Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 36 Comm: kauditd Not tainted syzkaller #0 c9311b6cb369b61e24bd82353f907fc301b53255
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:printk_parse_prefix kernel/printk/printk.c:2202 [inline]
RIP: 0010:printk_sprint+0x102/0x3e0 kernel/printk/printk.c:2243
Code: 49 be 00 00 00 00 00 fc ff df 31 ff 44 89 fe e8 b4 d9 1e 00 45 85 ff 74 0a e8 6a d5 1e 00 e9 9f 01 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 cf 01 00 00 44 0f b6 3b bf 01 00 00 00
RSP: 0018:ffffc9000025f880 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88810367cc00 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000025f8b0 R08: ffffffff862f6040 R09: ffffc9000025fc40
R10: dffffc0000000000 R11: fffff5200004bef5 R12: 0000000000000000
R13: ffffffff862f6040 R14: dffffc0000000000 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fca2475de10 CR3: 0000000120dec000 CR4: 00000000003526b0
Call Trace:
<TASK>
vprintk_store+0x724/0x10c0 kernel/printk/printk.c:2347
vprintk_emit+0x20f/0x650 kernel/printk/printk.c:2438
vprintk_default+0x2a/0x40 kernel/printk/printk.c:2477
vprintk+0x93/0xa0 kernel/printk/printk_safe.c:75
_printk+0xde/0x140 kernel/printk/printk.c:2487
kauditd_printk_skb kernel/audit.c:546 [inline]
kauditd_hold_skb+0x1cc/0x230 kernel/audit.c:581
kauditd_send_queue+0x2c8/0x320 kernel/audit.c:766
kauditd_thread+0x4ea/0x750 kernel/audit.c:890
kthread+0x2c7/0x360 kernel/kthread.c:389
ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:printk_parse_prefix kernel/printk/printk.c:2202 [inline]
RIP: 0010:printk_sprint+0x102/0x3e0 kernel/printk/printk.c:2243
Code: 49 be 00 00 00 00 00 fc ff df 31 ff 44 89 fe e8 b4 d9 1e 00 45 85 ff 74 0a e8 6a d5 1e 00 e9 9f 01 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 cf 01 00 00 44 0f b6 3b bf 01 00 00 00
RSP: 0018:ffffc9000025f880 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88810367cc00 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000025f8b0 R08: ffffffff862f6040 R09: ffffc9000025fc40
R10: dffffc0000000000 R11: fffff5200004bef5 R12: 0000000000000000
R13: ffffffff862f6040 R14: dffffc0000000000 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fca2475de10 CR3: 0000000120dec000 CR4: 00000000003526b0
----------------
Code disassembly (best guess):
0: 49 be 00 00 00 00 00 movabs $0xdffffc0000000000,%r14
7: fc ff df
a: 31 ff xor %edi,%edi
c: 44 89 fe mov %r15d,%esi
f: e8 b4 d9 1e 00 call 0x1ed9c8
14: 45 85 ff test %r15d,%r15d
17: 74 0a je 0x23
19: e8 6a d5 1e 00 call 0x1ed588
1e: e9 9f 01 00 00 jmp 0x1c2
23: 48 89 d8 mov %rbx,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 0f b6 04 30 movzbl (%rax,%r14,1),%eax <-- trapping instruction
2f: 84 c0 test %al,%al
31: 0f 85 cf 01 00 00 jne 0x206
37: 44 0f b6 3b movzbl (%rbx),%r15d
3b: bf 01 00 00 00 mov $0x1,%edi