Or, if it's attic above, junction in attic. Appears the switch leg is going up.