kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 17 Comm: ksoftirqd/1 Not tainted 5.4.290-syzkaller-00017-g6b07fcd94a6a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:set_track mm/kasan/common.c:78 [inline] RIP: 0010:__kasan_kmalloc+0x1d9/0x210 mm/kasan/common.c:529 Code: fa 0f 92 c2 41 84 c3 75 10 20 d1 75 0c 48 ff c3 48 39 de 75 d1 89 f3 eb 02 ff c3 48 8d 7c 24 20 89 de 44 89 f2 e8 a7 87 b4 00 <43> 89 44 2c 04 65 48 8b 04 25 28 00 00 00 48 3b 84 24 20 02 00 00 RSP: 0018:ffff8881f5e27b58 EFLAGS: 00010292 RAX: 00000000f680016e RBX: 0000000000000038 RCX: 671010f0f5c94700 RDX: 00000000000001c0 RSI: 0000000000000246 RDI: 0000000000000000 RBP: ffff8881f5e27d08 R08: dffffc0000000000 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: 00000000ffff9cd0 R13: dffffc0000000000 R14: ffffffff81941321 R15: ffff8881de2431c0 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000001e7f9f000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1830 __do_softirq+0x23b/0x6b7 kernel/softirq.c:292 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:603 smpboot_thread_fn+0x545/0x930 kernel/smpboot.c:165 kthread+0x2da/0x360 kernel/kthread.c:288 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:354 Modules linked in: ---[ end trace b3cef511e563cda5 ]--- RIP: 0010:set_track mm/kasan/common.c:78 [inline] RIP: 0010:__kasan_kmalloc+0x1d9/0x210 mm/kasan/common.c:529 Code: fa 0f 92 c2 41 84 c3 75 10 20 d1 75 0c 48 ff c3 48 39 de 75 d1 89 f3 eb 02 ff c3 48 8d 7c 24 20 89 de 44 89 f2 e8 a7 87 b4 00 <43> 89 44 2c 04 65 48 8b 04 25 28 00 00 00 48 3b 84 24 20 02 00 00 RSP: 0018:ffff8881f5e27b58 EFLAGS: 00010292 RAX: 00000000f680016e RBX: 0000000000000038 RCX: 671010f0f5c94700 RDX: 00000000000001c0 RSI: 0000000000000246 RDI: 0000000000000000 RBP: ffff8881f5e27d08 R08: dffffc0000000000 R09: 0000000000000003 R10: ffffffffffffffff R11: dffffc0000000001 R12: 00000000ffff9cd0 R13: dffffc0000000000 R14: ffffffff81941321 R15: ffff8881de2431c0 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000001e7f9f000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 ---------------- Code disassembly (best guess): 0: fa cli 1: 0f 92 c2 setb %dl 4: 41 84 c3 test %al,%r11b 7: 75 10 jne 0x19 9: 20 d1 and %dl,%cl b: 75 0c jne 0x19 d: 48 ff c3 inc %rbx 10: 48 39 de cmp %rbx,%rsi 13: 75 d1 jne 0xffffffe6 15: 89 f3 mov %esi,%ebx 17: eb 02 jmp 0x1b 19: ff c3 inc %ebx 1b: 48 8d 7c 24 20 lea 0x20(%rsp),%rdi 20: 89 de mov %ebx,%esi 22: 44 89 f2 mov %r14d,%edx 25: e8 a7 87 b4 00 call 0xb487d1 * 2a: 43 89 44 2c 04 mov %eax,0x4(%r12,%r13,1) <-- trapping instruction 2f: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax 36: 00 00 38: 48 3b 84 24 20 02 00 cmp 0x220(%rsp),%rax 3f: 00