====================================== | xx__-> [ 5551.698412][ T9052] ================================================================== | [ 5551.698829][ T9052] BUG: KASAN: slab-use-after-free in __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) | [ 5551.699087][ T9052] Read of size 8 at addr ffff888011486fd0 by task kworker/u19:1/9052 | [ 5551.699337][ T9052] [ 5551.699431][ T9052] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 5551.699433][ T9052] Workqueue: events_unbound __unix_gc [ 5551.699439][ T9052] Call Trace: [ 5551.699441][ T9052] [ 5551.699443][ T9052] dump_stack_lvl (lib/dump_stack.c:123) [ 5551.699454][ T9052] print_address_description.constprop.0 (mm/kasan/report.c:409) [ 5551.699463][ T9052] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 5551.699467][ T9052] print_report (mm/kasan/report.c:522) [ 5551.699470][ T9052] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 5551.699474][ T9052] ? kasan_addr_to_slab (./include/linux/mm.h:1178 mm/kasan/../slab.h:211 mm/kasan/common.c:38) [ 5551.699478][ T9052] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 5551.699481][ T9052] kasan_report (mm/kasan/report.c:636) [ 5551.699485][ T9052] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 5551.699491][ T9052] __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 5551.699497][ T9052] ? __pfx___unix_walk_scc (net/unix/garbage.c:407) [ 5551.699501][ T9052] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 5551.699508][ T9052] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 5551.699512][ T9052] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 5551.699515][ T9052] ? __unix_gc (net/unix/garbage.c:566) [ 5551.699521][ T9052] __unix_gc (./include/linux/list.h:373 net/unix/garbage.c:514 net/unix/garbage.c:576) [ 5551.699525][ T9052] ? __pfx___unix_gc (net/unix/garbage.c:560) [ 5551.699532][ T9052] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 5551.699540][ T9052] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 5551.699544][ T9052] process_one_work (kernel/workqueue.c:3243) [ 5551.699553][ T9052] ? __pfx_process_one_work (kernel/workqueue.c:3140) [ 5551.699558][ T9052] ? assign_work (kernel/workqueue.c:1200) [ 5551.699567][ T9052] worker_thread (kernel/workqueue.c:3315 kernel/workqueue.c:3402) [ 5551.699572][ T9052] ? __pfx_worker_thread (kernel/workqueue.c:3348) [ 5551.699576][ T9052] kthread (kernel/kthread.c:464) [ 5551.699580][ T9052] ? __pfx_kthread (kernel/kthread.c:413) [ 5551.699582][ T9052] ? ret_from_fork (arch/x86/kernel/process.c:147) [ 5551.699589][ T9052] ? __lock_release (kernel/locking/lockdep.c:5539) [ 5551.699593][ T9052] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 5551.699596][ T9052] ? __pfx_kthread (kernel/kthread.c:413) [ 5551.699599][ T9052] ret_from_fork (arch/x86/kernel/process.c:148) [ 5551.699602][ T9052] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: print_report:kasan_report:__unix_walk_scc:__unix_gc:process_one_work