[ 15.905130][ T247] ip (247) used greatest stack depth: 24272 bytes left [ 23.954187][ T302] netem: version 1.3 [ 156.791112][ T70] ================================================================== [ 156.791563][ T70] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 156.791976][ T70] Write of size 8 at addr 0000000000000000 by task kworker/u16:1/70 [ 156.792336][ T70] [ 156.792474][ T70] CPU: 3 UID: 0 PID: 70 Comm: kworker/u16:1 Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 156.792481][ T70] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 156.792487][ T70] Workqueue: netns cleanup_net [ 156.792501][ T70] Call Trace: [ 156.792504][ T70] [ 156.792508][ T70] dump_stack_lvl+0x82/0xc0 [ 156.792519][ T70] ? try_to_grab_pending+0x81/0x6c0 [ 156.792524][ T70] kasan_report+0xca/0x100 [ 156.792533][ T70] ? try_to_grab_pending+0x81/0x6c0 [ 156.792541][ T70] kasan_check_range+0x39/0x1b0 [ 156.792547][ T70] try_to_grab_pending+0x81/0x6c0 [ 156.792554][ T70] __cancel_work+0x7c/0x260 [ 156.792559][ T70] ? enable_delayed_work+0x10/0x10 [ 156.792566][ T70] ? queue_delayed_work_on+0x6a/0xa0 [ 156.792573][ T70] __cancel_work_sync+0x18/0xc0 [ 156.792579][ T70] __dev_close_many+0x1ce/0x810 [ 156.792591][ T70] ? netdev_notify_peers+0x20/0x20 [ 156.792597][ T70] ? netif_close_many+0x201/0x650 [ 156.792604][ T70] netif_close_many+0x201/0x650 [ 156.792609][ T70] ? __mutex_handoff+0x2b0/0x2b0 [ 156.792617][ T70] ? __dev_close_many+0x810/0x810 [ 156.792623][ T70] ? netif_close_many_and_unlock+0x21/0x2a0 [ 156.792630][ T70] unregister_netdevice_many_notify+0x305/0x1b30 [ 156.792635][ T70] ? find_held_lock+0x2b/0x80 [ 156.792641][ T70] ? mutex_is_locked+0x1c/0x50 [ 156.792646][ T70] ? dev_ingress_queue_create+0x190/0x190 [ 156.792650][ T70] ? rtnl_is_locked+0x15/0x20 [ 156.792654][ T70] ? unregister_netdevice_queue+0x6f/0x410 [ 156.792658][ T70] ? unregister_netdevice_many+0x20/0x20 [ 156.792662][ T70] ? unregister_netdevice_many+0x20/0x20 [ 156.792670][ T70] default_device_exit_batch+0x235/0x2d0 [ 156.792675][ T70] ? unregister_netdev+0x60/0x60 [ 156.792683][ T70] ops_undo_list+0x2bf/0x890 [ 156.792691][ T70] ? netns_get+0x110/0x110 [ 156.792694][ T70] ? cleanup_net+0x2d6/0x830 [ 156.792702][ T70] cleanup_net+0x3b2/0x830 [ 156.792708][ T70] ? net_passive_dec+0x190/0x190 [ 156.792714][ T70] ? rcu_is_watching+0x12/0xb0 [ 156.792724][ T70] process_one_work+0xe35/0x1650 [ 156.792734][ T70] ? pwq_dec_nr_in_flight+0x550/0x550 [ 156.792743][ T70] ? assign_work+0x168/0x240 [ 156.792749][ T70] worker_thread+0x591/0xcf0 [ 156.792758][ T70] ? rescuer_thread+0xd10/0xd10 [ 156.792764][ T70] kthread+0x37b/0x5f0 [ 156.792771][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 156.792775][ T70] ? ret_from_fork+0x1b/0x270 [ 156.792781][ T70] ? __lock_release+0x5d/0x170 [ 156.792786][ T70] ? rcu_is_watching+0x12/0xb0 [ 156.792790][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 156.792796][ T70] ret_from_fork+0x1db/0x270 [ 156.792799][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 156.792804][ T70] ret_from_fork_asm+0x11/0x20 [ 156.792817][ T70] [ 156.792819][ T70] ================================================================== [ 156.806586][ T70] Disabling lock debugging due to kernel taint [ 156.806917][ T70] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 156.807269][ T70] #PF: supervisor write access in kernel mode [ 156.807586][ T70] #PF: error_code(0x0002) - not-present page [ 156.807892][ T70] PGD 0 P4D 0 [ 156.808080][ T70] Oops: Oops: 0002 [#1] SMP KASAN [ 156.808326][ T70] CPU: 3 UID: 0 PID: 70 Comm: kworker/u16:1 Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 156.808910][ T70] Tainted: [B]=BAD_PAGE [ 156.809097][ T70] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 156.809406][ T70] Workqueue: netns cleanup_net [ 156.809665][ T70] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 156.809982][ T70] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 6f 7d 81 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 156.810857][ T70] RSP: 0018:ffffc900004b7690 EFLAGS: 00010046 [ 156.811168][ T70] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffb6c4190a [ 156.811974][ T70] RDX: fffffbfff761cecd RSI: 0000000000000008 RDI: ffffffffbb0e7660 [ 156.812352][ T70] RBP: ffffc900004b76f8 R08: 0000000000000001 R09: fffffbfff761cecc [ 156.812737][ T70] R10: ffffffffbb0e7667 R11: ffffc900004b7180 R12: 0000000000000000 [ 156.813396][ T70] R13: 0000000000000286 R14: ffff8880093e1000 R15: dffffc0000000000 [ 156.813765][ T70] FS: 0000000000000000(0000) GS:ffff88807b304000(0000) knlGS:0000000000000000 [ 156.814192][ T70] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.814650][ T70] CR2: 0000000000000000 CR3: 000000000cd59002 CR4: 0000000000772ef0 [ 156.815024][ T70] PKRU: 55555554 [ 156.815209][ T70] Call Trace: [ 156.815398][ T70] [ 156.815552][ T70] __cancel_work+0x7c/0x260 [ 156.815802][ T70] ? enable_delayed_work+0x10/0x10 [ 156.816070][ T70] ? queue_delayed_work_on+0x6a/0xa0 [ 156.816618][ T70] __cancel_work_sync+0x18/0xc0 [ 156.816873][ T70] __dev_close_many+0x1ce/0x810 [ 156.817118][ T70] ? netdev_notify_peers+0x20/0x20 [ 156.817361][ T70] ? netif_close_many+0x201/0x650 [ 156.817757][ T70] netif_close_many+0x201/0x650 [ 156.818006][ T70] ? __mutex_handoff+0x2b0/0x2b0 [ 156.818254][ T70] ? __dev_close_many+0x810/0x810 [ 156.818643][ T70] ? netif_close_many_and_unlock+0x21/0x2a0 [ 156.818957][ T70] unregister_netdevice_many_notify+0x305/0x1b30 [ 156.819261][ T70] ? find_held_lock+0x2b/0x80 [ 156.819692][ T70] ? mutex_is_locked+0x1c/0x50 [ 156.819944][ T70] ? dev_ingress_queue_create+0x190/0x190 [ 156.820197][ T70] ? rtnl_is_locked+0x15/0x20 [ 156.820482][ T70] ? unregister_netdevice_queue+0x6f/0x410 [ 156.820928][ T70] ? unregister_netdevice_many+0x20/0x20 [ 156.821181][ T70] ? unregister_netdevice_many+0x20/0x20 [ 156.821425][ T70] default_device_exit_batch+0x235/0x2d0 [ 156.821807][ T70] ? unregister_netdev+0x60/0x60 [ 156.822088][ T70] ops_undo_list+0x2bf/0x890 [ 156.822349][ T70] ? netns_get+0x110/0x110 [ 156.822598][ T70] ? cleanup_net+0x2d6/0x830 [ 156.822993][ T70] cleanup_net+0x3b2/0x830 [ 156.823243][ T70] ? net_passive_dec+0x190/0x190 [ 156.823496][ T70] ? rcu_is_watching+0x12/0xb0 [ 156.823878][ T70] process_one_work+0xe35/0x1650 [ 156.824126][ T70] ? pwq_dec_nr_in_flight+0x550/0x550 [ 156.824368][ T70] ? assign_work+0x168/0x240 [ 156.824757][ T70] worker_thread+0x591/0xcf0 [ 156.825149][ T70] ? rescuer_thread+0xd10/0xd10 [ 156.825392][ T70] kthread+0x37b/0x5f0 [ 156.825588][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 156.825829][ T70] ? ret_from_fork+0x1b/0x270 [ 156.826230][ T70] ? __lock_release+0x5d/0x170 [ 156.826611][ T70] ? rcu_is_watching+0x12/0xb0 [ 156.826854][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 156.827095][ T70] ret_from_fork+0x1db/0x270 [ 156.827332][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 156.827575][ T70] ret_from_fork_asm+0x11/0x20 [ 156.827830][ T70] [ 156.828012][ T70] Modules linked in: sch_netem [ 156.828270][ T70] CR2: 0000000000000000 [ 156.828457][ T70] ---[ end trace 0000000000000000 ]--- [ 156.828699][ T70] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 156.829158][ T70] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 6f 7d 81 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 156.830161][ T70] RSP: 0018:ffffc900004b7690 EFLAGS: 00010046 [ 156.830610][ T70] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffb6c4190a [ 156.831003][ T70] RDX: fffffbfff761cecd RSI: 0000000000000008 RDI: ffffffffbb0e7660 [ 156.831374][ T70] RBP: ffffc900004b76f8 R08: 0000000000000001 R09: fffffbfff761cecc [ 156.831891][ T70] R10: ffffffffbb0e7667 R11: ffffc900004b7180 R12: 0000000000000000 [ 156.832263][ T70] R13: 0000000000000286 R14: ffff8880093e1000 R15: dffffc0000000000 [ 156.832632][ T70] FS: 0000000000000000(0000) GS:ffff88807b304000(0000) knlGS:0000000000000000 [ 156.833073][ T70] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.833389][ T70] CR2: 0000000000000000 CR3: 000000000cd59002 CR4: 0000000000772ef0 [ 156.833758][ T70] PKRU: 55555554 [ 156.833947][ T70] Kernel panic - not syncing: Fatal exception [ 156.834501][ T70] Kernel Offset: 0x35600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 156.835030][ T70] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr