kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 17784 Comm: syz-executor.5 Not tainted 5.2.0+ #40 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:send_hsr_supervision_frame+0x38/0xf20 net/hsr/hsr_device.c:255 Code: 89 fd 41 54 53 48 83 ec 50 89 75 bc e8 11 07 54 fa 49 8d 45 10 48 89 c2 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 dc 0c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b RSP: 0018:ffff8880ae909c58 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff871d8677 RDX: 0000000000000002 RSI: ffffffff871d732f RDI: 0000000000000000 RBP: ffff8880ae909cd0 R08: ffff88809969a200 R09: ffffed1015d26c84 R10: ffffed1015d26c83 R11: ffff8880ae93641b R12: ffff88806b4e3780 R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007fa8970fd700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000738000 CR3: 0000000008c6d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hsr_announce+0x12f/0x3b0 net/hsr/hsr_device.c:339 call_timer_fn+0x193/0x720 kernel/time/timer.c:1322 expire_timers kernel/time/timer.c:1366 [inline] __run_timers kernel/time/timer.c:1685 [inline] __run_timers kernel/time/timer.c:1653 [inline] run_timer_softirq+0x66f/0x1740 kernel/time/timer.c:1698 __do_softirq+0x25e/0x913 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:537 [inline] smp_apic_timer_interrupt+0x171/0x5a0 arch/x86/kernel/apic/apic.c:1095 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:828 RIP: 0010:page_remove_file_rmap mm/rmap.c:1253 [inline] RIP: 0010:page_remove_rmap+0x57b/0x1090 mm/rmap.c:1303 Code: db 74 6a e8 87 f7 d0 ff 49 8d 7c 24 54 be 04 00 00 00 e8 38 76 0a 00 f0 41 ff 4c 24 54 e8 6d f7 d0 ff 4c 89 e7 e8 a5 14 10 00 61 fb ff ff e8 5b f7 d0 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffff88806671f6d8 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff110132d3550 RDX: dffffc0000000000 RSI: 1ffff110132d3557 RDI: 0000000000000286 RBP: ffff88806671f710 R08: 0000000000000002 R09: ffff88809969aa88 R10: ffffed1015d26c83 R11: ffff8880ae93641b R12: ffffea000196f3c0 R13: ffffea000196f3c8 R14: 0000000000000000 R15: dead000000000100 zap_pte_range mm/memory.c:1093 [inline] zap_pmd_range mm/memory.c:1195 [inline] zap_pud_range mm/memory.c:1224 [inline] zap_p4d_range mm/memory.c:1245 [inline] unmap_page_range+0xd3b/0x22f0 mm/memory.c:1266 unmap_single_vma+0x19d/0x300 mm/memory.c:1311 unmap_vmas+0x135/0x280 mm/memory.c:1343 exit_mmap+0x2ad/0x510 mm/mmap.c:3145 __mmput kernel/fork.c:1065 [inline] mmput+0x15f/0x4c0 kernel/fork.c:1086 exit_mm kernel/exit.c:547 [inline] do_exit+0x816/0x2ef0 kernel/exit.c:864 do_group_exit+0x135/0x370 kernel/exit.c:981 get_signal+0x471/0x24b0 kernel/signal.c:2728 do_signal+0x87/0x1900 arch/x86/kernel/signal.c:815 exit_to_usermode_loop+0x279/0x370 arch/x86/entry/common.c:159 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:274 [inline] do_syscall_64+0x58e/0x680 arch/x86/entry/common.c:299 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459819 Code: Bad RIP value. RSP: 002b:00007fa8970fccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 0000000000459819 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0 RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 R13: 00007ffcc8061bdf R14: 00007fa8970fd9c0 R15: 000000000075bfd4 Modules linked in: ---[ end trace 116fd3dc6143cc79 ]--- RIP: 0010:send_hsr_supervision_frame+0x38/0xf20 net/hsr/hsr_device.c:255 Code: 89 fd 41 54 53 48 83 ec 50 89 75 bc e8 11 07 54 fa 49 8d 45 10 48 89 c2 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 dc 0c 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b RSP: 0018:ffff8880ae909c58 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff871d8677 RDX: 0000000000000002 RSI: ffffffff871d732f RDI: 0000000000000000 RBP: ffff8880ae909cd0 R08: ffff88809969a200 R09: ffffed1015d26c84 R10: ffffed1015d26c83 R11: ffff8880ae93641b R12: ffff88806b4e3780 R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007fa8970fd700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004597ef CR3: 0000000008c6d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400