================================================================== BUG: KASAN: slab-out-of-bounds in user_mode arch/x86/include/asm/ptrace.h:131 [inline] BUG: KASAN: slab-out-of-bounds in trace_page_fault_entries arch/x86/mm/fault.c:1541 [inline] BUG: KASAN: slab-out-of-bounds in do_page_fault+0x66/0x330 arch/x86/mm/fault.c:1553 Read of size 8 at addr ffff8881d9077ea0 by task syz-executor.0/408 CPU: 1 PID: 408 Comm: syz-executor.0 Not tainted 5.4.274-syzkaller-04907-g70fafe094510 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: Allocated by task 1536: ================================================================================ UBSAN: array-index-out-of-bounds in lib/stackdepot.c:205:15 index 2034176 is out of range for type 'void *[8192]' CPU: 1 PID: 408 Comm: syz-executor.0 Not tainted 5.4.274-syzkaller-04907-g70fafe094510 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: ================================================================================ invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 408 Comm: syz-executor.0 Not tainted 5.4.274-syzkaller-04907-g70fafe094510 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 a0 bb a7 85 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881d9077c80 EFLAGS: 00010012 RAX: ffffffff82486fff RBX: 00000000ffff0a00 RCX: ffff8881f0d81f80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881d9077d38 R08: ffffffff82486ff6 R09: ffffed103ede5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5d05400 R13: ffff8881d9077600 R14: ffff8881d9077cc0 R15: 00000000001f0a00 FS: 00005555560b4480(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffd16970 CR3: 00000001f5c2a000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace d8fea685063dc313 ]--- RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 a0 bb a7 85 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881d9077c80 EFLAGS: 00010012 RAX: ffffffff82486fff RBX: 00000000ffff0a00 RCX: ffff8881f0d81f80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881d9077d38 R08: ffffffff82486ff6 R09: ffffed103ede5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5d05400 R13: ffff8881d9077600 R14: ffff8881d9077cc0 R15: 00000000001f0a00 FS: 00005555560b4480(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffd16970 CR3: 00000001f5c2a000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400