| TITLE: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath at addr ADDR |
| CORRUPTED: Y |
| |
| [ 46.284905] ================================================================== |
| ** 2977 printk messages dropped ** [ 46.292061] [<ffffffff814f873b>] ? rw_verify_area+0xbb/0x2c0 |
| ** 3764 printk messages dropped ** [ 46.300984] BUG: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath+0x5ad/0x660 at addr ffff8800b7eb57d4 |
| ** 5762 printk messages dropped ** [ 46.314596] [<ffffffff814fb2c0>] ? do_sendfile+0xf40/0xf40 |
| ** 3692 printk messages dropped ** [ 46.323313] ___slab_alloc.constprop.78+0x4c6/0x530 |
| ** 3400 printk messages dropped ** [ 46.331342] CPU: 0 PID: 6756 Comm: syz-executor1 Tainted: G B 4.4.105-ge303a83 #5 |
| ** 4922 printk messages dropped ** [ 46.342991] INFO: Allocated in fasync_helper+0x29/0x90 age=6 cpu=0 pid=6756 |
| ** 4288 printk messages dropped ** [ 46.353225] run_ksoftirqd+0x20/0x60 |
| ** 2843 printk messages dropped ** [ 46.359933] INFO: Freed in fasync_free_rcu+0x14/0x20 age=7 cpu=0 pid=3 |
| ** 4111 printk messages dropped ** [ 46.369656] BUG: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath+0x5ad/0x660 at addr ffff8800b7eb57d4 |
| ** 5713 printk messages dropped ** [ 46.383149] __slab_free+0x18c/0x2b0 |
| ** 2818 printk messages dropped ** [ 46.389866] [<ffffffff81223871>] ? __lock_is_held+0xa1/0xf0 |
| ** 3718 printk messages dropped ** [ 46.398717] Object ffff8800b7eb5780: ff ff ff ff ff ff ff ff 80 e3 70 85 ff ff ff ff ..........p..... |
| ** 5181 printk messages dropped ** [ 46.411008] 0000000000000000 263dc65b38caca23 ffff8801d2e979b0 ffffffff81cc9b4f |
| ** 4420 printk messages dropped ** [ 46.421691] Object ffff8800b7eb57b0: 00 00 00 00 00 00 00 00 00 cc 1c b7 00 88 ff ff ................ |
| ** 5248 printk messages dropped ** [ 46.434131] Object ffff8800b7eb57a0: 00 50 8b 83 ff ff ff ff 01 46 00 00 07 00 00 00 .P.......F...... |
| ** 5252 printk messages dropped ** [ 46.446625] CPU: 0 PID: 6756 Comm: syz-executor1 Tainted: G B 4.4.105-ge303a83 #5 |
| ** 4982 printk messages dropped ** [ 46.458438] [<ffffffff8374ab36>] entry_SYSCALL_64_fastpath+0x16/0x76 |
| ** 4071 printk messages dropped ** [ 46.468040] entry_SYSCALL_64_fastpath+0x16/0x76 |
| ** 3303 printk messages dropped ** [ 46.475819] fasync_free_rcu+0x14/0x20 |
| ** 2914 printk messages dropped ** [ 46.482677] ___slab_alloc.constprop.78+0x4c6/0x530 |
| ** 3327 printk messages dropped ** [ 46.490514] 0000000000000000 263dc65b38caca23 ffff8801d2e979b0 ffffffff81cc9b4f |
| ** 4472 printk messages dropped ** [ 46.501243] __slab_alloc.isra.74.constprop.77+0x50/0xa0 |
| ** 3565 printk messages dropped ** [ 46.509661] [<ffffffff82564a50>] ? sg_remove_request+0x60/0x100 |
| ** 3881 printk messages dropped ** [ 46.518862] Object ffff8800b7eb57b0: 00 00 00 00 00 00 00 00 00 cc 1c b7 00 88 ff ff ................ |
| ** 5287 printk messages dropped ** [ 46.531333] ffff8800b7eb5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 |
| ** 4399 printk messages dropped ** [ 46.541703] [<ffffffff814db589>] __asan_report_load4_noabort+0x29/0x30 |
| ** 4144 printk messages dropped ** [ 46.551481] [<ffffffff814fb2c0>] ? do_sendfile+0xf40/0xf40 |
| ** 3701 printk messages dropped ** [ 46.560195] kmem_cache_free+0x1f1/0x300 |
| ** 2941 printk messages dropped ** [ 46.567116] CPU: 0 PID: 6756 Comm: syz-executor1 Tainted: G B 4.4.105-ge303a83 #5 |
| ** 4977 printk messages dropped ** [ 46.579020] [<ffffffff814f873b>] ? rw_verify_area+0xbb/0x2c0 |
| ** 3782 printk messages dropped ** [ 46.587934] __do_softirq+0x24d/0xa60 |
| ** 2872 printk messages dropped ** [ 46.594689] [<ffffffff814db1f7>] kasan_report.part.2+0x227/0x530 |
| ** 3916 printk messages dropped ** [ 46.603948] [<ffffffff81223871>] ? __lock_is_held+0xa1/0xf0 |
| ** 3684 printk messages dropped ** [ 46.612655] ffff8800b7eb5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 |
| ** 4285 printk messages dropped ** [ 46.622887] ----------------------------------------------------------------------------- |
| [ 46.622887] |
| ** 5380 printk messages dropped ** [ 46.635852] [<ffffffff814f873b>] ? rw_verify_area+0xbb/0x2c0 |
| ** 3744 printk messages dropped ** [ 46.644772] [<ffffffff814f6d8a>] __vfs_read+0xda/0x3e0 |
| ** 3495 printk messages dropped ** [ 46.653074] Object ffff8800b7eb5770: 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... |
| ** 5151 printk messages dropped ** [ 46.665447] BUG fasync_cache (Tainted: G B ): kasan: bad access detected |
| ** 4450 printk messages dropped ** [ 46.676199] Object ffff8800b7eb57a0: 00 50 8b 83 ff ff ff ff 01 46 00 00 07 00 00 00 .P.......F...... |
| ** 5028 printk messages dropped ** [ 46.688511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 |
| ** 5080 printk messages dropped ** [ 46.701115] __slab_free+0x18c/0x2b0 |
| ** 2823 printk messages dropped ** [ 46.708033] [<ffffffff814fb2c0>] ? do_sendfile+0xf40/0xf40 |
| ** 3709 printk messages dropped ** [ 46.716853] INFO: Slab 0xffffea0002dfad00 objects=20 used=3 fp=0xffff8800b7eb5a90 flags=0x4000000000004080 |
| ** 5386 printk messages dropped ** [ 46.729553] sg_fasync+0x66/0xb0 |
| ** 2713 printk messages dropped ** [ 46.736033] INFO: Object 0xffff8800b7eb5770 @offset=6000 fp=0xdead4ead00000000 |
| [ 46.736033] |
| ** 5012 printk messages dropped ** [ 46.747833] entry_SYSCALL_64_fastpath+0x16/0x76 |
| ** 3299 printk messages dropped ** [ 46.755632] entry_SYSCALL_64_fastpath+0x16/0x76 |
| ** 3287 printk messages dropped ** [ 46.763372] BUG: KASAN: slab-out-of-bounds in native_queued_spin_lock_slowpath+0x5ad/0x660 at addr ffff8800b7eb57d4 |
| ** 5759 printk messages dropped ** [ 46.776952] [<ffffffff814f873b>] ? rw_verify_area+0xbb/0x2c0 |
| ** 3782 printk messages dropped ** [ 46.785872] __do_softirq+0x24d/0xa60 |
| ** 2886 printk messages dropped ** [ 46.792668] [<ffffffff814f6d8a>] __vfs_read+0xda/0x3e0 |
| ** 3551 printk messages dropped ** [ 46.801035] __slab_alloc.isra.74.constprop.77+0x50/0xa0 |
| ** 3575 printk messages dropped ** [ 46.809466] [<ffffffff81223871>] ? __lock_is_held+0xa1/0xf0 |
| ** 3733 printk messages dropped ** [ 46.818289] [<ffffffff8123648d>] ? native_queued_spin_lock_slowpath+0x5ad/0x660 |
| ** 4487 printk messages dropped ** [ 46.828863] Object ffff8800b7eb57b0: 00 00 00 00 00 00 00 00 00 cc 1c b7 00 88 ff ff ................ |
| ** 5283 printk messages dropped ** [ 46.841301] [<ffffffff81003044>] ? lockdep_sys_exit_thunk+0x12/0x14 |
| ** 3974 printk messages dropped ** [ 46.850709] [<ffffffff81003044>] ? lockdep_sys_exit_thunk+0x12/0x14 |
| ** 4039 printk messages dropped ** [ 46.860329] [<ffffffff8122ab40>] ? debug_check_no_locks_freed+0x2c0/0x2c0 |
| ** 4250 printk messages dropped ** [ 46.870327] Object ffff8800b7eb57b0: 00 00 00 00 00 00 00 00 00 cc 1c b7 00 88 ff ff ................ |
| ** 5284 printk messages dropped ** [ 46.882803] [<ffffffff8374ab36>] entry_SYSCALL_64_fastpath+0x16/0x76 |
| ** 4009 printk messages dropped ** [ 46.892231] Bytes b4 ffff8800b7eb5760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ |
| ** 5323 printk messages dropped ** [ 46.904922] INFO: Object 0xffff8800b7eb5770 @offset=6000 fp=0xdead4ead00000000 |
