==================================================================
BUG: KASAN: null-ptr-deref in skb_end_pointer include/linux/skbuff.h:1471 [inline]
BUG: KASAN: null-ptr-deref in skb_is_gso include/linux/skbuff.h:4623 [inline]
BUG: KASAN: null-ptr-deref in bstats_update include/net/sch_generic.h:863 [inline]
BUG: KASAN: null-ptr-deref in mini_qdisc_bstats_cpu_update include/net/sch_generic.h:1314 [inline]
BUG: KASAN: null-ptr-deref in sch_handle_ingress net/core/dev.c:4995 [inline]
BUG: KASAN: null-ptr-deref in __netif_receive_skb_core+0x111e/0x2730 net/core/dev.c:5211
Read of size 8 at addr 0000000000000005 by task kworker/1:0/2035

CPU: 1 PID: 2035 Comm: kworker/1:0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Workqueue: events netstamp_clear
Call Trace:
[<ffffffff8000a228>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113
[<ffffffff831668cc>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119
[<ffffffff831756ba>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106
[<ffffffff80474da6>] __kasan_report mm/kasan/report.c:446 [inline]
[<ffffffff80474da6>] kasan_report+0x1de/0x1e0 mm/kasan/report.c:459
[<ffffffff80475b20>] check_region_inline mm/kasan/generic.c:183 [inline]
[<ffffffff80475b20>] __asan_load8+0x6e/0x96 mm/kasan/generic.c:256
[<ffffffff8273bc06>] skb_end_pointer include/linux/skbuff.h:1471 [inline]
[<ffffffff8273bc06>] skb_is_gso include/linux/skbuff.h:4623 [inline]
[<ffffffff8273bc06>] bstats_update include/net/sch_generic.h:863 [inline]
[<ffffffff8273bc06>] mini_qdisc_bstats_cpu_update include/net/sch_generic.h:1314 [inline]
[<ffffffff8273bc06>] sch_handle_ingress net/core/dev.c:4995 [inline]
[<ffffffff8273bc06>] __netif_receive_skb_core+0x111e/0x2730 net/core/dev.c:5211
[<ffffffff8273d2cc>] __netif_receive_skb_one_core+0xb4/0x13a net/core/dev.c:5349
[<ffffffff8273d534>] __netif_receive_skb+0x36/0xd8 net/core/dev.c:5465
[<ffffffff8273e15e>] process_backlog+0x206/0x4bc net/core/dev.c:5797
[<ffffffff82740c14>] __napi_poll+0x7c/0x358 net/core/dev.c:6365
[<ffffffff827418a0>] napi_poll net/core/dev.c:6432 [inline]
[<ffffffff827418a0>] net_rx_action+0x5d0/0x702 net/core/dev.c:6519
[<ffffffff831b082c>] __do_softirq+0x274/0x8fc kernel/softirq.c:558
[<ffffffff80061288>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
[<ffffffff80061288>] invoke_softirq kernel/softirq.c:439 [inline]
[<ffffffff80061288>] __irq_exit_rcu+0x142/0x1f8 kernel/softirq.c:637
[<ffffffff80061596>] irq_exit+0x10/0x7a kernel/softirq.c:661
[<ffffffff831a1a2c>] generic_handle_arch_irq+0x48/0x54 kernel/irq/handle.c:240
[<ffffffff80005724>] ret_from_exception+0x0/0x10
[<ffffffff8034b210>] copy_to_kernel_nofault+0x1f8/0x2a8 mm/maccess.c:72
==================================================================
Unable to handle kernel paging request at virtual address fffff5ef1aeb5000
Oops [#1]
Modules linked in:
CPU: 1 PID: 2035 Comm: kworker/1:0 Tainted: G    B             5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Workqueue: events netstamp_clear
epc : bytes_is_nonzero mm/kasan/generic.c:85 [inline]
epc : memory_is_nonzero mm/kasan/generic.c:102 [inline]
epc : memory_is_poisoned_n mm/kasan/generic.c:128 [inline]
epc : memory_is_poisoned mm/kasan/generic.c:159 [inline]
epc : check_region_inline mm/kasan/generic.c:180 [inline]
epc : kasan_check_range+0x102/0x136 mm/kasan/generic.c:189
 ra : __kasan_check_write+0x14/0x1c mm/kasan/shadow.c:37
epc : ffffffff80475f7a ra : ffffffff8047658a sp : ffffaf800e987210
 gp : ffffffff85863ac0 tp : ffffaf800ce9e100 t0 : ffffffff86bcb657
 t1 : fffff5ef1aeb5001 t2 : 0000000000000000 s0 : ffffaf800e987220
 s1 : ffffaf800b89c000 a0 : fffff5ef1aeb5002 a1 : 0000000000000008
 a2 : 0000000000000001 a3 : ffffffff8273bc6e a4 : 0000000000000010
 a5 : fffff5ef1aeb5000 a6 : ffffaf80d75a8001 a7 : ffffaf80d75a8008
 s2 : ffffaf800f5f34c0 s3 : ffffaf80d75a8001 s4 : ffffaf800e9873c0
 s5 : ffffffff85889780 s6 : ffffaf800bcd6000 s7 : ffffaf805a9f5c90
 s8 : ffffffff8273e0b0 s9 : ffffaf800e9874a0 s10: 0000000000000000
 s11: ffffaf800e9874a0 t3 : 0000000061736944 t4 : fffff5ef1aeb5000
 t5 : fffff5ef1aeb5002 t6 : ffffaf800e986c58
status: 0000000000000120 badaddr: fffff5ef1aeb5000 cause: 000000000000000d
[<ffffffff8273bc6e>] instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
[<ffffffff8273bc6e>] atomic_long_add include/linux/atomic/atomic-instrumented.h:1294 [inline]
[<ffffffff8273bc6e>] u64_stats_add include/linux/u64_stats_sync.h:93 [inline]
[<ffffffff8273bc6e>] _bstats_update include/net/sch_generic.h:853 [inline]
[<ffffffff8273bc6e>] bstats_update include/net/sch_generic.h:861 [inline]
[<ffffffff8273bc6e>] mini_qdisc_bstats_cpu_update include/net/sch_generic.h:1314 [inline]
[<ffffffff8273bc6e>] sch_handle_ingress net/core/dev.c:4995 [inline]
[<ffffffff8273bc6e>] __netif_receive_skb_core+0x1186/0x2730 net/core/dev.c:5211
[<ffffffff8273d2cc>] __netif_receive_skb_one_core+0xb4/0x13a net/core/dev.c:5349
[<ffffffff8273d534>] __netif_receive_skb+0x36/0xd8 net/core/dev.c:5465
[<ffffffff8273e15e>] process_backlog+0x206/0x4bc net/core/dev.c:5797
[<ffffffff82740c14>] __napi_poll+0x7c/0x358 net/core/dev.c:6365
[<ffffffff827418a0>] napi_poll net/core/dev.c:6432 [inline]
[<ffffffff827418a0>] net_rx_action+0x5d0/0x702 net/core/dev.c:6519
[<ffffffff831b082c>] __do_softirq+0x274/0x8fc kernel/softirq.c:558
[<ffffffff80061288>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
[<ffffffff80061288>] invoke_softirq kernel/softirq.c:439 [inline]
[<ffffffff80061288>] __irq_exit_rcu+0x142/0x1f8 kernel/softirq.c:637
[<ffffffff80061596>] irq_exit+0x10/0x7a kernel/softirq.c:661
[<ffffffff831a1a2c>] generic_handle_arch_irq+0x48/0x54 kernel/irq/handle.c:240
[<ffffffff80005724>] ret_from_exception+0x0/0x10
[<ffffffff8034b210>] copy_to_kernel_nofault+0x1f8/0x2a8 mm/maccess.c:72
---[ end trace 0000000000000000 ]---