BUG: unable to handle kernel paging request at 0000000000005688 PGD 1c4bb6067 P4D 1c4bb6067 PUD 1c56ef067 PMD 0 Oops: 0002 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 7140 Comm: syz-executor0 Not tainted 4.17.0-rc7+ #77 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:vmx_vcpu_run+0x942/0x25c0 arch/x86/kvm/vmx.c:9741 RSP: 0018:ffff8801afacf398 EFLAGS: 00010002 ================================================================== BUG: KASAN: stack-out-of-bounds in __show_regs.cold.7+0x4e/0x54a arch/x86/kernel/process_64.c:79 Read of size 8 at addr ffff8801afacf310 by task syz-executor0/7140 CPU: 1 PID: 7140 Comm: syz-executor0 Not tainted 4.17.0-rc7+ #77 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 print_address_description+0x6c/0x20b mm/kasan/report.c:256 kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.7+0x242/0x2fe mm/kasan/report.c:412 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433 __show_regs.cold.7+0x4e/0x54a arch/x86/kernel/process_64.c:79 show_regs+0x2b/0x40 arch/x86/kernel/dumpstack.c:389 __die+0x90/0xc4 arch/x86/kernel/dumpstack.c:326 no_context+0x3ab/0x960 arch/x86/mm/fault.c:814 __bad_area_nosemaphore+0x2d3/0x370 arch/x86/mm/fault.c:905 bad_area_nosemaphore+0x33/0x40 arch/x86/mm/fault.c:912 __do_page_fault+0x1d3/0xe40 arch/x86/mm/fault.c:1331 do_page_fault+0xee/0x8a7 arch/x86/mm/fault.c:1474 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1160 RIP: 0010:vmx_vcpu_run+0x942/0x25c0 arch/x86/kvm/vmx.c:9741 RSP: 0018:ffff8801afacf398 EFLAGS: 00010002 RAX: dffffc0000000000 RBX: 1ffff10035f59d29 RCX: 0000000000000000 RDX: 1ffff100364eaa00 RSI: ffffffff8110983b RDI: 0000000000000007 RBP: ffff8801afacea10 R08: ffff8801ad06e600 R09: ffffed003b5e46d2 R10: ffffed003b5e46d2 R11: ffff8801daf23693 R12: 1ffff10035f59d2d R13: ffff8801b2755000 R14: ffff8801aface9e8 R15: 0000000000000000 WARNING: kernel stack regs at (ptrval) in syz-executor0:7140 has bad 'bp' value (ptrval) unwind stack type:1 next_sp: (null) mask:0x2 graph_idx:0 (ptrval): ffff8801afaced18 (0xffff8801afaced18) (ptrval): ffffffff8129e9d1 (show_trace_log_lvl+0x1dd/0x25c) (ptrval): ffffffff811f7452 (vmx_vcpu_run+0x942/0x25c0) (ptrval): ffff8801afacf368 (0xffff8801afacf368) (ptrval): 0000000000000002 (0x2) (ptrval): 0000000000000001 (0x1) (ptrval): ffff8801afac8000 (0xffff8801afac8000) (ptrval): ffff8801afad0000 (0xffff8801afad0000) (ptrval): 0000000000000000 ... (ptrval): 0000000000000001 (0x1) (ptrval): ffff8801afac8000 (0xffff8801afac8000) (ptrval): ffff8801afad0000 (0xffff8801afad0000) (ptrval): 0000000000000000 ... (ptrval): 0000000000000002 (0x2) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): 0000010100000000 (0x10100000000) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacec50 (0xffff8801afacec50) (ptrval): ffffffff811f7452 (vmx_vcpu_run+0x942/0x25c0) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): 0000000000000093 (0x93) (ptrval): 0000000000000000 ... (ptrval): ffffffff88d18d60 (pv_cpu_ops+0x120/0x120) (ptrval): 00000000ffffffff (0xffffffff) (ptrval): ffff8801afaced28 (0xffff8801afaced28) (ptrval): ffffffff8129ea88 (show_stack+0x38/0x3a) (ptrval): ffff8801afacedd8 (0xffff8801afacedd8) (ptrval): ffffffff876824d5 (dump_stack+0x1b9/0x294) (ptrval): fffffbfff11a31ac (0xfffffbfff11a31ac) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): 1ffff10035f59daa (0x1ffff10035f59daa) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a5d6c (regoff.33625+0x35bbcc/0x36e380) (ptrval): ffffffff8768231c (dump_stack_print_info.cold.2+0x52/0x52) (ptrval): ffffffff8160f782 (printk+0x9e/0xba) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889bb5fa (K512_4+0x127a/0x11bdbc) (ptrval): ffffffff8160f6e4 (kmsg_dump_rewind_nolock+0xe4/0xe4) (ptrval): ffffffff88e23780 (kmem_cache_boot+0x320/0x320) (ptrval): ffffffff00000008 (0xffffffff00000008) (ptrval): ffff8801afacee20 (0xffff8801afacee20) (ptrval): ffff8801afacedd0 (0xffff8801afacedd0) (ptrval): ffffffff81b5a244 (kasan_check_write+0x14/0x20) (ptrval): ffffea0006beb3c0 (0xffffea0006beb3c0) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf310 (0xffff8801afacf310) (ptrval): 0000000000000008 (0x8) (ptrval): ffff8801afacf310 (0xffff8801afacf310) (ptrval): ffff8801afacee10 (0xffff8801afacee10) (ptrval): ffffffff81b5b531 (print_address_description+0x6c/0x20b) (ptrval): ffff8801afacf310 (0xffff8801afacf310) (ptrval): 0000000000000000 ... (ptrval): ffffffff8128c4d4 (__show_regs.cold.7+0x4e/0x54a) (ptrval): 0000000000000008 (0x8) (ptrval): ffff8801afacf310 (0xffff8801afacf310) (ptrval): ffff8801afacee50 (0xffff8801afacee50) (ptrval): ffffffff81b5b912 (kasan_report.cold.7+0x242/0x2fe) (ptrval): 0000000000000086 (0x86) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): 0000000000000001 (0x1) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): ffff8801afacee60 (0xffff8801afacee60) (ptrval): ffffffff81b5b214 (__asan_report_load8_noabort+0x14/0x20) (ptrval): ffff8801afaceec8 (0xffff8801afaceec8) (ptrval): ffffffff8128c4d4 (__show_regs.cold.7+0x4e/0x54a) (ptrval): ffff8801afaceeb0 (0xffff8801afaceeb0) (ptrval): ffffffff8768230d (dump_stack_print_info.cold.2+0x43/0x52) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): ffffffff889b2919 (regoff.33625+0x368779/0x36e380) (ptrval): ffffffff87c79800 (__func__.46292+0x680/0x940) (ptrval): 0000000000000002 (0x2) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): ffffffff87c79800 (__func__.46292+0x680/0x940) (ptrval): 0000000000000002 (0x2) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): ffff8801afacef00 (0xffff8801afacef00) (ptrval): ffffffff8129e71b (show_regs+0x2b/0x40) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): ffffffff87c79800 (__func__.46292+0x680/0x940) (ptrval): 0000000000000002 (0x2) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacef28 (0xffff8801afacef28) (ptrval): ffffffff8129ec5c (__die+0x90/0xc4) (ptrval): 1ffff10035f59dee (0x1ffff10035f59dee) (ptrval): 0000000057ac6e9d (0x57ac6e9d) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffff8801afaceff8 (0xffff8801afaceff8) (ptrval): ffffffff8135423b (no_context+0x3ab/0x960) (ptrval): ffffffff81071959 (kvm_mmu_notifier_release+0x59/0x90) (ptrval): ffffffff81071900 (kvm_dying_cpu+0x50/0x50) (ptrval): 0000000000000086 (0x86) (ptrval): dffffc0000000001 (0xdffffc0000000001) (ptrval): ffffed000000000b (0xffffed000000000b) (ptrval): 0000000000005688 (0x5688) (ptrval): 0000000000000002 (0x2) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889b0969 (regoff.33625+0x3667c9/0x36e380) (ptrval): ffffffff81353e90 (pgtable_bad+0x130/0x130) (ptrval): ffff8801afacef98 (0xffff8801afacef98) (ptrval): 1ffff10035f59df7 (0x1ffff10035f59df7) (ptrval): 00000001afacefd0 (0x1afacefd0) (ptrval): ffff8801afacf018 (0xffff8801afacf018) (ptrval): ffff8801ad822528 (0xffff8801ad822528) (ptrval): ffff8801ad822000 (0xffff8801ad822000) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a59e8 (regoff.33625+0x35b848/0x36e380) (ptrval): ffffffff81b3b730 (__mmu_notifier_invalidate_range_end+0x380/0x380) (ptrval): 0000000000000002 (0x2) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): 0000000000005688 (0x5688) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf058 (0xffff8801afacf058) (ptrval): ffffffff81354ac3 (__bad_area_nosemaphore+0x2d3/0x370) (ptrval): ffffffff00000001 (0xffffffff00000001) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffff88017f78d1d0 (0xffff88017f78d1d0) (ptrval): 0000000000000000 ... (ptrval): 00000001daf23680 (0x1daf23680) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): 0000000000000002 (0x2) (ptrval): 0000000000005688 (0x5688) (ptrval): 0000000000000000 ... (ptrval): 0000000000000002 (0x2) (ptrval): ffff8801afacf088 (0xffff8801afacf088) (ptrval): ffffffff81354b93 (bad_area_nosemaphore+0x33/0x40) (ptrval): 0000000000005688 (0x5688) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): 0000000000000000 ... (ptrval): 0000000000000001 (0x1) (ptrval): ffff8801afacf170 (0xffff8801afacf170) (ptrval): ffffffff81355643 (__do_page_fault+0x1d3/0xe40) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff88d8e520 (rcu_callback_map+0x40/0x40) (ptrval): ffffffff81ba59c1 (__khugepaged_exit+0x421/0x680) (ptrval): ffff8801afacf200 (0xffff8801afacf200) (ptrval): ffff880100000001 (0xffff880100000001) (ptrval): 0000000000000286 (0x286) (ptrval): 1ffff10035f59e1d (0x1ffff10035f59e1d) (ptrval): 00000000000000a8 (0xa8) (ptrval): 0000000000000000 ... (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889b7583 (regoff.33625+0x36d3e3/0x36e380) (ptrval): ffffffff81355470 (mm_fault_error+0x380/0x380) (ptrval): ffff8801afacf228 (0xffff8801afacf228) (ptrval): ffffffff81a9b854 (exit_mmap+0xa4/0x5a0) (ptrval): ffff8801adf947f0 (0xffff8801adf947f0) (ptrval): 1ffff10035f59e24 (0x1ffff10035f59e24) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889cdfa4 (K512_4+0x13c24/0x11bdbc) (ptrval): ffffffff81a9b7b0 (__ia32_sys_munmap+0x80/0x80) (ptrval): ffffffff81ba59e9 (__khugepaged_exit+0x449/0x680) (ptrval): ffff8801afacf228 (0xffff8801afacf228) (ptrval): 1ffff10035f59e32 (0x1ffff10035f59e32) (ptrval): ffff8801afacf2e8 (0xffff8801afacf2e8) (ptrval): 0000000000000002 (0x2) (ptrval): 0000000000005688 (0x5688) (ptrval): ffff8801afacf2b0 (0xffff8801afacf2b0) (ptrval): ffff8801afacf2d8 (0xffff8801afacf2d8) (ptrval): ffffffff813563ce (do_page_fault+0xee/0x8a7) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf198 (0xffff8801afacf198) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a59e8 (regoff.33625+0x35b848/0x36e380) (ptrval): ffffffff813562e0 (vmalloc_sync_all+0x30/0x30) (ptrval): ffffffff81650730 (rcu_note_context_switch+0x710/0x710) (ptrval): 1ffff10035f59e42 (0x1ffff10035f59e42) (ptrval): ffff8801afacf200 (0xffff8801afacf200) (ptrval): ffff8801c6f86320 (0xffff8801c6f86320) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff87c88b80 (reg2hex+0x3a0/0xf80) (ptrval): 00000000000003d3 (0x3d3) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf228 (0xffff8801afacf228) (ptrval): ffffffff81525705 (__might_sleep+0x95/0x190) (ptrval): dcce8253b5706500 (0xdcce8253b5706500) (ptrval): ffff8801ad822000 (0xffff8801ad822000) (ptrval): 1ffff10035f59e4a (0x1ffff10035f59e4a) (ptrval): ffff8801afacf330 (0xffff8801afacf330) (ptrval): ffff8801afacf2b0 (0xffff8801afacf2b0) (ptrval): ffff8801ad822128 (0xffff8801ad822128) (ptrval): ffff8801afacf358 (0xffff8801afacf358) (ptrval): ffffffff8144c021 (mmput+0x251/0x610) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889c0ae8 (K512_4+0x6768/0x11bdbc) (ptrval): ffffffff815d1301 (lock_downgrade+0x851/0x8e0) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): 0000000000000086 (0x86) (ptrval): 0000000000000001 (0x1) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf2d0 (0xffff8801afacf2d0) (ptrval): ffffffff81007c50 (trace_hardirqs_off_thunk+0x1a/0x1c) (ptrval): 0000000000000000 ... (ptrval): 0000000087800a07 (0x87800a07) (ptrval): 0000000000000001 (0x1) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf2e9 (0xffff8801afacf2e9) (ptrval): ffffffff87800fce (page_fault+0x1e/0x30) (ptrval): 0000000000000000 ... (ptrval): ffff8801aface9e8 (0xffff8801aface9e8) (ptrval): ffff8801b2755000 (0xffff8801b2755000) (ptrval): 1ffff10035f59d2d (0x1ffff10035f59d2d) (ptrval): ffff8801afacea10 (0xffff8801afacea10) (ptrval): 1ffff10035f59d29 (0x1ffff10035f59d29) (ptrval): ffff8801daf23693 (0xffff8801daf23693) (ptrval): ffffed003b5e46d2 (0xffffed003b5e46d2) (ptrval): ffffed003b5e46d2 (0xffffed003b5e46d2) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): 0000000000000000 ... (ptrval): 1ffff100364eaa00 (0x1ffff100364eaa00) (ptrval): ffffffff8110983b (pte_list_remove+0x14b/0x420) (ptrval): 0000000000000007 (0x7) (ptrval): ffffffffffffffff (0xffffffffffffffff) (ptrval): ffffffff811f7452 (vmx_vcpu_run+0x942/0x25c0) (ptrval): 0000000000000010 (0x10) (ptrval): 0000000000010002 (0x10002) (ptrval): ffff8801afacf398 (0xffff8801afacf398) (ptrval): 0000000000000018 (0x18) (ptrval): 0000000000000000 ... (ptrval): ffffffff8110975b (pte_list_remove+0x6b/0x420) (ptrval): 1ffff10000000000 (0x1ffff10000000000) (ptrval): ffff8801ad06ecb8 (0xffff8801ad06ecb8) (ptrval): 0000000000000201 (0x201) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889bbcc0 (K512_4+0x1940/0x11bdbc) (ptrval): ffffffff8146dc30 (mm_update_next_owner+0x980/0x980) (ptrval): ffffffff889a7b58 (regoff.33625+0x35d9b8/0x36e380) (ptrval): ffffffff815c8210 (print_usage_bug+0xc0/0xc0) (ptrval): 0000000000000286 (0x286) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a50ef (regoff.33625+0x35af4f/0x36e380) (ptrval): ffffffff815c1e00 (graph_lock+0x170/0x170) (ptrval): ffffffff815e1a5e (do_raw_spin_unlock+0x9e/0x2e0) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a5d6c (regoff.33625+0x35bbcc/0x36e380) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889b1f80 (regoff.33625+0x367de0/0x36e380) (ptrval): ffffffff81650730 (rcu_note_context_switch+0x710/0x710) (ptrval): ffffffff815d1f7c (lock_acquire+0x1dc/0x520) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf7f0 (0xffff8801afacf7f0) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff87cc73e0 (tk_debug_sleep_time_fops+0x2c0/0x940) (ptrval): 0000000000000039 (0x39) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf4a8 (0xffff8801afacf4a8) (ptrval): ffffffff81525705 (__might_sleep+0x95/0x190) (ptrval): ffff8801afacf7d8 (0xffff8801afacf7d8) (ptrval): ffff8801afacf7d8 (0xffff8801afacf7d8) (ptrval): 1ffff10035f59ea6 (0x1ffff10035f59ea6) (ptrval): ffff8801ad06ee38 (0xffff8801ad06ee38) (ptrval): ffffc90000c818a0 (0xffffc90000c818a0) (ptrval): ffffc90000c818a0 (0xffffc90000c818a0) (ptrval): 000000000000008e (0x8e) (ptrval): ffff8801ad06ee5a (0xffff8801ad06ee5a) (ptrval): 0000000000000000 ... (ptrval): 000000000000000c (0xc) (ptrval): ffff8801ad06ee24 (0xffff8801ad06ee24) (ptrval): ffff8801afacf870 (0xffff8801afacf870) (ptrval): ffffffff815cb585 (__lock_acquire+0x7f5/0x5140) (ptrval): ffffc90000c818a0 (0xffffc90000c818a0) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffff8801afacf550 (0xffff8801afacf550) (ptrval): ffff8801afacf638 (0xffff8801afacf638) (ptrval): 0000000000000286 (0x286) (ptrval): 0000000000000000 ... (ptrval): ffff880100000001 (0xffff880100000001) (ptrval): ffff8801ad06ee30 (0xffff8801ad06ee30) (ptrval): 0000000000000286 (0x286) (ptrval): ffffffff00000001 (0xffffffff00000001) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889c0ae8 (K512_4+0x6768/0x11bdbc) (ptrval): ffff8801ad06ee50 (0xffff8801ad06ee50) (ptrval): ffffc90000000000 (0xffffc90000000000) (ptrval): ffffffff8a2219c0 (chainhash_table+0x3a1c0/0x40020) (ptrval): 00000000000020c0 (0x20c0) (ptrval): ffff8801ad06ee58 (0xffff8801ad06ee58) (ptrval): ffff8801ad06ee30 (0xffff8801ad06ee30) (ptrval): ffff8801ad06ee38 (0xffff8801ad06ee38) (ptrval): 1ffff10035f59eb0 (0x1ffff10035f59eb0) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889c0a58 (K512_4+0x66d8/0x11bdbc) (ptrval): ffffffff815cad90 (debug_check_no_locks_freed+0x310/0x310) (ptrval): 0000000000000230 (0x230) (ptrval): ffff8801afacf638 (0xffff8801afacf638) (ptrval): ffffffff815e1a5e (do_raw_spin_unlock+0x9e/0x2e0) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a5d6c (regoff.33625+0x35bbcc/0x36e380) (ptrval): ffffffff815e19c0 (do_raw_spin_trylock+0x1b0/0x1b0) (ptrval): 0000000000000000 ... (ptrval): 0000000000000001 (0x1) (ptrval): 0000000000000000 ... (ptrval): ffffc90000c81898 (0xffffc90000c81898) (ptrval): ffffc90000c818c0 (0xffffc90000c818c0) (ptrval): ffffffff81b5a244 (kasan_check_write+0x14/0x20) (ptrval): ffff8801afacf630 (0xffff8801afacf630) (ptrval): ffffffff81794403 (__sanitizer_cov_trace_switch+0x53/0x90) (ptrval): 0000000000000002 (0x2) (ptrval): ffff8801ad822000 (0xffff8801ad822000) (ptrval): ffff8801afacf878 (0xffff8801afacf878) (ptrval): ffffffff89be1ec8 (lock_chains+0x2948/0x200020) (ptrval): ffffffff8179434a (__sanitizer_cov_trace_const_cmp1+0x1a/0x20) (ptrval): ffff8801afacf650 (0xffff8801afacf650) (ptrval): ffffffff816bfb2d (drop_futex_key_refs.isra.13+0x6d/0xe0) (ptrval): ffff8801afacf650 (0xffff8801afacf650) (ptrval): ffffffff817943a8 (__sanitizer_cov_trace_const_cmp8+0x18/0x20) (ptrval): ffff8801afacf8a0 (0xffff8801afacf8a0) (ptrval): ffffffff816c62d1 (futex_wait+0x5c1/0x9f0) (ptrval): ffff8801afacf718 (0xffff8801afacf718) (ptrval): 1ffff10035f59ed7 (0x1ffff10035f59ed7) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf808 (0xffff8801afacf808) (ptrval): 00000000ffffffff (0xffffffff) (ptrval): 000000000072c0d8 (0x72c0d8) (ptrval): ffff8801afacf6d8 (0xffff8801afacf6d8) (ptrval): ffff8801afacf758 (0xffff8801afacf758) (ptrval): ffffed0035f59f01 (0xffffed0035f59f01) (ptrval): fffffe0000000001 (0xfffffe0000000001) (ptrval): 0000000000000000 ... (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889c5238 (K512_4+0xaeb8/0x11bdbc) (ptrval): ffffffff816c5d10 (futex_wait_setup+0x400/0x400) (ptrval): 0000000000000000 ... (ptrval): ffffc90000c81880 (0xffffc90000c81880) (ptrval): ffff8801afacf718 (0xffff8801afacf718) (ptrval): ffffffff81794403 (__sanitizer_cov_trace_switch+0x53/0x90) (ptrval): 0000000000000002 (0x2) (ptrval): ffff8801ad822000 (0xffff8801ad822000) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): ffff8801afacf718 (0xffff8801afacf718) (ptrval): ffffffff8179434a (__sanitizer_cov_trace_const_cmp1+0x1a/0x20) (ptrval): ffffc90000c81888 (0xffffc90000c81888) (ptrval): ffffffff816bfb2d (drop_futex_key_refs.isra.13+0x6d/0xe0) (ptrval): 0000000000000001 (0x1) (ptrval): ffffc90000c79728 (0xffffc90000c79728) (ptrval): ffff8801afacf8a0 (0xffff8801afacf8a0) (ptrval): ffffffff816c54b6 (futex_wake+0x2f6/0x750) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a50ef (regoff.33625+0x35af4f/0x36e380) (ptrval): ffffffff815c1e00 (graph_lock+0x170/0x170) (ptrval): 000000de00000000 (0xde00000000) (ptrval): 00000001ffffffff (0x1ffffffff) (ptrval): ffffed0035f59f08 (0xffffed0035f59f08) (ptrval): ffff8801afacf7f8 (0xffff8801afacf7f8) (ptrval): ffff8801afacf838 (0xffff8801afacf838) (ptrval): ffffc90000c79740 (0xffffc90000c79740) (ptrval): 00000000ffffffff (0xffffffff) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889c5208 (K512_4+0xae88/0x11bdbc) (ptrval): ffff8801afacfc9c (0xffff8801afacfc9c) (ptrval): 0000000000000074 (0x74) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf7e8 (0xffff8801afacf7e8) (ptrval): ffffffff81b5a8a1 (memset+0x31/0x40) (ptrval): 1ffff10035f59f05 (0x1ffff10035f59f05) (ptrval): ffff8801ad06ece0 (0xffff8801ad06ece0) (ptrval): 0000000000000000 ... (ptrval): 1ffff10035f59f12 (0x1ffff10035f59f12) (ptrval): ffff8801ad06ee38 (0xffff8801ad06ee38) (ptrval): ffff8801c779dae0 (0xffff8801c779dae0) (ptrval): ffff8801c779dae0 (0xffff8801c779dae0) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf858 (0xffff8801afacf858) (ptrval): ffffffff815c26e6 (find_held_lock+0x36/0x1c0) (ptrval): 00000001afacf830 (0x1afacf830) (ptrval): ffff8801afacf8b0 (0xffff8801afacf8b0) (ptrval): 1ffff10035f59f12 (0x1ffff10035f59f12) (ptrval): ffff8801afacf970 (0xffff8801afacf970) (ptrval): ffff8801c779dae0 (0xffff8801c779dae0) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffff8801afacf8b0 (0xffff8801afacf8b0) (ptrval): ffff8801afacf998 (0xffff8801afacf998) (ptrval): 0000000000000086 (0x86) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff00000001 (0xffffffff00000001) (ptrval): ffff8801ad06ee30 (0xffff8801ad06ee30) (ptrval): 0000000000000086 (0x86) (ptrval): ffffffff00000001 (0xffffffff00000001) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889c0ae8 (K512_4+0x6768/0x11bdbc) (ptrval): ffffffff815d1390 (lock_downgrade+0x8e0/0x8e0) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): 0000000000000000 ... (ptrval): 0000000000000286 (0x286) (ptrval): ffff8801c779dae0 (0xffff8801c779dae0) (ptrval): 1ffff10035f59f25 (0x1ffff10035f59f25) (ptrval): 1ffff10035f59f22 (0x1ffff10035f59f22) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf988 (0xffff8801afacf988) (ptrval): ffff8801ad8560c0 (0xffff8801ad8560c0) (ptrval): 0000000000000004 (0x4) (ptrval): ffff8801ad85615c (0xffff8801ad85615c) (ptrval): ffff8801afacf9b0 (0xffff8801afacf9b0) (ptrval): ffffffff814705af (do_group_exit+0x16f/0x430) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a5d6c (regoff.33625+0x35bbcc/0x36e380) (ptrval): ffffffff815e19c0 (do_raw_spin_trylock+0x1b0/0x1b0) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a5ac6 (regoff.33625+0x35b926/0x36e380) (ptrval): ffffffff81470440 (__ia32_sys_exit+0x50/0x50) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff876f6f17 (_raw_spin_unlock_irq+0x27/0x70) (ptrval): 0000000000000000 ... (ptrval): 0000000000000009 (0x9) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacf988 (0xffff8801afacf988) (ptrval): ffffffff815ca171 (trace_hardirqs_on_caller+0x421/0x5c0) (ptrval): ffff8801c779dac8 (0xffff8801c779dac8) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): 0000000000000000 ... (ptrval): 0000000000000009 (0x9) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacfb60 (0xffff8801afacfb60) (ptrval): ffffffff814a6cd6 (get_signal+0x886/0x1960) (ptrval): 1ffff10035f59f43 (0x1ffff10035f59f43) (ptrval): ffffed0035f59f5f (0xffffed0035f59f5f) (ptrval): ffff8801afacfc70 (0xffff8801afacfc70) (ptrval): 0000000000000108 (0x108) (ptrval): ffff8801ad85615c (0xffff8801ad85615c) (ptrval): ffff8801c779dac8 (0xffff8801c779dac8) (ptrval): ffff8801ad8560c0 (0xffff8801ad8560c0) (ptrval): ffffffff00000004 (0xffffffff00000004) (ptrval): 00000008ab701600 (0x8ab701600) (ptrval): ffff8801c779d2c0 (0xffff8801c779d2c0) (ptrval): ffff8801afacfc90 (0xffff8801afacfc90) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889aab78 (regoff.33625+0x3609d8/0x36e380) (ptrval): ffffffff814a6450 (ptrace_notify+0x130/0x130) (ptrval): 0000000035f59f5b (0x35f59f5b) (ptrval): 1ffff10000000000 (0x1ffff10000000000) (ptrval): ffff8801d9207680 (0xffff8801d9207680) (ptrval): 1ffff10035f59f51 (0x1ffff10035f59f51) (ptrval): ffff8801daf23680 (0xffff8801daf23680) (ptrval): ffff8801daf23690 (0xffff8801daf23690) (ptrval): ffff8801afacfa70 (0xffff8801afacfa70) (ptrval): ffffffff81b5a221 (kasan_check_read+0x11/0x20) (ptrval): ffff8801afacfb10 (0xffff8801afacfb10) (ptrval): ffffffff81645395 (rcu_is_watching+0x85/0x140) (ptrval): ffff8801afacfad0 (0xffff8801afacfad0) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a5d6c (regoff.33625+0x35bbcc/0x36e380) (ptrval): ffffffff81645310 (rcu_bh_force_quiescent_state+0x20/0x20) (ptrval): ffffffff88d8e5a0 (rcu_bh_lock_map+0x40/0x40) (ptrval): 0000000000000000 ... (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff88d8e5a0 (rcu_bh_lock_map+0x40/0x40) (ptrval): ffff8801afacfc48 (0xffff8801afacfc48) (ptrval): ffff8801ae7b23c0 (0xffff8801ae7b23c0) (ptrval): ffff8801afacfb00 (0xffff8801afacfb00) (ptrval): 0000000000000286 (0x286) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): 0000000000000001 (0x1) (ptrval): ffff8801c8f39870 (0xffff8801c8f39870) (ptrval): 0000000000000000 ... (ptrval): 0000000000000001 (0x1) (ptrval): ffff8801afacfc70 (0xffff8801afacfc70) (ptrval): ffffffff81c7dcac (__fget+0x40c/0x650) (ptrval): ffff8801afacfbc8 (0xffff8801afacfbc8) (ptrval): 1ffff10035f59f6d (0x1ffff10035f59f6d) (ptrval): 0000001500004000 (0x1500004000) (ptrval): 1ffff10035f59f7a (0x1ffff10035f59f7a) (ptrval): ffff8801afacff58 (0xffff8801afacff58) (ptrval): ffff8801afacfc70 (0xffff8801afacfc70) (ptrval): fffffbfff11a31ae (0xfffffbfff11a31ae) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): ffff8801afacfd78 (0xffff8801afacfd78) (ptrval): ffffffff8128e738 (do_signal+0x98/0x2040) (ptrval): ffffffff889a59c0 (regoff.33625+0x35b820/0x36e380) (ptrval): ffffffff81c7d8a0 (expand_files.part.8+0x9a0/0x9a0) (ptrval): ffff8801b330d790 (0xffff8801b330d790) (ptrval): 0000000000000001 (0x1) (ptrval): ffff8801afacfba0 (0xffff8801afacfba0) (ptrval): ffffffff81b5a244 (kasan_check_write+0x14/0x20) (ptrval): ffff8801afacfbd8 (0xffff8801afacfbd8) (ptrval): ffffffff815e16d1 (do_raw_spin_lock+0xc1/0x200) (ptrval): ffff8801b330d788 (0xffff8801b330d788) (ptrval): ffff8801b330d788 (0xffff8801b330d788) (ptrval): 0000000000006364 (0x6364) (ptrval): ffff8801b8706080 (0xffff8801b8706080) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889b20d8 (regoff.33625+0x367f38/0x36e380) (ptrval): ffffffff8128e6a0 (setup_sigcontext+0x7d0/0x7d0) (ptrval): ffffffff876f6b32 (_raw_spin_unlock+0x22/0x30) (ptrval): ffff8801afacfc28 (0xffff8801afacfc28) (ptrval): ffffffff81794403 (__sanitizer_cov_trace_switch+0x53/0x90) (ptrval): ffff8801c8f39800 (0xffff8801c8f39800) (ptrval): 1ffff10035f59f8e (0x1ffff10035f59f8e) (ptrval): ffffffff810700c0 (kvm_uevent_notify_change.part.29+0x440/0x440) (ptrval): ffff8801afacfc28 (0xffff8801afacfc28) (ptrval): ffffffff81794386 (__sanitizer_cov_trace_const_cmp4+0x16/0x20) (ptrval): ffff8801afacfdb8 (0xffff8801afacfdb8) (ptrval): ffffffff81c49ce2 (do_vfs_ioctl+0x1f2/0x16a0) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacfd88 (0xffff8801afacfd88) (ptrval): 1ffff10035f59f93 (0x1ffff10035f59f93) (ptrval): ffff8801afacfd78 (0xffff8801afacfd78) (ptrval): 0000000000000015 (0x15) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): 0000000000000000 ... (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889d99e8 (K512_4+0x1f668/0x11bdbc) (ptrval): ffffffff81c49af0 (ioctl_preallocate+0x2e0/0x2e0) (ptrval): 00004000afacfcd0 (0x4000afacfcd0) (ptrval): 0000000000000009 (0x9) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacfe20 (0xffff8801afacfe20) (ptrval): ffff8801afacfe20 (0xffff8801afacfe20) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff8100aa17 (exit_to_usermode_loop+0x87/0x310) (ptrval): ffff8801afacfdf8 (0xffff8801afacfdf8) (ptrval): fffffbfff11a31ae (0xfffffbfff11a31ae) (ptrval): 1ffff10035f59fdc (0x1ffff10035f59fdc) (ptrval): dcce8253b5706500 (0xdcce8253b5706500) (ptrval): 0000000000000004 (0x4) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): ffff8801afacfdf8 (0xffff8801afacfdf8) (ptrval): fffffbfff11a31ae (0xfffffbfff11a31ae) (ptrval): 0000000000000004 (0x4) (ptrval): ffff8801afacfe20 (0xffff8801afacfe20) (ptrval): ffffffff8100ac1a (exit_to_usermode_loop+0x28a/0x310) (ptrval): 1ffff10035f59fb3 (0x1ffff10035f59fb3) (ptrval): ffff8801afacff58 (0xffff8801afacff58) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a5ac6 (regoff.33625+0x35b926/0x36e380) (ptrval): ffffffff8100a990 (syscall_slow_exit_work+0x4f0/0x4f0) (ptrval): ffff8801ad06ee30 (0xffff8801ad06ee30) (ptrval): ffff8801afacfdf8 (0xffff8801afacfdf8) (ptrval): ffffffff81c4b211 (ksys_ioctl+0x81/0xd0) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff8100c172 (do_syscall_64+0x92/0x800) (ptrval): ffff8801afacff20 (0xffff8801afacff20) (ptrval): ffff8801afacff58 (0xffff8801afacff58) (ptrval): dffffc0000000000 (0xdffffc0000000000) (ptrval): 0000000000000086 (0x86) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): 1ffff10035f59fc8 (0x1ffff10035f59fc8) (ptrval): 0000000000000004 (0x4) (ptrval): ffff8801afacff58 (0xffff8801afacff58) (ptrval): 1ffff10035f59fdc (0x1ffff10035f59fdc) (ptrval): ffff8801afacff48 (0xffff8801afacff48) (ptrval): ffffffff8100c78c (do_syscall_64+0x6ac/0x800) (ptrval): ffffffff8151d79a (finish_task_switch+0x1ca/0x840) (ptrval): 0000000000000004 (0x4) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a59c0 (regoff.33625+0x35b820/0x36e380) (ptrval): ffffffff8100c0e0 (syscall_return_slowpath+0x5c0/0x5c0) (ptrval): ffff8801afacfe68 (0xffff8801afacfe68) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacff48 (0xffff8801afacff48) (ptrval): ffffffff8100be2f (syscall_return_slowpath+0x30f/0x5c0) (ptrval): ffff8801afacff58 (0xffff8801afacff58) (ptrval): 0000000041b58ab3 (0x41b58ab3) (ptrval): ffffffff889a50ef (regoff.33625+0x35af4f/0x36e380) (ptrval): ffff8801ad06ee30 (0xffff8801ad06ee30) (ptrval): 0000000000000000 ... (ptrval): 0000000000000004 (0x4) (ptrval): ffff8801ad06e600 (0xffff8801ad06e600) (ptrval): ffffffff8780009d (entry_SYSCALL_64_after_hwframe+0x59/0xbe) (ptrval): 0000000000000000 ... (ptrval): 0000000000000086 (0x86) (ptrval): 0000000000000000 ... (ptrval): 0000000000000004 (0x4) (ptrval): 0000000000000000 ... (ptrval): ffff8801afacff48 (0xffff8801afacff48) (ptrval): ffffffff81007c50 (trace_hardirqs_off_thunk+0x1a/0x1c) (ptrval): 0000000000000000 ... (ptrval): ffffffff8780008d (entry_SYSCALL_64_after_hwframe+0x49/0xbe) (ptrval): 0000000000000003 (0x3) (ptrval): 00007fe083cb49c0 (0x7fe083cb49c0) (ptrval): 0000000000a3e81f (0xa3e81f) (ptrval): 0000000000000000 ... (ptrval): 000000000072c0d8 (0x72c0d8) (ptrval): 000000000072c0d8 (0x72c0d8) (ptrval): 0000000000000246 (0x246) (ptrval): 0000000000000000 ... (ptrval): 000000000072c0b0 (0x72c0b0) (ptrval): 0000000000000000 ... (ptrval): fffffffffffffe00 (0xfffffffffffffe00) (ptrval): 0000000000455a09 (0x455a09) (ptrval): 0000000000000000 ... (ptrval): 000000000072c0d8 (0x72c0d8) (ptrval): 00000000000000ca (0xca) (ptrval): 0000000000455a09 (0x455a09) (ptrval): 0000000000000033 (0x33) (ptrval): 0000000000000246 (0x246) (ptrval): 00007fe083cb3ce8 (0x7fe083cb3ce8) (ptrval): 000000000000002b (0x2b) The buggy address belongs to the page: page:ffffea0006beb3c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 flags: 0x2fffc0000000000() raw: 02fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff raw: 0000000000000000 ffffea0006be0101 0000000000000000 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff8801afacf200: f2 f2 f2 f2 f2 f2 00 f2 f2 f2 f2 f2 f2 f2 00 f2 ffff8801afacf280: f2 f2 f3 f3 f3 f3 00 f2 f2 f2 f2 f2 f2 f2 00 f2 >ffff8801afacf300: f2 f2 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 ^ ffff8801afacf380: 00 00 00 00 00 00 00 f1 f1 f1 f1 04 f2 f2 f2 f2 ffff8801afacf400: f2 f2 f2 04 f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 f2 ==================================================================