Unable to handle kernel paging request at virtual address fffffffffffffe40
Mem abort info:
ESR = 0x0000000096000004
EC = 0x25: DABT (current EL), IL = 32 bits
SET = 0, FnV = 0
EA = 0, S1PTW = 0
FSC = 0x04: level 0 translation fault
Data abort info:
ISV = 0, ISS = 0x00000004
CM = 0, WnR = 0
swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001c5285000
[fffffffffffffe40] pgd=0000000000000000, p4d=0000000000000000
Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 7481 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller-17298-gc62c88e05937 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : netlink_compare net/netlink/af_netlink.c:500 [inline]
pc : __rhashtable_lookup include/linux/rhashtable.h:609 [inline]
pc : rhashtable_lookup include/linux/rhashtable.h:646 [inline]
pc : rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline]
pc : __netlink_lookup+0x1e8/0x4ac net/netlink/af_netlink.c:518
lr : __rhashtable_lookup include/linux/rhashtable.h:607 [inline]
lr : rhashtable_lookup include/linux/rhashtable.h:646 [inline]
lr : rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline]
lr : __netlink_lookup+0x22c/0x4ac net/netlink/af_netlink.c:518
sp : ffff800015163810
x29: ffff800015163820 x28: 0000000000000000 x27: fffffffffffff930
x26: 0000000000000000 x25: ffff00011da29698 x24: ffff00011da29699
x23: fffffffffffff930 x22: ffff00011da29600 x21: ffff0000c01f1a80
x20: 0000000000000193 x19: ffff0000c9f48000 x18: 0000000000000000
x17: 0000000000000000 x16: ffff80000dd97118 x15: ffff00011b333400
x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000
x11: 0000000000000ba1 x10: ffff800013065000 x9 : ffff80000b49eca8
x8 : 0000000000000ba2 x7 : ffff80000b49a7c0 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000008 x1 : 0000000000000193 x0 : 0000000000000000
Call trace:
rht_obj include/linux/rhashtable.h:116 [inline]
__rhashtable_lookup include/linux/rhashtable.h:609 [inline]
rhashtable_lookup include/linux/rhashtable.h:646 [inline]
rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline]
__netlink_lookup+0x1e8/0x4ac net/netlink/af_netlink.c:518
netlink_lookup+0xc0/0x1f0 net/netlink/af_netlink.c:538
netlink_getsockbyportid+0x30/0x12c net/netlink/af_netlink.c:1165
netlink_unicast+0xa8/0x248 net/netlink/af_netlink.c:1350
nlmsg_unicast include/net/netlink.h:1099 [inline]
genlmsg_unicast include/net/genetlink.h:433 [inline]
genlmsg_reply include/net/genetlink.h:443 [inline]
ctrl_getfamily+0x2cc/0x318 net/netlink/genetlink.c:1328
genl_family_rcv_msg_doit net/netlink/genetlink.c:968 [inline]
genl_family_rcv_msg net/netlink/genetlink.c:1048 [inline]
genl_rcv_msg+0x450/0x4ec net/netlink/genetlink.c:1065
netlink_rcv_skb+0xfc/0x1e8 net/netlink/af_netlink.c:2564
genl_rcv+0x38/0x50 net/netlink/genetlink.c:1076
netlink_unicast_kernel+0xfc/0x1dc net/netlink/af_netlink.c:1330
netlink_unicast+0x164/0x248 net/netlink/af_netlink.c:1356
netlink_sendmsg+0x484/0x584 net/netlink/af_netlink.c:1932
sock_sendmsg_nosec net/socket.c:714 [inline]
sock_sendmsg net/socket.c:734 [inline]
__sys_sendto+0x1e4/0x280 net/socket.c:2117
__do_sys_sendto net/socket.c:2129 [inline]
__se_sys_sendto net/socket.c:2125 [inline]
__arm64_sys_sendto+0x30/0x44 net/socket.c:2125
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
do_el0_svc+0x48/0x104 arch/arm64/kernel/syscall.c:193
el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584
Code: 370002dc 79402ea8 cb0803f7 8b17039b (b945137a)
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
0: 370002dc tbnz w28, #0, 0x58
4: 79402ea8 ldrh w8, [x21, #22]
8: cb0803f7 neg x23, x8
c: 8b17039b add x27, x28, x23
* 10: b945137a ldr w26, [x27, #1296] <-- trapping instruction