general protection fault, probably for non-canonical address 0xdffffc0000000075: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x00000000000003a8-0x00000000000003af]
CPU: 0 PID: 5446 Comm: dhcpcd-run-hook Not tainted 6.5.0-rc7-syzkaller-00185-g28f20a19294d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
RIP: 0010:unlink_anon_vmas+0x277/0x800 mm/rmap.c:417
Code: 00 00 00 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 56 05 00 00 49 8b 9c 24 b8 00 00 00 48 8d bb a8 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 2c 05 00 00 48 83 ab a8 00 00 00 01 e9 e5 fe ff
RSP: 0000:ffffc9000546f8c8 EFLAGS: 00010212
RAX: 0000000000000075 RBX: 0000000000000300 RCX: 0000000000000000
RDX: ffff888077985940 RSI: ffffffff81cbd898 RDI: 00000000000003a8
RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff888068e44880
R13: ffff88802b84ce00 R14: 0000000000000000 R15: ffff88802b84ce80
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f17aeed16f8 CR3: 0000000018ff5000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 free_pgtables+0x3db/0x910 mm/memory.c:402
 exit_mmap+0x2c9/0x960 mm/mmap.c:3213
 __mmput+0x12a/0x4d0 kernel/fork.c:1348
 mmput+0x62/0x70 kernel/fork.c:1370
 exit_mm kernel/exit.c:567 [inline]
 do_exit+0x9b4/0x2a20 kernel/exit.c:861
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1024
 get_signal+0x23ea/0x2770 kernel/signal.c:2881
 arch_do_signal_or_restart+0x89/0x5f0 arch/x86/kernel/signal.c:308
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x11f/0x240 kernel/entry/common.c:204
 irqentry_exit_to_user_mode+0x9/0x40 kernel/entry/common.c:310
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x55bda3301901
Code: Unable to access opcode bytes at 0x55bda33018d7.
RSP: 002b:00007ffeb849e460 EFLAGS: 00010207
RAX: 0000000000001547 RBX: 0000000000000001 RCX: 00007f16d7709476
RDX: 0000000000000000 RSI: 00007ffeb849e47c RDI: 00000000ffffffff
RBP: 000055bda3302b70 R08: 0000000000001547 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 000055bda3301910 R14: 00007f16d78cf470 R15: 0000000000000000
 </TASK>
Modules linked in:
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	00 48 89             	add    %cl,-0x77(%rax)
   5:	f8                   	clc
   6:	48 c1 e8 03          	shr    $0x3,%rax
   a:	80 3c 28 00          	cmpb   $0x0,(%rax,%rbp,1)
   e:	0f 85 56 05 00 00    	jne    0x56a
  14:	49 8b 9c 24 b8 00 00 	mov    0xb8(%r12),%rbx
  1b:	00
  1c:	48 8d bb a8 00 00 00 	lea    0xa8(%rbx),%rdi
  23:	48 89 f8             	mov    %rdi,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	80 3c 28 00          	cmpb   $0x0,(%rax,%rbp,1) <-- trapping instruction
  2e:	0f 85 2c 05 00 00    	jne    0x560
  34:	48 83 ab a8 00 00 00 	subq   $0x1,0xa8(%rbx)
  3b:	01
  3c:	e9                   	.byte 0xe9
  3d:	e5 fe                	in     $0xfe,%eax
  3f:	ff                   	.byte 0xff