Oops: general protection fault, probably for non-canonical address 0xdffffc0000000060: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000300-0x0000000000000307]
CPU: 0 UID: 0 PID: 5503 Comm: dhcpcd Not tainted 6.14.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:strcmp+0x42/0xa0 lib/string.c:277
Code: 00 fc ff df 31 db 49 8d 3c 1c 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 29 41 0f b6 2c 1c 49 8d 3c 1e 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 20 41 3a 2c 1e 75 2a 48 ff c3 40 84 ed 75
RSP: 0018:ffffc900000074d8 EFLAGS: 00010006
RAX: 0000000000000060 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000300
RBP: 0000000000000026 R08: ffffffff945499cf R09: 1ffffffff28a9339
R10: dffffc0000000000 R11: fffffbfff28a933a R12: ffffffff8c80f520
R13: ffffffff93ef3e08 R14: 0000000000000300 R15: dffffc0000000000
FS: 00007f237227b740(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557502061131 CR3: 0000000033f30000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000979c DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
count_matching_names+0xfa/0x1c0 kernel/locking/lockdep.c:877
register_lock_class+0x450/0x980 kernel/locking/lockdep.c:1342
__lock_acquire+0xf3/0x2100 kernel/locking/lockdep.c:5103
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162
complete_with_flags kernel/sched/completion.c:20 [inline]
complete+0x28/0x1c0 kernel/sched/completion.c:47
transfer drivers/usb/gadget/udc/dummy_hcd.c:1523 [inline]
dummy_timer+0x21e3/0x4640 drivers/usb/gadget/udc/dummy_hcd.c:1978
__run_hrtimer kernel/time/hrtimer.c:1801 [inline]
__hrtimer_run_queues+0x59b/0xd30 kernel/time/hrtimer.c:1865
hrtimer_run_softirq+0x19a/0x2c0 kernel/time/hrtimer.c:1882
handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
__do_softirq kernel/softirq.c:595 [inline]
invoke_softirq kernel/softirq.c:435 [inline]
__irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662
irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:finish_task_switch+0x1ea/0x870 kernel/sched/core.c:5252
Code: c9 50 e8 29 2d 0c 00 48 83 c4 08 4c 89 f7 e8 fd 39 00 00 0f 1f 44 00 00 4c 89 f7 e8 60 90 7a 0a e8 ab 07 39 00 fb 48 8b 5d c0 <48> 8d bb 08 16 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc
RSP: 0018:ffffc90003817308 EFLAGS: 00000286
RAX: ee2a267fba4e1700 RBX: ffff888030278000 RCX: ffffffff819d29ca
RDX: dffffc0000000000 RSI: ffffffff8c2aa420 RDI: ffffffff8c80ee80
RBP: ffffc90003817350 R08: ffffffff9454984f R09: 1ffffffff28a9309
R10: dffffc0000000000 R11: fffffbfff28a930a R12: 1ffff110170c7eee
R13: dffffc0000000000 R14: ffff8880b863e940 R15: ffff8880b863f770
context_switch kernel/sched/core.c:5381 [inline]
__schedule+0x1916/0x4c90 kernel/sched/core.c:6765
__schedule_loop kernel/sched/core.c:6842 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6857
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
__mutex_lock_common kernel/locking/mutex.c:662 [inline]
__mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
rtnl_lock net/core/rtnetlink.c:79 [inline]
rtnl_dumpit+0x99/0x200 net/core/rtnetlink.c:6780
netlink_dump+0x64d/0xe10 net/netlink/af_netlink.c:2318
netlink_recvmsg+0x6ec/0x11a0 net/netlink/af_netlink.c:1974
sock_recvmsg_nosec net/socket.c:1023 [inline]
sock_recvmsg+0x22f/0x280 net/socket.c:1045
____sys_recvmsg+0x1c6/0x480 net/socket.c:2793
___sys_recvmsg net/socket.c:2835 [inline]
__sys_recvmsg+0x291/0x390 net/socket.c:2868
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f237235391e
Code: ff 89 ef 48 89 04 24 e8 4f 57 f9 ff 48 8b 04 24 48 83 c4 30 5d c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 21 b8 2f 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 70 48 8b 15 db c4 0c 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffde6956518 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
RAX: ffffffffffffffda RBX: 00007ffde6957640 RCX: 00007f237235391e
RDX: 0000000000000000 RSI: 00007ffde6957560 RDI: 0000000000000010
RBP: 00007ffde69575d0 R08: 0000000000000000 R09: 0000000000080000
R10: 00000000000000d8 R11: 0000000000000246 R12: 0000000000000c74
R13: 00007ffde6957544 R14: 00007ffde6957560 R15: 00007ffde6957550
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:strcmp+0x42/0xa0 lib/string.c:277
Code: 00 fc ff df 31 db 49 8d 3c 1c 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 29 41 0f b6 2c 1c 49 8d 3c 1e 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 20 41 3a 2c 1e 75 2a 48 ff c3 40 84 ed 75
RSP: 0018:ffffc900000074d8 EFLAGS: 00010006
RAX: 0000000000000060 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000300
RBP: 0000000000000026 R08: ffffffff945499cf R09: 1ffffffff28a9339
R10: dffffc0000000000 R11: fffffbfff28a933a R12: ffffffff8c80f520
R13: ffffffff93ef3e08 R14: 0000000000000300 R15: dffffc0000000000
FS: 00007f237227b740(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000557502061131 CR3: 0000000033f30000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000979c DR6: 00000000ffff0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 3 bytes skipped:
0: df 31 fbstp (%rcx)
2: db 49 8d fisttpl -0x73(%rcx)
5: 3c 1c cmp $0x1c,%al
7: 48 89 f8 mov %rdi,%rax
a: 48 c1 e8 03 shr $0x3,%rax
e: 42 0f b6 04 38 movzbl (%rax,%r15,1),%eax
13: 84 c0 test %al,%al
15: 75 29 jne 0x40
17: 41 0f b6 2c 1c movzbl (%r12,%rbx,1),%ebp
1c: 49 8d 3c 1e lea (%r14,%rbx,1),%rdi
20: 48 89 f8 mov %rdi,%rax
23: 48 c1 e8 03 shr $0x3,%rax
* 27: 42 0f b6 04 38 movzbl (%rax,%r15,1),%eax <-- trapping instruction
2c: 84 c0 test %al,%al
2e: 75 20 jne 0x50
30: 41 3a 2c 1e cmp (%r14,%rbx,1),%bpl
34: 75 2a jne 0x60
36: 48 ff c3 inc %rbx
39: 40 84 ed test %bpl,%bpl
3c: 75 .byte 0x75