[ 36.839812][ T69] ================================================================== [ 36.840150][ T69] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 36.840459][ T69] Write of size 8 at addr 0000000000000000 by task kworker/u16:1/69 [ 36.840767][ T69] [ 36.840874][ T69] CPU: 1 UID: 0 PID: 69 Comm: kworker/u16:1 Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 36.840879][ T69] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 36.840881][ T69] Workqueue: netns cleanup_net [ 36.840889][ T69] Call Trace: [ 36.840891][ T69] [ 36.840894][ T69] dump_stack_lvl+0x82/0xc0 [ 36.840901][ T69] ? try_to_grab_pending+0x81/0x6c0 [ 36.840904][ T69] kasan_report+0xca/0x100 [ 36.840912][ T69] ? try_to_grab_pending+0x81/0x6c0 [ 36.840917][ T69] kasan_check_range+0x39/0x1b0 [ 36.840921][ T69] try_to_grab_pending+0x81/0x6c0 [ 36.840926][ T69] __cancel_work+0x7c/0x260 [ 36.840929][ T69] ? enable_delayed_work+0x10/0x10 [ 36.840934][ T69] ? queue_delayed_work_on+0x6a/0xa0 [ 36.840938][ T69] __cancel_work_sync+0x18/0xc0 [ 36.840942][ T69] __dev_close_many+0x1ce/0x810 [ 36.840947][ T69] ? netdev_notify_peers+0x20/0x20 [ 36.840951][ T69] ? netif_close_many+0x201/0x650 [ 36.840955][ T69] netif_close_many+0x201/0x650 [ 36.840958][ T69] ? __mutex_handoff+0x2b0/0x2b0 [ 36.840965][ T69] ? __dev_close_many+0x810/0x810 [ 36.840968][ T69] ? netif_close_many_and_unlock+0x21/0x2a0 [ 36.840972][ T69] unregister_netdevice_many_notify+0x305/0x1b30 [ 36.840977][ T69] ? find_held_lock+0x2b/0x80 [ 36.840981][ T69] ? mutex_is_locked+0x1c/0x50 [ 36.840984][ T69] ? dev_ingress_queue_create+0x190/0x190 [ 36.840987][ T69] ? rtnl_is_locked+0x15/0x20 [ 36.840992][ T69] ? unregister_netdevice_queue+0x6f/0x410 [ 36.840995][ T69] ? unregister_netdevice_many+0x20/0x20 [ 36.840998][ T69] ? unregister_netdevice_many+0x20/0x20 [ 36.841004][ T69] default_device_exit_batch+0x235/0x2d0 [ 36.841008][ T69] ? unregister_netdev+0x60/0x60 [ 36.841014][ T69] ops_undo_list+0x2bf/0x890 [ 36.841022][ T69] ? netns_get+0x110/0x110 [ 36.841025][ T69] ? cleanup_net+0x2d6/0x830 [ 36.841030][ T69] cleanup_net+0x3b2/0x830 [ 36.841033][ T69] ? net_passive_dec+0x190/0x190 [ 36.841037][ T69] ? rcu_is_watching+0x12/0xb0 [ 36.841044][ T69] process_one_work+0xe35/0x1650 [ 36.841049][ T69] ? pwq_dec_nr_in_flight+0x550/0x550 [ 36.841055][ T69] ? assign_work+0x168/0x240 [ 36.841059][ T69] worker_thread+0x591/0xcf0 [ 36.841064][ T69] ? rescuer_thread+0xd10/0xd10 [ 36.841067][ T69] kthread+0x37b/0x5f0 [ 36.841072][ T69] ? kthread_is_per_cpu+0xc0/0xc0 [ 36.841075][ T69] ? ret_from_fork+0x1b/0x270 [ 36.841082][ T69] ? __lock_release+0x5d/0x170 [ 36.841086][ T69] ? rcu_is_watching+0x12/0xb0 [ 36.841089][ T69] ? kthread_is_per_cpu+0xc0/0xc0 [ 36.841092][ T69] ret_from_fork+0x1db/0x270 [ 36.841095][ T69] ? kthread_is_per_cpu+0xc0/0xc0 [ 36.841098][ T69] ret_from_fork_asm+0x11/0x20 [ 36.841106][ T69] [ 36.841107][ T69] ================================================================== [ 36.852180][ T69] Disabling lock debugging due to kernel taint [ 36.852423][ T69] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 36.852702][ T69] #PF: supervisor write access in kernel mode [ 36.853035][ T69] #PF: error_code(0x0002) - not-present page [ 36.853279][ T69] PGD 0 P4D 0 [ 36.853426][ T69] Oops: Oops: 0002 [#1] SMP KASAN [ 36.853624][ T69] CPU: 1 UID: 0 PID: 69 Comm: kworker/u16:1 Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 36.854150][ T69] Tainted: [B]=BAD_PAGE [ 36.854294][ T69] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 36.854539][ T69] Workqueue: netns cleanup_net [ 36.854839][ T69] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 36.855090][ T69] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 36.855865][ T69] RSP: 0018:ffffc900004a7690 EFLAGS: 00010046 [ 36.856107][ T69] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff9e040aaa [ 36.856494][ T69] RDX: fffffbfff444fecd RSI: 0000000000000008 RDI: ffffffffa227f660 [ 36.856780][ T69] RBP: ffffc900004a76f8 R08: 0000000000000001 R09: fffffbfff444fecc [ 36.857068][ T69] R10: ffffffffa227f667 R11: ffffc900004a7180 R12: 0000000000000000 [ 36.857448][ T69] R13: 0000000000000286 R14: ffff88800a9ac000 R15: dffffc0000000000 [ 36.857737][ T69] FS: 0000000000000000(0000) GS:ffff88808e46c000(0000) knlGS:0000000000000000 [ 36.858076][ T69] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.858416][ T69] CR2: 0000000000000000 CR3: 0000000038335005 CR4: 0000000000772ef0 [ 36.858713][ T69] PKRU: 55555554 [ 36.858854][ T69] Call Trace: [ 36.858995][ T69] [ 36.859095][ T69] __cancel_work+0x7c/0x260 [ 36.859288][ T69] ? enable_delayed_work+0x10/0x10 [ 36.859482][ T69] ? queue_delayed_work_on+0x6a/0xa0 [ 36.859673][ T69] __cancel_work_sync+0x18/0xc0 [ 36.859968][ T69] __dev_close_many+0x1ce/0x810 [ 36.860144][ T69] ? netdev_notify_peers+0x20/0x20 [ 36.860321][ T69] ? netif_close_many+0x201/0x650 [ 36.860497][ T69] netif_close_many+0x201/0x650 [ 36.860771][ T69] ? __mutex_handoff+0x2b0/0x2b0 [ 36.860952][ T69] ? __dev_close_many+0x810/0x810 [ 36.861124][ T69] ? netif_close_many_and_unlock+0x21/0x2a0 [ 36.861342][ T69] unregister_netdevice_many_notify+0x305/0x1b30 [ 36.861651][ T69] ? find_held_lock+0x2b/0x80 [ 36.861829][ T69] ? mutex_is_locked+0x1c/0x50 [ 36.862004][ T69] ? dev_ingress_queue_create+0x190/0x190 [ 36.862272][ T69] ? rtnl_is_locked+0x15/0x20 [ 36.862446][ T69] ? unregister_netdevice_queue+0x6f/0x410 [ 36.862665][ T69] ? unregister_netdevice_many+0x20/0x20 [ 36.862839][ T69] ? unregister_netdevice_many+0x20/0x20 [ 36.863020][ T69] default_device_exit_batch+0x235/0x2d0 [ 36.863198][ T69] ? unregister_netdev+0x60/0x60 [ 36.863375][ T69] ops_undo_list+0x2bf/0x890 [ 36.863551][ T69] ? netns_get+0x110/0x110 [ 36.863818][ T69] ? cleanup_net+0x2d6/0x830 [ 36.864027][ T69] cleanup_net+0x3b2/0x830 [ 36.864219][ T69] ? net_passive_dec+0x190/0x190 [ 36.864391][ T69] ? rcu_is_watching+0x12/0xb0 [ 36.864660][ T69] process_one_work+0xe35/0x1650 [ 36.864837][ T69] ? pwq_dec_nr_in_flight+0x550/0x550 [ 36.865023][ T69] ? assign_work+0x168/0x240 [ 36.865197][ T69] worker_thread+0x591/0xcf0 [ 36.865468][ T69] ? rescuer_thread+0xd10/0xd10 [ 36.865641][ T69] kthread+0x37b/0x5f0 [ 36.865774][ T69] ? kthread_is_per_cpu+0xc0/0xc0 [ 36.865948][ T69] ? ret_from_fork+0x1b/0x270 [ 36.866218][ T69] ? __lock_release+0x5d/0x170 [ 36.866396][ T69] ? rcu_is_watching+0x12/0xb0 [ 36.866570][ T69] ? kthread_is_per_cpu+0xc0/0xc0 [ 36.866743][ T69] ret_from_fork+0x1db/0x270 [ 36.867016][ T69] ? kthread_is_per_cpu+0xc0/0xc0 [ 36.867188][ T69] ret_from_fork_asm+0x11/0x20 [ 36.867366][ T69] [ 36.867498][ T69] Modules linked in: veth nf_tables [ 36.867680][ T69] CR2: 0000000000000000 [ 36.867904][ T69] ---[ end trace 0000000000000000 ]--- [ 36.868083][ T69] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 36.868304][ T69] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 36.869019][ T69] RSP: 0018:ffffc900004a7690 EFLAGS: 00010046 [ 36.869236][ T69] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff9e040aaa [ 36.869585][ T69] RDX: fffffbfff444fecd RSI: 0000000000000008 RDI: ffffffffa227f660 [ 36.869843][ T69] RBP: ffffc900004a76f8 R08: 0000000000000001 R09: fffffbfff444fecc [ 36.870196][ T69] R10: ffffffffa227f667 R11: ffffc900004a7180 R12: 0000000000000000 [ 36.870453][ T69] R13: 0000000000000286 R14: ffff88800a9ac000 R15: dffffc0000000000 [ 36.870712][ T69] FS: 0000000000000000(0000) GS:ffff88808e46c000(0000) knlGS:0000000000000000 [ 36.871127][ T69] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.871344][ T69] CR2: 0000000000000000 CR3: 0000000038335005 CR4: 0000000000772ef0 [ 36.871604][ T69] PKRU: 55555554 [ 36.871826][ T69] Kernel panic - not syncing: Fatal exception [ 36.872129][ T69] Kernel Offset: 0x1ca00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 36.872529][ T69] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr