[regression] BUG: KASAN: use-after-free in lockdep_register_key+0x755/0x8f0

[Kalle Valo <kvalo@kernel.org>]

Hi,

Yesterday I run our ath11k regression tests with v6.10-rc1 and our
simple ath11k module reload stress started failing reliably with various
KASAN errors. The test removes and inserts ath11k and other wireless
modules in a loop. Usually I run it at least 100 times, some times even
more, and no issues until yesterday.

I have verified that the last wireless-next pull request (tag
wireless-next-2024-05-08) works without issues and v6.10-rc1 fails
always, usually within 50 module reload loops. From this I'm _guessing_
that we have a regression outside wireless, most probably introduced
between v6.9 and v6.10-rc1. But of course I cannot be sure of anything
yet.

I see different KASAN warnings and lockdep seems to be always visible in
the stack traces. I think I can reproduce the issue within 15 minutes or
so. Before I start bisecting has anyone else seen anything similar? Or
any suggestions how to debug this further?

I have included some crash logs below, they are retrieved using
netconsole. Here's a summary of the errors:

[  159.970765] KASAN: maybe wild-memory-access in range [0xbbbbbbbbbbbbbbb8-0xbbbbbbbbbbbbbbbf]
[  700.017632] BUG: KASAN: use-after-free in lockdep_register_key+0x755/0x8f0
[  224.695821] BUG: KASAN: slab-out-of-bounds in lockdep_register_key+0x755/0x8f0
[  259.666542] BUG: KASAN: slab-use-after-free in lockdep_register_key+0x755/0x8f0

Kalle

Crash 1:

[  159.952138] ath11k_pci 0000:06:00.0: wcn6855 hw2.0
[  159.970683] Oops: general protection fault, probably for non-canonical address 0xf777737777777777: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
[  159.970765] KASAN: maybe wild-memory-access in range [0xbbbbbbbbbbbbbbb8-0xbbbbbbbbbbbbbbbf]
[  159.970839] CPU: 0 PID: 1182 Comm: insmod Not tainted 6.10.0-rc1 #1547
[  159.970909] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  159.971000] RIP: 0010:lockdep_register_key+0x1c8/0x8f0
[  159.971082] Code: 05 00 00 48 8b 1c cd 60 45 3c af 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 <80> 3c 30 00 0f 85 74 05 00 00 48 8b 1b 48 85 db 0f 84 ff 01 00 00
[  159.971199] RSP: 0018:ffffc900013d74e0 EFLAGS: 00010806
[  159.971263] RAX: 1777777777777777 RBX: bbbbbbbbbbbbbbbb RCX: 00000000000009f2
[  159.971318] RDX: ffffffff9ea1ceb8 RSI: dffffc0000000000 RDI: ffffc900013d7518
[  159.971370] RBP: ffffc900013d7580 R08: 0000000000000001 R09: fffff5200027aea3
[  159.971421] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888138b8c438
[  159.971471] R13: 1ffff9200027ae9f R14: dffffc0000000000 R15: ffffffffaf5cf9c0
[  159.971523] FS:  00007f1f2ed81740(0000) GS:ffff888231800000(0000) knlGS:0000000000000000
[  159.971577] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  159.971624] CR2: 0000558d3b24e308 CR3: 000000012eb03002 CR4: 00000000003706f0
[  159.971674] Call Trace:
[  159.971712]  <TASK>
[  159.971748]  ? show_regs+0x5b/0x70
[  159.971791]  ? die_addr+0x3c/0xa0
[  159.971832]  ? exc_general_protection+0x150/0x230
[  159.971879]  ? asm_exc_general_protection+0x27/0x30
[  159.971971]  ? lockdep_register_key+0x1c8/0x8f0
[  159.972018]  ? save_trace+0x720/0x720
[  159.972059]  ? dma_alloc_attrs+0x145/0x1d0
[  159.972102]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  159.972173]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  159.972224]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  159.972272]  ? __this_cpu_preempt_check+0x13/0x20
[  159.972320]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  159.972367]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  159.972415]  local_pci_probe+0xd6/0x180
[  159.972458]  pci_call_probe+0x152/0x3f0
[  159.972500]  ? __kasan_check_read+0x11/0x20
[  159.972544]  ? pci_pm_suspend_late+0x40/0x40
[  159.972589]  ? pci_match_device+0x380/0x660
[  159.972634]  pci_device_probe+0xa6/0x100
[  159.972675]  really_probe+0x1d5/0x920
[  159.972717]  __driver_probe_device+0x2e8/0x3f0
[  159.972761]  driver_probe_device+0x4a/0x140
[  159.972803]  __driver_attach+0x1ed/0x4c0
[  159.972844]  ? __device_attach_driver+0x290/0x290
[  159.972906]  bus_for_each_dev+0xf5/0x180
[  159.972961]  ? bus_remove_file+0x40/0x40
[  159.973002]  ? _raw_spin_unlock+0x27/0x50
[  159.973044]  driver_attach+0x38/0x50
[  159.973084]  bus_add_driver+0x29b/0x5e0
[  159.973137]  driver_register+0x130/0x450
[  159.973182]  __pci_register_driver+0x1d2/0x270
[  159.973226]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  159.973276]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  159.973325]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  159.973373]  do_one_initcall+0xdf/0x500
[  159.974122]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  159.974832]  ? kasan_save_alloc_info+0x37/0x40
[  159.975560]  ? __kasan_kmalloc+0x90/0xa0
[  159.976287]  ? kasan_unpoison+0x45/0x70
[  159.977027]  ? kasan_poison+0x3a/0x50
[  159.977713]  ? __asan_register_globals+0x5e/0x70
[  159.978436]  do_init_module+0x23f/0x6c0
[  159.979160]  load_module+0x11e3/0x1aa0
[  159.979833]  init_module_from_file+0xe4/0x140
[  159.980539]  ? __ia32_sys_init_module+0xa0/0xa0
[  159.981260]  ? __kasan_check_read+0x11/0x20
[  159.982011]  ? do_raw_spin_unlock+0x54/0x220
[  159.982653]  idempotent_init_module+0x265/0x750
[  159.983322]  ? init_module_from_file+0x140/0x140
[  159.983987]  ? __kasan_check_read+0x11/0x20
[  159.984593]  __x64_sys_finit_module+0xbb/0x130
[  159.985221]  x64_sys_call+0x1c5/0x9e0
[  159.985784]  do_syscall_64+0x64/0x130
[  159.986375]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  159.986974] RIP: 0033:0x7f1f2eec795d
[  159.987558] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  159.988707] RSP: 002b:00007fff06ddf4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  159.989325] RAX: ffffffffffffffda RBX: 000055f0e42647c0 RCX: 00007f1f2eec795d
[  159.989921] RDX: 0000000000000000 RSI: 000055f0ba5e2358 RDI: 0000000000000003
[  159.990521] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1f2ef9e580
[  159.991138] R10: 0000000000000003 R11: 0000000000000246 R12: 000055f0ba5e2358
[  159.991699] R13: 0000000000000000 R14: 000055f0e4264790 R15: 0000000000000000
[  159.992317]  </TASK>
[  159.992876] Modules linked in: ath11k_pci(+) ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core
[  159.993568] ---[ end trace 0000000000000000 ]---
[  160.131323] RIP: 0010:lockdep_register_key+0x1c8/0x8f0
[  160.131999] Code: 05 00 00 48 8b 1c cd 60 45 3c af 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 <80> 3c 30 00 0f 85 74 05 00 00 48 8b 1b 48 85 db 0f 84 ff 01 00 00
[  160.133318] RSP: 0018:ffffc900013d74e0 EFLAGS: 00010806
[  160.134034] RAX: 1777777777777777 RBX: bbbbbbbbbbbbbbbb RCX: 00000000000009f2
[  160.134705] RDX: ffffffff9ea1ceb8 RSI: dffffc0000000000 RDI: ffffc900013d7518
[  160.135417] RBP: ffffc900013d7580 R08: 0000000000000001 R09: fffff5200027aea3
[  160.136136] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888138b8c438
[  160.136809] R13: 1ffff9200027ae9f R14: dffffc0000000000 R15: ffffffffaf5cf9c0
[  160.137519] FS:  00007f1f2ed81740(0000) GS:ffff888231800000(0000) knlGS:0000000000000000
[  160.138248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.138954] CR2: 0000558d3b24e308 CR3: 000000012eb03002 CR4: 00000000003706f0
[  160.139671] Kernel panic - not syncing: Fatal exception
[  160.140435] Kernel Offset: 0x18e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

Crash 2:

[  699.996725] ath11k_pci 0000:06:00.0: wcn6855 hw2.0
[  700.016765] ==================================================================
[  700.017632] BUG: KASAN: use-after-free in lockdep_register_key+0x755/0x8f0
[  700.018501] Read of size 8 at addr ffff88810fe71870 by task insmod/9675
[  700.019375] 
[  700.020249] CPU: 3 PID: 9675 Comm: insmod Not tainted 6.10.0-rc1 #1543
[  700.021138] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  700.022040] Call Trace:
[  700.022878]  <TASK>
[  700.023696]  dump_stack_lvl+0x7d/0xe0
[  700.024549]  print_address_description.constprop.0+0x33/0x3a0
[  700.025412]  print_report+0xb5/0x260
[  700.026258]  ? kasan_addr_to_slab+0x24/0x80
[  700.027108]  kasan_report+0xd8/0x110
[  700.027950]  ? lockdep_register_key+0x755/0x8f0
[  700.028748]  ? lockdep_register_key+0x755/0x8f0
[  700.029585]  __asan_report_load8_noabort+0x14/0x20
[  700.030427]  lockdep_register_key+0x755/0x8f0
[  700.031239]  ? save_trace+0x720/0x720
[  700.032027]  ? dma_alloc_attrs+0x145/0x1d0
[  700.032780]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  700.033601]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  700.034399]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  700.035223]  ? __this_cpu_preempt_check+0x13/0x20
[  700.036029]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  700.036782]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  700.037570]  local_pci_probe+0xd6/0x180
[  700.038351]  pci_call_probe+0x152/0x3f0
[  700.039402]  ? __kasan_check_read+0x11/0x20
[  700.040800]  ? pci_pm_suspend_late+0x40/0x40
[  700.041576]  ? pci_match_device+0x380/0x660
[  700.042352]  pci_device_probe+0xa6/0x100
[  700.043127]  really_probe+0x1d5/0x920
[  700.043878]  __driver_probe_device+0x2e8/0x3f0
[  700.044609]  driver_probe_device+0x4a/0x140
[  700.045356]  __driver_attach+0x1ed/0x4c0
[  700.046082]  ? __device_attach_driver+0x290/0x290
[  700.046745]  bus_for_each_dev+0xf5/0x180
[  700.047472]  ? bus_remove_file+0x40/0x40
[  700.048198]  ? _raw_spin_unlock+0x27/0x50
[  700.048911]  driver_attach+0x38/0x50
[  700.050381]  bus_add_driver+0x29b/0x5e0
[  700.051097]  driver_register+0x130/0x450
[  700.051746]  __pci_register_driver+0x1d2/0x270
[  700.052450]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  700.053159]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  700.053789]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  700.054488]  do_one_initcall+0xdf/0x500
[  700.055183]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  700.055829]  ? kasan_save_alloc_info+0x37/0x40
[  700.056534]  ? __kasan_kmalloc+0x90/0xa0
[  700.057218]  ? kasan_unpoison+0x45/0x70
[  700.057834]  ? kasan_poison+0x3a/0x50
[  700.058465]  ? __asan_register_globals+0x5e/0x70
[  700.059115]  do_init_module+0x23f/0x6c0
[  700.059717]  load_module+0x11e3/0x1aa0
[  700.060373]  init_module_from_file+0xe4/0x140
[  700.061034]  ? __ia32_sys_init_module+0xa0/0xa0
[  700.061631]  ? __kasan_check_read+0x11/0x20
[  700.062277]  ? do_raw_spin_unlock+0x54/0x220
[  700.062882]  idempotent_init_module+0x265/0x750
[  700.063486]  ? init_module_from_file+0x140/0x140
[  700.064116]  ? __kasan_check_read+0x11/0x20
[  700.064671]  __x64_sys_finit_module+0xbb/0x130
[  700.065294]  x64_sys_call+0x1c5/0x9e0
[  700.065878]  do_syscall_64+0x64/0x130
[  700.066450]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  700.067059] RIP: 0033:0x7f1039e4195d
[  700.067603] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  700.068785] RSP: 002b:00007ffc40b5d918 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  700.069418] RAX: ffffffffffffffda RBX: 00005609ae2a57c0 RCX: 00007f1039e4195d
[  700.070063] RDX: 0000000000000000 RSI: 00005609a145c358 RDI: 0000000000000003
[  700.070643] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1039f18580
[  700.071282] R10: 0000000000000003 R11: 0000000000000246 R12: 00005609a145c358
[  700.071885] R13: 0000000000000000 R14: 00005609ae2a5790 R15: 0000000000000000
[  700.072492]  </TASK>
[  700.073129] 
[  700.073695] The buggy address belongs to the physical page:
[  700.074336] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x10fe71
[  700.074997] flags: 0x200000000000000(node=0|zone=2)
[  700.075591] raw: 0200000000000000 dead000000000100 dead000000000122 0000000000000000
[  700.076256] raw: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  700.076889] page dumped because: kasan: bad access detected
[  700.077521] 
[  700.078177] Memory state around the buggy address:
[  700.078782]  ffff88810fe71700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  700.079458]  ffff88810fe71780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  700.080129] >ffff88810fe71800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  700.080730]                                                              ^
[  700.081393]  ffff88810fe71880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  700.082069]  ffff88810fe71900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  700.082675] ==================================================================
[  700.083351] Disabling lock debugging due to kernel taint
[  700.084030] BUG: unable to handle page fault for address: ffff88810fe71870
[  700.084657] #PF: supervisor read access in kernel mode
[  700.085341] #PF: error_code(0x0000) - not-present page
[  700.086027] PGD 24be01067 P4D 24be01067 PUD 27ea1a067 PMD 27e99a067 PTE 800ffffef018e060
[  700.086677] Oops: Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
[  700.087380] CPU: 3 PID: 9675 Comm: insmod Tainted: G    B              6.10.0-rc1 #1543
[  700.088094] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  700.088777] RIP: 0010:lockdep_register_key+0x1d2/0x8f0
[  700.089511] Code: a6 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 80 3c 30 00 0f 85 74 05 00 00 <48> 8b 1b 48 85 db 0f 84 ff 01 00 00 49 39 dc 75 de 0f 0b 48 b8 00
[  700.091027] RSP: 0018:ffffc90001f974e0 EFLAGS: 00010082
[  700.091752] RAX: 0000000000000001 RBX: ffff88810fe71870 RCX: 0000000000000a51
[  700.092539] RDX: ffffffff9601ceb8 RSI: dffffc0000000000 RDI: ffffffff96498420
[  700.093360] RBP: ffffc90001f97580 R08: 0000000000000001 R09: fffffbfff2c93084
[  700.094152] R10: ffffffff96498427 R11: 0000000000000001 R12: ffff88812ef4bf58
[  700.094957] R13: 1ffff920003f2e9f R14: dffffc0000000000 R15: ffffffffa6bcf9c0
[  700.096987] FS:  00007f1039cfb740(0000) GS:ffff88821c400000(0000) knlGS:0000000000000000
[  700.097743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  700.098533] CR2: ffff88810fe71870 CR3: 000000011139b001 CR4: 00000000003706f0
[  700.099351] Call Trace:
[  700.100155]  <TASK>
[  700.100984]  ? show_regs+0x5b/0x70
[  700.101742]  ? __die+0x1f/0x60
[  700.102546]  ? page_fault_oops+0x121/0x260
[  700.103351]  ? show_fault_oops+0x6e0/0x6e0
[  700.104153]  ? search_module_extables+0xb5/0xf0
[  700.104942]  ? lockdep_register_key+0x1d2/0x8f0
[  700.105686]  ? search_exception_tables+0x4a/0x50
[  700.106490]  ? fixup_exception+0x48/0x8e0
[  700.107292]  ? vprintk+0x29/0x30
[  700.108092]  ? kernelmode_fixup_or_oops.isra.0+0x7a/0x90
[  700.108864]  ? __bad_area_nosemaphore+0x256/0x580
[  700.109628]  ? trace_irq_disable+0x3d/0x140
[  700.110438]  ? bad_area_nosemaphore+0x11/0x20
[  700.111240]  ? do_kern_addr_fault+0xa7/0xc0
[  700.112052]  ? exc_page_fault+0xbc/0xc0
[  700.112798]  ? asm_exc_page_fault+0x27/0x30
[  700.113602]  ? lockdep_register_key+0x1d2/0x8f0
[  700.114386]  ? save_trace+0x720/0x720
[  700.115146]  ? dma_alloc_attrs+0x145/0x1d0
[  700.115914]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  700.116630]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  700.117366]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  700.118119]  ? __this_cpu_preempt_check+0x13/0x20
[  700.118816]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  700.119565]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  700.120315]  local_pci_probe+0xd6/0x180
[  700.121055]  pci_call_probe+0x152/0x3f0
[  700.121742]  ? __kasan_check_read+0x11/0x20
[  700.122482]  ? pci_pm_suspend_late+0x40/0x40
[  700.123216]  ? pci_match_device+0x380/0x660
[  700.123944]  pci_device_probe+0xa6/0x100
[  700.124613]  really_probe+0x1d5/0x920
[  700.125332]  __driver_probe_device+0x2e8/0x3f0
[  700.126047]  driver_probe_device+0x4a/0x140
[  700.126705]  __driver_attach+0x1ed/0x4c0
[  700.127412]  ? __device_attach_driver+0x290/0x290
[  700.128126]  bus_for_each_dev+0xf5/0x180
[  700.128789]  ? bus_remove_file+0x40/0x40
[  700.129499]  ? _raw_spin_unlock+0x27/0x50
[  700.130204]  driver_attach+0x38/0x50
[  700.130895]  bus_add_driver+0x29b/0x5e0
[  700.131556]  driver_register+0x130/0x450
[  700.132252]  __pci_register_driver+0x1d2/0x270
[  700.132943]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  700.133581]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  700.134269]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  700.134949]  do_one_initcall+0xdf/0x500
[  700.135562]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  700.136235]  ? kasan_save_alloc_info+0x37/0x40
[  700.136874]  ? __kasan_kmalloc+0x90/0xa0
[  700.137483]  ? kasan_unpoison+0x45/0x70
[  700.138102]  ? kasan_poison+0x3a/0x50
[  700.138647]  ? __asan_register_globals+0x5e/0x70
[  700.139241]  do_init_module+0x23f/0x6c0
[  700.139782]  load_module+0x11e3/0x1aa0
[  700.140371]  init_module_from_file+0xe4/0x140
[  700.140953]  ? __ia32_sys_init_module+0xa0/0xa0
[  700.141479]  ? __kasan_check_read+0x11/0x20
[  700.142057]  ? do_raw_spin_unlock+0x54/0x220
[  700.142572]  idempotent_init_module+0x265/0x750
[  700.143137]  ? init_module_from_file+0x140/0x140
[  700.143647]  ? __kasan_check_read+0x11/0x20
[  700.144198]  __x64_sys_finit_module+0xbb/0x130
[  700.144699]  x64_sys_call+0x1c5/0x9e0
[  700.145254]  do_syscall_64+0x64/0x130
[  700.145754]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  700.146319] RIP: 0033:0x7f1039e4195d
[  700.146831] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  700.148018] RSP: 002b:00007ffc40b5d918 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  700.148592] RAX: ffffffffffffffda RBX: 00005609ae2a57c0 RCX: 00007f1039e4195d
[  700.149210] RDX: 0000000000000000 RSI: 00005609a145c358 RDI: 0000000000000003
[  700.149789] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1039f18580
[  700.150421] R10: 0000000000000003 R11: 0000000000000246 R12: 00005609a145c358
[  700.151053] R13: 0000000000000000 R14: 00005609ae2a5790 R15: 0000000000000000
[  700.151632]  </TASK>
[  700.152261] Modules linked in: ath11k_pci(+) ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core [last unloaded: mhi]
[  700.152949] CR2: ffff88810fe71870
[  700.153555] ---[ end trace 0000000000000000 ]---
[  700.288393] RIP: 0010:lockdep_register_key+0x1d2/0x8f0
[  700.289147] Code: a6 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 80 3c 30 00 0f 85 74 05 00 00 <48> 8b 1b 48 85 db 0f 84 ff 01 00 00 49 39 dc 75 de 0f 0b 48 b8 00
[  700.290484] RSP: 0018:ffffc90001f974e0 EFLAGS: 00010082
[  700.291200] RAX: 0000000000000001 RBX: ffff88810fe71870 RCX: 0000000000000a51
[  700.291909] RDX: ffffffff9601ceb8 RSI: dffffc0000000000 RDI: ffffffff96498420
[  700.292591] RBP: ffffc90001f97580 R08: 0000000000000001 R09: fffffbfff2c93084
[  700.293315] R10: ffffffff96498427 R11: 0000000000000001 R12: ffff88812ef4bf58
[  700.294029] R13: 1ffff920003f2e9f R14: dffffc0000000000 R15: ffffffffa6bcf9c0
[  700.294698] FS:  00007f1039cfb740(0000) GS:ffff88821c400000(0000) knlGS:0000000000000000
[  700.295430] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  700.296162] CR2: ffff88810fe71870 CR3: 000000011139b001 CR4: 00000000003706f0
[  700.296877] Kernel panic - not syncing: Fatal exception
[  700.297623] Kernel Offset: 0x10400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

Crash 3:

[  224.681700] ath11k_pci 0000:06:00.0: wcn6855 hw2.0
[  224.695019] ==================================================================
[  224.695821] BUG: KASAN: slab-out-of-bounds in lockdep_register_key+0x755/0x8f0
[  224.696644] Read of size 8 at addr ffff88810d771870 by task insmod/3533
[  224.697486] 
[  224.698323] CPU: 5 PID: 3533 Comm: insmod Not tainted 6.10.0-rc1 #1543
[  224.699188] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  224.700074] Call Trace:
[  224.700962]  <TASK>
[  224.701776]  dump_stack_lvl+0x7d/0xe0
[  224.702620]  print_address_description.constprop.0+0x33/0x3a0
[  224.703468]  print_report+0xb5/0x260
[  224.704363]  ? kasan_complete_mode_report_info+0x64/0x1a0
[  224.705205]  kasan_report+0xd8/0x110
[  224.706077]  ? lockdep_register_key+0x755/0x8f0
[  224.706929]  ? lockdep_register_key+0x755/0x8f0
[  224.707736]  __asan_report_load8_noabort+0x14/0x20
[  224.708576]  lockdep_register_key+0x755/0x8f0
[  224.709397]  ? save_trace+0x720/0x720
[  224.710199]  ? dma_alloc_attrs+0x145/0x1d0
[  224.711034]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  224.711848]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  224.712649]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.713461]  ? __this_cpu_preempt_check+0x13/0x20
[  224.714270]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  224.715078]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.715900]  local_pci_probe+0xd6/0x180
[  224.716658]  pci_call_probe+0x152/0x3f0
[  224.717437]  ? __kasan_check_read+0x11/0x20
[  224.718216]  ? pci_pm_suspend_late+0x40/0x40
[  224.719007]  ? pci_match_device+0x380/0x660
[  224.719749]  pci_device_probe+0xa6/0x100
[  224.720553]  really_probe+0x1d5/0x920
[  224.721309]  __driver_probe_device+0x2e8/0x3f0
[  224.722059]  driver_probe_device+0x4a/0x140
[  224.722741]  __driver_attach+0x1ed/0x4c0
[  224.723461]  ? __device_attach_driver+0x290/0x290
[  224.724177]  bus_for_each_dev+0xf5/0x180
[  224.724878]  ? bus_remove_file+0x40/0x40
[  224.725542]  ? _raw_spin_unlock+0x27/0x50
[  224.726258]  driver_attach+0x38/0x50
[  224.726966]  bus_add_driver+0x29b/0x5e0
[  224.727616]  driver_register+0x130/0x450
[  224.728314]  __pci_register_driver+0x1d2/0x270
[  224.729009]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.729651]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.730334]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  224.731019]  do_one_initcall+0xdf/0x500
[  224.731649]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  224.732338]  ? kasan_save_alloc_info+0x37/0x40
[  224.733025]  ? __kasan_kmalloc+0x90/0xa0
[  224.733652]  ? kasan_unpoison+0x45/0x70
[  224.734312]  ? kasan_poison+0x3a/0x50
[  224.734946]  ? __asan_register_globals+0x5e/0x70
[  224.735535]  do_init_module+0x23f/0x6c0
[  224.736174]  load_module+0x11e3/0x1aa0
[  224.736764]  init_module_from_file+0xe4/0x140
[  224.737408]  ? __ia32_sys_init_module+0xa0/0xa0
[  224.738045]  ? __kasan_check_read+0x11/0x20
[  224.738621]  ? do_raw_spin_unlock+0x54/0x220
[  224.739246]  idempotent_init_module+0x265/0x750
[  224.739848]  ? init_module_from_file+0x140/0x140
[  224.740425]  ? __kasan_check_read+0x11/0x20
[  224.741031]  __x64_sys_finit_module+0xbb/0x130
[  224.741592]  x64_sys_call+0x1c5/0x9e0
[  224.742195]  do_syscall_64+0x64/0x130
[  224.742739]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  224.743334] RIP: 0033:0x7f0b4a71895d
[  224.743924] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  224.745095] RSP: 002b:00007ffd47fdbb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  224.745666] RAX: ffffffffffffffda RBX: 0000562da1c5e7c0 RCX: 00007f0b4a71895d
[  224.746291] RDX: 0000000000000000 RSI: 0000562d7e0c8358 RDI: 0000000000000003
[  224.746925] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f0b4a7ef580
[  224.747504] R10: 0000000000000003 R11: 0000000000000246 R12: 0000562d7e0c8358
[  224.748130] R13: 0000000000000000 R14: 0000562da1c5e790 R15: 0000000000000000
[  224.748705]  </TASK>
[  224.749318] 
[  224.749927] Allocated by task 796 on cpu 5 at 29.132818s:
[  224.750502]  kasan_save_stack+0x26/0x50
[  224.751128]  kasan_save_track+0x18/0x60
[  224.751696]  kasan_save_alloc_info+0x37/0x40
[  224.752311]  __kasan_slab_alloc+0x6a/0x70
[  224.752925]  kmem_cache_alloc_noprof+0x108/0x290
[  224.753491]  key_alloc+0x305/0x12b0
[  224.754104]  keyring_alloc+0x25/0x70
[  224.754662]  install_session_keyring_to_cred+0x13d/0x1c0
[  224.755275]  join_session_keyring+0x162/0x2c0
[  224.755870]  __do_sys_keyctl+0x1ce/0x2e0
[  224.756474]  __x64_sys_keyctl+0xb8/0x140
[  224.757078]  x64_sys_call+0x37e/0x9e0
[  224.757631]  do_syscall_64+0x64/0x130
[  224.758233]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  224.758811] 
[  224.759376] Freed by task 1802201963 on cpu 748395 at 3779491.451988s:
[  224.759998] ------------[ cut here ]------------
[  224.760567] pool index 93034 out of bounds (1296) for stack id 6b6b6b6b
[  224.761212] WARNING: CPU: 5 PID: 3533 at lib/stackdepot.c:451 depot_fetch_stack+0x97/0xc0
[  224.761829] Modules linked in: ath11k_pci(+) ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core [last unloaded: mhi]
[  224.762499] CPU: 5 PID: 3533 Comm: insmod Not tainted 6.10.0-rc1 #1543
[  224.763174] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  224.763842] RIP: 0010:depot_fetch_stack+0x97/0xc0
[  224.764517] Code: ff 48 c7 c7 18 01 e6 94 e8 46 1f c7 01 83 f8 01 75 ba 0f 0b eb b6 44 89 e1 44 89 f2 89 de 48 c7 c7 98 bf 55 94 e8 59 95 f9 fe <0f> 0b 31 c0 eb c3 0f 0b 31 c0 eb bd 0f 0b 31 c0 eb b7 4c 89 e6 48
[  224.765966] RSP: 0018:ffffc900014272f8 EFLAGS: 00010086
[  224.766661] RAX: 0000000000000000 RBX: 0000000000016b6a RCX: 0000000000000000
[  224.767417] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000001
[  224.768170] RBP: ffffc90001427318 R08: 0000000000000001 R09: ffffed10439bdd19
[  224.768911] R10: ffff88821cdee8cb R11: 0000000000000001 R12: 000000006b6b6b6b
[  224.769618] R13: 0000000000001b50 R14: 0000000000000510 R15: 0000000000000082
[  224.770375] FS:  00007f0b4a5d2740(0000) GS:ffff88821cc00000(0000) knlGS:0000000000000000
[  224.771137] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  224.771900] CR2: 000055cd5a072308 CR3: 000000014233d005 CR4: 00000000003706f0
[  224.772619] Call Trace:
[  224.773379]  <TASK>
[  224.774135]  ? show_regs+0x5b/0x70
[  224.774901]  ? __warn+0xc7/0x300
[  224.775609]  ? depot_fetch_stack+0x97/0xc0
[  224.776369]  ? report_bug+0x310/0x3f0
[  224.777137]  ? handle_bug+0x3e/0x90
[  224.777912]  ? exc_invalid_op+0x18/0x40
[  224.778633]  ? asm_exc_invalid_op+0x1b/0x20
[  224.779394]  ? depot_fetch_stack+0x97/0xc0
[  224.780159]  ? depot_fetch_stack+0x97/0xc0
[  224.780937]  stack_depot_print+0x31/0x60
[  224.781654]  print_track+0x66/0x80
[  224.782405]  print_address_description.constprop.0+0x367/0x3a0
[  224.783170]  print_report+0xb5/0x260
[  224.783935]  ? kasan_complete_mode_report_info+0x64/0x1a0
[  224.784660]  kasan_report+0xd8/0x110
[  224.785427]  ? lockdep_register_key+0x755/0x8f0
[  224.786223]  ? lockdep_register_key+0x755/0x8f0
[  224.786954]  __asan_report_load8_noabort+0x14/0x20
[  224.787612]  lockdep_register_key+0x755/0x8f0
[  224.788312]  ? save_trace+0x720/0x720
[  224.789005]  ? dma_alloc_attrs+0x145/0x1d0
[  224.789659]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  224.790375]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  224.791072]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.791736]  ? __this_cpu_preempt_check+0x13/0x20
[  224.792439]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  224.793139]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.793789]  local_pci_probe+0xd6/0x180
[  224.794485]  pci_call_probe+0x152/0x3f0
[  224.795184]  ? __kasan_check_read+0x11/0x20
[  224.795858]  ? pci_pm_suspend_late+0x40/0x40
[  224.796566]  ? pci_match_device+0x380/0x660
[  224.797267]  pci_device_probe+0xa6/0x100
[  224.797964]  really_probe+0x1d5/0x920
[  224.798612]  __driver_probe_device+0x2e8/0x3f0
[  224.799311]  driver_probe_device+0x4a/0x140
[  224.800008]  __driver_attach+0x1ed/0x4c0
[  224.800653]  ? __device_attach_driver+0x290/0x290
[  224.801350]  bus_for_each_dev+0xf5/0x180
[  224.802049]  ? bus_remove_file+0x40/0x40
[  224.802699]  ? _raw_spin_unlock+0x27/0x50
[  224.803397]  driver_attach+0x38/0x50
[  224.804089]  bus_add_driver+0x29b/0x5e0
[  224.804729]  driver_register+0x130/0x450
[  224.805417]  __pci_register_driver+0x1d2/0x270
[  224.806096]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.806727]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.807385]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  224.808028]  do_one_initcall+0xdf/0x500
[  224.808602]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  224.809222]  ? kasan_save_alloc_info+0x37/0x40
[  224.809769]  ? __kasan_kmalloc+0x90/0xa0
[  224.810329]  ? kasan_unpoison+0x45/0x70
[  224.810884]  ? kasan_poison+0x3a/0x50
[  224.811408]  ? __asan_register_globals+0x5e/0x70
[  224.811976]  do_init_module+0x23f/0x6c0
[  224.812492]  load_module+0x11e3/0x1aa0
[  224.813057]  init_module_from_file+0xe4/0x140
[  224.813568]  ? __ia32_sys_init_module+0xa0/0xa0
[  224.814126]  ? __kasan_check_read+0x11/0x20
[  224.814624]  ? do_raw_spin_unlock+0x54/0x220
[  224.815168]  idempotent_init_module+0x265/0x750
[  224.815657]  ? init_module_from_file+0x140/0x140
[  224.816206]  ? __kasan_check_read+0x11/0x20
[  224.816717]  __x64_sys_finit_module+0xbb/0x130
[  224.817255]  x64_sys_call+0x1c5/0x9e0
[  224.817766]  do_syscall_64+0x64/0x130
[  224.818301]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  224.818881] RIP: 0033:0x7f0b4a71895d
[  224.819406] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  224.820527] RSP: 002b:00007ffd47fdbb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  224.821175] RAX: ffffffffffffffda RBX: 0000562da1c5e7c0 RCX: 00007f0b4a71895d
[  224.821772] RDX: 0000000000000000 RSI: 0000562d7e0c8358 RDI: 0000000000000003
[  224.822392] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f0b4a7ef580
[  224.823053] R10: 0000000000000003 R11: 0000000000000246 R12: 0000562d7e0c8358
[  224.823649] R13: 0000000000000000 R14: 0000562da1c5e790 R15: 0000000000000000
[  224.824282]  </TASK>
[  224.824911] irq event stamp: 31227
[  224.825496] hardirqs last  enabled at (31227): [<ffffffff93852291>] _raw_spin_unlock_irqrestore+0x51/0x80
[  224.826172] hardirqs last disabled at (31226): [<ffffffff93851fbd>] _raw_spin_lock_irqsave+0x6d/0x90
[  224.826786] softirqs last  enabled at (29008): [<ffffffff90b713a3>] handle_softirqs+0x573/0x890
[  224.827424] softirqs last disabled at (28595): [<ffffffff90b71ffc>] irq_exit_rcu+0xac/0x110
[  224.828087] ---[ end trace 0000000000000000 ]---
[  224.828705] ------------[ cut here ]------------
[  224.829359] corrupt handle or use after stack_depot_put()
[  224.829376] WARNING: CPU: 5 PID: 3533 at lib/stackdepot.c:711 stack_depot_print+0x5a/0x60
[  224.830668] Modules linked in: ath11k_pci(+) ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core [last unloaded: mhi]
[  224.831396] CPU: 5 PID: 3533 Comm: insmod Tainted: G        W          6.10.0-rc1 #1543
[  224.832100] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  224.832780] RIP: 0010:stack_depot_print+0x5a/0x60
[  224.833474] Code: ff 48 85 c0 74 18 8b 70 14 48 8d 78 20 85 f6 74 e4 31 d2 e8 48 a5 1e ff 5b 41 5c 5d c3 c3 48 c7 c7 50 c0 55 94 e8 76 8c f9 fe <0f> 0b eb c7 66 90 85 ff 74 6d 55 48 89 e5 41 57 44 0f b6 3d 0e c8
[  224.834940] RSP: 0018:ffffc90001427328 EFLAGS: 00010086
[  224.835663] RAX: 0000000000000000 RBX: 000000006b6b6b6b RCX: 0000000000000000
[  224.836448] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000001
[  224.837218] RBP: ffffc90001427338 R08: 0000000000000001 R09: ffffed10439bdd19
[  224.838005] R10: ffff88821cdee8cb R11: 0000000000000001 R12: 0000000000000000
[  224.838739] R13: ffffc90001427428 R14: 0000000000000008 R15: 0000000000000082
[  224.839488] FS:  00007f0b4a5d2740(0000) GS:ffff88821cc00000(0000) knlGS:0000000000000000
[  224.840272] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  224.841075] CR2: 000055cd5a072308 CR3: 000000014233d005 CR4: 00000000003706f0
[  224.841848] Call Trace:
[  224.842617]  <TASK>
[  224.843394]  ? show_regs+0x5b/0x70
[  224.844180]  ? __warn+0xc7/0x300
[  224.844964]  ? stack_depot_print+0x5a/0x60
[  224.845706]  ? report_bug+0x310/0x3f0
[  224.846501]  ? handle_bug+0x3e/0x90
[  224.847277]  ? exc_invalid_op+0x18/0x40
[  224.848063]  ? asm_exc_invalid_op+0x1b/0x20
[  224.848828]  ? stack_depot_print+0x5a/0x60
[  224.849595]  ? stack_depot_print+0x5a/0x60
[  224.850363]  print_track+0x66/0x80
[  224.851145]  print_address_description.constprop.0+0x367/0x3a0
[  224.851933]  print_report+0xb5/0x260
[  224.852662]  ? kasan_complete_mode_report_info+0x64/0x1a0
[  224.853438]  kasan_report+0xd8/0x110
[  224.854233]  ? lockdep_register_key+0x755/0x8f0
[  224.855017]  ? lockdep_register_key+0x755/0x8f0
[  224.855752]  __asan_report_load8_noabort+0x14/0x20
[  224.856543]  lockdep_register_key+0x755/0x8f0
[  224.857318]  ? save_trace+0x720/0x720
[  224.858097]  ? dma_alloc_attrs+0x145/0x1d0
[  224.858870]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  224.859646]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  224.860427]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.861232]  ? __this_cpu_preempt_check+0x13/0x20
[  224.862022]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  224.862766]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.863562]  local_pci_probe+0xd6/0x180
[  224.864347]  pci_call_probe+0x152/0x3f0
[  224.865136]  ? __kasan_check_read+0x11/0x20
[  224.865912]  ? pci_pm_suspend_late+0x40/0x40
[  224.866630]  ? pci_match_device+0x380/0x660
[  224.867356]  pci_device_probe+0xa6/0x100
[  224.868075]  really_probe+0x1d5/0x920
[  224.868738]  __driver_probe_device+0x2e8/0x3f0
[  224.869456]  driver_probe_device+0x4a/0x140
[  224.870172]  __driver_attach+0x1ed/0x4c0
[  224.870860]  ? __device_attach_driver+0x290/0x290
[  224.871579]  bus_for_each_dev+0xf5/0x180
[  224.872290]  ? bus_remove_file+0x40/0x40
[  224.872991]  ? _raw_spin_unlock+0x27/0x50
[  224.873640]  driver_attach+0x38/0x50
[  224.874333]  bus_add_driver+0x29b/0x5e0
[  224.875025]  driver_register+0x130/0x450
[  224.875667]  __pci_register_driver+0x1d2/0x270
[  224.876355]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.877045]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.877671]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  224.878329]  do_one_initcall+0xdf/0x500
[  224.878967]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  224.879550]  ? kasan_save_alloc_info+0x37/0x40
[  224.880169]  ? __kasan_kmalloc+0x90/0xa0
[  224.880717]  ? kasan_unpoison+0x45/0x70
[  224.881289]  ? kasan_poison+0x3a/0x50
[  224.881829]  ? __asan_register_globals+0x5e/0x70
[  224.882372]  do_init_module+0x23f/0x6c0
[  224.882940]  load_module+0x11e3/0x1aa0
[  224.883454]  init_module_from_file+0xe4/0x140
[  224.884029]  ? __ia32_sys_init_module+0xa0/0xa0
[  224.884548]  ? __kasan_check_read+0x11/0x20
[  224.885105]  ? do_raw_spin_unlock+0x54/0x220
[  224.885605]  idempotent_init_module+0x265/0x750
[  224.886152]  ? init_module_from_file+0x140/0x140
[  224.886644]  ? __kasan_check_read+0x11/0x20
[  224.887191]  __x64_sys_finit_module+0xbb/0x130
[  224.887687]  x64_sys_call+0x1c5/0x9e0
[  224.888231]  do_syscall_64+0x64/0x130
[  224.888725]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  224.889275] RIP: 0033:0x7f0b4a71895d
[  224.889775] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  224.890947] RSP: 002b:00007ffd47fdbb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  224.891513] RAX: ffffffffffffffda RBX: 0000562da1c5e7c0 RCX: 00007f0b4a71895d
[  224.892137] RDX: 0000000000000000 RSI: 0000562d7e0c8358 RDI: 0000000000000003
[  224.892714] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f0b4a7ef580
[  224.893340] R10: 0000000000000003 R11: 0000000000000246 R12: 0000562d7e0c8358
[  224.893962] R13: 0000000000000000 R14: 0000562da1c5e790 R15: 0000000000000000
[  224.894535]  </TASK>
[  224.895148] irq event stamp: 31227
[  224.895709] hardirqs last  enabled at (31227): [<ffffffff93852291>] _raw_spin_unlock_irqrestore+0x51/0x80
[  224.896354] hardirqs last disabled at (31226): [<ffffffff93851fbd>] _raw_spin_lock_irqsave+0x6d/0x90
[  224.897000] softirqs last  enabled at (29008): [<ffffffff90b713a3>] handle_softirqs+0x573/0x890
[  224.897596] softirqs last disabled at (28595): [<ffffffff90b71ffc>] irq_exit_rcu+0xac/0x110
[  224.898242] ---[ end trace 0000000000000000 ]---
[  224.898885] 
[  224.899470] The buggy address belongs to the object at ffff88810d7716c0#012[  224.899470]  which belongs to the cache key_jar of size 344
[  224.900697] The buggy address is located 88 bytes to the right of#012[  224.900697]  allocated 344-byte region [ffff88810d7716c0, ffff88810d771818)
[  224.901988] 
[  224.902588] The buggy address belongs to the physical page:
[  224.903251] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810d771000 pfn:0x10d770
[  224.903938] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  224.904581] flags: 0x200000000000240(workingset|head|node=0|zone=2)
[  224.905260] page_type: 0xffffefff(slab)
[  224.905963] raw: 0200000000000240 ffff8881018603c0 ffffea000440c210 ffffea0004378010
[  224.906642] raw: ffff88810d771000 00000000001c0010 00000001ffffefff 0000000000000000
[  224.907362] head: 0200000000000240 ffff8881018603c0 ffffea000440c210 ffffea0004378010
[  224.908097] head: ffff88810d771000 00000000001c0010 00000001ffffefff 0000000000000000
[  224.908791] head: 0200000000000002 ffffea000435dc01 ffffffffffffffff 0000000000000000
[  224.909523] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[  224.910256] page dumped because: kasan: bad access detected
[  224.911015] 
[  224.911702] Memory state around the buggy address:
[  224.912461]  ffff88810d771700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.913215]  ffff88810d771780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.913970] >ffff88810d771800: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc
[  224.914678]                                                              ^
[  224.915429]  ffff88810d771880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  224.916226]  ffff88810d771900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.916993] ==================================================================
[  224.917703] Disabling lock debugging due to kernel taint
[  224.918470] Oops: general protection fault, probably for non-canonical address 0xe00002c873880000: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
[  224.919267] KASAN: probably user-memory-access in range [0x000036439c400000-0x000036439c400007]
[  224.920064] CPU: 5 PID: 3533 Comm: insmod Tainted: G    B   W          6.10.0-rc1 #1543
[  224.920848] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  224.921653] RIP: 0010:lockdep_register_key+0x1c8/0x8f0
[  224.922482] Code: 05 00 00 48 8b 1c cd 60 45 fc a5 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 <80> 3c 30 00 0f 85 74 05 00 00 48 8b 1b 48 85 db 0f 84 ff 01 00 00
[  224.924193] RSP: 0018:ffffc900014274e0 EFLAGS: 00010007
[  224.925070] RAX: 000006c873880000 RBX: 000036439c400005 RCX: 0000000000000594
[  224.925957] RDX: ffffffff9561ceb8 RSI: dffffc0000000000 RDI: ffffffff95a98420
[  224.926794] RBP: ffffc90001427580 R08: 0000000000000001 R09: fffffbfff2b53084
[  224.927671] R10: ffffffff95a98427 R11: 0000000000000001 R12: ffff88813bb8c668
[  224.928561] R13: 1ffff92000284e9f R14: dffffc0000000000 R15: ffffffffa61cf9c0
[  224.929454] FS:  00007f0b4a5d2740(0000) GS:ffff88821cc00000(0000) knlGS:0000000000000000
[  224.930355] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  224.931259] CR2: 000055cd5a072308 CR3: 000000014233d005 CR4: 00000000003706f0
[  224.932171] Call Trace:
[  224.933061]  <TASK>
[  224.933964]  ? show_regs+0x5b/0x70
[  224.934841]  ? die_addr+0x3c/0xa0
[  224.935718]  ? exc_general_protection+0x150/0x230
[  224.936600]  ? asm_exc_general_protection+0x27/0x30
[  224.937465]  ? lockdep_register_key+0x1c8/0x8f0
[  224.938325]  ? save_trace+0x720/0x720
[  224.939178]  ? dma_alloc_attrs+0x145/0x1d0
[  224.940039]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  224.940927]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  224.941742]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.942612]  ? __this_cpu_preempt_check+0x13/0x20
[  224.943460]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  224.944316]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  224.945168]  local_pci_probe+0xd6/0x180
[  224.946041]  pci_call_probe+0x152/0x3f0
[  224.946860]  ? __kasan_check_read+0x11/0x20
[  224.947640]  ? pci_pm_suspend_late+0x40/0x40
[  224.948463]  ? pci_match_device+0x380/0x660
[  224.949284]  pci_device_probe+0xa6/0x100
[  224.950097]  really_probe+0x1d5/0x920
[  224.950910]  __driver_probe_device+0x2e8/0x3f0
[  224.951667]  driver_probe_device+0x4a/0x140
[  224.952472]  __driver_attach+0x1ed/0x4c0
[  224.953269]  ? __device_attach_driver+0x290/0x290
[  224.954067]  bus_for_each_dev+0xf5/0x180
[  224.954825]  ? bus_remove_file+0x40/0x40
[  224.955578]  ? _raw_spin_unlock+0x27/0x50
[  224.956349]  driver_attach+0x38/0x50
[  224.957121]  bus_add_driver+0x29b/0x5e0
[  224.957866]  driver_register+0x130/0x450
[  224.958610]  __pci_register_driver+0x1d2/0x270
[  224.959368]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.960126]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  224.960857]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  224.961593]  do_one_initcall+0xdf/0x500
[  224.962328]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  224.963075]  ? kasan_save_alloc_info+0x37/0x40
[  224.963775]  ? __kasan_kmalloc+0x90/0xa0
[  224.964488]  ? kasan_unpoison+0x45/0x70
[  224.965224]  ? kasan_poison+0x3a/0x50
[  224.965997]  ? __asan_register_globals+0x5e/0x70
[  224.966687]  do_init_module+0x23f/0x6c0
[  224.967405]  load_module+0x11e3/0x1aa0
[  224.968130]  init_module_from_file+0xe4/0x140
[  224.968829]  ? __ia32_sys_init_module+0xa0/0xa0
[  224.969532]  ? __kasan_check_read+0x11/0x20
[  224.970224]  ? do_raw_spin_unlock+0x54/0x220
[  224.970908]  idempotent_init_module+0x265/0x750
[  224.971519]  ? init_module_from_file+0x140/0x140
[  224.972185]  ? __kasan_check_read+0x11/0x20
[  224.972787]  __x64_sys_finit_module+0xbb/0x130
[  224.973406]  x64_sys_call+0x1c5/0x9e0
[  224.974007]  do_syscall_64+0x64/0x130
[  224.974562]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  224.975156] RIP: 0033:0x7f0b4a71895d
[  224.975705] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  224.976969] RSP: 002b:00007ffd47fdbb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  224.977556] RAX: ffffffffffffffda RBX: 0000562da1c5e7c0 RCX: 00007f0b4a71895d
[  224.978188] RDX: 0000000000000000 RSI: 0000562d7e0c8358 RDI: 0000000000000003
[  224.978767] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f0b4a7ef580
[  224.979381] R10: 0000000000000003 R11: 0000000000000246 R12: 0000562d7e0c8358
[  224.979998] R13: 0000000000000000 R14: 0000562da1c5e790 R15: 0000000000000000
[  224.980572]  </TASK>
[  224.981186] Modules linked in: ath11k_pci(+) ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core [last unloaded: mhi]
[  224.981843] ---[ end trace 0000000000000000 ]---
[  225.115543] RIP: 0010:lockdep_register_key+0x1c8/0x8f0
[  225.116200] Code: 05 00 00 48 8b 1c cd 60 45 fc a5 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 <80> 3c 30 00 0f 85 74 05 00 00 48 8b 1b 48 85 db 0f 84 ff 01 00 00
[  225.117542] RSP: 0018:ffffc900014274e0 EFLAGS: 00010007
[  225.118274] RAX: 000006c873880000 RBX: 000036439c400005 RCX: 0000000000000594
[  225.119009] RDX: ffffffff9561ceb8 RSI: dffffc0000000000 RDI: ffffffff95a98420
[  225.119694] RBP: ffffc90001427580 R08: 0000000000000001 R09: fffffbfff2b53084
[  225.120432] R10: ffffffff95a98427 R11: 0000000000000001 R12: ffff88813bb8c668
[  225.121199] R13: 1ffff92000284e9f R14: dffffc0000000000 R15: ffffffffa61cf9c0
[  225.121951] FS:  00007f0b4a5d2740(0000) GS:ffff88821cc00000(0000) knlGS:0000000000000000
[  225.122641] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.123370] CR2: 000055cd5a072308 CR3: 000000014233d005 CR4: 00000000003706f0
[  225.124130] Kernel panic - not syncing: Fatal exception
[  225.124916] Kernel Offset: 0xfa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

Crash 4:

[  259.652506] ath11k_pci 0000:06:00.0: wcn6855 hw2.0
[  259.665664] ==================================================================
[  259.666542] BUG: KASAN: slab-use-after-free in lockdep_register_key+0x755/0x8f0
[  259.667418] Read of size 8 at addr ffff88810fe49870 by task insmod/1944
[  259.668282] 
[  259.669132] CPU: 0 PID: 1944 Comm: insmod Not tainted 6.10.0-rc1 #1547
[  259.670001] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  259.670904] Call Trace:
[  259.671744]  <TASK>
[  259.672580]  dump_stack_lvl+0x7d/0xe0
[  259.673436]  print_address_description.constprop.0+0x33/0x3a0
[  259.674297]  print_report+0xb5/0x260
[  259.675158]  ? kasan_complete_mode_report_info+0x64/0x1a0
[  259.676033]  kasan_report+0xd8/0x110
[  259.676937]  ? lockdep_register_key+0x755/0x8f0
[  259.677843]  ? lockdep_register_key+0x755/0x8f0
[  259.678647]  __asan_report_load8_noabort+0x14/0x20
[  259.679486]  lockdep_register_key+0x755/0x8f0
[  259.680314]  ? save_trace+0x720/0x720
[  259.681124]  ? dma_alloc_attrs+0x145/0x1d0
[  259.681944]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  259.682762]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  259.683560]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  259.684380]  ? __this_cpu_preempt_check+0x13/0x20
[  259.685198]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  259.686014]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  259.686838]  local_pci_probe+0xd6/0x180
[  259.687595]  pci_call_probe+0x152/0x3f0
[  259.688387]  ? __kasan_check_read+0x11/0x20
[  259.689191]  ? pci_pm_suspend_late+0x40/0x40
[  259.689993]  ? pci_match_device+0x380/0x660
[  259.690763]  pci_device_probe+0xa6/0x100
[  259.691500]  really_probe+0x1d5/0x920
[  259.692284]  __driver_probe_device+0x2e8/0x3f0
[  259.693065]  driver_probe_device+0x4a/0x140
[  259.693778]  __driver_attach+0x1ed/0x4c0
[  259.694483]  ? __device_attach_driver+0x290/0x290
[  259.695207]  bus_for_each_dev+0xf5/0x180
[  259.695932]  ? bus_remove_file+0x40/0x40
[  259.696595]  ? _raw_spin_unlock+0x27/0x50
[  259.697323]  driver_attach+0x38/0x50
[  259.698039]  bus_add_driver+0x29b/0x5e0
[  259.698688]  driver_register+0x130/0x450
[  259.699392]  __pci_register_driver+0x1d2/0x270
[  259.700095]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  259.700767]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  259.701428]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  259.702123]  do_one_initcall+0xdf/0x500
[  259.702781]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  259.703435]  ? kasan_save_alloc_info+0x37/0x40
[  259.704134]  ? __kasan_kmalloc+0x90/0xa0
[  259.704811]  ? kasan_unpoison+0x45/0x70
[  259.705420]  ? kasan_poison+0x3a/0x50
[  259.706062]  ? __asan_register_globals+0x5e/0x70
[  259.706652]  do_init_module+0x23f/0x6c0
[  259.707300]  load_module+0x11e3/0x1aa0
[  259.707953]  init_module_from_file+0xe4/0x140
[  259.708546]  ? __ia32_sys_init_module+0xa0/0xa0
[  259.709199]  ? __kasan_check_read+0x11/0x20
[  259.709852]  ? do_raw_spin_unlock+0x54/0x220
[  259.710459]  idempotent_init_module+0x265/0x750
[  259.711113]  ? init_module_from_file+0x140/0x140
[  259.711695]  ? __kasan_check_read+0x11/0x20
[  259.712304]  __x64_sys_finit_module+0xbb/0x130
[  259.712954]  x64_sys_call+0x1c5/0x9e0
[  259.713528]  do_syscall_64+0x64/0x130
[  259.714144]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  259.714707] RIP: 0033:0x7ff1ed6c595d
[  259.715309] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  259.716503] RSP: 002b:00007ffe9970fe88 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  259.717158] RAX: ffffffffffffffda RBX: 000056003aabc7c0 RCX: 00007ff1ed6c595d
[  259.717806] RDX: 0000000000000000 RSI: 000056000fddb358 RDI: 0000000000000003
[  259.718425] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ff1ed79c580
[  259.719090] R10: 0000000000000003 R11: 0000000000000246 R12: 000056000fddb358
[  259.719666] R13: 0000000000000000 R14: 000056003aabc790 R15: 0000000000000000
[  259.720301]  </TASK>
[  259.720926] 
[  259.721482] Allocated by task 1925 on cpu 0 at 258.277859s:
[  259.722120]  kasan_save_stack+0x26/0x50
[  259.722696]  kasan_save_track+0x18/0x60
[  259.723325]  kasan_save_alloc_info+0x37/0x40
[  259.723952]  __kasan_slab_alloc+0x6a/0x70
[  259.724517]  kmem_cache_alloc_noprof+0x108/0x290
[  259.725142]  __alloc_object+0x33/0x280
[  259.725707]  __create_object+0x24/0x90
[  259.726328]  kmemleak_alloc+0x45/0x80
[  259.726946]  kmem_cache_alloc_noprof+0x24a/0x290
[  259.727507]  vm_area_alloc+0x102/0x1e0
[  259.728126]  mmap_region+0x316/0x2390
[  259.728678]  do_mmap+0x756/0x1180
[  259.729294]  vm_mmap_pgoff+0x18f/0x320
[  259.729903]  ksys_mmap_pgoff+0x22b/0x520
[  259.730453]  __x64_sys_mmap+0xed/0x1a0
[  259.731061]  x64_sys_call+0x99e/0x9e0
[  259.731609]  do_syscall_64+0x64/0x130
[  259.732219]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  259.732826] 
[  259.733371] Freed by task 0 on cpu 0 at 258.306253s:
[  259.733985]  kasan_save_stack+0x26/0x50
[  259.734541]  kasan_save_track+0x18/0x60
[  259.735147]  kasan_save_free_info+0x3b/0x50
[  259.735693]  poison_slab_object+0xf4/0x160
[  259.736303]  __kasan_slab_free+0x15/0x30
[  259.736916]  kmem_cache_free+0xf0/0x410
[  259.737463]  free_object_rcu+0x11a/0x130
[  259.738069]  rcu_do_batch+0x43c/0x1090
[  259.738615]  rcu_core+0x2b5/0x500
[  259.739213]  rcu_core_si+0x9/0x10
[  259.739798]  handle_softirqs+0x28b/0x890
[  259.740354]  irq_exit_rcu+0xac/0x110
[  259.740950]  sysvec_apic_timer_interrupt+0x94/0xc0
[  259.741491]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  259.742089] 
[  259.742620] Last potentially related work creation:
[  259.743222]  kasan_save_stack+0x26/0x50
[  259.743830]  __kasan_record_aux_stack+0x93/0xa0
[  259.744378]  kasan_record_aux_stack_noalloc+0xb/0x10
[  259.744987]  __call_rcu_common.constprop.0+0x9e/0x750
[  259.745537]  call_rcu+0x9/0x10
[  259.746145]  put_object+0x30/0x40
[  259.746690]  __delete_object+0x37/0x50
[  259.747294]  delete_object_full+0x52/0x70
[  259.747901]  kmemleak_free+0x2c/0x60
[  259.748456]  kmem_cache_free+0x17d/0x410
[  259.749056]  vm_area_free_rcu_cb+0x7f/0xc0
[  259.749600]  rcu_do_batch+0x43c/0x1090
[  259.750198]  rcu_core+0x2b5/0x500
[  259.750765]  rcu_core_si+0x9/0x10
[  259.751327]  handle_softirqs+0x28b/0x890
[  259.751925]  run_ksoftirqd+0x37/0x60
[  259.752457]  smpboot_thread_fn+0x594/0x9b0
[  259.753031]  kthread+0x2fa/0x3f0
[  259.753519]  ret_from_fork+0x31/0x70
[  259.754058]  ret_from_fork_asm+0x11/0x20
[  259.754527] 
[  259.755045] The buggy address belongs to the object at ffff88810fe497c8#012[  259.755045]  which belongs to the cache kmemleak_object of size 240
[  259.756039] The buggy address is located 168 bytes inside of#012[  259.756039]  freed 240-byte region [ffff88810fe497c8, ffff88810fe498b8)
[  259.757049] 
[  259.757530] The buggy address belongs to the physical page:
[  259.758091] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fe48
[  259.758611] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  259.759195] flags: 0x200000000000040(head|node=0|zone=2)
[  259.759751] page_type: 0xffffefff(slab)
[  259.760313] raw: 0200000000000040 ffff888100050900 dead000000000100 dead000000000122
[  259.760920] raw: 0000000000000000 0000000000190019 00000001ffffefff 0000000000000000
[  259.761466] head: 0200000000000040 ffff888100050900 dead000000000100 dead000000000122
[  259.762079] head: 0000000000000000 0000000000190019 00000001ffffefff 0000000000000000
[  259.762631] head: 0200000000000001 ffffea00043f9201 ffffffffffffffff 0000000000000000
[  259.763257] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[  259.763868] page dumped because: kasan: bad access detected
[  259.764422] 
[  259.765030] Memory state around the buggy address:
[  259.765590]  ffff88810fe49700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[  259.766220]  ffff88810fe49780: fc fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb
[  259.766850] >ffff88810fe49800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  259.767429]                                                              ^
[  259.768074]  ffff88810fe49880: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc
[  259.768661]  ffff88810fe49900: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  259.769319] ==================================================================
[  259.769972] Disabling lock debugging due to kernel taint
[  259.770574] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
[  259.771267] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af]
[  259.771965] CPU: 0 PID: 1944 Comm: insmod Tainted: G    B              6.10.0-rc1 #1547
[  259.772619] Hardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021
[  259.773346] RIP: 0010:lockdep_register_key+0x1c8/0x8f0
[  259.774074] Code: 05 00 00 48 8b 1c cd 60 45 fc a5 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 <80> 3c 30 00 0f 85 74 05 00 00 48 8b 1b 48 85 db 0f 84 ff 01 00 00
[  259.775518] RSP: 0018:ffffc900015274e0 EFLAGS: 00010002
[  259.776295] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000556
[  259.777081] RDX: ffffffff9561ceb8 RSI: dffffc0000000000 RDI: ffffffff95a98420
[  259.777868] RBP: ffffc90001527580 R08: 0000000000000001 R09: fffffbfff2b53084
[  259.778625] R10: ffffffff95a98427 R11: 0000000000000001 R12: ffff88814189c398
[  259.779410] R13: 1ffff920002a4e9f R14: dffffc0000000000 R15: ffffffffa61cf9c0
[  259.780194] FS:  00007ff1ed57f740(0000) GS:ffff88821b800000(0000) knlGS:0000000000000000
[  259.780985] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.781722] CR2: 00007f08211a9e50 CR3: 00000001074ee005 CR4: 00000000003706f0
[  259.782517] Call Trace:
[  259.783306]  <TASK>
[  259.784089]  ? show_regs+0x5b/0x70
[  259.784879]  ? die_addr+0x3c/0xa0
[  259.785604]  ? exc_general_protection+0x150/0x230
[  259.786389]  ? asm_exc_general_protection+0x27/0x30
[  259.787180]  ? lockdep_register_key+0x1c8/0x8f0
[  259.787971]  ? save_trace+0x720/0x720
[  259.788704]  ? dma_alloc_attrs+0x145/0x1d0
[  259.789496]  ath11k_hal_srng_init+0x143/0x280 [ath11k]
[  259.790316]  ath11k_pci_probe+0x67a/0x1210 [ath11k_pci]
[  259.791116]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  259.791921]  ? __this_cpu_preempt_check+0x13/0x20
[  259.792672]  ? _raw_spin_unlock_irqrestore+0x3c/0x80
[  259.793481]  ? ath11k_pci_power_up+0x380/0x380 [ath11k_pci]
[  259.794295]  local_pci_probe+0xd6/0x180
[  259.795116]  pci_call_probe+0x152/0x3f0
[  259.795928]  ? __kasan_check_read+0x11/0x20
[  259.796683]  ? pci_pm_suspend_late+0x40/0x40
[  259.797507]  ? pci_match_device+0x380/0x660
[  259.798323]  pci_device_probe+0xa6/0x100
[  259.799129]  really_probe+0x1d5/0x920
[  259.799934]  __driver_probe_device+0x2e8/0x3f0
[  259.800680]  driver_probe_device+0x4a/0x140
[  259.801484]  __driver_attach+0x1ed/0x4c0
[  259.802273]  ? __device_attach_driver+0x290/0x290
[  259.803065]  bus_for_each_dev+0xf5/0x180
[  259.803847]  ? bus_remove_file+0x40/0x40
[  259.804568]  ? _raw_spin_unlock+0x27/0x50
[  259.805334]  driver_attach+0x38/0x50
[  259.806100]  bus_add_driver+0x29b/0x5e0
[  259.806858]  driver_register+0x130/0x450
[  259.807557]  __pci_register_driver+0x1d2/0x270
[  259.808308]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  259.809065]  ? ath11k_pci_get_msi_irq+0x50/0x50 [ath11k_pci]
[  259.809789]  ath11k_pci_init+0x1f/0x50 [ath11k_pci]
[  259.810514]  do_one_initcall+0xdf/0x500
[  259.811256]  ? trace_event_raw_event_initcall_level+0x1f0/0x1f0
[  259.812003]  ? kasan_save_alloc_info+0x37/0x40
[  259.812693]  ? __kasan_kmalloc+0x90/0xa0
[  259.813434]  ? kasan_unpoison+0x45/0x70
[  259.814166]  ? kasan_poison+0x3a/0x50
[  259.814885]  ? __asan_register_globals+0x5e/0x70
[  259.815557]  do_init_module+0x23f/0x6c0
[  259.816287]  load_module+0x11e3/0x1aa0
[  259.817003]  init_module_from_file+0xe4/0x140
[  259.817658]  ? __ia32_sys_init_module+0xa0/0xa0
[  259.818364]  ? __kasan_check_read+0x11/0x20
[  259.819062]  ? do_raw_spin_unlock+0x54/0x220
[  259.819697]  idempotent_init_module+0x265/0x750
[  259.820402]  ? init_module_from_file+0x140/0x140
[  259.821067]  ? __kasan_check_read+0x11/0x20
[  259.821670]  __x64_sys_finit_module+0xbb/0x130
[  259.822293]  x64_sys_call+0x1c5/0x9e0
[  259.822901]  do_syscall_64+0x64/0x130
[  259.823456]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[  259.824054] RIP: 0033:0x7ff1ed6c595d
[  259.824605] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 03 35 0d 00 f7 d8 64 89 01 48
[  259.825828] RSP: 002b:00007ffe9970fe88 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  259.826445] RAX: ffffffffffffffda RBX: 000056003aabc7c0 RCX: 00007ff1ed6c595d
[  259.827096] RDX: 0000000000000000 RSI: 000056000fddb358 RDI: 0000000000000003
[  259.827697] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ff1ed79c580
[  259.828316] R10: 0000000000000003 R11: 0000000000000246 R12: 000056000fddb358
[  259.828953] R13: 0000000000000000 R14: 000056003aabc790 R15: 0000000000000000
[  259.829545]  </TASK>
[  259.830166] Modules linked in: ath11k_pci(+) ath11k mac80211 libarc4 cfg80211 qmi_helpers qrtr_mhi mhi qrtr nvme nvme_core [last unloaded: mhi]
[  259.830859] ---[ end trace 0000000000000000 ]---
[  259.915081] RIP: 0010:lockdep_register_key+0x1c8/0x8f0
[  259.915719] Code: 05 00 00 48 8b 1c cd 60 45 fc a5 48 85 db 0f 84 2b 02 00 00 48 be 00 00 00 00 00 fc ff df 49 39 dc 74 22 48 89 d8 48 c1 e8 03 <80> 3c 30 00 0f 85 74 05 00 00 48 8b 1b 48 85 db 0f 84 ff 01 00 00
[  259.917080] RSP: 0018:ffffc900015274e0 EFLAGS: 00010002
[  259.917800] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000556
[  259.918506] RDX: ffffffff9561ceb8 RSI: dffffc0000000000 RDI: ffffffff95a98420
[  259.919237] RBP: ffffc90001527580 R08: 0000000000000001 R09: fffffbfff2b53084
[  259.919970] R10: ffffffff95a98427 R11: 0000000000000001 R12: ffff88814189c398
[  259.920652] R13: 1ffff920002a4e9f R14: dffffc0000000000 R15: ffffffffa61cf9c0
[  259.921374] FS:  00007ff1ed57f740(0000) GS:ffff88821b800000(0000) knlGS:0000000000000000
[  259.922111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.922855] CR2: 00007f08211a9e50 CR3: 00000001074ee005 CR4: 00000000003706f0
[  259.923554] Kernel panic - not syncing: Fatal exception
[  259.924332] Kernel Offset: 0xfa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)