From: https://issuetracker.google.com/76070047


2018-05-04T00:03:16.518840+08:00 ERR kernel: [39708.030656] ==================================================================
2018-05-04T00:03:16.518883+08:00 ERR kernel: [39708.030691] BUG: KASAN: use-after-free in __i915_gem_object_put_pages+0x2ca/0x41b at addr ffff8800622251f0
2018-05-04T00:03:16.518886+08:00 ERR kernel: [39708.030699] Read of size 8 by task TaskSchedulerFo/28651
2018-05-04T00:03:16.518887+08:00 ERR kernel: [39708.030705] =============================================================================
2018-05-04T00:03:16.518888+08:00 ERR kernel: [39708.030713] BUG radix_tree_node (Not tainted): kasan: bad access detected
2018-05-04T00:03:16.518889+08:00 ERR kernel: [39708.030717] -----------------------------------------------------------------------------
2018-05-04T00:03:16.518890+08:00 ERR kernel: [39708.030717] 
2018-05-04T00:03:16.518892+08:00 WARNING kernel: [39708.030724] Disabling lock debugging due to kernel taint
2018-05-04T00:03:16.518893+08:00 ERR kernel: [39708.030737] INFO: Allocated in radix_tree_node_alloc+0x160/0x1ec age=736 cpu=2 pid=19927
2018-05-04T00:03:16.518894+08:00 ERR kernel: [39708.030746] 	___slab_alloc+0xb2/0x1df
2018-05-04T00:03:16.518971+08:00 ERR kernel: [39708.030753] 	kmem_cache_alloc+0x184/0x19d
2018-05-04T00:03:16.518975+08:00 ERR kernel: [39708.030760] 	radix_tree_node_alloc+0x160/0x1ec
2018-05-04T00:03:16.518976+08:00 ERR kernel: [39708.030767] 	radix_tree_insert+0x140/0x76b
2018-05-04T00:03:16.518977+08:00 ERR kernel: [39708.030776] 	i915_gem_object_get_page+0x1f9/0x3d6
2018-05-04T00:03:16.518978+08:00 ERR kernel: [39708.030784] 	i915_gem_object_get_dirty_page+0x14/0x5e
2018-05-04T00:03:16.518979+08:00 ERR kernel: [39708.030792] 	reloc_kmap+0xbe/0x2a1
2018-05-04T00:03:16.518980+08:00 ERR kernel: [39708.030799] 	i915_gem_do_execbuffer+0x3cd7/0xa7ac
2018-05-04T00:03:16.519053+08:00 ERR kernel: [39708.030806] 	i915_gem_execbuffer2+0x111/0x3e6
2018-05-04T00:03:16.519057+08:00 ERR kernel: [39708.030813] 	drm_ioctl+0x4de/0x9f3
2018-05-04T00:03:16.519058+08:00 ERR kernel: [39708.030822] 	SyS_ioctl+0x1dd/0x448
2018-05-04T00:03:16.519059+08:00 ERR kernel: [39708.030830] 	entry_SYSCALL_64_fastpath+0x27/0x9b
2018-05-04T00:03:16.519060+08:00 ERR kernel: [39708.030839] INFO: Freed in radix_tree_node_rcu_free+0x6f/0x87 age=1 cpu=1 pid=20133
2018-05-04T00:03:16.519061+08:00 ERR kernel: [39708.030846] 	kmem_cache_free+0x157/0x353
2018-05-04T00:03:16.519062+08:00 ERR kernel: [39708.030854] 	radix_tree_node_rcu_free+0x6f/0x87
2018-05-04T00:03:16.519131+08:00 ERR kernel: [39708.030862] 	rcu_process_callbacks+0x1a78/0x3209
2018-05-04T00:03:16.519135+08:00 ERR kernel: [39708.030869] 	__do_softirq+0x23d/0x4de
2018-05-04T00:03:16.519136+08:00 ERR kernel: [39708.030877] 	irq_exit+0x9f/0xc7
2018-05-04T00:03:16.519137+08:00 ERR kernel: [39708.030884] 	smp_apic_timer_interrupt+0x8e/0x9e
2018-05-04T00:03:16.519137+08:00 ERR kernel: [39708.030891] 	apic_timer_interrupt+0x93/0xa0
2018-05-04T00:03:16.519138+08:00 ERR kernel: [39708.030898] INFO: Slab 0xffffea0001888900 objects=18 used=13 fp=0xffff8800622251a8 flags=0x4000000000004080
2018-05-04T00:03:16.519219+08:00 ERR kernel: [39708.030905] INFO: Object 0xffff8800622251a8 @offset=4520 fp=0xffff880062225530
2018-05-04T00:03:16.519223+08:00 ERR kernel: [39708.030905] 
2018-05-04T00:03:16.519224+08:00 ERR kernel: [39708.030916] Bytes b4 ffff880062225198: cb 34 59 02 01 00 00 00 5a 5a 5a 5a 5a 5a 5a 5a  .4Y.....ZZZZZZZZ
2018-05-04T00:03:16.519225+08:00 ERR kernel: [39708.030924] Object ffff8800622251a8: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519226+08:00 ERR kernel: [39708.030931] Object ffff8800622251b8: 54 86 44 a1 ff ff ff ff c0 51 22 62 00 88 ff ff  T.D......Q"b....
2018-05-04T00:03:16.519227+08:00 ERR kernel: [39708.030939] Object ffff8800622251c8: c0 51 22 62 00 88 ff ff 00 00 00 00 00 00 00 00  .Q"b............
2018-05-04T00:03:16.519319+08:00 ERR kernel: [39708.030946] Object ffff8800622251d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519323+08:00 ERR kernel: [39708.030953] Object ffff8800622251e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519324+08:00 ERR kernel: [39708.030960] Object ffff8800622251f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519325+08:00 ERR kernel: [39708.030967] Object ffff880062225208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519326+08:00 ERR kernel: [39708.030974] Object ffff880062225218: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519327+08:00 ERR kernel: [39708.030981] Object ffff880062225228: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519401+08:00 ERR kernel: [39708.030988] Object ffff880062225238: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519403+08:00 ERR kernel: [39708.030995] Object ffff880062225248: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519404+08:00 ERR kernel: [39708.031002] Object ffff880062225258: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519405+08:00 ERR kernel: [39708.031009] Object ffff880062225268: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519406+08:00 ERR kernel: [39708.031016] Object ffff880062225278: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519475+08:00 ERR kernel: [39708.031023] Object ffff880062225288: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519479+08:00 ERR kernel: [39708.031030] Object ffff880062225298: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519480+08:00 ERR kernel: [39708.031037] Object ffff8800622252a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519481+08:00 ERR kernel: [39708.031044] Object ffff8800622252b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519482+08:00 ERR kernel: [39708.031051] Object ffff8800622252c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519483+08:00 ERR kernel: [39708.031058] Object ffff8800622252d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519608+08:00 ERR kernel: [39708.031065] Object ffff8800622252e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519610+08:00 ERR kernel: [39708.031072] Object ffff8800622252f8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519611+08:00 ERR kernel: [39708.031079] Object ffff880062225308: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519613+08:00 ERR kernel: [39708.031086] Object ffff880062225318: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519614+08:00 ERR kernel: [39708.031092] Object ffff880062225328: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519693+08:00 ERR kernel: [39708.031099] Object ffff880062225338: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519715+08:00 ERR kernel: [39708.031106] Object ffff880062225348: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519717+08:00 ERR kernel: [39708.031113] Object ffff880062225358: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519718+08:00 ERR kernel: [39708.031120] Object ffff880062225368: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519719+08:00 ERR kernel: [39708.031127] Object ffff880062225378: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519806+08:00 ERR kernel: [39708.031134] Object ffff880062225388: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519811+08:00 ERR kernel: [39708.031141] Object ffff880062225398: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519812+08:00 ERR kernel: [39708.031148] Object ffff8800622253a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519813+08:00 ERR kernel: [39708.031181] Object ffff8800622253b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519814+08:00 ERR kernel: [39708.031188] Object ffff8800622253c8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519815+08:00 ERR kernel: [39708.031195] Object ffff8800622253d8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
2018-05-04T00:03:16.519884+08:00 ERR kernel: [39708.031201] Redzone ffff8800622253e8: bb bb bb bb bb bb bb bb                          ........
2018-05-04T00:03:16.519888+08:00 ERR kernel: [39708.031207] Padding ffff880062225528: 5a 5a 5a 5a 5a 5a 5a 5a                          ZZZZZZZZ
2018-05-04T00:03:16.519889+08:00 WARNING kernel: [39708.031218] CPU: 1 PID: 28651 Comm: TaskSchedulerFo Tainted: G    B           4.4.129 #8
2018-05-04T00:03:16.519890+08:00 WARNING kernel: [39708.031223] Hardware name: Google Coral/Coral, BIOS Google_Coral.10068.47.0 02/08/2018
2018-05-04T00:03:16.519891+08:00 WARNING kernel: [39708.031230]  1ffff10001abcd58 3bc290c512802c0c ffff88000d5e6a70 ffffffffa143a435
2018-05-04T00:03:16.519892+08:00 WARNING kernel: [39708.031243]  ffff88000d5e6b30 ffffffffa143a3d1 0000000045e0360e ffffffffa27b2cf9
2018-05-04T00:03:16.519963+08:00 WARNING kernel: [39708.031256]  ffffffffa0d89bbf 0000000000000000 0000000041b58ab3 ffffffffa27981e8
2018-05-04T00:03:16.519967+08:00 WARNING kernel: [39708.031269] Call Trace:
2018-05-04T00:03:16.519968+08:00 WARNING kernel: [39708.031278]  [<ffffffffa143a435>] __dump_stack+0x19/0x1b
2018-05-04T00:03:16.519969+08:00 WARNING kernel: [39708.031286]  [<ffffffffa143a3d1>] dump_stack+0xc1/0x10c
2018-05-04T00:03:16.519970+08:00 WARNING kernel: [39708.031295]  [<ffffffffa0d89bbf>] ? check_syslog_permissions+0xcb/0xcb
2018-05-04T00:03:16.519971+08:00 WARNING kernel: [39708.031303]  [<ffffffffa143a310>] ? _atomic_dec_and_lock+0x141/0x141
2018-05-04T00:03:16.519972+08:00 WARNING kernel: [39708.031312]  [<ffffffffa0f8d8bb>] print_trailer+0x104/0x10f
2018-05-04T00:03:16.520044+08:00 WARNING kernel: [39708.031320]  [<ffffffffa0f8d6e6>] object_err+0x36/0x3d
2018-05-04T00:03:16.520047+08:00 WARNING kernel: [39708.031328]  [<ffffffffa0f9383d>] kasan_report+0x4da/0x4e4
2018-05-04T00:03:16.520049+08:00 WARNING kernel: [39708.031336]  [<ffffffffa0f02412>] ? call_rcu+0x17/0x19
2018-05-04T00:03:16.520050+08:00 WARNING kernel: [39708.031344]  [<ffffffffa144843b>] ? radix_tree_delete_item+0x44b/0x657
2018-05-04T00:03:16.520051+08:00 WARNING kernel: [39708.031352]  [<ffffffffa0f938a9>] __asan_report_load8_noabort+0x17/0x19
2018-05-04T00:03:16.520052+08:00 WARNING kernel: [39708.031360]  [<ffffffffa17d320e>] __i915_gem_object_put_pages+0x2ca/0x41b
2018-05-04T00:03:16.520122+08:00 WARNING kernel: [39708.031369]  [<ffffffffa17d2f44>] ? i915_gem_object_attach_phys+0x171/0x171
2018-05-04T00:03:16.520126+08:00 WARNING kernel: [39708.031377]  [<ffffffffa17d2998>] ? i915_gem_get_aperture_ioctl+0x1b6/0x1b6
2018-05-04T00:03:16.520127+08:00 WARNING kernel: [39708.031386]  [<ffffffffa1eb262d>] i915_gem_shrink+0x86a/0xb87
2018-05-04T00:03:16.520128+08:00 WARNING kernel: [39708.031395]  [<ffffffffa1eb1dc3>] ? __i915_spin_request+0x2fb/0x2fb
2018-05-04T00:03:16.520129+08:00 WARNING kernel: [39708.031404]  [<ffffffffa2413585>] ? mutex_unlock+0x2a/0x2a
2018-05-04T00:03:16.520130+08:00 WARNING kernel: [39708.031412]  [<ffffffffa241ab7e>] ? _raw_spin_lock_bh+0x1c/0x1c
2018-05-04T00:03:16.520131+08:00 WARNING kernel: [39708.031419]  [<ffffffffa0d7dfce>] ? __mutex_trylock+0x9/0x11
2018-05-04T00:03:16.520202+08:00 WARNING kernel: [39708.031428]  [<ffffffffa2413974>] ? mutex_trylock+0xe/0x13
2018-05-04T00:03:16.520206+08:00 WARNING kernel: [39708.031436]  [<ffffffffa17e185d>] i915_gem_shrinker_scan+0xec/0x16b
2018-05-04T00:03:16.520385+08:00 WARNING kernel: [39708.031445]  [<ffffffffa17e1771>] ? i915_gem_shrinker_init+0x164/0x164
2018-05-04T00:03:16.520388+08:00 WARNING kernel: [39708.031453]  [<ffffffffa1004aba>] ? list_lru_shrink_count+0x5a/0x76
2018-05-04T00:03:16.520389+08:00 WARNING kernel: [39708.031463]  [<ffffffffa0fba653>] shrink_slab+0x5e7/0x860
2018-05-04T00:03:16.520390+08:00 WARNING kernel: [39708.031472]  [<ffffffffa0fba06c>] ? register_shrinker+0x108/0x108
2018-05-04T00:03:16.520391+08:00 WARNING kernel: [39708.031482]  [<ffffffffa0fbf462>] shrink_zone+0xd15/0x16a0
2018-05-04T00:03:16.520466+08:00 WARNING kernel: [39708.031493]  [<ffffffffa0fbe74d>] ? trylock_page+0xc8/0xc8
2018-05-04T00:03:16.520470+08:00 WARNING kernel: [39708.031503]  [<ffffffffa0cdf390>] ? update_vsyscall+0x32e/0x32e
2018-05-04T00:03:16.520471+08:00 WARNING kernel: [39708.031511]  [<ffffffffa241adb2>] ? _raw_spin_unlock_irq+0x65/0xdd
2018-05-04T00:03:16.520472+08:00 WARNING kernel: [39708.031521]  [<ffffffffa0fbd9a3>] try_to_free_pages+0xa77/0x13d9
2018-05-04T00:03:16.520473+08:00 WARNING kernel: [39708.031531]  [<ffffffffa0fbcf2c>] ? shrink_page_list+0x2082/0x2082
2018-05-04T00:03:16.520474+08:00 WARNING kernel: [39708.031539]  [<ffffffffa0d65d95>] ? update_load_avg+0x55b/0x8dc
2018-05-04T00:03:16.520566+08:00 WARNING kernel: [39708.031548]  [<ffffffffa0ec9f77>] ? __might_sleep+0x109/0x109
2018-05-04T00:03:16.520569+08:00 WARNING kernel: [39708.031556]  [<ffffffffa0ec9f77>] ? __might_sleep+0x109/0x109
2018-05-04T00:03:16.520570+08:00 WARNING kernel: [39708.031566]  [<ffffffffa0fabf91>] __alloc_pages_nodemask+0x23a0/0x3c05
2018-05-04T00:03:16.520571+08:00 WARNING kernel: [39708.031576]  [<ffffffffa13b958f>] ? generic_end_io_acct+0x280/0x34f
2018-05-04T00:03:16.520572+08:00 WARNING kernel: [39708.031588]  [<ffffffffa0fa9bf1>] ? get_pfnblock_flags_mask+0xc3/0xc3
2018-05-04T00:03:16.520573+08:00 WARNING kernel: [39708.031596]  [<ffffffffa0fa0bc8>] ? find_get_entry+0xdd/0x11f
2018-05-04T00:03:16.520574+08:00 WARNING kernel: [39708.031604]  [<ffffffffa0fa0e63>] ? pagecache_get_page+0x9e/0x900
2018-05-04T00:03:16.520640+08:00 WARNING kernel: [39708.031613]  [<ffffffffa1418584>] ? blk_queue_enter+0x413/0x413
2018-05-04T00:03:16.520644+08:00 WARNING kernel: [39708.031621]  [<ffffffffa0fa0bc8>] ? find_get_entry+0xdd/0x11f
2018-05-04T00:03:16.520645+08:00 WARNING kernel: [39708.031629]  [<ffffffffa0fa0e63>] ? pagecache_get_page+0x9e/0x900
2018-05-04T00:03:16.520646+08:00 WARNING kernel: [39708.031636]  [<ffffffffa12204f2>] ? bdev_read_page+0x1f0/0x202
2018-05-04T00:03:16.520647+08:00 WARNING kernel: [39708.031646]  [<ffffffffa0f848cd>] alloc_pages_node+0x14/0x16
2018-05-04T00:03:16.520648+08:00 WARNING kernel: [39708.031654]  [<ffffffffa0fea955>] read_swap_cache_async+0x72/0x281
2018-05-04T00:03:16.520726+08:00 WARNING kernel: [39708.031662]  [<ffffffffa0feac31>] swapin_readahead+0xcd/0x278
2018-05-04T00:03:16.520731+08:00 WARNING kernel: [39708.031670]  [<ffffffffa0feab64>] ? read_swap_cache_async+0x281/0x281
2018-05-04T00:03:16.520732+08:00 WARNING kernel: [39708.031678]  [<ffffffffa0f846ff>] ? find_get_page+0xd/0xf
2018-05-04T00:03:16.520733+08:00 WARNING kernel: [39708.031685]  [<ffffffffa0fea84f>] ? lookup_swap_cache+0x7a/0x10e
2018-05-04T00:03:16.520734+08:00 WARNING kernel: [39708.031693]  [<ffffffffa0fea7d5>] ? free_pages_and_swap_cache+0xef/0xef
2018-05-04T00:03:16.520735+08:00 WARNING kernel: [39708.031702]  [<ffffffffa0fd5980>] handle_mm_fault+0x1806/0x302d
2018-05-04T00:03:16.520736+08:00 WARNING kernel: [39708.031711]  [<ffffffffa0fd417a>] ? add_mm_counter_fast+0xaa/0xaa
2018-05-04T00:03:16.520803+08:00 WARNING kernel: [39708.031720]  [<ffffffffa0ec9f77>] ? __might_sleep+0x109/0x109
2018-05-04T00:03:16.520806+08:00 WARNING kernel: [39708.031727]  [<ffffffffa0ef0eed>] ? pick_next_task_rt+0x2fe/0x610
2018-05-04T00:03:16.520807+08:00 WARNING kernel: [39708.031736]  [<ffffffffa0fde992>] ? find_vma+0x1d/0xca
2018-05-04T00:03:16.520808+08:00 WARNING kernel: [39708.031745]  [<ffffffffa0ce4ab5>] __do_page_fault+0x2a2/0x841
2018-05-04T00:03:16.520809+08:00 WARNING kernel: [39708.031753]  [<ffffffffa0ce4813>] ? do_page_fault+0xe/0xe
2018-05-04T00:03:16.520810+08:00 WARNING kernel: [39708.031761]  [<ffffffffa240f9e2>] ? schedule+0x9a/0x12c
2018-05-04T00:03:16.520876+08:00 WARNING kernel: [39708.031770]  [<ffffffffa0ce4811>] do_page_fault+0xc/0xe
2018-05-04T00:03:16.520880+08:00 WARNING kernel: [39708.031777]  [<ffffffffa241d982>] page_fault+0x22/0x30
2018-05-04T00:03:16.520881+08:00 ERR kernel: [39708.031783] Memory state around the buggy address:
2018-05-04T00:03:16.520882+08:00 ERR kernel: [39708.031791]  ffff880062225080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
2018-05-04T00:03:16.520883+08:00 ERR kernel: [39708.031798]  ffff880062225100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
2018-05-04T00:03:16.520884+08:00 ERR kernel: [39708.031804] >ffff880062225180: fc fc fc fc fc fb fb fb fb fb fb fb fb fb fb fb
2018-05-04T00:03:16.520885+08:00 ERR kernel: [39708.031809]                                                              ^
2018-05-04T00:03:16.520954+08:00 ERR kernel: [39708.031815]  ffff880062225200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
2018-05-04T00:03:16.520958+08:00 ERR kernel: [39708.031821]  ffff880062225280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
2018-05-04T00:03:16.520959+08:00 ERR kernel: [39708.031826] ==================================================================