==================================================================
BUG: KASAN: slab-out-of-bounds in user_mode arch/x86/include/asm/ptrace.h:131 [inline]
BUG: KASAN: slab-out-of-bounds in trace_page_fault_entries arch/x86/mm/fault.c:1516 [inline]
BUG: KASAN: slab-out-of-bounds in do_page_fault+0x6d/0x320 arch/x86/mm/fault.c:1528
Read of size 8 at addr ffff8881e5a9fae0 by task syz.1.465/1998

CPU: 1 PID: 1998 Comm: syz.1.465 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:

Allocated by task 3918577408:
================================================================================
UBSAN: array-index-out-of-bounds in lib/stackdepot.c:205:15
index 2066561 is out of range for type 'void *[8192]'
CPU: 1 PID: 1998 Comm: syz.1.465 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
================================================================================
------------[ cut here ]------------
Bad or missing usercopy whitelist? Kernel memory overwrite attempt detected to SLUB object 'kernfs_node_cache' (offset 64, size 2)!
WARNING: CPU: 1 PID: 1998 at mm/usercopy.c:80 usercopy_warn+0xb7/0xc0 mm/usercopy.c:75
Modules linked in:
CPU: 1 PID: 1998 Comm: syz.1.465 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:usercopy_warn+0xb7/0xc0 mm/usercopy.c:75
usercopy: Kernel memory overwrite attempt detected to SLUB object 'kernfs_node_cache' (offset 88, size 64)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:99!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 1998 Comm: syz.1.465 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:usercopy_abort+0x85/0x90 mm/usercopy.c:87
Code: 89 cb 49 c7 c6 40 7a c3 84 4c 0f 44 f6 48 c7 c7 80 7a c3 84 4c 89 de 4c 89 c9 4d 89 d1 50 53 41 56 e8 7f c1 ff ff 48 83 c4 18 <0f> 0b 00 00 90 90 00 00 90 90 00 55 48 89 e5 53 48 89 fb e8 d3 1e
RSP: 0018:ffff8881e5a9f1c0 EFLAGS: 00010096
RAX: 000000000000006b RBX: 0000000000000058 RCX: cf2dcfa781778100
RDX: 0000000000000000 RSI: 0000000080000041 RDI: 0000000000000000
RBP: ffff8881e5a9f1d0 R08: dffffc0000000000 R09: ffffed103ede5262
R10: ffffed103ede5262 R11: 1ffff1103ede5261 R12: ffff8881f5d00780
R13: 0000000000000200 R14: ffffffff84c37a40 R15: 0000000000000058
FS:  0000555569c03500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffe8fffef00130 CR3: 00000001f5c2a000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
Modules linked in:
---[ end trace d3d50f3176a4af2b ]---
RIP: 0010:usercopy_abort+0x85/0x90 mm/usercopy.c:87
Code: 89 cb 49 c7 c6 40 7a c3 84 4c 0f 44 f6 48 c7 c7 80 7a c3 84 4c 89 de 4c 89 c9 4d 89 d1 50 53 41 56 e8 7f c1 ff ff 48 83 c4 18 <0f> 0b 00 00 90 90 00 00 90 90 00 55 48 89 e5 53 48 89 fb e8 d3 1e
RSP: 0018:ffff8881e5a9f1c0 EFLAGS: 00010096
RAX: 000000000000006b RBX: 0000000000000058 RCX: cf2dcfa781778100
RDX: 0000000000000000 RSI: 0000000080000041 RDI: 0000000000000000
RBP: ffff8881e5a9f1d0 R08: dffffc0000000000 R09: ffffed103ede5262
R10: ffffed103ede5262 R11: 1ffff1103ede5261 R12: ffff8881f5d00780
R13: 0000000000000200 R14: ffffffff84c37a40 R15: 0000000000000058
FS:  0000555569c03500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffe8fffef00130 CR3: 00000001f5c2a000 CR4: 00000000003406a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600