general protection fault, probably for non-canonical address 0xe508240013000051: 0000 [#1] PREEMPT SMP KASAN KASAN: maybe wild-memory-access in range [0x2841400098000288-0x284140009800028f] CPU: 1 PID: 11265 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:htab_elem_free kernel/bpf/hashtab.c:789 [inline] RIP: 0010:htab_elem_free_rcu+0x4a/0x110 kernel/bpf/hashtab.c:799 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bc 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b f8 48 8d 7d 18 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 82 00 00 00 44 8b 65 18 bf 05 RSP: 0018:ffffc90000da8e60 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: ffff888083c00010 RCX: 0000000000000001 RDX: 0508280013000051 RSI: ffffffff8184093e RDI: 284140009800028e RBP: 2841400098000276 R08: 0000000000000000 R09: ffffffff8ebcc7bf R10: fffffbfff1d798f7 R11: 0000000000000001 R12: ffffc90000da8ee8 R13: ffff888083c00000 R14: ffffffff815da452 R15: 0000000000000000 FS: 00007fc6f6b44700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020c00000 CR3: 0000000013428000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_do_batch kernel/rcu/tree.c:2489 [inline] rcu_core+0x5eb/0xf00 kernel/rcu/tree.c:2723 __do_softirq+0x2a0/0x9f6 kernel/softirq.c:298 asm_call_irq_on_stack+0xf/0x20 __run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline] do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77 invoke_softirq kernel/softirq.c:393 [inline] __irq_exit_rcu kernel/softirq.c:423 [inline] irq_exit_rcu+0x132/0x200 kernel/softirq.c:435 sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1096 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:628 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:161 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50 kernel/locking/spinlock.c:191 Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 ba c3 67 f8 48 89 ef e8 42 78 68 f8 f6 c7 02 75 1a 53 9d 01 00 00 00 e8 d1 8a 5c f8 65 8b 05 0a 1a 13 77 85 c0 74 0a 5b RSP: 0018:ffffc900099e7b58 EFLAGS: 00000212 RAX: 0000000000000269 RBX: 0000000000000212 RCX: 1ffffffff19da5c1 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff888022c2d850 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000003 R14: 0000000000000001 R15: ffff888084c00000 htab_unlock_bucket kernel/bpf/hashtab.c:188 [inline] htab_map_update_elem+0x4fc/0x790 kernel/bpf/hashtab.c:1065 bpf_map_update_value.isra.0+0x6df/0x8d0 kernel/bpf/syscall.c:202 generic_map_update_batch+0x3cf/0x560 kernel/bpf/syscall.c:1351 bpf_map_do_batch+0x3d5/0x510 kernel/bpf/syscall.c:4003 __do_sys_bpf+0x1a6b/0x5130 kernel/bpf/syscall.c:4459 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45e159 Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fc6f6b43c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 RDX: 0000000000000038 RSI: 0000000020001ac0 RDI: 000000000000001a RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c R13: 00007ffc2806613f R14: 00007fc6f6b449c0 R15: 000000000119bf8c Modules linked in: ---[ end trace 640911395648e7e9 ]--- RIP: 0010:htab_elem_free kernel/bpf/hashtab.c:789 [inline] RIP: 0010:htab_elem_free_rcu+0x4a/0x110 kernel/bpf/hashtab.c:799 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bc 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b f8 48 8d 7d 18 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 82 00 00 00 44 8b 65 18 bf 05 RSP: 0018:ffffc90000da8e60 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: ffff888083c00010 RCX: 0000000000000001 RDX: 0508280013000051 RSI: ffffffff8184093e RDI: 284140009800028e RBP: 2841400098000276 R08: 0000000000000000 R09: ffffffff8ebcc7bf R10: fffffbfff1d798f7 R11: 0000000000000001 R12: ffffc90000da8ee8 R13: ffff888083c00000 R14: ffffffff815da452 R15: 0000000000000000 FS: 00007fc6f6b44700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020c00000 CR3: 0000000013428000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400