================================================================== BUG: KASAN: null-ptr-deref in skb_end_pointer include/linux/skbuff.h:1471 [inline] BUG: KASAN: null-ptr-deref in skb_is_gso include/linux/skbuff.h:4623 [inline] BUG: KASAN: null-ptr-deref in bstats_update include/net/sch_generic.h:863 [inline] BUG: KASAN: null-ptr-deref in mini_qdisc_bstats_cpu_update include/net/sch_generic.h:1314 [inline] BUG: KASAN: null-ptr-deref in sch_handle_ingress net/core/dev.c:4995 [inline] BUG: KASAN: null-ptr-deref in __netif_receive_skb_core+0x111e/0x2730 net/core/dev.c:5211 Read of size 8 at addr 0000000000000000 by task ksoftirqd/1/19 CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119 [] __dump_stack lib/dump_stack.c:88 [inline] [] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106 [] __kasan_report mm/kasan/report.c:446 [inline] [] kasan_report+0x1de/0x1e0 mm/kasan/report.c:459 [] check_region_inline mm/kasan/generic.c:183 [inline] [] __asan_load8+0x6e/0x96 mm/kasan/generic.c:256 [] skb_end_pointer include/linux/skbuff.h:1471 [inline] [] skb_is_gso include/linux/skbuff.h:4623 [inline] [] bstats_update include/net/sch_generic.h:863 [inline] [] mini_qdisc_bstats_cpu_update include/net/sch_generic.h:1314 [inline] [] sch_handle_ingress net/core/dev.c:4995 [inline] [] __netif_receive_skb_core+0x111e/0x2730 net/core/dev.c:5211 [] __netif_receive_skb_one_core+0xb4/0x13a net/core/dev.c:5349 [] __netif_receive_skb+0x36/0xd8 net/core/dev.c:5465 [] process_backlog+0x206/0x4bc net/core/dev.c:5797 [] __napi_poll+0x7c/0x358 net/core/dev.c:6365 [] napi_poll net/core/dev.c:6432 [inline] [] net_rx_action+0x5d0/0x702 net/core/dev.c:6519 [] __do_softirq+0x274/0x8fc kernel/softirq.c:558 [] run_ksoftirqd kernel/softirq.c:921 [inline] [] run_ksoftirqd+0x8c/0xc0 kernel/softirq.c:913 [] smpboot_thread_fn+0x448/0x6cc kernel/smpboot.c:164 [] kthread+0x19e/0x1fa kernel/kthread.c:377 [] ret_from_exception+0x0/0x10 ================================================================== Unable to handle kernel paging request at virtual address fffff5ef1aeb5000 Oops [#1] Modules linked in: CPU: 1 PID: 19 Comm: ksoftirqd/1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) epc : bytes_is_nonzero mm/kasan/generic.c:85 [inline] epc : memory_is_nonzero mm/kasan/generic.c:102 [inline] epc : memory_is_poisoned_n mm/kasan/generic.c:128 [inline] epc : memory_is_poisoned mm/kasan/generic.c:159 [inline] epc : check_region_inline mm/kasan/generic.c:180 [inline] epc : kasan_check_range+0x102/0x136 mm/kasan/generic.c:189 ra : __kasan_check_write+0x14/0x1c mm/kasan/shadow.c:37 epc : ffffffff80475f7a ra : ffffffff8047658a sp : ffffaf800743b7d0 gp : ffffffff85863ac0 tp : ffffaf8007416100 t0 : ffffffff86bcb657 t1 : fffff5ef1aeb5001 t2 : 0000000000000000 s0 : ffffaf800743b7e0 s1 : ffffaf8007f8b000 a0 : fffff5ef1aeb5002 a1 : 0000000000000008 a2 : 0000000000000001 a3 : ffffffff8273bc6e a4 : 0000000000000010 a5 : fffff5ef1aeb5000 a6 : ffffaf80d75a8002 a7 : ffffaf80d75a8009 s2 : ffffaf800c7620c0 s3 : ffffaf80d75a8002 s4 : ffffaf800743b980 s5 : ffffffff85889780 s6 : ffffaf80091ee000 s7 : ffffaf805a9f5c90 s8 : ffffffff8273e0b0 s9 : ffffaf800743ba60 s10: 0000000000000000 s11: ffffaf800743ba60 t3 : 0000000061736944 t4 : fffff5ef1aeb5000 t5 : fffff5ef1aeb5002 t6 : ffffaf800743b218 status: 0000000000000120 badaddr: fffff5ef1aeb5000 cause: 000000000000000d [] instrument_atomic_read_write include/linux/instrumented.h:101 [inline] [] atomic_long_add include/linux/atomic/atomic-instrumented.h:1294 [inline] [] u64_stats_add include/linux/u64_stats_sync.h:93 [inline] [] _bstats_update include/net/sch_generic.h:853 [inline] [] bstats_update include/net/sch_generic.h:861 [inline] [] mini_qdisc_bstats_cpu_update include/net/sch_generic.h:1314 [inline] [] sch_handle_ingress net/core/dev.c:4995 [inline] [] __netif_receive_skb_core+0x1186/0x2730 net/core/dev.c:5211 [] __netif_receive_skb_one_core+0xb4/0x13a net/core/dev.c:5349 [] __netif_receive_skb+0x36/0xd8 net/core/dev.c:5465 [] process_backlog+0x206/0x4bc net/core/dev.c:5797 [] __napi_poll+0x7c/0x358 net/core/dev.c:6365 [] napi_poll net/core/dev.c:6432 [inline] [] net_rx_action+0x5d0/0x702 net/core/dev.c:6519 [] __do_softirq+0x274/0x8fc kernel/softirq.c:558 [] run_ksoftirqd kernel/softirq.c:921 [inline] [] run_ksoftirqd+0x8c/0xc0 kernel/softirq.c:913 [] smpboot_thread_fn+0x448/0x6cc kernel/smpboot.c:164 [] kthread+0x19e/0x1fa kernel/kthread.c:377 [] ret_from_exception+0x0/0x10 ---[ end trace 0000000000000000 ]---