general protection fault, probably for non-canonical address 0xdffffc0020000068: 0000 [#1] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x0000000100000340-0x0000000100000347] CPU: 1 PID: 9663 Comm: blkid Not tainted 5.6.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:ipvlan_hard_header+0x114/0x150 drivers/net/ipvlan/ipvlan_main.c:358 Code: 5c 41 5d 41 5e 41 5f c3 45 31 e4 eb e4 e8 b4 80 d6 fc 48 8d bd 48 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2d 4c 8b a5 48 03 00 00 e9 32 ff ff ff e8 55 3e 13 RSP: 0018:ffffc90000da8750 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: ffff8880a861b800 RCX: ffff8880a861b978 RDX: 0000000020000068 RSI: ffffffff849ba46c RDI: 0000000100000347 RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000038 R10: fffffbfff180e589 R11: ffffffff8c072c4f R12: 0000000000000000 R13: ffff888093ab3d00 R14: ffff8880a861b978 R15: 0000000000000038 FS: 00007f9eefc04740(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffca253ff08 CR3: 000000006e313000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dev_hard_header include/linux/netdevice.h:2987 [inline] neigh_resolve_output net/core/neighbour.c:1482 [inline] neigh_resolve_output+0x4fd/0x930 net/core/neighbour.c:1467 neigh_output include/net/neighbour.h:510 [inline] ip6_finish_output2+0x1091/0x25b0 net/ipv6/ip6_output.c:116 __ip6_finish_output+0x442/0xab0 net/ipv6/ip6_output.c:142 ip6_finish_output+0x34/0x1f0 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x239/0x810 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] ndisc_send_skb+0xf40/0x14b0 net/ipv6/ndisc.c:505 ndisc_send_rs+0x12e/0x6f0 net/ipv6/ndisc.c:699 addrconf_rs_timer+0x30f/0x6e0 net/ipv6/addrconf.c:3885 call_timer_fn+0x195/0x760 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0x623/0x1600 kernel/time/timer.c:1786 __do_softirq+0x26c/0x99d kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x192/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:546 [inline] smp_apic_timer_interrupt+0x19e/0x600 arch/x86/kernel/apic/apic.c:1146 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 RIP: 0010:unlink_anon_vmas+0x147/0x830 mm/rmap.c:408 Code: c6 e8 cd 5d ce ff 48 8d 7d 08 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 70 05 00 00 4c 8b 6d 08 4c 89 e8 48 c1 e8 03 80 3c 18 00 <0f> 85 4e 05 00 00 4d 8b 7d 00 4c 3b 3c 24 74 1e e8 94 5d ce ff 48 RSP: 0018:ffffc900171a7bb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 1ffff1101497c5a4 RBX: dffffc0000000000 RCX: ffffffff819ebdfc RDX: 0000000000000000 RSI: ffffffff81a3c753 RDI: ffff8880a4eae8c8 RBP: ffff8880a4eae8c0 R08: ffff8880942ac380 R09: ffffed10142d50da R10: ffffed10142d50d9 R11: ffff8880a16a86cf R12: ffff8880a4eae8d0 R13: ffff8880a4be2d20 R14: ffff88809785a7a0 R15: 0000000000000000 free_pgtables+0x1ab/0x2f0 mm/memory.c:413 exit_mmap+0x2b9/0x510 mm/mmap.c:3127 __mmput kernel/fork.c:1082 [inline] mmput+0x168/0x4b0 kernel/fork.c:1103 exit_mm kernel/exit.c:485 [inline] do_exit+0xa51/0x2dd0 kernel/exit.c:788 do_group_exit+0x125/0x340 kernel/exit.c:899 __do_sys_exit_group kernel/exit.c:910 [inline] __se_sys_exit_group kernel/exit.c:908 [inline] __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:908 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f9eef4e81e8 Code: Bad RIP value. RSP: 002b:00007ffca2542fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9eef4e81e8 RDX: 0000000000000002 RSI: 000000000000003c RDI: 0000000000000002 RBP: 00007f9eef7bd840 R08: 00000000000000e7 R09: ffffffffffffffa8 R10: 00007f9eef7c3740 R11: 0000000000000246 R12: 00007f9eef7bd840 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: ---[ end trace a928ffac228db422 ]--- RIP: 0010:ipvlan_hard_header+0x114/0x150 drivers/net/ipvlan/ipvlan_main.c:358 Code: 5c 41 5d 41 5e 41 5f c3 45 31 e4 eb e4 e8 b4 80 d6 fc 48 8d bd 48 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2d 4c 8b a5 48 03 00 00 e9 32 ff ff ff e8 55 3e 13 RSP: 0018:ffffc90000da8750 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: ffff8880a861b800 RCX: ffff8880a861b978 RDX: 0000000020000068 RSI: ffffffff849ba46c RDI: 0000000100000347 RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000038 R10: fffffbfff180e589 R11: ffffffff8c072c4f R12: 0000000000000000 R13: ffff888093ab3d00 R14: ffff8880a861b978 R15: 0000000000000038 FS: 00007f9eefc04740(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9eef4e81be CR3: 000000006e313000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400