2016-01-15 05:23:40

by Konstantin Khlebnikov

Subject: KASAN splal in minstrel_ht_update_stats()

Jan 10 17:56:25 hamm kernel: [184374.378842]
==================================================================
Jan 10 17:56:25 hamm kernel: [184374.379001] BUG: KASAN:
slab-out-of-bounds in minstrel_ht_update_stats.isra.7+0x6e1/0x9e0
[mac80211] at addr ffff8800cee640f4
Jan 10 17:56:25 hamm kernel: [184374.381907] Read of size 4 by task swapper/3/0
Jan 10 17:56:25 hamm kernel: [184374.384720]
=============================================================================
Jan 10 17:56:25 hamm kernel: [184374.387670] BUG kmalloc-8192 (Not
tainted): kasan: bad access detected
Jan 10 17:56:25 hamm kernel: [184374.390627]
-----------------------------------------------------------------------------
Jan 10 17:56:25 hamm kernel: [184374.390627]
Jan 10 17:56:25 hamm kernel: [184374.396574] Disabling lock debugging
due to kernel taint
Jan 10 17:56:25 hamm kernel: [184374.399598] INFO: Allocated in
minstrel_ht_alloc_sta+0x9f/0x140 [mac80211] age=165929256 cpu=0
pid=3569
Jan 10 17:56:25 hamm kernel: [184374.402797]
___slab_alloc.constprop.64+0x43f/0x520
Jan 10 17:56:25 hamm kernel: [184374.406041] __slab_alloc.constprop.63+0x20/0x40
Jan 10 17:56:25 hamm kernel: [184374.409263] kmem_cache_alloc_trace+0x131/0x170
Jan 10 17:56:25 hamm kernel: [184374.412507]
minstrel_ht_alloc_sta+0x9f/0x140 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.415757]
sta_info_alloc+0x4f5/0x680 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.419007]
ieee80211_add_station+0xe9/0x330 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.422321]
nl80211_new_station+0x6ed/0x790 [cfg80211]
Jan 10 17:56:25 hamm kernel: [184374.425668] genl_family_rcv_msg+0x37d/0x5d0
Jan 10 17:56:25 hamm kernel: [184374.428978] genl_rcv_msg+0xc4/0x100
Jan 10 17:56:25 hamm kernel: [184374.432258] netlink_rcv_skb+0x152/0x190
Jan 10 17:56:25 hamm kernel: [184374.435520] genl_rcv+0x28/0x40
Jan 10 17:56:25 hamm kernel: [184374.438753] netlink_unicast+0x1f9/0x2b0
Jan 10 17:56:25 hamm kernel: [184374.442033] netlink_sendmsg+0x531/0xa50
Jan 10 17:56:25 hamm kernel: [184374.445327] ___sys_sendmsg+0x44c/0x470
Jan 10 17:56:25 hamm kernel: [184374.448594] __sys_sendmsg+0xbc/0x130
Jan 10 17:56:25 hamm kernel: [184374.451838] SyS_sendmsg+0x12/0x20
Jan 10 17:56:25 hamm kernel: [184374.455053] INFO: Slab
0xffffea00033b9800 objects=3 used=2 fp=0xffff8800cee64290 flags=0x4080
Jan 10 17:56:25 hamm kernel: [184374.458404] INFO: Object
0xffff8800cee62148 @offset=8520 fp=0xffff8800cee64290
Jan 10 17:56:25 hamm kernel: [184374.458404]
Jan 10 17:56:25 hamm kernel: [184374.465241] Bytes b4
ffff8800cee62138: 84 20 14 01 01 00 00 00 5a 5a 5a 5a 5a 5a 5a 5a .
......ZZZZZZZZ
Jan 10 17:56:25 hamm kernel: [184374.468835] Object ffff8800cee62148:
e8 07 e6 ce 00 88 ff ff 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.472488] Object ffff8800cee62158:
03 00 01 00 63 00 00 00 00 00 00 00 63 00 00 00 ....c.......c...
Jan 10 17:56:25 hamm kernel: [184374.476126] Object ffff8800cee62168:
01 af f8 0a 01 00 00 00 6c 00 00 00 e4 00 00 00 ........l.......
Jan 10 17:56:25 hamm kernel: [184374.479743] Object ffff8800cee62178:
68 e2 00 00 b7 03 00 00 00 00 00 00 00 01 02 00 h...............
Jan 10 17:56:25 hamm kernel: [184374.483403] Object ffff8800cee62188:
0c 0f 0e 00 00 00 00 00 01 05 ff 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.487093] Object ffff8800cee62198:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.490735] Object ffff8800cee621a8:
01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.494331] Object ffff8800cee621b8:
00 00 01 00 00 00 01 00 00 00 03 03 5c 00 00 00 ............\...
Jan 10 17:56:25 hamm kernel: [184374.497893] Object ffff8800cee621c8:
00 00 00 00 00 00 00 00 ab 02 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.501424] Object ffff8800cee621d8:
39 02 00 00 00 00 00 00 00 00 00 00 ad 67 00 00 9............g..
Jan 10 17:56:25 hamm kernel: [184374.504987] Object ffff8800cee621e8:
0d 00 04 04 12 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.508575] Object ffff8800cee621f8:
18 02 00 00 00 00 00 00 14 01 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.512129] Object ffff8800cee62208:
00 00 00 00 68 49 00 00 0b 00 05 05 12 00 00 00 ....hI..........
Jan 10 17:56:25 hamm kernel: [184374.515664] Object ffff8800cee62218:
00 00 00 00 00 00 00 00 e2 04 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.519166] Object ffff8800cee62228:
81 03 00 00 00 00 00 00 00 00 00 00 be 45 00 00 .............E..
Jan 10 17:56:25 hamm kernel: [184374.522634] Object ffff8800cee62238:
12 00 05 05 13 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.526139] Object ffff8800cee62248:
0e 0f 00 00 00 00 00 00 5a 0b 00 00 00 00 00 00 ........Z.......
Jan 10 17:56:25 hamm kernel: [184374.529656] Object ffff8800cee62258:
00 00 00 00 b1 1c 00 00 0c 00 05 05 80 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.533104] Object ffff8800cee62268:
00 00 00 00 00 00 00 00 99 21 00 00 00 00 00 00 .........!......
Jan 10 17:56:25 hamm kernel: [184374.536436] Object ffff8800cee62278:
8c 1a 00 00 00 00 00 00 00 00 00 00 ae 12 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.539618] Object ffff8800cee62288:
12 00 05 05 17 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.542764] Object ffff8800cee62298:
a0 9c 00 00 00 00 00 00 cd 8f 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.545836] Object ffff8800cee622a8:
00 00 00 00 c1 1b 00 00 08 00 05 05 2d 00 00 00 ............-...
Jan 10 17:56:25 hamm kernel: [184374.548832] Object ffff8800cee622b8:
00 00 00 00 00 00 00 00 5b 30 00 00 00 00 00 00 ........[0......
Jan 10 17:56:25 hamm kernel: [184374.551750] Object ffff8800cee622c8:
52 25 00 00 00 00 00 00 00 00 00 00 bf 16 00 00 R%..............
Jan 10 17:56:25 hamm kernel: [184374.554599] Object ffff8800cee622d8:
0f 00 05 05 59 00 00 00 00 00 00 00 00 00 00 00 ....Y...........
Jan 10 17:56:25 hamm kernel: [184374.557433] Object ffff8800cee622e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.560152] Object ffff8800cee622f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.562748] Object ffff8800cee62308:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.565297] Object ffff8800cee62318:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.567802] Object ffff8800cee62328:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.570248] Object ffff8800cee62338:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.572638] Object ffff8800cee62348:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.574969] Object ffff8800cee62358:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.577244] Object ffff8800cee62368:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.579469] Object ffff8800cee62378:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.581658] Object ffff8800cee62388:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.583814] Object ffff8800cee62398:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.585938] Object ffff8800cee623a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.588024] Object ffff8800cee623b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.590108] Object ffff8800cee623c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.592171] Object ffff8800cee623d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.594193] Object ffff8800cee623e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.596173] Object ffff8800cee623f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.598041] Object ffff8800cee62408:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.599809] Object ffff8800cee62418:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.601504] Object ffff8800cee62428:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.603099] Object ffff8800cee62438:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.604565] Object ffff8800cee62448:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.605982] Object ffff8800cee62458:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.607366] Object ffff8800cee62468:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.608710] Object ffff8800cee62478:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.610022] Object ffff8800cee62488:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.611323] Object ffff8800cee62498:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.612614] Object ffff8800cee624a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.613885] Object ffff8800cee624b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.615134] Object ffff8800cee624c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.616351] Object ffff8800cee624d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.617539] Object ffff8800cee624e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.618704] Object ffff8800cee624f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.619834] Object ffff8800cee62508:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.620936] Object ffff8800cee62518:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.622017] Object ffff8800cee62528:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.623070] Object ffff8800cee62538:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.624103] Object ffff8800cee62548:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.625107] Object ffff8800cee62558:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.626079] Object ffff8800cee62568:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.627027] Object ffff8800cee62578:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.627949] Object ffff8800cee62588:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.628845] Object ffff8800cee62598:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.629708] Object ffff8800cee625a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.630543] Object ffff8800cee625b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.631350] Object ffff8800cee625c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.632125] Object ffff8800cee625d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.632888] Object ffff8800cee625e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.633648] Object ffff8800cee625f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.634406] Object ffff8800cee62608:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.635165] Object ffff8800cee62618:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.635924] Object ffff8800cee62628:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.636681] Object ffff8800cee62638:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.637439] Object ffff8800cee62648:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.638197] Object ffff8800cee62658:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.638955] Object ffff8800cee62668:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.639712] Object ffff8800cee62678:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.640468] Object ffff8800cee62688:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.641224] Object ffff8800cee62698:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.641981] Object ffff8800cee626a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.642739] Object ffff8800cee626b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.643494] Object ffff8800cee626c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.644249] Object ffff8800cee626d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.645006] Object ffff8800cee626e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.645764] Object ffff8800cee626f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.646520] Object ffff8800cee62708:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.647280] Object ffff8800cee62718:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.648033] Object ffff8800cee62728:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.648788] Object ffff8800cee62738:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.649542] Object ffff8800cee62748:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.650297] Object ffff8800cee62758:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.651054] Object ffff8800cee62768:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.651807] Object ffff8800cee62778:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.652558] Object ffff8800cee62788:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.653311] Object ffff8800cee62798:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.654062] Object ffff8800cee627a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.654813] Object ffff8800cee627b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.655565] Object ffff8800cee627c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.656315] Object ffff8800cee627d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.657065] Object ffff8800cee627e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.657818] Object ffff8800cee627f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.658569] Object ffff8800cee62808:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.659317] Object ffff8800cee62818:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.660066] Object ffff8800cee62828:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.660817] Object ffff8800cee62838:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.661567] Object ffff8800cee62848:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.662319] Object ffff8800cee62858:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.663072] Object ffff8800cee62868:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.663823] Object ffff8800cee62878:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.664573] Object ffff8800cee62888:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.665322] Object ffff8800cee62898:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.666072] Object ffff8800cee628a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.666819] Object ffff8800cee628b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.667566] Object ffff8800cee628c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.668315] Object ffff8800cee628d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.669061] Object ffff8800cee628e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.669809] Object ffff8800cee628f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.670556] Object ffff8800cee62908:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.671304] Object ffff8800cee62918:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.672054] Object ffff8800cee62928:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.672802] Object ffff8800cee62938:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.673552] Object ffff8800cee62948:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.674304] Object ffff8800cee62958:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.675057] Object ffff8800cee62968:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.675808] Object ffff8800cee62978:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.676555] Object ffff8800cee62988:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.677300] Object ffff8800cee62998:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.678046] Object ffff8800cee629a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.678792] Object ffff8800cee629b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.679537] Object ffff8800cee629c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.680282] Object ffff8800cee629d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.681029] Object ffff8800cee629e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.681777] Object ffff8800cee629f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.682523] Object ffff8800cee62a08:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.683270] Object ffff8800cee62a18:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.684018] Object ffff8800cee62a28:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.684766] Object ffff8800cee62a38:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.685514] Object ffff8800cee62a48:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.686260] Object ffff8800cee62a58:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.687007] Object ffff8800cee62a68:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.687754] Object ffff8800cee62a78:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.688500] Object ffff8800cee62a88:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.689246] Object ffff8800cee62a98:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.689993] Object ffff8800cee62aa8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.690739] Object ffff8800cee62ab8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.691487] Object ffff8800cee62ac8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.692235] Object ffff8800cee62ad8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.692984] Object ffff8800cee62ae8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.693734] Object ffff8800cee62af8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.694481] Object ffff8800cee62b08:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.695230] Object ffff8800cee62b18:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.695978] Object ffff8800cee62b28:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.696726] Object ffff8800cee62b38:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.697473] Object ffff8800cee62b48:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.698221] Object ffff8800cee62b58:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.698969] Object ffff8800cee62b68:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.699717] Object ffff8800cee62b78:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.700466] Object ffff8800cee62b88:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.701218] Object ffff8800cee62b98:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.701971] Object ffff8800cee62ba8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.702724] Object ffff8800cee62bb8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.703479] Object ffff8800cee62bc8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.704232] Object ffff8800cee62bd8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.704985] Object ffff8800cee62be8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.705739] Object ffff8800cee62bf8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.706490] Object ffff8800cee62c08:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.707242] Object ffff8800cee62c18:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.707994] Object ffff8800cee62c28:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.708746] Object ffff8800cee62c38:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.709500] Object ffff8800cee62c48:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.710254] Object ffff8800cee62c58:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.711010] Object ffff8800cee62c68:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.711766] Object ffff8800cee62c78:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.712522] Object ffff8800cee62c88:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.713276] Object ffff8800cee62c98:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.714031] Object ffff8800cee62ca8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.714787] Object ffff8800cee62cb8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.715542] Object ffff8800cee62cc8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.716296] Object ffff8800cee62cd8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.717050] Object ffff8800cee62ce8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.717805] Object ffff8800cee62cf8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.718558] Object ffff8800cee62d08:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.719312] Object ffff8800cee62d18:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.720066] Object ffff8800cee62d28:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.720821] Object ffff8800cee62d38:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.721577] Object ffff8800cee62d48:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.722332] Object ffff8800cee62d58:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.723087] Object ffff8800cee62d68:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.723843] Object ffff8800cee62d78:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.724598] Object ffff8800cee62d88:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.725356] Object ffff8800cee62d98:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.726113] Object ffff8800cee62da8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.726868] Object ffff8800cee62db8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.727622] Object ffff8800cee62dc8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.728376] Object ffff8800cee62dd8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.729131] Object ffff8800cee62de8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.729886] Object ffff8800cee62df8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.730640] Object ffff8800cee62e08:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.731394] Object ffff8800cee62e18:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.732151] Object ffff8800cee62e28:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.732908] Object ffff8800cee62e38:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.733664] Object ffff8800cee62e48:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.734420] Object ffff8800cee62e58:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.735177] Object ffff8800cee62e68:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.735934] Object ffff8800cee62e78:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.736688] Object ffff8800cee62e88:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.737440] Object ffff8800cee62e98:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.738195] Object ffff8800cee62ea8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.738949] Object ffff8800cee62eb8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.739702] Object ffff8800cee62ec8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.740455] Object ffff8800cee62ed8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.741210] Object ffff8800cee62ee8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.741967] Object ffff8800cee62ef8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.742721] Object ffff8800cee62f08:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.743475] Object ffff8800cee62f18:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.744232] Object ffff8800cee62f28:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.744987] Object ffff8800cee62f38:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.745742] Object ffff8800cee62f48:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.746499] Object ffff8800cee62f58:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.747252] Object ffff8800cee62f68:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.748006] Object ffff8800cee62f78:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.748760] Object ffff8800cee62f88:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.749514] Object ffff8800cee62f98:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.750268] Object ffff8800cee62fa8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.751023] Object ffff8800cee62fb8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.751778] Object ffff8800cee62fc8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.752534] Object ffff8800cee62fd8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.753288] Object ffff8800cee62fe8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.754043] Object ffff8800cee62ff8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.754797] Object ffff8800cee63008:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.755554] Object ffff8800cee63018:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.756310] Object ffff8800cee63028:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.757064] Object ffff8800cee63038:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.757820] Object ffff8800cee63048:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.758575] Object ffff8800cee63058:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.759330] Object ffff8800cee63068:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.760087] Object ffff8800cee63078:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.760844] Object ffff8800cee63088:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.761601] Object ffff8800cee63098:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.762358] Object ffff8800cee630a8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.763117] Object ffff8800cee630b8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.763873] Object ffff8800cee630c8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.764630] Object ffff8800cee630d8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.765387] Object ffff8800cee630e8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.766144] Object ffff8800cee630f8:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.766899] Object ffff8800cee63108:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.767654] Object ffff8800cee63118:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.768409] Object ffff8800cee63128:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.769164] Object ffff8800cee63138:
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Jan 10 17:56:25 hamm kernel: [184374.769919] Redzone ffff8800cee64148:
cc cc cc cc cc cc cc cc ........
Jan 10 17:56:25 hamm kernel: [184374.770768] Padding ffff8800cee64288:
5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ
Jan 10 17:56:25 hamm kernel: [184374.771674] CPU: 3 PID: 0 Comm:
swapper/3 Tainted: G B 4.4.0-rc8-zurg+ #43
Jan 10 17:56:25 hamm kernel: [184374.772673] Hardware name: To Be
Filled By O.E.M. To Be Filled By O.E.M./RS880D, BIOS 080015
04/12/2011
Jan 10 17:56:25 hamm kernel: [184374.773812] ffffea00033b9800
ffff8801d96c77f8 ffffffff8148db3c ffff8801d8404fc0
Jan 10 17:56:25 hamm kernel: [184374.775054] ffff8801d96c7828
ffffffff8126e459 ffff8801d8404fc0 ffffea00033b9800
Jan 10 17:56:25 hamm kernel: [184374.776361] ffff8800cee62148
ffff8800cee62148 ffff8801d96c7850 ffffffff81272ea4
Jan 10 17:56:25 hamm kernel: [184374.777720] Call Trace:
Jan 10 17:56:25 hamm kernel: [184374.779074] <IRQ>
[<ffffffff8148db3c>] dump_stack+0x44/0x58
Jan 10 17:56:25 hamm kernel: [184374.780556] [<ffffffff8126e459>]
print_trailer+0xf9/0x150
Jan 10 17:56:25 hamm kernel: [184374.782092] [<ffffffff81272ea4>]
object_err+0x34/0x40
Jan 10 17:56:25 hamm kernel: [184374.783662] [<ffffffff812749b2>]
kasan_report_error+0x212/0x520
Jan 10 17:56:25 hamm kernel: [184374.785318] [<ffffffffa0297235>] ?
minstrel_ht_get_tp_avg.part.5+0x65/0xc0 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.787057] [<ffffffff81274256>] ?
memmove+0x36/0x40
Jan 10 17:56:25 hamm kernel: [184374.788825] [<ffffffff812750b9>]
kasan_report+0x39/0x40
Jan 10 17:56:25 hamm kernel: [184374.790664] [<ffffffffa0297bd1>] ?
minstrel_ht_update_stats.isra.7+0x6e1/0x9e0 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.792609] [<ffffffff81273aa0>]
__asan_load4+0x60/0x70
Jan 10 17:56:25 hamm kernel: [184374.794621] [<ffffffffa0297bd1>]
minstrel_ht_update_stats.isra.7+0x6e1/0x9e0 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.796763] [<ffffffffa02974f0>] ?
minstrel_ht_get_expected_throughput+0xd0/0xd0 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.798966] [<ffffffffa08460ce>] ?
ath_tx_complete+0x18e/0x1e0 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.801218] [<ffffffff81a965ee>] ?
_raw_spin_unlock_irqrestore+0xe/0x10
Jan 10 17:56:25 hamm kernel: [184374.803534] [<ffffffffa08468d3>] ?
ath_tx_complete_buf.isra.28+0x1b3/0x260 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.805963] [<ffffffffa0296320>] ?
minstrel_ht_txstat_valid+0x20/0xe0 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.808462] [<ffffffffa02987ca>]
minstrel_ht_tx_status+0x7ca/0x810 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.811013] [<ffffffffa02058c3>]
ieee80211_tx_status+0xce3/0xfd0 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.813629] [<ffffffffa02273c5>] ?
rate_control_send_low+0x175/0x200 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.816327] [<ffffffffa0298000>] ?
minstrel_ht_update_rates+0x130/0x130 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.819087] [<ffffffffa0204be0>] ?
ieee80211_tx_monitor+0x5e0/0x5e0 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.821910] [<ffffffffa0229081>] ?
rate_control_get_rate+0x181/0x240 [mac80211]
Jan 10 17:56:25 hamm kernel: [184374.824782] [<ffffffffa0846f2c>]
ath_txq_unlock_complete+0x1ac/0x1f0 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.827706] [<ffffffffa0846d80>] ?
ath_txq_unlock+0x20/0x20 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.830677] [<ffffffff81a96713>] ?
_raw_write_unlock_bh+0x23/0x30
Jan 10 17:56:25 hamm kernel: [184374.833701] [<ffffffff81a9672e>] ?
_raw_spin_unlock_bh+0xe/0x10
Jan 10 17:56:25 hamm kernel: [184374.836766] [<ffffffffa084cfdc>]
ath_tx_tasklet+0x3fc/0x440 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.839891] [<ffffffffa084cbe0>] ?
ath_tx_cabq+0x400/0x400 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.843062] [<ffffffff81148068>] ?
try_to_del_timer_sync+0x98/0xd0
Jan 10 17:56:25 hamm kernel: [184374.846284] [<ffffffff81147fd0>] ?
del_timer+0xd0/0xd0
Jan 10 17:56:25 hamm kernel: [184374.849537] [<ffffffff81060f60>] ?
apic_set_affinity+0xd0/0xd0
Jan 10 17:56:25 hamm kernel: [184374.852844] [<ffffffff81a965ee>] ?
_raw_spin_unlock_irqrestore+0xe/0x10
Jan 10 17:56:25 hamm kernel: [184374.856224] [<ffffffffa084018a>]
ath9k_tasklet+0x15a/0x2e0 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.859656] [<ffffffff81062e76>] ?
ioapic_ack_level+0xd6/0x1f0
Jan 10 17:56:25 hamm kernel: [184374.863143] [<ffffffffa0840030>] ?
ath9k_queue_reset+0x50/0x50 [ath9k]
Jan 10 17:56:25 hamm kernel: [184374.866701] [<ffffffff810c68af>]
tasklet_action+0x13f/0x160
Jan 10 17:56:25 hamm kernel: [184374.870303] [<ffffffff810c6ff5>]
__do_softirq+0x135/0x360
Jan 10 17:56:25 hamm kernel: [184374.873938] [<ffffffff810c7410>]
irq_exit+0xf0/0x100
Jan 10 17:56:25 hamm kernel: [184374.877607] [<ffffffff81a9936f>]
do_IRQ+0x5f/0x100
Jan 10 17:56:25 hamm kernel: [184374.881307] [<ffffffff81a97707>]
common_interrupt+0x87/0x87
Jan 10 17:56:25 hamm kernel: [184374.885055] <EOI>
[<ffffffff81074396>] ? native_safe_halt+0x6/0x10
Jan 10 17:56:25 hamm kernel: [184374.888795] [<ffffffff810157c0>]
default_idle+0x20/0x100
Jan 10 17:56:25 hamm kernel: [184374.892529] [<ffffffff81015950>]
amd_e400_idle+0xb0/0x160
Jan 10 17:56:25 hamm kernel: [184374.896198] [<ffffffff810158a0>] ?
default_idle+0x100/0x100
Jan 10 17:56:25 hamm kernel: [184374.899788] [<ffffffff810ef28c>] ?
notifier_call_chain+0x2c/0xb0
Jan 10 17:56:25 hamm kernel: [184374.903308] [<ffffffff8101628f>]
arch_cpu_idle+0xf/0x20
Jan 10 17:56:25 hamm kernel: [184374.906799] [<ffffffff8111e92b>]
default_idle_call+0x3b/0x50
Jan 10 17:56:25 hamm kernel: [184374.910288] [<ffffffff8111ecf5>]
cpu_startup_entry+0x325/0x380
Jan 10 17:56:25 hamm kernel: [184374.913731] [<ffffffff8105b8bd>]
start_secondary+0x1cd/0x220
Jan 10 17:56:25 hamm kernel: [184374.917153] [<ffffffff8105b6f0>] ?
set_cpu_sibling_map+0x740/0x740
Jan 10 17:56:25 hamm kernel: [184374.920562] Memory state around the
buggy address:
Jan 10 17:56:25 hamm kernel: [184374.923986] ffff8800cee63f80: fc fc
fc fc fc fc fc fc fc fc fc fc fc fc fc fc
Jan 10 17:56:25 hamm kernel: [184374.927489] ffff8800cee64000: fc fc
fc fc fc fc fc fc fc fc fc fc fc fc fc fc
Jan 10 17:56:25 hamm kernel: [184374.930914] >ffff8800cee64080: fc fc
fc fc fc fc fc fc fc fc fc fc fc fc fc fc
Jan 10 17:56:25 hamm kernel: [184374.934265]
^
Jan 10 17:56:25 hamm kernel: [184374.937667] ffff8800cee64100: fc fc
fc fc fc fc fc fc fc fc fc fc fc fc fc fc
Jan 10 17:56:25 hamm kernel: [184374.941063] ffff8800cee64180: fc fc
fc fc fc fc fc fc fc fc fc fc fc fc fc fc
Jan 10 17:56:25 hamm kernel: [184374.944371]
==================================================================

out-of-bound in

if (mrs->prob_ewma > mg->rates[mg->max_group_prob_rate].prob_ewma)
mg->max_group_prob_rate = index;



Fix should be something like this:

--- a/net/mac80211/rc80211_minstrel_ht.c
+++ b/net/mac80211/rc80211_minstrel_ht.c
@@ -414,15 +414,16 @@ minstrel_ht_set_best_prob_rate(struct
minstrel_ht_sta *mi, u16 index)
(max_tp_group != MINSTREL_CCK_GROUP))
return;

+ max_gpr_group = mg->max_group_prob_rate / MCS_GROUP_RATES;
+ max_gpr_idx = mg->max_group_prob_rate % MCS_GROUP_RATES;
+ max_gpr_prob = mi->groups[max_gpr_group].rates[max_gpr_idx].prob_ewma;
+
if (mrs->prob_ewma > MINSTREL_FRAC(75, 100)) {
cur_tp_avg = minstrel_ht_get_tp_avg(mi, cur_group, cur_idx,
mrs->prob_ewma);
if (cur_tp_avg > tmp_tp_avg)
mi->max_prob_rate = index;

- max_gpr_group = mg->max_group_prob_rate / MCS_GROUP_RATES;
- max_gpr_idx = mg->max_group_prob_rate % MCS_GROUP_RATES;
- max_gpr_prob =
mi->groups[max_gpr_group].rates[max_gpr_idx].prob_ewma;
max_gpr_tp_avg = minstrel_ht_get_tp_avg(mi, max_gpr_group,
max_gpr_idx,
max_gpr_prob);
@@ -431,7 +432,7 @@ minstrel_ht_set_best_prob_rate(struct
minstrel_ht_sta *mi, u16 index)
} else {
if (mrs->prob_ewma > tmp_prob)
mi->max_prob_rate = index;
- if (mrs->prob_ewma >
mg->rates[mg->max_group_prob_rate].prob_ewma)
+ if (mrs->prob_ewma > max_gpr_prob)
mg->max_group_prob_rate = index;
}
}

2016-01-28 18:52:59

by Felix Fietkau

Subject: Re: KASAN splal in minstrel_ht_update_stats()

On 2016-01-15 06:23, Konstantin Khlebnikov wrote:
> Jan 10 17:56:25 hamm kernel: [184374.378842]
> ==================================================================
> Jan 10 17:56:25 hamm kernel: [184374.379001] BUG: KASAN:
> slab-out-of-bounds in minstrel_ht_update_stats.isra.7+0x6e1/0x9e0
[...]
> ==================================================================
>
> out-of-bound in
>
> if (mrs->prob_ewma > mg->rates[mg->max_group_prob_rate].prob_ewma)
> mg->max_group_prob_rate = index;
>
>
>
> Fix should be something like this:
>
> --- a/net/mac80211/rc80211_minstrel_ht.c
> +++ b/net/mac80211/rc80211_minstrel_ht.c
> @@ -414,15 +414,16 @@ minstrel_ht_set_best_prob_rate(struct
> minstrel_ht_sta *mi, u16 index)
> (max_tp_group != MINSTREL_CCK_GROUP))
> return;
>
> + max_gpr_group = mg->max_group_prob_rate / MCS_GROUP_RATES;
> + max_gpr_idx = mg->max_group_prob_rate % MCS_GROUP_RATES;
> + max_gpr_prob = mi->groups[max_gpr_group].rates[max_gpr_idx].prob_ewma;
> +
> if (mrs->prob_ewma > MINSTREL_FRAC(75, 100)) {
> cur_tp_avg = minstrel_ht_get_tp_avg(mi, cur_group, cur_idx,
> mrs->prob_ewma);
> if (cur_tp_avg > tmp_tp_avg)
> mi->max_prob_rate = index;
>
> - max_gpr_group = mg->max_group_prob_rate / MCS_GROUP_RATES;
> - max_gpr_idx = mg->max_group_prob_rate % MCS_GROUP_RATES;
> - max_gpr_prob =
> mi->groups[max_gpr_group].rates[max_gpr_idx].prob_ewma;
> max_gpr_tp_avg = minstrel_ht_get_tp_avg(mi, max_gpr_group,
> max_gpr_idx,
> max_gpr_prob);
> @@ -431,7 +432,7 @@ minstrel_ht_set_best_prob_rate(struct
> minstrel_ht_sta *mi, u16 index)
> } else {
> if (mrs->prob_ewma > tmp_prob)
> mi->max_prob_rate = index;
> - if (mrs->prob_ewma >
> mg->rates[mg->max_group_prob_rate].prob_ewma)
> + if (mrs->prob_ewma > max_gpr_prob)
> mg->max_group_prob_rate = index;
> }
> }
Fix looks correct, but does not apply (line wrapped). Please resubmit
with a proper description and your Signed-off-by.

Thanks,

- Felix