==================================================================
BUG: KASAN: use-after-free in user_mode arch/x86/include/asm/ptrace.h:131 [inline]
BUG: KASAN: use-after-free in trace_page_fault_entries arch/x86/mm/fault.c:1516 [inline]
BUG: KASAN: use-after-free in do_page_fault+0x6d/0x320 arch/x86/mm/fault.c:1528
Read of size 8 at addr ffff8881e7c73e80 by task kworker/u4:4/530

CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
usercopy: Kernel memory overwrite attempt detected to SLUB object 'kmalloc-32' (offset 32, size 8)!
usercopy: Kernel memory overwrite attempt detected to SLUB object 'kmalloc-32' (offset 32, size 2)!
usercopy: Kernel memory overwrite attempt detected to SLUB object 'kmalloc-32' (offset 32, size 2)!
usercopy: Kernel memory overwrite attempt detected to SLUB object 'kmalloc-32' (offset 32, size 2)!
------------[ cut here ]------------
Bad or missing usercopy whitelist? Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 96, size 2)!
WARNING: CPU: 0 PID: 530 at mm/usercopy.c:80 usercopy_warn+0xb7/0xc0 mm/usercopy.c:75
Modules linked in:
CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
usercopy: Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 256, size 23)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:99!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:usercopy_abort+0x85/0x90 mm/usercopy.c:87
usercopy: Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 224, size 64)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:99!
invalid opcode: 0000 [#2] PREEMPT SMP KASAN
CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
usercopy: Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 256, size 8)!
usercopy: Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 256, size 2)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:99!
invalid opcode: 0000 [#3] PREEMPT SMP KASAN
CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
usercopy: Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 256, size 8)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:99!
invalid opcode: 0000 [#4] PREEMPT SMP KASAN
CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
usercopy: Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 256, size 23)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:99!
invalid opcode: 0000 [#5] PREEMPT SMP KASAN
CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:usercopy_abort+0x85/0x90 mm/usercopy.c:87
usercopy: Kernel memory overwrite attempt detected to SLUB object 'skbuff_head_cache' (offset 224, size 64)!
------------[ cut here ]------------
kernel BUG at mm/usercopy.c:99!
invalid opcode: 0000 [#6] PREEMPT SMP KASAN
CPU: 0 PID: 530 Comm: kworker/u4:4 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:usercopy_abort+0x85/0x90 mm/usercopy.c:87
Code: 89 cb 49 c7 c6 40 7a c3 84 4c 0f 44 f6 48 c7 c7 80 7a c3 84 4c 89 de 4c 89 c9 4d 89 d1 50 53 41 56 e8 7f c1 ff ff 48 83 c4 18 <0f> 0b 00 00 90 90 00 00 90 90 00 55 48 89 e5 53 48 89 fb e8 d3 1e
RSP: 0018:ffff8881e7c71130 EFLAGS: 00010096
RAX: 000000000000006c RBX: 00000000000000e0 RCX: 3422254fb2f37800
RDX: 0000000000000000 RSI: 0000000080000060 RDI: 0000000000000000
RBP: ffff8881e7c71140 R08: dffffc0000000000 R09: ffffed103edc5262
R10: ffffed103edc5262 R11: 1ffff1103edc5261 R12: ffff8881f1ccc500
R13: 0000000000000200 R14: ffffffff84c37a40 R15: 00000000000000e0
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffe8ffffc14850 CR3: 00000001f5c2a000 CR4: 00000000003406b0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
Modules linked in:
---[ end trace e757ea944ecd806f ]---
RIP: 0010:usercopy_abort+0x85/0x90 mm/usercopy.c:87
Code: 89 cb 49 c7 c6 40 7a c3 84 4c 0f 44 f6 48 c7 c7 80 7a c3 84 4c 89 de 4c 89 c9 4d 89 d1 50 53 41 56 e8 7f c1 ff ff 48 83 c4 18 <0f> 0b 00 00 90 90 00 00 90 90 00 55 48 89 e5 53 48 89 fb e8 d3 1e
RSP: 0018:ffff8881e7c72870 EFLAGS: 00010092
RAX: 000000000000006c RBX: 0000000000000100 RCX: 3422254fb2f37800
RDX: 0000000000000000 RSI: 0000000080000060 RDI: 0000000000000000
RBP: ffff8881e7c72880 R08: dffffc0000000000 R09: ffffed103edc5262
R10: ffffed103edc5262 R11: 1ffff1103edc5261 R12: ffff8881f1ccc500
R13: 0000000000000200 R14: ffffffff84c37a40 R15: 0000000000000100
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffe8ffffc14850 CR3: 00000001f5c2a000 CR4: 00000000003406b0
DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600