1 TITLE: general protection fault in corrupted 2 CORRUPTED: Y 3 4 [ 32.536478] binder: BINDER_SET_CONTEXT_MGR already set 5 [ 32.549080] binder: 6304:6306 ioctl 40046207 0 returned -16 6 [ 32.571039] kasan: CONFIG_KASAN_INLINE enabled 7 [ 32.576239] kasan: GPF could be caused by NULL-ptr deref or user memory access 8 [ 32.591202] general protection fault: 0000 [#1] PREEMPT SMP KASAN 9 [ 32.597451] Dumping ftrace buffer: 10 [ 32.600971] (ftrace buffer empty) 11 [ 32.604002] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor4/6343 12 [ 32.604015] caller is __this_cpu_preempt_check+0x1c/0x20 13 [ 32.604023] CPU: 1 PID: 6343 Comm: syz-executor4 Not tainted 4.9.80-g550c01d #37 14 [ 32.604028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 15 [ 32.604042] ffff8801aea7f658 ffffffff81d94b69 0000000000000001 ffffffff83c18800 16 [ 32.604052] ffffffff83f454c0 ffff8801ae996000 0000000000000003 ffff8801aea7f698 17 [ 32.604062] ffffffff81dfc144 ffff8801aea7f6b0 ffffffff83f454c0 dffffc0000000000 18 [ 32.604065] Call Trace: 19 [ 32.604077] [<ffffffff81d94b69>] dump_stack+0xc1/0x128 20 [ 32.604087] [<ffffffff81dfc144>] check_preemption_disabled+0x1d4/0x200 21 [ 32.604096] [<ffffffff81dfc1ac>] __this_cpu_preempt_check+0x1c/0x20 22 [ 32.604105] [<ffffffff833fcdd8>] ipcomp_init_state+0x188/0x930 23 [ 32.604113] [<ffffffff83512ee5>] ipcomp6_init_state+0xb5/0x820 24 [ 32.604119] [<ffffffff833db443>] ? __xfrm_init_state+0x363/0xb30 25 [ 32.604126] [<ffffffff833db4c7>] __xfrm_init_state+0x3e7/0xb30 26 [ 32.604132] [<ffffffff833dbc2a>] xfrm_init_state+0x1a/0x20 27 [ 32.604140] [<ffffffff83575b69>] pfkey_add+0x1fb9/0x3470 28 [ 32.604147] [<ffffffff83573bb0>] ? pfkey_delete+0x360/0x360 29 [ 32.604153] [<ffffffff8356af00>] ? pfkey_seq_stop+0x80/0x80 30 [ 32.604162] [<ffffffff82ef282a>] ? __skb_clone+0x24a/0x7d0 31 [ 32.604168] [<ffffffff83573bb0>] ? pfkey_delete+0x360/0x360 32 [ 32.604175] [<ffffffff8356d65b>] pfkey_process+0x68b/0x750 33 [ 32.604182] [<ffffffff8356cfd0>] ? pfkey_send_new_mapping+0x11b0/0x11b0 34 [ 32.604190] [<ffffffff8356eeb9>] pfkey_sendmsg+0x3a9/0x760 35 [ 32.604196] [<ffffffff8356eb10>] ? pfkey_spdget+0x820/0x820 36 [ 32.604204] [<ffffffff82ed7baa>] sock_sendmsg+0xca/0x110 37 [ 32.604210] [<ffffffff82ed97a1>] ___sys_sendmsg+0x6d1/0x7e0 38 [ 32.604218] [<ffffffff82ed90d0>] ? copy_msghdr_from_user+0x550/0x550 39 [ 32.604226] [<ffffffff812e4238>] ? do_futex+0x3f8/0x15c0 40 [ 32.604233] [<ffffffff815d13c7>] ? __fget+0x47/0x3a0 41 [ 32.604240] [<ffffffff815d1581>] ? __fget+0x201/0x3a0 42 [ 32.604246] [<ffffffff815d15a8>] ? __fget+0x228/0x3a0 43 [ 32.604252] [<ffffffff815d13c7>] ? __fget+0x47/0x3a0 44 [ 32.604258] [<ffffffff815d18e8>] ? __fget_light+0x188/0x1e0 45 [ 32.604264] [<ffffffff815d1958>] ? __fdget+0x18/0x20 46 [ 32.604272] [<ffffffff82ed5a58>] ? sockfd_lookup_light+0x118/0x160 47 [ 32.604279] [<ffffffff82edb7d6>] __sys_sendmsg+0xd6/0x190 48 [ 32.604285] [<ffffffff82edb700>] ? SyS_shutdown+0x1b0/0x1b0 49 [ 32.604292] [<ffffffff812e5ef9>] ? compat_SyS_futex+0x1f9/0x2a0 50 [ 32.604298] [<ffffffff815d34ad>] ? fd_install+0x4d/0x60 51 [ 32.604310] [<ffffffff82eda560>] ? move_addr_to_kernel+0x50/0x50 52 [ 32.604318] [<ffffffff8167cffc>] ? compat_SyS_ioctl+0x8c/0x2050 53 [ 32.604328] [<ffffffff82fde04a>] compat_SyS_sendmsg+0x2a/0x40 54 [ 32.604337] [<ffffffff82fde020>] ? compat_SyS_getsockopt+0x2a0/0x2a0 55 [ 32.604346] [<ffffffff81006fc7>] do_fast_syscall_32+0x2f7/0x890 56 [ 32.604354] [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c 57 [ 32.604365] [<ffffffff838b4d34>] entry_SYSENTER_compat+0x74/0x83 58 [ 32.889740] Modules linked in: 59 [ 32.893039] CPU: 0 PID: 6331 Comm: syz-executor6 Not tainted 4.9.80-g550c01d #37 60 [ 32.900547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 61 [ 32.909885] task: ffff8801aea23000 task.stack: ffff8801ae9e8000 62 [ 32.915914] RIP: 0010:[<ffffffff8144ee81>] [<ffffffff8144ee81>] __free_pages+0x21/0x80 63 [ 32.924152] RSP: 0018:ffff8801ae9ef940 EFLAGS: 00010a07 64 [ 32.929576] RAX: dffffc0000000000 RBX: dead4ead00000000 RCX: ffffffff8266806b 65 [ 32.936828] RDX: 1bd5a9d5a0000003 RSI: 0000000000000002 RDI: dead4ead0000001c 66 [ 32.944072] RBP: ffff8801ae9ef950 R08: 0000000048000000 R09: 0000000000001e30 67 [ 32.951313] R10: 0000000000002100 R11: ffff8801aea23000 R12: 0000000000000004 68 [ 32.958566] R13: 0000000000000020 R14: ffff8801c473a100 R15: dffffc0000000000 69 [ 32.965824] FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f6fb9b40 70 [ 32.974022] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 71 [ 32.979874] CR2: 00000000f6f1cbf0 CR3: 00000001c46f0000 CR4: 0000000000160670 72 [ 32.987118] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 73 [ 32.994364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 74 [ 33.001603] Stack: 75 [ 33.003724] 0000000000000001 ffff8801c473a258 ffff8801ae9ef9b0 ffffffff82668091 76 [ 33.011702] ffff8801c473a270 ffffed00388e744b ffffed00388e744e ffff8801c473a268 77 [ 33.019679] dead4ead00000000 ffff8801c473a240 0000000000000000 0000000000000000 78 [ 33.027659] Call Trace: 79 [ 33.030221] [<ffffffff82668091>] sg_remove_scat.isra.19+0x1c1/0x2d0 80 [ 33.036687] [<ffffffff82668455>] sg_finish_rem_req+0x2b5/0x340 81 [ 33.042715] [<ffffffff8266866d>] sg_new_read.isra.20+0x18d/0x3e0 82 [ 33.048920] [<ffffffff8266a187>] sg_read+0x8b7/0x1440 83 [ 33.054183] [<ffffffff826698d0>] ? sg_proc_seq_show_debug+0xd90/0xd90 84 [ 33.060822] [<ffffffff81644640>] ? fsnotify+0xf30/0xf30 85 [ 33.066245] [<ffffffff81bdc219>] ? avc_policy_seqno+0x9/0x20 86 [ 33.072109] [<ffffffff8156cc21>] do_loop_readv_writev.part.17+0x141/0x1e0 87 [ 33.079110] [<ffffffff81bd32d9>] ? security_file_permission+0x89/0x1e0 88 [ 33.085835] [<ffffffff826698d0>] ? sg_proc_seq_show_debug+0xd90/0xd90 89 [ 33.092472] [<ffffffff826698d0>] ? sg_proc_seq_show_debug+0xd90/0xd90 90 [ 33.099113] [<ffffffff81571b42>] compat_do_readv_writev+0x522/0x760 91 [ 33.105577] [<ffffffff81571620>] ? do_pwritev+0x1a0/0x1a0 92 [ 33.111196] [<ffffffff812e3e40>] ? exit_robust_list+0x230/0x230 93 [ 33.117318] [<ffffffff81dfbfab>] ? check_preemption_disabled+0x3b/0x200 94 [ 33.124141] [<ffffffff815d1581>] ? __fget+0x201/0x3a0 95 [ 33.129386] [<ffffffff815d15a8>] ? __fget+0x228/0x3a0 96 [ 33.134632] [<ffffffff815d13c7>] ? __fget+0x47/0x3a0 97 [ 33.139801] [<ffffffff81571e63>] compat_readv+0xe3/0x150 98 [ 33.145325] [<ffffffff81571fc4>] do_compat_readv+0xf4/0x1d0 99 [ 33.145334] [<ffffffff81571ed0>] ? compat_readv+0x150/0x150 100 [ 33.145342] [<ffffffff81573be0>] ? SyS_read+0x1b0/0x1b0 101 [ 33.145351] [<ffffffff8167cffc>] ? compat_SyS_ioctl+0x8c/0x2050 102 [ 33.145359] [<ffffffff81574536>] compat_SyS_readv+0x26/0x30 103 [ 33.145367] [<ffffffff81574510>] ? SyS_pwritev2+0x80/0x80 104 [ 33.145376] [<ffffffff81006fc7>] do_fast_syscall_32+0x2f7/0x890 105 [ 33.145383] [<ffffffff81003036>] ? trace_hardirqs_off_thunk+0x1a/0x1c 106 [ 33.145393] [<ffffffff838b4d34>] entry_SYSENTER_compat+0x74/0x83 107 [ 33.145509] Code: e9 27 fc ff ff 0f 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 53 48 89 fb 48 83 c7 1c 48 89 fa 48 83 ec 08 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 3d 108 [ 33.145518] RIP [<ffffffff8144ee81>] __free_pages+0x21/0x80 109 [ 33.145520] RSP <ffff8801ae9ef940> 110 [ 33.153370] ---[ end trace 7176eb4430fb7fce ]--- 111 [ 33.153375] Kernel panic - not syncing: Fatal exception 112 [ 33.153827] Dumping ftrace buffer: 113 [ 33.153830] (ftrace buffer empty) 114 [ 33.153832] Kernel Offset: disabled 115 [ 33.256349] Rebooting in 86400 seconds.. 116
