BUG: unable to handle page fault for address: 0000000070746373 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP PTI CPU: 0 UID: 0 PID: 3501 Comm: kworker/u8:12 Not tainted 6.13.0-syzkaller-09147-ge2ee2e9b1590 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: netns cleanup_net RIP: 0010:strlen+0x38/0x90 lib/string.c:413 Code: 41 54 53 48 89 fb 49 c7 c6 ff ff ff ff e8 00 77 5c f2 49 89 c7 41 b4 01 eb 0b 48 ff c3 49 ff c6 45 84 ed 74 31 45 84 e4 74 23 <44> 0f b6 2b 48 89 df e8 9c 68 5c f2 0f b6 00 84 c0 74 dd f6 d0 44 RSP: 0018:ffff888118043758 EFLAGS: 00010202 RAX: ffff888116a34cc8 RBX: 0000000070746373 RCX: 0000000000000000 RDX: ffff88812f1aaa78 RSI: ffff88813fffad10 RDI: 0000000070746373 RBP: ffff888118043780 R08: ffffea000000000f R09: ffffffff82d13da0 R10: 0000000000000002 R11: ffff888116a34180 R12: 0000000000000001 R13: 0000000000000000 R14: ffffffffffffffff R15: ffff888116a34cc8 FS: 0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000070746373 CR3: 000000011bd50000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: put_links+0x226/0x9d0 fs/proc/proc_sysctl.c:1490 drop_sysctl_table+0x10d/0x4f0 fs/proc/proc_sysctl.c:1512 drop_sysctl_table+0x4b6/0x4f0 fs/proc/proc_sysctl.c:1520 unregister_sysctl_table+0x48/0x70 fs/proc/proc_sysctl.c:1538 unregister_net_sysctl_table+0x1e/0x30 net/sysctl_net.c:177 sctp_sysctl_net_unregister+0x64/0xb0 net/sctp/sysctl.c:628 sctp_defaults_exit+0x7af/0x7e0 net/sctp/protocol.c:1469 ops_exit_list net/core/net_namespace.c:172 [inline] cleanup_net+0x104a/0x1d20 net/core/net_namespace.c:652 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xae0/0x1c40 kernel/workqueue.c:3317 worker_thread+0xea7/0x14f0 kernel/workqueue.c:3398 kthread+0x6b9/0xef0 kernel/kthread.c:464 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Modules linked in: CR2: 0000000070746373 ---[ end trace 0000000000000000 ]--- RIP: 0010:strlen+0x38/0x90 lib/string.c:413 Code: 41 54 53 48 89 fb 49 c7 c6 ff ff ff ff e8 00 77 5c f2 49 89 c7 41 b4 01 eb 0b 48 ff c3 49 ff c6 45 84 ed 74 31 45 84 e4 74 23 <44> 0f b6 2b 48 89 df e8 9c 68 5c f2 0f b6 00 84 c0 74 dd f6 d0 44 RSP: 0018:ffff888118043758 EFLAGS: 00010202 RAX: ffff888116a34cc8 RBX: 0000000070746373 RCX: 0000000000000000 RDX: ffff88812f1aaa78 RSI: ffff88813fffad10 RDI: 0000000070746373 RBP: ffff888118043780 R08: ffffea000000000f R09: ffffffff82d13da0 R10: 0000000000000002 R11: ffff888116a34180 R12: 0000000000000001 R13: 0000000000000000 R14: ffffffffffffffff R15: ffff888116a34cc8 FS: 0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000070746373 CR3: 000000011bd50000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 41 54 push %r12 2: 53 push %rbx 3: 48 89 fb mov %rdi,%rbx 6: 49 c7 c6 ff ff ff ff mov $0xffffffffffffffff,%r14 d: e8 00 77 5c f2 call 0xf25c7712 12: 49 89 c7 mov %rax,%r15 15: 41 b4 01 mov $0x1,%r12b 18: eb 0b jmp 0x25 1a: 48 ff c3 inc %rbx 1d: 49 ff c6 inc %r14 20: 45 84 ed test %r13b,%r13b 23: 74 31 je 0x56 25: 45 84 e4 test %r12b,%r12b 28: 74 23 je 0x4d * 2a: 44 0f b6 2b movzbl (%rbx),%r13d <-- trapping instruction 2e: 48 89 df mov %rbx,%rdi 31: e8 9c 68 5c f2 call 0xf25c68d2 36: 0f b6 00 movzbl (%rax),%eax 39: 84 c0 test %al,%al 3b: 74 dd je 0x1a 3d: f6 d0 not %al 3f: 44 rex.R