================================================================== BUG: KASAN: null-ptr-deref in futex_wake+0x1ce/0x2f4 kernel/futex/waitwake.c:166 Read of size 8 at addr 0000000000000000 by task syz-executor.1/3292 CPU: 1 PID: 3292 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119 [] __dump_stack lib/dump_stack.c:88 [inline] [] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106 [] __kasan_report mm/kasan/report.c:446 [inline] [] kasan_report+0x1de/0x1e0 mm/kasan/report.c:459 [] check_region_inline mm/kasan/generic.c:183 [inline] [] __asan_load8+0x6e/0x96 mm/kasan/generic.c:256 [] futex_wake+0x1ce/0x2f4 kernel/futex/waitwake.c:166 [] do_futex+0x21a/0x284 kernel/futex/syscalls.c:111 [] __do_sys_futex kernel/futex/syscalls.c:183 [inline] [] sys_futex+0xf8/0x310 kernel/futex/syscalls.c:164 [] ret_from_syscall+0x0/0x2 ================================================================== Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Oops [#1] Modules linked in: CPU: 1 PID: 3292 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) epc : futex_wake+0x1ce/0x2f4 kernel/futex/waitwake.c:166 ra : futex_wake+0x1ce/0x2f4 kernel/futex/waitwake.c:166 epc : ffffffff80198b2e ra : ffffffff80198b2e sp : ffffaf800734fb70 gp : ffffffff85863ac0 tp : ffffaf8009c0e100 t0 : ffffffff86bcb657 t1 : fffff5ef0b53c90c t2 : 0000000000000000 s0 : ffffaf800734fcc0 s1 : ffffaf801063bd48 a0 : 0000000000000001 a1 : 0000000000000003 a2 : 1ffff5f001381c21 a3 : ffffffff831afd3a a4 : 0000000000000000 a5 : ffffaf8009c0f100 a6 : 0000000000f00000 a7 : ffffaf805a9e4863 s2 : ffffffffffffffe8 s3 : ffffaf800734fc40 s4 : 0000000000000000 s5 : 0000000000000000 s6 : ffffffffffffffff s7 : ffffaf80093fc5c8 s8 : 00000000000f4240 s9 : ffffaf800734fbc0 s10: 000000000011b000 s11: ffffaf800db0d3c8 t3 : 0000000061736944 t4 : fffff5ef0b53c90c t5 : fffff5ef0b53c90d t6 : ffffaf800734f5b8 status: 0000000000000120 badaddr: 0000000000000000 cause: 000000000000000d [] do_futex+0x21a/0x284 kernel/futex/syscalls.c:111 [] __do_sys_futex kernel/futex/syscalls.c:183 [inline] [] sys_futex+0xf8/0x310 kernel/futex/syscalls.c:164 [] ret_from_syscall+0x0/0x2 ---[ end trace 0000000000000000 ]---