====================================== | xx__-> [ 143.969867][ T37] ================================================================== | [ 143.970213][ T37] BUG: KASAN: slab-use-after-free in __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) | [ 143.970454][ T37] Read of size 8 at addr ffff8880169eccd0 by task kworker/u19:0/37 | [ 143.970682][ T37] [ 143.970768][ T37] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 143.970770][ T37] Workqueue: events_unbound __unix_gc [ 143.970775][ T37] Call Trace: [ 143.970777][ T37] [ 143.970779][ T37] dump_stack_lvl (lib/dump_stack.c:123) [ 143.970787][ T37] print_address_description.constprop.0 (mm/kasan/report.c:409) [ 143.970795][ T37] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 143.970799][ T37] print_report (mm/kasan/report.c:522) [ 143.970802][ T37] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 143.970805][ T37] ? kasan_addr_to_slab (./include/linux/mm.h:1178 mm/kasan/../slab.h:211 mm/kasan/common.c:38) [ 143.970809][ T37] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 143.970812][ T37] kasan_report (mm/kasan/report.c:636) [ 143.970816][ T37] ? __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 143.970822][ T37] __unix_walk_scc (net/unix/garbage.c:119 net/unix/garbage.c:425) [ 143.970827][ T37] ? __pfx___unix_walk_scc (net/unix/garbage.c:407) [ 143.970833][ T37] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 143.970839][ T37] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 143.970842][ T37] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 143.970845][ T37] ? __unix_gc (net/unix/garbage.c:566) [ 143.970850][ T37] __unix_gc (./include/linux/list.h:373 net/unix/garbage.c:514 net/unix/garbage.c:576) [ 143.970854][ T37] ? __pfx___unix_gc (net/unix/garbage.c:560) [ 143.970861][ T37] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 143.970867][ T37] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 143.970871][ T37] process_one_work (kernel/workqueue.c:3243) [ 143.970879][ T37] ? __pfx_process_one_work (kernel/workqueue.c:3140) [ 143.970885][ T37] ? assign_work (kernel/workqueue.c:1200) [ 143.970892][ T37] worker_thread (kernel/workqueue.c:3315 kernel/workqueue.c:3402) [ 143.970897][ T37] ? __pfx_worker_thread (kernel/workqueue.c:3348) [ 143.970901][ T37] kthread (kernel/kthread.c:464) [ 143.970905][ T37] ? __pfx_kthread (kernel/kthread.c:413) [ 143.970907][ T37] ? ret_from_fork (arch/x86/kernel/process.c:147) [ 143.970912][ T37] ? __lock_release (kernel/locking/lockdep.c:5539) [ 143.970915][ T37] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 143.970919][ T37] ? __pfx_kthread (kernel/kthread.c:413) [ 143.970922][ T37] ret_from_fork (arch/x86/kernel/process.c:148) [ 143.970924][ T37] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: print_report:kasan_report:__unix_walk_scc:__unix_gc:process_one_work