[ 275.444489][ T1513] br0: port 1(s0) entered blocking state [ 275.444697][ T1513] br0: port 1(s0) entered disabled state [ 275.444895][ T1513] s0: entered allmulticast mode [ 275.447337][ T1513] s0: entered promiscuous mode [ 275.626519][ T1514] bond0: (slave eth0): making interface the new active one [ 275.627848][ T1514] bond0: (slave eth0): Enslaving as an active interface with an up link [ 275.628728][ T58] br0: port 1(s0) entered blocking state [ 275.628893][ T58] br0: port 1(s0) entered forwarding state [ 276.417927][ T1518] br0: port 2(s1) entered blocking state [ 276.418268][ T1518] br0: port 2(s1) entered disabled state [ 276.418580][ T1518] s1: entered allmulticast mode [ 276.420619][ T1518] s1: entered promiscuous mode [ 276.593850][ T1519] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 276.595254][ T58] br0: port 2(s1) entered blocking state [ 276.595497][ T58] br0: port 2(s1) entered forwarding state [ 278.170233][ T1527] br0: port 3(c0) entered blocking state [ 278.170553][ T1527] br0: port 3(c0) entered disabled state [ 278.170854][ T1527] c0: entered allmulticast mode [ 278.172758][ T1527] c0: entered promiscuous mode [ 278.402097][ T58] br0: port 3(c0) entered blocking state [ 278.402297][ T58] br0: port 3(c0) entered forwarding state [ 279.891585][ T1537] bond0 (unregistering): (slave eth0): Releasing backup interface [ 279.910214][ T1537] bond0 (unregistering): (slave eth1): Releasing backup interface [ 279.930045][ T1537] bond0 (unregistering): Released all slaves [ 279.944545][ T40] br0: port 1(s0) entered disabled state [ 279.946845][ T40] br0: port 2(s1) entered disabled state [ 280.464088][ T1541] bond0: (slave eth0): making interface the new active one [ 280.469831][ T1541] bond0: (slave eth0): Enslaving as an active interface with an up link [ 280.471325][ T40] br0: port 1(s0) entered blocking state [ 280.471606][ T40] br0: port 1(s0) entered forwarding state [ 280.644971][ T1542] bond0: (slave eth1): Enslaving as a backup interface with an up link [ 280.645702][ T37] br0: port 2(s1) entered blocking state [ 280.645977][ T37] br0: port 2(s1) entered forwarding state [ 282.798232][ T1553] eth0: entered promiscuous mode [ 301.910334][ T1599] eth0: left promiscuous mode [ 302.323788][ T1600] bond0 (unregistering): (slave eth0): Releasing backup interface [ 302.346989][ T1600] bond0 (unregistering): (slave eth1): Releasing backup interface [ 302.370681][ T1600] bond0 (unregistering): Released all slaves [ 302.381605][ T40] br0: port 1(s0) entered disabled state [ 302.389767][ T40] br0: port 2(s1) entered disabled state [ 302.925583][ T1604] bond0: (slave eth0): making interface the new active one [ 302.926265][ T1604] bond0: (slave eth0): Enslaving as an active interface with an up link [ 302.926789][ T37] br0: port 1(s0) entered blocking state [ 302.926964][ T37] br0: port 1(s0) entered forwarding state [ 303.103857][ T1605] bond0: (slave eth1): Enslaving as an active interface with an up link [ 303.104509][ T40] br0: port 2(s1) entered blocking state [ 303.104682][ T40] br0: port 2(s1) entered forwarding state [ 306.000788][ T1619] eth0: entered promiscuous mode [ 309.679868][ T1628] ================================================================== [ 309.680119][ T1628] BUG: KASAN: slab-use-after-free in ___neigh_create+0xd58/0xf30 [ 309.680334][ T1628] Write of size 8 at addr ffff888007fd5818 by task ping/1628 [ 309.680537][ T1628] [ 309.680611][ T1628] CPU: 1 UID: 0 PID: 1628 Comm: ping Not tainted 6.12.0-rc3-virtme #1 [ 309.680824][ T1628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 309.681138][ T1628] Call Trace: [ 309.681248][ T1628] [ 309.681322][ T1628] dump_stack_lvl+0x82/0xd0 [ 309.681470][ T1628] print_address_description.constprop.0+0x2c/0x3b0 [ 309.681648][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.681791][ T1628] print_report+0xb4/0x270 [ 309.681932][ T1628] ? kasan_addr_to_slab+0x25/0x80 [ 309.682075][ T1628] kasan_report+0xbd/0xf0 [ 309.682181][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.682341][ T1628] ___neigh_create+0xd58/0xf30 [ 309.682479][ T1628] ip_finish_output2+0xb73/0x17f0 [ 309.682620][ T1628] ? __ip_make_skb+0xfc3/0x1f70 [ 309.682758][ T1628] ? __pfx_ip_finish_output2+0x10/0x10 [ 309.682896][ T1628] ? __ip_finish_output+0x27/0x2e0 [ 309.683034][ T1628] ip_push_pending_frames+0x86/0x100 [ 309.683178][ T1628] ? raw_sendmsg+0x926/0x12d0 [ 309.683314][ T1628] raw_sendmsg+0xd89/0x12d0 [ 309.683451][ T1628] ? __pfx_raw_sendmsg+0x10/0x10 [ 309.683591][ T1628] ? __free_zapped_classes+0x141/0x1e0 [ 309.683730][ T1628] ? do_anonymous_page+0x34d/0x1330 [ 309.683871][ T1628] ? gup_fast_pte_range+0x98/0xae0 [ 309.684007][ T1628] ? __pfx___lock_release+0x10/0x10 [ 309.684143][ T1628] ? trace_lock_acquire+0x14d/0x1f0 [ 309.684279][ T1628] ? __might_fault+0xc3/0x170 [ 309.684413][ T1628] ? lock_acquire+0x32/0xc0 [ 309.684557][ T1628] ? __might_fault+0xc3/0x170 [ 309.684694][ T1628] ? __might_fault+0x11b/0x170 [ 309.684831][ T1628] __sys_sendto+0x32c/0x400 [ 309.684965][ T1628] ? reacquire_held_locks+0x22f/0x4f0 [ 309.685098][ T1628] ? __pfx___sys_sendto+0x10/0x10 [ 309.685238][ T1628] ? do_user_addr_fault+0x972/0xe30 [ 309.685375][ T1628] ? __pfx___lock_release+0x10/0x10 [ 309.685505][ T1628] ? __up_read+0x1a7/0x780 [ 309.685642][ T1628] ? trace_lock_acquire+0x14d/0x1f0 [ 309.685783][ T1628] ? __pfx___up_read+0x10/0x10 [ 309.685921][ T1628] ? do_user_addr_fault+0x972/0xe30 [ 309.686065][ T1628] ? do_user_addr_fault+0x97c/0xe30 [ 309.686199][ T1628] __x64_sys_sendto+0xe0/0x1c0 [ 309.686335][ T1628] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 309.686505][ T1628] do_syscall_64+0xc1/0x1d0 [ 309.686648][ T1628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.686896][ T1628] RIP: 0033:0x7f9f00a6a85a [ 309.687118][ T1628] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 [ 309.687817][ T1628] RSP: 002b:00007ffe7292f7b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 309.688125][ T1628] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f9f00a6a85a [ 309.688433][ T1628] RDX: 0000000000000040 RSI: 000000003d7fa340 RDI: 0000000000000005 [ 309.688718][ T1628] RBP: 00007ffe7292f810 R08: 00000000004185e0 R09: 0000000000000010 [ 309.689002][ T1628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 309.689299][ T1628] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f9f00b90000 [ 309.689609][ T1628] [ 309.689771][ T1628] [ 309.689871][ T1628] Allocated by task 1570: [ 309.690020][ T1628] kasan_save_stack+0x24/0x50 [ 309.690240][ T1628] kasan_save_track+0x14/0x30 [ 309.690438][ T1628] __kasan_kmalloc+0x7f/0x90 [ 309.690638][ T1628] __kmalloc_noprof+0x1ab/0x3a0 [ 309.690839][ T1628] neigh_alloc+0x6f2/0x9d0 [ 309.691049][ T1628] ___neigh_create+0x6d/0xf30 [ 309.691255][ T1628] ip_finish_output2+0xb73/0x17f0 [ 309.691455][ T1628] ip_push_pending_frames+0x86/0x100 [ 309.691671][ T1628] raw_sendmsg+0xd89/0x12d0 [ 309.691881][ T1628] __sys_sendto+0x32c/0x400 [ 309.692084][ T1628] __x64_sys_sendto+0xe0/0x1c0 [ 309.692292][ T1628] do_syscall_64+0xc1/0x1d0 [ 309.692494][ T1628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.692743][ T1628] [ 309.692845][ T1628] Freed by task 1802201963: [ 309.693038][ T1628] ------------[ cut here ]------------ [ 309.693251][ T1628] pool index 93034 out of bounds (728) for stack id 6b6b6b6b [ 309.693621][ T1628] WARNING: CPU: 1 PID: 1628 at lib/stackdepot.c:451 depot_fetch_stack+0x96/0xc0 [ 309.693999][ T1628] Modules linked in: [ 309.694174][ T1628] CPU: 1 UID: 0 PID: 1628 Comm: ping Not tainted 6.12.0-rc3-virtme #1 [ 309.694504][ T1628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 309.694989][ T1628] RIP: 0010:depot_fetch_stack+0x96/0xc0 [ 309.695222][ T1628] Code: b8 11 0d ac e8 eb 2d a3 01 83 f8 01 75 b8 90 0f 0b 90 eb b2 90 48 c7 c7 80 6c 82 ab 44 89 e1 44 89 ea 89 ee e8 7b f2 0d ff 90 <0f> 0b 90 90 31 c0 eb bb 90 0f 0b 90 eb b5 90 0f 0b 90 31 c0 eb ad [ 309.696007][ T1628] RSP: 0018:ffffc900035ef7f0 EFLAGS: 00010082 [ 309.696290][ T1628] RAX: 0000000000000000 RBX: 0000000000001b50 RCX: 1ffffffff577b43c [ 309.696610][ T1628] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 309.696955][ T1628] RBP: 0000000000016b6a R08: 0000000000000000 R09: fffffbfff577b43c [ 309.697285][ T1628] R10: 0000000000000003 R11: 205d383236315420 R12: 000000006b6b6b6b [ 309.697614][ T1628] R13: 00000000000002d8 R14: 0000000000000008 R15: ffff88800616a300 [ 309.697947][ T1628] FS: 00007f9f00794300(0000) GS:ffff88802f480000(0000) knlGS:0000000000000000 [ 309.698378][ T1628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.698659][ T1628] CR2: 00007ffe7292ed80 CR3: 00000000090c4004 CR4: 0000000000772ef0 [ 309.698992][ T1628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.699322][ T1628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.699636][ T1628] PKRU: 55555554 [ 309.699799][ T1628] Call Trace: [ 309.699969][ T1628] [ 309.700095][ T1628] ? depot_fetch_stack+0x96/0xc0 [ 309.700316][ T1628] ? __warn+0xd1/0x1c0 [ 309.700478][ T1628] ? depot_fetch_stack+0x96/0xc0 [ 309.700686][ T1628] ? report_bug+0x28c/0x2d0 [ 309.700901][ T1628] ? handle_bug+0x54/0xa0 [ 309.701057][ T1628] ? exc_invalid_op+0x18/0x50 [ 309.701266][ T1628] ? asm_exc_invalid_op+0x1a/0x20 [ 309.701476][ T1628] ? depot_fetch_stack+0x96/0xc0 [ 309.701817][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.702033][ T1628] stack_depot_fetch+0x42/0x80 [ 309.702250][ T1628] stack_depot_print+0x20/0x60 [ 309.702458][ T1628] print_address_description.constprop.0+0x335/0x3b0 [ 309.702843][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.703053][ T1628] print_report+0xb4/0x270 [ 309.703261][ T1628] ? kasan_addr_to_slab+0x25/0x80 [ 309.703465][ T1628] kasan_report+0xbd/0xf0 [ 309.703624][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.703957][ T1628] ___neigh_create+0xd58/0xf30 [ 309.704173][ T1628] ip_finish_output2+0xb73/0x17f0 [ 309.704384][ T1628] ? __ip_make_skb+0xfc3/0x1f70 [ 309.704596][ T1628] ? __pfx_ip_finish_output2+0x10/0x10 [ 309.705070][ T1628] ? __ip_finish_output+0x27/0x2e0 [ 309.705291][ T1628] ip_push_pending_frames+0x86/0x100 [ 309.705510][ T1628] ? raw_sendmsg+0x926/0x12d0 [ 309.705720][ T1628] raw_sendmsg+0xd89/0x12d0 [ 309.706073][ T1628] ? __pfx_raw_sendmsg+0x10/0x10 [ 309.706291][ T1628] ? __free_zapped_classes+0x141/0x1e0 [ 309.706520][ T1628] ? do_anonymous_page+0x34d/0x1330 [ 309.706748][ T1628] ? gup_fast_pte_range+0x98/0xae0 [ 309.706972][ T1628] ? __pfx___lock_release+0x10/0x10 [ 309.707204][ T1628] ? trace_lock_acquire+0x14d/0x1f0 [ 309.707428][ T1628] ? __might_fault+0xc3/0x170 [ 309.707649][ T1628] ? lock_acquire+0x32/0xc0 [ 309.707871][ T1628] ? __might_fault+0xc3/0x170 [ 309.708224][ T1628] ? __might_fault+0x11b/0x170 [ 309.708446][ T1628] __sys_sendto+0x32c/0x400 [ 309.708651][ T1628] ? reacquire_held_locks+0x22f/0x4f0 [ 309.708854][ T1628] ? __pfx___sys_sendto+0x10/0x10 [ 309.709065][ T1628] ? do_user_addr_fault+0x972/0xe30 [ 309.709274][ T1628] ? __pfx___lock_release+0x10/0x10 [ 309.709476][ T1628] ? __up_read+0x1a7/0x780 [ 309.709681][ T1628] ? trace_lock_acquire+0x14d/0x1f0 [ 309.710044][ T1628] ? __pfx___up_read+0x10/0x10 [ 309.710282][ T1628] ? do_user_addr_fault+0x972/0xe30 [ 309.710499][ T1628] ? do_user_addr_fault+0x97c/0xe30 [ 309.710720][ T1628] __x64_sys_sendto+0xe0/0x1c0 [ 309.710938][ T1628] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 309.711208][ T1628] do_syscall_64+0xc1/0x1d0 [ 309.711421][ T1628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.711697][ T1628] RIP: 0033:0x7f9f00a6a85a [ 309.712089][ T1628] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 [ 309.712826][ T1628] RSP: 002b:00007ffe7292f7b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 309.713151][ T1628] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f9f00a6a85a [ 309.713472][ T1628] RDX: 0000000000000040 RSI: 000000003d7fa340 RDI: 0000000000000005 [ 309.713786][ T1628] RBP: 00007ffe7292f810 R08: 00000000004185e0 R09: 0000000000000010 [ 309.714245][ T1628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 309.714560][ T1628] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f9f00b90000 [ 309.714881][ T1628] [ 309.715036][ T1628] irq event stamp: 122723 [ 309.715229][ T1628] hardirqs last enabled at (122721): [] _raw_spin_unlock_irqrestore+0x51/0x70 [ 309.715670][ T1628] hardirqs last disabled at (122723): [] _raw_spin_lock_irqsave+0x58/0x60 [ 309.716230][ T1628] softirqs last enabled at (122690): [] raw_sendmsg+0x8ce/0x12d0 [ 309.716582][ T1628] softirqs last disabled at (122722): [] ___neigh_create+0x2d5/0xf30 [ 309.717095][ T1628] ---[ end trace 0000000000000000 ]--- [ 309.717309][ T1628] ------------[ cut here ]------------ [ 309.717509][ T1628] corrupt handle or use after stack_depot_put() [ 309.717559][ T1628] WARNING: CPU: 1 PID: 1628 at lib/stackdepot.c:711 stack_depot_fetch+0x6f/0x80 [ 309.718177][ T1628] Modules linked in: [ 309.718344][ T1628] CPU: 1 UID: 0 PID: 1628 Comm: ping Tainted: G W 6.12.0-rc3-virtme #1 [ 309.718717][ T1628] Tainted: [W]=WARN [ 309.718877][ T1628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 309.719358][ T1628] RIP: 0010:stack_depot_fetch+0x6f/0x80 [ 309.719580][ T1628] Code: 74 1a 48 8d 50 20 48 89 13 5b 8b 40 14 5d 41 5c c3 cc cc cc cc 31 c0 c3 cc cc cc cc 90 48 c7 c7 60 6d 82 ab e8 62 ed 0d ff 90 <0f> 0b 90 90 eb bb 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 309.720389][ T1628] RSP: 0018:ffffc900035ef818 EFLAGS: 00010086 [ 309.720568][ T1628] RAX: 0000000000000000 RBX: ffffc900035ef838 RCX: 1ffffffff577b43c [ 309.720930][ T1628] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 309.721140][ T1628] RBP: 000000006b6b6b6b R08: 0000000000000000 R09: fffffbfff577b43c [ 309.721349][ T1628] R10: 0000000000000003 R11: 6361747320726574 R12: 0000000000000000 [ 309.721633][ T1628] R13: ffffffffaa2f3488 R14: 0000000000000008 R15: ffff88800616a300 [ 309.721835][ T1628] FS: 00007f9f00794300(0000) GS:ffff88802f480000(0000) knlGS:0000000000000000 [ 309.722159][ T1628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.722338][ T1628] CR2: 00007ffe7292ed80 CR3: 00000000090c4004 CR4: 0000000000772ef0 [ 309.722548][ T1628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.722762][ T1628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.722968][ T1628] PKRU: 55555554 [ 309.723074][ T1628] Call Trace: [ 309.723178][ T1628] [ 309.723250][ T1628] ? stack_depot_fetch+0x6f/0x80 [ 309.723466][ T1628] ? __warn+0xd1/0x1c0 [ 309.723576][ T1628] ? nbcon_get_cpu_emergency_nesting+0xa/0x30 [ 309.723756][ T1628] ? stack_depot_fetch+0x6f/0x80 [ 309.723902][ T1628] ? report_bug+0x28c/0x2d0 [ 309.724124][ T1628] ? handle_bug+0x54/0xa0 [ 309.724232][ T1628] ? exc_invalid_op+0x18/0x50 [ 309.724372][ T1628] ? asm_exc_invalid_op+0x1a/0x20 [ 309.724513][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.724655][ T1628] ? stack_depot_fetch+0x6f/0x80 [ 309.724794][ T1628] ? stack_depot_fetch+0x6e/0x80 [ 309.724934][ T1628] stack_depot_print+0x20/0x60 [ 309.725075][ T1628] print_address_description.constprop.0+0x335/0x3b0 [ 309.725253][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.725467][ T1628] print_report+0xb4/0x270 [ 309.725608][ T1628] ? kasan_addr_to_slab+0x25/0x80 [ 309.725746][ T1628] kasan_report+0xbd/0xf0 [ 309.725853][ T1628] ? ___neigh_create+0xd58/0xf30 [ 309.726110][ T1628] ___neigh_create+0xd58/0xf30 [ 309.726263][ T1628] ip_finish_output2+0xb73/0x17f0 [ 309.726393][ T1628] ? __ip_make_skb+0xfc3/0x1f70 [ 309.726521][ T1628] ? __pfx_ip_finish_output2+0x10/0x10 [ 309.726665][ T1628] ? __ip_finish_output+0x27/0x2e0 [ 309.726801][ T1628] ip_push_pending_frames+0x86/0x100 [ 309.726942][ T1628] ? raw_sendmsg+0x926/0x12d0 [ 309.727084][ T1628] raw_sendmsg+0xd89/0x12d0 [ 309.727216][ T1628] ? __pfx_raw_sendmsg+0x10/0x10 [ 309.727429][ T1628] ? __free_zapped_classes+0x141/0x1e0 [ 309.727565][ T1628] ? do_anonymous_page+0x34d/0x1330 [ 309.727699][ T1628] ? gup_fast_pte_range+0x98/0xae0 [ 309.727834][ T1628] ? __pfx___lock_release+0x10/0x10 [ 309.728035][ T1628] ? trace_lock_acquire+0x14d/0x1f0 [ 309.728164][ T1628] ? __might_fault+0xc3/0x170 [ 309.728292][ T1628] ? lock_acquire+0x32/0xc0 [ 309.728419][ T1628] ? __might_fault+0xc3/0x170 [ 309.728622][ T1628] ? __might_fault+0x11b/0x170 [ 309.728750][ T1628] __sys_sendto+0x32c/0x400 [ 309.728886][ T1628] ? reacquire_held_locks+0x22f/0x4f0 [ 309.729018][ T1628] ? __pfx___sys_sendto+0x10/0x10 [ 309.729223][ T1628] ? do_user_addr_fault+0x972/0xe30 [ 309.729350][ T1628] ? __pfx___lock_release+0x10/0x10 [ 309.729476][ T1628] ? __up_read+0x1a7/0x780 [ 309.729602][ T1628] ? trace_lock_acquire+0x14d/0x1f0 [ 309.729730][ T1628] ? __pfx___up_read+0x10/0x10 [ 309.729930][ T1628] ? do_user_addr_fault+0x972/0xe30 [ 309.730060][ T1628] ? do_user_addr_fault+0x97c/0xe30 [ 309.730209][ T1628] __x64_sys_sendto+0xe0/0x1c0 [ 309.730341][ T1628] ? lockdep_hardirqs_on_prepare+0x275/0x410 [ 309.730574][ T1628] do_syscall_64+0xc1/0x1d0 [ 309.730702][ T1628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.730862][ T1628] RIP: 0033:0x7f9f00a6a85a [ 309.730996][ T1628] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 [ 309.731546][ T1628] RSP: 002b:00007ffe7292f7b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 309.731741][ T1628] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f9f00a6a85a [ 309.731935][ T1628] RDX: 0000000000000040 RSI: 000000003d7fa340 RDI: 0000000000000005 [ 309.732129][ T1628] RBP: 00007ffe7292f810 R08: 00000000004185e0 R09: 0000000000000010 [ 309.732321][ T1628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 309.732511][ T1628] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f9f00b90000 [ 309.732705][ T1628] [ 309.732880][ T1628] irq event stamp: 122723 [ 309.732977][ T1628] hardirqs last enabled at (122721): [] _raw_spin_unlock_irqrestore+0x51/0x70 [ 309.733230][ T1628] hardirqs last disabled at (122723): [] _raw_spin_lock_irqsave+0x58/0x60 [ 309.733580][ T1628] softirqs last enabled at (122690): [] raw_sendmsg+0x8ce/0x12d0 [ 309.733800][ T1628] softirqs last disabled at (122722): [] ___neigh_create+0x2d5/0xf30 [ 309.734119][ T1628] ---[ end trace 0000000000000000 ]--- [ 309.734264][ T1628] [ 309.734329][ T1628] Last potentially related work creation: [ 309.734455][ T1628] kasan_save_stack+0x24/0x50 [ 309.734578][ T1628] __kasan_record_aux_stack+0x8e/0xa0 [ 309.734703][ T1628] kvfree_call_rcu+0x114/0x4b0 [ 309.734838][ T1628] neigh_remove_one+0x1a3/0x200 [ 309.734959][ T1628] neigh_delete+0x29f/0x490 [ 309.735080][ T1628] rtnetlink_rcv_msg+0x2fb/0xc10 [ 309.735268][ T1628] netlink_rcv_skb+0x130/0x360 [ 309.735396][ T1628] netlink_unicast+0x44b/0x710 [ 309.735518][ T1628] netlink_sendmsg+0x723/0xbe0 [ 309.735641][ T1628] __sys_sendto+0x377/0x400 [ 309.735762][ T1628] __x64_sys_sendto+0xe0/0x1c0 [ 309.735948][ T1628] do_syscall_64+0xc1/0x1d0 [ 309.736074][ T1628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.736225][ T1628] [ 309.736286][ T1628] The buggy address belongs to the object at ffff888007fd5800 [ 309.736286][ T1628] which belongs to the cache kmalloc-1k of size 1024 [ 309.736640][ T1628] The buggy address is located 24 bytes inside of [ 309.736640][ T1628] freed 1024-byte region [ffff888007fd5800, ffff888007fd5c00) [ 309.736991][ T1628] [ 309.737060][ T1628] The buggy address belongs to the physical page: [ 309.737222][ T1628] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888007fd5800 pfn:0x7fd0 [ 309.737496][ T1628] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 309.737762][ T1628] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 309.737935][ T1628] page_type: f5(slab) [ 309.738039][ T1628] raw: 0080000000000240 ffff8880010430c0 ffffea00001ff210 ffffea000014c810 [ 309.738337][ T1628] raw: ffff888007fd5800 00000000000a0009 00000001f5000000 0000000000000000 [ 309.738548][ T1628] head: 0080000000000240 ffff8880010430c0 ffffea00001ff210 ffffea000014c810 [ 309.738760][ T1628] head: ffff888007fd5800 00000000000a0009 00000001f5000000 0000000000000000 [ 309.739054][ T1628] head: 0080000000000003 ffffea00001ff401 ffffffffffffffff 0000000000000000 [ 309.739284][ T1628] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 309.739565][ T1628] page dumped because: kasan: bad access detected [ 309.739714][ T1628] [ 309.739776][ T1628] Memory state around the buggy address: [ 309.739893][ T1628] ffff888007fd5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.740163][ T1628] ffff888007fd5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.740335][ T1628] >ffff888007fd5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.740508][ T1628] ^ [ 309.740687][ T1628] ffff888007fd5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.740857][ T1628] ffff888007fd5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.741034][ T1628] ================================================================== [ 309.741287][ T1628] Disabling lock debugging due to kernel taint [ 310.006237][ T1630] ============================================================================= [ 310.006541][ T1630] BUG kmalloc-1k (Tainted: G B W ): Poison overwritten [ 310.006755][ T1630] ----------------------------------------------------------------------------- [ 310.006755][ T1630] [ 310.007043][ T1630] 0xffff888007fd5818-0xffff888007fd581f @offset=22552. First byte 0x10 instead of 0x6b [ 310.007329][ T1630] FIX kmalloc-1k: Restoring Poison 0xffff888007fd5818-0xffff888007fd581f=0x6b [ 310.007596][ T1630] Allocated in neigh_alloc+0x6f2/0x9d0 age=21079 cpu=3 pid=1570 [ 310.007833][ T1630] neigh_alloc+0x6f2/0x9d0 [ 310.008004][ T1630] ___neigh_create+0x6d/0xf30 [ 310.008153][ T1630] ip_finish_output2+0xb73/0x17f0 [ 310.008333][ T1630] ip_push_pending_frames+0x86/0x100 [ 310.008484][ T1630] raw_sendmsg+0xd89/0x12d0 [ 310.008629][ T1630] __sys_sendto+0x32c/0x400 [ 310.008781][ T1630] __x64_sys_sendto+0xe0/0x1c0 [ 310.008924][ T1630] do_syscall_64+0xc1/0x1d0 [ 310.009070][ T1630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.009283][ T1630] Freed in qlist_free_all+0x47/0x120 age=522 cpu=1 pid=1628 [ 310.009514][ T1630] kasan_quarantine_reduce+0x192/0x1e0 [ 310.009659][ T1630] __kasan_slab_alloc+0x49/0x70 [ 310.009804][ T1630] kmem_cache_alloc_noprof+0xdb/0x250 [ 310.009950][ T1630] getname_flags+0x4f/0x410 [ 310.010101][ T1630] do_sys_openat2+0xdb/0x160 [ 310.010250][ T1630] __x64_sys_openat+0x123/0x1e0 [ 310.010391][ T1630] do_syscall_64+0xc1/0x1d0 [ 310.010535][ T1630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.010711][ T1630] Slab 0xffffea00001ff400 objects=10 used=10 fp=0x0000000000000000 flags=0x80000000000240(workingset|head|node=0|zone=1) [ 310.011024][ T1630] Object 0xffff888007fd5800 @offset=22528 fp=0x0000000000000000 [ 310.011024][ T1630] [ 310.011272][ T1630] Redzone ffff888007fd5400: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.011551][ T1630] Redzone ffff888007fd5410: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.011830][ T1630] Redzone ffff888007fd5420: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.012107][ T1630] Redzone ffff888007fd5430: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.012388][ T1630] Redzone ffff888007fd5440: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.012664][ T1630] Redzone ffff888007fd5450: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.012939][ T1630] Redzone ffff888007fd5460: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.013227][ T1630] Redzone ffff888007fd5470: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.013509][ T1630] Redzone ffff888007fd5480: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.013780][ T1630] Redzone ffff888007fd5490: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.014058][ T1630] Redzone ffff888007fd54a0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.014335][ T1630] Redzone ffff888007fd54b0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.014613][ T1630] Redzone ffff888007fd54c0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.014890][ T1630] Redzone ffff888007fd54d0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.015163][ T1630] Redzone ffff888007fd54e0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.015439][ T1630] Redzone ffff888007fd54f0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.015719][ T1630] Redzone ffff888007fd5500: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.016039][ T1630] Redzone ffff888007fd5510: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.016330][ T1630] Redzone ffff888007fd5520: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.016619][ T1630] Redzone ffff888007fd5530: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.016937][ T1630] Redzone ffff888007fd5540: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.017246][ T1630] Redzone ffff888007fd5550: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.017528][ T1630] Redzone ffff888007fd5560: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.017834][ T1630] Redzone ffff888007fd5570: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.018136][ T1630] Redzone ffff888007fd5580: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.018439][ T1630] Redzone ffff888007fd5590: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.018716][ T1630] Redzone ffff888007fd55a0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.018991][ T1630] Redzone ffff888007fd55b0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.019268][ T1630] Redzone ffff888007fd55c0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.019544][ T1630] Redzone ffff888007fd55d0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.019820][ T1630] Redzone ffff888007fd55e0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.020132][ T1630] Redzone ffff888007fd55f0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.020421][ T1630] Redzone ffff888007fd5600: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.020694][ T1630] Redzone ffff888007fd5610: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.020991][ T1630] Redzone ffff888007fd5620: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.021268][ T1630] Redzone ffff888007fd5630: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.021545][ T1630] Redzone ffff888007fd5640: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.021817][ T1630] Redzone ffff888007fd5650: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.022093][ T1630] Redzone ffff888007fd5660: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.022365][ T1630] Redzone ffff888007fd5670: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.022638][ T1630] Redzone ffff888007fd5680: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.022911][ T1630] Redzone ffff888007fd5690: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.023270][ T1630] Redzone ffff888007fd56a0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.023544][ T1630] Redzone ffff888007fd56b0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.023925][ T1630] Redzone ffff888007fd56c0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.024211][ T1630] Redzone ffff888007fd56d0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.024617][ T1630] Redzone ffff888007fd56e0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.024896][ T1630] Redzone ffff888007fd56f0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.025206][ T1630] Redzone ffff888007fd5700: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.025615][ T1630] Redzone ffff888007fd5710: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.025935][ T1630] Redzone ffff888007fd5720: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.026368][ T1630] Redzone ffff888007fd5730: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.026679][ T1630] Redzone ffff888007fd5740: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.026983][ T1630] Redzone ffff888007fd5750: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.027301][ T1630] Redzone ffff888007fd5760: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.027630][ T1630] Redzone ffff888007fd5770: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.027957][ T1630] Redzone ffff888007fd5780: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.028452][ T1630] Redzone ffff888007fd5790: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.028775][ T1630] Redzone ffff888007fd57a0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.029198][ T1630] Redzone ffff888007fd57b0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.029518][ T1630] Redzone ffff888007fd57c0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.029823][ T1630] Redzone ffff888007fd57d0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.030148][ T1630] Redzone ffff888007fd57e0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.030472][ T1630] Redzone ffff888007fd57f0: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ [ 310.030759][ T1630] Object ffff888007fd5800: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.031033][ T1630] Object ffff888007fd5810: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.031390][ T1630] Object ffff888007fd5820: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.031690][ T1630] Object ffff888007fd5830: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.032060][ T1630] Object ffff888007fd5840: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.032331][ T1630] Object ffff888007fd5850: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.032715][ T1630] Object ffff888007fd5860: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.033013][ T1630] Object ffff888007fd5870: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.033379][ T1630] Object ffff888007fd5880: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.033673][ T1630] Object ffff888007fd5890: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.034042][ T1630] Object ffff888007fd58a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.034313][ T1630] Object ffff888007fd58b0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.034700][ T1630] Object ffff888007fd58c0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.034998][ T1630] Object ffff888007fd58d0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.035358][ T1630] Object ffff888007fd58e0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.035649][ T1630] Object ffff888007fd58f0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.036033][ T1630] Object ffff888007fd5900: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.036307][ T1630] Object ffff888007fd5910: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.036599][ T1630] Object ffff888007fd5920: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.036874][ T1630] Object ffff888007fd5930: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.037182][ T1630] Object ffff888007fd5940: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.037471][ T1630] Object ffff888007fd5950: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.037744][ T1630] Object ffff888007fd5960: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.038112][ T1630] Object ffff888007fd5970: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.038385][ T1630] Object ffff888007fd5980: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.038743][ T1630] Object ffff888007fd5990: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.039037][ T1630] Object ffff888007fd59a0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.039507][ T1630] Object ffff888007fd59b0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.039780][ T1630] Object ffff888007fd59c0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.040180][ T1630] Object ffff888007fd59d0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.040459][ T1630] Object ffff888007fd59e0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.040730][ T1630] Object ffff888007fd59f0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.041031][ T1630] Object ffff888007fd5a00: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.041307][ T1630] Object ffff888007fd5a10: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.041604][ T1630] Object ffff888007fd5a20: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.041878][ T1630] Object ffff888007fd5a30: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.042264][ T1630] Object ffff888007fd5a40: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.042547][ T1630] Object ffff888007fd5a50: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.042821][ T1630] Object ffff888007fd5a60: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.043091][ T1630] Object ffff888007fd5a70: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.043365][ T1630] Object ffff888007fd5a80: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.043659][ T1630] Object ffff888007fd5a90: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.044041][ T1630] Object ffff888007fd5aa0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.044317][ T1630] Object ffff888007fd5ab0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.044696][ T1630] Object ffff888007fd5ac0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.044979][ T1630] Object ffff888007fd5ad0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.045341][ T1630] Object ffff888007fd5ae0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.045634][ T1630] Object ffff888007fd5af0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.046023][ T1630] Object ffff888007fd5b00: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.046295][ T1630] Object ffff888007fd5b10: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.046668][ T1630] Object ffff888007fd5b20: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.046946][ T1630] Object ffff888007fd5b30: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.047230][ T1630] Object ffff888007fd5b40: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.047599][ T1630] Object ffff888007fd5b50: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.047896][ T1630] Object ffff888007fd5b60: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.048266][ T1630] Object ffff888007fd5b70: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.048564][ T1630] Object ffff888007fd5b80: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.048877][ T1630] Object ffff888007fd5b90: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.049155][ T1630] Object ffff888007fd5ba0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.049429][ T1630] Object ffff888007fd5bb0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.049702][ T1630] Object ffff888007fd5bc0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.050177][ T1630] Object ffff888007fd5bd0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.050447][ T1630] Object ffff888007fd5be0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk [ 310.050718][ T1630] Object ffff888007fd5bf0: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk. [ 310.050996][ T1630] Redzone ffff888007fd5c00: bb bb bb bb bb bb bb bb ........ [ 310.051237][ T1630] Padding ffff888007fd5c64: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.051510][ T1630] Padding ffff888007fd5c74: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.051780][ T1630] Padding ffff888007fd5c84: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.052139][ T1630] Padding ffff888007fd5c94: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.052409][ T1630] Padding ffff888007fd5ca4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.052761][ T1630] Padding ffff888007fd5cb4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.053032][ T1630] Padding ffff888007fd5cc4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.053392][ T1630] Padding ffff888007fd5cd4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.053662][ T1630] Padding ffff888007fd5ce4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.054019][ T1630] Padding ffff888007fd5cf4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.054288][ T1630] Padding ffff888007fd5d04: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.054644][ T1630] Padding ffff888007fd5d14: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.054916][ T1630] Padding ffff888007fd5d24: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.055269][ T1630] Padding ffff888007fd5d34: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.055539][ T1630] Padding ffff888007fd5d44: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.055893][ T1630] Padding ffff888007fd5d54: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.056165][ T1630] Padding ffff888007fd5d64: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.056521][ T1630] Padding ffff888007fd5d74: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.056790][ T1630] Padding ffff888007fd5d84: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.057087][ T1630] Padding ffff888007fd5d94: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.057454][ T1630] Padding ffff888007fd5da4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.057737][ T1630] Padding ffff888007fd5db4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.058132][ T1630] Padding ffff888007fd5dc4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.058404][ T1630] Padding ffff888007fd5dd4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.058760][ T1630] Padding ffff888007fd5de4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.059039][ T1630] Padding ffff888007fd5df4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.059418][ T1630] Padding ffff888007fd5e04: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.059693][ T1630] Padding ffff888007fd5e14: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.060080][ T1630] Padding ffff888007fd5e24: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.060375][ T1630] Padding ffff888007fd5e34: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.060826][ T1630] Padding ffff888007fd5e44: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.061119][ T1630] Padding ffff888007fd5e54: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.061522][ T1630] Padding ffff888007fd5e64: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.061811][ T1630] Padding ffff888007fd5e74: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.062184][ T1630] Padding ffff888007fd5e84: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.062478][ T1630] Padding ffff888007fd5e94: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.062766][ T1630] Padding ffff888007fd5ea4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.063162][ T1630] Padding ffff888007fd5eb4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.063460][ T1630] Padding ffff888007fd5ec4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.063815][ T1630] Padding ffff888007fd5ed4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.064085][ T1630] Padding ffff888007fd5ee4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.064440][ T1630] Padding ffff888007fd5ef4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.064712][ T1630] Padding ffff888007fd5f04: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.065068][ T1630] Padding ffff888007fd5f14: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.065345][ T1630] Padding ffff888007fd5f24: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.065700][ T1630] Padding ffff888007fd5f34: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.065969][ T1630] Padding ffff888007fd5f44: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.066327][ T1630] Padding ffff888007fd5f54: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.066640][ T1630] Padding ffff888007fd5f64: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.067033][ T1630] Padding ffff888007fd5f74: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.067307][ T1630] Padding ffff888007fd5f84: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.067700][ T1630] Padding ffff888007fd5f94: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.068001][ T1630] Padding ffff888007fd5fa4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.068304][ T1630] Padding ffff888007fd5fb4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.068694][ T1630] Padding ffff888007fd5fc4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.069009][ T1630] Padding ffff888007fd5fd4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.069406][ T1630] Padding ffff888007fd5fe4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ [ 310.069695][ T1630] Padding ffff888007fd5ff4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZ [ 310.070092][ T1630] CPU: 2 UID: 0 PID: 1630 Comm: ip Tainted: G B W 6.12.0-rc3-virtme #1 [ 310.070367][ T1630] Tainted: [B]=BAD_PAGE, [W]=WARN [ 310.070513][ T1630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 310.070933][ T1630] Call Trace: [ 310.071064][ T1630] [ 310.071137][ T1630] dump_stack_lvl+0x82/0xd0 [ 310.071383][ T1630] check_object+0x182/0x3d0 [ 310.071543][ T1630] alloc_debug_processing+0xa5/0x1a0 [ 310.071685][ T1630] get_partial_node.part.0+0x17f/0x3b0 [ 310.071843][ T1630] ___slab_alloc+0x4e2/0x1050 [ 310.071981][ T1630] ? p9_fcall_init+0x7d/0x220 [ 310.072225][ T1630] ? fs_reclaim_acquire+0xb3/0x150 [ 310.072365][ T1630] ? lock_acquire+0x32/0xc0 [ 310.072506][ T1630] ? p9_fcall_init+0x7d/0x220 [ 310.072653][ T1630] ? __kmalloc_noprof+0x334/0x3a0 [ 310.072794][ T1630] __kmalloc_noprof+0x334/0x3a0 [ 310.072969][ T1630] p9_fcall_init+0x7d/0x220 [ 310.073110][ T1630] p9_tag_alloc+0x1bd/0x700 [ 310.073275][ T1630] ? __pfx_p9_tag_alloc+0x10/0x10 [ 310.073413][ T1630] ? trace_lock_acquire+0x14d/0x1f0 [ 310.073579][ T1630] ? trace_lock_release+0x10e/0x180 [ 310.073720][ T1630] p9_client_prepare_req+0xe6/0x290 [ 310.073857][ T1630] ? kernel_text_address+0xce/0xe0 [ 310.074108][ T1630] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 310.074295][ T1630] ? __kernel_text_address+0x12/0x40 [ 310.074435][ T1630] ? arch_stack_walk+0xa2/0xf0 [ 310.074602][ T1630] p9_client_rpc+0x18d/0x930 [ 310.074742][ T1630] ? __pfx_p9_client_rpc+0x10/0x10 [ 310.074902][ T1630] ? stack_depot_save_flags+0x45/0x530 [ 310.075044][ T1630] ? backing_file_read_iter+0x4c8/0x6f0 [ 310.075210][ T1630] ? ovl_read_iter+0x200/0x270 [ 310.075355][ T1630] ? __pfx_fill_pool+0x10/0x10 [ 310.075501][ T1630] p9_client_read_once+0x1f1/0x860 [ 310.075657][ T1630] ? trace_lock_release+0x10e/0x180 [ 310.075797][ T1630] ? __pfx_p9_client_read_once+0x10/0x10 [ 310.075948][ T1630] ? __debug_object_init+0x2f7/0x450 [ 310.076205][ T1630] ? mempool_alloc_noprof+0x11f/0x320 [ 310.076350][ T1630] p9_client_read+0xfd/0x160 [ 310.076511][ T1630] v9fs_issue_read+0x10c/0x2d0 [ 310.076656][ T1630] ? do_raw_spin_lock+0x131/0x270 [ 310.076797][ T1630] ? __pfx_v9fs_issue_read+0x10/0x10 [ 310.076952][ T1630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.077104][ T1630] ? netfs_dispatch_unbuffered_reads.isra.0+0x2a2/0x8f0 [ 310.077289][ T1630] netfs_dispatch_unbuffered_reads.isra.0+0x4e6/0x8f0 [ 310.077462][ T1630] netfs_unbuffered_read+0x8e/0x310 [ 310.077600][ T1630] netfs_unbuffered_read_iter_locked+0x52e/0x6f0 [ 310.077774][ T1630] netfs_unbuffered_read_iter+0xa4/0xe0 [ 310.077912][ T1630] do_iter_readv_writev+0x433/0x670 [ 310.078144][ T1630] ? ovl_verify_lowerdata+0xc6/0x580 [ 310.078286][ T1630] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 310.078424][ T1630] ? kasan_save_stack+0x34/0x50 [ 310.078563][ T1630] ? do_syscall_64+0xc1/0x1d0 [ 310.078702][ T1630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.078875][ T1630] ? do_raw_spin_lock+0x131/0x270 [ 310.079039][ T1630] vfs_iter_read+0x11e/0x520 [ 310.079180][ T1630] ? ovl_real_fdget_meta+0x244/0x510 [ 310.079318][ T1630] ? trace_lock_release+0x10e/0x180 [ 310.079458][ T1630] backing_file_read_iter+0x4c8/0x6f0 [ 310.079600][ T1630] ovl_read_iter+0x200/0x270 [ 310.079741][ T1630] ? __pfx_ovl_read_iter+0x10/0x10 [ 310.079962][ T1630] ? __pfx_free_object_rcu+0x10/0x10 [ 310.080113][ T1630] ? trace_rcu_segcb_stats+0x37/0x1e0 [ 310.080259][ T1630] ? __pfx_ovl_file_accessed+0x10/0x10 [ 310.080397][ T1630] ? trace_irq_enable.constprop.0+0xe4/0x140 [ 310.080653][ T1630] vfs_read+0x74c/0xcd0 [ 310.080760][ T1630] ? kmem_cache_free+0xf8/0x340 [ 310.080897][ T1630] ? lock_release+0x13/0x140 [ 310.081039][ T1630] ? do_sys_openat2+0x10a/0x160 [ 310.081188][ T1630] ? __pfx_vfs_read+0x10/0x10 [ 310.081412][ T1630] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.081553][ T1630] ? trace_lock_acquire+0x14d/0x1f0 [ 310.081691][ T1630] ? __pfx___up_read+0x10/0x10 [ 310.081831][ T1630] ksys_read+0xf5/0x1e0 [ 310.082020][ T1630] ? __pfx_ksys_read+0x10/0x10 [ 310.082162][ T1630] ? trace_irq_enable.constprop.0+0xe4/0x140 [ 310.082337][ T1630] do_syscall_64+0xc1/0x1d0 [ 310.082475][ T1630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.082650][ T1630] RIP: 0033:0x7ff8c2ce5138 [ 310.082798][ T1630] Code: c0 48 8d 44 24 d0 48 89 44 24 c8 eb bb 0f 1f 44 00 00 f7 d8 89 05 b8 f0 00 00 b8 ff ff ff ff c3 66 90 f3 0f 1e fa 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 08 c3 0f 1f 80 00 00 00 00 f7 d8 89 05 90 f0 [ 310.083377][ T1630] RSP: 002b:00007ffcd9015ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.083600][ T1630] RAX: ffffffffffffffda RBX: 00007ffcd9015d7f RCX: 00007ff8c2ce5138 [ 310.083824][ T1630] RDX: 0000000000000340 RSI: 00007ffcd9015d98 RDI: 0000000000000005 [ 310.084160][ T1630] RBP: 00007ffcd9015d10 R08: 0000000000080000 R09: 00007ff8c2cb63f0 [ 310.084392][ T1630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000340 [ 310.084627][ T1630] R13: 00007ffcd9015d90 R14: 00007ff8c2cb63f0 R15: 0000000000000005 [ 310.084846][ T1630] [ 310.084971][ T1630] FIX kmalloc-1k: Marking all objects used [ 310.154816][ T1630] Oops: general protection fault, probably for non-canonical address 0xdead000000000122: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 310.155228][ T1630] CPU: 1 UID: 0 PID: 1630 Comm: ip Tainted: G B W 6.12.0-rc3-virtme #1 [ 310.155495][ T1630] Tainted: [B]=BAD_PAGE, [W]=WARN [ 310.155647][ T1630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 310.155992][ T1630] RIP: 0010:free_to_partial_list+0x23b/0x340 [ 310.156192][ T1630] Code: 90 e9 02 ff ff ff 31 db 41 f6 44 24 08 80 0f 84 9e 00 00 00 8b 0d 5d e9 e0 03 85 c9 75 58 48 8b 45 18 48 8b 55 10 48 8d 7d 10 <48> 3b 38 0f 85 ca 00 00 00 48 3b 7a 08 0f 85 c0 00 00 00 48 89 42 [ 310.156712][ T1630] RSP: 0018:ffffc900037af450 EFLAGS: 00010046 [ 310.156908][ T1630] RAX: dead000000000122 RBX: 0000000000000000 RCX: 0000000000000000 [ 310.157129][ T1630] RDX: dead000000000100 RSI: 0000000005bc01db RDI: ffffea00001ff410 [ 310.157351][ T1630] RBP: ffffea00001ff400 R08: 0000000000000001 R09: 0000000000000000 [ 310.157569][ T1630] R10: ffff888007fd3800 R11: ffffc900037af2c9 R12: ffff8880010430c0 [ 310.157788][ T1630] R13: ffff888007fd3400 R14: 0000000000000286 R15: ffff888001040e00 [ 310.158039][ T1630] FS: 0000000000000000(0000) GS:ffff88802f480000(0000) knlGS:0000000000000000 [ 310.158296][ T1630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.158485][ T1630] CR2: 00007ffe7292ed80 CR3: 0000000008128001 CR4: 0000000000772ef0 [ 310.158712][ T1630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.158932][ T1630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.159158][ T1630] PKRU: 55555554 [ 310.159271][ T1630] Call Trace: [ 310.159384][ T1630] [ 310.159461][ T1630] ? die_addr+0x41/0xa0 [ 310.159579][ T1630] ? exc_general_protection+0x14d/0x230 [ 310.159734][ T1630] ? asm_exc_general_protection+0x26/0x30 [ 310.159887][ T1630] ? free_to_partial_list+0x23b/0x340 [ 310.160038][ T1630] ? qlist_free_all+0x47/0x120 [ 310.160201][ T1630] qlist_free_all+0x4c/0x120 [ 310.160349][ T1630] kasan_quarantine_reduce+0x192/0x1e0 [ 310.160498][ T1630] __kasan_slab_alloc+0x49/0x70 [ 310.160648][ T1630] kmem_cache_alloc_noprof+0xdb/0x250 [ 310.160809][ T1630] p9_tag_alloc+0x99/0x700 [ 310.160960][ T1630] ? __pfx_p9_tag_alloc+0x10/0x10 [ 310.161110][ T1630] ? __pfx_i_callback+0x10/0x10 [ 310.161260][ T1630] ? kasan_save_stack+0x34/0x50 [ 310.161432][ T1630] ? kasan_save_stack+0x24/0x50 [ 310.161583][ T1630] p9_client_prepare_req+0xe6/0x290 [ 310.161735][ T1630] ? vfs_statx+0xbf/0x140 [ 310.161851][ T1630] ? vfs_fstatat+0x80/0xc0 [ 310.162001][ T1630] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 310.162184][ T1630] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.162336][ T1630] p9_client_rpc+0x18d/0x930 [ 310.162484][ T1630] ? trace_lock_acquire+0x14d/0x1f0 [ 310.162655][ T1630] ? __pfx_p9_client_rpc+0x10/0x10 [ 310.162805][ T1630] ? trace_lock_release+0x10e/0x180 [ 310.162952][ T1630] ? __virt_addr_valid+0x22b/0x430 [ 310.163102][ T1630] ? __pfx_i_callback+0x10/0x10 [ 310.163249][ T1630] ? trace_rcu_segcb_stats+0x37/0x1e0 [ 310.163400][ T1630] ? trace_irq_enable.constprop.0+0xe4/0x140 [ 310.163586][ T1630] ? do_raw_spin_lock+0x131/0x270 [ 310.163737][ T1630] p9_client_clunk+0x74/0xe0 [ 310.163890][ T1630] v9fs_dentry_release+0x150/0x1d0 [ 310.164043][ T1630] ? __pfx_v9fs_dentry_release+0x10/0x10 [ 310.164190][ T1630] ? _raw_spin_unlock+0x23/0x40 [ 310.164337][ T1630] ? iput_final+0x262/0x3d0 [ 310.164488][ T1630] __dentry_kill+0x1d9/0x4f0 [ 310.164640][ T1630] ? __pfx_kfree_link+0x10/0x10 [ 310.164789][ T1630] dput.part.0+0x333/0x6c0 [ 310.164935][ T1630] walk_component+0x199/0x4f0 [ 310.165085][ T1630] link_path_walk.part.0.constprop.0+0x350/0x940 [ 310.165271][ T1630] ? path_init+0xd2d/0x1b10 [ 310.165427][ T1630] ? __pfx_link_path_walk.part.0.constprop.0+0x10/0x10 [ 310.165699][ T1630] ? is_bpf_text_address+0x67/0x120 [ 310.165928][ T1630] ? lock_release+0x13/0x140 [ 310.166160][ T1630] path_lookupat+0x72/0x660 [ 310.166387][ T1630] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.166676][ T1630] filename_lookup+0x19e/0x420 [ 310.166901][ T1630] ? __pfx_filename_lookup+0x10/0x10 [ 310.167144][ T1630] ? __pfx_kfree_link+0x10/0x10 [ 310.167355][ T1630] ? do_raw_spin_lock+0x131/0x270 [ 310.167577][ T1630] ? trace_lock_acquire+0x14d/0x1f0 [ 310.167779][ T1630] ? __might_fault+0xc3/0x170 [ 310.168009][ T1630] ? lock_acquire+0x32/0xc0 [ 310.168227][ T1630] ? __might_fault+0xc3/0x170 [ 310.168411][ T1630] vfs_statx+0xbf/0x140 [ 310.168586][ T1630] ? __pfx_vfs_statx+0x10/0x10 [ 310.168818][ T1630] ? getname_flags+0xb3/0x410 [ 310.169050][ T1630] vfs_fstatat+0x80/0xc0 [ 310.169222][ T1630] __do_sys_newfstatat+0x75/0xd0 [ 310.169447][ T1630] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 310.169679][ T1630] ? __x64_sys_openat+0x123/0x1e0 [ 310.169917][ T1630] ? __pfx_task_work_run+0x10/0x10 [ 310.170181][ T1630] ? __pfx___x64_sys_openat+0x10/0x10 [ 310.170441][ T1630] ? trace_irq_enable.constprop.0+0xe4/0x140 [ 310.170734][ T1630] ? trace_irq_enable.constprop.0+0xe4/0x140 [ 310.171034][ T1630] do_syscall_64+0xc1/0x1d0 [ 310.171285][ T1630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.171575][ T1630] RIP: 0033:0x7ff8c2ce4eae [ 310.171813][ T1630] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 07 00 00 00 0f 1f 80 00 00 00 00 f3 0f 1e fa 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 0b 31 c0 c3 0f 1f 84 00 00 00 00 00 f7 d8 89 05 [ 310.172631][ T1630] RSP: 002b:00007ffcd90166d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 310.172995][ T1630] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00007ff8c2ce4eae [ 310.173364][ T1630] RDX: 00007ffcd90167b0 RSI: 00007ffcd90166e0 RDI: 00000000ffffff9c [ 310.173704][ T1630] RBP: 00007ffcd9016870 R08: 00000000ffffffff R09: 00007ffcd90166e0 [ 310.174060][ T1630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd90166e7 [ 310.174418][ T1630] R13: 00007ffcd90166e0 R14: 00007ff8c2cf4220 R15: 00007ff8c2cb6000 [ 310.174777][ T1630] [ 310.174951][ T1630] Modules linked in: [ 310.175133][ T1630] ---[ end trace 0000000000000000 ]--- [ 310.175377][ T1630] RIP: 0010:free_to_partial_list+0x23b/0x340 [ 310.175667][ T1630] Code: 90 e9 02 ff ff ff 31 db 41 f6 44 24 08 80 0f 84 9e 00 00 00 8b 0d 5d e9 e0 03 85 c9 75 58 48 8b 45 18 48 8b 55 10 48 8d 7d 10 <48> 3b 38 0f 85 ca 00 00 00 48 3b 7a 08 0f 85 c0 00 00 00 48 89 42 [ 310.176467][ T1630] RSP: 0018:ffffc900037af450 EFLAGS: 00010046 [ 310.176758][ T1630] RAX: dead000000000122 RBX: 0000000000000000 RCX: 0000000000000000 [ 310.177085][ T1630] RDX: dead000000000100 RSI: 0000000005bc01db RDI: ffffea00001ff410 [ 310.177417][ T1630] RBP: ffffea00001ff400 R08: 0000000000000001 R09: 0000000000000000 [ 310.177765][ T1630] R10: ffff888007fd3800 R11: ffffc900037af2c9 R12: ffff8880010430c0 [ 310.178105][ T1630] R13: ffff888007fd3400 R14: 0000000000000286 R15: ffff888001040e00 [ 310.178442][ T1630] FS: 0000000000000000(0000) GS:ffff88802f480000(0000) knlGS:0000000000000000 [ 310.178825][ T1630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.179106][ T1630] CR2: 00007ffe7292ed80 CR3: 0000000008128001 CR4: 0000000000772ef0 [ 310.179444][ T1630] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.179780][ T1630] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.180128][ T1630] PKRU: 55555554 [ 310.180298][ T1630] Kernel panic - not syncing: Fatal exception [ 310.180672][ T1630] Kernel Offset: 0x26e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 310.181176][ T1630] Rebooting in 180 seconds.. [ 12.166409][ T1] loop: module loaded [ 12.180601][ T1] scsi host0: ata_piix [ 12.184155][ T1] scsi host1: ata_piix [ 12.186060][ T1] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc080 irq 14 lpm-pol 0 [ 12.186331][ T1] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc088 irq 15 lpm-pol 0 [ 12.238382][ T1] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 12.240518][ T1] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 12.240825][ T1] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 12.245660][ T1] rtc_cmos 00:04: RTC can wake from S4 [ 12.249115][ T55] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 12.252760][ T1] rtc_cmos 00:04: registered as rtc0 [ 12.253083][ T1] rtc_cmos 00:04: setting system clock to 2024-10-21T15:42:36 UTC (1729525356) [ 12.254019][ T1] rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs [ 12.261807][ T55] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 [ 12.269774][ T1] i6300ESB timer 0000:00:03.0: initialized. heartbeat=30 sec (nowayout=0) [ 12.271740][ T1] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev [ 12.283367][ T1] GACT probability NOT on [ 12.284339][ T1] NET: Registered PF_INET6 protocol family [ 12.291304][ T1] Segment Routing with IPv6 [ 12.291830][ T1] In-situ OAM (IOAM) with IPv6 [ 12.292236][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 12.296254][ T1] NET: Registered PF_PACKET protocol family [ 12.296674][ T1] 9pnet: Installing 9P2000 support [ 12.300332][ T1] Key type dns_resolver registered [ 12.305677][ T1] IPI shorthand broadcast: enabled [ 12.344360][ T69] ata2: found unknown device (class 0) [ 12.345468][ T69] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 12.349362][ T38] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 12.368232][ T38] scsi 1:0:0:0: Attached scsi generic sg0 type 5 [ 12.589918][ T1] sched_clock: Marking stable (12578005751, 11196020)->(12613707122, -24505351) [ 12.591699][ T1] registered taskstats version 1 [ 12.594578][ T1] Loading compiled-in X.509 certificates [ 12.696817][ T1] Demotion targets for Node 0: null [ 12.697831][ T1] kmemleak: Kernel memory leak detector initialized (mem pool available: 14856) [ 12.697848][ T80] kmemleak: Automatic memory scanning thread started [ 12.698064][ T1] page_owner is disabled [ 12.699745][ T1] PM: Magic number: 12:877:740 [ 12.700028][ T1] printk: legacy console [netcon0] enabled [ 12.700272][ T1] netconsole: network logging started [ 12.701575][ T1] ALSA device list: [ 12.701712][ T1] No soundcards found. [ 12.703151][ T1] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 12.703934][ T1] 9pnet_virtio: no channels available for device [ 12.708822][ T1] VFS: Mounted root (9p filesystem) readonly on device 0:20. [ 12.710678][ T1] devtmpfs: mounted [ 12.764047][ T1] Freeing unused kernel image (initmem) memory: 6672K [ 12.764331][ T1] Write protecting the kernel read-only data: 61440k [ 12.765325][ T1] Freeing unused kernel image (rodata/data gap) memory: 592K [ 12.765590][ T1] Run /home/virtme/virtme-ng/virtme/guest/virtme-init as init process [ 13.507988][ T81] mount (81) used greatest stack depth: 26112 bytes left [ 14.320322][ T89] mount (89) used greatest stack depth: 25408 bytes left [ 14.655049][ T97] mount (97) used greatest stack depth: 25136 bytes left [ 14.731481][ T100] uname (100) used greatest stack depth: 24384 bytes left [ 15.518698][ T1] virtme-init: basic initialization done [ 15.599364][ T126] virtme-init: running systemd-tmpfiles [ 15.621092][ T1] virtme-init: starting udevd Starting systemd-udevd version 252.23-2.amzn2023 [ 16.334525][ T1] virtme-init: triggering udev coldplug [ 18.875498][ T1] virtme-init: waiting for udev to settle [ 19.892363][ T1] virtme-init: udev is done [ 20.676962][ T1] virtme-init: Setting hostname to virtme-ng... [ 20.855335][ T177] ip (177) used greatest stack depth: 23488 bytes left WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr