Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue:  css_release_work_fn (cgroup_release)
RIP: 0010:process_one_work+0x4ad/0x19c0
Code: 3c 03 0f 8e 11 11 00 00 48 8b 04 24 44 89 73 30 48 83 c0 08 48 89 c2 48 89 44 24 28 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 07 14 00 00 48 8b 04 24 be 20 00 00 00 48 8b 40
RSP: 0018:ffff88800974fc80 EFLAGS: 00010012
RAX: dffffc0000000000 RBX: ffff88800956af00 RCX: ffffffff8141a1e4
RDX: 0000000000000001 RSI: ffffffff8141a3f2 RDI: ffff88800956af28
RBP: ffff8880189dc060 R08: 0000000000000000 R09: ffffed100313b80c
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806cf35e00
R13: ffff88806cf35e4c R14: 0000000000000000 R15: ffff88806cf36000
FS:  0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff0b5d8000 CR3: 000000000fbad000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 worker_thread+0x67e/0xe90
 kthread+0x3c8/0x740
 ret_from_fork+0x34b/0x430
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:process_one_work+0x4ad/0x19c0
Code: 3c 03 0f 8e 11 11 00 00 48 8b 04 24 44 89 73 30 48 83 c0 08 48 89 c2 48 89 44 24 28 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 07 14 00 00 48 8b 04 24 be 20 00 00 00 48 8b 40
RSP: 0018:ffff88800974fc80 EFLAGS: 00010012
RAX: dffffc0000000000 RBX: ffff88800956af00 RCX: ffffffff8141a1e4
RDX: 0000000000000001 RSI: ffffffff8141a3f2 RDI: ffff88800956af28
RBP: ffff8880189dc060 R08: 0000000000000000 R09: ffffed100313b80c
R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806cf35e00
R13: ffff88806cf35e4c R14: 0000000000000000 R15: ffff88806cf36000
FS:  0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff0b5d8000 CR3: 000000000fbad000 CR4: 0000000000350ef0
note: kworker/1:0[23] exited with irqs disabled
note: kworker/1:0[23] exited with preempt_count 1
----------------
Code disassembly (best guess):
   0:	3c 03                	cmp    $0x3,%al
   2:	0f 8e 11 11 00 00    	jle    0x1119
   8:	48 8b 04 24          	mov    (%rsp),%rax
   c:	44 89 73 30          	mov    %r14d,0x30(%rbx)
  10:	48 83 c0 08          	add    $0x8,%rax
  14:	48 89 c2             	mov    %rax,%rdx
  17:	48 89 44 24 28       	mov    %rax,0x28(%rsp)
  1c:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  23:	fc ff df
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1) <-- trapping instruction
  2e:	0f 85 07 14 00 00    	jne    0x143b
  34:	48 8b 04 24          	mov    (%rsp),%rax
  38:	be 20 00 00 00       	mov    $0x20,%esi
  3d:	48                   	rex.W
  3e:	8b                   	.byte 0x8b
  3f:	40                   	rex