[ 18.636259][ T67] ================================================================== [ 18.636604][ T67] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 18.636919][ T67] Write of size 8 at addr 0000000000000000 by task kworker/u16:1/67 [ 18.637237][ T67] [ 18.637349][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u16:1 Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 18.637354][ T67] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.637358][ T67] Workqueue: netns cleanup_net [ 18.637369][ T67] Call Trace: [ 18.637371][ T67] [ 18.637376][ T67] dump_stack_lvl+0x82/0xc0 [ 18.637384][ T67] ? try_to_grab_pending+0x81/0x6c0 [ 18.637388][ T67] kasan_report+0xca/0x100 [ 18.637401][ T67] ? try_to_grab_pending+0x81/0x6c0 [ 18.637406][ T67] kasan_check_range+0x39/0x1b0 [ 18.637410][ T67] try_to_grab_pending+0x81/0x6c0 [ 18.637414][ T67] ? netif_close_many+0x201/0x650 [ 18.637419][ T67] __cancel_work+0x7c/0x260 [ 18.637423][ T67] ? enable_delayed_work+0x10/0x10 [ 18.637428][ T67] ? queue_delayed_work_on+0x6a/0xa0 [ 18.637433][ T67] __cancel_work_sync+0x18/0xc0 [ 18.637437][ T67] __dev_close_many+0x1cf/0x980 [ 18.637441][ T67] ? netdev_notify_peers+0x20/0x20 [ 18.637445][ T67] ? netif_close_many+0x201/0x650 [ 18.637449][ T67] netif_close_many+0x201/0x650 [ 18.637452][ T67] ? __mutex_handoff+0x2b0/0x2b0 [ 18.637458][ T67] ? __dev_close_many+0x980/0x980 [ 18.637462][ T67] ? netif_close_many_and_unlock+0x21/0x2a0 [ 18.637465][ T67] ? trace_contention_end+0xd8/0x140 [ 18.637469][ T67] unregister_netdevice_many_notify+0x30a/0x1c90 [ 18.637473][ T67] ? default_device_exit_batch+0x80/0x2d0 [ 18.637478][ T67] ? mutex_is_locked+0x1c/0x50 [ 18.637482][ T67] ? dev_ingress_queue_create+0x190/0x190 [ 18.637485][ T67] ? rtnl_is_locked+0x15/0x20 [ 18.637489][ T67] ? unregister_netdevice_queue+0x6f/0x410 [ 18.637492][ T67] ? unregister_netdevice_many+0x20/0x20 [ 18.637496][ T67] ? unregister_netdevice_many+0x20/0x20 [ 18.637502][ T67] default_device_exit_batch+0x235/0x2d0 [ 18.637505][ T67] ? unregister_netdev+0x60/0x60 [ 18.637511][ T67] ops_undo_list+0x2bf/0x890 [ 18.637518][ T67] ? rtnl_net_dumpid_one+0x270/0x270 [ 18.637521][ T67] ? cleanup_net+0x2d6/0x8b0 [ 18.637527][ T67] cleanup_net+0x3b2/0x8b0 [ 18.637531][ T67] ? net_passive_dec+0x190/0x190 [ 18.637536][ T67] ? rcu_is_watching+0x12/0xb0 [ 18.637544][ T67] process_one_work+0xe35/0x1650 [ 18.637550][ T67] ? pwq_dec_nr_in_flight+0x550/0x550 [ 18.637556][ T67] ? assign_work+0x168/0x240 [ 18.637560][ T67] worker_thread+0x591/0xcf0 [ 18.637566][ T67] ? rescuer_thread+0xd10/0xd10 [ 18.637570][ T67] kthread+0x37b/0x5f0 [ 18.637576][ T67] ? kthread_is_per_cpu+0xc0/0xc0 [ 18.637579][ T67] ? ret_from_fork+0x1b/0x270 [ 18.637584][ T67] ? __lock_release+0x5d/0x170 [ 18.637588][ T67] ? rcu_is_watching+0x12/0xb0 [ 18.637591][ T67] ? kthread_is_per_cpu+0xc0/0xc0 [ 18.637595][ T67] ret_from_fork+0x1db/0x270 [ 18.637597][ T67] ? kthread_is_per_cpu+0xc0/0xc0 [ 18.637600][ T67] ret_from_fork_asm+0x11/0x20 [ 18.637610][ T67] [ 18.637611][ T67] ================================================================== [ 18.648649][ T67] Disabling lock debugging due to kernel taint [ 18.648893][ T67] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 18.649195][ T67] #PF: supervisor write access in kernel mode [ 18.649428][ T67] #PF: error_code(0x0002) - not-present page [ 18.649666][ T67] PGD 0 P4D 0 [ 18.649819][ T67] Oops: Oops: 0002 [#1] SMP KASAN [ 18.650024][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u16:1 Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 18.650453][ T67] Tainted: [B]=BAD_PAGE [ 18.650597][ T67] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.650844][ T67] Workqueue: netns cleanup_net [ 18.651064][ T67] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 18.651337][ T67] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 1f 93 82 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 18.652017][ T67] RSP: 0018:ffffc90000487680 EFLAGS: 00010046 [ 18.652263][ T67] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff9b849b8a [ 18.652545][ T67] RDX: fffffbfff40acacd RSI: 0000000000000008 RDI: ffffffffa0565660 [ 18.652838][ T67] RBP: ffffc900004876e8 R08: 0000000000000001 R09: fffffbfff40acacc [ 18.653150][ T67] R10: ffffffffa0565667 R11: ffffc90000487140 R12: 0000000000000000 [ 18.653431][ T67] R13: 0000000000000282 R14: ffff888007229000 R15: dffffc0000000000 [ 18.653709][ T67] FS: 0000000000000000(0000) GS:ffff8880ccb07000(0000) knlGS:0000000000000000 [ 18.654045][ T67] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.654300][ T67] CR2: 0000000000000000 CR3: 000000001bd49003 CR4: 0000000000772ef0 [ 18.654578][ T67] PKRU: 55555554 [ 18.654714][ T67] Call Trace: [ 18.654863][ T67] [ 18.654979][ T67] ? netif_close_many+0x201/0x650 [ 18.655178][ T67] __cancel_work+0x7c/0x260 [ 18.655368][ T67] ? enable_delayed_work+0x10/0x10 [ 18.655562][ T67] ? queue_delayed_work_on+0x6a/0xa0 [ 18.655751][ T67] __cancel_work_sync+0x18/0xc0 [ 18.655936][ T67] __dev_close_many+0x1cf/0x980 [ 18.656125][ T67] ? netdev_notify_peers+0x20/0x20 [ 18.656318][ T67] ? netif_close_many+0x201/0x650 [ 18.656506][ T67] netif_close_many+0x201/0x650 [ 18.656689][ T67] ? __mutex_handoff+0x2b0/0x2b0 [ 18.656872][ T67] ? __dev_close_many+0x980/0x980 [ 18.657065][ T67] ? netif_close_many_and_unlock+0x21/0x2a0 [ 18.657303][ T67] ? trace_contention_end+0xd8/0x140 [ 18.657492][ T67] unregister_netdevice_many_notify+0x30a/0x1c90 [ 18.657723][ T67] ? default_device_exit_batch+0x80/0x2d0 [ 18.657920][ T67] ? mutex_is_locked+0x1c/0x50 [ 18.658113][ T67] ? dev_ingress_queue_create+0x190/0x190 [ 18.658309][ T67] ? rtnl_is_locked+0x15/0x20 [ 18.658497][ T67] ? unregister_netdevice_queue+0x6f/0x410 [ 18.658723][ T67] ? unregister_netdevice_many+0x20/0x20 [ 18.658909][ T67] ? unregister_netdevice_many+0x20/0x20 [ 18.659100][ T67] default_device_exit_batch+0x235/0x2d0 [ 18.659290][ T67] ? unregister_netdev+0x60/0x60 [ 18.659478][ T67] ops_undo_list+0x2bf/0x890 [ 18.659682][ T67] ? rtnl_net_dumpid_one+0x270/0x270 [ 18.659866][ T67] ? cleanup_net+0x2d6/0x8b0 [ 18.660151][ T67] cleanup_net+0x3b2/0x8b0 [ 18.660340][ T67] ? net_passive_dec+0x190/0x190 [ 18.660525][ T67] ? rcu_is_watching+0x12/0xb0 [ 18.660708][ T67] process_one_work+0xe35/0x1650 [ 18.661042][ T67] ? pwq_dec_nr_in_flight+0x550/0x550 [ 18.661264][ T67] ? assign_work+0x168/0x240 [ 18.661488][ T67] worker_thread+0x591/0xcf0 [ 18.661688][ T67] ? rescuer_thread+0xd10/0xd10 [ 18.662005][ T67] kthread+0x37b/0x5f0 [ 18.662177][ T67] ? kthread_is_per_cpu+0xc0/0xc0 [ 18.662367][ T67] ? ret_from_fork+0x1b/0x270 [ 18.662565][ T67] ? __lock_release+0x5d/0x170 [ 18.662873][ T67] ? rcu_is_watching+0x12/0xb0 [ 18.663059][ T67] ? kthread_is_per_cpu+0xc0/0xc0 [ 18.663256][ T67] ret_from_fork+0x1db/0x270 [ 18.663488][ T67] ? kthread_is_per_cpu+0xc0/0xc0 [ 18.663770][ T67] ret_from_fork_asm+0x11/0x20 [ 18.663963][ T67] [ 18.664118][ T67] Modules linked in: [ 18.664277][ T67] CR2: 0000000000000000 [ 18.664433][ T67] ---[ end trace 0000000000000000 ]--- [ 18.664650][ T67] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 18.664931][ T67] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 1f 93 82 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 18.665830][ T67] RSP: 0018:ffffc90000487680 EFLAGS: 00010046 [ 18.666119][ T67] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff9b849b8a [ 18.666556][ T67] RDX: fffffbfff40acacd RSI: 0000000000000008 RDI: ffffffffa0565660 [ 18.666891][ T67] RBP: ffffc900004876e8 R08: 0000000000000001 R09: fffffbfff40acacc [ 18.667210][ T67] R10: ffffffffa0565667 R11: ffffc90000487140 R12: 0000000000000000 [ 18.667648][ T67] R13: 0000000000000282 R14: ffff888007229000 R15: dffffc0000000000 [ 18.667964][ T67] FS: 0000000000000000(0000) GS:ffff8880ccb07000(0000) knlGS:0000000000000000 [ 18.668437][ T67] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.668704][ T67] CR2: 0000000000000000 CR3: 000000001bd49003 CR4: 0000000000772ef0 [ 18.669024][ T67] PKRU: 55555554 [ 18.669183][ T67] Kernel panic - not syncing: Fatal exception [ 18.669650][ T67] Kernel Offset: 0x1a200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 18.670123][ T67] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr