================================================================== BUG: KASAN: slab-out-of-bounds in class_equal+0x40/0x50 kernel/locking/lockdep.c:1574 Read of size 8 at addr ffff88807a534640 by task syz-executor.3/11639 CPU: 0 PID: 11639 Comm: syz-executor.3 Not tainted 5.2.0-rc5-next-20190620 #19 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: Allocated by task 0: (stack is not available) Freed by task 2336059744: usercopy: Kernel memory overwrite attempt detected to SLAB object 'names_cache' (offset 4240, size 2)! ------------[ cut here ]------------ kernel BUG at mm/usercopy.c:102! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 11639 Comm: syz-executor.3 Not tainted 5.2.0-rc5-next-20190620 #19 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:usercopy_abort+0xbd/0xbf mm/usercopy.c:102 Code: c0 e8 4b 8d be ff 48 8b 55 c0 49 89 d9 4d 89 f0 ff 75 c8 4c 89 e1 4c 89 ee 48 c7 c7 c0 dd 95 87 ff 75 d0 41 57 e8 2b 6b a8 ff <0f> 0b e8 20 8d be ff e8 eb 3e f8 ff 8b 55 d4 4c 89 e1 49 89 d8 4c RSP: 0018:ffff88807a5337e8 EFLAGS: 00010082 RAX: 0000000000000069 RBX: ffffffff87962bc0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815b37e6 RDI: ffffed100f4a66ef RBP: ffff88807a533840 R08: 0000000000000069 R09: ffffed1015d044fa R10: ffffed1015d044f9 R11: ffff8880ae8227cf R12: ffffffff8883836d R13: ffffffff8795dc20 R14: ffffffff8795db60 R15: ffffffff8795db20 FS: 0000555555690940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff8c252d58 CR3: 00000000881ce000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 0c5f1fb6b802721c ]--- RIP: 0010:usercopy_abort+0xbd/0xbf mm/usercopy.c:102 Code: c0 e8 4b 8d be ff 48 8b 55 c0 49 89 d9 4d 89 f0 ff 75 c8 4c 89 e1 4c 89 ee 48 c7 c7 c0 dd 95 87 ff 75 d0 41 57 e8 2b 6b a8 ff <0f> 0b e8 20 8d be ff e8 eb 3e f8 ff 8b 55 d4 4c 89 e1 49 89 d8 4c RSP: 0018:ffff88807a5337e8 EFLAGS: 00010082 RAX: 0000000000000069 RBX: ffffffff87962bc0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815b37e6 RDI: ffffed100f4a66ef RBP: ffff88807a533840 R08: 0000000000000069 R09: ffffed1015d044fa R10: ffffed1015d044f9 R11: ffff8880ae8227cf R12: ffffffff8883836d R13: ffffffff8795dc20 R14: ffffffff8795db60 R15: ffffffff8795db20 FS: 0000555555690940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff8c252d58 CR3: 00000000881ce000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400