IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready BUG: unable to handle kernel NULL pointer dereference at 0000000000000328 IP: __read_once_size include/linux/compiler.h:183 [inline] IP: __in6_dev_get include/net/addrconf.h:300 [inline] IP: ipv6_get_lladdr+0x6f/0x270 net/ipv6/addrconf.c:1813 PGD 1dc41b067 P4D 1dc41b067 PUD 2108d3067 PMD 0 Oops: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 25340 Comm: syz-executor6 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline] RIP: 0010:__in6_dev_get include/net/addrconf.h:300 [inline] RIP: 0010:ipv6_get_lladdr+0x6f/0x270 net/ipv6/addrconf.c:1813 RSP: 0018:ffff88021fd03da8 EFLAGS: 00010206 RAX: ffff880215790740 RBX: 0000000000000000 RCX: ffffffff8225359f RDX: 0000000000000100 RSI: 00000000de2af670 RDI: 0000000000000286 RBP: ffff88021fd03de0 R08: 0000000000000001 R09: 0000000000000002 R10: ffff88021fd03d30 R11: 0000000000000002 R12: ffff8801ffc8cc00 R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000001895940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000328 CR3: 00000001dc937000 CR4: 00000000001426e0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: addrconf_rs_timer+0x128/0x230 net/ipv6/addrconf.c:3762 call_timer_fn+0x9f/0x3f0 kernel/time/timer.c:1320 expire_timers kernel/time/timer.c:1357 [inline] __run_timers kernel/time/timer.c:1660 [inline] run_timer_softirq+0x68a/0x830 kernel/time/timer.c:1686 __do_softirq+0xcb/0x4f3 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0xd4/0xe0 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:540 [inline] smp_apic_timer_interrupt+0x8e/0x2a0 arch/x86/kernel/apic/apic.c:1052 apic_timer_interrupt+0xa9/0xb0 arch/x86/entry/entry_64.S:920 RIP: 0010:clear_page_erms+0x9/0x10 arch/x86/lib/clear_page_64.S:50 RSP: 0018:ffffc90000dafcf8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff11 RAX: 0000000000000000 RBX: 0000000000000173 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff83080700 RDI: ffff8801def74000 RBP: ffffc90000dafd40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffea00077b8000 R13: ffff880215790740 R14: 000000000000018c R15: ffffffff82e6227c __do_huge_pmd_anonymous_page mm/huge_memory.c:570 [inline] do_huge_pmd_anonymous_page+0x1c7/0x850 mm/huge_memory.c:728 create_huge_pmd mm/memory.c:3838 [inline] __handle_mm_fault+0xc37/0x1930 mm/memory.c:4042 handle_mm_fault+0x215/0x450 mm/memory.c:4108 __do_page_fault+0x337/0x6b0 arch/x86/mm/fault.c:1429 do_page_fault+0x52/0x330 arch/x86/mm/fault.c:1504 page_fault+0x4c/0x60 arch/x86/entry/entry_64.S:1243 RIP: 0033:0x405887 RSP: 002b:0000000000a6f910 EFLAGS: 00010246 RAX: 0000000020380000 RBX: 0000000000000101 RCX: 0000000000000000 RDX: cb86b77f659cf217 RSI: 0000000000000101 RDI: 0000000001895848 RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000007e R10: 0000000000a6f910 R11: 0000000000000206 R12: fffffffffffffffe R13: 0000000020380000 R14: 0000000000017e88 R15: 0000000000000010 Code: c7 40 07 08 83 e8 b2 2e fd fe e8 3d 9e ff fe 85 c0 5a 74 12 e8 b3 6d 06 ff 80 3d 73 10 f6 00 00 0f 84 7a 01 00 00 e8 a1 6d 06 ff <4c> 8b a3 28 03 00 00 e8 15 9e ff fe 85 c0 74 12 e8 8c 6d 06 ff RIP: __read_once_size include/linux/compiler.h:183 [inline] RSP: ffff88021fd03da8 RIP: __in6_dev_get include/net/addrconf.h:300 [inline] RSP: ffff88021fd03da8 RIP: ipv6_get_lladdr+0x6f/0x270 net/ipv6/addrconf.c:1813 RSP: ffff88021fd03da8 CR2: 0000000000000328 ---[ end trace e7b8dc6589fd2fd2 ]---