================================================================== BUG: KASAN: slab-out-of-bounds in user_mode arch/x86/include/asm/ptrace.h:131 [inline] BUG: KASAN: slab-out-of-bounds in trace_page_fault_entries arch/x86/mm/fault.c:1516 [inline] BUG: KASAN: slab-out-of-bounds in do_page_fault+0x66/0x330 arch/x86/mm/fault.c:1528 Read of size 8 at addr ffff8881eeeffea0 by task syz-executor.0/424 CPU: 1 PID: 424 Comm: syz-executor.0 Not tainted 5.4.278-syzkaller-04929-g8edc449e71a9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: Allocated by task 1536: ================================================================================ UBSAN: array-index-out-of-bounds in lib/stackdepot.c:205:15 index 2034176 is out of range for type 'void *[8192]' CPU: 1 PID: 424 Comm: syz-executor.0 Not tainted 5.4.278-syzkaller-04929-g8edc449e71a9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call Trace: ================================================================================ invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 424 Comm: syz-executor.0 Not tainted 5.4.278-syzkaller-04929-g8edc449e71a9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 a0 bc a7 85 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881eeeffc80 EFLAGS: 00010012 RAX: ffffffff82486e4f RBX: 00000000ffff0a00 RCX: ffff8881f3bfaf40 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881eeeffd38 R08: ffffffff82486e46 R09: ffffed103ede5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5d04c80 R13: ffff8881eeeff600 R14: ffff8881eeeffcc0 R15: 00000000001f0a00 FS: 0000555556d71480(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffd16930 CR3: 00000001f5c2a000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace bd4eff4be2b12f48 ]--- RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 a0 bc a7 85 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881eeeffc80 EFLAGS: 00010012 RAX: ffffffff82486e4f RBX: 00000000ffff0a00 RCX: ffff8881f3bfaf40 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881eeeffd38 R08: ffffffff82486e46 R09: ffffed103ede5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5d04c80 R13: ffff8881eeeff600 R14: ffff8881eeeffcc0 R15: 00000000001f0a00 FS: 0000555556d71480(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffd16930 CR3: 00000001f5c2a000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400