Oops: general protection fault, probably for non-canonical address 0xdffffc0000000143: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000a18-0x0000000000000a1f]
CPU: 0 UID: 0 PID: 20360 Comm: dhcpcd-run-hook Not tainted 6.12.0-rc4-syzkaller-00203-g04c20a9356f2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__lock_acquire+0x69/0x2050 kernel/locking/lockdep.c:5065
Code: b6 04 30 84 c0 0f 85 9b 16 00 00 45 31 f6 83 3d 18 e6 ac 0e 00 0f 84 b6 13 00 00 89 54 24 54 89 5c 24 68 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c9 4f 8e 00 48 be 00 00 00 00 00 fc
RSP: 0000:ffffc90000006c50 EFLAGS: 00010002
RAX: 0000000000000143 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000a18
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: dffffc0000000000 R11: fffffbfff203a00e R12: ffff8880212abc00
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000a18
FS: 00007f1a7a4bc380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1a7a6ec300 CR3: 000000003273e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162
class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]
try_to_wake_up+0xbe/0x14b0 kernel/sched/core.c:4165
rxrpc_wake_up_io_thread net/rxrpc/ar-internal.h:1059 [inline]
rxrpc_error_report+0x1e4/0x2f0 net/rxrpc/io_thread.c:81
sk_error_report+0x43/0x2b0 net/core/sock.c:348
sock_queue_err_skb+0x576/0x730 net/core/skbuff.c:5402
ipv6_icmp_error+0x5e8/0x980 net/ipv6/datagram.c:340
__udp6_lib_err+0x8fb/0x15f0 net/ipv6/udp.c:628
udpv6_err+0xbb/0xd0 net/ipv6/udp.c:686
icmpv6_notify+0x391/0x830 net/ipv6/icmp.c:875
icmpv6_rcv+0x1092/0x1980
ip6_protocol_deliver_rcu+0x105b/0x1580 net/ipv6/ip6_input.c:436
ip6_input_finish+0x187/0x2d0 net/ipv6/ip6_input.c:481
NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314
NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314
__netif_receive_skb_one_core net/core/dev.c:5670 [inline]
__netif_receive_skb+0x1ea/0x650 net/core/dev.c:5783
process_backlog+0x662/0x15b0 net/core/dev.c:6115
__napi_poll+0xcb/0x490 net/core/dev.c:6779
napi_poll net/core/dev.c:6848 [inline]
net_rx_action+0x89b/0x1240 net/core/dev.c:6970
handle_softirqs+0x2c5/0x980 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5829
Code: 2b 00 74 08 4c 89 f7 e8 aa 54 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
RSP: 0000:ffffc9000da17ba0 EFLAGS: 00000206
RAX: 0000000000000001 RBX: 1ffff92001b42f80 RCX: 69c7889a22b70d00
RDX: dffffc0000000000 RSI: ffffffff8c0adcc0 RDI: ffffffff8c6102e0
RBP: ffffc9000da17ce8 R08: ffffffff942ca8a7 R09: 1ffffffff2859514
R10: dffffc0000000000 R11: fffffbfff2859515 R12: 1ffff92001b42f7c
R13: dffffc0000000000 R14: ffffc9000da17c00 R15: 0000000000000246
down_read_trylock+0x24f/0x3c0 kernel/locking/rwsem.c:1566
vma_start_read include/linux/mm.h:704 [inline]
lock_vma_under_rcu+0x34b/0x790 mm/memory.c:6232
do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
handle_page_fault arch/x86/mm/fault.c:1481 [inline]
exc_page_fault+0x17b/0x8c0 arch/x86/mm/fault.c:1539
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f1a7a5c247d
Code: 14 48 8d 3d 14 da 0e 00 e9 d0 fa ff ff 48 89 52 28 48 89 52 20 89 c8 41 b9 01 00 00 00 48 ff 44 24 18 c1 f8 05 41 d3 e1 48 98 <44> 09 8c 85 60 08 00 00 4c 89 42 18 48 89 72 10 48 89 56 18 49 89
RSP: 002b:00007ffe37eeff30 EFLAGS: 00010202
RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000002
RDX: 00005581af410d20 RSI: 00007f1a7a6ebb10 RDI: 00005581af40f010
RBP: 00007f1a7a6ebaa0 R08: 00007f1a7a6ebb10 R09: 0000000000000004
R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000003
R13: 0000000000000001 R14: 00007f1a7a6ebb00 R15: 0000000000000030
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__lock_acquire+0x69/0x2050 kernel/locking/lockdep.c:5065
Code: b6 04 30 84 c0 0f 85 9b 16 00 00 45 31 f6 83 3d 18 e6 ac 0e 00 0f 84 b6 13 00 00 89 54 24 54 89 5c 24 68 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c9 4f 8e 00 48 be 00 00 00 00 00 fc
RSP: 0000:ffffc90000006c50 EFLAGS: 00010002
RAX: 0000000000000143 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000a18
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: dffffc0000000000 R11: fffffbfff203a00e R12: ffff8880212abc00
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000a18
FS: 00007f1a7a4bc380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1a7a6ec300 CR3: 000000003273e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: b6 04 mov $0x4,%dh
2: 30 84 c0 0f 85 9b 16 xor %al,0x169b850f(%rax,%rax,8)
9: 00 00 add %al,(%rax)
b: 45 31 f6 xor %r14d,%r14d
e: 83 3d 18 e6 ac 0e 00 cmpl $0x0,0xeace618(%rip) # 0xeace62d
15: 0f 84 b6 13 00 00 je 0x13d1
1b: 89 54 24 54 mov %edx,0x54(%rsp)
1f: 89 5c 24 68 mov %ebx,0x68(%rsp)
23: 4c 89 f8 mov %r15,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 80 3c 30 00 cmpb $0x0,(%rax,%rsi,1) <-- trapping instruction
2e: 74 12 je 0x42
30: 4c 89 ff mov %r15,%rdi
33: e8 c9 4f 8e 00 call 0x8e5001
38: 48 rex.W
39: be 00 00 00 00 mov $0x0,%esi
3e: 00 fc add %bh,%ah