kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 1291 Comm: syz-executor.3 Not tainted 5.4.265-syzkaller-00002-g50cb39f34248 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 RIP: 0010:set_track mm/kasan/common.c:78 [inline] RIP: 0010:__kasan_kmalloc+0x1d9/0x210 mm/kasan/common.c:529 Code: fa 0f 92 c2 41 84 c3 75 10 20 d1 75 0c 48 ff c3 48 39 de 75 d1 89 f3 eb 02 ff c3 48 8d 7c 24 20 89 de 44 89 f2 e8 a7 20 b4 00 <43> 89 44 2c 04 65 48 8b 04 25 28 00 00 00 48 3b 84 24 20 02 00 00 RSP: 0018:ffff8881f6e09d18 EFLAGS: 00010292 RAX: 0000000097a00170 RBX: 000000000000001c RCX: 7be72edece61c800 RDX: 00000000000000e0 RSI: 0000000000000246 RDI: 0000000000000000 RBP: ffff8881f6e09ec8 R08: dffffc0000000000 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: 00000000ffffa0b8 R13: dffffc0000000000 R14: ffffffff8193f761 R15: ffff8881e707f1c0 FS: 00007f77550a06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffdf6d3d010 CR3: 00000001ddb40000 CR4: 00000000003406b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1800 __do_softirq+0x23b/0x6b7 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x195/0x1c0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:538 [inline] smp_apic_timer_interrupt+0x11a/0x460 arch/x86/kernel/apic/apic.c:1149 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:834 Modules linked in: ---[ end trace f2187e34fc473329 ]--- RIP: 0010:set_track mm/kasan/common.c:78 [inline] RIP: 0010:__kasan_kmalloc+0x1d9/0x210 mm/kasan/common.c:529 Code: fa 0f 92 c2 41 84 c3 75 10 20 d1 75 0c 48 ff c3 48 39 de 75 d1 89 f3 eb 02 ff c3 48 8d 7c 24 20 89 de 44 89 f2 e8 a7 20 b4 00 <43> 89 44 2c 04 65 48 8b 04 25 28 00 00 00 48 3b 84 24 20 02 00 00 RSP: 0018:ffff8881f6e09d18 EFLAGS: 00010292 RAX: 0000000097a00170 RBX: 000000000000001c RCX: 7be72edece61c800 RDX: 00000000000000e0 RSI: 0000000000000246 RDI: 0000000000000000 RBP: ffff8881f6e09ec8 R08: dffffc0000000000 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: 00000000ffffa0b8 R13: dffffc0000000000 R14: ffffffff8193f761 R15: ffff8881e707f1c0 FS: 00007f77550a06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffdf6d3d010 CR3: 00000001ddb40000 CR4: 00000000003406b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 ---------------- Code disassembly (best guess): 0: fa cli 1: 0f 92 c2 setb %dl 4: 41 84 c3 test %al,%r11b 7: 75 10 jne 0x19 9: 20 d1 and %dl,%cl b: 75 0c jne 0x19 d: 48 ff c3 inc %rbx 10: 48 39 de cmp %rbx,%rsi 13: 75 d1 jne 0xffffffe6 15: 89 f3 mov %esi,%ebx 17: eb 02 jmp 0x1b 19: ff c3 inc %ebx 1b: 48 8d 7c 24 20 lea 0x20(%rsp),%rdi 20: 89 de mov %ebx,%esi 22: 44 89 f2 mov %r14d,%edx 25: e8 a7 20 b4 00 call 0xb420d1 * 2a: 43 89 44 2c 04 mov %eax,0x4(%r12,%r13,1) <-- trapping instruction 2f: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax 36: 00 00 38: 48 3b 84 24 20 02 00 cmp 0x220(%rsp),%rax 3f: 00