usercopy: Kernel memory overwrite attempt detected to SLAB object 'names_cache' (offset 1628, size 4068)! ------------[ cut here ]------------ kernel BUG at mm/usercopy.c:100! invalid opcode: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 17832 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #287 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:usercopy_abort+0xae/0xd0 mm/usercopy.c:88 RSP: 0018:ffff8801b698fab8 EFLAGS: 00010286 RAX: 0000000000000069 RBX: ffffffff880b966c RCX: 0000000000000000 RDX: 0000000000000069 RSI: 1ffff10036d31f0c RDI: ffffed0036d31f4b RBP: ffff8801b698fb10 R08: 0000000000000000 R09: 1ffff10036d31eb3 R10: 000000000000059c R11: ffffffff88583118 R12: ffffffff87520540 R13: ffffffff875237e0 R14: 000000000000065c R15: 0000000000000fe4 FS: 0000000002715940(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004ba18d CR3: 00000001d757b001 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __check_heap_object+0xb5/0xc0 mm/slab.c:4430 check_heap_object mm/usercopy.c:236 [inline] __check_object_size+0x272/0x530 mm/usercopy.c:259 check_object_size include/linux/thread_info.h:112 [inline] strncpy_from_user+0xf4/0x430 lib/strncpy_from_user.c:116 getname_flags+0x10e/0x580 fs/namei.c:149 getname fs/namei.c:209 [inline] SYSC_symlinkat fs/namei.c:4121 [inline] SyS_symlinkat fs/namei.c:4112 [inline] SYSC_symlink fs/namei.c:4145 [inline] SyS_symlink+0x7d/0x240 fs/namei.c:4143 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x454ba7 RSP: 002b:0000000000a3eab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 RAX: ffffffffffffffda RBX: 000000000000019f RCX: 0000000000454ba7 RDX: 0000000000000000 RSI: 00000000004ba1a3 RDI: 0000000000a3f830 RBP: 0000000000000013 R08: 0000000000000000 R09: 0000000002715940 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001380 Code: e8 f8 32 c1 ff 48 8b 45 c0 4c 8b 45 c8 4d 89 e9 48 8b 55 d0 41 57 48 89 d9 41 56 4c 89 e6 48 c7 c7 e0 06 52 87 50 e8 1a d9 aa ff <0f> 0b 49 c7 c5 80 04 52 87 4c 89 e8 4d 89 e8 e9 76 ff ff ff 0f RIP: usercopy_abort+0xae/0xd0 mm/usercopy.c:88 RSP: ffff8801b698fab8 ---[ end trace e956b06abf3f0a94 ]--- Kernel panic - not syncing: Fatal exception Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..