================================================================== BUG: KASAN: slab-out-of-bounds in class_equal+0x40/0x50 kernel/locking/lockdep.c:1527 Read of size 8 at addr ffff888095f7b870 by task syz-executor.3/11076 CPU: 0 PID: 11076 Comm: syz-executor.3 Not tainted 5.2.0-rc3+ #27 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: Allocated by task 10668: save_stack+0x23/0x90 mm/kasan/common.c:71 set_track mm/kasan/common.c:79 [inline] __kasan_kmalloc mm/kasan/common.c:489 [inline] __kasan_kmalloc.constprop.0+0xcf/0xe0 mm/kasan/common.c:462 kasan_kmalloc+0x9/0x10 mm/kasan/common.c:503 __do_kmalloc mm/slab.c:3660 [inline] __kmalloc+0x15c/0x740 mm/slab.c:3669 kmalloc include/linux/slab.h:552 [inline] map_update_elem kernel/bpf/syscall.c:913 [inline] __do_sys_bpf+0x289b/0x42c0 kernel/bpf/syscall.c:2818 __se_sys_bpf kernel/bpf/syscall.c:2789 [inline] __x64_sys_bpf+0x73/0xb0 kernel/bpf/syscall.c:2789 do_syscall_64+0xfd/0x680 arch/x86/entry/common.c:301 entry_SYSCALL_64_after_hwframe+0x49/0xbe Freed by task 10668: save_stack+0x23/0x90 mm/kasan/common.c:71 set_track mm/kasan/common.c:79 [inline] __kasan_slab_free+0x102/0x150 mm/kasan/common.c:451 kasan_slab_free+0xe/0x10 mm/kasan/common.c:459 __cache_free mm/slab.c:3432 [inline] kfree+0xcf/0x220 mm/slab.c:3755 map_update_elem kernel/bpf/syscall.c:972 [inline] __do_sys_bpf+0x2bf5/0x42c0 kernel/bpf/syscall.c:2818 __se_sys_bpf kernel/bpf/syscall.c:2789 [inline] __x64_sys_bpf+0x73/0xb0 kernel/bpf/syscall.c:2789 do_syscall_64+0xfd/0x680 arch/x86/entry/common.c:301 entry_SYSCALL_64_after_hwframe+0x49/0xbe The buggy address belongs to the object at ffff888095f7b840 which belongs to the cache kmalloc-32 of size 32 The buggy address is located 16 bytes to the right of 32-byte region [ffff888095f7b840, ffff888095f7b860) The buggy address belongs to the page: page:ffffea000257dec0 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff888095f7bfc1 flags: 0x1fffc0000000200(slab) raw: 01fffc0000000200 ffffea00029e7408 ffffea00027e8708 ffff8880aa4001c0 raw: ffff888095f7bfc1 ffff888095f7b000 0000000100000030 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff888095f7b700: 00 00 00 00 fc fc fc fc fb fb fb fb fc fc fc fc ffff888095f7b780: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc >ffff888095f7b800: f1 f1 f1 f1 00 f2 f2 f2 00 f2 f2 f2 fc fc fc fc ^ ffff888095f7b880: 00 00 00 f3 f3 f3 f3 f3 fb fb fb fb fc fc fc fc ffff888095f7b900: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc 00 ==================================================================