[ 357.973981][ C1] ==================================================================
[ 357.974395][ C1] BUG: KASAN: null-ptr-deref in sock_def_write_space_wfree+0x210/0x360
[ 357.974634][ C1] Read of size 8 at addr 0000000000000008 by task swapper/1/0
[ 357.974855][ C1]
[ 357.974933][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.9.0-rc2-virtme #1
[ 357.975152][ C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 357.975494][ C1] Call Trace:
[ 357.975611][ C1]
[ 357.975690][ C1] dump_stack_lvl+0x82/0xd0
[ 357.975848][ C1] kasan_report+0xbd/0xf0
[ 357.975965][ C1] ? sock_def_write_space_wfree+0x210/0x360
[ 357.976170][ C1] kasan_check_range+0x39/0x1c0
[ 357.976338][ C1] sock_def_write_space_wfree+0x210/0x360
[ 357.976506][ C1] sock_wfree+0x25f/0x3e0
[ 357.976631][ C1] skb_release_head_state+0x7a/0x1e0
[ 357.976785][ C1] consume_skb+0x76/0x110
[ 357.976918][ C1] dummy_xmit+0x106/0x170
[ 357.977039][ C1] ? trace_net_dev_start_xmit+0xff/0x170
[ 357.977228][ C1] dev_hard_start_xmit+0x10e/0x360
[ 357.977389][ C1] sch_direct_xmit+0x203/0x11c0
[ 357.977555][ C1] ? __pfx_sch_direct_xmit+0x10/0x10
[ 357.977712][ C1] __qdisc_run+0x1cd/0x3d0
[ 357.977848][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 357.978011][ C1] ? __pfx___qdisc_run+0x10/0x10
[ 357.978162][ C1] ? do_raw_spin_lock+0x131/0x270
[ 357.978347][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 357.978507][ C1] ? lock_acquire+0x32/0xc0
[ 357.978670][ C1] ? net_tx_action+0x3a5/0x680
[ 357.978833][ C1] net_tx_action+0x3f6/0x680
[ 357.978986][ C1] __do_softirq+0x1f8/0x5df
[ 357.979153][ C1] irq_exit_rcu+0x97/0xc0
[ 357.979283][ C1] sysvec_apic_timer_interrupt+0x75/0x80
[ 357.979458][ C1]
[ 357.979536][ C1]
[ 357.979612][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 357.979821][ C1] RIP: 0010:default_idle+0xf/0x20
[ 357.979989][ C1] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 cc 32 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[ 357.980562][ C1] RSP: 0018:ffffc9000014fdf8 EFLAGS: 00000242
[ 357.980761][ C1] RAX: 00000000005b2301 RBX: 1ffff92000029fc1 RCX: ffffffffa2534e95
[ 357.980999][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9fcac0e4
[ 357.981241][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006c1709c
[ 357.981463][ C1] R10: ffff8880360b84e3 R11: ffff8880360ad9b0 R12: 0000000000000000
[ 357.981690][ C1] R13: ffff888001b8a300 R14: dffffc0000000000 R15: 0000000000000000
[ 357.981933][ C1] ? ct_kernel_exit.constprop.0+0xc5/0xf0
[ 357.982087][ C1] ? cpuidle_idle_call+0x1f4/0x280
[ 357.982254][ C1] default_idle_call+0x6d/0xb0
[ 357.982412][ C1] cpuidle_idle_call+0x1f4/0x280
[ 357.982561][ C1] ? __pfx_cpuidle_idle_call+0x10/0x10
[ 357.982715][ C1] ? tsc_verify_tsc_adjust+0x5e/0x2b0
[ 357.982864][ C1] do_idle+0xf9/0x160
[ 357.982977][ C1] cpu_startup_entry+0x54/0x60
[ 357.983132][ C1] start_secondary+0x21c/0x2b0
[ 357.983309][ C1] ? __pfx_start_secondary+0x10/0x10
[ 357.983465][ C1] common_startup_64+0x12c/0x138
[ 357.983627][ C1]
[ 357.983748][ C1] ==================================================================
[ 357.983971][ C1] Disabling lock debugging due to kernel taint
[ 357.984176][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 357.984521][ C1] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[ 357.984741][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.9.0-rc2-virtme #1
[ 357.985004][ C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 357.985348][ C1] RIP: 0010:sock_def_write_space_wfree+0x221/0x360
[ 357.985559][ C1] Code: 00 4c 8b bb a0 01 00 00 be 08 00 00 00 4d 8d 77 08 4c 89 f7 e8 e0 0e 8b fe 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 fe 00 00 00 49 8b 47 08 a8 04 0f 85 dc fe ff ff
[ 357.986103][ C1] RSP: 0018:ffffc900001d8c30 EFLAGS: 00010202
[ 357.986315][ C1] RAX: dffffc0000000000 RBX: ffff888006cd19c0 RCX: ffffffff9fb9564a
[ 357.986535][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa50fda00
[ 357.986752][ C1] RBP: ffff888006cd1a20 R08: 0000000000000001 R09: fffffbfff4a1fb40
[ 357.986973][ C1] R10: ffffffffa50fda07 R11: 205d314320202020 R12: 0000000000000000
[ 357.987193][ C1] R13: ffff888006cd1b40 R14: 0000000000000008 R15: 0000000000000000
[ 357.987407][ C1] FS: 0000000000000000(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[ 357.987657][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 357.987842][ C1] CR2: 000055886f6eddec CR3: 0000000005ab6002 CR4: 0000000000770ef0
[ 357.988057][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 357.988358][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 357.988574][ C1] PKRU: 55555554
[ 357.988685][ C1] Call Trace:
[ 357.988794][ C1]
[ 357.988869][ C1] ? die_addr+0x41/0xa0
[ 357.989059][ C1] ? exc_general_protection+0x149/0x220
[ 357.989216][ C1] ? asm_exc_general_protection+0x26/0x30
[ 357.989371][ C1] ? add_taint+0x2a/0x90
[ 357.989480][ C1] ? sock_def_write_space_wfree+0x221/0x360
[ 357.989734][ C1] sock_wfree+0x25f/0x3e0
[ 357.989845][ C1] skb_release_head_state+0x7a/0x1e0
[ 357.989991][ C1] consume_skb+0x76/0x110
[ 357.990100][ C1] dummy_xmit+0x106/0x170
[ 357.990223][ C1] ? trace_net_dev_start_xmit+0xff/0x170
[ 357.990441][ C1] dev_hard_start_xmit+0x10e/0x360
[ 357.990587][ C1] sch_direct_xmit+0x203/0x11c0
[ 357.990733][ C1] ? __pfx_sch_direct_xmit+0x10/0x10
[ 357.990877][ C1] __qdisc_run+0x1cd/0x3d0
[ 357.991020][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 357.991243][ C1] ? __pfx___qdisc_run+0x10/0x10
[ 357.991387][ C1] ? do_raw_spin_lock+0x131/0x270
[ 357.991535][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 357.991678][ C1] ? lock_acquire+0x32/0xc0
[ 357.991906][ C1] ? net_tx_action+0x3a5/0x680
[ 357.992050][ C1] net_tx_action+0x3f6/0x680
[ 357.992197][ C1] __do_softirq+0x1f8/0x5df
[ 357.992342][ C1] irq_exit_rcu+0x97/0xc0
[ 357.992525][ C1] sysvec_apic_timer_interrupt+0x75/0x80
[ 357.992667][ C1]
[ 357.992740][ C1]
[ 357.992816][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 357.992992][ C1] RIP: 0010:default_idle+0xf/0x20
[ 357.993260][ C1] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 cc 32 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
[ 357.993780][ C1] RSP: 0018:ffffc9000014fdf8 EFLAGS: 00000242
[ 357.993965][ C1] RAX: 00000000005b2301 RBX: 1ffff92000029fc1 RCX: ffffffffa2534e95
[ 357.994192][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9fcac0e4
[ 357.994407][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006c1709c
[ 357.994627][ C1] R10: ffff8880360b84e3 R11: ffff8880360ad9b0 R12: 0000000000000000
[ 357.994839][ C1] R13: ffff888001b8a300 R14: dffffc0000000000 R15: 0000000000000000
[ 357.995062][ C1] ? ct_kernel_exit.constprop.0+0xc5/0xf0
[ 357.995414][ C1] ? cpuidle_idle_call+0x1f4/0x280
[ 357.995559][ C1] default_idle_call+0x6d/0xb0
[ 357.995705][ C1] cpuidle_idle_call+0x1f4/0x280
[ 357.995851][ C1] ? __pfx_cpuidle_idle_call+0x10/0x10
[ 357.995993][ C1] ? tsc_verify_tsc_adjust+0x5e/0x2b0
[ 357.996138][ C1] do_idle+0xf9/0x160
[ 357.996255][ C1] cpu_startup_entry+0x54/0x60
[ 357.996402][ C1] start_secondary+0x21c/0x2b0
[ 357.996548][ C1] ? __pfx_start_secondary+0x10/0x10
[ 357.996693][ C1] common_startup_64+0x12c/0x138
[ 357.996842][ C1]
[ 357.996951][ C1] Modules linked in: sch_fq xt_mark nft_compat nf_tables libcrc32c sch_ingress act_mirred cls_basic sch_fq_codel
[ 357.997419][ C1] ---[ end trace 0000000000000000 ]---
[ 357.997563][ C1] RIP: 0010:sock_def_write_space_wfree+0x221/0x360
[ 357.997750][ C1] Code: 00 4c 8b bb a0 01 00 00 be 08 00 00 00 4d 8d 77 08 4c 89 f7 e8 e0 0e 8b fe 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 fe 00 00 00 49 8b 47 08 a8 04 0f 85 dc fe ff ff
[ 357.998264][ C1] RSP: 0018:ffffc900001d8c30 EFLAGS: 00010202
[ 357.998442][ C1] RAX: dffffc0000000000 RBX: ffff888006cd19c0 RCX: ffffffff9fb9564a
[ 357.998659][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffffa50fda00
[ 357.998876][ C1] RBP: ffff888006cd1a20 R08: 0000000000000001 R09: fffffbfff4a1fb40
[ 357.999087][ C1] R10: ffffffffa50fda07 R11: 205d314320202020 R12: 0000000000000000
[ 357.999435][ C1] R13: ffff888006cd1b40 R14: 0000000000000008 R15: 0000000000000000
[ 357.999644][ C1] FS: 0000000000000000(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[ 357.999892][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 358.000078][ C1] CR2: 000055886f6eddec CR3: 0000000005ab6002 CR4: 0000000000770ef0
[ 358.000301][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 358.000511][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 358.000721][ C1] PKRU: 55555554
[ 358.000832][ C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 358.001294][ C1] Kernel Offset: 0x1e800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 358.001628][ C1] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr