KASAN: stack-out-of-bounds Read in rb

Kernel	Title	Repro	Count	Last	Reported	Patched	Status
upstream	KASAN: stack-out-of-bounds Read in rb_erase (4) kernel		1	1979d	1979d	11/27	fixed on 2019/02/17 14:17
upstream	KASAN: stack-out-of-bounds Read in rb_erase (2) kernel		1	2170d	2170d	0/27	closed as invalid on 2018/07/07 07:02
upstream	KASAN: stack-out-of-bounds Read in rb_erase (3) kernel	C	2	2165d	2169d	0/27	closed as dup on 2018/07/07 16:47

================================================================== PANIC: double fault, error_code: 0x0 BUG: KASAN: stack-out-of-bounds in ____rb_erase_color lib/rbtree.c:335 [inline] BUG: KASAN: stack-out-of-bounds in rb_erase+0x30e7/0x3550 lib/rbtree.c:462 CPU: 1 PID: 19337 Comm: syz-executor6 Not tainted 4.18.0-rc3+ #47 Read of size 8 at addr ffff8801a4c4f6b8 by task swapper/0/0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__lock_acquire+0x2e/0x5020 kernel/locking/lockdep.c:3294 Code: 41 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.18.0-rc3+ #47 57 41 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 89 Call Trace: cf 41 <IRQ> 56 41 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 55 49 89 fd 41 54 45 89 print_address_description+0x6c/0x20b mm/kasan/report.c:256 cc 53 65 4c kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.7+0x242/0x2fe mm/kasan/report.c:412 8b 34 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433 25 40 ____rb_erase_color lib/rbtree.c:335 [inline] rb_erase+0x30e7/0x3550 lib/rbtree.c:462 ee 01 00 48 83 e4 f0 48 81 ec 60 03 00 00 48 8b 45 10 <89> 94 24 80 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 84 24 98 RSP: 0018:ffff8801a46ecee0 EFLAGS: 00010082 RAX: 0000000000000000 RBX: 1ffff100348dda59 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88f92620 RBP: ffff8801a46ed270 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000000 R13: ffffffff88f92620 R14: ffff88019e95c0c0 R15: 0000000000000002 FS: 00007f36f0fe4700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8801a46eced8 CR3: 00000001a0821000 CR4: 00000000001406e0 DR0: 00000000200001c0 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: