Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f105c24ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f105c24b6d4 RCX: 000000000045aff9 RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 RBP: 000000000075bf20 R08: 0000000000000014 R09: 0000000000000000 R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000005 R13: 0000000000000a1e R14: 00000000004cb482 R15: 0000000000000006 BUG: unable to handle page fault for address: fffffffffffffff4 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 8c70067 P4D 8c70067 PUD 8c72067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 8230 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:jhash2 include/linux/jhash.h:125 [inline] RIP: 0010:rhashtable_jhash2+0x55/0x2c0 lib/rhashtable.c:963 Code: fc ff df 48 89 df 48 c1 ef 03 46 0f b6 04 27 48 89 df 83 e7 07 83 c7 03 44 38 c7 7c 09 45 84 c0 0f 85 1f 02 00 00 48 8d 7b 04 <44> 8b 2b 49 89 f8 49 c1 e8 03 47 0f b6 0c 20 49 89 f8 41 83 e0 07 RSP: 0018:ffffc90002d571e0 EFLAGS: 00010246 RAX: 00000000caa66d40 RBX: fffffffffffffff4 RCX: 00000000caa66d40 RDX: 00000000caa66d40 RSI: 0000000000000007 RDI: fffffffffffffff8 RBP: ffffc90002d57208 R08: 0000000000000000 R09: ffffed1015d6703d R10: ffffed1015d6703c R11: ffff8880aeb381e3 R12: dffffc0000000000 R13: ffff88807dc48c58 R14: ffffc90002d5725c R15: 0000000000000014 FS: 00007f105c24b700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffff4 CR3: 000000008f4ea000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rht_key_get_hash include/linux/rhashtable.h:133 [inline] rht_key_hashfn include/linux/rhashtable.h:159 [inline] rht_head_hashfn include/linux/rhashtable.h:174 [inline] __rhashtable_insert_fast.constprop.18+0xa0c/0xdd0 include/linux/rhashtable.h:723 rhashtable_insert_fast include/linux/rhashtable.h:832 [inline] nsim_fib6_rt_add drivers/net/netdevsim/fib.c:603 [inline] nsim_fib6_rt_insert drivers/net/netdevsim/fib.c:658 [inline] nsim_fib6_event drivers/net/netdevsim/fib.c:719 [inline] nsim_fib_event drivers/net/netdevsim/fib.c:744 [inline] nsim_fib_event_nb+0x1762/0x23c0 drivers/net/netdevsim/fib.c:772 notifier_call_chain+0x8a/0x160 kernel/notifier.c:83 __atomic_notifier_call_chain+0x69/0x110 kernel/notifier.c:173 atomic_notifier_call_chain+0x11/0x20 kernel/notifier.c:183 call_fib_notifiers+0xf1/0x1c0 net/core/fib_notifier.c:35 call_fib6_notifiers+0x37/0x60 net/ipv6/fib6_notifier.c:22 call_fib6_entry_notifiers+0xdd/0x150 net/ipv6/ip6_fib.c:399 fib6_add_rt2node net/ipv6/ip6_fib.c:1216 [inline] fib6_add+0x1481/0x3760 net/ipv6/ip6_fib.c:1471 __ip6_ins_rt+0x4f/0x70 net/ipv6/route.c:1315 ip6_ins_rt+0x77/0xa0 net/ipv6/route.c:1325 __ipv6_dev_ac_inc+0x71b/0xb90 net/ipv6/anycast.c:324 ipv6_sock_ac_join+0x38d/0x610 net/ipv6/anycast.c:139 do_ipv6_setsockopt.isra.8+0x2751/0x3690 net/ipv6/ipv6_sockglue.c:670 ipv6_setsockopt+0x77/0x100 net/ipv6/ipv6_sockglue.c:944 udpv6_setsockopt+0x16/0x30 net/ipv6/udp.c:1564 sock_common_setsockopt+0x73/0xf0 net/core/sock.c:3149 __sys_setsockopt+0x213/0x440 net/socket.c:2130 __do_sys_setsockopt net/socket.c:2146 [inline] __se_sys_setsockopt net/socket.c:2143 [inline] __x64_sys_setsockopt+0xb9/0x150 net/socket.c:2143 do_syscall_64+0xca/0x5f0 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45aff9 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f105c24ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007f105c24b6d4 RCX: 000000000045aff9 RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 RBP: 000000000075bf20 R08: 0000000000000014 R09: 0000000000000000 R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000005 R13: 0000000000000a1e R14: 00000000004cb482 R15: 0000000000000006 Modules linked in: CR2: fffffffffffffff4 ---[ end trace 8a781b343eeb2259 ]--- RIP: 0010:jhash2 include/linux/jhash.h:125 [inline] RIP: 0010:rhashtable_jhash2+0x55/0x2c0 lib/rhashtable.c:963 Code: fc ff df 48 89 df 48 c1 ef 03 46 0f b6 04 27 48 89 df 83 e7 07 83 c7 03 44 38 c7 7c 09 45 84 c0 0f 85 1f 02 00 00 48 8d 7b 04 <44> 8b 2b 49 89 f8 49 c1 e8 03 47 0f b6 0c 20 49 89 f8 41 83 e0 07 RSP: 0018:ffffc90002d571e0 EFLAGS: 00010246 RAX: 00000000caa66d40 RBX: fffffffffffffff4 RCX: 00000000caa66d40 RDX: 00000000caa66d40 RSI: 0000000000000007 RDI: fffffffffffffff8 RBP: ffffc90002d57208 R08: 0000000000000000 R09: ffffed1015d6703d R10: ffffed1015d6703c R11: ffff8880aeb381e3 R12: dffffc0000000000 R13: ffff88807dc48c58 R14: ffffc90002d5725c R15: 0000000000000014 FS: 00007f105c24b700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffff4 CR3: 000000008f4ea000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400