================================================================== BUG: KASAN: vmalloc-out-of-bounds in __bpf_trace_run kernel/trace/bpf_trace.c:1937 [inline] BUG: KASAN: vmalloc-out-of-bounds in bpf_trace_run5+0x401/0x410 kernel/trace/bpf_trace.c:1977 Read of size 8 at addr ffffc90000fbe030 by task syz-executor.3/6909 CPU: 1 PID: 6909 Comm: syz-executor.3 Not tainted 5.9.0-rc5-next-20200921-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x198/0x1fb lib/dump_stack.c:118 print_address_description.constprop.0.cold+0x5/0x497 mm/kasan/report.c:385 __kasan_report mm/kasan/report.c:545 [inline] kasan_report.cold+0x1f/0x37 mm/kasan/report.c:562 __bpf_trace_run kernel/trace/bpf_trace.c:1937 [inline] bpf_trace_run5+0x401/0x410 kernel/trace/bpf_trace.c:1977 __bpf_trace_ext4_journal_start+0x142/0x180 include/trace/events/ext4.h:1788 trace_ext4_journal_start include/trace/events/ext4.h:1788 [inline] __ext4_journal_start_sb+0x228/0x440 fs/ext4/ext4_jbd2.c:96 __ext4_journal_start fs/ext4/ext4_jbd2.h:328 [inline] ext4_dirty_inode+0xbc/0x130 fs/ext4/inode.c:5850 __mark_inode_dirty+0x888/0x1190 fs/fs-writeback.c:2260 generic_update_time fs/inode.c:1764 [inline] update_time fs/inode.c:1777 [inline] touch_atime+0x2f3/0x370 fs/inode.c:1848 file_accessed include/linux/fs.h:2217 [inline] iterate_dir+0x3da/0x660 fs/readdir.c:70 __do_sys_getdents fs/readdir.c:283 [inline] __se_sys_getdents fs/readdir.c:268 [inline] __x64_sys_getdents+0x13b/0x2f0 fs/readdir.c:268 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45b94b Code: 02 74 b6 31 f6 eb b9 0f 1f 84 00 00 00 00 00 41 57 41 56 48 63 ff 41 55 41 54 b8 4e 00 00 00 55 53 48 89 f3 48 83 ec 08 0f 05 <48> 3d 00 f0 ff ff 77 55 4c 8d 24 06 49 89 c5 4c 39 e6 73 33 90 0f RSP: 002b:00007ffe766cbef0 EFLAGS: 00000206 ORIG_RAX: 000000000000004e RAX: ffffffffffffffda RBX: 0000000003655a90 RCX: 000000000045b94b RDX: 0000000000008000 RSI: 0000000003655a90 RDI: 0000000000000003 RBP: 0000000003655a90 R08: 0000000000000000 R09: 0000000003654940 R10: 0000000000000000 R11: 0000000000000206 R12: ffffffffffffffd4 R13: 0000000000000016 R14: 0000000000000000 R15: 00007ffe766cd090 Memory state around the buggy address: ffffc90000fbdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000fbdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 >ffffc90000fbe000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc90000fbe080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc90000fbe100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ==================================================================