================================================================== BUG: KASAN: use-after-free in class_equal+0x40/0x50 kernel/locking/lockdep.c:1527 Read of size 8 at addr ffff888098bf5d80 by task syz-executor.3/9742 CPU: 1 PID: 9742 Comm: syz-executor.3 Not tainted 5.2.0-rc5+ #41 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: Allocated by task 2170204341: usercopy: Kernel memory overwrite attempt detected to SLAB object 'kmalloc-512' (offset 520, size 1)! ------------[ cut here ]------------ kernel BUG at mm/usercopy.c:98! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 9742 Comm: syz-executor.3 Not tainted 5.2.0-rc5+ #41 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:usercopy_abort+0xbd/0xbf mm/usercopy.c:98 Code: c0 e8 88 2e bf ff 48 8b 55 c0 49 89 d9 4d 89 f0 ff 75 c8 4c 89 e1 4c 89 ee 48 c7 c7 40 c9 95 87 ff 75 d0 41 57 e8 b8 32 a9 ff <0f> 0b e8 5d 2e bf ff e8 58 64 f8 ff 8b 55 d4 4c 89 e1 49 89 d8 4c RSP: 0018:ffff888098bf55d0 EFLAGS: 00010082 RAX: 0000000000000068 RBX: ffffffff88824513 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815ad926 RDI: ffffed101317eaac RBP: ffff888098bf5628 R08: 0000000000000068 R09: ffffed1015d244fa R10: ffffed1015d244f9 R11: ffff8880ae9227cf R12: ffffffff888280f5 R13: ffffffff8795c7a0 R14: ffffffff8795c6e0 R15: ffffffff8795c6a0 FS: 00005555560c7940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff8c24cbd8 CR3: 000000008e288000 CR4: 00000000001406e0 Call Trace: Modules linked in: ---[ end trace cdfa73d727002b28 ]--- RIP: 0010:usercopy_abort+0xbd/0xbf mm/usercopy.c:98 Code: c0 e8 88 2e bf ff 48 8b 55 c0 49 89 d9 4d 89 f0 ff 75 c8 4c 89 e1 4c 89 ee 48 c7 c7 40 c9 95 87 ff 75 d0 41 57 e8 b8 32 a9 ff <0f> 0b e8 5d 2e bf ff e8 58 64 f8 ff 8b 55 d4 4c 89 e1 49 89 d8 4c RSP: 0018:ffff888098bf55d0 EFLAGS: 00010082 RAX: 0000000000000068 RBX: ffffffff88824513 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815ad926 RDI: ffffed101317eaac RBP: ffff888098bf5628 R08: 0000000000000068 R09: ffffed1015d244fa R10: ffffed1015d244f9 R11: ffff8880ae9227cf R12: ffffffff888280f5 R13: ffffffff8795c7a0 R14: ffffffff8795c6e0 R15: ffffffff8795c6a0 FS: 00005555560c7940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff8c24cbd8 CR3: 000000008e288000 CR4: 00000000001406e0