Unable to handle kernel paging request at virtual address e0a4c077c0000315
KASAN: maybe wild-memory-access in range [0x052a03be000018a8-0x052a03be000018af]
Mem abort info:
  ESR = 0x0000000096000004
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x04: level 0 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0
[e0a4c077c0000315] address between user and kernel address ranges
Internal error: Oops: 0000000096000004 [#1]  SMP
Modules linked in:
CPU: 0 UID: 0 PID: 4824 Comm: kworker/0:6 Tainted: G    B        L      syzkaller #0 PREEMPT 
Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
Workqueue: infiniband ib_cache_event_task
pstate: 03400005 (nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : netdev_need_ops_lock include/net/netdev_lock.h:33 [inline]
pc : netdev_lock_ops include/net/netdev_lock.h:41 [inline]
pc : __ethtool_get_link_ksettings+0xc4/0x254 net/ethtool/ioctl.c:463
lr : netdev_need_ops_lock include/net/netdev_lock.h:33 [inline]
lr : netdev_lock_ops include/net/netdev_lock.h:41 [inline]
lr : __ethtool_get_link_ksettings+0xb8/0x254 net/ethtool/ioctl.c:463
sp : ffff8000965276a0
x29: ffff8000965276a0 x28: 0000000000000000 x27: 0000000000000000
x26: 1fffe00020437c01 x25: 1fffe00020437dc2 x24: ffff0001021be008
x23: ffff0001021bee11 x22: dfff800000000000 x21: 052a03be000018ac
x20: ffff8000965277e0 x19: ffff0001021be000 x18: 1fffe00035bac428
x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800088c480e0
x14: ffff0001add6214c x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: ffff7000113d1645 x9 : ffff80008e8ec9e0
x8 : 00a54077c0000315 x7 : 0000000000000000 x6 : 74756d5f6c6e7472
x5 : ffff0000c0051b80 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
dump_backtrace(regs = 00000000c6cb52c3 tsk = 0000000000000000)
Call trace:
 netdev_need_ops_lock include/net/netdev_lock.h:33 [inline] (P)
 netdev_lock_ops include/net/netdev_lock.h:41 [inline] (P)
 __ethtool_get_link_ksettings+0xc4/0x254 net/ethtool/ioctl.c:463 (P)
 ipvlan_ethtool_get_link_ksettings+0x48/0x58 drivers/net/ipvlan/ipvlan_main.c:467
 netif_get_link_ksettings+0x220/0x2bc net/ethtool/ioctl.c:451
 __ethtool_get_link_ksettings+0x114/0x254 net/ethtool/ioctl.c:464
 ib_get_eth_speed+0x154/0x6b0 drivers/infiniband/core/verbs.c:2061
 rxe_query_port+0x98/0x37c drivers/infiniband/sw/rxe/rxe_verbs.c:56
 __ib_query_port drivers/infiniband/core/device.c:2304 [inline]
 ib_query_port+0x16c/0x76c drivers/infiniband/core/device.c:2336
 ib_cache_update+0x1b8/0xa90 drivers/infiniband/core/cache.c:1456
 ib_cache_event_task+0xbc/0x1a0 drivers/infiniband/core/cache.c:1535
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479
 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560
 kthread+0x304/0x3d4 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838
Code: 96ed7fa0 f9400308 910ae115 d343fea8 (38766908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	96ed7fa0 	bl	0xfffffffffbb5fe80
   4:	f9400308 	ldr	x8, [x24]
   8:	910ae115 	add	x21, x8, #0x2b8
   c:	d343fea8 	lsr	x8, x21, #3
* 10:	38766908 	ldrb	w8, [x8, x22] <-- trapping instruction