[ 358.133799][ C0] ==================================================================
[ 358.134053][ C0] BUG: KASAN: null-ptr-deref in sock_def_write_space_wfree+0x210/0x360
[ 358.134281][ C0] Read of size 8 at addr 0000000000000008 by task fq_band_pktlimi/2649
[ 358.134498][ C0]
[ 358.134604][ C0] CPU: 0 PID: 2649 Comm: fq_band_pktlimi Not tainted 6.9.0-rc2-virtme #1
[ 358.134843][ C0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 358.135167][ C0] Call Trace:
[ 358.135288][ C0]
[ 358.135366][ C0] dump_stack_lvl+0x82/0xd0
[ 358.135522][ C0] kasan_report+0xbd/0xf0
[ 358.135637][ C0] ? sock_def_write_space_wfree+0x210/0x360
[ 358.135821][ C0] kasan_check_range+0x39/0x1c0
[ 358.135966][ C0] sock_def_write_space_wfree+0x210/0x360
[ 358.136109][ C0] sock_wfree+0x25f/0x3e0
[ 358.136223][ C0] skb_release_head_state+0x7a/0x1e0
[ 358.136370][ C0] consume_skb+0x76/0x110
[ 358.136479][ C0] dummy_xmit+0x106/0x170
[ 358.136593][ C0] ? trace_net_dev_start_xmit+0xff/0x170
[ 358.136738][ C0] dev_hard_start_xmit+0x10e/0x360
[ 358.136885][ C0] sch_direct_xmit+0x203/0x11c0
[ 358.137030][ C0] ? __pfx_sch_direct_xmit+0x10/0x10
[ 358.137180][ C0] __qdisc_run+0x1cd/0x3d0
[ 358.137324][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 358.137476][ C0] ? __pfx___qdisc_run+0x10/0x10
[ 358.137618][ C0] ? do_raw_spin_lock+0x131/0x270
[ 358.137765][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 358.137914][ C0] ? lock_acquire+0x32/0xc0
[ 358.138057][ C0] ? net_tx_action+0x3a5/0x680
[ 358.138200][ C0] net_tx_action+0x3f6/0x680
[ 358.138345][ C0] __do_softirq+0x1f8/0x5df
[ 358.138491][ C0] irq_exit_rcu+0x97/0xc0
[ 358.138600][ C0] sysvec_apic_timer_interrupt+0x75/0x80
[ 358.138745][ C0]
[ 358.138819][ C0]
[ 358.138895][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 358.139073][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x43/0x70
[ 358.139260][ C0] Code: 10 e8 b1 00 79 fd 48 89 ef e8 e9 70 79 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d 15 5c 0d 77 <74> 0e 5b 5d c3 cc cc cc cc e8 0f d1 9c fd eb dc 0f 1f 44 00 00 5b
[ 358.139764][ C0] RSP: 0018:ffffc90000ddf860 EFLAGS: 00000282
[ 358.139954][ C0] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1847c8b
[ 358.140184][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88f66dc1
[ 358.140404][ C0] RBP: ffff8880010bf940 R08: 0000000000000001 R09: fffffbfff18432af
[ 358.140624][ C0] R10: ffffffff8c21957f R11: 0000000000000008 R12: ffff8880010bf940
[ 358.140841][ C0] R13: ffffea0000129880 R14: ffff88800196aac0 R15: ffff888004a62238
[ 358.141066][ C0] ? _raw_spin_unlock_irqrestore+0x51/0x70
[ 358.141248][ C0] get_partial_node.part.0+0x1c5/0x3a0
[ 358.141396][ C0] ___slab_alloc+0xb70/0x10a0
[ 358.141543][ C0] ? kmem_cache_alloc+0x42/0x270
[ 358.141688][ C0] ? vm_area_dup+0x20/0x150
[ 358.141834][ C0] ? __pfx___lock_release+0x10/0x10
[ 358.141984][ C0] ? vm_area_dup+0x20/0x150
[ 358.142126][ C0] ? kmem_cache_alloc+0x243/0x270
[ 358.142272][ C0] kmem_cache_alloc+0x243/0x270
[ 358.142423][ C0] vm_area_dup+0x20/0x150
[ 358.142532][ C0] dup_mmap+0x6f5/0x1820
[ 358.142640][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 358.142786][ C0] ? mm_init.isra.0+0x889/0xd20
[ 358.142933][ C0] ? __raw_spin_lock_init+0x3f/0x110
[ 358.143079][ C0] copy_mm+0x267/0x5c0
[ 358.143188][ C0] copy_process+0x1ab2/0x51d0
[ 358.143331][ C0] ? hlock_class+0x4e/0x130
[ 358.143483][ C0] ? __pfx_copy_process+0x10/0x10
[ 358.143629][ C0] ? call_rcu_zapped+0x51/0xc0
[ 358.143774][ C0] kernel_clone+0xc2/0x510
[ 358.143916][ C0] ? find_held_lock+0x2c/0x110
[ 358.144060][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 358.144205][ C0] ? __lock_release+0x103/0x460
[ 358.144350][ C0] ? __might_fault+0x11b/0x170
[ 358.144495][ C0] ? __pfx___lock_release+0x10/0x10
[ 358.144661][ C0] ? trace_lock_acquire+0x135/0x1c0
[ 358.144805][ C0] ? lockdep_hardirqs_on_prepare.part.0+0x1af/0x370
[ 358.144986][ C0] ? __might_fault+0xc3/0x170
[ 358.145134][ C0] ? lock_acquire+0x32/0xc0
[ 358.145280][ C0] ? __might_fault+0xc3/0x170
[ 358.145425][ C0] __do_sys_clone+0xa1/0xe0
[ 358.145569][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 358.145716][ C0] ? lockdep_hardirqs_on_prepare.part.0+0x1af/0x370
[ 358.145898][ C0] do_syscall_64+0xc6/0x1e0
[ 358.146043][ C0] entry_SYSCALL_64_after_hwframe+0x72/0x7a
[ 358.146223][ C0] RIP: 0033:0x7ff09f8dda17
[ 358.146370][ C0] Code: 00 00 00 f3 0f 1e fa 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 39 41 89 c0 85 c0 75 2a 64 48 8b 04 25 10 00
[ 358.146873][ C0] RSP: 002b:00007ffd4eaed1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 358.147093][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff09f8dda17
[ 358.147313][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 358.147528][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0027746e6553205c
[ 358.147741][ C0] R10: 00007ff09f7c2a10 R11: 0000000000000246 R12: 0000000000000000
[ 358.147956][ C0] R13: 00007ffd4eaed310 R14: 000056044ed90f27 R15: 000056047f41bba0
[ 358.148173][ C0]
[ 358.148284][ C0] ==================================================================
[ 358.148510][ C0] Disabling lock debugging due to kernel taint
[ 358.148709][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 358.149019][ C0] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[ 358.149228][ C0] CPU: 0 PID: 2649 Comm: fq_band_pktlimi Tainted: G B 6.9.0-rc2-virtme #1
[ 358.149472][ C0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 358.149793][ C0] RIP: 0010:sock_def_write_space_wfree+0x221/0x360
[ 358.149974][ C0] Code: 00 4c 8b bb a0 01 00 00 be 08 00 00 00 4d 8d 77 08 4c 89 f7 e8 e0 0e 8b fe 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 fe 00 00 00 49 8b 47 08 a8 04 0f 85 dc fe ff ff
[ 358.150475][ C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00010202
[ 358.150660][ C0] RAX: dffffc0000000000 RBX: ffff8880067b08c0 RCX: ffffffff8659564a
[ 358.150880][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8bafda00
[ 358.151091][ C0] RBP: ffff8880067b0920 R08: 0000000000000001 R09: fffffbfff175fb40
[ 358.151306][ C0] R10: ffffffff8bafda07 R11: 205d304320202020 R12: 0000000000000000
[ 358.151517][ C0] R13: ffff8880067b0a40 R14: 0000000000000008 R15: 0000000000000000
[ 358.151731][ C0] FS: 00007ff09f7c2740(0000) GS:ffff888036000000(0000) knlGS:0000000000000000
[ 358.151986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 358.152168][ C0] CR2: 000056044edbd054 CR3: 0000000004378006 CR4: 0000000000770ef0
[ 358.152469][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 358.152675][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 358.152890][ C0] PKRU: 55555554
[ 358.153088][ C0] Call Trace:
[ 358.153199][ C0]
[ 358.153273][ C0] ? die_addr+0x41/0xa0
[ 358.153382][ C0] ? exc_general_protection+0x149/0x220
[ 358.153526][ C0] ? asm_exc_general_protection+0x26/0x30
[ 358.153759][ C0] ? add_taint+0x2a/0x90
[ 358.153866][ C0] ? sock_def_write_space_wfree+0x221/0x360
[ 358.154049][ C0] sock_wfree+0x25f/0x3e0
[ 358.154162][ C0] skb_release_head_state+0x7a/0x1e0
[ 358.154307][ C0] consume_skb+0x76/0x110
[ 358.154500][ C0] dummy_xmit+0x106/0x170
[ 358.154651][ C0] ? trace_net_dev_start_xmit+0xff/0x170
[ 358.154812][ C0] dev_hard_start_xmit+0x10e/0x360
[ 358.154958][ C0] sch_direct_xmit+0x203/0x11c0
[ 358.155101][ C0] ? __pfx_sch_direct_xmit+0x10/0x10
[ 358.155357][ C0] __qdisc_run+0x1cd/0x3d0
[ 358.155497][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 358.155640][ C0] ? __pfx___qdisc_run+0x10/0x10
[ 358.155783][ C0] ? do_raw_spin_lock+0x131/0x270
[ 358.155927][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 358.156068][ C0] ? lock_acquire+0x32/0xc0
[ 358.156208][ C0] ? net_tx_action+0x3a5/0x680
[ 358.156355][ C0] net_tx_action+0x3f6/0x680
[ 358.156583][ C0] __do_softirq+0x1f8/0x5df
[ 358.156725][ C0] irq_exit_rcu+0x97/0xc0
[ 358.156833][ C0] sysvec_apic_timer_interrupt+0x75/0x80
[ 358.156974][ C0]
[ 358.157047][ C0]
[ 358.157119][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 358.157393][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x43/0x70
[ 358.157585][ C0] Code: 10 e8 b1 00 79 fd 48 89 ef e8 e9 70 79 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d 15 5c 0d 77 <74> 0e 5b 5d c3 cc cc cc cc e8 0f d1 9c fd eb dc 0f 1f 44 00 00 5b
[ 358.158159][ C0] RSP: 0018:ffffc90000ddf860 EFLAGS: 00000282
[ 358.158336][ C0] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff1847c8b
[ 358.158637][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88f66dc1
[ 358.158857][ C0] RBP: ffff8880010bf940 R08: 0000000000000001 R09: fffffbfff18432af
[ 358.159069][ C0] R10: ffffffff8c21957f R11: 0000000000000008 R12: ffff8880010bf940
[ 358.159362][ C0] R13: ffffea0000129880 R14: ffff88800196aac0 R15: ffff888004a62238
[ 358.159670][ C0] ? _raw_spin_unlock_irqrestore+0x51/0x70
[ 358.159843][ C0] get_partial_node.part.0+0x1c5/0x3a0
[ 358.159990][ C0] ___slab_alloc+0xb70/0x10a0
[ 358.160129][ C0] ? kmem_cache_alloc+0x42/0x270
[ 358.160359][ C0] ? vm_area_dup+0x20/0x150
[ 358.160501][ C0] ? __pfx___lock_release+0x10/0x10
[ 358.160644][ C0] ? vm_area_dup+0x20/0x150
[ 358.160787][ C0] ? kmem_cache_alloc+0x243/0x270
[ 358.160931][ C0] kmem_cache_alloc+0x243/0x270
[ 358.161165][ C0] vm_area_dup+0x20/0x150
[ 358.161271][ C0] dup_mmap+0x6f5/0x1820
[ 358.161380][ C0] ? __pfx_dup_mmap+0x10/0x10
[ 358.161608][ C0] ? mm_init.isra.0+0x889/0xd20
[ 358.161747][ C0] ? __raw_spin_lock_init+0x3f/0x110
[ 358.161976][ C0] copy_mm+0x267/0x5c0
[ 358.162082][ C0] copy_process+0x1ab2/0x51d0
[ 358.162230][ C0] ? hlock_class+0x4e/0x130
[ 358.162372][ C0] ? __pfx_copy_process+0x10/0x10
[ 358.162513][ C0] ? call_rcu_zapped+0x51/0xc0
[ 358.162741][ C0] kernel_clone+0xc2/0x510
[ 358.162882][ C0] ? find_held_lock+0x2c/0x110
[ 358.163023][ C0] ? __pfx_kernel_clone+0x10/0x10
[ 358.163163][ C0] ? __lock_release+0x103/0x460
[ 358.163307][ C0] ? __might_fault+0x11b/0x170
[ 358.163537][ C0] ? __pfx___lock_release+0x10/0x10
[ 358.163762][ C0] ? trace_lock_acquire+0x135/0x1c0
[ 358.163900][ C0] ? lockdep_hardirqs_on_prepare.part.0+0x1af/0x370
[ 358.164077][ C0] ? __might_fault+0xc3/0x170
[ 358.164218][ C0] ? lock_acquire+0x32/0xc0
[ 358.164438][ C0] ? __might_fault+0xc3/0x170
[ 358.164603][ C0] __do_sys_clone+0xa1/0xe0
[ 358.164745][ C0] ? __pfx___do_sys_clone+0x10/0x10
[ 358.164888][ C0] ? lockdep_hardirqs_on_prepare.part.0+0x1af/0x370
[ 358.165151][ C0] do_syscall_64+0xc6/0x1e0
[ 358.165294][ C0] entry_SYSCALL_64_after_hwframe+0x72/0x7a
[ 358.165465][ C0] RIP: 0033:0x7ff09f8dda17
[ 358.165608][ C0] Code: 00 00 00 f3 0f 1e fa 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 39 41 89 c0 85 c0 75 2a 64 48 8b 04 25 10 00
[ 358.166185][ C0] RSP: 002b:00007ffd4eaed1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 358.166488][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff09f8dda17
[ 358.166706][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 358.166917][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0027746e6553205c
[ 358.167209][ C0] R10: 00007ff09f7c2a10 R11: 0000000000000246 R12: 0000000000000000
[ 358.167417][ C0] R13: 00007ffd4eaed310 R14: 000056044ed90f27 R15: 000056047f41bba0
[ 358.167625][ C0]
[ 358.167812][ C0] Modules linked in: sch_fq xt_mark nft_compat nf_tables libcrc32c sch_ingress act_mirred cls_basic sch_fq_codel
[ 358.168147][ C0] ---[ end trace 0000000000000000 ]---
[ 358.168299][ C0] RIP: 0010:sock_def_write_space_wfree+0x221/0x360
[ 358.168485][ C0] Code: 00 4c 8b bb a0 01 00 00 be 08 00 00 00 4d 8d 77 08 4c 89 f7 e8 e0 0e 8b fe 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 fe 00 00 00 49 8b 47 08 a8 04 0f 85 dc fe ff ff
[ 358.168981][ C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00010202
[ 358.169166][ C0] RAX: dffffc0000000000 RBX: ffff8880067b08c0 RCX: ffffffff8659564a
[ 358.169402][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff8bafda00
[ 358.169612][ C0] RBP: ffff8880067b0920 R08: 0000000000000001 R09: fffffbfff175fb40
[ 358.169830][ C0] R10: ffffffff8bafda07 R11: 205d304320202020 R12: 0000000000000000
[ 358.170038][ C0] R13: ffff8880067b0a40 R14: 0000000000000008 R15: 0000000000000000
[ 358.170354][ C0] FS: 00007ff09f7c2740(0000) GS:ffff888036000000(0000) knlGS:0000000000000000
[ 358.170598][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 358.170778][ C0] CR2: 000056044edbd054 CR3: 0000000004378006 CR4: 0000000000770ef0
[ 358.170988][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 358.171296][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 358.171508][ C0] PKRU: 55555554
[ 358.171614][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 358.172141][ C0] Kernel Offset: 0x5200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 358.172464][ C0] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr