BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde2c0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x220/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde2c0 00000000000000ae ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde180: 00 00 00 00 02 fa fa fa fa fa fa fa 00 00 00 00 ffffffff85fde200: 02 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa >ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa ^ ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde2e0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x240/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde2e0 00000000000000af ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde180: 00 00 00 00 02 fa fa fa fa fa fa fa 00 00 00 00 ffffffff85fde200: 02 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa >ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa ^ ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde300 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x260/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde300 00000000000000b0 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde200: 02 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa >ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ^ ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde320 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x280/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde320 00000000000000b1 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde200: 02 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa >ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ^ ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde340 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x2a0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde340 00000000000000b2 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde200: 02 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa >ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ^ ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde360 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x2c0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde360 00000000000000b3 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde200: 02 fa fa fa fa fa fa fa 05 fa fa fa fa fa fa fa ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa >ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ^ ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde380 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x2e0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde380 00000000000000b4 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa >ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde3a0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x300/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde3a0 00000000000000b5 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa >ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde3c0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x320/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde3c0 00000000000000b6 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa >ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde3e0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x340/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde3e0 00000000000000b7 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde280: 01 fa fa fa fa fa fa fa 00 00 02 fa fa fa fa fa ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa >ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde400 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x360/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde400 00000000000000b8 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde420 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x380/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde420 00000000000000b9 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde440 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x3a0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde440 00000000000000ba ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde460 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x3c0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde460 00000000000000bb ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde300: 04 fa fa fa fa fa fa fa 00 01 fa fa fa fa fa fa ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ^ ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde480 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x3e0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde480 00000000000000bc ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ^ ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde4a0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x400/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde4a0 00000000000000bd ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ^ ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde4c0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x420/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde4c0 00000000000000be ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ^ ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde4e0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x440/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde4e0 00000000000000bf ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde380: 04 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa >ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ^ ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde520 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x480/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde520 00000000000000c1 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa >ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ^ ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ffffffff85fde600: fa fa fa fa 00 03 fa fa fa fa fa fa 04 fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde540 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x4a0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde540 00000000000000c2 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde400: 07 fa fa fa fa fa fa fa 04 fa fa fa fa fa fa fa ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa >ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 ^ ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ffffffff85fde600: fa fa fa fa 00 03 fa fa fa fa fa fa 04 fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde580 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x4e0/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde580 00000000000000c4 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 >ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ^ ffffffff85fde600: fa fa fa fa 00 03 fa fa fa fa fa fa 04 fa fa fa ffffffff85fde680: fa fa fa fa 00 00 00 00 00 00 00 03 fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde5a0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x500/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde5a0 00000000000000c5 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [] kasan_report+0x34/0x40 mm/kasan/report.c:297 [] check_memory_region mm/kasan/kasan.c:285 [inline] [] __asan_loadN+0x12a/0x180 mm/kasan/kasan.c:678 [] memcpy+0x1d/0x40 mm/kasan/kasan.c:318 [] fbcon_get_font+0x221/0x560 drivers/video/console/fbcon.c:2406 [] con_font_get drivers/tty/vt/vt.c:4072 [inline] [] con_font_op+0x564/0xfa0 drivers/tty/vt/vt.c:4223 [] vt_ioctl+0x434/0x24e0 drivers/tty/vt/vt_ioctl.c:915 [] tty_ioctl+0x5d4/0x20f0 drivers/tty/tty_io.c:2988 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x17f/0xe70 fs/ioctl.c:674 [] SYSC_ioctl fs/ioctl.c:689 [inline] [] SyS_ioctl+0x74/0x80 fs/ioctl.c:680 [] entry_SYSCALL_64_fastpath+0x23/0xc1 Memory state around the buggy address: ffffffff85fde480: 00 00 00 05 fa fa fa fa 00 00 00 fa fa fa fa fa ffffffff85fde500: 00 00 00 00 00 01 fa fa fa fa fa fa 00 00 00 00 >ffffffff85fde580: 03 fa fa fa fa fa fa fa 00 00 00 00 02 fa fa fa ^ ffffffff85fde600: fa fa fa fa 00 03 fa fa fa fa fa fa 04 fa fa fa ffffffff85fde680: fa fa fa fa 00 00 00 00 00 00 00 03 fa fa fa fa ================================================================== ================================================================== BUG: KASAN: global-out-of-bounds in memcpy+0x1d/0x40 mm/kasan/kasan.c:318 at addr ffffffff85fde5e0 Read of size 32 by task syz-executor.1/19849 Address belongs to variable oid_index+0x540/0x580 CPU: 0 PID: 19849 Comm: syz-executor.1 Tainted: G B 4.6.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 1ffffffff0d9577e ffff88012787f7a0 ffffffff82c4dd46 0000000000000020 ffff88012787f830 ffffffff85fde5e0 00000000000000c7 ffff88012787f820 ffffffff817405ba 0000000000000010 0000000000000000 0000000000000286 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xe6/0x120 lib/dump_stack.c:51 [] print_address_description mm/kasan/report.c:190 [inline] [] kasan_report_error+0x59a/0x5c0 mm/kasan/report.c:275 [