000103c940 R15: ffd4000000276bc0
[   65.202062][  T553] FS:  00007fb36cc6b4c0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   65.202285][  T553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.202446][  T553] CR2: 000055aface300a8 CR3: 000000000bc66006 CR4: 0000000000771ef0
[   65.202634][  T553] PKRU: 55555554
[   65.202728][  T553] Call Trace:
[   65.202824][  T553]  <TASK>
[   65.202890][  T553]  check_bytes_and_report.cold (mm/slub.c:1359)
[   65.203017][  T553]  check_object (mm/slub.c:1507)
[   65.203143][  T553]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   65.203269][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.203394][  T553]  free_to_partial_list (mm/slub.c:5631)
[   65.203520][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.203646][  T553]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.203769][  T553]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   65.203895][  T553]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   65.204019][  T553]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   65.204177][  T553]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.204302][  T553]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.204396][  T553]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   65.204519][  T553]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   65.204644][  T553]  ? inet6_dump_ifinfo (net/ipv6/addrconf.c:6179)
[   65.204767][  T553]  __ip6_append_data (./include/linux/skbuff.h:1384 net/ipv6/ip6_output.c:1701)
[   65.204892][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.205017][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:850 ./include/net/ip6_route.h:380 net/ipv6/route.c:3290)
[   65.205112][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:882 ./include/net/ip6_route.h:384 net/ipv6/route.c:3290)
[   65.205209][  T553]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[   65.205335][  T553]  ? neigh_hh_output (./include/linux/seqlock.h:228 (discriminator 4))
[   65.205458][  T553]  ? ip6_append_data (net/ipv6/ip6_output.c:1878 net/ipv6/ip6_output.c:1860)
[   65.205584][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.205710][  T553]  rawv6_sendmsg (net/ipv6/raw.c:913)
[   65.205834][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.205959][  T553]  ? rawv6_send_hdrinc (./include/net/sock.h:2939 (discriminator 1))
[   65.206084][  T553]  ? ____sys_recvmsg (./include/trace/events/sock.h:304 (discriminator 2) net/socket.c:1155 (discriminator 2) net/socket.c:1173 (discriminator 2) net/socket.c:2933 (discriminator 2))
[   65.206210][  T553]  ? import_iovec (lib/iov_iter.c:1440 (discriminator 1))
[   65.206338][  T553]  ? trace_kfree (./include/trace/events/kmem.h:97 (discriminator 22))
[   65.206460][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.206585][  T553]  ? __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.206708][  T553]  __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.206832][  T553]  ? __ia32_sys_getpeername (net/socket.c:2235)
[   65.206960][  T553]  __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284)
[   65.207083][  T553]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   65.207240][  T553]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   65.207439][  T553]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   65.207563][  T553]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   65.207730][  T553]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   65.207856][  T553]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   65.208052][  T553] RIP: 0033:0x7fb36ce8954e
[   65.208188][  T553] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   65.208720][  T553] RSP: 002b:00007fff7c742480 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   65.208953][  T553] RAX: ffffffffffffffda RBX: 000055aface200a0 RCX: 00007fb36ce8954e
[   65.209140][  T553] RDX: 0000000000000040 RSI: 000055aface200a4 RDI: 0000000000000006
[   65.209375][  T553] RBP: 00007fff7c742490 R08: 000055aface322b4 R09: 000000000000001c
[   65.209605][  T553] R10: 0000000000000800 R11: 0000000000000202 R12: 000055aface200a4
[   65.209834][  T553] R13: 0000000000000040 R14: 00007fff7c743780 R15: 000055aface200a0
| [   65.218383][  T553] ------------[ cut here ]------------
| [   65.218543][  T553] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/553
| [   65.218766][  T553] Modules linked in:
| [   65.219157][  T553] Tainted: [B]=BAD_PAGE, [W]=WARN
[   65.219333][  T553] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   65.219489][  T553] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   65.219664][  T553] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   65.220147][  T553] RSP: 0018:ffa00000029075c8 EFLAGS: 00010046
[   65.220349][  T553] RAX: 0000000000000220 RBX: ff11000009daf3e0 RCX: 0000000000000001
[   65.220576][  T553] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   65.220805][  T553] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   65.220990][  T553] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd4000000276bc0
[   65.221223][  T553] R13: ff11000009daf400 R14: ff1100000103c940 R15: ffd4000000276bc0
[   65.221410][  T553] FS:  00007fb36cc6b4c0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   65.221627][  T553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.221784][  T553] CR2: 000055aface300a8 CR3: 000000000bc66006 CR4: 0000000000771ef0
[   65.222015][  T553] PKRU: 55555554
[   65.222109][  T553] Call Trace:
[   65.222245][  T553]  <TASK>
[   65.222308][  T553]  check_bytes_and_report.cold (mm/slub.c:1359)
[   65.222476][  T553]  check_object (mm/slub.c:1507)
[   65.222599][  T553]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   65.222764][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.222887][  T553]  free_to_partial_list (mm/slub.c:5631)
[   65.223052][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.223179][  T553]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.223345][  T553]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   65.223466][  T553]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   65.223632][  T553]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   65.223784][  T553]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.223948][  T553]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.224040][  T553]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   65.224207][  T553]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   65.224329][  T553]  ? inet6_dump_ifinfo (net/ipv6/addrconf.c:6179)
[   65.224492][  T553]  __ip6_append_data (./include/linux/skbuff.h:1384 net/ipv6/ip6_output.c:1701)
[   65.224615][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.224782][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:850 ./include/net/ip6_route.h:380 net/ipv6/route.c:3290)
[   65.224874][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:882 ./include/net/ip6_route.h:384 net/ipv6/route.c:3290)
[   65.224968][  T553]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[   65.225133][  T553]  ? neigh_hh_output (./include/linux/seqlock.h:228 (discriminator 4))
[   65.225261][  T553]  ? ip6_append_data (net/ipv6/ip6_output.c:1878 net/ipv6/ip6_output.c:1860)
[   65.225385][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.225508][  T553]  rawv6_sendmsg (net/ipv6/raw.c:913)
[   65.225672][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.225797][  T553]  ? rawv6_send_hdrinc (./include/net/sock.h:2939 (discriminator 1))
[   65.225962][  T553]  ? ____sys_recvmsg (./include/trace/events/sock.h:304 (discriminator 2) net/socket.c:1155 (discriminator 2) net/socket.c:1173 (discriminator 2) net/socket.c:2933 (discriminator 2))
[   65.226085][  T553]  ? import_iovec (lib/iov_iter.c:1440 (discriminator 1))
[   65.226255][  T553]  ? trace_kfree (./include/trace/events/kmem.h:97 (discriminator 22))
[   65.226381][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.226546][  T553]  ? __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.226668][  T553]  __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.226834][  T553]  ? __ia32_sys_getpeername (net/socket.c:2235)
[   65.226960][  T553]  __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284)
[   65.227125][  T553]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   65.227280][  T553]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   65.227475][  T553]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   65.227639][  T553]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   65.227760][  T553]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   65.227923][  T553]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   65.228076][  T553] RIP: 0033:0x7fb36ce8954e
[   65.228251][  T553] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   65.228734][  T553] RSP: 002b:00007fff7c742480 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   65.228960][  T553] RAX: ffffffffffffffda RBX: 000055aface200a0 RCX: 00007fb36ce8954e
[   65.229190][  T553] RDX: 0000000000000040 RSI: 000055aface200a4 RDI: 0000000000000006
[   65.229373][  T553] RBP: 00007fff7c742490 R08: 000055aface322b4 R09: 000000000000001c
[   65.229559][  T553] R10: 0000000000000800 R11: 0000000000000202 R12: 000055aface200a4
[   65.229786][  T553] R13: 0000000000000040 R14: 00007fff7c743780 R15: 000055aface200a0
| [   65.238486][  T553] ------------[ cut here ]------------
| [   65.238605][  T553] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/553
| [   65.238827][  T553] Modules linked in:
| [   65.239215][  T553] Tainted: [B]=BAD_PAGE, [W]=WARN
[   65.239381][  T553] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   65.239579][  T553] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   65.239708][  T553] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   65.240238][  T553] RSP: 0018:ffa00000029075d8 EFLAGS: 00010046
[   65.240394][  T553] RAX: 0000000000000220 RBX: ff11000009256020 RCX: 0000000000000001
[   65.240622][  T553] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   65.240848][  T553] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   65.241076][  T553] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd4000000249580
[   65.241262][  T553] R13: ff11000009256038 R14: ff1100000103c940 R15: ffd4000000249580
[   65.241493][  T553] FS:  00007fb36cc6b4c0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   65.241752][  T553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.241949][  T553] CR2: 000055aface300a8 CR3: 000000000bc66006 CR4: 0000000000771ef0
[   65.242133][  T553] PKRU: 55555554
[   65.242268][  T553] Call Trace:
[   65.242373][  T553]  <TASK>
[   65.242436][  T553]  check_bytes_and_report.cold (mm/slub.c:1359)
[   65.242600][  T553]  check_object (mm/slub.c:1515)
[   65.242723][  T553]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   65.242886][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.243008][  T553]  free_to_partial_list (mm/slub.c:5631)
[   65.243175][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.243296][  T553]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.243418][  T553]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   65.243541][  T553]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   65.243705][  T553]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   65.243898][  T553]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.244020][  T553]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.244113][  T553]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   65.244278][  T553]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   65.244401][  T553]  ? inet6_dump_ifinfo (net/ipv6/addrconf.c:6179)
[   65.244564][  T553]  __ip6_append_data (./include/linux/skbuff.h:1384 net/ipv6/ip6_output.c:1701)
[   65.244687][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.244851][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:850 ./include/net/ip6_route.h:380 net/ipv6/route.c:3290)
[   65.244943][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:882 ./include/net/ip6_route.h:384 net/ipv6/route.c:3290)
[   65.245075][  T553]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[   65.245199][  T553]  ? neigh_hh_output (./include/linux/seqlock.h:228 (discriminator 4))
[   65.245362][  T553]  ? ip6_append_data (net/ipv6/ip6_output.c:1878 net/ipv6/ip6_output.c:1860)
[   65.245485][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.245648][  T553]  rawv6_sendmsg (net/ipv6/raw.c:913)
[   65.245769][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.245934][  T553]  ? rawv6_send_hdrinc (./include/net/sock.h:2939 (discriminator 1))
[   65.246055][  T553]  ? ____sys_recvmsg (./include/trace/events/sock.h:304 (discriminator 2) net/socket.c:1155 (discriminator 2) net/socket.c:1173 (discriminator 2) net/socket.c:2933 (discriminator 2))
[   65.246220][  T553]  ? import_iovec (lib/iov_iter.c:1440 (discriminator 1))
[   65.246344][  T553]  ? trace_kfree (./include/trace/events/kmem.h:97 (discriminator 22))
[   65.246509][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.246631][  T553]  ? __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.246795][  T553]  __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.246917][  T553]  ? __ia32_sys_getpeername (net/socket.c:2235)
[   65.247082][  T553]  __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284)
[   65.247207][  T553]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   65.247400][  T553]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   65.247552][  T553]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   65.247716][  T553]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   65.247836][  T553]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   65.247999][  T553]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   65.248195][  T553] RIP: 0033:0x7fb36ce8954e
[   65.248323][  T553] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   65.248847][  T553] RSP: 002b:00007fff7c742480 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   65.249073][  T553] RAX: ffffffffffffffda RBX: 000055aface200a0 RCX: 00007fb36ce8954e
[   65.249258][  T553] RDX: 0000000000000040 RSI: 000055aface200a4 RDI: 0000000000000006
[   65.249484][  T553] RBP: 00007fff7c742490 R08: 000055aface322b4 R09: 000000000000001c
[   65.249709][  T553] R10: 0000000000000800 R11: 0000000000000202 R12: 000055aface200a4
[   65.249938][  T553] R13: 0000000000000040 R14: 00007fff7c743780 R15: 000055aface200a0
| [   65.258354][  T553] ------------[ cut here ]------------
| [   65.258512][  T553] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/553
| [   65.258733][  T553] Modules linked in:
| [   65.259118][  T553] Tainted: [B]=BAD_PAGE, [W]=WARN
[   65.259246][  T553] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   65.259442][  T553] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   65.259612][  T553] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   65.260089][  T553] RSP: 0018:ffa00000029075d8 EFLAGS: 00010046
[   65.260288][  T553] RAX: 0000000000000220 RBX: ff110000027b1620 RCX: 0000000000000001
[   65.260515][  T553] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   65.260699][  T553] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   65.260925][  T553] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd400000009ec40
[   65.261152][  T553] R13: ff110000027b1638 R14: ff1100000103c940 R15: ffd400000009ec40
[   65.261382][  T553] FS:  00007fb36cc6b4c0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   65.261641][  T553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.261794][  T553] CR2: 000055aface300a8 CR3: 000000000bc66006 CR4: 0000000000771ef0
[   65.262019][  T553] PKRU: 55555554
[   65.262110][  T553] Call Trace:
[   65.262247][  T553]  <TASK>
[   65.262309][  T553]  check_bytes_and_report.cold (mm/slub.c:1359)
[   65.262432][  T553]  check_object (mm/slub.c:1515)
[   65.262595][  T553]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   65.262717][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.262881][  T553]  free_to_partial_list (mm/slub.c:5631)
[   65.263003][  T553]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.263167][  T553]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   65.263292][  T553]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   65.263413][  T553]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   65.263534][  T553]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   65.263729][  T553]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.263892][  T553]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   65.263983][  T553]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   65.264103][  T553]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   65.264271][  T553]  ? inet6_dump_ifinfo (net/ipv6/addrconf.c:6179)
[   65.264393][  T553]  __ip6_append_data (./include/linux/skbuff.h:1384 net/ipv6/ip6_output.c:1701)
[   65.264557][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.264680][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:850 ./include/net/ip6_route.h:380 net/ipv6/route.c:3290)
[   65.264812][  T553]  ? ip6_mtu (./include/linux/rcupdate.h:882 ./include/net/ip6_route.h:384 net/ipv6/route.c:3290)
[   65.264905][  T553]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[   65.265068][  T553]  ? neigh_hh_output (./include/linux/seqlock.h:228 (discriminator 4))
[   65.265191][  T553]  ? ip6_append_data (net/ipv6/ip6_output.c:1878 net/ipv6/ip6_output.c:1860)
[   65.265357][  T553]  ? raw6_destroy (net/ipv6/raw.c:1184)
[   65.265480][  T553]  rawv6_sendmsg (net/ipv6/raw.c:913)
[   65.265642][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.265765][  T553]  ? rawv6_send_hdrinc (./include/net/sock.h:2939 (discriminator 1))
[   65.265927][  T553]  ? ____sys_recvmsg (./include/trace/events/sock.h:304 (discriminator 2) net/socket.c:1155 (discriminator 2) net/socket.c:1173 (discriminator 2) net/socket.c:2933 (discriminator 2))
[   65.266049][  T553]  ? import_iovec (lib/iov_iter.c:1440 (discriminator 1))
[   65.266215][  T553]  ? trace_kfree (./include/trace/events/kmem.h:97 (discriminator 22))
[   65.266336][  T553]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   65.266513][  T553]  ? __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.266634][  T553]  __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   65.266795][  T553]  ? __ia32_sys_getpeername (net/socket.c:2235)
[   65.266919][  T553]  __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284)
[   65.267081][  T553]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   65.267235][  T553]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   65.267428][  T553]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   65.267549][  T553]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   65.267711][  T553]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   65.267833][  T553]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   65.268024][  T553] RIP: 0033:0x7fb36ce8954e
[   65.268199][  T553] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   65.268678][  T553] RSP: 002b:00007fff7c742480 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   65.268903][  T553] RAX: ffffffffffffffda RBX: 000055aface200a0 RCX: 00007fb36ce8954e
[   65.269127][  T553] RDX: 0000000000000040 RSI: 000055aface200a4 RDI: 0000000000000006
[   65.269352][  T553] RBP: 00007fff7c742490 R08: 000055aface322b4 R09: 000000000000001c
[   65.269537][  T553] R10: 0000000000000800 R11: 0000000000000202 R12: 000055aface200a4
[   65.269758][  T553] R13: 0000000000000040 R14: 00007fff7c743780 R15: 000055aface200a0
| [   76.600663][  T624] ------------[ cut here ]------------
| [   76.600789][  T624] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/624
| [   76.600978][  T624] Modules linked in:
| [   76.601342][  T624] Tainted: [B]=BAD_PAGE, [W]=WARN
[   76.601470][  T624] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   76.601629][  T624] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   76.601764][  T624] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   76.602213][  T624] RSP: 0018:ffa0000002b975c8 EFLAGS: 00010046
[   76.602380][  T624] RAX: 0000000000000220 RBX: ff11000009e9f020 RCX: 0000000000000001
[   76.602571][  T624] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   76.602807][  T624] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   76.603041][  T624] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd400000027a7c0
[   76.603279][  T624] R13: ff11000009e9f038 R14: ff1100000103c940 R15: ffd400000027a7c0
[   76.603468][  T624] FS:  00007f8f118644c0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   76.603737][  T624] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   76.603943][  T624] CR2: 00007ffcad635ed8 CR3: 000000000bfeb006 CR4: 0000000000771ef0
[   76.604177][  T624] PKRU: 55555554
[   76.604276][  T624] Call Trace:
[   76.604370][  T624]  <TASK>
[   76.604477][  T624]  check_bytes_and_report.cold (mm/slub.c:1359)
[   76.604604][  T624]  check_object (mm/slub.c:1515)
[   76.604773][  T624]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   76.604898][  T624]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   76.605066][  T624]  free_to_partial_list (mm/slub.c:5631)
[   76.605190][  T624]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   76.605360][  T624]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   76.605486][  T624]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   76.605654][  T624]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   76.605779][  T624]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   76.605975][  T624]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   76.606100][  T624]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   76.606236][  T624]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   76.606360][  T624]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   76.606529][  T624]  __ip_append_data (./include/linux/skbuff.h:1384 net/ipv4/ip_output.c:1136)
[   76.606655][  T624]  ? raw_destroy (net/ipv4/raw.c:704)
[   76.606825][  T624]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   76.606951][  T624]  ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:850 ./include/net/ip.h:475)
[   76.607149][  T624]  ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:882 ./include/net/ip.h:504)
[   76.607309][  T624]  ? ip_fraglist_init (net/ipv4/ip_output.c:606)
[   76.607434][  T624]  ? rt_is_expired (./include/net/net_namespace.h:435 (discriminator 4))
[   76.607561][  T624]  ? ip_route_output_key_hash_rcu (net/ipv4/route.c:2879)
[   76.607761][  T624]  ip_append_data (net/ipv4/ip_output.c:1381 (discriminator 1) net/ipv4/ip_output.c:1360 (discriminator 1))
[   76.607932][  T624]  ? raw_destroy (net/ipv4/raw.c:704)
[   76.608056][  T624]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   76.608259][  T624]  raw_sendmsg (net/ipv4/raw.c:659)
[   76.608386][  T624]  ? raw_send_hdrinc (./include/net/ip.h:606 (discriminator 1))
[   76.608553][  T624]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   76.608678][  T624]  ? kernel_sendmsg (net/socket.c:862)
[   76.608845][  T624]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   76.608970][  T624]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   76.609134][  T624]  ? kfree (mm/slub.c:6778 (discriminator 1))
[   76.609231][  T624]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   76.609397][  T624]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   76.609522][  T624]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[   76.609689][  T624]  ? inet_send_prepare (net/ipv4/af_inet.c:846)
[   76.609816][  T624]  __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   76.609982][  T624]  ? __ia32_sys_getpeername (net/socket.c:2235)
[   76.610110][  T624]  __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284)
[   76.610278][  T624]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   76.610431][  T624]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   76.610627][  T624]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   76.610751][  T624]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   76.610919][  T624]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   76.611043][  T624]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   76.611245][  T624] RIP: 0033:0x7f8f11a8254e
[   76.611379][  T624] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   76.611916][  T624] RSP: 002b:00007ffcad636700 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   76.612152][  T624] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f8f11a8254e
[   76.612388][  T624] RDX: 0000000000000040 RSI: 000055eac97c80a4 RDI: 0000000000000005
[   76.612576][  T624] RBP: 00007ffcad636710 R08: 000055eac97da320 R09: 0000000000000010
[   76.612809][  T624] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db
[   76.613041][  T624] R13: 00007f8f11864470 R14: 000055eac97db3e0 R15: 000055eac97c80a0
| [   76.622909][  T624] ------------[ cut here ]------------
| [   76.623031][  T624] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ping/624
| [   76.623259][  T624] Modules linked in:
| [   76.623651][  T624] Tainted: [B]=BAD_PAGE, [W]=WARN
[   76.623819][  T624] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   76.624020][  T624] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   76.624150][  T624] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   76.624688][  T624] RSP: 0018:ffa0000002b975c8 EFLAGS: 00010046
[   76.624844][  T624] RAX: 0000000000000220 RBX: ff11000009e9fce0 RCX: 0000000000000001
[   76.625076][  T624] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   76.625309][  T624] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   76.625539][  T624] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd400000027a7c0
[   76.625728][  T624] R13: ff11000009e9fcf8 R14: ff1100000103c940 R15: ffd400000027a7c0
[   76.625958][  T624] FS:  00007f8f118644c0(0000) GS:ff1100007fdae000(0000) knlGS:0000000000000000
[   76.626224][  T624] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   76.626429][  T624] CR2: 00007ffcad635ed8 CR3: 000000000bfeb006 CR4: 0000000000771ef0
[   76.626617][  T624] PKRU: 55555554
[   76.626756][  T624] Call Trace:
[   76.626850][  T624]  <TASK>
[   76.626914][  T624]  check_bytes_and_report.cold (mm/slub.c:1359)
[   76.627082][  T624]  check_object (mm/slub.c:1515)
[   76.627207][  T624]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   76.627377][  T624]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   76.627501][  T624]  free_to_partial_list (mm/slub.c:5631)
[   76.627668][  T624]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   76.627792][  T624]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   76.627961][  T624]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   76.628087][  T624]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   76.628256][  T624]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   76.628452][  T624]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   76.628580][  T624]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   76.628674][  T624]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   76.628841][  T624]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   76.628966][  T624]  __ip_append_data (./include/linux/skbuff.h:1384 net/ipv4/ip_output.c:1136)
[   76.629138][  T624]  ? raw_destroy (net/ipv4/raw.c:704)
[   76.629268][  T624]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   76.629436][  T624]  ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:850 ./include/net/ip.h:475)
[   76.629633][  T624]  ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:882 ./include/net/ip.h:504)
[   76.629788][  T624]  ? ip_fraglist_init (net/ipv4/ip_output.c:606)
[   76.629956][  T624]  ? rt_is_expired (./include/net/net_namespace.h:435 (discriminator 4))
[   76.630082][  T624]  ? ip_route_output_key_hash_rcu (net/ipv4/route.c:2879)
[   76.630285][  T624]  ip_append_data (net/ipv4/ip_output.c:1381 (discriminator 1) net/ipv4/ip_output.c:1360 (discriminator 1))
[   76.630410][  T624]  ? raw_destroy (net/ipv4/raw.c:704)
[   76.630578][  T624]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   76.630736][  T624]  raw_sendmsg (net/ipv4/raw.c:659)
[   76.630904][  T624]  ? raw_send_hdrinc (./include/net/ip.h:606 (discriminator 1))
[   76.631027][  T624]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   76.631195][  T624]  ? kernel_sendmsg (net/socket.c:862)
[   76.631322][  T624]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   76.631487][  T624]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   76.631609][  T624]  ? kfree (mm/slub.c:6778 (discriminator 1))
[   76.631745][  T624]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   76.631867][  T624]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   76.632031][  T624]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[   76.632156][  T624]  ? inet_send_prepare (net/ipv4/af_inet.c:846)
[   76.632326][  T624]  __sys_sendto (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2281 (discriminator 4))
[   76.632449][  T624]  ? __ia32_sys_getpeername (net/socket.c:2235)
[   76.632617][  T624]  __x64_sys_sendto (net/socket.c:2288 net/socket.c:2284 net/socket.c:2284)
[   76.632741][  T624]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   76.632935][  T624]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   76.633133][  T624]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   76.633260][  T624]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   76.633426][  T624]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   76.633548][  T624]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   76.633745][  T624] RIP: 0033:0x7f8f11a8254e
[   76.633874][  T624] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   76.634408][  T624] RSP: 002b:00007ffcad636700 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   76.634640][  T624] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f8f11a8254e
[   76.634826][  T624] RDX: 0000000000000040 RSI: 000055eac97c80a4 RDI: 0000000000000005
[   76.635056][  T624] RBP: 00007ffcad636710 R08: 000055eac97da320 R09: 0000000000000010
[   76.635290][  T624] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db
[   76.635519][  T624] R13: 00007f8f11864470 R14: 000055eac97db3e0 R15: 000055eac97c80a0
| [   83.375875][  T167] ------------[ cut here ]------------
| [   83.375997][  T167] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: bond_macvlan_ip/167
| [   83.376215][  T167] Modules linked in:
| [   83.376601][  T167] Tainted: [B]=BAD_PAGE, [W]=WARN
[   83.376767][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   83.376923][  T167] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   83.377099][  T167] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   83.377628][  T167] RSP: 0018:ffa0000001877608 EFLAGS: 00010046
[   83.377785][  T167] RAX: 0000000000000220 RBX: ff11000008d43560 RCX: 0000000000000001
[   83.378016][  T167] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   83.378245][  T167] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   83.378439][  T167] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd40000002350c0
[   83.378665][  T167] R13: ff11000008d43580 R14: ff1100000103c940 R15: ffd40000002350c0
[   83.378894][  T167] FS:  00007fcbf6ce2b80(0000) GS:ff1100007fe2e000(0000) knlGS:0000000000000000
[   83.379161][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.379320][  T167] CR2: 00005616bd398a08 CR3: 000000000e91d001 CR4: 0000000000771ef0
[   83.379548][  T167] PKRU: 55555554
[   83.379683][  T167] Call Trace:
[   83.379778][  T167]  <TASK>
[   83.379841][  T167]  check_bytes_and_report.cold (mm/slub.c:1359)
[   83.380007][  T167]  check_object (mm/slub.c:1507)
[   83.380131][  T167]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   83.380297][  T167]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   83.380420][  T167]  free_to_partial_list (mm/slub.c:5631)
[   83.380581][  T167]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   83.380705][  T167]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   83.380868][  T167]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   83.380989][  T167]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   83.381153][  T167]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   83.381276][  T167]  ? anon_vma_fork (mm/rmap.c:94 (discriminator 7) mm/rmap.c:391 (discriminator 7))
[   83.381444][  T167]  anon_vma_fork (mm/rmap.c:94 (discriminator 7) mm/rmap.c:391 (discriminator 7))
[   83.381568][  T167]  dup_mmap (mm/mmap.c:1781)
[   83.381703][  T167]  ? mmap_read_lock_maybe_expand (./include/linux/rwsem.h:221 (discriminator 1))
[   83.381856][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   83.382050][  T167]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   83.382171][  T167]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[   83.382370][  T167]  ? debug_object_activate (lib/debugobjects.c:891 (discriminator 3))
[   83.382494][  T167]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[   83.382659][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   83.382852][  T167]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   83.382972][  T167]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[   83.383167][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.383294][  T167]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   83.383457][  T167]  copy_process (kernel/fork.c:1543 kernel/fork.c:1595 kernel/fork.c:2307)
[   83.383582][  T167]  ? pidfd_prepare (./include/linux/list.h:1037 (discriminator 3) ./include/linux/pid.h:98 (discriminator 3) kernel/fork.c:1936 (discriminator 3))
[   83.383745][  T167]  ? handle_pte_fault (mm/memory.c:6582)
[   83.383868][  T167]  kernel_clone (kernel/fork.c:2766)
[   83.384030][  T167]  ? create_io_thread (kernel/fork.c:2704)
[   83.384155][  T167]  ? __pmd_alloc (./include/linux/mm.h:1762)
[   83.384321][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.384444][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.384605][  T167]  __do_sys_clone (kernel/fork.c:2908)
[   83.384731][  T167]  ? kernel_clone (./include/trace/events/sched.h:396 (discriminator 19))
[   83.384895][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.385016][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   83.385210][  T167]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   83.385365][  T167]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   83.385529][  T167]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   83.385653][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   83.385844][  T167] RIP: 0033:0x7fcbf6da4126
[   83.386019][  T167] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 7d af f5 ff       	call   0xfffffffffff5af84
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 5a                	ja     0x8c
  32:	89 c3                	mov    %eax,%ebx
  34:	85 c0                	test   %eax,%eax
  36:	75 2f                	jne    0x67
  38:	64                   	fs
  39:	48                   	rex.W
  3a:	8b                   	.byte 0x8b
  3b:	04 25                	add    $0x25,%al
  3d:	10 00                	adc    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 5a                	ja     0x62
   8:	89 c3                	mov    %eax,%ebx
   a:	85 c0                	test   %eax,%eax
   c:	75 2f                	jne    0x3d
   e:	64                   	fs
   f:	48                   	rex.W
  10:	8b                   	.byte 0x8b
  11:	04 25                	add    $0x25,%al
  13:	10 00                	adc    %al,(%rax)
	...
[   83.386503][  T167] RSP: 002b:00007ffcb00b26e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   83.386731][  T167] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fcbf6da4126
[   83.386959][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[   83.387185][  T167] RBP: 00007ffcb00b2700 R08: 0000000000000000 R09: 0000000000000030
[   83.387374][  T167] R10: 00007fcbf6ce2e50 R11: 0000000000000246 R12: 00005616bd491240
[   83.387602][  T167] R13: 00005616bd3b79d0 R14: 0000000000000000 R15: 00000000ffffffff
| [   83.396727][  T167] ------------[ cut here ]------------
| [   83.396887][  T167] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: bond_macvlan_ip/167
| [   83.397139][  T167] Modules linked in:
| [   83.397558][  T167] Tainted: [B]=BAD_PAGE, [W]=WARN
[   83.397724][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   83.397878][  T167] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   83.398049][  T167] Code: c7 10 64 ea b3 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 ea b3          	adc    %ah,-0x4d(%rdx,%rbp,8)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   83.398532][  T167] RSP: 0018:ffa0000001877608 EFLAGS: 00010046
[   83.398727][  T167] RAX: 0000000000000220 RBX: ff11000004c13020 RCX: 0000000000000001
[   83.398955][  T167] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffb55b4660
[   83.399182][  T167] RBP: ff1100000103c940 R08: ffffffffb0dbcf0a R09: 1ffffffff6ab68cc
[   83.399371][  T167] R10: fffffbfff6ab68cd R11: fffffbfff6ab68cd R12: ffd40000001304c0
[   83.399557][  T167] R13: ff11000004c13040 R14: ff1100000103c940 R15: ffd40000001304c0
[   83.399785][  T167] FS:  00007fcbf6ce2b80(0000) GS:ff1100007fe2e000(0000) knlGS:0000000000000000
[   83.400043][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.400199][  T167] CR2: 00005616bd398a08 CR3: 000000000e91d001 CR4: 0000000000771ef0
[   83.400429][  T167] PKRU: 55555554
[   83.400522][  T167] Call Trace:
[   83.400654][  T167]  <TASK>
[   83.400716][  T167]  check_bytes_and_report.cold (mm/slub.c:1359)
[   83.400881][  T167]  check_object (mm/slub.c:1507)
[   83.401005][  T167]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   83.401168][  T167]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   83.401293][  T167]  free_to_partial_list (mm/slub.c:5631)
[   83.401457][  T167]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   83.401579][  T167]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   83.401741][  T167]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   83.401863][  T167]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   83.402025][  T167]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   83.402146][  T167]  ? anon_vma_fork (mm/rmap.c:94 (discriminator 7) mm/rmap.c:391 (discriminator 7))
[   83.402329][  T167]  anon_vma_fork (mm/rmap.c:94 (discriminator 7) mm/rmap.c:391 (discriminator 7))
[   83.402452][  T167]  dup_mmap (mm/mmap.c:1781)
[   83.402544][  T167]  ? mmap_read_lock_maybe_expand (./include/linux/rwsem.h:221 (discriminator 1))
[   83.402739][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   83.402932][  T167]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   83.403053][  T167]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[   83.403246][  T167]  ? debug_object_activate (lib/debugobjects.c:891 (discriminator 3))
[   83.403373][  T167]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[   83.403536][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   83.403688][  T167]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   83.403849][  T167]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[   83.404043][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.404164][  T167]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   83.404329][  T167]  copy_process (kernel/fork.c:1543 kernel/fork.c:1595 kernel/fork.c:2307)
[   83.404453][  T167]  ? pidfd_prepare (./include/linux/list.h:1037 (discriminator 3) ./include/linux/pid.h:98 (discriminator 3) kernel/fork.c:1936 (discriminator 3))
[   83.404619][  T167]  ? handle_pte_fault (mm/memory.c:6582)
[   83.404740][  T167]  kernel_clone (kernel/fork.c:2766)
[   83.404904][  T167]  ? create_io_thread (kernel/fork.c:2704)
[   83.405028][  T167]  ? __pmd_alloc (./include/linux/mm.h:1762)
[   83.405190][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.405313][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.405477][  T167]  __do_sys_clone (kernel/fork.c:2908)
[   83.405598][  T167]  ? kernel_clone (./include/trace/events/sched.h:396 (discriminator 19))
[   83.405764][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   83.405890][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   83.406082][  T167]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   83.406235][  T167]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   83.406400][  T167]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   83.406522][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   83.406716][  T167] RIP: 0033:0x7fcbf6da4126
[   83.406845][  T167] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 7d af f5 ff       	call   0xfffffffffff5af84
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 5a                	ja     0x8c
  32:	89 c3                	mov    %eax,%ebx
  34:	85 c0                	test   %eax,%eax
  36:	75 2f                	jne    0x67
  38:	64                   	fs
  39:	48                   	rex.W
  3a:	8b                   	.byte 0x8b
  3b:	04 25                	add    $0x25,%al
  3d:	10 00                	adc    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 5a                	ja     0x62
   8:	89 c3                	mov    %eax,%ebx
   a:	85 c0                	test   %eax,%eax
   c:	75 2f                	jne    0x3d
   e:	64                   	fs
   f:	48                   	rex.W
  10:	8b                   	.byte 0x8b
  11:	04 25                	add    $0x25,%al
  13:	10 00                	adc    %al,(%rax)
	...
[   83.407371][  T167] RSP: 002b:00007ffcb00b26e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   83.407596][  T167] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fcbf6da4126
[   83.407824][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[   83.408007][  T167] RBP: 00007ffcb00b2700 R08: 0000000000000000 R09: 0000000000000030
[   83.408233][  T167] R10: 00007fcbf6ce2e50 R11: 0000000000000246 R12: 00005616bd491240


Finger prints:
print_report:kasan_report:bond_update_slave_arr:bond_enslave:do_set_master
object_err:check_object:free_debug_processing:free_to_partial_list:qlist_free_all