Jul 04 14:45:13 f1cws kernel: ================================================================== Jul 04 14:45:13 f1cws kernel: BUG: KASAN: slab-out-of-bounds in firmware_parser_create+0x27c7/0x2b80 [amdgpu] Jul 04 14:45:13 f1cws kernel: Write of size 1 at addr ffff88035a35f7b0 by task systemd-udevd/321 Jul 04 14:45:13 f1cws kernel: Jul 04 14:45:13 f1cws kernel: CPU: 0 PID: 321 Comm: systemd-udevd Not tainted 4.18.0-rc3-kasan1 #1 Jul 04 14:45:13 f1cws kernel: Hardware name: To Be Filled By O.E.M. To Be Filled By O.E.M./AB350 Gaming-ITX/ac, BIOS L4.51D 05/02/2018 Jul 04 14:45:13 f1cws kernel: Call Trace: Jul 04 14:45:13 f1cws kernel: dump_stack+0x71/0xab Jul 04 14:45:13 f1cws kernel: print_address_description+0x6a/0x280 Jul 04 14:45:13 f1cws kernel: kasan_report+0x258/0x380 Jul 04 14:45:13 f1cws kernel: ? firmware_parser_create+0x27c7/0x2b80 [amdgpu] Jul 04 14:45:13 f1cws kernel: firmware_parser_create+0x27c7/0x2b80 [amdgpu] Jul 04 14:45:13 f1cws kernel: dal_bios_parser_create+0x11/0x30 [amdgpu] Jul 04 14:45:13 f1cws kernel: dc_create+0x129e/0x1800 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? _raw_spin_lock_irqsave+0x25/0x50 Jul 04 14:45:13 f1cws kernel: ? dc_create_state+0x70/0x70 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? drm_dev_dbg+0x1a0/0x1a0 [drm] Jul 04 14:45:13 f1cws kernel: ? llist_add_batch+0x52/0x90 Jul 04 14:45:13 f1cws kernel: ? kasan_unpoison_shadow+0x30/0x40 Jul 04 14:45:13 f1cws kernel: ? kasan_kmalloc+0xa0/0xd0 Jul 04 14:45:13 f1cws kernel: ? kmem_cache_alloc_trace+0x10d/0x200 Jul 04 14:45:13 f1cws kernel: ? amdgpu_cgs_create_device+0x41/0xd0 [amdgpu] Jul 04 14:45:13 f1cws kernel: dm_hw_init+0x2c3/0x810 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? amdgpu_dm_initialize_drm_device+0x2350/0x2350 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? memcpy+0x34/0x50 Jul 04 14:45:13 f1cws kernel: ? hwmgr_hw_init+0x34a/0x4b0 [amdgpu] Jul 04 14:45:13 f1cws kernel: amdgpu_device_init+0x35a3/0x47d0 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? amdgpu_device_has_dc_support+0x50/0x50 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 Jul 04 14:45:13 f1cws kernel: ? pointer+0x690/0x690 Jul 04 14:45:13 f1cws kernel: ? __alloc_pages_nodemask+0x1c1/0x4b0 Jul 04 14:45:13 f1cws kernel: ? mutex_lock+0x8e/0xe0 Jul 04 14:45:13 f1cws kernel: ? __alloc_pages_slowpath+0x1d20/0x1d20 Jul 04 14:45:13 f1cws kernel: ? kasan_unpoison_shadow+0x30/0x40 Jul 04 14:45:13 f1cws kernel: ? kmalloc_order+0x4b/0x60 Jul 04 14:45:13 f1cws kernel: amdgpu_driver_load_kms+0x165/0x870 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? drm_dev_register+0x22a/0x5a0 [drm] Jul 04 14:45:13 f1cws kernel: drm_dev_register+0x2c3/0x5a0 [drm] Jul 04 14:45:13 f1cws kernel: amdgpu_pci_probe+0x2ae/0x410 [amdgpu] Jul 04 14:45:13 f1cws kernel: ? amdgpu_pmops_runtime_idle+0x1f0/0x1f0 [amdgpu] Jul 04 14:45:13 f1cws kernel: local_pci_probe+0xde/0x1a0 Jul 04 14:45:13 f1cws kernel: pci_device_probe+0x404/0x570 Jul 04 14:45:13 f1cws kernel: ? pci_device_remove+0x1e0/0x1e0 Jul 04 14:45:13 f1cws kernel: driver_probe_device+0x7a3/0xcd0 Jul 04 14:45:13 f1cws kernel: __driver_attach+0x25b/0x2c0 Jul 04 14:45:13 f1cws kernel: ? driver_probe_device+0xcd0/0xcd0 Jul 04 14:45:13 f1cws kernel: bus_for_each_dev+0x10d/0x1b0 Jul 04 14:45:13 f1cws kernel: ? kasan_unpoison_shadow+0x30/0x40 Jul 04 14:45:13 f1cws kernel: ? subsys_dev_iter_exit+0x10/0x10 Jul 04 14:45:13 f1cws kernel: ? klist_add_tail+0x5c/0x120 Jul 04 14:45:13 f1cws kernel: bus_add_driver+0x3b8/0x6f0 Jul 04 14:45:13 f1cws kernel: driver_register+0x187/0x410 Jul 04 14:45:13 f1cws kernel: ? 0xffffffffc1db0000 Jul 04 14:45:13 f1cws kernel: do_one_initcall+0x9b/0x303 Jul 04 14:45:13 f1cws kernel: ? trace_event_raw_event_initcall_finish+0x1b0/0x1b0 Jul 04 14:45:13 f1cws kernel: ? kasan_unpoison_shadow+0x30/0x40 Jul 04 14:45:13 f1cws kernel: ? kasan_kmalloc+0xa0/0xd0 Jul 04 14:45:13 f1cws kernel: ? kasan_unpoison_shadow+0x30/0x40 Jul 04 14:45:13 f1cws kernel: do_init_module+0x1bc/0x5ad Jul 04 14:45:13 f1cws kernel: ? load_module+0x650a/0x9d40 Jul 04 14:45:13 f1cws kernel: load_module+0x6517/0x9d40 Jul 04 14:45:13 f1cws kernel: ? __vfs_read+0x445/0x690 Jul 04 14:45:13 f1cws kernel: ? module_frob_arch_sections+0x20/0x20 Jul 04 14:45:13 f1cws kernel: ? vfs_read+0x24e/0x2e0 Jul 04 14:45:13 f1cws kernel: ? vfs_read+0x24e/0x2e0 Jul 04 14:45:13 f1cws kernel: ? kernel_read+0x90/0x130 Jul 04 14:45:13 f1cws kernel: ? count.isra.21.constprop.35+0x130/0x130 Jul 04 14:45:13 f1cws kernel: ? __do_sys_finit_module+0x16d/0x1a0 Jul 04 14:45:13 f1cws kernel: __do_sys_finit_module+0x16d/0x1a0 Jul 04 14:45:13 f1cws kernel: ? __ia32_sys_init_module+0xa0/0xa0 Jul 04 14:45:13 f1cws kernel: ? syscall_trace_enter+0x322/0xb30 Jul 04 14:45:13 f1cws kernel: ? exit_to_usermode_loop+0x8a/0x180 Jul 04 14:45:13 f1cws kernel: do_syscall_64+0xa0/0x270 Jul 04 14:45:13 f1cws kernel: ? page_fault+0x8/0x30 Jul 04 14:45:13 f1cws kernel: entry_SYSCALL_64_after_hwframe+0x44/0xa9 Jul 04 14:45:13 f1cws kernel: RIP: 0033:0x7f8584149229 Jul 04 14:45:13 f1cws kernel: Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 3f 4c 2b 00 f7 d8 64 89 01 48 Jul 04 14:45:13 f1cws kernel: RSP: 002b:00007ffd33a06938 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 Jul 04 14:45:13 f1cws kernel: RAX: ffffffffffffffda RBX: 000055bec8c87e90 RCX: 00007f8584149229 Jul 04 14:45:13 f1cws kernel: RDX: 0000000000000000 RSI: 000055bec8c94390 RDI: 0000000000000013 Jul 04 14:45:13 f1cws kernel: RBP: 000055bec8c94390 R08: 0000000000000000 R09: 0000000000000004 Jul 04 14:45:13 f1cws kernel: R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 Jul 04 14:45:13 f1cws kernel: R13: 000055bec8cc06a0 R14: 0000000000020000 R15: 0000000000000000 Jul 04 14:45:13 f1cws kernel: Jul 04 14:45:13 f1cws kernel: Allocated by task 321: Jul 04 14:45:13 f1cws kernel: kasan_kmalloc+0xa0/0xd0 Jul 04 14:45:13 f1cws kernel: kmem_cache_alloc_trace+0x10d/0x200 Jul 04 14:45:13 f1cws kernel: firmware_parser_create+0x591/0x2b80 [amdgpu] Jul 04 14:45:13 f1cws kernel: dal_bios_parser_create+0x11/0x30 [amdgpu] Jul 04 14:45:13 f1cws kernel: dc_create+0x129e/0x1800 [amdgpu] Jul 04 14:45:13 f1cws kernel: dm_hw_init+0x2c3/0x810 [amdgpu] Jul 04 14:45:13 f1cws kernel: amdgpu_device_init+0x35a3/0x47d0 [amdgpu] Jul 04 14:45:13 f1cws kernel: amdgpu_driver_load_kms+0x165/0x870 [amdgpu] Jul 04 14:45:13 f1cws kernel: drm_dev_register+0x2c3/0x5a0 [drm] Jul 04 14:45:13 f1cws kernel: amdgpu_pci_probe+0x2ae/0x410 [amdgpu] Jul 04 14:45:13 f1cws kernel: local_pci_probe+0xde/0x1a0 Jul 04 14:45:13 f1cws kernel: pci_device_probe+0x404/0x570 Jul 04 14:45:13 f1cws kernel: driver_probe_device+0x7a3/0xcd0 Jul 04 14:45:13 f1cws kernel: __driver_attach+0x25b/0x2c0 Jul 04 14:45:13 f1cws kernel: bus_for_each_dev+0x10d/0x1b0 Jul 04 14:45:13 f1cws kernel: bus_add_driver+0x3b8/0x6f0 Jul 04 14:45:13 f1cws kernel: driver_register+0x187/0x410 Jul 04 14:45:13 f1cws kernel: do_one_initcall+0x9b/0x303 Jul 04 14:45:13 f1cws kernel: do_init_module+0x1bc/0x5ad Jul 04 14:45:13 f1cws kernel: load_module+0x6517/0x9d40 Jul 04 14:45:13 f1cws kernel: __do_sys_finit_module+0x16d/0x1a0 Jul 04 14:45:13 f1cws kernel: do_syscall_64+0xa0/0x270 Jul 04 14:45:13 f1cws kernel: entry_SYSCALL_64_after_hwframe+0x44/0xa9 Jul 04 14:45:13 f1cws kernel: Jul 04 14:45:13 f1cws kernel: Freed by task 295: Jul 04 14:45:13 f1cws kernel: __kasan_slab_free+0x122/0x180 Jul 04 14:45:13 f1cws kernel: kfree+0x90/0x1d0 Jul 04 14:45:13 f1cws kernel: load_elf_binary+0x173b/0x4431 Jul 04 14:45:13 f1cws kernel: search_binary_handler+0x16a/0x470 Jul 04 14:45:13 f1cws kernel: __do_execve_file.isra.32+0x11fa/0x21a0 Jul 04 14:45:13 f1cws kernel: __x64_sys_execve+0x8a/0xb0 Jul 04 14:45:13 f1cws kernel: do_syscall_64+0xa0/0x270 Jul 04 14:45:13 f1cws kernel: entry_SYSCALL_64_after_hwframe+0x44/0xa9 Jul 04 14:45:13 f1cws kernel: Jul 04 14:45:13 f1cws kernel: The buggy address belongs to the object at ffff88035a35f500 which belongs to the cache kmalloc-1024 of size 1024 Jul 04 14:45:13 f1cws kernel: The buggy address is located 688 bytes inside of 1024-byte region [ffff88035a35f500, ffff88035a35f900) Jul 04 14:45:13 f1cws kernel: The buggy address belongs to the page: Jul 04 14:45:13 f1cws kernel: page:ffffea000d68d600 count:1 mapcount:0 mapping:ffff88037240ebc0 index:0x0 compound_mapcount: 0 Jul 04 14:45:13 f1cws kernel: flags: 0x17fffc000008100(slab|head) Jul 04 14:45:13 f1cws kernel: raw: 017fffc000008100 ffffea000d660600 0000000400000004 ffff88037240ebc0 Jul 04 14:45:13 f1cws kernel: raw: 0000000000000000 00000000801c001c 00000001ffffffff 0000000000000000 Jul 04 14:45:13 f1cws kernel: page dumped because: kasan: bad access detected Jul 04 14:45:13 f1cws kernel: Jul 04 14:45:13 f1cws kernel: Memory state around the buggy address: Jul 04 14:45:13 f1cws kernel: ffff88035a35f680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Jul 04 14:45:13 f1cws kernel: ffff88035a35f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Jul 04 14:45:13 f1cws kernel: >ffff88035a35f780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc Jul 04 14:45:13 f1cws kernel: ^ Jul 04 14:45:13 f1cws kernel: ffff88035a35f800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc Jul 04 14:45:13 f1cws kernel: ffff88035a35f880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc Jul 04 14:45:13 f1cws kernel: ================================================================== Jul 04 14:45:13 f1cws kernel: Disabling lock debugging due to kernel taint Jul 04 14:45:13 f1cws kernel: [drm] Display Core initialized with v3.1.44!