BUG: unable to handle page fault for address: ffffc90000ca0030 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 10000067 P4D 10000067 PUD 101b1067 PMD 10aa1067 PTE 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.10.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: phy7 ieee80211_iface_work RIP: 0010:bpf_dispatcher_nop_func include/linux/bpf.h:644 [inline] RIP: 0010:__bpf_trace_run kernel/trace/bpf_trace.c:2045 [inline] RIP: 0010:bpf_trace_run2+0x12e/0x3d0 kernel/trace/bpf_trace.c:2082 Code: f7 ff 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 8e 02 00 00 48 8d 73 38 48 8d 7c 24 28 53 30 e8 0a 30 f7 ff e8 75 9e 6b 07 31 ff 89 c3 89 c6 e8 4a 28 RSP: 0018:ffffc90000dbfb60 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffffc90000ca0000 RCX: ffffffff8178db98 RDX: 0000000000000000 RSI: ffffc90000ca0038 RDI: ffffc90000dbfb88 RBP: 1ffff920001b7f6d R08: 0000000000000000 R09: ffffffff8ebac667 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888012b20140 R14: 0000000000000080 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90000ca0030 CR3: 000000002fd63000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __bpf_trace_kfree_skb+0xb1/0xe0 include/trace/events/skb.h:15 trace_kfree_skb include/trace/events/skb.h:15 [inline] kfree_skb net/core/skbuff.c:695 [inline] kfree_skb+0x210/0x3f0 net/core/skbuff.c:690 ieee80211_iface_work+0x2d7/0x970 net/mac80211/iface.c:1467 process_one_work+0x933/0x15a0 kernel/workqueue.c:2272 worker_thread+0x64c/0x1120 kernel/workqueue.c:2418 kthread+0x3af/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 Modules linked in: CR2: ffffc90000ca0030 ---[ end trace 5f2f58ba352f40ab ]--- RIP: 0010:bpf_dispatcher_nop_func include/linux/bpf.h:644 [inline] RIP: 0010:__bpf_trace_run kernel/trace/bpf_trace.c:2045 [inline] RIP: 0010:bpf_trace_run2+0x12e/0x3d0 kernel/trace/bpf_trace.c:2082 Code: f7 ff 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 8e 02 00 00 48 8d 73 38 48 8d 7c 24 28 53 30 e8 0a 30 f7 ff e8 75 9e 6b 07 31 ff 89 c3 89 c6 e8 4a 28 RSP: 0018:ffffc90000dbfb60 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffffc90000ca0000 RCX: ffffffff8178db98 RDX: 0000000000000000 RSI: ffffc90000ca0038 RDI: ffffc90000dbfb88 RBP: 1ffff920001b7f6d R08: 0000000000000000 R09: ffffffff8ebac667 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888012b20140 R14: 0000000000000080 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90000ca0030 CR3: 000000002fd63000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400