general protection fault, probably for non-canonical address 0xdffffc0020000068: 0000 [#1] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x0000000100000340-0x0000000100000347] CPU: 1 PID: 2902 Comm: kworker/1:4 Not tainted 5.6.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ipv6_addrconf addrconf_dad_work RIP: 0010:ipvlan_hard_header+0x120/0x160 drivers/net/ipvlan/ipvlan_main.c:361 Code: 5d 41 5e 41 5f 5d c3 45 31 e4 eb e4 e8 b9 86 bc fc 49 8d bc 24 48 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 49 8b 9c 24 48 03 00 00 e9 29 ff ff ff e8 38 2c RSP: 0018:ffffc90008cc7620 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88808e32d978 RDX: 0000000020000068 RSI: ffffffff84b90107 RDI: 0000000100000347 RBP: ffffc90008cc7658 R08: 0000000000000000 R09: 0000000000000060 R10: fffffbfff16a356f R11: ffffffff8b51ab7f R12: 00000000ffffffff R13: ffff8880a35b4400 R14: ffff88808e32d978 R15: 0000000000000060 FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200000d0 CR3: 000000008d802000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dev_hard_header include/linux/netdevice.h:2987 [inline] neigh_resolve_output net/core/neighbour.c:1482 [inline] neigh_resolve_output+0x552/0x990 net/core/neighbour.c:1467 neigh_output include/net/neighbour.h:510 [inline] ip6_finish_output2+0x109a/0x25c0 net/ipv6/ip6_output.c:116 __ip6_finish_output+0x444/0xaa0 net/ipv6/ip6_output.c:142 ip6_finish_output+0x38/0x1f0 net/ipv6/ip6_output.c:152 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x25e/0x880 net/ipv6/ip6_output.c:175 dst_output include/net/dst.h:436 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] mld_sendpack+0x9c2/0xed0 net/ipv6/mcast.c:1682 mld_send_initial_cr.part.0+0x114/0x160 net/ipv6/mcast.c:2099 mld_send_initial_cr net/ipv6/mcast.c:2112 [inline] ipv6_mc_dad_complete+0x1ab/0x1f0 net/ipv6/mcast.c:2106 addrconf_dad_completed+0x8ce/0xbb0 net/ipv6/addrconf.c:4176 addrconf_dad_work+0x7cc/0x11d0 net/ipv6/addrconf.c:4107 process_one_work+0xa05/0x17a0 kernel/workqueue.c:2264 worker_thread+0x98/0xe40 kernel/workqueue.c:2410 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace a78e57c8d100279f ]--- RIP: 0010:ipvlan_hard_header+0x120/0x160 drivers/net/ipvlan/ipvlan_main.c:361 Code: 5d 41 5e 41 5f 5d c3 45 31 e4 eb e4 e8 b9 86 bc fc 49 8d bc 24 48 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 49 8b 9c 24 48 03 00 00 e9 29 ff ff ff e8 38 2c RSP: 0018:ffffc90008cc7620 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88808e32d978 RDX: 0000000020000068 RSI: ffffffff84b90107 RDI: 0000000100000347 RBP: ffffc90008cc7658 R08: 0000000000000000 R09: 0000000000000060 R10: fffffbfff16a356f R11: ffffffff8b51ab7f R12: 00000000ffffffff R13: ffff8880a35b4400 R14: ffff88808e32d978 R15: 0000000000000060 FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200000d0 CR3: 000000008d802000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400