================================================================== BUG: KASAN: slab-out-of-bounds in user_mode arch/x86/include/asm/ptrace.h:131 [inline] BUG: KASAN: slab-out-of-bounds in trace_page_fault_entries arch/x86/mm/fault.c:1516 [inline] BUG: KASAN: slab-out-of-bounds in do_page_fault+0x66/0x330 arch/x86/mm/fault.c:1528 Read of size 8 at addr ffff8881d98dfea0 by task syz-executor.0/422 CPU: 0 PID: 422 Comm: syz-executor.0 Not tainted 5.4.283-syzkaller-04984-ge6ac8beecb16 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: Allocated by task 1536: ================================================================================ UBSAN: array-index-out-of-bounds in lib/stackdepot.c:205:15 index 2034176 is out of range for type 'void *[8192]' CPU: 0 PID: 422 Comm: syz-executor.0 Not tainted 5.4.283-syzkaller-04984-ge6ac8beecb16 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: ================================================================================ invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 422 Comm: syz-executor.0 Not tainted 5.4.283-syzkaller-04984-ge6ac8beecb16 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 a0 be 07 86 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881d98dfc80 EFLAGS: 00010012 RAX: ffffffff82487c7f RBX: 00000000ffff0a00 RCX: ffff8881f5feee40 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881d98dfd38 R08: ffffffff82487c76 R09: ffffed103edc5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5d04780 R13: ffff8881d98df600 R14: ffff8881d98dfcc0 R15: 00000000001f0a00 FS: 0000555564368480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffc16d48 CR3: 00000001f5c2a000 CR4: 00000000003406b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 6816ed964855a8a8 ]--- RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 a0 be 07 86 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881d98dfc80 EFLAGS: 00010012 RAX: ffffffff82487c7f RBX: 00000000ffff0a00 RCX: ffff8881f5feee40 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881d98dfd38 R08: ffffffff82487c76 R09: ffffed103edc5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5d04780 R13: ffff8881d98df600 R14: ffff8881d98dfcc0 R15: 00000000001f0a00 FS: 0000555564368480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffc16d48 CR3: 00000001f5c2a000 CR4: 00000000003406b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400