================================================================== BUG: KASAN: null-ptr-deref in check_wait_context kernel/locking/lockdep.c:4700 [inline] BUG: KASAN: null-ptr-deref in __lock_acquire+0x336/0x333e kernel/locking/lockdep.c:4977 Read of size 1 at addr 00000000000000b8 by task syz-fuzzer/2025 CPU: 1 PID: 2025 Comm: syz-fuzzer Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119 [] __dump_stack lib/dump_stack.c:88 [inline] [] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106 [] __kasan_report mm/kasan/report.c:446 [inline] [] kasan_report+0x1de/0x1e0 mm/kasan/report.c:459 [] check_region_inline mm/kasan/generic.c:183 [inline] [] __asan_load1+0x54/0x6c mm/kasan/generic.c:253 [] check_wait_context kernel/locking/lockdep.c:4700 [inline] [] __lock_acquire+0x336/0x333e kernel/locking/lockdep.c:4977 [] lock_acquire.part.0+0x1d0/0x424 kernel/locking/lockdep.c:5639 [] lock_acquire+0x54/0x6a kernel/locking/lockdep.c:5612 [] do_write_seqcount_begin_nested include/linux/seqlock.h:520 [inline] [] do_write_seqcount_begin include/linux/seqlock.h:545 [inline] [] vtime_task_switch_generic+0x50/0x1f4 kernel/sched/cputime.c:769 [] vtime_task_switch include/linux/vtime.h:95 [inline] [] finish_task_switch.isra.0+0x292/0x420 kernel/sched/core.c:4860 [] context_switch kernel/sched/core.c:4989 [inline] [] __schedule+0x58e/0x118e kernel/sched/core.c:6296 [] schedule+0x74/0x14c kernel/sched/core.c:6369 [] freezable_schedule include/linux/freezer.h:172 [inline] [] futex_wait_queue+0xc4/0x1d4 kernel/futex/waitwake.c:355 [] futex_wait+0x174/0x2f8 kernel/futex/waitwake.c:656 [] do_futex+0x19c/0x284 kernel/futex/syscalls.c:106 [] __do_sys_futex kernel/futex/syscalls.c:183 [inline] [] sys_futex+0xf8/0x310 kernel/futex/syscalls.c:164 [] ret_from_syscall+0x0/0x2 ================================================================== Unable to handle kernel NULL pointer dereference at virtual address 00000000000000b8 Oops [#1] Modules linked in: CPU: 1 PID: 2025 Comm: syz-fuzzer Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) epc : check_wait_context kernel/locking/lockdep.c:4700 [inline] epc : __lock_acquire+0x33a/0x333e kernel/locking/lockdep.c:4977 ra : check_wait_context kernel/locking/lockdep.c:4700 [inline] ra : __lock_acquire+0x336/0x333e kernel/locking/lockdep.c:4977 epc : ffffffff801125bc ra : ffffffff801125b8 sp : ffffaf800eb17570 gp : ffffffff85863ac0 tp : ffffaf800938c8c0 t0 : ffffffff86bcb657 t1 : fffffffef0b0dfa4 t2 : 0000000000000000 s0 : ffffaf800eb176d0 s1 : 0000000000000000 a0 : ffffaf800938d300 a1 : 0000000000000003 a2 : 1ffff5f001271919 a3 : ffffffff831afd3a a4 : 0000000000000000 a5 : ffffaf800938d8c0 a6 : 0000000000f00000 a7 : ffffffff8586fd23 s2 : 0000000000000081 s3 : ffffffff858c4cb0 s4 : 0000000000000000 s5 : ffffaf800938d2d8 s6 : ffffffff858c4ca0 s7 : 00000000000c0000 s8 : ffffaf800938d2e0 s9 : ffffffff800bdc7a s10: 00000000000c0081 s11: ffffaf800938c8c0 t3 : 000000000000003d t4 : fffffffef0b0dfa4 t5 : fffffffef0b0dfa5 t6 : ffffaf800eb16fd8 status: 0000000000000100 badaddr: 00000000000000b8 cause: 000000000000000d [] lock_acquire.part.0+0x1d0/0x424 kernel/locking/lockdep.c:5639 [] lock_acquire+0x54/0x6a kernel/locking/lockdep.c:5612 [] do_write_seqcount_begin_nested include/linux/seqlock.h:520 [inline] [] do_write_seqcount_begin include/linux/seqlock.h:545 [inline] [] vtime_task_switch_generic+0x50/0x1f4 kernel/sched/cputime.c:769 [] vtime_task_switch include/linux/vtime.h:95 [inline] [] finish_task_switch.isra.0+0x292/0x420 kernel/sched/core.c:4860 [] context_switch kernel/sched/core.c:4989 [inline] [] __schedule+0x58e/0x118e kernel/sched/core.c:6296 [] schedule+0x74/0x14c kernel/sched/core.c:6369 [] freezable_schedule include/linux/freezer.h:172 [inline] [] futex_wait_queue+0xc4/0x1d4 kernel/futex/waitwake.c:355 [] futex_wait+0x174/0x2f8 kernel/futex/waitwake.c:656 [] do_futex+0x19c/0x284 kernel/futex/syscalls.c:106 [] __do_sys_futex kernel/futex/syscalls.c:183 [inline] [] sys_futex+0xf8/0x310 kernel/futex/syscalls.c:164 [] ret_from_syscall+0x0/0x2