general protection fault, probably for non-canonical address 0x173901000000000: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 5032 Comm: syz-executor.1 Not tainted 6.4.0-rc5-syzkaller-00002-gf8dba31b0a82 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 RIP: 0010:rcu_do_batch kernel/rcu/tree.c:2115 [inline] RIP: 0010:rcu_core+0x804/0x1ad0 kernel/rcu/tree.c:2377 Code: de f6 ff 49 8d 7d 08 41 58 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 30 0d 00 00 49 8b 45 08 4c 89 ef 49 c7 45 08 00 00 00 00 d0 48 c7 c6 e5 11 6f 81 48 c7 c7 a0 8f 79 8c e8 f7 d5 f6 ff 65 RSP: 0018:ffffc90000007e60 EFLAGS: 00010246 RAX: 0173901000000000 RBX: ffff8880b983d4c0 RCX: a8465ad1c6353a91 RDX: 1ffff110051c5158 RSI: 0000000000000100 RDI: ffff888089243150 RBP: 0000000000000002 R08: ffffffff816f1181 R09: ffffffff91529d1f R10: fffffbfff22a53a3 R11: 0000000000094001 R12: dffffc0000000000 R13: ffff888089243150 R14: ffffc90000007ed8 R15: 0000000000000001 FS: 0000555557237400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2da26000 CR3: 0000000036a8e000 CR4: 0000000000350ef0 Call Trace: __do_softirq+0x1d4/0x905 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x114/0x190 kernel/softirq.c:650 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x97/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70 kernel/kcov.c:207 Code: a8 01 00 00 e8 b0 ff ff ff 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 65 8b 05 7d 75 7f 7e 89 c1 48 8b 34 24 <81> e1 00 01 00 00 65 48 8b 14 25 c0 bb 03 00 a9 00 01 ff 00 74 0e RSP: 0018:ffffc9000453fa50 EFLAGS: 00000297 RAX: 0000000080000000 RBX: ffff888033620200 RCX: 0000000080000000 RDX: ffff888028e28000 RSI: ffffffff89ffde99 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000002 R10: 0000000000000001 R11: 0000000000000000 R12: 000000001fffffff R13: 0000000000000001 R14: 0000000000000008 R15: ffff888078b62400 ma_slots lib/maple_tree.c:809 [inline] mas_get_slot lib/maple_tree.c:6646 [inline] mas_validate_gaps lib/maple_tree.c:6944 [inline] mt_validate+0x26c9/0x41f0 lib/maple_tree.c:7212 validate_mm_mt+0xa1/0x3f0 mm/mmap.c:314 validate_mm+0xa0/0x290 mm/mmap.c:351 do_mmap+0x68/0xf60 mm/mmap.c:1231 vm_mmap_pgoff+0x1a2/0x3b0 mm/util.c:543 ksys_mmap_pgoff+0x7d/0x5a0 mm/mmap.c:1440 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fb8f608c1b2 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 RSP: 002b:00007ffc470fb128 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000022 RCX: 00007fb8f608c1b2 RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000000022 R11: 0000000000000246 R12: 00007ffc470fb140 R13: 0000000000001000 R14: 0000000000000020 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:rcu_do_batch kernel/rcu/tree.c:2115 [inline] RIP: 0010:rcu_core+0x804/0x1ad0 kernel/rcu/tree.c:2377 Code: de f6 ff 49 8d 7d 08 41 58 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 30 0d 00 00 49 8b 45 08 4c 89 ef 49 c7 45 08 00 00 00 00 d0 48 c7 c6 e5 11 6f 81 48 c7 c7 a0 8f 79 8c e8 f7 d5 f6 ff 65 RSP: 0018:ffffc90000007e60 EFLAGS: 00010246 RAX: 0173901000000000 RBX: ffff8880b983d4c0 RCX: a8465ad1c6353a91 RDX: 1ffff110051c5158 RSI: 0000000000000100 RDI: ffff888089243150 RBP: 0000000000000002 R08: ffffffff816f1181 R09: ffffffff91529d1f R10: fffffbfff22a53a3 R11: 0000000000094001 R12: dffffc0000000000 R13: ffff888089243150 R14: ffffc90000007ed8 R15: 0000000000000001 FS: 0000555557237400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2da26000 CR3: 0000000036a8e000 CR4: 0000000000350ef0 ---------------- Code disassembly (best guess): 0: de f6 fdivp %st,%st(6) 2: ff 49 8d decl -0x73(%rcx) 5: 7d 08 jge 0xf 7: 41 58 pop %r8 9: 48 89 f8 mov %rdi,%rax c: 48 c1 e8 03 shr $0x3,%rax 10: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) 15: 0f 85 30 0d 00 00 jne 0xd4b 1b: 49 8b 45 08 mov 0x8(%r13),%rax 1f: 4c 89 ef mov %r13,%rdi 22: 49 c7 45 08 00 00 00 movq $0x0,0x8(%r13) 29: 00 * 2a: ff d0 callq *%rax <-- trapping instruction 2c: 48 c7 c6 e5 11 6f 81 mov $0xffffffff816f11e5,%rsi 33: 48 c7 c7 a0 8f 79 8c mov $0xffffffff8c798fa0,%rdi 3a: e8 f7 d5 f6 ff callq 0xfff6d636 3f: 65 gs