======================================
| [   14.080128][  T255] netdevsim netdevsim16161 eni16161np1: renamed from eth0
| [   15.326018][  T288] ip (288) used greatest stack depth: 24008 bytes left
| [   15.373051][  T251] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN NOPTI
| [   15.373529][  T251] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[   15.373984][  T251] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 15.374187][ T251] RIP: 0010:hrtimer_active (./include/linux/seqlock.h:226 kernel/time/hrtimer.c:1727) 
[ 15.374349][ T251] Code: 00 00 49 8b 44 24 30 48 39 c3 0f 84 93 00 00 00 41 80 3f 00 0f 85 68 01 00 00 49 8b 5c 24 30 48 8d 6b 10 48 89 e8 48 c1 e8 03 <42> 0f b6 3c 28 48 89 e8 83 e0 07 83 c0 03 40 38 f8 7c 09 40 84 ff
All code
========
   0:	00 00                	add    %al,(%rax)
   2:	49 8b 44 24 30       	mov    0x30(%r12),%rax
   7:	48 39 c3             	cmp    %rax,%rbx
   a:	0f 84 93 00 00 00    	je     0xa3
  10:	41 80 3f 00          	cmpb   $0x0,(%r15)
  14:	0f 85 68 01 00 00    	jne    0x182
  1a:	49 8b 5c 24 30       	mov    0x30(%r12),%rbx
  1f:	48 8d 6b 10          	lea    0x10(%rbx),%rbp
  23:	48 89 e8             	mov    %rbp,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	42 0f b6 3c 28       	movzbl (%rax,%r13,1),%edi		<-- trapping instruction
  2f:	48 89 e8             	mov    %rbp,%rax
  32:	83 e0 07             	and    $0x7,%eax
  35:	83 c0 03             	add    $0x3,%eax
  38:	40 38 f8             	cmp    %dil,%al
  3b:	7c 09                	jl     0x46
  3d:	40 84 ff             	test   %dil,%dil

Code starting with the faulting instruction
===========================================
   0:	42 0f b6 3c 28       	movzbl (%rax,%r13,1),%edi
   5:	48 89 e8             	mov    %rbp,%rax
   8:	83 e0 07             	and    $0x7,%eax
   b:	83 c0 03             	add    $0x3,%eax
   e:	40 38 f8             	cmp    %dil,%al
  11:	7c 09                	jl     0x1c
  13:	40 84 ff             	test   %dil,%dil
[   15.374880][  T251] RSP: 0018:ffffc90000b67598 EFLAGS: 00010202
[   15.375075][  T251] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffff88800dd2f240
[   15.375304][  T251] RDX: ffffed1001ba5e49 RSI: ffff88800dd2f248 RDI: ffff88800dd2f210
[   15.375530][  T251] RBP: 0000000000000010 R08: 0000000000000001 R09: fffffbfff6926fe1
[   15.375759][  T251] R10: ffffffffb4937f0f R11: ffff88806d13dbc0 R12: ffff88800dd2f210
[   15.375981][  T251] R13: dffffc0000000000 R14: ffff88800dd2f000 R15: ffffed1001ba5e48
[   15.376234][  T251] FS:  00007fd0223141c0(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[   15.376502][  T251] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   15.376697][  T251] CR2: 00007fd014267000 CR3: 0000000002b9e004 CR4: 0000000000772ef0
[   15.376940][  T251] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   15.377170][  T251] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   15.377394][  T251] PKRU: 55555554
[   15.377507][  T251] Call Trace:
[   15.377620][  T251]  <TASK>
[ 15.377700][ T251] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) 
[ 15.377821][ T251] ? exc_general_protection (arch/x86/kernel/traps.c:751 arch/x86/kernel/traps.c:693) 
[ 15.377976][ T251] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) 
[ 15.378128][ T251] ? hrtimer_active (./include/linux/seqlock.h:226 kernel/time/hrtimer.c:1727) 
[ 15.378281][ T251] hrtimer_cancel (kernel/time/hrtimer.c:1373 kernel/time/hrtimer.c:1502) 
[ 15.378433][ T251] nsim_stop (drivers/net/netdevsim/netdev.c:483 drivers/net/netdevsim/netdev.c:504) netdevsim 
[ 15.378596][ T251] __dev_close_many (net/core/dev.c:1720) 
[ 15.378745][ T251] ? __pfx___dev_close_many (net/core/dev.c:1684) 
[ 15.378895][ T251] ? __pfx_validate_chain (kernel/locking/lockdep.c:3862) 
[ 15.379047][ T251] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) 
[ 15.379196][ T251] ? mark_lock (kernel/locking/lockdep.c:4729 (discriminator 3)) 
[ 15.379310][ T251] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) 
[ 15.379461][ T251] dev_close_many (net/core/dev.c:1747) 
[ 15.379614][ T251] ? __pfx_dev_close_many (net/core/dev.c:1737) 
[ 15.379783][ T251] unregister_netdevice_many_notify (net/core/dev.c:11828) 
[ 15.379977][ T251] ? __pfx___mutex_trylock_common (kernel/locking/mutex.c:79) 
[ 15.380166][ T251] ? __pfx_unregister_netdevice_many_notify (net/core/dev.c:11795) 
[ 15.380356][ T251] ? lock_acquire (kernel/locking/lockdep.c:5824) 
[ 15.380513][ T251] ? __mutex_lock (./arch/x86/include/asm/preempt.h:94 kernel/locking/mutex.c:595 kernel/locking/mutex.c:730) 
[ 15.380669][ T251] ? nsim_destroy (drivers/net/netdevsim/netdev.c:1034) netdevsim 
[ 15.380830][ T251] ? __pfx___mutex_lock (kernel/locking/mutex.c:729) 
[ 15.380996][ T251] unregister_netdevice_queue (net/core/dev.c:11777) 
[ 15.381177][ T251] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 15.381331][ T251] ? __pfx_unregister_netdevice_queue (net/core/dev.c:11766) 
[ 15.381525][ T251] nsim_destroy (drivers/net/netdevsim/netdev.c:1039 (discriminator 2)) netdevsim 
[ 15.381686][ T251] ? __pfx_mntput_no_expire (fs/namespace.c:1435) 
[ 15.381845][ T251] __nsim_dev_port_del (drivers/net/netdevsim/dev.c:426 drivers/net/netdevsim/dev.c:1429) netdevsim 
[ 15.382041][ T251] nsim_dev_reload_destroy (drivers/net/netdevsim/dev.c:1438 drivers/net/netdevsim/dev.c:1661) netdevsim 
[ 15.382244][ T251] nsim_drv_remove (drivers/net/netdevsim/dev.c:1678) netdevsim 
[ 15.382407][ T251] device_release_driver_internal (drivers/base/dd.c:1275 drivers/base/dd.c:1296) 
[ 15.382606][ T251] ? klist_put (lib/klist.c:220) 
[ 15.382721][ T251] bus_remove_device (./include/linux/kobject.h:193 drivers/base/base.h:73 drivers/base/bus.c:586) 
[ 15.382872][ T251] device_del (drivers/base/core.c:3855) 
[ 15.382986][ T251] ? __pfx_device_del (drivers/base/core.c:3809) 
[ 15.383137][ T251] ? lock_acquire.part.0 (kernel/locking/lockdep.c:469 kernel/locking/lockdep.c:5853) 
[ 15.383287][ T251] ? kernfs_fop_write_iter (fs/kernfs/file.c:326) 
[ 15.383441][ T251] device_unregister (drivers/base/core.c:3772 drivers/base/core.c:3896) 
[ 15.383591][ T251] del_device_store (drivers/net/netdevsim/bus.c:230) netdevsim 
[ 15.383785][ T251] ? __pfx_del_device_store (drivers/net/netdevsim/bus.c:197) netdevsim 
[ 15.383979][ T251] ? __pfx_sysfs_kf_write (fs/sysfs/file.c:132) 
[ 15.384130][ T251] ? sysfs_file_ops (fs/sysfs/file.c:31 (discriminator 1)) 
[ 15.384283][ T251] ? __pfx_sysfs_kf_write (fs/sysfs/file.c:132) 
[ 15.384433][ T251] kernfs_fop_write_iter (fs/kernfs/file.c:334) 
[ 15.384584][ T251] vfs_write (fs/read_write.c:586 fs/read_write.c:679) 
[ 15.384700][ T251] ? __pfx_vfs_write (fs/read_write.c:660) 
[ 15.384848][ T251] ? find_held_lock (kernel/locking/lockdep.c:5341) 
[ 15.385001][ T251] ? __pfx___mutex_unlock_slowpath (kernel/locking/mutex.c:885) 
[ 15.385189][ T251] ksys_write (fs/read_write.c:731) 
[ 15.385309][ T251] ? __pfx_ksys_write (fs/read_write.c:721) 
[ 15.385458][ T251] ? kernfs_fop_llseek (fs/kernfs/file.c:891) 
[ 15.385611][ T251] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 15.385760][ T251] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[   15.385951][  T251] RIP: 0033:0x7fd02252eb77
[ 15.386111][ T251] Code: 0b 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24
All code
========
   0:	0b 00                	or     (%rax),%eax
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b7                	jmp    0xffffffffffffffc7
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 01 00 00 00       	mov    $0x1,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	48 89 54 24 18       	mov    %rdx,0x18(%rsp)
  3c:	48                   	rex.W
  3d:	89                   	.byte 0x89
  3e:	74 24                	je     0x64

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	48 89 54 24 18       	mov    %rdx,0x18(%rsp)
  12:	48                   	rex.W
  13:	89                   	.byte 0x89
  14:	74 24                	je     0x3a
[   15.386634][  T251] RSP: 002b:00007ffc509a3398 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   15.386863][  T251] RAX: ffffffffffffffda RBX: 00007fd022314140 RCX: 00007fd02252eb77
[   15.387087][  T251] RDX: 0000000000000005 RSI: 000056180d478d60 RDI: 0000000000000006
[   15.387308][  T251] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[   15.387531][  T251] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fd01426a100


Finger prints:
hrtimer_active:hrtimer_cancel:nsim_stop:__dev_close_many:dev_close_many