From mboxrd@z Thu Jan 1 00:00:00 1970 From: Dave Jones Subject: out of bounds in pptp_connect. Date: Sun, 17 Jan 2016 12:06:58 -0500 Message-ID: <20160117170658.GA9973@codemonkey.org.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii To: netdev@vger.kernel.org Return-path: Received: from arcturus.aphlor.org ([188.246.204.175]:58966 "EHLO arcturus.aphlor.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751299AbcAQRHD (ORCPT ); Sun, 17 Jan 2016 12:07:03 -0500 Received: from [209.6.119.210] (helo=wopr.kernelslacker.org) by arcturus.aphlor.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.86) (envelope-from ) id 1aKqn5-0002Lm-GI for netdev@vger.kernel.org; Sun, 17 Jan 2016 17:07:01 +0000 Content-Disposition: inline Sender: netdev-owner@vger.kernel.org List-ID: I've managed to trigger this a few times the last few days, on Linus' tree. ================================================================== BUG: KASAN: slab-out-of-bounds in pptp_connect+0xb7b/0xc70 [pptp] at addr ffff8800242da0d0 Read of size 2 by task trinity-c14/13664 ============================================================================= BUG kmalloc-8192 (Not tainted): kasan: bad access detected ----------------------------------------------------------------------------- Disabling lock debugging due to kernel taint INFO: Allocated in copy_thread_tls+0x6b3/0x8d0 age=5483091 cpu=1 pid=18329 ___slab_alloc.constprop.66+0x4de/0x580 __slab_alloc.isra.63.constprop.65+0x48/0x80 __kmalloc_track_caller+0x2a2/0x2f0 kmemdup+0x20/0x50 copy_thread_tls+0x6b3/0x8d0 copy_process.part.40+0x3679/0x57b0 _do_fork+0x16c/0xba0 SyS_clone+0x19/0x20 tracesys_phase2+0x84/0x89 INFO: Freed in x86_pmu_event_init+0x477/0x550 age=5483145 cpu=1 pid=18329 __slab_free+0x18b/0x2b0 kfree+0x272/0x290 x86_pmu_event_init+0x477/0x550 perf_try_init_event+0x164/0x1c0 perf_event_alloc+0x1235/0x18c0 inherit_event.isra.88+0xd4/0x6c0 inherit_task_group.isra.90.part.91+0x68/0x200 perf_event_init_task+0x41f/0x830 copy_process.part.40+0x15d6/0x57b0 _do_fork+0x16c/0xba0 SyS_clone+0x19/0x20 tracesys_phase2+0x84/0x89 INFO: Slab 0xffffea000090b600 objects=3 used=3 fp=0x (null) flags=0x4000000000004080 INFO: Object 0xffff8800242d8000 @offset=0 fp=0xffff8800242dc290 Object ffff8800242d8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8010: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8090: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d80a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d80b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d80c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d80d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d80e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d80f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8110: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8120: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8130: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8140: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8150: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8160: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8170: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8190: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d81a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d81b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d81c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d81d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d81e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d81f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8210: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8220: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8230: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8240: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8250: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8260: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8270: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8290: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d82a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d82b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d82c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d82d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d82e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d82f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8310: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8320: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8330: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8340: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8350: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8360: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8370: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8390: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d83a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d83b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d83c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d83d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d83e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d83f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8410: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8420: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8430: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8440: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8450: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8460: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8470: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8490: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d84a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d84b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d84c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d84d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d84e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d84f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8510: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8520: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8530: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8540: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8550: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8560: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8570: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8590: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d85a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d85b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d85c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d85d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d85e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d85f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8610: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8620: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8630: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8640: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8650: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8660: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8670: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8690: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d86a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d86b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d86c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d86d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d86e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d86f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8710: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8720: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8730: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8740: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8750: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8760: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8770: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8790: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d87a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d87b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d87c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d87d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d87e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d87f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8810: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8820: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8830: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8840: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8850: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8860: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8870: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8890: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d88a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d88b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d88c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d88d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d88e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d88f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8910: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8920: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8930: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8940: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8950: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8960: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8970: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8990: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d89a0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d89b0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d89c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d89d0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d89e0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d89f0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a10: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a20: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a30: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a40: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a50: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a60: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a70: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8a90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8aa0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ab0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ac0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ad0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ae0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8af0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b10: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b20: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b30: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b40: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b50: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b60: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b70: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8b90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ba0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8bb0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8bc0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8bd0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8be0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8bf0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c10: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c20: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c30: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c40: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c50: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c60: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c70: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8c90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ca0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8cb0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8cc0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8cd0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ce0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8cf0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d10: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d20: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d30: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d40: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d50: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d60: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d70: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8d90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8da0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8db0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8dc0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8dd0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8de0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8df0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e10: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e20: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e30: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e40: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e50: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e60: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e70: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8e90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ea0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8eb0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ec0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ed0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ee0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ef0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f10: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f20: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f30: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f40: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f50: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f60: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f70: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8f90: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8fa0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8fb0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8fc0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8fd0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8fe0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Object ffff8800242d8ff0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ Redzone ffff8800242da000: cc cc cc cc cc cc cc cc ........ Padding ffff8800242da140: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ CPU: 0 PID: 13664 Comm: trinity-c14 Tainted: G B 4.4.0-gelk-debug+ #16 00000000aeddfea9 ffff880089defb80 ffffffff8896da2a ffff8800a2c04000 ffff880089defbb0 ffffffff884efc49 ffff8800a2c04000 ffffea000090b600 ffff8800242d8000 ffff8800242d9bd8 ffff880089defbd8 ffffffff884f62c4 Call Trace: [] dump_stack+0x4e/0x84 [] print_trailer+0xf9/0x150 [] object_err+0x34/0x40 [] kasan_report_error+0x20c/0x530 [] __asan_report_load2_noabort+0x43/0x50 [] ? pptp_connect+0xb7b/0xc70 [pptp] [] pptp_connect+0xb7b/0xc70 [pptp] [] ? pptp_connect+0x1df/0xc70 [pptp] [] ? pptp_bind+0x2e0/0x2e0 [pptp] [] ? __might_fault+0x166/0x1b0 [] ? __might_fault+0xcb/0x1b0 [] SYSC_connect+0x181/0x2a0 [] ? SYSC_bind+0x220/0x220 [] ? context_tracking_exit.part.5+0x2a/0x50 [] ? trace_hardirqs_on_caller+0x3f9/0x580 [] ? trace_hardirqs_on+0xd/0x10 [] ? context_tracking_exit+0x1d/0x20 [] ? enter_from_user_mode+0x1f/0x50 [] ? syscall_trace_enter_phase1+0x278/0x470 [] ? rcu_read_lock_sched_held+0xf0/0x130 [] SyS_connect+0xe/0x10 [] tracesys_phase2+0x84/0x89 Memory state around the buggy address: ffff8800242d9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8800242da000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffff8800242da080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff8800242da100: fc fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 ffff8800242da180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ==================================================================