======================================
| [    9.581043][  T222] ==================================================================
| [    9.581259][  T222] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
| [    9.581450][  T222] Write of size 8 at addr ff110000021eccf8 by task ip/222
| [    9.581602][  T222]
[    9.581671][  T222] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[    9.581673][  T222] Call Trace:
[    9.581675][  T222]  <TASK>
[    9.581676][  T222]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[    9.581682][  T222]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[    9.581686][  T222]  print_report (mm/kasan/report.c:482)
[    9.581688][  T222]  ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54)
[    9.581691][  T222]  ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[    9.581693][  T222]  kasan_report (mm/kasan/report.c:595)
[    9.581696][  T222]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[    9.581698][  T222]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[    9.581700][  T222]  bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[    9.581702][  T222]  ? bond_slave_arr_work_rearm (drivers/net/bonding/bond_main.c:5078)
[    9.581703][  T222]  ? bond_xdp_check (drivers/net/bonding/bond_main.c:347)
[    9.581706][  T222]  ? netdev_upper_dev_link (net/core/dev.c:9100)
[    9.581709][  T222]  ? sysfs_create_files (./include/linux/sysfs.h:774 fs/sysfs/file.c:387)
[    9.581713][  T222]  bond_enslave (drivers/net/bonding/bond_main.c:2337)
[    9.581715][  T222]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5218 (discriminator 9))
[    9.581717][  T222]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[    9.581720][  T222]  ? mark_usage (kernel/locking/lockdep.c:4690)
[    9.581722][  T222]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[    9.581724][  T222]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[    9.581727][  T222]  ? is_bpf_text_address (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) kernel/bpf/core.c:751 (discriminator 2))
[    9.581731][  T222]  ? rtnl_af_lookup (net/core/rtnetlink.c:794 (discriminator 1))
[    9.581734][  T222]  do_set_master (net/core/rtnetlink.c:3088)
[    9.581736][  T222]  do_setlink.isra.0 (net/core/rtnetlink.c:3290 (discriminator 1))
[    9.581739][  T222]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[    9.581741][  T222]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[    9.581744][  T222]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[    9.581747][  T222]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:388 kernel/rcu/update.c:380)
[    9.581750][  T222]  ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 2) lib/stackdepot.c:676 (discriminator 2))
[    9.581753][  T222]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[    9.581754][  T222]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[    9.581756][  T222]  ? validate_chain (kernel/locking/lockdep.c:3817 (discriminator 2) kernel/locking/lockdep.c:3837 (discriminator 2) kernel/locking/lockdep.c:3892 (discriminator 2))
[    9.581758][  T222]  ? kasan_save_stack (mm/kasan/common.c:58)
[    9.581760][  T222]  ? kasan_save_stack (mm/kasan/common.c:57)
[    9.581761][  T222]  ? kasan_save_track (mm/kasan/common.c:78)
[    9.581762][  T222]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[    9.581764][  T222]  ? __netlink_dump_start (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) net/netlink/af_netlink.c:2433 (discriminator 1))
[    9.581767][  T222]  ? ___sys_sendmsg (net/socket.c:2758 (discriminator 1))
[    9.581771][  T222]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[    9.581772][  T222]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[    9.581774][  T222]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[    9.581776][  T222]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[    9.581778][  T222]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[    9.581779][  T222]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[    9.581780][  T222]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[    9.581782][  T222]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[    9.581785][  T222]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[    9.581786][  T222]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[    9.581788][  T222]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[    9.581790][  T222]  ? nla_get_range_signed (lib/nlattr.c:270)
[    9.581793][  T222]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[    9.581796][  T222]  rtnl_newlink (net/core/rtnetlink.c:4241)
[    9.581799][  T222]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[    9.581801][  T222]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[    9.581803][  T222]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[    9.581805][  T222]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[    9.581807][  T222]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[    9.581809][  T222]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[    9.581811][  T222]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[    9.581813][  T222]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[    9.581815][  T222]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[    9.581817][  T222]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[    9.581820][  T222]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[    9.581821][  T222]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[    9.581823][  T222]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[    9.581825][  T222]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[    9.581827][  T222]  ? netlink_ack (./include/linux/skbuff.h:2718)
[    9.581830][  T222]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2))
[    9.581832][  T222]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2))
[    9.581834][  T222]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[    9.581836][  T222]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[    9.581838][  T222]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[    9.581840][  T222]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[    9.581842][  T222]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[    9.581844][  T222]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[    9.581848][  T222]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[    9.581850][  T222]  ? copy_msghdr_from_user (net/socket.c:2650)
[    9.581852][  T222]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[    9.581853][  T222]  ? move_addr_to_kernel (net/socket.c:258)
[    9.581856][  T222]  ___sys_sendmsg (net/socket.c:2767)
[    9.581857][  T222]  ? copy_msghdr_from_user (net/socket.c:2619)
[    9.581863][  T222]  __sys_sendmsg (net/socket.c:2799)
[    9.581865][  T222]  ? __sys_sendmsg_sock (net/socket.c:2780)
[    9.581867][  T222]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[    9.581869][  T222]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[    9.581871][  T222]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[    9.581874][  T222]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[    9.581876][  T222] RIP: 0033:0x7f5ccdec954e
[    9.581879][  T222] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[    9.581881][  T222] RSP: 002b:00007fff52a19850 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[    9.581884][  T222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5ccdec954e
[    9.581886][  T222] RDX: 0000000000000000 RSI: 00007fff52a19900 RDI: 0000000000000005
[    9.581887][  T222] RBP: 00007fff52a19860 R08: 0000000000000000 R09: 0000000000000000
[    9.581887][  T222] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994552
[    9.581888][  T222] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007fff52a19fc0
| [   14.163860][  T241] ------------[ cut here ]------------
| [   14.163993][  T241] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/241
| [   14.164197][  T241] Modules linked in:
| [   14.164574][  T241] Tainted: [B]=BAD_PAGE
[   14.164675][  T241] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   14.164845][  T241] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   14.164986][  T241] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   14.165463][  T241] RSP: 0018:ffa0000001a879e8 EFLAGS: 00010046
[   14.165632][  T241] RAX: 0000000000000020 RBX: ff110000056bc1a0 RCX: 0000000000000001
[   14.165831][  T241] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   14.166033][  T241] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   14.166242][  T241] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000015af00
[   14.166445][  T241] R13: ff110000056bc1c0 R14: ff1100000103c940 R15: ffd400000015af00
[   14.166650][  T241] FS:  0000000000000000(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000
[   14.166886][  T241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   14.167055][  T241] CR2: 00007f9fa533c574 CR3: 0000000019d3c006 CR4: 0000000000771ef0
[   14.167260][  T241] PKRU: 55555554
[   14.167363][  T241] Call Trace:
[   14.167463][  T241]  <TASK>
[   14.167533][  T241]  check_bytes_and_report.cold (mm/slub.c:1359)
[   14.167669][  T241]  check_object (mm/slub.c:1507)
[   14.167802][  T241]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   14.167932][  T241]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   14.168064][  T241]  free_to_partial_list (mm/slub.c:5631)
[   14.168199][  T241]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   14.168330][  T241]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   14.168460][  T241]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   14.168592][  T241]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   14.168723][  T241]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   14.168855][  T241]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   14.168986][  T241]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   14.169120][  T241]  fuse_chan_send (fs/fuse/dev.c:827)
[   14.169250][  T241]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   14.169381][  T241]  ? fuse_file_release (fs/fuse/file.c:360)
[   14.169511][  T241]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   14.169641][  T241]  __fput (fs/file_table.c:512)
[   14.169743][  T241]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   14.169875][  T241]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   14.170037][  T241]  task_work_run (kernel/task_work.c:233)
[   14.170172][  T241]  ? task_work_cancel (kernel/task_work.c:190)
[   14.170304][  T241]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[   14.170435][  T241]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   14.170534][  T241]  ? exit_notify (kernel/exit.c:780)
[   14.170665][  T241]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   14.170832][  T241]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   14.170963][  T241]  do_group_exit (kernel/exit.c:1151)
[   14.171097][  T241]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   14.171227][  T241]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   14.171360][  T241]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   14.171490][  T241]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   14.171622][  T241]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   14.171784][  T241] RIP: 0033:0x7f9fa55261b8
[   14.171924][  T241] Code: Unable to access opcode bytes at 0x7f9fa552618e.

Code starting with the faulting instruction
===========================================
[   14.172099][  T241] RSP: 002b:00007ffd5d056508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   14.172300][  T241] RAX: ffffffffffffffda RBX: 00007f9fa5656f88 RCX: 00007f9fa55261b8
[   14.172499][  T241] RDX: 00007f9fa5270fc8 RSI: fffffffffffffeb8 RDI: 0000000000000000
[   14.172697][  T241] RBP: 00007ffd5d056560 R08: 0000000000000000 R09: 0000000000000050
[   14.172897][  T241] R10: 00007ffd5d056320 R11: 0000000000000246 R12: 0000000000000001
[   14.173100][  T241] R13: 0000000000000000 R14: 00007f9fa5655680 R15: 00007f9fa5656fa0
| [   14.181898][  T241] ------------[ cut here ]------------
| [   14.182025][  T241] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/241
| [   14.182223][  T241] Modules linked in:
| [   14.182584][  T241] Tainted: [B]=BAD_PAGE, [W]=WARN
[   14.182715][  T241] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   14.182880][  T241] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   14.183016][  T241] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   14.183481][  T241] RSP: 0018:ffa0000001a879e8 EFLAGS: 00010046
[   14.183694][  T241] RAX: 0000000000000220 RBX: ff110000056bc7a0 RCX: 0000000000000001
[   14.183891][  T241] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   14.184136][  T241] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   14.184330][  T241] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000015af00
[   14.184575][  T241] R13: ff110000056bc7c0 R14: ff1100000103c940 R15: ffd400000015af00
[   14.184774][  T241] FS:  0000000000000000(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000
[   14.185048][  T241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   14.185262][  T241] CR2: 00007f9fa533c574 CR3: 0000000019d3c006 CR4: 0000000000771ef0
[   14.185505][  T241] PKRU: 55555554
[   14.185603][  T241] Call Trace:
[   14.185702][  T241]  <TASK>
[   14.185814][  T241]  check_bytes_and_report.cold (mm/slub.c:1359)
[   14.185945][  T241]  check_object (mm/slub.c:1507)
[   14.186126][  T241]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   14.186257][  T241]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   14.186433][  T241]  free_to_partial_list (mm/slub.c:5631)
[   14.186560][  T241]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   14.186733][  T241]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   14.186864][  T241]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   14.187039][  T241]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   14.187172][  T241]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   14.187349][  T241]  ? fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   14.187479][  T241]  fuse_request_alloc (fs/fuse/dev.c:48 (discriminator 7))
[   14.187654][  T241]  fuse_chan_send (fs/fuse/dev.c:827)
[   14.187784][  T241]  fuse_file_put (fs/fuse/fuse_i.h:1012 fs/fuse/file.c:115 fs/fuse/file.c:101)
[   14.187960][  T241]  ? fuse_file_release (fs/fuse/file.c:360)
[   14.188092][  T241]  fuse_release (fs/fuse/file.c:393 (discriminator 1) fs/fuse/file.c:408 (discriminator 1))
[   14.188265][  T241]  __fput (fs/file_table.c:512)
[   14.188364][  T241]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   14.188537][  T241]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   14.188701][  T241]  task_work_run (kernel/task_work.c:233)
[   14.188874][  T241]  ? task_work_cancel (kernel/task_work.c:190)
[   14.189004][  T241]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[   14.189184][  T241]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:1008)
[   14.189284][  T241]  ? exit_notify (kernel/exit.c:780)
[   14.189457][  T241]  ? posixtimer_sig_unignore.isra.0 (kernel/signal.c:1971 (discriminator 3))
[   14.189617][  T241]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   14.189791][  T241]  do_group_exit (kernel/exit.c:1151)
[   14.189922][  T241]  __x64_sys_exit_group (kernel/exit.c:1162 kernel/exit.c:1160 kernel/exit.c:1160)
[   14.190099][  T241]  x64_sys_call (./arch/x86/include/generated/asm/syscalls_64.h:232)
[   14.190229][  T241]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   14.190403][  T241]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   14.190533][  T241]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   14.190737][  T241] RIP: 0033:0x7f9fa55261b8
[   14.190872][  T241] Code: Unable to access opcode bytes at 0x7f9fa552618e.

Code starting with the faulting instruction
===========================================
[   14.191090][  T241] RSP: 002b:00007ffd5d056508 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   14.191288][  T241] RAX: ffffffffffffffda RBX: 00007f9fa5656f88 RCX: 00007f9fa55261b8
[   14.191485][  T241] RDX: 00007f9fa5270fc8 RSI: fffffffffffffeb8 RDI: 0000000000000000
[   14.191682][  T241] RBP: 00007ffd5d056560 R08: 0000000000000000 R09: 0000000000000050
[   14.191921][  T241] R10: 00007ffd5d056320 R11: 0000000000000246 R12: 0000000000000001
[   14.192167][  T241] R13: 0000000000000000 R14: 00007f9fa5655680 R15: 00007f9fa5656fa0
| [   18.879649][  T265] ------------[ cut here ]------------
| [   18.879783][  T265] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/265
| [   18.879987][  T265] Modules linked in:
| [   18.880376][  T265] Tainted: [B]=BAD_PAGE, [W]=WARN
[   18.880512][  T265] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   18.880683][  T265] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   18.880827][  T265] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   18.881314][  T265] RSP: 0018:ffa0000001bb7660 EFLAGS: 00010046
[   18.881485][  T265] RAX: 0000000000000220 RBX: ff11000009243ce0 RCX: 0000000000000001
[   18.881689][  T265] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   18.881896][  T265] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   18.882102][  T265] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000002490c0
[   18.882311][  T265] R13: ff11000009243cf8 R14: ff1100000103c940 R15: ffd40000002490c0
[   18.882521][  T265] FS:  00007fdab54e0cc0(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000
[   18.882764][  T265] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   18.882935][  T265] CR2: 00007fff228cfedc CR3: 000000000c72a004 CR4: 0000000000771ef0
[   18.883145][  T265] PKRU: 55555554
[   18.883250][  T265] Call Trace:
[   18.883355][  T265]  <TASK>
[   18.883427][  T265]  check_bytes_and_report.cold (mm/slub.c:1359)
[   18.883565][  T265]  check_object (mm/slub.c:1515)
[   18.883701][  T265]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   18.883837][  T265]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.883971][  T265]  free_to_partial_list (mm/slub.c:5631)
[   18.884108][  T265]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.884241][  T265]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.884376][  T265]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   18.884511][  T265]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   18.884646][  T265]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   18.884780][  T265]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[   18.884914][  T265]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[   18.885049][  T265]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.885188][  T265]  __create_object (mm/kmemleak.c:801)
[   18.885323][  T265]  pcpu_alloc_noprof (mm/percpu.c:1904)
[   18.885460][  T265]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4989)
[   18.885600][  T265]  __percpu_init_rwsem (kernel/locking/percpu-rwsem.c:17 (discriminator 7))
[   18.885735][  T265]  alloc_super.isra.0 (fs/super.c:371 (discriminator 3))
[   18.885872][  T265]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   18.886009][  T265]  ? kernfs_encode_fh (fs/kernfs/mount.c:93)
[   18.886155][  T265]  sget_fc (fs/super.c:889)
[   18.886259][  T265]  ? kernfs_statfs (fs/kernfs/mount.c:54)
[   18.886393][  T265]  ? fs_bdev_freeze (./arch/x86/include/asm/atomic.h:23)
[   18.886528][  T265]  ? kasan_save_track (mm/kasan/common.c:78)
[   18.886665][  T265]  ? __kasan_kmalloc (mm/kasan/common.c:398 mm/kasan/common.c:415)
[   18.886800][  T265]  ? __kmalloc_cache_noprof (./include/linux/kasan.h:263 mm/slub.c:5563)
[   18.886937][  T265]  ? kernfs_get_tree (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/kernfs/mount.c:373 (discriminator 1))
[   18.887073][  T265]  kernfs_get_tree (fs/kernfs/mount.c:382)
[   18.887215][  T265]  ? kmemdup_nul (mm/util.c:68 mm/util.c:194)
[   18.887351][  T265]  ? kernfs_super_ns (fs/kernfs/mount.c:352)
[   18.887486][  T265]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   18.887620][  T265]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   18.887755][  T265]  ? vfs_parse_fs_param (fs/fs_context.c:144)
[   18.887892][  T265]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[   18.888028][  T265]  vfs_get_tree (fs/super.c:1947)
[   18.888167][  T265]  fc_mount (fs/namespace.c:1198)
[   18.888271][  T265]  do_new_mount (fs/namespace.c:3772 fs/namespace.c:3848)
[   18.888405][  T265]  ? do_add_mount (fs/namespace.c:3752)
[   18.888539][  T265]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.888673][  T265]  ? cap_capable (./include/trace/events/capability.h:26 (discriminator 22) security/commoncap.c:130 (discriminator 22))
[   18.888810][  T265]  path_mount (fs/namespace.c:4168)
[   18.888946][  T265]  ? finish_automount (fs/namespace.c:3912)
[   18.889080][  T265]  ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22))
[   18.889254][  T265]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   18.889388][  T265]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2748 mm/slub.c:6499 mm/slub.c:6626)
[   18.889522][  T265]  ? __x64_sys_mount (fs/namespace.c:4181 fs/namespace.c:4397 fs/namespace.c:4374 fs/namespace.c:4374)
[   18.889656][  T265]  __x64_sys_mount (fs/namespace.c:4181 fs/namespace.c:4397 fs/namespace.c:4374 fs/namespace.c:4374)
[   18.889790][  T265]  ? copy_mnt_ns (fs/namespace.c:4330 (discriminator 1))
[   18.889924][  T265]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.890059][  T265]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[   18.890198][  T265]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.890335][  T265]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   18.890470][  T265]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   18.890605][  T265]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   18.890773][  T265] RIP: 0033:0x7fdab57cd5be
[   18.890915][  T265] Code: 48 8b 0d 3d 78 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 0a 78 0f 00 f7 d8 64 89 01 48
All code
========
   0:	48 8b 0d 3d 78 0f 00 	mov    0xf783d(%rip),%rcx        # 0xf7844
   7:	f7 d8                	neg    %eax
   9:	64 89 01             	mov    %eax,%fs:(%rcx)
   c:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  10:	c3                   	ret
  11:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  18:	00 00 00 
  1b:	90                   	nop
  1c:	f3 0f 1e fa          	endbr64
  20:	49 89 ca             	mov    %rcx,%r10
  23:	b8 a5 00 00 00       	mov    $0xa5,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf7844
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 0a 78 0f 00 	mov    0xf780a(%rip),%rcx        # 0xf781a
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[   18.891408][  T265] RSP: 002b:00007fff228d0568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   18.891662][  T265] RAX: ffffffffffffffda RBX: 00007fff228d47f6 RCX: 00007fdab57cd5be
[   18.891914][  T265] RDX: 0000000000480d89 RSI: 0000000000480d84 RDI: 00007fff228d47f6
[   18.892170][  T265] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000
[   18.892377][  T265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   18.892629][  T265] R13: 0000000000000065 R14: 00007fff228d4800 R15: 00007fff228d3a48
| [   18.954600][  T267] ------------[ cut here ]------------
| [   18.954729][  T267] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/267
| [   18.954926][  T267] Modules linked in:
| [   18.955298][  T267] Tainted: [B]=BAD_PAGE, [W]=WARN
[   18.955429][  T267] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   18.955593][  T267] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   18.955731][  T267] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   18.956198][  T267] RSP: 0018:ffa0000001bb7728 EFLAGS: 00010046
[   18.956363][  T267] RAX: 0000000000000220 RBX: ff110000021ecce0 RCX: 0000000000000001
[   18.956558][  T267] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   18.956755][  T267] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   18.956951][  T267] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd4000000087b00
[   18.957150][  T267] R13: ff110000021eccf8 R14: ff1100000103c940 R15: ffd4000000087b00
[   18.957348][  T267] FS:  0000000000000000(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000
[   18.957578][  T267] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   18.957743][  T267] CR2: 00007eff2c2067a0 CR3: 000000000ce2a002 CR4: 0000000000771ef0
[   18.957940][  T267] PKRU: 55555554
[   18.958040][  T267] Call Trace:
[   18.958141][  T267]  <TASK>
[   18.958207][  T267]  check_bytes_and_report.cold (mm/slub.c:1359)
[   18.958338][  T267]  check_object (mm/slub.c:1515)
[   18.958467][  T267]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   18.958595][  T267]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.958726][  T267]  free_to_partial_list (mm/slub.c:5631)
[   18.958856][  T267]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.958987][  T267]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.959118][  T267]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   18.959247][  T267]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   18.959376][  T267]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[   18.959506][  T267]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[   18.959605][  T267]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[   18.959704][  T267]  ? ovl_llseek (fs/overlayfs/file.c:255)
[   18.959832][  T267]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.959962][  T267]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   18.960092][  T267]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   18.960224][  T267]  ? ovl_llseek (fs/overlayfs/file.c:255)
[   18.960352][  T267]  do_dentry_open (fs/open.c:996)
[   18.960484][  T267]  vfs_open (fs/open.c:1101)
[   18.960582][  T267]  ? may_open (fs/namei.c:4269)
[   18.960682][  T267]  do_open (fs/namei.c:4837)
[   18.960781][  T267]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[   18.960911][  T267]  path_openat (fs/namei.c:5000)
[   18.961041][  T267]  ? kernel_tmpfile_open (fs/namei.c:4942)
[   18.961174][  T267]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[   18.961306][  T267]  do_file_open (fs/namei.c:5029)
[   18.961436][  T267]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[   18.961566][  T267]  ? page_get_link_raw (fs/namei.c:6482)
[   18.961697][  T267]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[   18.961827][  T267]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[   18.961928][  T267]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[   18.962055][  T267]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[   18.962188][  T267]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.962317][  T267]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   18.962478][  T267]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[   18.962607][  T267]  ? fput_close_sync (fs/file_table.c:617)
[   18.962739][  T267]  ? __ia32_sys_open (fs/open.c:1427)
[   18.962868][  T267]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[   18.962999][  T267]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.963131][  T267]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   18.963293][  T267]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   18.963454][  T267]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   18.963584][  T267]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   18.963713][  T267]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   18.963874][  T267] RIP: 0033:0x7eff2c3026e5
[   18.964011][  T267] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[   18.964476][  T267] RSP: 002b:00007ffc43eff740 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[   18.964674][  T267] RAX: ffffffffffffffda RBX: 00007ffc43eff9d0 RCX: 00007eff2c3026e5
[   18.964870][  T267] RDX: 0000000000080000 RSI: 00007ffc43eff7c0 RDI: 00000000ffffff9c
[   18.965065][  T267] RBP: 00007ffc43eff740 R08: 00007ffc43eff9b7 R09: 0000000000000000
[   18.965264][  T267] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc43eff7c0
[   18.965459][  T267] R13: 00007ffc43eff7c0 R14: 00007eff2c2d4000 R15: 0000000000000000
| [   18.974940][  T267] ------------[ cut here ]------------
| [   18.975112][  T267] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/267
| [   18.975347][  T267] Modules linked in:
| [   18.975754][  T267] Tainted: [B]=BAD_PAGE, [W]=WARN
[   18.975929][  T267] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   18.976094][  T267] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   18.976279][  T267] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   18.976789][  T267] RSP: 0018:ffa0000001bb7728 EFLAGS: 00010046
[   18.977000][  T267] RAX: 0000000000000220 RBX: ff110000021ec7a0 RCX: 0000000000000001
[   18.977245][  T267] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   18.977486][  T267] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   18.977682][  T267] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd4000000087b00
[   18.977925][  T267] R13: ff110000021ec7b8 R14: ff1100000103c940 R15: ffd4000000087b00
[   18.978169][  T267] FS:  0000000000000000(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000
[   18.978444][  T267] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   18.978609][  T267] CR2: 00007eff2c2067a0 CR3: 000000000ce2a002 CR4: 0000000000771ef0
[   18.978852][  T267] PKRU: 55555554
[   18.978951][  T267] Call Trace:
[   18.979094][  T267]  <TASK>
[   18.979164][  T267]  check_bytes_and_report.cold (mm/slub.c:1359)
[   18.979338][  T267]  check_object (mm/slub.c:1515)
[   18.979469][  T267]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   18.979644][  T267]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.979773][  T267]  free_to_partial_list (mm/slub.c:5631)
[   18.979946][  T267]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.980077][  T267]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   18.980253][  T267]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   18.980383][  T267]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   18.980559][  T267]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[   18.980689][  T267]  ? ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[   18.980789][  T267]  ovl_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/overlayfs/file.c:99 (discriminator 1) fs/overlayfs/file.c:226 (discriminator 1))
[   18.980930][  T267]  ? ovl_llseek (fs/overlayfs/file.c:255)
[   18.981062][  T267]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.981239][  T267]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   18.981373][  T267]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   18.981544][  T267]  ? ovl_llseek (fs/overlayfs/file.c:255)
[   18.981673][  T267]  do_dentry_open (fs/open.c:996)
[   18.981846][  T267]  vfs_open (fs/open.c:1101)
[   18.981945][  T267]  ? may_open (fs/namei.c:4269)
[   18.982088][  T267]  do_open (fs/namei.c:4837)
[   18.982189][  T267]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[   18.982319][  T267]  path_openat (fs/namei.c:5000)
[   18.982492][  T267]  ? kernel_tmpfile_open (fs/namei.c:4942)
[   18.982623][  T267]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[   18.982796][  T267]  do_file_open (fs/namei.c:5029)
[   18.982925][  T267]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[   18.983102][  T267]  ? page_get_link_raw (fs/namei.c:6482)
[   18.983234][  T267]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[   18.983409][  T267]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[   18.983507][  T267]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[   18.983679][  T267]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[   18.983809][  T267]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.983980][  T267]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   18.984145][  T267]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[   18.984319][  T267]  ? fput_close_sync (fs/file_table.c:617)
[   18.984449][  T267]  ? __ia32_sys_open (fs/open.c:1427)
[   18.984623][  T267]  ? fpregs_restore_userregs (./include/linux/instrumented.h:97 ./include/asm-generic/bitops/instrumented-atomic.h:41 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79)
[   18.984754][  T267]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   18.984926][  T267]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   18.985135][  T267]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   18.985296][  T267]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   18.985469][  T267]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   18.985599][  T267]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   18.985804][  T267] RIP: 0033:0x7eff2c3026e5
[   18.985938][  T267] Code: 48 89 e5 48 89 55 e0 41 83 e2 40 75 28 89 f2 f7 d2 81 e2 00 00 41 00 74 1c 89 f2 bf 9c ff ff ff 48 89 c6 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 5d c3 90 48 8d 4d 10 c7 45 b8 10 00 00 00
All code
========
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	48 89 55 e0          	mov    %rdx,-0x20(%rbp)
   7:	41 83 e2 40          	and    $0x40,%r10d
   b:	75 28                	jne    0x35
   d:	89 f2                	mov    %esi,%edx
   f:	f7 d2                	not    %edx
  11:	81 e2 00 00 41 00    	and    $0x410000,%edx
  17:	74 1c                	je     0x35
  19:	89 f2                	mov    %esi,%edx
  1b:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  20:	48 89 c6             	mov    %rax,%rsi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 23                	ja     0x55
  32:	5d                   	pop    %rbp
  33:	c3                   	ret
  34:	90                   	nop
  35:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
  39:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 23                	ja     0x2b
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	48 8d 4d 10          	lea    0x10(%rbp),%rcx
   f:	c7 45 b8 10 00 00 00 	movl   $0x10,-0x48(%rbp)
[   18.986497][  T267] RSP: 002b:00007ffc43eff740 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[   18.986740][  T267] RAX: ffffffffffffffda RBX: 00007ffc43eff9d0 RCX: 00007eff2c3026e5
[   18.986982][  T267] RDX: 0000000000080000 RSI: 00007ffc43eff7c0 RDI: 00000000ffffff9c
[   18.987178][  T267] RBP: 00007ffc43eff740 R08: 00007ffc43eff9b7 R09: 0000000000000000
[   18.987372][  T267] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc43eff7c0
[   18.987614][  T267] R13: 00007ffc43eff7c0 R14: 00007eff2c2d4000 R15: 0000000000000000
| [   19.008266][  T168] ------------[ cut here ]------------
| [   19.008388][  T168] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: mode-2-recovery/168
| [   19.008601][  T168] Modules linked in:
| [   19.009004][  T168] Tainted: [B]=BAD_PAGE, [W]=WARN
[   19.009130][  T168] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   19.009286][  T168] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   19.009415][  T168] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   19.009857][  T168] RSP: 0018:ffa00000018578a8 EFLAGS: 00010046
[   19.010014][  T168] RAX: 0000000000000220 RBX: ff11000009370ce0 RCX: 0000000000000001
[   19.010200][  T168] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   19.010387][  T168] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   19.010572][  T168] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000024dc00
[   19.010759][  T168] R13: ff11000009370d00 R14: ff1100000103c940 R15: ffd400000024dc00
[   19.010945][  T168] FS:  00007f149c463b80(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000
[   19.011165][  T168] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   19.011322][  T168] CR2: 0000557f3d023348 CR3: 000000000c6c2004 CR4: 0000000000771ef0
[   19.011508][  T168] PKRU: 55555554
[   19.011601][  T168] Call Trace:
[   19.011693][  T168]  <TASK>
[   19.011757][  T168]  check_bytes_and_report.cold (mm/slub.c:1359)
[   19.011880][  T168]  check_object (mm/slub.c:1507)
[   19.012004][  T168]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   19.012131][  T168]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   19.012256][  T168]  free_to_partial_list (mm/slub.c:5631)
[   19.012380][  T168]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   19.012502][  T168]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   19.012624][  T168]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   19.012748][  T168]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   19.012870][  T168]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   19.013023][  T168]  ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:112 kernel/locking/spinlock_debug.c:116)
[   19.013150][  T168]  ? dup_task_struct (kernel/fork.c:188 (discriminator 7) kernel/fork.c:922 (discriminator 7))
[   19.013276][  T168]  dup_task_struct (kernel/fork.c:188 (discriminator 7) kernel/fork.c:922 (discriminator 7))
[   19.013399][  T168]  copy_process (kernel/fork.c:2133 (discriminator 1))
[   19.013521][  T168]  ? restore_fpregs_from_user (arch/x86/kernel/fpu/signal.c:305)
[   19.013646][  T168]  ? pidfd_prepare (./include/linux/list.h:1037 (discriminator 3) ./include/linux/pid.h:98 (discriminator 3) kernel/fork.c:1936 (discriminator 3))
[   19.013771][  T168]  ? handle_pte_fault (mm/memory.c:6582)
[   19.013896][  T168]  kernel_clone (kernel/fork.c:2766)
[   19.014019][  T168]  ? create_io_thread (kernel/fork.c:2704)
[   19.014145][  T168]  ? __pmd_alloc (./include/linux/mm.h:1762)
[   19.014270][  T168]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   19.014393][  T168]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   19.014516][  T168]  __do_sys_clone (kernel/fork.c:2908)
[   19.014640][  T168]  ? kernel_clone (./include/trace/events/sched.h:396 (discriminator 19))
[   19.014764][  T168]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   19.014885][  T168]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   19.015037][  T168]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   19.015192][  T168]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   19.015317][  T168]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   19.015441][  T168]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   19.015592][  T168] RIP: 0033:0x7f149c525126
[   19.015722][  T168] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 7d af f5 ff       	call   0xfffffffffff5af84
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 5a                	ja     0x8c
  32:	89 c3                	mov    %eax,%ebx
  34:	85 c0                	test   %eax,%eax
  36:	75 2f                	jne    0x67
  38:	64                   	fs
  39:	48                   	rex.W
  3a:	8b                   	.byte 0x8b
  3b:	04 25                	add    $0x25,%al
  3d:	10 00                	adc    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 5a                	ja     0x62
   8:	89 c3                	mov    %eax,%ebx
   a:	85 c0                	test   %eax,%eax
   c:	75 2f                	jne    0x3d
   e:	64                   	fs
   f:	48                   	rex.W
  10:	8b                   	.byte 0x8b
  11:	04 25                	add    $0x25,%al
  13:	10 00                	adc    %al,(%rax)
	...
[   19.016165][  T168] RSP: 002b:00007ffdd7fbe3b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   19.016352][  T168] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f149c525126
[   19.016536][  T168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[   19.016723][  T168] RBP: 00007ffdd7fbe3d0 R08: 0000000000000000 R09: 0000000000000030
[   19.016907][  T168] R10: 00007f149c463e50 R11: 0000000000000246 R12: 0000557f3d0263d0
[   19.017094][  T168] R13: 0000557f3d117530 R14: 0000000000000000 R15: 00000000ffffffff
| [   23.651675][  T289] ------------[ cut here ]------------
| [   23.651861][  T289] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: ip/289
| [   23.652068][  T289] Modules linked in:
| [   23.652556][  T289] Tainted: [B]=BAD_PAGE, [W]=WARN
[   23.652695][  T289] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   23.652919][  T289] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   23.653064][  T289] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   23.653663][  T289] RSP: 0018:ffa0000001cb70a0 EFLAGS: 00010046
[   23.653890][  T289] RAX: 0000000000000220 RBX: ff110000090ba620 RCX: 0000000000000001
[   23.654097][  T289] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   23.654358][  T289] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   23.654616][  T289] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd4000000242e80
[   23.654874][  T289] R13: ff110000090ba640 R14: ff1100000103c940 R15: ffd4000000242e80
[   23.655083][  T289] FS:  0000000000000000(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000
[   23.655380][  T289] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   23.655603][  T289] CR2: 00007f5bf90ec830 CR3: 000000000925c004 CR4: 0000000000771ef0
[   23.655862][  T289] PKRU: 55555554
[   23.655968][  T289] Call Trace:
[   23.656073][  T289]  <TASK>
[   23.656196][  T289]  check_bytes_and_report.cold (mm/slub.c:1359)
[   23.656336][  T289]  check_object (mm/slub.c:1507)
[   23.656524][  T289]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   23.656667][  T289]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   23.656853][  T289]  free_to_partial_list (mm/slub.c:5631)
[   23.656993][  T289]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   23.657181][  T289]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   23.657317][  T289]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   23.657501][  T289]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   23.657638][  T289]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   23.657825][  T289]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[   23.657962][  T289]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[   23.658145][  T289]  __create_object (mm/kmemleak.c:801)
[   23.658283][  T289]  ? kasan_save_track (mm/kasan/common.c:78)
[   23.658468][  T289]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[   23.658606][  T289]  ? mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[   23.658792][  T289]  mas_preallocate (lib/maple_tree.c:139 (discriminator 7) lib/maple_tree.c:1086 (discriminator 7) lib/maple_tree.c:5057 (discriminator 7))
[   23.658929][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.659115][  T289]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   23.659257][  T289]  ? mas_wr_slot_store (lib/maple_tree.c:1419 (discriminator 2))
[   23.659442][  T289]  ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:385 arch/x86/kernel/unwind_orc.c:380)
[   23.659580][  T289]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1))
[   23.659765][  T289]  ? init_multi_vma_prep (mm/vma.c:174)
[   23.659903][  T289]  commit_merge (mm/vma.h:665 mm/vma.c:834)
[   23.660088][  T289]  ? vms_gather_munmap_vmas (mm/vma.c:1614)
[   23.660227][  T289]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[   23.660413][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.660550][  T289]  ? __vma_start_exclude_readers (mm/mmap_lock.c:126 (discriminator 38))
[   23.660771][  T289]  vma_expand (mm/vma.c:1302)
[   23.660911][  T289]  relocate_vma_down (mm/vma_exec.c:63)
[   23.661096][  T289]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   23.661235][  T289]  ? __install_special_mapping (??:?)
[   23.661452][  T289]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   23.661592][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.661776][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.661913][  T289]  ? is_bpf_text_address (./include/linux/rcupdate.h:850 kernel/bpf/core.c:749)
[   23.662099][  T289]  ? is_bpf_text_address (./include/linux/rcupdate.h:882 kernel/bpf/core.c:751)
[   23.662240][  T289]  ? kernel_text_address (kernel/extable.c:125 kernel/extable.c:94)
[   23.662425][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.662563][  T289]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[   23.662747][  T289]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[   23.662882][  T289]  ? down_write (kernel/locking/rwsem.c:1633)
[   23.663066][  T289]  setup_arg_pages (fs/exec.c:695)
[   23.663206][  T289]  ? open_exec (fs/exec.c:823)
[   23.663357][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.663492][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.663676][  T289]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   23.663848][  T289]  load_elf_binary (fs/binfmt_elf.c:1028 (discriminator 9))
[   23.664033][  T289]  ? __ia32_sys_llseek (fs/read_write.c:426)
[   23.664174][  T289]  ? bm_fill_super (fs/binfmt_misc.c:1604)
[   23.664357][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.664493][  T289]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   23.664678][  T289]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   23.664817][  T289]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[   23.665000][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.665139][  T289]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   23.665323][  T289]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.665461][  T289]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[   23.665645][  T289]  ? check_unsafe_exec (fs/exec.c:1617)
[   23.665781][  T289]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[   23.665966][  T289]  do_execveat_common.isra.0 (fs/exec.c:1945)
[   23.666102][  T289]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[   23.666290][  T289]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   23.666426][  T289]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   23.666609][  T289]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   23.666828][  T289] RIP: 0033:0x7f5bf90edf4b
[   23.666976][  T289] Code: Unable to access opcode bytes at 0x7f5bf90edf21.

Code starting with the faulting instruction
===========================================
[   23.667207][  T289] RSP: 002b:00007fff5ecdc1c8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[   23.667416][  T289] RAX: ffffffffffffffda RBX: 00007fff5ecdee57 RCX: 00007f5bf90edf4b
[   23.667671][  T289] RDX: 00007fff5ecdc670 RSI: 00007fff5ecdc638 RDI: 00007fff5ecdc1d0
[   23.667926][  T289] RBP: 00007fff5ecdc2e0 R08: 0000000000000000 R09: 000000000000009f
[   23.668186][  T289] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff5ecdee3e
[   23.668394][  T289] R13: 00007fff5ecdc670 R14: 00007fff5ecdc1d0 R15: 00007fff5ecdc638
| [   23.800830][  T294] ------------[ cut here ]------------
| [   23.800959][  T294] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: date/294
| [   23.801158][  T294] Modules linked in:
| [   23.801528][  T294] Tainted: [B]=BAD_PAGE, [W]=WARN
[   23.801660][  T294] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   23.801824][  T294] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   23.801964][  T294] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   23.802432][  T294] RSP: 0018:ffa0000001cb7888 EFLAGS: 00010046
[   23.802596][  T294] RAX: 0000000000000220 RBX: ff11000007917f20 RCX: 0000000000000001
[   23.802795][  T294] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   23.802993][  T294] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   23.803192][  T294] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000001e45c0
[   23.803389][  T294] R13: ff11000007917f38 R14: ff1100000103c940 R15: ffd40000001e45c0
[   23.803588][  T294] FS:  0000000000000000(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000
[   23.803819][  T294] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   23.803985][  T294] CR2: 00007f2754ca284c CR3: 000000000c735002 CR4: 0000000000771ef0
[   23.804185][  T294] PKRU: 55555554
[   23.804285][  T294] Call Trace:
[   23.804384][  T294]  <TASK>
[   23.804452][  T294]  check_bytes_and_report.cold (mm/slub.c:1359)
[   23.804586][  T294]  check_object (mm/slub.c:1515)
[   23.804716][  T294]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   23.804846][  T294]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   23.804975][  T294]  free_to_partial_list (mm/slub.c:5631)
[   23.805105][  T294]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   23.805239][  T294]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   23.805367][  T294]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   23.805497][  T294]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   23.805626][  T294]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   23.805755][  T294]  ? vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[   23.805886][  T294]  vm_area_alloc (mm/vma_init.c:36 (discriminator 7))
[   23.806014][  T294]  __install_special_mapping (mm/vma.c:3471)
[   23.806149][  T294]  ? vma_mmu_pagesize+0xa0/0xa0
[   23.806279][  T294]  ? down_write_killable (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:4457 kernel/locking/rwsem.c:268 kernel/locking/rwsem.c:1346 kernel/locking/rwsem.c:1361 kernel/locking/rwsem.c:1645)
[   23.806410][  T294]  ? down_write_killable (kernel/locking/rwsem.c:1350 (discriminator 1) kernel/locking/rwsem.c:1361 (discriminator 1) kernel/locking/rwsem.c:1645 (discriminator 1))
[   23.806539][  T294]  ? __get_unmapped_area (./include/linux/security.h:1188 mm/mmap.c:877)
[   23.806672][  T294]  map_vdso (arch/x86/entry/vdso/vma.c:178)
[   23.806772][  T294]  load_elf_binary (fs/binfmt_elf.c:1291)
[   23.806904][  T294]  ? load_elf_interp.isra.0 (fs/binfmt_elf.c:690 (discriminator 4))
[   23.807034][  T294]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.807170][  T294]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   23.807302][  T294]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   23.807432][  T294]  exec_binprm (fs/exec.c:1759 fs/exec.c:1791)
[   23.807562][  T294]  ? check_unsafe_exec (fs/exec.c:1617)
[   23.807692][  T294]  bprm_execve (fs/exec.c:1847 fs/exec.c:1823)
[   23.807822][  T294]  do_execveat_common.isra.0 (fs/exec.c:1945)
[   23.807953][  T294]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[   23.808083][  T294]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   23.808217][  T294]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   23.808347][  T294]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   23.808509][  T294] RIP: 0033:0x7f149c525f4b
[   23.808648][  T294] Code: Unable to access opcode bytes at 0x7f149c525f21.

Code starting with the faulting instruction
===========================================
[   23.808815][  T294] RSP: 002b:00007ffdd7fbc778 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[   23.809013][  T294] RAX: ffffffffffffffda RBX: 0000557f3d11df20 RCX: 00007f149c525f4b
[   23.809213][  T294] RDX: 0000557f3d11dfa0 RSI: 0000557f3d021d80 RDI: 0000557f3d11df20
[   23.809411][  T294] RBP: 00007ffdd7fbc860 R08: 00007ffdd7fbc6a0 R09: 0000000000000000
[   23.809607][  T294] R10: 0000000000000008 R11: 0000000000000202 R12: 0000557f3d11df20
[   23.809804][  T294] R13: 0000000000000000 R14: 0000557f3d021d80 R15: 0000557f3d11dfa0
| [   28.433007][  T315] ------------[ cut here ]------------
| [   28.433130][  T315] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: mode-2-recovery/315
| [   28.433347][  T315] Modules linked in:
| [   28.433726][  T315] Tainted: [B]=BAD_PAGE, [W]=WARN
[   28.433851][  T315] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   28.434008][  T315] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   28.434139][  T315] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   28.434590][  T315] RSP: 0018:ffa0000001df78b8 EFLAGS: 00010046
[   28.434750][  T315] RAX: 0000000000000220 RBX: ff1100000969c9e0 RCX: 0000000000000001
[   28.434937][  T315] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   28.435126][  T315] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   28.435316][  T315] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000025a700
[   28.435504][  T315] R13: ff1100000969c9f8 R14: ff1100000103c940 R15: ffd400000025a700
[   28.435692][  T315] FS:  00007f149c463b80(0000) GS:ff1100008ca2e000(0000) knlGS:0000000000000000
[   28.435911][  T315] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   28.436072][  T315] CR2: 00007f149c621888 CR3: 00000000058a4005 CR4: 0000000000771ef0
[   28.436262][  T315] PKRU: 55555554
[   28.436357][  T315] Call Trace:
[   28.436450][  T315]  <TASK>
[   28.436515][  T315]  check_bytes_and_report.cold (mm/slub.c:1359)
[   28.436641][  T315]  check_object (mm/slub.c:1515)
[   28.436764][  T315]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   28.436887][  T315]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   28.437011][  T315]  free_to_partial_list (mm/slub.c:5631)
[   28.437134][  T315]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   28.437260][  T315]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   28.437383][  T315]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   28.437506][  T315]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   28.437669][  T315]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   28.437792][  T315]  ? copy_fs_struct (fs/fs_struct.c:114 (discriminator 7))
[   28.437956][  T315]  copy_fs_struct (fs/fs_struct.c:114 (discriminator 7))
[   28.438078][  T315]  copy_process (kernel/fork.c:1654 kernel/fork.c:2298)
[   28.438243][  T315]  ? mas_next_slot (lib/maple_tree.c:4261)
[   28.438367][  T315]  ? pidfd_prepare (./include/linux/list.h:1037 (discriminator 3) ./include/linux/pid.h:98 (discriminator 3) kernel/fork.c:1936 (discriminator 3))
[   28.438529][  T315]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   28.438654][  T315]  kernel_clone (kernel/fork.c:2766)
[   28.438817][  T315]  ? create_io_thread (kernel/fork.c:2704)
[   28.438941][  T315]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   28.439104][  T315]  __do_sys_clone (kernel/fork.c:2908)
[   28.439231][  T315]  ? kernel_clone (./include/trace/events/sched.h:396 (discriminator 19))
[   28.439397][  T315]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   28.439520][  T315]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   28.439714][  T315]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[   28.439867][  T315]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   28.440029][  T315]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   28.440151][  T315]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   28.440349][  T315] RIP: 0033:0x7f149c525126
[   28.440523][  T315] Code: 7d e0 e8 7d af f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 7d af f5 ff       	call   0xfffffffffff5af84
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 5a                	ja     0x8c
  32:	89 c3                	mov    %eax,%ebx
  34:	85 c0                	test   %eax,%eax
  36:	75 2f                	jne    0x67
  38:	64                   	fs
  39:	48                   	rex.W
  3a:	8b                   	.byte 0x8b
  3b:	04 25                	add    $0x25,%al
  3d:	10 00                	adc    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 5a                	ja     0x62
   8:	89 c3                	mov    %eax,%ebx
   a:	85 c0                	test   %eax,%eax
   c:	75 2f                	jne    0x3d
   e:	64                   	fs
   f:	48                   	rex.W
  10:	8b                   	.byte 0x8b
  11:	04 25                	add    $0x25,%al
  13:	10 00                	adc    %al,(%rax)
	...
[   28.441005][  T315] RSP: 002b:00007ffdd7fbc780 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[   28.441236][  T315] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f149c525126
[   28.441462][  T315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[   28.441687][  T315] RBP: 00007ffdd7fbc7a0 R08: 0000000000000000 R09: 0000000000000200
[   28.441872][  T315] R10: 00007f149c463e50 R11: 0000000000000246 R12: 00007ffdd7fbcf20
[   28.442096][  T315] R13: 00000000ffffffff R14: 000000000000000c R15: 0000000000000000
| [   32.952892][  T328] ------------[ cut here ]------------
| [   32.953020][  T328] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/328
| [   32.953219][  T328] Modules linked in:
| [   32.953585][  T328] Tainted: [B]=BAD_PAGE, [W]=WARN
[   32.953716][  T328] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   32.953879][  T328] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   32.954016][  T328] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   32.954488][  T328] RSP: 0018:ffa00000018e7970 EFLAGS: 00010046
[   32.954655][  T328] RAX: 0000000000000220 RBX: ff1100000a77c9e0 RCX: 0000000000000001
[   32.954898][  T328] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   32.955140][  T328] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   32.955384][  T328] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000029df00
[   32.955579][  T328] R13: ff1100000a77ca00 R14: ff1100000103c940 R15: ffd400000029df00
[   32.955823][  T328] FS:  00007f43b5e5fcc0(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000
[   32.956096][  T328] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   32.956310][  T328] CR2: 00007ffc716f1dcc CR3: 000000000c710002 CR4: 0000000000771ef0
[   32.956505][  T328] PKRU: 55555554
[   32.956604][  T328] Call Trace:
[   32.956702][  T328]  <TASK>
[   32.956770][  T328]  check_bytes_and_report.cold (mm/slub.c:1359)
[   32.956902][  T328]  check_object (mm/slub.c:1507)
[   32.957031][  T328]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   32.957159][  T328]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   32.957292][  T328]  free_to_partial_list (mm/slub.c:5631)
[   32.957420][  T328]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   32.957548][  T328]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   32.957720][  T328]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   32.957850][  T328]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   32.958022][  T328]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   32.958150][  T328]  ? alloc_vfsmnt (fs/namespace.c:287 (discriminator 7))
[   32.958327][  T328]  alloc_vfsmnt (fs/namespace.c:287 (discriminator 7))
[   32.958456][  T328]  clone_mnt (fs/namespace.c:1251)
[   32.958596][  T328]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   32.958727][  T328]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   32.958899][  T328]  copy_tree (fs/namespace.c:2209)
[   32.958996][  T328]  copy_mnt_ns (fs/namespace.c:4275)
[   32.959170][  T328]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   32.959335][  T328]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   32.959509][  T328]  ? do_mount (fs/namespace.c:4182)
[   32.959606][  T328]  ? kmem_cache_alloc_noprof (mm/slub.c:5012 (discriminator 1))
[   32.959779][  T328]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:211 (discriminator 1) kernel/locking/spinlock.c:221 (discriminator 1))
[   32.959941][  T328]  ? create_new_namespaces (kernel/nsproxy.c:58 (discriminator 7) kernel/nsproxy.c:95 (discriminator 7))
[   32.960116][  T328]  create_new_namespaces (kernel/nsproxy.c:99)
[   32.960248][  T328]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   32.960424][  T328]  unshare_nsproxy_namespaces (kernel/nsproxy.c:234 (discriminator 4))
[   32.960552][  T328]  ksys_unshare (kernel/fork.c:3292)
[   32.960727][  T328]  ? walk_process_tree (kernel/fork.c:3080 (discriminator 17))
[   32.960857][  T328]  ? fput_close_sync (fs/file_table.c:617)
[   32.961031][  T328]  ? alloc_file_clone (fs/file_table.c:479)
[   32.961159][  T328]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   32.961336][  T328]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   32.961465][  T328]  __x64_sys_unshare (kernel/fork.c:3356 kernel/fork.c:3354 kernel/fork.c:3354)
[   32.961638][  T328]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   32.961766][  T328]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   32.961938][  T328]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   32.962068][  T328]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   32.962274][  T328] RIP: 0033:0x7f43b614c88b
[   32.962409][  T328] Code: 73 01 c3 48 8b 0d 6d 75 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3d 75 0f 00 f7 d8 64 89 01 48
All code
========
   0:	73 01                	jae    0x3
   2:	c3                   	ret
   3:	48 8b 0d 6d 75 0f 00 	mov    0xf756d(%rip),%rcx        # 0xf7577
   a:	f7 d8                	neg    %eax
   c:	64 89 01             	mov    %eax,%fs:(%rcx)
   f:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  13:	c3                   	ret
  14:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  1b:	00 00 00 
  1e:	90                   	nop
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 10 01 00 00       	mov    $0x110,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 3d 75 0f 00 	mov    0xf753d(%rip),%rcx        # 0xf7577
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 3d 75 0f 00 	mov    0xf753d(%rip),%rcx        # 0xf754d
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[   32.962963][  T328] RSP: 002b:00007ffc716f2458 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[   32.963205][  T328] RAX: ffffffffffffffda RBX: 00007ffc716f781c RCX: 00007f43b614c88b
[   32.963446][  T328] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000020000
[   32.963641][  T328] RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000
[   32.963881][  T328] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc716f781c
[   32.964122][  T328] R13: 0000000000000065 R14: 00007ffc716f7826 R15: 00007ffc716f5938
| [   37.716296][  T355] ------------[ cut here ]------------
| [   37.716419][  T355] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#2: ip/355
| [   37.716601][  T355] Modules linked in:
| [   37.716950][  T355] Tainted: [B]=BAD_PAGE, [W]=WARN
[   37.717075][  T355] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   37.717235][  T355] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   37.717367][  T355] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   37.717804][  T355] RSP: 0018:ffa0000001f97bc0 EFLAGS: 00010046
[   37.717961][  T355] RAX: 0000000000000220 RBX: ff1100000568ac20 RCX: 0000000000000001
[   37.718146][  T355] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   37.718335][  T355] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   37.718521][  T355] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000015a280
[   37.718707][  T355] R13: ff1100000568ac38 R14: ff1100000103c940 R15: ffd400000015a280
[   37.718892][  T355] FS:  00007fc0b21d4cc0(0000) GS:ff1100008c9ae000(0000) knlGS:0000000000000000
[   37.719111][  T355] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   37.719271][  T355] CR2: 000000001a79b008 CR3: 000000000b950004 CR4: 0000000000771ef0
[   37.719458][  T355] PKRU: 55555554
[   37.719551][  T355] Call Trace:
[   37.719645][  T355]  <TASK>
[   37.719709][  T355]  check_bytes_and_report.cold (mm/slub.c:1359)
[   37.719835][  T355]  check_object (mm/slub.c:1515)
[   37.719958][  T355]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   37.720080][  T355]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.720204][  T355]  free_to_partial_list (mm/slub.c:5631)
[   37.720331][  T355]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.720452][  T355]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.720574][  T355]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   37.720696][  T355]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   37.720819][  T355]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   37.720941][  T355]  ? do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[   37.721066][  T355]  do_getname.isra.0 (fs/namei.c:147 (discriminator 11) fs/namei.c:187 (discriminator 11))
[   37.721187][  T355]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   37.721316][  T355]  do_faccessat (./include/linux/fs.h:2587 fs/open.c:486)
[   37.721481][  T355]  ? generic_file_open (./include/linux/fs.h:1143 (discriminator 4))
[   37.721604][  T355]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   37.721767][  T355]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   37.721891][  T355]  __x64_sys_access (fs/open.c:547 fs/open.c:545 fs/open.c:545)
[   37.722054][  T355]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78)
[   37.722174][  T355]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   37.722341][  T355]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   37.722465][  T355]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   37.722656][  T355] RIP: 0033:0x7fc0b24ae40b
[   37.722789][  T355] Code: 0f 1e fa 8b 87 10 01 00 00 89 06 31 c0 c3 90 f3 0f 1e fa 89 b7 10 01 00 00 31 c0 c3 0f 1f 00 f3 0f 1e fa b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 8b 15 b9 a9 10 00 f7 d8
All code
========
   0:	0f 1e fa             	nop    %edx
   3:	8b 87 10 01 00 00    	mov    0x110(%rdi),%eax
   9:	89 06                	mov    %eax,(%rsi)
   b:	31 c0                	xor    %eax,%eax
   d:	c3                   	ret
   e:	90                   	nop
   f:	f3 0f 1e fa          	endbr64
  13:	89 b7 10 01 00 00    	mov    %esi,0x110(%rdi)
  19:	31 c0                	xor    %eax,%eax
  1b:	c3                   	ret
  1c:	0f 1f 00             	nopl   (%rax)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 15 00 00 00       	mov    $0x15,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 05                	ja     0x37
  32:	c3                   	ret
  33:	0f 1f 40 00          	nopl   0x0(%rax)
  37:	48 8b 15 b9 a9 10 00 	mov    0x10a9b9(%rip),%rdx        # 0x10a9f7
  3e:	f7 d8                	neg    %eax

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 05                	ja     0xd
   8:	c3                   	ret
   9:	0f 1f 40 00          	nopl   0x0(%rax)
   d:	48 8b 15 b9 a9 10 00 	mov    0x10a9b9(%rip),%rdx        # 0x10a9cd
  14:	f7 d8                	neg    %eax
[   37.723318][  T355] RSP: 002b:00007ffe9652fb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
[   37.723545][  T355] RAX: ffffffffffffffda RBX: 00007fc0b21d4b78 RCX: 00007fc0b24ae40b
[   37.723731][  T355] RDX: 000000000000000f RSI: 0000000000000000 RDI: 00007fc0b268b271
[   37.723957][  T355] RBP: 00007ffe9652fba0 R08: 000000001a79b680 R09: 00000000000001e0
[   37.724182][  T355] R10: 00000000000001e1 R11: 0000000000000246 R12: 0000000000000000
[   37.724415][  T355] R13: 00007ffe9652fc48 R14: 00007ffe9652fca0 R15: 00007fc0b2693710
| [   37.964303][  T358] ------------[ cut here ]------------
| [   37.964431][  T358] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: 2/358
| [   37.964624][  T358] Modules linked in:
| [   37.964990][  T358] Tainted: [B]=BAD_PAGE, [W]=WARN
[   37.965121][  T358] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   37.965288][  T358] Workqueue: mld mld_ifc_work
[   37.965424][  T358] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   37.965562][  T358] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   37.966023][  T358] RSP: 0018:ffa0000001f876a0 EFLAGS: 00010046
[   37.966188][  T358] RAX: 0000000000000220 RBX: ff1100000b3420e0 RCX: 0000000000000001
[   37.966384][  T358] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   37.966578][  T358] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   37.966775][  T358] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000002cd080
[   37.966968][  T358] R13: ff1100000b342100 R14: ff1100000103c940 R15: ffd40000002cd080
[   37.967163][  T358] FS:  0000000000000000(0000) GS:ff1100008c92e000(0000) knlGS:0000000000000000
[   37.967395][  T358] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   37.967560][  T358] CR2: 0000557efed6e130 CR3: 0000000019d3c002 CR4: 0000000000771ef0
[   37.967753][  T358] PKRU: 55555554
[   37.967852][  T358] Call Trace:
[   37.967951][  T358]  <TASK>
[   37.968018][  T358]  check_bytes_and_report.cold (mm/slub.c:1359)
[   37.968148][  T358]  check_object (mm/slub.c:1507)
[   37.968282][  T358]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   37.968411][  T358]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.968540][  T358]  free_to_partial_list (mm/slub.c:5631)
[   37.968666][  T358]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.968792][  T358]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.968921][  T358]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   37.969048][  T358]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   37.969175][  T358]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   37.969338][  T358]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   37.969468][  T358]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   37.969562][  T358]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   37.969689][  T358]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   37.969816][  T358]  mld_newpack (./include/linux/skbuff.h:1384 net/ipv6/mcast.c:1810)
[   37.969944][  T358]  ? mld_sendpack (net/ipv6/mcast.c:1895 (discriminator 3))
[   37.970069][  T358]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   37.970197][  T358]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   37.970330][  T358]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   37.970458][  T358]  ? add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[   37.970585][  T358]  add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[   37.970680][  T358]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[   37.970807][  T358]  add_grec (./include/linux/lockdep.h:249 net/ipv4/igmp.c:556)
[   37.970903][  T358]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[   37.971030][  T358]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   37.971158][  T358]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[   37.971290][  T358]  ? add_grhead (net/ipv4/igmp.c:511)
[   37.971419][  T358]  mld_send_cr (net/ipv6/mcast.c:2185)
[   37.971546][  T358]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[   37.971672][  T358]  mld_ifc_work (net/ipv6/mcast.c:2739)
[   37.971799][  T358]  ? process_one_work (kernel/workqueue.c:3363 (discriminator 2))
[   37.971928][  T358]  process_one_work (kernel/workqueue.c:3387)
[   37.972055][  T358]  ? __queue_delayed_work (kernel/workqueue.c:2622)
[   37.972182][  T358]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   37.972315][  T358]  ? __mutex_unlock_slowpath (./include/linux/preempt.h:500 kernel/locking/mutex.c:999)
[   37.972443][  T358]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   37.972571][  T358]  worker_thread (kernel/workqueue.c:3470 kernel/workqueue.c:3551)
[   37.972698][  T358]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[   37.972824][  T358]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[   37.972951][  T358]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[   37.973077][  T358]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[   37.973204][  T358]  kthread (kernel/kthread.c:436)
[   37.973304][  T358]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   37.973463][  T358]  ? kthread_affine_preferred (kernel/kthread.c:857)
[   37.973590][  T358]  ret_from_fork (arch/x86/kernel/process.c:158)
[   37.973720][  T358]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/vdso/vma.c:80 (discriminator 1))
[   37.973878][  T358]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[   37.974007][  T358]  ? kthread_affine_preferred (kernel/kthread.c:857)
[   37.974135][  T358]  ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
| [   37.983147][  T358] ------------[ cut here ]------------
| [   37.983276][  T358] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#1: 2/358
| [   37.983506][  T358] Modules linked in:
| [   37.983905][  T358] Tainted: [B]=BAD_PAGE, [W]=WARN
[   37.984077][  T358] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   37.984240][  T358] Workqueue: mld mld_ifc_work
[   37.984415][  T358] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   37.984547][  T358] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   37.985093][  T358] RSP: 0018:ffa0000001f876b0 EFLAGS: 00010046
[   37.985301][  T358] RAX: 0000000000000220 RBX: ff1100000a792920 RCX: 0000000000000001
[   37.985541][  T358] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   37.985735][  T358] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   37.986003][  T358] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd400000029e480
[   37.986242][  T358] R13: ff1100000a792938 R14: ff1100000103c940 R15: ffd400000029e480
[   37.986477][  T358] FS:  0000000000000000(0000) GS:ff1100008c92e000(0000) knlGS:0000000000000000
[   37.986701][  T358] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   37.986907][  T358] CR2: 0000557efed6e130 CR3: 0000000019d3c002 CR4: 0000000000771ef0
[   37.987140][  T358] PKRU: 55555554
[   37.987239][  T358] Call Trace:
[   37.987379][  T358]  <TASK>
[   37.987444][  T358]  check_bytes_and_report.cold (mm/slub.c:1359)
[   37.987571][  T358]  check_object (mm/slub.c:1515)
[   37.987741][  T358]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   37.987869][  T358]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.988036][  T358]  free_to_partial_list (mm/slub.c:5631)
[   37.988161][  T358]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.988292][  T358]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   37.988422][  T358]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   37.988592][  T358]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   37.988718][  T358]  kmem_cache_alloc_node_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5068)
[   37.988919][  T358]  ? __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   37.989048][  T358]  __alloc_skb (net/core/skbuff.c:704 (discriminator 7))
[   37.989185][  T358]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   37.989315][  T358]  ? napi_skb_cache_get (./include/linux/local_lock_internal.h:60 (discriminator 1))
[   37.989484][  T358]  mld_newpack (./include/linux/skbuff.h:1384 net/ipv6/mcast.c:1810)
[   37.989611][  T358]  ? mld_sendpack (net/ipv6/mcast.c:1895 (discriminator 3))
[   37.989780][  T358]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   37.989907][  T358]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   37.990077][  T358]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:58 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[   37.990204][  T358]  ? add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[   37.990376][  T358]  add_grhead (./include/linux/skbuff.h:3092 (discriminator 4) ./include/linux/igmp.h:29 (discriminator 4) net/ipv4/igmp.c:501 (discriminator 4))
[   37.990471][  T358]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[   37.990638][  T358]  add_grec (./include/linux/lockdep.h:249 net/ipv4/igmp.c:556)
[   37.990734][  T358]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[   37.990905][  T358]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   37.991033][  T358]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[   37.991203][  T358]  ? add_grhead (net/ipv4/igmp.c:511)
[   37.991334][  T358]  mld_send_cr (net/ipv6/mcast.c:2185)
[   37.991504][  T358]  ? mld_ifc_work (net/ipv6/mcast.c:2738)
[   37.991631][  T358]  mld_ifc_work (net/ipv6/mcast.c:2739)
[   37.991799][  T358]  ? process_one_work (kernel/workqueue.c:3363 (discriminator 2))
[   37.991925][  T358]  process_one_work (kernel/workqueue.c:3387)
[   37.992094][  T358]  ? __queue_delayed_work (kernel/workqueue.c:2622)
[   37.992219][  T358]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[   37.992393][  T358]  ? __mutex_unlock_slowpath (./include/linux/preempt.h:500 kernel/locking/mutex.c:999)
[   37.992519][  T358]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   37.992688][  T358]  worker_thread (kernel/workqueue.c:3470 kernel/workqueue.c:3551)
[   37.992816][  T358]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[   37.992986][  T358]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[   37.993112][  T358]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[   37.993283][  T358]  ? rescuer_thread (./include/linux/list.h:419 (discriminator 3))
[   37.993411][  T358]  kthread (kernel/kthread.c:436)
[   37.993510][  T358]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   37.993711][  T358]  ? kthread_affine_preferred (kernel/kthread.c:857)
[   37.993881][  T358]  ret_from_fork (arch/x86/kernel/process.c:158)
[   37.994009][  T358]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/vdso/vma.c:80 (discriminator 1))
[   37.994209][  T358]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[   37.994339][  T358]  ? kthread_affine_preferred (kernel/kthread.c:857)
[   37.994510][  T358]  ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
| [   38.899338][  T363] ------------[ cut here ]------------
| [   38.899472][  T363] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: ip/363
| [   38.899676][  T363] Modules linked in:
| [   38.900061][  T363] Tainted: [B]=BAD_PAGE, [W]=WARN
[   38.900199][  T363] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   38.900374][  T363] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[   38.900517][  T363] Code: c7 10 64 2a a7 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a a7          	adc    %ah,-0x59(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[   38.901008][  T363] RSP: 0018:ffa0000001fd76b8 EFLAGS: 00010046
[   38.901183][  T363] RAX: 0000000000000220 RBX: ff1100000b353b60 RCX: 0000000000000001
[   38.901394][  T363] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa89b4660
[   38.901600][  T363] RBP: ff1100000103c940 R08: ffffffffa41bcf0a R09: 1ffffffff51368cc
[   38.901805][  T363] R10: fffffbfff51368cd R11: fffffbfff51368cd R12: ffd40000002cd4c0
[   38.902012][  T363] R13: ff1100000b353b80 R14: ff1100000103c940 R15: ffd40000002cd4c0
[   38.902218][  T363] FS:  00007f178b8a4cc0(0000) GS:ff1100008c8ae000(0000) knlGS:0000000000000000
[   38.902463][  T363] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   38.902636][  T363] CR2: 00007efcb66c6c84 CR3: 0000000004d1d003 CR4: 0000000000771ef0
[   38.902841][  T363] PKRU: 55555554
[   38.902944][  T363] Call Trace:
[   38.903046][  T363]  <TASK>
[   38.903116][  T363]  check_bytes_and_report.cold (mm/slub.c:1359)
[   38.903256][  T363]  check_object (mm/slub.c:1507)
[   38.903394][  T363]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[   38.903531][  T363]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   38.903668][  T363]  free_to_partial_list (mm/slub.c:5631)
[   38.903805][  T363]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   38.903945][  T363]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[   38.904082][  T363]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[   38.904220][  T363]  __kasan_slab_alloc (mm/kasan/common.c:350)
[   38.904360][  T363]  kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5010)
[   38.904496][  T363]  ? __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[   38.904633][  T363]  __alloc_object (mm/kmemleak.c:504 (discriminator 1) mm/kmemleak.c:686 (discriminator 1))
[   38.904770][  T363]  __create_object (mm/kmemleak.c:801)
[   38.904905][  T363]  ? kasan_save_track (mm/kasan/common.c:78)
[   38.905042][  T363]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4696 mm/slub.c:4996 mm/slub.c:5010)
[   38.905177][  T363]  ? __pmd_alloc (mm/memory.c:7721 (discriminator 7) ./include/linux/mm.h:3884 (discriminator 7) ./include/linux/mm.h:3996 (discriminator 7) ./include/linux/mm.h:4024 (discriminator 7) ./include/asm-generic/pgalloc.h:146 (discriminator 7) mm/memory.c:6962 (discriminator 7))
[   38.905318][  T363]  __pmd_alloc (mm/memory.c:7721 (discriminator 7) ./include/linux/mm.h:3884 (discriminator 7) ./include/linux/mm.h:3996 (discriminator 7) ./include/linux/mm.h:4024 (discriminator 7) ./include/asm-generic/pgalloc.h:146 (discriminator 7) mm/memory.c:6962 (discriminator 7))
[   38.905420][  T363]  ? __p4d_alloc (./include/linux/spinlock.h:401 mm/memory.c:6926)
[   38.905557][  T363]  __handle_mm_fault (./include/linux/mm.h:3710 (discriminator 2) mm/memory.c:6656 (discriminator 2))
[   38.905694][  T363]  ? __pmd_alloc (./include/linux/mm.h:1762)
[   38.905831][  T363]  handle_mm_fault (mm/memory.c:6876)
[   38.905966][  T363]  ? vma_pgtable_walk_end (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 ./include/linux/mm.h:1176 ./include/linux/hugetlb_inline.h:11 ./include/linux/hugetlb_inline.h:25 mm/memory.c:7743)
[   38.906103][  T363]  faultin_page (mm/gup.c:1126)
[   38.906240][  T363]  __get_user_pages (mm/gup.c:1428 (discriminator 1))
[   38.906377][  T363]  ? follow_page_mask (mm/gup.c:958)
[   38.906513][  T363]  ? find_vma_intersection (mm/mmap.c:906)
[   38.906650][  T363]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   38.906786][  T363]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[   38.906922][  T363]  get_user_pages_remote (mm/gup.c:1692 mm/gup.c:2609)
[   38.907060][  T363]  ? down_read (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:3297 kernel/locking/rwsem.c:251 kernel/locking/rwsem.c:1290 kernel/locking/rwsem.c:1304 kernel/locking/rwsem.c:1576)
[   38.907163][  T363]  ? down_read (kernel/locking/rwsem.c:1298 (discriminator 1) kernel/locking/rwsem.c:1304 (discriminator 1) kernel/locking/rwsem.c:1576 (discriminator 1))
[   38.907302][  T363]  ? __get_user_pages (mm/gup.c:1496 (discriminator 2))
[   38.907439][  T363]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   38.907576][  T363]  get_arg_page (fs/exec.c:165)
[   38.907711][  T363]  ? alloc_bprm (fs/exec.c:1512 (discriminator 1))
[   38.907846][  T363]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[   38.907981][  T363]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   38.908118][  T363]  copy_string_kernel (fs/exec.c:571)
[   38.908256][  T363]  ? get_user_arg_ptr.isra.0 (fs/exec.c:322 (discriminator 4))
[   38.908393][  T363]  do_execveat_common.isra.0 (fs/exec.c:1916)
[   38.908529][  T363]  __x64_sys_execve (fs/exec.c:2018 (discriminator 2) fs/exec.c:2012 (discriminator 2) fs/exec.c:2012 (discriminator 2))
[   38.908665][  T363]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[   38.908800][  T363]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[   38.908935][  T363]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   38.909102][  T363] RIP: 0033:0x7f178bb5af4b
[   38.909251][  T363] Code: 0f 1e fa 48 8b 05 75 e0 12 00 48 8b 10 e9 0d 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d de 12 00 f7 d8 64 89 01 48
All code
========
   0:	0f 1e fa             	nop    %edx
   3:	48 8b 05 75 e0 12 00 	mov    0x12e075(%rip),%rax        # 0x12e07f
   a:	48 8b 10             	mov    (%rax),%rdx
   d:	e9 0d 00 00 00       	jmp    0x1f
  12:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  19:	00 00 00 
  1c:	0f 1f 00             	nopl   (%rax)
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 3b 00 00 00       	mov    $0x3b,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12deb7
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d 7d de 12 00 	mov    0x12de7d(%rip),%rcx        # 0x12de8d
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[   38.909738][  T363] RSP: 002b:00007ffe2947a628 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
[   38.909946][  T363] RAX: ffffffffffffffda RBX: 00007ffe2947ce57 RCX: 00007f178bb5af4b
[   38.910151][  T363] RDX: 00007ffe2947aac8 RSI: 00007ffe2947aa98 RDI: 00007ffe2947a630
[   38.910361][  T363] RBP: 00007ffe2947a740 R08: 0000000000000000 R09: 000000000000009f
[   38.910567][  T363] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe2947ce3e


Finger prints:
print_report:kasan_report:bond_update_slave_arr:bond_enslave:do_set_master
object_err:check_object:free_debug_processing:free_to_partial_list:qlist_free_all