[ 46.479020][ T12] ================================================================== [ 46.479348][ T12] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 46.479614][ T12] Write of size 8 at addr 0000000000000000 by task kworker/u16:0/12 [ 46.479869][ T12] [ 46.479964][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u16:0 Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 46.479968][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 46.479972][ T12] Workqueue: netns cleanup_net [ 46.479983][ T12] Call Trace: [ 46.479985][ T12] [ 46.479989][ T12] dump_stack_lvl+0x82/0xc0 [ 46.479997][ T12] ? try_to_grab_pending+0x81/0x6c0 [ 46.480000][ T12] kasan_report+0xca/0x100 [ 46.480009][ T12] ? try_to_grab_pending+0x81/0x6c0 [ 46.480015][ T12] kasan_check_range+0x39/0x1b0 [ 46.480019][ T12] try_to_grab_pending+0x81/0x6c0 [ 46.480024][ T12] __cancel_work+0x7c/0x260 [ 46.480027][ T12] ? enable_delayed_work+0x10/0x10 [ 46.480032][ T12] ? qdisc_destroy+0x50/0x50 [ 46.480040][ T12] __cancel_work_sync+0x18/0xc0 [ 46.480044][ T12] __dev_close_many+0x1cf/0x980 [ 46.480050][ T12] ? netdev_notify_peers+0x20/0x20 [ 46.480053][ T12] ? netif_close_many+0x201/0x650 [ 46.480058][ T12] netif_close_many+0x201/0x650 [ 46.480061][ T12] ? __mutex_handoff+0x2b0/0x2b0 [ 46.480068][ T12] ? __dev_close_many+0x980/0x980 [ 46.480071][ T12] ? netif_close_many_and_unlock+0x21/0x2a0 [ 46.480075][ T12] ? trace_contention_end+0xd8/0x140 [ 46.480079][ T12] unregister_netdevice_many_notify+0x30a/0x1c90 [ 46.480085][ T12] ? default_device_exit_batch+0x80/0x2d0 [ 46.480093][ T12] ? rtnl_is_locked+0x15/0x20 [ 46.480099][ T12] ? dev_ingress_queue_create+0x190/0x190 [ 46.480104][ T12] ? rtnl_is_locked+0x15/0x20 [ 46.480107][ T12] ? unregister_netdevice_queue+0x6f/0x410 [ 46.480111][ T12] ? unregister_netdevice_many+0x20/0x20 [ 46.480117][ T12] default_device_exit_batch+0x235/0x2d0 [ 46.480121][ T12] ? unregister_netdev+0x60/0x60 [ 46.480127][ T12] ops_undo_list+0x2bf/0x890 [ 46.480133][ T12] ? rtnl_net_dumpid_one+0x270/0x270 [ 46.480136][ T12] ? cleanup_net+0x2d6/0x8b0 [ 46.480143][ T12] cleanup_net+0x3b2/0x8b0 [ 46.480147][ T12] ? net_passive_dec+0x190/0x190 [ 46.480152][ T12] ? rcu_is_watching+0x12/0xb0 [ 46.480159][ T12] process_one_work+0xe35/0x1650 [ 46.480166][ T12] ? pwq_dec_nr_in_flight+0x550/0x550 [ 46.480172][ T12] ? assign_work+0x168/0x240 [ 46.480176][ T12] worker_thread+0x591/0xcf0 [ 46.480182][ T12] ? rescuer_thread+0xd10/0xd10 [ 46.480186][ T12] kthread+0x37b/0x5f0 [ 46.480192][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 46.480195][ T12] ? ret_from_fork+0x1b/0x270 [ 46.480200][ T12] ? __lock_release+0x5d/0x170 [ 46.480204][ T12] ? rcu_is_watching+0x12/0xb0 [ 46.480207][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 46.480211][ T12] ret_from_fork+0x1db/0x270 [ 46.480214][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 46.480217][ T12] ret_from_fork_asm+0x11/0x20 [ 46.480228][ T12] [ 46.480229][ T12] ================================================================== [ 46.489614][ T12] Disabling lock debugging due to kernel taint [ 46.489838][ T12] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 46.490096][ T12] #PF: supervisor write access in kernel mode [ 46.490309][ T12] #PF: error_code(0x0002) - not-present page [ 46.490520][ T12] PGD 0 P4D 0 [ 46.490656][ T12] Oops: Oops: 0002 [#1] SMP KASAN [ 46.490834][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u16:0 Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 46.491229][ T12] Tainted: [B]=BAD_PAGE [ 46.491364][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 46.491594][ T12] Workqueue: netns cleanup_net [ 46.491787][ T12] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 46.492004][ T12] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 1f 93 82 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 46.492614][ T12] RSP: 0018:ffffc900000c7680 EFLAGS: 00010046 [ 46.492834][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff94449b8a [ 46.493093][ T12] RDX: fffffbfff322cacd RSI: 0000000000000008 RDI: ffffffff99165660 [ 46.493358][ T12] RBP: ffffc900000c76e8 R08: 0000000000000001 R09: fffffbfff322cacc [ 46.493618][ T12] R10: ffffffff99165667 R11: ffffc900000c7140 R12: 0000000000000000 [ 46.493866][ T12] R13: 0000000000000282 R14: ffff88800acd9000 R15: dffffc0000000000 [ 46.494142][ T12] FS: 0000000000000000(0000) GS:ffff8880d4087000(0000) knlGS:0000000000000000 [ 46.494483][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.494693][ T12] CR2: 0000000000000000 CR3: 000000000cbbf001 CR4: 0000000000772ef0 [ 46.494939][ T12] PKRU: 55555554 [ 46.495064][ T12] Call Trace: [ 46.495252][ T12] [ 46.495393][ T12] __cancel_work+0x7c/0x260 [ 46.495602][ T12] ? enable_delayed_work+0x10/0x10 [ 46.495783][ T12] ? qdisc_destroy+0x50/0x50 [ 46.495953][ T12] __cancel_work_sync+0x18/0xc0 [ 46.496128][ T12] __dev_close_many+0x1cf/0x980 [ 46.496294][ T12] ? netdev_notify_peers+0x20/0x20 [ 46.496512][ T12] ? netif_close_many+0x201/0x650 [ 46.496679][ T12] netif_close_many+0x201/0x650 [ 46.496859][ T12] ? __mutex_handoff+0x2b0/0x2b0 [ 46.497032][ T12] ? __dev_close_many+0x980/0x980 [ 46.497202][ T12] ? netif_close_many_and_unlock+0x21/0x2a0 [ 46.497428][ T12] ? trace_contention_end+0xd8/0x140 [ 46.497604][ T12] unregister_netdevice_many_notify+0x30a/0x1c90 [ 46.497812][ T12] ? default_device_exit_batch+0x80/0x2d0 [ 46.497978][ T12] ? rtnl_is_locked+0x15/0x20 [ 46.498153][ T12] ? dev_ingress_queue_create+0x190/0x190 [ 46.498319][ T12] ? rtnl_is_locked+0x15/0x20 [ 46.498503][ T12] ? unregister_netdevice_queue+0x6f/0x410 [ 46.498712][ T12] ? unregister_netdevice_many+0x20/0x20 [ 46.498883][ T12] default_device_exit_batch+0x235/0x2d0 [ 46.499045][ T12] ? unregister_netdev+0x60/0x60 [ 46.499210][ T12] ops_undo_list+0x2bf/0x890 [ 46.499397][ T12] ? rtnl_net_dumpid_one+0x270/0x270 [ 46.499576][ T12] ? cleanup_net+0x2d6/0x8b0 [ 46.499846][ T12] cleanup_net+0x3b2/0x8b0 [ 46.500017][ T12] ? net_passive_dec+0x190/0x190 [ 46.500182][ T12] ? rcu_is_watching+0x12/0xb0 [ 46.500359][ T12] process_one_work+0xe35/0x1650 [ 46.500630][ T12] ? pwq_dec_nr_in_flight+0x550/0x550 [ 46.500807][ T12] ? assign_work+0x168/0x240 [ 46.500970][ T12] worker_thread+0x591/0xcf0 [ 46.501139][ T12] ? rescuer_thread+0xd10/0xd10 [ 46.501322][ T12] kthread+0x37b/0x5f0 [ 46.501468][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 46.501632][ T12] ? ret_from_fork+0x1b/0x270 [ 46.501803][ T12] ? __lock_release+0x5d/0x170 [ 46.501982][ T12] ? rcu_is_watching+0x12/0xb0 [ 46.502176][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 46.502348][ T12] ret_from_fork+0x1db/0x270 [ 46.502529][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 46.502695][ T12] ret_from_fork_asm+0x11/0x20 [ 46.502895][ T12] [ 46.503025][ T12] Modules linked in: pktgen [ 46.503203][ T12] CR2: 0000000000000000 [ 46.503332][ T12] ---[ end trace 0000000000000000 ]--- [ 46.503536][ T12] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 46.503765][ T12] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 1f 93 82 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 46.504510][ T12] RSP: 0018:ffffc900000c7680 EFLAGS: 00010046 [ 46.504722][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff94449b8a [ 46.504992][ T12] RDX: fffffbfff322cacd RSI: 0000000000000008 RDI: ffffffff99165660 [ 46.505236][ T12] RBP: ffffc900000c76e8 R08: 0000000000000001 R09: fffffbfff322cacc [ 46.505504][ T12] R10: ffffffff99165667 R11: ffffc900000c7140 R12: 0000000000000000 [ 46.505961][ T12] R13: 0000000000000282 R14: ffff88800acd9000 R15: dffffc0000000000 [ 46.506214][ T12] FS: 0000000000000000(0000) GS:ffff8880d4087000(0000) knlGS:0000000000000000 [ 46.506517][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.506723][ T12] CR2: 0000000000000000 CR3: 000000000cbbf001 CR4: 0000000000772ef0 [ 46.506988][ T12] PKRU: 55555554 [ 46.507115][ T12] Kernel panic - not syncing: Fatal exception [ 46.507425][ T12] Kernel Offset: 0x12e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 46.507832][ T12] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr