[ 361.026740][ T1051] [Right Redzone overwritten] 0xff11000004cb8f40-0xff11000004cb8f47 @offset=3904. First byte 0x0 instead of 0xcc [ 361.027071][ T1051] ============================================================================= [ 361.027298][ T1051] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 361.027486][ T1051] ----------------------------------------------------------------------------- [ 361.027486][ T1051] [ 361.027748][ T1051] Allocated in bond_update_slave_arr+0x166/0xd70 age=242131 cpu=3 pid=1009 [ 361.027970][ T1051] bond_update_slave_arr+0x166/0xd70 [ 361.028103][ T1051] bond_enslave+0x447f/0x5100 [ 361.028230][ T1051] do_set_master+0x3b2/0x780 [ 361.028361][ T1051] do_setlink.isra.0+0x9f4/0x2bb0 [ 361.028491][ T1051] rtnl_newlink+0x9f1/0x11c0 [ 361.028622][ T1051] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 361.028749][ T1051] netlink_rcv_skb+0x14e/0x3a0 [ 361.028876][ T1051] netlink_unicast+0x486/0x750 [ 361.029003][ T1051] netlink_sendmsg+0x735/0xc60 [ 361.029131][ T1051] ____sys_sendmsg+0x415/0x880 [ 361.029260][ T1051] ___sys_sendmsg+0x14e/0x1d0 [ 361.029383][ T1051] __sys_sendmsg+0x12c/0x1d0 [ 361.029513][ T1051] do_syscall_64+0xff/0x530 [ 361.029644][ T1051] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.029803][ T1051] Freed in qlist_free_all+0x57/0x110 age=242190 cpu=0 pid=1008 [ 361.029994][ T1051] kasan_quarantine_reduce+0x196/0x240 [ 361.030124][ T1051] __kasan_slab_alloc+0x4b/0x70 [ 361.030248][ T1051] __kmalloc_cache_noprof+0x23e/0x620 [ 361.030375][ T1051] ovl_open+0x1ef/0x2f0 [ 361.030471][ T1051] do_dentry_open+0x408/0x1310 [ 361.030602][ T1051] vfs_open+0x7a/0x440 [ 361.030696][ T1051] do_open+0x646/0xdd0 [ 361.030792][ T1051] path_openat+0x1d0/0x3b0 [ 361.030917][ T1051] do_file_open+0x209/0x480 [ 361.031041][ T1051] do_sys_openat2+0xe0/0x170 [ 361.031171][ T1051] __x64_sys_openat+0x10e/0x210 [ 361.031296][ T1051] do_syscall_64+0xff/0x530 [ 361.031422][ T1051] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.031585][ T1051] Slab 0xffd4000000132e00 objects=21 used=18 fp=0xff11000004cb8c20 flags=0x80000000000200(workingset|node=0|zone=1) [ 361.031868][ T1051] Object 0xff11000004cb8f20 @offset=3872 fp=0x0000000000000000 [ 361.031868][ T1051] [ 361.032086][ T1051] Redzone ff11000004cb8f00: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.032340][ T1051] Redzone ff11000004cb8f10: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.032598][ T1051] Object ff11000004cb8f20: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 361.032852][ T1051] Object ff11000004cb8f30: 00 00 00 00 00 00 00 00 00 d8 a3 0d 00 00 11 ff ................ [ 361.033104][ T1051] Redzone ff11000004cb8f40: 00 04 a8 0c 00 00 11 ff ........ [ 361.033326][ T1051] Padding ff11000004cb8fb8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 361.033567][ T1051] ------------[ cut here ]------------ [ 361.033700][ T1051] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: modprobe/1051 [ 361.033900][ T1051] Modules linked in: [ 361.034007][ T1051] CPU: 3 UID: 0 PID: 1051 Comm: modprobe Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 361.034274][ T1051] Tainted: [B]=BAD_PAGE, [W]=WARN [ 361.034406][ T1051] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 361.034573][ T1051] RIP: 0010:object_err+0x68/0x70 [ 361.034713][ T1051] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 361.035191][ T1051] RSP: 0018:ffa000000020f718 EFLAGS: 00010046 [ 361.035360][ T1051] RAX: 0000000000000220 RBX: ff11000004cb8f20 RCX: 0000000000000001 [ 361.035558][ T1051] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660 [ 361.035765][ T1051] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc [ 361.035962][ T1051] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000132e00 [ 361.036160][ T1051] R13: ff11000004cb8f40 R14: ff1100000103c940 R15: ffd4000000132e00 [ 361.036363][ T1051] FS: 00007f8269dbe780(0000) GS:ff1100009f22e000(0000) knlGS:0000000000000000 [ 361.036601][ T1051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.036771][ T1051] CR2: 0000557567327000 CR3: 000000000c272005 CR4: 0000000000771ef0 [ 361.036970][ T1051] PKRU: 55555554 [ 361.037071][ T1051] Call Trace: [ 361.037172][ T1051] [ 361.037241][ T1051] check_bytes_and_report.cold+0x43/0x5f [ 361.037374][ T1051] check_object+0x19c/0x340 [ 361.037554][ T1051] free_debug_processing+0x135/0x230 [ 361.037693][ T1051] ? qlist_free_all+0x57/0x110 [ 361.037868][ T1051] free_to_partial_list+0x83/0x310 [ 361.037996][ T1051] ? qlist_free_all+0x57/0x110 [ 361.038170][ T1051] qlist_free_all+0x5c/0x110 [ 361.038300][ T1051] kasan_quarantine_reduce+0x196/0x240 [ 361.038476][ T1051] __kasan_slab_alloc+0x4b/0x70 [ 361.038612][ T1051] __kmalloc_cache_noprof+0x23e/0x620 [ 361.038787][ T1051] ? ovl_open+0x1ef/0x2f0 [ 361.038887][ T1051] ovl_open+0x1ef/0x2f0 [ 361.039029][ T1051] ? ovl_llseek+0x2e0/0x2e0 [ 361.039160][ T1051] ? rcu_is_watching+0x16/0xd0 [ 361.039338][ T1051] ? lock_release+0x184/0x1f0 [ 361.039469][ T1051] ? do_raw_spin_unlock+0x59/0x250 [ 361.039647][ T1051] ? ovl_llseek+0x2e0/0x2e0 [ 361.039779][ T1051] do_dentry_open+0x408/0x1310 [ 361.039970][ T1051] vfs_open+0x7a/0x440 [ 361.040070][ T1051] ? may_open+0xe6/0x330 [ 361.040168][ T1051] ? complete_walk+0xd8/0x290 [ 361.040340][ T1051] do_open+0x646/0xdd0 [ 361.040439][ T1051] ? open_last_lookups+0x410/0x1030 [ 361.040621][ T1051] path_openat+0x1d0/0x3b0 [ 361.040751][ T1051] ? kernel_tmpfile_open+0x70/0x70 [ 361.040927][ T1051] ? stack_trace_save+0x93/0xc0 [ 361.041059][ T1051] do_file_open+0x209/0x480 [ 361.041235][ T1051] ? path_openat+0x3b0/0x3b0 [ 361.041366][ T1051] ? _raw_spin_unlock+0x2d/0x50 [ 361.041544][ T1051] ? alloc_fd+0x33a/0x600 [ 361.041648][ T1051] do_sys_openat2+0xe0/0x170 [ 361.041825][ T1051] ? build_open_flags+0x6e0/0x6e0 [ 361.041954][ T1051] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 361.042164][ T1051] __x64_sys_openat+0x10e/0x210 [ 361.042293][ T1051] ? fput_close_sync+0xde/0x1b0 [ 361.042469][ T1051] ? __ia32_sys_open+0x1b0/0x1b0 [ 361.042604][ T1051] ? fpregs_restore_userregs+0x14b/0x300 [ 361.042783][ T1051] ? rcu_is_watching+0x16/0xd0 [ 361.042915][ T1051] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 361.043120][ T1051] ? trace_hardirqs_off_finish+0x147/0x1a0 [ 361.043282][ T1051] do_syscall_64+0xff/0x530 [ 361.043458][ T1051] ? exc_page_fault+0xee/0x100 [ 361.043592][ T1051] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.043800][ T1051] RIP: 0033:0x7f8269e3254e [ 361.043984][ T1051] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa [ 361.044495][ T1051] RSP: 002b:00007fff313d3340 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 361.044743][ T1051] RAX: ffffffffffffffda RBX: 0000557567325329 RCX: 00007f8269e3254e [ 361.044983][ T1051] RDX: 0000000000080000 RSI: 00007fff313d3530 RDI: ffffffffffffff9c [ 361.045226][ T1051] RBP: 00007fff313d3350 R08: 0000000000000000 R09: 0000000000000000 [ 361.045425][ T1051] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557567325329 [ 361.045671][ T1051] R13: 0000557545cd44ef R14: 00005575673254f0 R15: 0000557567325120 [ 361.045915][ T1051] [ 361.046014][ T1051] irq event stamp: 0 [ 361.046157][ T1051] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 361.046322][ T1051] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 361.046597][ T1051] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 361.046867][ T1051] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 361.047028][ T1051] ---[ end trace 0000000000000000 ]--- [ 361.047157][ T1051] FIX kmalloc-32: Restoring Right Redzone 0xff11000004cb8f40-0xff11000004cb8f47=0xcc [ 361.047415][ T1051] FIX kmalloc-32: Object at 0xff11000004cb8f20 not freed [ 361.047616][ T1051] [kmalloc Redzone overwritten] 0xff110000090783f8-0xff110000090783ff @offset=1016. First byte 0x0 instead of 0xcc [ 361.047927][ T1051] ============================================================================= [ 361.048186][ T1051] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 361.048372][ T1051] ----------------------------------------------------------------------------- [ 361.048372][ T1051] [ 361.048666][ T1051] Allocated in bond_update_slave_arr+0x166/0xd70 age=242190 cpu=0 pid=1008 [ 361.048925][ T1051] bond_update_slave_arr+0x166/0xd70 [ 361.049095][ T1051] bond_enslave+0x447f/0x5100 [ 361.049219][ T1051] do_set_master+0x3b2/0x780 [ 361.049388][ T1051] do_setlink.isra.0+0x9f4/0x2bb0 [ 361.049514][ T1051] rtnl_newlink+0x9f1/0x11c0 [ 361.049686][ T1051] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 361.049811][ T1051] netlink_rcv_skb+0x14e/0x3a0 [ 361.049979][ T1051] netlink_unicast+0x486/0x750 [ 361.050102][ T1051] netlink_sendmsg+0x735/0xc60 [ 361.050269][ T1051] ____sys_sendmsg+0x415/0x880 [ 361.050391][ T1051] ___sys_sendmsg+0x14e/0x1d0 [ 361.050558][ T1051] __sys_sendmsg+0x12c/0x1d0 [ 361.050689][ T1051] do_syscall_64+0xff/0x530 [ 361.050855][ T1051] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.051013][ T1051] Freed in qlist_free_all+0x57/0x110 age=242296 cpu=3 pid=1004 [ 361.051240][ T1051] kasan_quarantine_reduce+0x196/0x240 [ 361.051406][ T1051] __kasan_slab_alloc+0x4b/0x70 [ 361.051529][ T1051] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 361.051695][ T1051] alloc_empty_backing_file+0x36/0xc0 [ 361.051817][ T1051] backing_file_open+0x5a/0xf0 [ 361.051983][ T1051] ovl_open_realfile+0x2bb/0x370 [ 361.052110][ T1051] ovl_open+0x1ab/0x2f0 [ 361.052202][ T1051] do_dentry_open+0x408/0x1310 [ 361.052367][ T1051] vfs_open+0x7a/0x440 [ 361.052459][ T1051] do_open+0x646/0xdd0 [ 361.052597][ T1051] path_openat+0x1d0/0x3b0 [ 361.052721][ T1051] do_file_open+0x209/0x480 [ 361.052887][ T1051] do_sys_openat2+0xe0/0x170 [ 361.053010][ T1051] __x64_sys_openat+0x10e/0x210 [ 361.053175][ T1051] do_syscall_64+0xff/0x530 [ 361.053299][ T1051] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.053495][ T1051] Slab 0xffd4000000241e00 objects=21 used=11 fp=0xff110000090789e0 flags=0x80000000000200(workingset|node=0|zone=1) [ 361.053818][ T1051] Object 0xff110000090783e0 @offset=992 fp=0xff11000009078ce0 [ 361.053818][ T1051] [ 361.054071][ T1051] Redzone ff110000090783c0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.054364][ T1051] Redzone ff110000090783d0: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.054661][ T1051] Object ff110000090783e0: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 361.054952][ T1051] Object ff110000090783f0: 00 00 00 00 00 00 00 00 00 d8 a3 0d 00 00 11 ff ................ [ 361.055239][ T1051] Redzone ff11000009078400: cc cc cc cc cc cc cc cc ........ [ 361.055499][ T1051] Padding ff11000009078478: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 361.055767][ T1051] ------------[ cut here ]------------ [ 361.055892][ T1051] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: modprobe/1051 [ 361.056127][ T1051] Modules linked in: [ 361.056226][ T1051] CPU: 3 UID: 0 PID: 1051 Comm: modprobe Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 361.056532][ T1051] Tainted: [B]=BAD_PAGE, [W]=WARN [ 361.056713][ T1051] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 361.056876][ T1051] RIP: 0010:object_err+0x68/0x70 [ 361.057058][ T1051] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 361.057619][ T1051] RSP: 0018:ffa000000020f728 EFLAGS: 00010046 [ 361.057783][ T1051] RAX: 0000000000000220 RBX: ff110000090783e0 RCX: 0000000000000001 [ 361.058020][ T1051] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660 [ 361.058261][ T1051] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc [ 361.058454][ T1051] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000241e00 [ 361.058697][ T1051] R13: ff110000090783f8 R14: ff1100000103c940 R15: ffd4000000241e00 [ 361.058939][ T1051] FS: 00007f8269dbe780(0000) GS:ff1100009f22e000(0000) knlGS:0000000000000000 [ 361.059213][ T1051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.059376][ T1051] CR2: 0000557567327000 CR3: 000000000c272005 CR4: 0000000000771ef0 [ 361.059617][ T1051] PKRU: 55555554 [ 361.059760][ T1051] Call Trace: [ 361.059858][ T1051] [ 361.059923][ T1051] check_bytes_and_report.cold+0x43/0x5f [ 361.060098][ T1051] check_object+0x31f/0x340 [ 361.060228][ T1051] free_debug_processing+0x135/0x230 [ 361.060400][ T1051] ? qlist_free_all+0x57/0x110 [ 361.060527][ T1051] free_to_partial_list+0x83/0x310 [ 361.060702][ T1051] ? qlist_free_all+0x57/0x110 [ 361.060833][ T1051] qlist_free_all+0x5c/0x110 [ 361.061004][ T1051] kasan_quarantine_reduce+0x196/0x240 [ 361.061133][ T1051] __kasan_slab_alloc+0x4b/0x70 [ 361.061308][ T1051] __kmalloc_cache_noprof+0x23e/0x620 [ 361.061435][ T1051] ? ovl_open+0x1ef/0x2f0 [ 361.061580][ T1051] ovl_open+0x1ef/0x2f0 [ 361.061682][ T1051] ? ovl_llseek+0x2e0/0x2e0 [ 361.061811][ T1051] ? rcu_is_watching+0x16/0xd0 [ 361.061985][ T1051] ? lock_release+0x184/0x1f0 [ 361.062117][ T1051] ? do_raw_spin_unlock+0x59/0x250 [ 361.062291][ T1051] ? ovl_llseek+0x2e0/0x2e0 [ 361.062423][ T1051] do_dentry_open+0x408/0x1310 [ 361.062601][ T1051] vfs_open+0x7a/0x440 [ 361.062700][ T1051] ? may_open+0xe6/0x330 [ 361.062841][ T1051] ? complete_walk+0xd8/0x290 [ 361.062974][ T1051] do_open+0x646/0xdd0 [ 361.063120][ T1051] ? open_last_lookups+0x410/0x1030 [ 361.063250][ T1051] path_openat+0x1d0/0x3b0 [ 361.063423][ T1051] ? kernel_tmpfile_open+0x70/0x70 [ 361.063554][ T1051] ? stack_trace_save+0x93/0xc0 [ 361.063733][ T1051] do_file_open+0x209/0x480 [ 361.063865][ T1051] ? path_openat+0x3b0/0x3b0 [ 361.064040][ T1051] ? _raw_spin_unlock+0x2d/0x50 [ 361.064170][ T1051] ? alloc_fd+0x33a/0x600 [ 361.064266][ T1051] do_sys_openat2+0xe0/0x170 [ 361.064438][ T1051] ? build_open_flags+0x6e0/0x6e0 [ 361.064571][ T1051] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 361.064780][ T1051] __x64_sys_openat+0x10e/0x210 [ 361.064950][ T1051] ? fput_close_sync+0xde/0x1b0 [ 361.065080][ T1051] ? __ia32_sys_open+0x1b0/0x1b0 [ 361.065254][ T1051] ? fpregs_restore_userregs+0x14b/0x300 [ 361.065383][ T1051] ? rcu_is_watching+0x16/0xd0 [ 361.065554][ T1051] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 361.065718][ T1051] ? trace_hardirqs_off_finish+0x147/0x1a0 [ 361.065921][ T1051] do_syscall_64+0xff/0x530 [ 361.066052][ T1051] ? exc_page_fault+0xee/0x100 [ 361.066225][ T1051] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.066385][ T1051] RIP: 0033:0x7f8269e3254e [ 361.066571][ T1051] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa [ 361.067083][ T1051] RSP: 002b:00007fff313d3340 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 361.067282][ T1051] RAX: ffffffffffffffda RBX: 0000557567325329 RCX: 00007f8269e3254e [ 361.067522][ T1051] RDX: 0000000000080000 RSI: 00007fff313d3530 RDI: ffffffffffffff9c [ 361.067766][ T1051] RBP: 00007fff313d3350 R08: 0000000000000000 R09: 0000000000000000 [ 361.068007][ T1051] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557567325329 [ 361.068199][ T1051] R13: 0000557545cd44ef R14: 00005575673254f0 R15: 0000557567325120 [ 361.068438][ T1051] [ 361.068584][ T1051] irq event stamp: 0 [ 361.068681][ T1051] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 361.068886][ T1051] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 361.069115][ T1051] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 361.069382][ T1051] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 361.069589][ T1051] ---[ end trace 0000000000000000 ]--- [ 361.069716][ T1051] FIX kmalloc-32: Restoring kmalloc Redzone 0xff110000090783f8-0xff110000090783ff=0xcc [ 361.069970][ T1051] FIX kmalloc-32: Object at 0xff110000090783e0 not freed [ 361.101724][ T113] [kmalloc Redzone overwritten] 0xff11000004e3a578-0xff11000004e3a57f @offset=1400. First byte 0x0 instead of 0xcc [ 361.102022][ T113] ============================================================================= [ 361.102243][ T113] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 361.102431][ T113] ----------------------------------------------------------------------------- [ 361.102431][ T113] [ 361.102682][ T113] Allocated in bond_update_slave_arr+0x166/0xd70 age=237583 cpu=3 pid=1030 [ 361.102900][ T113] bond_update_slave_arr+0x166/0xd70 [ 361.103027][ T113] bond_enslave+0x447f/0x5100 [ 361.103151][ T113] do_set_master+0x3b2/0x780 [ 361.103276][ T113] do_setlink.isra.0+0x9f4/0x2bb0 [ 361.103400][ T113] rtnl_newlink+0x9f1/0x11c0 [ 361.103527][ T113] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 361.103658][ T113] netlink_rcv_skb+0x14e/0x3a0 [ 361.103783][ T113] netlink_unicast+0x486/0x750 [ 361.103908][ T113] netlink_sendmsg+0x735/0xc60 [ 361.104034][ T113] ____sys_sendmsg+0x415/0x880 [ 361.104157][ T113] ___sys_sendmsg+0x14e/0x1d0 [ 361.104282][ T113] __sys_sendmsg+0x12c/0x1d0 [ 361.104408][ T113] do_syscall_64+0xff/0x530 [ 361.104532][ T113] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.104706][ T113] Freed in qlist_free_all+0x57/0x110 age=237718 cpu=0 pid=1025 [ 361.104894][ T113] kasan_quarantine_reduce+0x196/0x240 [ 361.105018][ T113] __kasan_slab_alloc+0x4b/0x70 [ 361.105141][ T113] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 361.105264][ T113] __alloc_object+0x30/0x260 [ 361.105388][ T113] __create_object+0x30/0x110 [ 361.105510][ T113] kmem_cache_alloc_noprof+0x467/0x5c0 [ 361.105639][ T113] do_getname.isra.0+0x32/0x240 [ 361.105762][ T113] do_sys_openat2+0xac/0x170 [ 361.105885][ T113] __x64_sys_openat+0x10e/0x210 [ 361.106008][ T113] do_syscall_64+0xff/0x530 [ 361.106132][ T113] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.106289][ T113] Slab 0xffd4000000138e80 objects=21 used=18 fp=0xff11000004e3ab60 flags=0x80000000000200(workingset|node=0|zone=1) [ 361.106573][ T113] Object 0xff11000004e3a560 @offset=1376 fp=0xff11000004e3ae60 [ 361.106573][ T113] [ 361.106784][ T113] Redzone ff11000004e3a540: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.107037][ T113] Redzone ff11000004e3a550: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.107284][ T113] Object ff11000004e3a560: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 361.107534][ T113] Object ff11000004e3a570: 00 00 00 00 00 00 00 00 00 10 d8 0f 00 00 11 ff ................ [ 361.107784][ T113] Redzone ff11000004e3a580: cc cc cc cc cc cc cc cc ........ [ 361.108002][ T113] Padding ff11000004e3a5f8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 361.108228][ T113] ------------[ cut here ]------------ [ 361.108354][ T113] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#0: su/113 [ 361.108549][ T113] Modules linked in: [ 361.108654][ T113] CPU: 0 UID: 0 PID: 113 Comm: su Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 361.108918][ T113] Tainted: [B]=BAD_PAGE, [W]=WARN [ 361.109048][ T113] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 361.109213][ T113] RIP: 0010:object_err+0x68/0x70 [ 361.109350][ T113] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 361.109820][ T113] RSP: 0018:ffa0000000507728 EFLAGS: 00010046 [ 361.109984][ T113] RAX: 0000000000000220 RBX: ff11000004e3a560 RCX: 0000000000000001 [ 361.110181][ T113] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660 [ 361.110375][ T113] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc [ 361.110574][ T113] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000138e80 [ 361.110768][ T113] R13: ff11000004e3a578 R14: ff1100000103c940 R15: ffd4000000138e80 [ 361.110962][ T113] FS: 00007fe548f9d7c0(0000) GS:ff1100009f0ae000(0000) knlGS:0000000000000000 [ 361.111192][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.111356][ T113] CR2: 000055a3ed4dd3c4 CR3: 000000000a525005 CR4: 0000000000771ef0 [ 361.111552][ T113] PKRU: 55555554 [ 361.111656][ T113] Call Trace: [ 361.111753][ T113] [ 361.111820][ T113] check_bytes_and_report.cold+0x43/0x5f [ 361.111950][ T113] check_object+0x31f/0x340 [ 361.112080][ T113] free_debug_processing+0x135/0x230 [ 361.112208][ T113] ? qlist_free_all+0x57/0x110 [ 361.112335][ T113] free_to_partial_list+0x83/0x310 [ 361.112464][ T113] ? qlist_free_all+0x57/0x110 [ 361.112598][ T113] qlist_free_all+0x5c/0x110 [ 361.112727][ T113] kasan_quarantine_reduce+0x196/0x240 [ 361.112855][ T113] __kasan_slab_alloc+0x4b/0x70 [ 361.112984][ T113] __kmalloc_cache_noprof+0x23e/0x620 [ 361.113114][ T113] ? ovl_open+0x1ef/0x2f0 [ 361.113212][ T113] ovl_open+0x1ef/0x2f0 [ 361.113310][ T113] ? ovl_llseek+0x2e0/0x2e0 [ 361.113440][ T113] ? rcu_is_watching+0x16/0xd0 [ 361.113573][ T113] ? lock_release+0x184/0x1f0 [ 361.113703][ T113] ? do_raw_spin_unlock+0x59/0x250 [ 361.113830][ T113] ? ovl_llseek+0x2e0/0x2e0 [ 361.113958][ T113] do_dentry_open+0x408/0x1310 [ 361.114086][ T113] vfs_open+0x7a/0x440 [ 361.114186][ T113] ? may_open+0xe6/0x330 [ 361.114283][ T113] ? complete_walk+0xd8/0x290 [ 361.114411][ T113] do_open+0x646/0xdd0 [ 361.114507][ T113] ? open_last_lookups+0x410/0x1030 [ 361.114643][ T113] path_openat+0x1d0/0x3b0 [ 361.114773][ T113] ? kernel_tmpfile_open+0x70/0x70 [ 361.114902][ T113] ? stack_trace_save+0x93/0xc0 [ 361.115032][ T113] do_file_open+0x209/0x480 [ 361.115160][ T113] ? path_openat+0x3b0/0x3b0 [ 361.115291][ T113] ? _raw_spin_unlock+0x2d/0x50 [ 361.115423][ T113] ? alloc_fd+0x33a/0x600 [ 361.115521][ T113] do_sys_openat2+0xe0/0x170 [ 361.115658][ T113] ? build_open_flags+0x6e0/0x6e0 [ 361.115790][ T113] __x64_sys_openat+0x10e/0x210 [ 361.115918][ T113] ? __ia32_sys_open+0x1b0/0x1b0 [ 361.116047][ T113] ? rcu_is_watching+0x16/0xd0 [ 361.116174][ T113] ? trace_irq_enable.constprop.0+0x9b/0x160 [ 361.116336][ T113] ? trace_hardirqs_off_finish+0x147/0x1a0 [ 361.116496][ T113] do_syscall_64+0xff/0x530 [ 361.116631][ T113] ? exc_page_fault+0xee/0x100 [ 361.116761][ T113] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.116923][ T113] RIP: 0033:0x7fe54906054e [ 361.117060][ T113] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa [ 361.117521][ T113] RSP: 002b:00007fff4d9badb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 361.117722][ T113] RAX: ffffffffffffffda RBX: 000055a3ed4cc1a0 RCX: 00007fe54906054e [ 361.117919][ T113] RDX: 0000000000080000 RSI: 000055a3ed4f8650 RDI: ffffffffffffff9c [ 361.118115][ T113] RBP: 00007fff4d9badc0 R08: 0000000000000000 R09: 0000000000000000 [ 361.118309][ T113] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 361.118504][ T113] R13: 00007fe548fb3cda R14: 00007fe548fb3cd9 R15: 0000000000000001 [ 361.118701][ T113] [ 361.118798][ T113] irq event stamp: 123634 [ 361.118896][ T113] hardirqs last enabled at (123633): [] _raw_spin_unlock_irqrestore+0x53/0x80 [ 361.119150][ T113] hardirqs last disabled at (123634): [] __schedule+0x1246/0x20e0 [ 361.119377][ T113] softirqs last enabled at (123526): [] fpu_clone+0xd9/0x410 [ 361.119605][ T113] softirqs last disabled at (123524): [] fpu_clone+0x82/0x410 [ 361.119829][ T113] ---[ end trace 0000000000000000 ]--- [ 361.119958][ T113] FIX kmalloc-32: Restoring kmalloc Redzone 0xff11000004e3a578-0xff11000004e3a57f=0xcc [ 361.120173][ T113] FIX kmalloc-32: Object at 0xff11000004e3a560 not freed [ 361.149233][ T1055] [Right Redzone overwritten] 0xff11000008a56640-0xff11000008a56647 @offset=1600. First byte 0x0 instead of 0xcc [ 361.149523][ T1055] ============================================================================= [ 361.149748][ T1055] BUG kmalloc-32 (Tainted: G B W ): Object corrupt [ 361.149934][ T1055] ----------------------------------------------------------------------------- [ 361.149934][ T1055] [ 361.150179][ T1055] Allocated in bond_update_slave_arr+0x166/0xd70 age=237596 cpu=0 pid=1031 [ 361.150398][ T1055] bond_update_slave_arr+0x166/0xd70 [ 361.150524][ T1055] bond_enslave+0x447f/0x5100 [ 361.150654][ T1055] do_set_master+0x3b2/0x780 [ 361.150777][ T1055] do_setlink.isra.0+0x9f4/0x2bb0 [ 361.150902][ T1055] rtnl_newlink+0x9f1/0x11c0 [ 361.151024][ T1055] rtnetlink_rcv_msg+0x6fd/0xbd0 [ 361.151148][ T1055] netlink_rcv_skb+0x14e/0x3a0 [ 361.151274][ T1055] netlink_unicast+0x486/0x750 [ 361.151398][ T1055] netlink_sendmsg+0x735/0xc60 [ 361.151522][ T1055] ____sys_sendmsg+0x415/0x880 [ 361.151649][ T1055] ___sys_sendmsg+0x14e/0x1d0 [ 361.151772][ T1055] __sys_sendmsg+0x12c/0x1d0 [ 361.151897][ T1055] do_syscall_64+0xff/0x530 [ 361.152023][ T1055] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.152178][ T1055] Freed in qlist_free_all+0x57/0x110 age=237689 cpu=0 pid=1028 [ 361.152367][ T1055] kasan_quarantine_reduce+0x196/0x240 [ 361.152493][ T1055] __kasan_slab_alloc+0x4b/0x70 [ 361.152620][ T1055] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 361.152743][ T1055] vm_area_alloc+0x1f/0x150 [ 361.152866][ T1055] __mmap_new_vma+0x106/0x1780 [ 361.152990][ T1055] __mmap_region+0x86c/0xcd0 [ 361.153112][ T1055] mmap_region+0x2e1/0x540 [ 361.153233][ T1055] do_mmap+0xf6b/0x16e0 [ 361.153326][ T1055] vm_mmap_pgoff+0x16c/0x320 [ 361.153449][ T1055] do_syscall_64+0xff/0x530 [ 361.153571][ T1055] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.153722][ T1055] Slab 0xffd4000000229580 objects=21 used=20 fp=0xff11000008a56aa0 flags=0x80000000000200(workingset|node=0|zone=1) [ 361.153994][ T1055] Object 0xff11000008a56620 @offset=1568 fp=0xff11000008a563e0 [ 361.153994][ T1055] [ 361.154206][ T1055] Redzone ff11000008a56600: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.154453][ T1055] Redzone ff11000008a56610: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ [ 361.154703][ T1055] Object ff11000008a56620: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 361.154954][ T1055] Object ff11000008a56630: 00 00 00 00 00 00 00 00 00 10 d8 0f 00 00 11 ff ................ [ 361.155196][ T1055] Redzone ff11000008a56640: 00 70 44 0d 00 00 11 ff .pD..... [ 361.155409][ T1055] Padding ff11000008a566b8: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ [ 361.155634][ T1055] ------------[ cut here ]------------ [ 361.155759][ T1055] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: modprobe/1055 [ 361.155947][ T1055] Modules linked in: [ 361.156046][ T1055] CPU: 3 UID: 0 PID: 1055 Comm: modprobe Tainted: G B W 7.2.0-virtme #1 PREEMPT(full) [ 361.156304][ T1055] Tainted: [B]=BAD_PAGE, [W]=WARN [ 361.156432][ T1055] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 361.156596][ T1055] RIP: 0010:object_err+0x68/0x70 [ 361.156731][ T1055] Code: c7 10 64 ea 8d e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89 [ 361.157184][ T1055] RSP: 0018:ffa00000038675d0 EFLAGS: 00010046 [ 361.157346][ T1055] RAX: 0000000000000220 RBX: ff11000008a56620 RCX: 0000000000000001 [ 361.157538][ T1055] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8f5b4660 [ 361.157735][ T1055] RBP: ff1100000103c940 R08: ffffffff8adbcf0a R09: 1ffffffff1eb68cc [ 361.157927][ T1055] R10: fffffbfff1eb68cd R11: fffffbfff1eb68cd R12: ffd4000000229580 [ 361.158121][ T1055] R13: ff11000008a56640 R14: ff1100000103c940 R15: ffd4000000229580 [ 361.158314][ T1055] FS: 00007f94f6583780(0000) GS:ff1100009f22e000(0000) knlGS:0000000000000000 [ 361.158536][ T1055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.158701][ T1055] CR2: 00007f94f6b603a2 CR3: 000000000caf4001 CR4: 0000000000771ef0 [ 361.158894][ T1055] PKRU: 55555554 [ 361.158991][ T1055] Call Trace: [ 361.159084][ T1055] [ 361.159149][ T1055] check_bytes_and_report.cold+0x43/0x5f [ 361.159276][ T1055] check_object+0x19c/0x340 [ 361.159402][ T1055] free_debug_processing+0x135/0x230 [ 361.159527][ T1055] ? qlist_free_all+0x57/0x110 [ 361.159660][ T1055] free_to_partial_list+0x83/0x310 [ 361.159787][ T1055] ? qlist_free_all+0x57/0x110 [ 361.159913][ T1055] qlist_free_all+0x5c/0x110 [ 361.160039][ T1055] kasan_quarantine_reduce+0x196/0x240 [ 361.160165][ T1055] __kasan_slab_alloc+0x4b/0x70 [ 361.160292][ T1055] kmem_cache_alloc_noprof+0x21f/0x5c0 [ 361.160420][ T1055] ? vm_area_dup+0x23/0x910 [ 361.160547][ T1055] vm_area_dup+0x23/0x910 [ 361.160646][ T1055] __split_vma+0x192/0xb90 [ 361.160776][ T1055] ? vma_complete+0x1240/0x1240 [ 361.160902][ T1055] ? do_raw_spin_lock+0x131/0x280 [ 361.161028][ T1055] ? folio_add_file_rmap_ptes+0x574/0x760 [ 361.161155][ T1055] vma_modify+0x315/0x430 [ 361.161250][ T1055] vma_modify_flags+0x281/0x440 [ 361.161376][ T1055] ? do_vmi_munmap+0x2d0/0x2d0 [ 361.161503][ T1055] mprotect_fixup+0x226/0xba0 [ 361.161635][ T1055] ? change_protection+0x190/0x190 [ 361.161762][ T1055] ? finish_fault+0x586/0xfc0 [ 361.161889][ T1055] ? rcu_is_watching+0x16/0xd0 [ 361.162014][ T1055] ? lock_acquire+0x13c/0x160 [ 361.162139][ T1055] ? rcu_is_watching+0x16/0xd0 [ 361.162266][ T1055] ? mas_prev_slot+0x2c4/0xfa0 [ 361.162397][ T1055] ? mas_next_slot+0x309/0x1330 [ 361.162525][ T1055] do_mprotect_pkey+0x6d9/0xb10 [ 361.162656][ T1055] ? mprotect_fixup+0xba0/0xba0 [ 361.162786][ T1055] ? __handle_mm_fault+0x3b7/0x5b0 [ 361.162914][ T1055] ? lock_release+0x184/0x1f0 [ 361.163042][ T1055] __x64_sys_mprotect+0x78/0xd0 [ 361.163168][ T1055] ? trace_hardirqs_on+0x36/0x40 [ 361.163296][ T1055] do_syscall_64+0xff/0x530 [ 361.163424][ T1055] ? exc_page_fault+0xee/0x100 [ 361.163550][ T1055] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 361.163712][ T1055] RIP: 0033:0x7f94f6e9e9ab [ 361.163849][ T1055] Code: 00 41 83 ca 40 0f 05 48 3d 00 f0 ff ff 76 94 f7 d8 89 05 08 59 01 00 e9 72 ff ff ff 0f 1f 00 f3 0f 1e fa b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d e5 58 01 00 f7 d8 89 01 48 83 [ 361.164299][ T1055] RSP: 002b:00007ffe324b2938 EFLAGS: 00000202 ORIG_RAX: 000000000000000a [ 361.164490][ T1055] RAX: ffffffffffffffda RBX: 00007f94f6e71050 RCX: 00007f94f6e9e9ab [ 361.164685][ T1055] RDX: 0000000000000001 RSI: 0000000000077000 RDI: 00007f94f6c99000 [ 361.164877][ T1055] RBP: 00007ffe324b2950 R08: 00007f94f6c99000 R09: 00007f94f65f8e90 [ 361.165069][ T1055] R10: 00007f94f6e71050 R11: 0000000000000202 R12: 0000000000000000 [ 361.165261][ T1055] R13: 0000000000000018 R14: 00007f94f6eb42e0 R15: 00007f94f6e71050 [ 361.165454][ T1055] [ 361.165550][ T1055] irq event stamp: 0 [ 361.165649][ T1055] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 361.165808][ T1055] hardirqs last disabled at (0): [] copy_process+0x1ccd/0x6240 [ 361.166029][ T1055] softirqs last enabled at (0): [] copy_process+0x1d21/0x6240 [ 361.166248][ T1055] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 361.166408][ T1055] ---[ end trace 0000000000000000 ]--- [ 361.166532][ T1055] FIX kmalloc-32: Restoring Right Redzone 0xff11000008a56640-0xff11000008a56647=0xcc [ 361.166745][ T1055] FIX kmalloc-32: Object at 0xff11000008a56620 not freed