Complete report #1422685
| Frame # |
Function |
Binary |
Source or offset |
Line |
|
1
|
dump_stack
|
vmlinux |
|
0x8e
|
|
2
|
|
vmlinux |
|
0x8e
|
|
3
|
dump_stack
|
vmlinux |
|
0x8e
|
|
4
|
|
vmlinux |
|
0x8e
|
|
5
|
|
vmlinux |
|
0x8e
|
|
6
|
|
vmlinux |
|
0x8e
|
|
7
|
|
vmlinux |
|
0x8e
|
|
8
|
dump_stack
|
vmlinux |
|
0x8e
|
|
9
|
|
vmlinux |
|
0x8e
|
|
10
|
dump_stack
|
vmlinux |
|
0x8e
|
|
11
|
dump_stack
|
vmlinux |
|
0x8e
|
|
12
|
efx_nic_fini_interrupt
|
sfc |
|
0x72
|
|
13
|
efx_nic_fini_interrupt
|
sfc |
|
0x72
|
|
14
|
efx_nic_fini_interrupt
|
sfc |
|
0x72
|
|
15
|
efx_dl_try_add_device
|
sfc_driverlink |
|
0x7c6
|
|
16
|
efx_dl_try_add_device
|
sfc_driverlink |
|
0x7c6
|
|
17
|
|
sfc_resource |
|
0x230
|
|
18
|
efrm_nic_del_device
|
sfc_resource |
|
0x230
|
|
19
|
|
sfc_resource |
|
0x230
|
|
20
|
|
sfc_resource |
|
0x230
|
|
21
|
|
vmlinux |
|
0x8e
|
|
22
|
|
vmlinux |
|
0x8e
|
|
23
|
|
vmlinux |
|
0x8e
|
|
24
|
|
vmlinux |
|
0x8e
|
|
25
|
|
vmlinux |
|
0x8e
|
|
26
|
|
vmlinux |
|
0x8e
|
|
27
|
|
vmlinux |
|
0x8e
|
|
28
|
|
vmlinux |
|
0x8e
|
|
29
|
|
vmlinux |
|
0x8e
|
|
30
|
|
vmlinux |
|
0x8e
|
|
31
|
|
vmlinux |
|
0x8e
|
|
32
|
|
vmlinux |
|
0x8e
|
|
33
|
|
vmlinux |
|
0x8e
|
|
34
|
|
vmlinux |
|
0x8e
|
|
35
|
|
vmlinux |
|
0x8e
|
|
36
|
|
vmlinux |
|
0x8e
|
|
37
|
|
vmlinux |
|
0x8e
|
|
38
|
|
vmlinux |
|
0x8e
|
|
39
|
|
vmlinux |
|
0x8e
|
|
40
|
|
vmlinux |
|
0x8e
|
BUG: KASAN: use-after-free in free_irq_cpu_rmap+0x13b/0x173
Read of size 4 at addr ff1100027e7cc100 by task modprobe/644087
CPU: 9 PID: 644087 Comm: modprobe Tainted: G OE --------- - - 4.18.0-348.el8.x86_64+debug #1
Hardware name: Dell Inc. PowerEdge R750/04V528, BIOS 1.7.4 06/27/2022
Call Trace:
dump_stack+0x8e/0xd0
? free_irq_cpu_rmap+0x13b/0x173
print_address_description.constprop.5+0x1e/0x230
? kmsg_dump_rewind_nolock+0xd9/0xd9
? free_irq_cpu_rmap+0x13b/0x173
? free_irq_cpu_rmap+0x13b/0x173
? free_irq_cpu_rmap+0x13b/0x173
__kasan_report.cold.7+0x37/0x86
? free_irq_cpu_rmap+0x13b/0x173
kasan_report+0x37/0x50
free_irq_cpu_rmap+0x13b/0x173
efx_nic_fini_interrupt+0x72/0x2d0 [sfc]
__efx_net_dealloc+0x105/0x430 [sfc]
__efx_dl_publish+0xd3/0x110 [sfc]
efx_dl_try_add_device+0x7c6/0x1050 [sfc_driverlink]
efx_dl_register_driver_api_ver_33+0x1ef/0x2e0 [sfc_driverlink]
? efrm_nic_del_device+0x230/0x230 [sfc_resource]
efrm_driverlink_register+0x15/0x50 [sfc_resource]
? efrm_filter_install_proc_entries+0x46/0x50 [sfc_resource]
? init_sfc_resource+0x48/0xa0 [sfc_resource]
? do_one_initcall+0xe9/0x580
? perf_trace_initcall_level+0x460/0x460
? kasan_unpoison_shadow+0x30/0x40
? __kasan_kmalloc.constprop.9+0xc1/0xd0
? do_init_module+0x4e/0x6f0
? kmem_cache_alloc_trace+0x142/0x320
? kasan_unpoison_shadow+0x30/0x40
? do_init_module+0x1d1/0x6f0
? load_module+0x36bd/0x4f50
? do_iter_readv_writev+0x6d0/0x6d0
? layout_and_allocate+0x3950/0x3950
? kernel_read_file+0x30c/0x4e0
? __do_sys_finit_module+0x11a/0x1b0
? __do_sys_finit_module+0x11a/0x1b0
? __ia32_sys_init_module+0xa0/0xa0
? __do_sys_newfstat+0xb5/0xc0
? lockdep_hardirqs_on_prepare+0x294/0x3e0
? do_syscall_64+0x22/0x430
? do_syscall_64+0xa5/0x430
? entry_SYSCALL_64_after_hwframe+0x6a/0xdf