==================================================================
BUG: KASAN: null-ptr-deref in atomic_read include/asm-generic/atomic-instrumented.h:21 [inline]
BUG: KASAN: null-ptr-deref in atomic_fetch_add_unless include/linux/atomic.h:575 [inline]
BUG: KASAN: null-ptr-deref in atomic_add_unless include/linux/atomic.h:597 [inline]
BUG: KASAN: null-ptr-deref in dst_hold_safe include/net/dst.h:308 [inline]
BUG: KASAN: null-ptr-deref in ip6_hold_safe+0xa7/0x3a0 net/ipv6/route.c:1023
Read of size 4 at addr 000000000000008a by task syz-executor.4/20535

CPU: 1 PID: 20535 Comm: syz-executor.4 Not tainted 5.0.0-rc5+ #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 kasan_report.cold+0x5/0x40 mm/kasan/report.c:321
 check_memory_region_inline mm/kasan/generic.c:185 [inline]
 check_memory_region+0x123/0x190 mm/kasan/generic.c:191
 kasan_check_read+0x11/0x20 mm/kasan/common.c:100
 atomic_read include/asm-generic/atomic-instrumented.h:21 [inline]
 atomic_fetch_add_unless include/linux/atomic.h:575 [inline]
 atomic_add_unless include/linux/atomic.h:597 [inline]
 dst_hold_safe include/net/dst.h:308 [inline]
 ip6_hold_safe+0xa7/0x3a0 net/ipv6/route.c:1023
 rt6_get_pcpu_route net/ipv6/route.c:1243 [inline]
 ip6_pol_route+0x33d/0xf00 net/ipv6/route.c:1892
 ip6_pol_route_input+0x65/0x80 net/ipv6/route.c:1911
 fib6_rule_lookup+0x128/0x560 net/ipv6/fib6_rules.c:118
 ip6_route_input_lookup+0xb7/0xd0 net/ipv6/route.c:1923
 ip6_route_input+0x5e6/0x9e0 net/ipv6/route.c:2058
 ip6_rcv_finish_core.isra.0+0x174/0x590 net/ipv6/ip6_input.c:63
 ip6_rcv_finish+0x17d/0x320 net/ipv6/ip6_input.c:74
 NF_HOOK include/linux/netfilter.h:289 [inline]
 NF_HOOK include/linux/netfilter.h:283 [inline]
 ipv6_rcv+0x10e/0x420 net/ipv6/ip6_input.c:272
 __netif_receive_skb_one_core+0x115/0x1a0 net/core/dev.c:4973
 __netif_receive_skb+0x2c/0x1c0 net/core/dev.c:5083
 process_backlog+0x206/0x750 net/core/dev.c:5923
 napi_poll net/core/dev.c:6346 [inline]
 net_rx_action+0x4fa/0x1070 net/core/dev.c:6412
 __do_softirq+0x266/0x95a kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x180/0x1d0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x14a/0x570 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline]
RIP: 0010:rmqueue_pcplist mm/page_alloc.c:3055 [inline]
RIP: 0010:rmqueue mm/page_alloc.c:3072 [inline]
RIP: 0010:get_page_from_freelist+0x24e0/0x4540 mm/page_alloc.c:3497
Code: 98 e8 ff 48 8b 85 b0 fe ff ff 80 38 00 0f 85 be 0f 00 00 48 83 3d df d1 05 07 00 0f 84 07 06 00 00 48 8b bd 70 fe ff ff 57 9d <0f> 1f 44 00 00 e9 76 ec ff ff 0f 0b e9 bc e1 ff ff 48 8b bd 70 ff
RSP: 0000:ffff88808af077e0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: fffffbfff112503e RBX: dffffc0000000000 RCX: 1ffff11010ca2d2c
RDX: 0000000000000000 RSI: ffff888086516940 RDI: 0000000000000286
RBP: ffff88808af07988 R08: ffff8880865160c0 R09: ffff888086516960
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004
R13: 0000000000000000 R14: ffffea0001123c48 R15: 0000000000000000
 __alloc_pages_nodemask+0x248/0x710 mm/page_alloc.c:4535
 alloc_pages_vma+0xdd/0x540 mm/mempolicy.c:2070
 wp_page_copy+0x21c/0x1740 mm/memory.c:2262
 do_wp_page+0x2ed/0x11d0 mm/memory.c:2550
 handle_pte_fault mm/memory.c:3803 [inline]
 __handle_mm_fault+0x22db/0x3f20 mm/memory.c:3911
 handle_mm_fault+0x43f/0xb30 mm/memory.c:3948
 do_user_addr_fault arch/x86/mm/fault.c:1475 [inline]
 __do_page_fault+0x5da/0xd60 arch/x86/mm/fault.c:1541
 do_page_fault+0x71/0x581 arch/x86/mm/fault.c:1572
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1143
RIP: 0033:0x46fd4e
Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87
RSP: 002b:00007ffe7f8e6c50 EFLAGS: 00010206
RAX: 0000000000000006 RBX: 00007ffe7f8e71b0 RCX: 0000000000000000
RDX: 00007ffe7f8e7328 RSI: 00000000004bd659 RDI: 00007ffe7f8e71b0
RBP: 00007ffe7f8e71a0 R08: 0000000000000000 R09: 00007ffe7f8e7328
R10: 0000000000000075 R11: 0000000000000206 R12: 00007ffe7f8e7340
R13: 00000000004bd659 R14: 00007ffe7f8e7328 R15: 0000000000000001
==================================================================