====================================== | xx__-> [ 6107.372430][ T46] ================================================================== | [ 6107.372794][ T46] BUG: KASAN: slab-use-after-free in __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) | [ 6107.373042][ T46] Read of size 8 at addr ffff888011b34cd0 by task kworker/u20:1/46 | [ 6107.373265][ T46] [ 6107.373357][ T46] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 6107.373360][ T46] Workqueue: events_unbound __unix_gc [ 6107.373366][ T46] Call Trace: [ 6107.373370][ T46] [ 6107.373372][ T46] dump_stack_lvl (lib/dump_stack.c:123) [ 6107.373390][ T46] print_address_description.constprop.0 (mm/kasan/report.c:409) [ 6107.373404][ T46] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 6107.373409][ T46] print_report (mm/kasan/report.c:522) [ 6107.373412][ T46] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 6107.373415][ T46] ? kasan_addr_to_slab (./include/linux/mm.h:1178 mm/kasan/../slab.h:211 mm/kasan/common.c:38) [ 6107.373419][ T46] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 6107.373422][ T46] kasan_report (mm/kasan/report.c:636) [ 6107.373426][ T46] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 6107.373432][ T46] __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 6107.373437][ T46] ? __pfx___unix_walk_scc (net/unix/garbage.c:407) [ 6107.373441][ T46] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 6107.373451][ T46] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 6107.373455][ T46] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 6107.373458][ T46] ? __unix_gc (net/unix/garbage.c:566) [ 6107.373463][ T46] __unix_gc (./include/linux/list.h:373 net/unix/garbage.c:514 net/unix/garbage.c:576) [ 6107.373467][ T46] ? __pfx___unix_gc (net/unix/garbage.c:560) [ 6107.373473][ T46] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 6107.373486][ T46] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 6107.373490][ T46] process_one_work (kernel/workqueue.c:3243) [ 6107.373499][ T46] ? __pfx_process_one_work (kernel/workqueue.c:3140) [ 6107.373504][ T46] ? assign_work (kernel/workqueue.c:1200) [ 6107.373511][ T46] worker_thread (kernel/workqueue.c:3315 kernel/workqueue.c:3402) [ 6107.373517][ T46] ? __pfx_worker_thread (kernel/workqueue.c:3348) [ 6107.373520][ T46] kthread (kernel/kthread.c:464) [ 6107.373524][ T46] ? __pfx_kthread (kernel/kthread.c:413) [ 6107.373526][ T46] ? ret_from_fork (arch/x86/kernel/process.c:147) [ 6107.373532][ T46] ? __lock_release (kernel/locking/lockdep.c:5539) [ 6107.373536][ T46] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 6107.373539][ T46] ? __pfx_kthread (kernel/kthread.c:413) [ 6107.373542][ T46] ret_from_fork (arch/x86/kernel/process.c:148) [ 6107.373545][ T46] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: print_report:kasan_report:__unix_walk_scc:__unix_gc:process_one_work