================================================================== BUG: KASAN: global-out-of-bounds in memcpy include/linux/string.h:347 [inline] BUG: KASAN: global-out-of-bounds in soft_cursor+0x43d/0xa50 drivers/video/fbdev/core/softcursor.c:70 Read of size 32 at addr ffffffff8706df60 by task kworker/1:3/7245 CPU: 1 PID: 7245 Comm: kworker/1:3 Not tainted 4.14.162-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_power_efficient fb_flashcursor Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x142/0x197 lib/dump_stack.c:58 print_address_description.cold+0x5/0x1dc mm/kasan/report.c:252 kasan_report_error mm/kasan/report.c:351 [inline] kasan_report mm/kasan/report.c:409 [inline] kasan_report.cold+0xa9/0x2af mm/kasan/report.c:393 check_memory_region_inline mm/kasan/kasan.c:260 [inline] check_memory_region+0x123/0x190 mm/kasan/kasan.c:267 memcpy+0x24/0x50 mm/kasan/kasan.c:302 memcpy include/linux/string.h:347 [inline] soft_cursor+0x43d/0xa50 drivers/video/fbdev/core/softcursor.c:70 bit_cursor+0x11be/0x1830 drivers/video/fbdev/core/bitblit.c:386 fb_flashcursor+0x36d/0x410 drivers/video/fbdev/core/fbcon.c:393 process_one_work+0x863/0x1600 kernel/workqueue.c:2114 worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248 kthread+0x319/0x430 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 The buggy address belongs to the variable: str__msr__trace_system_name+0x200/0x9a0 Memory state around the buggy address: ffffffff8706de00: fa fa fa fa 00 00 00 00 06 fa fa fa fa fa fa fa ffffffff8706de80: 00 00 00 fa fa fa fa fa 00 00 00 fa fa fa fa fa >ffffffff8706df00: 00 00 00 03 fa fa fa fa 00 00 00 04 fa fa fa fa ^ ffffffff8706df80: 00 00 00 00 03 fa fa fa fa fa fa fa 00 00 07 fa ffffffff8706e000: fa fa fa fa 00 00 00 00 00 00 03 fa fa fa fa fa ==================================================================