======================================
| [   23.922116][    C0] ==================================================================
| [ 23.922351][ C0] BUG: KASAN: null-ptr-deref in sock_def_write_space_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3399) 
| [   23.922570][    C0] Read of size 8 at addr 0000000000000008 by task cmsg_sender/254
| [   23.922783][    C0]
[   23.923081][    C0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   23.923390][    C0] Call Trace:
[   23.923501][    C0]  <IRQ>
[ 23.923573][ C0] dump_stack_lvl (lib/dump_stack.c:117) 
[ 23.923719][ C0] kasan_report (mm/kasan/report.c:603) 
[ 23.923827][ C0] ? sock_def_write_space_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3399) 
[ 23.924006][ C0] kasan_check_range (mm/kasan/generic.c:183 mm/kasan/generic.c:189) 
[ 23.924155][ C0] sock_def_write_space_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3399) 
[ 23.924294][ C0] sock_wfree (./include/linux/rcupdate.h:810 net/core/sock.c:2471) 
[ 23.924401][ C0] skb_release_head_state (net/core/skbuff.c:1162 (discriminator 3)) 
[ 23.924541][ C0] consume_skb (net/core/skbuff.c:1174 net/core/skbuff.c:1189 net/core/skbuff.c:1411 net/core/skbuff.c:1405) 
[ 23.924646][ C0] dummy_xmit (drivers/net/dummy.c:66) 
[ 23.924751][ C0] ? trace_net_dev_start_xmit (./include/trace/events/net.h:14 (discriminator 52)) 
[ 23.924891][ C0] dev_hard_start_xmit (./include/linux/netdevice.h:4877 ./include/linux/netdevice.h:4891 net/core/dev.c:3564 net/core/dev.c:3580) 
[ 23.925034][ C0] sch_direct_xmit (net/sched/sch_generic.c:343) 
[ 23.925178][ C0] ? __pfx_sch_direct_xmit (net/sched/sch_generic.c:318) 
[ 23.925319][ C0] __qdisc_run (net/sched/sch_generic.c:416) 
[ 23.925459][ C0] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) 
[ 23.925601][ C0] ? __pfx___qdisc_run (net/sched/sch_generic.c:412) 
[ 23.925740][ C0] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:115 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) 
[ 23.925877][ C0] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 23.926016][ C0] ? lock_acquire (kernel/locking/lockdep.c:5727) 
[ 23.926156][ C0] ? net_tx_action (./include/linux/spinlock.h:352 net/core/dev.c:5251) 
[ 23.926298][ C0] net_tx_action (./include/net/sch_generic.h:217 ./include/net/pkt_sched.h:128 ./include/net/pkt_sched.h:124 net/core/dev.c:5267) 
[ 23.926438][ C0] __do_softirq (kernel/softirq.c:554) 
[ 23.926580][ C0] irq_exit_rcu (kernel/softirq.c:428 kernel/softirq.c:633 kernel/softirq.c:645) 
[ 23.926687][ C0] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043 arch/x86/kernel/apic/apic.c:1043) 
[   23.926826][    C0]  </IRQ>
[   23.926899][    C0]  <TASK>
[ 23.926971][ C0] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) 
[ 23.927175][ C0] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) 
[ 23.927360][ C0] Code: 10 e8 a1 f0 78 fd 48 89 ef e8 d9 60 79 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d 05 4c ed 7b <74> 0e 5b 5d c3 cc cc cc cc e8 ff c0 9c fd eb dc 0f 1f 44 00 00 5b
All code
========
   0:	10 e8                	adc    %ch,%al
   2:	a1 f0 78 fd 48 89 ef 	movabs 0xd9e8ef8948fd78f0,%eax
   9:	e8 d9 
   b:	60                   	(bad)
   c:	79 fd                	jns    0xb
   e:	81 e3 00 02 00 00    	and    $0x200,%ebx
  14:	75 1d                	jne    0x33
  16:	9c                   	pushf
  17:	58                   	pop    %rax
  18:	f6 c4 02             	test   $0x2,%ah
  1b:	75 29                	jne    0x46
  1d:	48 85 db             	test   %rbx,%rbx
  20:	74 01                	je     0x23
  22:	fb                   	sti
  23:	65 ff 0d 05 4c ed 7b 	decl   %gs:0x7bed4c05(%rip)        # 0x7bed4c2f
  2a:*	74 0e                	je     0x3a		<-- trapping instruction
  2c:	5b                   	pop    %rbx
  2d:	5d                   	pop    %rbp
  2e:	c3                   	ret
  2f:	cc                   	int3
  30:	cc                   	int3
  31:	cc                   	int3
  32:	cc                   	int3
  33:	e8 ff c0 9c fd       	call   0xfffffffffd9cc137
  38:	eb dc                	jmp    0x16
  3a:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  3f:	5b                   	pop    %rbx

Code starting with the faulting instruction
===========================================
   0:	74 0e                	je     0x10
   2:	5b                   	pop    %rbx
   3:	5d                   	pop    %rbp
   4:	c3                   	ret
   5:	cc                   	int3
   6:	cc                   	int3
   7:	cc                   	int3
   8:	cc                   	int3
   9:	e8 ff c0 9c fd       	call   0xfffffffffd9cc10d
   e:	eb dc                	jmp    0xffffffffffffffec
  10:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  15:	5b                   	pop    %rbx
[   23.927866][    C0] RSP: 0018:ffffc900005bfbd0 EFLAGS: 00000282
[   23.928051][    C0] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff0bb23a1
[   23.928279][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84167dd1
[   23.928488][    C0] RBP: ffff88800196e180 R08: 0000000000000001 R09: fffffbfff0bb2c22
[   23.928695][    C0] R10: ffffffff85d96117 R11: 0000000000000040 R12: ffff88800196e180
[   23.928906][    C0] R13: ffffea0000146e00 R14: ffff88800196b3c0 R15: ffff8880051bd7c0
[ 23.929116][ C0] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) 
[ 23.929291][ C0] get_partial_node.part.0 (mm/slub.c:2623) 
[ 23.929435][ C0] ___slab_alloc (mm/slub.c:2583 mm/slub.c:2701 mm/slub.c:3505) 
[ 23.929578][ C0] ? kmem_cache_alloc (./include/linux/sched/mm.h:315 mm/slub.c:3746 mm/slub.c:3827 mm/slub.c:3852) 
[ 23.929720][ C0] ? getname_flags (fs/namei.c:139) 
[ 23.929860][ C0] ? __pfx___lock_release (kernel/locking/lockdep.c:5406) 
[ 23.930007][ C0] ? getname_flags (fs/namei.c:139) 
[ 23.930147][ C0] ? kmem_cache_alloc (mm/slub.c:3610 mm/slub.c:3663 mm/slub.c:3835 mm/slub.c:3852) 
[ 23.930285][ C0] kmem_cache_alloc (mm/slub.c:3610 mm/slub.c:3663 mm/slub.c:3835 mm/slub.c:3852) 
[ 23.930425][ C0] getname_flags (fs/namei.c:139) 
[ 23.930566][ C0] do_sys_openat2 (fs/open.c:1400) 
[ 23.930707][ C0] ? vfs_fstatat (fs/stat.c:308) 
[ 23.930849][ C0] ? __pfx_do_sys_openat2 (fs/open.c:1392) 
[ 23.930990][ C0] ? __pfx___do_sys_newfstatat (fs/stat.c:464) 
[ 23.931137][ C0] __x64_sys_openat (fs/open.c:1432) 
[ 23.931278][ C0] ? __pfx___x64_sys_openat (fs/open.c:1432) 
[ 23.931416][ C0] ? __pfx_do_faccessat (fs/open.c:465) 
[ 23.931558][ C0] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 23.931698][ C0] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[   23.931871][    C0] RIP: 0033:0x7fb5a33970e8
[ 23.932024][ C0] Code: f9 41 89 f0 41 83 e2 40 75 30 89 f0 25 00 00 41 00 3d 00 00 41 00 74 22 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 30 c3 0f 1f 80 00 00 00 00 48 8d 44 24 08 c7
All code
========
   0:	f9                   	stc
   1:	41 89 f0             	mov    %esi,%r8d
   4:	41 83 e2 40          	and    $0x40,%r10d
   8:	75 30                	jne    0x3a
   a:	89 f0                	mov    %esi,%eax
   c:	25 00 00 41 00       	and    $0x410000,%eax
  11:	3d 00 00 41 00       	cmp    $0x410000,%eax
  16:	74 22                	je     0x3a
  18:	44 89 c2             	mov    %r8d,%edx
  1b:	4c 89 ce             	mov    %r9,%rsi
  1e:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 30                	ja     0x62
  32:	c3                   	ret
  33:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  3a:	48 8d 44 24 08       	lea    0x8(%rsp),%rax
  3f:	c7                   	.byte 0xc7

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 30                	ja     0x38
   8:	c3                   	ret
   9:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  10:	48 8d 44 24 08       	lea    0x8(%rsp),%rax
  15:	c7                   	.byte 0xc7
[   23.932542][    C0] RSP: 002b:00007ffe6ca08358 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
[   23.932757][    C0] RAX: ffffffffffffffda RBX: 00007ffe6ca085df RCX: 00007fb5a33970e8
[   23.932970][    C0] RDX: 0000000000080000 RSI: 00007ffe6ca083d0 RDI: 00000000ffffff9c
[   23.933186][    C0] RBP: 00007ffe6ca083c0 R08: 0000000000080000 R09: 00007ffe6ca083d0
[   23.933398][    C0] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffe6ca083d7
[   23.933608][    C0] R13: 00007ffe6ca085f0 R14: 00007ffe6ca083d0 R15: 00007fb5a3368000
| [   23.933932][    C0] ==================================================================
| [   23.934154][    C0] Disabling lock debugging due to kernel taint
| [   23.934349][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
| [   23.934650][    C0] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[   23.935095][    C0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 23.935396][ C0] RIP: 0010:sock_def_write_space_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3399) 
[ 23.935573][ C0] Code: 00 4c 8b b3 a0 01 00 00 be 08 00 00 00 4d 8d 7e 08 4c 89 ff e8 b0 0b 8b fe 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 1e 01 00 00 49 8b 46 08 a8 04 0f 84 5c fe ff ff
All code
========
   0:	00 4c 8b b3          	add    %cl,-0x4d(%rbx,%rcx,4)
   4:	a0 01 00 00 be 08 00 	movabs 0x8be000001,%al
   b:	00 00 
   d:	4d 8d 7e 08          	lea    0x8(%r14),%r15
  11:	4c 89 ff             	mov    %r15,%rdi
  14:	e8 b0 0b 8b fe       	call   0xfffffffffe8b0bc9
  19:	4c 89 fa             	mov    %r15,%rdx
  1c:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  23:	fc ff df 
  26:	48 c1 ea 03          	shr    $0x3,%rdx
  2a:*	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)		<-- trapping instruction
  2e:	0f 85 1e 01 00 00    	jne    0x152
  34:	49 8b 46 08          	mov    0x8(%r14),%rax
  38:	a8 04                	test   $0x4,%al
  3a:	0f 84 5c fe ff ff    	je     0xfffffffffffffe9c

Code starting with the faulting instruction
===========================================
   0:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   4:	0f 85 1e 01 00 00    	jne    0x128
   a:	49 8b 46 08          	mov    0x8(%r14),%rax
   e:	a8 04                	test   $0x4,%al
  10:	0f 84 5c fe ff ff    	je     0xfffffffffffffe72
[   23.936056][    C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00010202
[   23.936228][    C0] RAX: dffffc0000000000 RBX: ffff888007dd8040 RCX: ffffffff8179564a
[   23.936431][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff86cffa00
[   23.936635][    C0] RBP: ffff888007dd80a0 R08: 0000000000000001 R09: fffffbfff0d9ff40
[   23.936836][    C0] R10: ffffffff86cffa07 R11: 205d304320202020 R12: 0000000000000000
[   23.937066][    C0] R13: ffff888007dd81c0 R14: 0000000000000000 R15: 0000000000000008
[   23.937275][    C0] FS:  0000000000000000(0000) GS:ffff888036000000(0000) knlGS:0000000000000000
[   23.937519][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   23.937697][    C0] CR2: 00007fb5a3363270 CR3: 00000000065ce001 CR4: 0000000000770ef0
[   23.937908][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   23.938120][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   23.938335][    C0] PKRU: 55555554
[   23.938518][    C0] Call Trace:
[   23.938622][    C0]  <IRQ>
[ 23.938692][ C0] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) 
[ 23.938798][ C0] ? exc_general_protection (arch/x86/kernel/traps.c:702 arch/x86/kernel/traps.c:644) 
[ 23.938938][ C0] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) 
[ 23.939075][ C0] ? add_taint (./arch/x86/include/asm/bitops.h:60 ./include/asm-generic/bitops/instrumented-atomic.h:29 kernel/panic.c:555) 
[ 23.939259][ C0] ? sock_def_write_space_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3399) 
[ 23.939429][ C0] sock_wfree (./include/linux/rcupdate.h:810 net/core/sock.c:2471) 
[ 23.939534][ C0] skb_release_head_state (net/core/skbuff.c:1162 (discriminator 3)) 
[ 23.939669][ C0] consume_skb (net/core/skbuff.c:1174 net/core/skbuff.c:1189 net/core/skbuff.c:1411 net/core/skbuff.c:1405) 
[ 23.939849][ C0] dummy_xmit (drivers/net/dummy.c:66) 
[ 23.939953][ C0] ? trace_net_dev_start_xmit (./include/trace/events/net.h:14 (discriminator 52)) 
[ 23.940090][ C0] dev_hard_start_xmit (./include/linux/netdevice.h:4877 ./include/linux/netdevice.h:4891 net/core/dev.c:3564 net/core/dev.c:3580) 
[ 23.940228][ C0] sch_direct_xmit (net/sched/sch_generic.c:343) 
[ 23.940370][ C0] ? __pfx_sch_direct_xmit (net/sched/sch_generic.c:318) 
[ 23.940587][ C0] __qdisc_run (net/sched/sch_generic.c:416) 
[ 23.940725][ C0] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) 
[ 23.940863][ C0] ? __pfx___qdisc_run (net/sched/sch_generic.c:412) 
[ 23.941000][ C0] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:115 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) 
[ 23.941213][ C0] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 23.941349][ C0] ? lock_acquire (kernel/locking/lockdep.c:5727) 
[ 23.941487][ C0] ? net_tx_action (./include/linux/spinlock.h:352 net/core/dev.c:5251) 
[ 23.941626][ C0] net_tx_action (./include/net/sch_generic.h:217 ./include/net/pkt_sched.h:128 ./include/net/pkt_sched.h:124 net/core/dev.c:5267) 
[ 23.941841][ C0] __do_softirq (kernel/softirq.c:554) 
[ 23.941980][ C0] irq_exit_rcu (kernel/softirq.c:428 kernel/softirq.c:633 kernel/softirq.c:645) 
[ 23.942083][ C0] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043 arch/x86/kernel/apic/apic.c:1043) 
[   23.942219][    C0]  </IRQ>
[   23.942289][    C0]  <TASK>
[ 23.942357][ C0] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) 
[ 23.942604][ C0] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) 
[ 23.942781][ C0] Code: 10 e8 a1 f0 78 fd 48 89 ef e8 d9 60 79 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d 05 4c ed 7b <74> 0e 5b 5d c3 cc cc cc cc e8 ff c0 9c fd eb dc 0f 1f 44 00 00 5b
All code
========
   0:	10 e8                	adc    %ch,%al
   2:	a1 f0 78 fd 48 89 ef 	movabs 0xd9e8ef8948fd78f0,%eax
   9:	e8 d9 
   b:	60                   	(bad)
   c:	79 fd                	jns    0xb
   e:	81 e3 00 02 00 00    	and    $0x200,%ebx
  14:	75 1d                	jne    0x33
  16:	9c                   	pushf
  17:	58                   	pop    %rax
  18:	f6 c4 02             	test   $0x2,%ah
  1b:	75 29                	jne    0x46
  1d:	48 85 db             	test   %rbx,%rbx
  20:	74 01                	je     0x23
  22:	fb                   	sti
  23:	65 ff 0d 05 4c ed 7b 	decl   %gs:0x7bed4c05(%rip)        # 0x7bed4c2f
  2a:*	74 0e                	je     0x3a		<-- trapping instruction
  2c:	5b                   	pop    %rbx
  2d:	5d                   	pop    %rbp
  2e:	c3                   	ret
  2f:	cc                   	int3
  30:	cc                   	int3
  31:	cc                   	int3
  32:	cc                   	int3
  33:	e8 ff c0 9c fd       	call   0xfffffffffd9cc137
  38:	eb dc                	jmp    0x16
  3a:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  3f:	5b                   	pop    %rbx

Code starting with the faulting instruction
===========================================
   0:	74 0e                	je     0x10
   2:	5b                   	pop    %rbx
   3:	5d                   	pop    %rbp
   4:	c3                   	ret
   5:	cc                   	int3
   6:	cc                   	int3
   7:	cc                   	int3
   8:	cc                   	int3
   9:	e8 ff c0 9c fd       	call   0xfffffffffd9cc10d
   e:	eb dc                	jmp    0xffffffffffffffec
  10:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  15:	5b                   	pop    %rbx
[   23.943345][    C0] RSP: 0018:ffffc900005bfbd0 EFLAGS: 00000282
[   23.943517][    C0] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff0bb23a1
[   23.943719][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84167dd1
[   23.944001][    C0] RBP: ffff88800196e180 R08: 0000000000000001 R09: fffffbfff0bb2c22
[   23.944206][    C0] R10: ffffffff85d96117 R11: 0000000000000040 R12: ffff88800196e180
[   23.944486][    C0] R13: ffffea0000146e00 R14: ffff88800196b3c0 R15: ffff8880051bd7c0
[ 23.944690][ C0] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) 
[ 23.944860][ C0] get_partial_node.part.0 (mm/slub.c:2623) 
[ 23.944999][ C0] ___slab_alloc (mm/slub.c:2583 mm/slub.c:2701 mm/slub.c:3505) 
[ 23.945215][ C0] ? kmem_cache_alloc (./include/linux/sched/mm.h:315 mm/slub.c:3746 mm/slub.c:3827 mm/slub.c:3852) 
[ 23.945353][ C0] ? getname_flags (fs/namei.c:139) 
[ 23.945489][ C0] ? __pfx___lock_release (kernel/locking/lockdep.c:5406) 
[ 23.945627][ C0] ? getname_flags (fs/namei.c:139) 
[ 23.945842][ C0] ? kmem_cache_alloc (mm/slub.c:3610 mm/slub.c:3663 mm/slub.c:3835 mm/slub.c:3852) 
[ 23.945977][ C0] kmem_cache_alloc (mm/slub.c:3610 mm/slub.c:3663 mm/slub.c:3835 mm/slub.c:3852) 
[ 23.946115][ C0] getname_flags (fs/namei.c:139) 
[ 23.946250][ C0] do_sys_openat2 (fs/open.c:1400) 
[ 23.946461][ C0] ? vfs_fstatat (fs/stat.c:308) 
[ 23.946596][ C0] ? __pfx_do_sys_openat2 (fs/open.c:1392) 
[ 23.946734][ C0] ? __pfx___do_sys_newfstatat (fs/stat.c:464) 
[ 23.946870][ C0] __x64_sys_openat (fs/open.c:1432) 
[ 23.947013][ C0] ? __pfx___x64_sys_openat (fs/open.c:1432) 
[ 23.947328][ C0] ? __pfx_do_faccessat (fs/open.c:465) 
[ 23.947468][ C0] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 23.947608][ C0] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[   23.947780][    C0] RIP: 0033:0x7fb5a33970e8
[ 23.948007][ C0] Code: f9 41 89 f0 41 83 e2 40 75 30 89 f0 25 00 00 41 00 3d 00 00 41 00 74 22 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 30 c3 0f 1f 80 00 00 00 00 48 8d 44 24 08 c7
All code
========
   0:	f9                   	stc
   1:	41 89 f0             	mov    %esi,%r8d
   4:	41 83 e2 40          	and    $0x40,%r10d
   8:	75 30                	jne    0x3a
   a:	89 f0                	mov    %esi,%eax
   c:	25 00 00 41 00       	and    $0x410000,%eax
  11:	3d 00 00 41 00       	cmp    $0x410000,%eax
  16:	74 22                	je     0x3a
  18:	44 89 c2             	mov    %r8d,%edx
  1b:	4c 89 ce             	mov    %r9,%rsi
  1e:	bf 9c ff ff ff       	mov    $0xffffff9c,%edi
  23:	b8 01 01 00 00       	mov    $0x101,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 30                	ja     0x62
  32:	c3                   	ret
  33:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  3a:	48 8d 44 24 08       	lea    0x8(%rsp),%rax
  3f:	c7                   	.byte 0xc7

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 30                	ja     0x38
   8:	c3                   	ret
   9:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  10:	48 8d 44 24 08       	lea    0x8(%rsp),%rax
  15:	c7                   	.byte 0xc7
[   23.948500][    C0] RSP: 002b:00007ffe6ca08358 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
[   23.948704][    C0] RAX: ffffffffffffffda RBX: 00007ffe6ca085df RCX: 00007fb5a33970e8
[   23.948905][    C0] RDX: 0000000000080000 RSI: 00007ffe6ca083d0 RDI: 00000000ffffff9c
[   23.949190][    C0] RBP: 00007ffe6ca083c0 R08: 0000000000080000 R09: 00007ffe6ca083d0
[   23.949391][    C0] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffe6ca083d7


Finger prints:
dump_stack_lvl:kasan_report:kasan_check_range:sock_def_write_space_wfree
sock_def_write_space_wfree:sock_wfree:skb_release_head_state:consume_skb