================================================================== BUG: KASAN: slab-out-of-bounds in user_mode arch/x86/include/asm/ptrace.h:131 [inline] BUG: KASAN: slab-out-of-bounds in trace_page_fault_entries arch/x86/mm/fault.c:1516 [inline] BUG: KASAN: slab-out-of-bounds in do_page_fault+0x66/0x330 arch/x86/mm/fault.c:1528 Read of size 8 at addr ffff8881f5d87ee0 by task kworker/u4:0/7 CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.289-syzkaller-00030-gcb850525fc3e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ------------[ cut here ]------------ Bad or missing usercopy whitelist? Kernel memory overwrite attempt detected to SLUB object 'signal_cache' (offset 288, size 8)! WARNING: CPU: 1 PID: 7 at mm/usercopy.c:80 usercopy_warn+0xaf/0xc0 mm/usercopy.c:75 Modules linked in: CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.289-syzkaller-00030-gcb850525fc3e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:usercopy_warn+0xaf/0xc0 mm/usercopy.c:75 Code: c6 05 30 f5 b0 04 01 48 c7 c5 80 92 e3 84 48 0f 44 e8 48 c7 c7 00 91 e3 84 4d 89 e1 41 57 41 56 55 e8 c5 74 a1 ff 48 83 c4 18 <0f> 0b e9 73 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 41 56 53 4d 89 RSP: 0018:ffff8881f5d87940 EFLAGS: 00010092 RAX: 37d178857fd60c00 RBX: ffffffff855a6f73 RCX: ffff8881f5d60000 RDX: 0000000080000199 RSI: 0000000080000199 RDI: 0000000000000000 RBP: ffffffff84e39280 R08: ffffffff814d6d92 R09: ffffed103ede5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff84a73dc0 R13: dffffc0000000000 R14: 0000000000000120 R15: 0000000000000008 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffb00288 CR3: 00000001f5c2a000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ---[ end trace 28355765957b1aa8 ]--- Workqueue: events_unbound toggle_allocation_gate Call Trace: Allocated by task 2144734208: ================================================================================ UBSAN: array-index-out-of-bounds in lib/stackdepot.c:205:15 index 1144965 is out of range for type 'void *[8192]' CPU: 1 PID: 7 Comm: kworker/u4:0 Tainted: G W 5.4.289-syzkaller-00030-gcb850525fc3e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound toggle_allocation_gate Call Trace: ================================================================================ invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 7 Comm: kworker/u4:0 Tainted: G W 5.4.289-syzkaller-00030-gcb850525fc3e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 80 ca 07 86 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881f5d87cc0 EFLAGS: 00010012 RAX: ffffffff8248d4bf RBX: 0000000037d17885 RCX: ffff8881f5d60000 RDX: 0000000080000199 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881f5d87d78 R08: ffffffff8248d4b6 R09: ffffed103ede5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5cf1180 R13: ffff8881f5d87d40 R14: ffff8881f5d87d00 R15: 0000000000117885 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffb00288 CR3: 00000001f5c2a000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 28355765957b1aa9 ]--- RIP: 0010:stack_depot_fetch+0x61/0x70 lib/stackdepot.c:205 Code: 48 8d 4c 18 18 49 89 0e 8b 44 18 0c 5b 41 5e 41 5f c3 48 c7 c7 80 ca 07 86 4c 89 fe e8 a8 3a 00 00 41 81 ff ff 1f 00 00 76 c5 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 41 56 41 55 RSP: 0018:ffff8881f5d87cc0 EFLAGS: 00010012 RAX: ffffffff8248d4bf RBX: 0000000037d17885 RCX: ffff8881f5d60000 RDX: 0000000080000199 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8881f5d87d78 R08: ffffffff8248d4b6 R09: ffffed103ede5262 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f5cf1180 R13: ffff8881f5d87d40 R14: ffff8881f5d87d00 R15: 0000000000117885 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffe8ffffb00288 CR3: 00000001f5c2a000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400