general protection fault, probably for non-canonical address 0xdffffc001159c770: 0000 [#1] PREEMPT SMP KASAN
KASAN: probably user-memory-access in range [0x000000008ace3b80-0x000000008ace3b87]
CPU: 1 PID: 4521 Comm: udevd Not tainted 6.7.0-rc3-syzkaller-00033-g3b47bc037bd4 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
RIP: 0010:__hlist_del include/linux/list.h:988 [inline]
RIP: 0010:hlist_del include/linux/list.h:1002 [inline]
RIP: 0010:__alloc_object lib/debugobjects.c:213 [inline]
RIP: 0010:alloc_object lib/debugobjects.c:226 [inline]
RIP: 0010:lookup_object_or_alloc.part.0+0xf5/0xaf0 lib/debugobjects.c:587
Code: fc ff df 48 89 c1 48 c1 e9 03 80 3c 11 00 0f 85 c7 08 00 00 48 b9 00 00 00 00 00 fc ff df 49 8b 54 24 08 48 89 d6 48 c1 ee 03 <80> 3c 0e 00 0f 85 4c 09 00 00 4d 85 ed 4c 89 2a 74 23 49 8d 7d 08
RSP: 0018:ffffc9000318fa80 EFLAGS: 00010012
RAX: ffff888064607d60 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: 000000008ace3b80 RSI: 000000001159c770 RDI: ffffffff8ca73a68
RBP: ffff8880b9939090 R08: 0000000000000000 R09: 0000000000000216
R10: 0000000000000003 R11: 0000000000000000 R12: ffff888064607d58
R13: ffff8880644f8800 R14: ffffffff92a4ee88 R15: ffffc9000318fba8
FS:  00007f057149dc80(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000561d0458b450 CR3: 00000000247f1000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 lookup_object_or_alloc lib/debugobjects.c:567 [inline]
 __debug_object_init+0x1ad/0x2b0 lib/debugobjects.c:634
 hrtimer_init_sleeper_on_stack kernel/time/hrtimer.c:447 [inline]
 schedule_hrtimeout_range_clock+0x146/0x440 kernel/time/hrtimer.c:2303
 ep_poll fs/eventpoll.c:1921 [inline]
 do_epoll_wait+0x131c/0x1a00 fs/eventpoll.c:2318
 __do_sys_epoll_wait fs/eventpoll.c:2330 [inline]
 __se_sys_epoll_wait fs/eventpoll.c:2325 [inline]
 __x64_sys_epoll_wait+0x194/0x290 fs/eventpoll.c:2325
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f0571123457
Code: 73 01 c3 48 8b 0d d1 d9 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 76 48 8b 15 a2 d9 0c 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffdef4613f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8
RAX: ffffffffffffffda RBX: 00007ffdef4614f8 RCX: 00007f0571123457
RDX: 0000000000000008 RSI: 00007ffdef4614f8 RDI: 000000000000000b
RBP: 00000000000000da R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000bb8
R13: 0000561d0457cfa0 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__hlist_del include/linux/list.h:988 [inline]
RIP: 0010:hlist_del include/linux/list.h:1002 [inline]
RIP: 0010:__alloc_object lib/debugobjects.c:213 [inline]
RIP: 0010:alloc_object lib/debugobjects.c:226 [inline]
RIP: 0010:lookup_object_or_alloc.part.0+0xf5/0xaf0 lib/debugobjects.c:587
Code: fc ff df 48 89 c1 48 c1 e9 03 80 3c 11 00 0f 85 c7 08 00 00 48 b9 00 00 00 00 00 fc ff df 49 8b 54 24 08 48 89 d6 48 c1 ee 03 <80> 3c 0e 00 0f 85 4c 09 00 00 4d 85 ed 4c 89 2a 74 23 49 8d 7d 08
RSP: 0018:ffffc9000318fa80 EFLAGS: 00010012

RAX: ffff888064607d60 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: 000000008ace3b80 RSI: 000000001159c770 RDI: ffffffff8ca73a68
RBP: ffff8880b9939090 R08: 0000000000000000 R09: 0000000000000216
R10: 0000000000000003 R11: 0000000000000000 R12: ffff888064607d58
R13: ffff8880644f8800 R14: ffffffff92a4ee88 R15: ffffc9000318fba8
FS:  00007f057149dc80(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000561d0458b450 CR3: 00000000247f1000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess), 3 bytes skipped:
   0:	48 89 c1             	mov    %rax,%rcx
   3:	48 c1 e9 03          	shr    $0x3,%rcx
   7:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)
   b:	0f 85 c7 08 00 00    	jne    0x8d8
  11:	48 b9 00 00 00 00 00 	movabs $0xdffffc0000000000,%rcx
  18:	fc ff df
  1b:	49 8b 54 24 08       	mov    0x8(%r12),%rdx
  20:	48 89 d6             	mov    %rdx,%rsi
  23:	48 c1 ee 03          	shr    $0x3,%rsi
* 27:	80 3c 0e 00          	cmpb   $0x0,(%rsi,%rcx,1) <-- trapping instruction
  2b:	0f 85 4c 09 00 00    	jne    0x97d
  31:	4d 85 ed             	test   %r13,%r13
  34:	4c 89 2a             	mov    %r13,(%rdx)
  37:	74 23                	je     0x5c
  39:	49 8d 7d 08          	lea    0x8(%r13),%rdi