[ 38.498597][ T12] ================================================================== [ 38.498893][ T12] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 38.499154][ T12] Write of size 8 at addr 0000000000000000 by task kworker/u16:0/12 [ 38.499428][ T12] [ 38.499519][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u16:0 Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 38.499524][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 38.499526][ T12] Workqueue: netns cleanup_net [ 38.499532][ T12] Call Trace: [ 38.499534][ T12] [ 38.499536][ T12] dump_stack_lvl+0x82/0xc0 [ 38.499546][ T12] ? try_to_grab_pending+0x81/0x6c0 [ 38.499548][ T12] kasan_report+0xca/0x100 [ 38.499554][ T12] ? try_to_grab_pending+0x81/0x6c0 [ 38.499559][ T12] kasan_check_range+0x39/0x1b0 [ 38.499562][ T12] try_to_grab_pending+0x81/0x6c0 [ 38.499565][ T12] ? irqentry_exit+0x3b/0x80 [ 38.499571][ T12] __cancel_work+0x7c/0x260 [ 38.499574][ T12] ? enable_delayed_work+0x10/0x10 [ 38.499579][ T12] ? queue_delayed_work_on+0x53/0xa0 [ 38.499583][ T12] __cancel_work_sync+0x18/0xc0 [ 38.499586][ T12] __dev_close_many+0x1ce/0x810 [ 38.499591][ T12] ? netdev_notify_peers+0x20/0x20 [ 38.499594][ T12] ? netif_close_many+0x201/0x650 [ 38.499598][ T12] netif_close_many+0x201/0x650 [ 38.499601][ T12] ? __mutex_handoff+0x2b0/0x2b0 [ 38.499606][ T12] ? __dev_close_many+0x810/0x810 [ 38.499609][ T12] ? netif_close_many_and_unlock+0x21/0x2a0 [ 38.499614][ T12] unregister_netdevice_many_notify+0x305/0x1b30 [ 38.499618][ T12] ? find_held_lock+0x2b/0x80 [ 38.499622][ T12] ? mutex_is_locked+0x1c/0x50 [ 38.499625][ T12] ? dev_ingress_queue_create+0x190/0x190 [ 38.499629][ T12] ? rtnl_is_locked+0x15/0x20 [ 38.499633][ T12] ? unregister_netdevice_queue+0x6f/0x410 [ 38.499635][ T12] ? unregister_netdevice_many+0x20/0x20 [ 38.499639][ T12] ? unregister_netdevice_many+0x20/0x20 [ 38.499645][ T12] default_device_exit_batch+0x235/0x2d0 [ 38.499649][ T12] ? unregister_netdev+0x60/0x60 [ 38.499654][ T12] ops_undo_list+0x2bf/0x890 [ 38.499662][ T12] ? netns_get+0x110/0x110 [ 38.499665][ T12] ? cleanup_net+0x2d6/0x830 [ 38.499669][ T12] cleanup_net+0x3b2/0x830 [ 38.499672][ T12] ? net_passive_dec+0x190/0x190 [ 38.499676][ T12] ? rcu_is_watching+0x12/0xb0 [ 38.499681][ T12] process_one_work+0xe35/0x1650 [ 38.499687][ T12] ? pwq_dec_nr_in_flight+0x550/0x550 [ 38.499693][ T12] ? assign_work+0x168/0x240 [ 38.499697][ T12] worker_thread+0x591/0xcf0 [ 38.499702][ T12] ? rescuer_thread+0xd10/0xd10 [ 38.499705][ T12] kthread+0x37b/0x5f0 [ 38.499709][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.499711][ T12] ? ret_from_fork+0x1b/0x270 [ 38.499716][ T12] ? __lock_release+0x5d/0x170 [ 38.499721][ T12] ? rcu_is_watching+0x12/0xb0 [ 38.499723][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.499727][ T12] ret_from_fork+0x1db/0x270 [ 38.499730][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.499733][ T12] ret_from_fork_asm+0x11/0x20 [ 38.499742][ T12] [ 38.499743][ T12] ================================================================== [ 38.509087][ T12] Disabling lock debugging due to kernel taint [ 38.509314][ T12] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 38.509580][ T12] #PF: supervisor write access in kernel mode [ 38.509797][ T12] #PF: error_code(0x0002) - not-present page [ 38.510014][ T12] PGD 0 P4D 0 [ 38.510150][ T12] Oops: Oops: 0002 [#1] SMP KASAN [ 38.510329][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u16:0 Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 38.510726][ T12] Tainted: [B]=BAD_PAGE [ 38.510859][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 38.511078][ T12] Workqueue: netns cleanup_net [ 38.511262][ T12] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 38.511469][ T12] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 38.512035][ T12] RSP: 0018:ffffc900000c7690 EFLAGS: 00010046 [ 38.512236][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8fc40aaa [ 38.512476][ T12] RDX: fffffbfff27cfecd RSI: 0000000000000008 RDI: ffffffff93e7f660 [ 38.512730][ T12] RBP: ffffc900000c76f8 R08: 0000000000000001 R09: fffffbfff27cfecc [ 38.512970][ T12] R10: ffffffff93e7f667 R11: ffffc900000c7180 R12: 0000000000000000 [ 38.513208][ T12] R13: 0000000000000286 R14: ffff888009b41000 R15: dffffc0000000000 [ 38.513449][ T12] FS: 0000000000000000(0000) GS:ffff88809c7ec000(0000) knlGS:0000000000000000 [ 38.513731][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.513942][ T12] CR2: 0000000000000000 CR3: 0000000037935003 CR4: 0000000000772ef0 [ 38.514181][ T12] PKRU: 55555554 [ 38.514308][ T12] Call Trace: [ 38.514432][ T12] [ 38.514515][ T12] ? irqentry_exit+0x3b/0x80 [ 38.514683][ T12] __cancel_work+0x7c/0x260 [ 38.514853][ T12] ? enable_delayed_work+0x10/0x10 [ 38.515012][ T12] ? queue_delayed_work_on+0x53/0xa0 [ 38.515171][ T12] __cancel_work_sync+0x18/0xc0 [ 38.515331][ T12] __dev_close_many+0x1ce/0x810 [ 38.515512][ T12] ? netdev_notify_peers+0x20/0x20 [ 38.515714][ T12] ? netif_close_many+0x201/0x650 [ 38.515885][ T12] netif_close_many+0x201/0x650 [ 38.516057][ T12] ? __mutex_handoff+0x2b0/0x2b0 [ 38.516225][ T12] ? __dev_close_many+0x810/0x810 [ 38.516397][ T12] ? netif_close_many_and_unlock+0x21/0x2a0 [ 38.516602][ T12] unregister_netdevice_many_notify+0x305/0x1b30 [ 38.516805][ T12] ? find_held_lock+0x2b/0x80 [ 38.516970][ T12] ? mutex_is_locked+0x1c/0x50 [ 38.517129][ T12] ? dev_ingress_queue_create+0x190/0x190 [ 38.517287][ T12] ? rtnl_is_locked+0x15/0x20 [ 38.517469][ T12] ? unregister_netdevice_queue+0x6f/0x410 [ 38.517671][ T12] ? unregister_netdevice_many+0x20/0x20 [ 38.517835][ T12] ? unregister_netdevice_many+0x20/0x20 [ 38.517996][ T12] default_device_exit_batch+0x235/0x2d0 [ 38.518164][ T12] ? unregister_netdev+0x60/0x60 [ 38.518347][ T12] ops_undo_list+0x2bf/0x890 [ 38.518517][ T12] ? netns_get+0x110/0x110 [ 38.518676][ T12] ? cleanup_net+0x2d6/0x830 [ 38.518839][ T12] cleanup_net+0x3b2/0x830 [ 38.518997][ T12] ? net_passive_dec+0x190/0x190 [ 38.519160][ T12] ? rcu_is_watching+0x12/0xb0 [ 38.519417][ T12] process_one_work+0xe35/0x1650 [ 38.519581][ T12] ? pwq_dec_nr_in_flight+0x550/0x550 [ 38.519765][ T12] ? assign_work+0x168/0x240 [ 38.519935][ T12] worker_thread+0x591/0xcf0 [ 38.520193][ T12] ? rescuer_thread+0xd10/0xd10 [ 38.520351][ T12] kthread+0x37b/0x5f0 [ 38.520468][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.520625][ T12] ? ret_from_fork+0x1b/0x270 [ 38.520790][ T12] ? __lock_release+0x5d/0x170 [ 38.520955][ T12] ? rcu_is_watching+0x12/0xb0 [ 38.521117][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.521279][ T12] ret_from_fork+0x1db/0x270 [ 38.521532][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.521795][ T12] ret_from_fork_asm+0x11/0x20 [ 38.521962][ T12] [ 38.522081][ T12] Modules linked in: nft_masq nft_chain_nat nf_nat nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables veth [ 38.522544][ T12] CR2: 0000000000000000 [ 38.522664][ T12] ---[ end trace 0000000000000000 ]--- [ 38.522841][ T12] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 38.523048][ T12] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 38.523612][ T12] RSP: 0018:ffffc900000c7690 EFLAGS: 00010046 [ 38.523819][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8fc40aaa [ 38.524057][ T12] RDX: fffffbfff27cfecd RSI: 0000000000000008 RDI: ffffffff93e7f660 [ 38.524291][ T12] RBP: ffffc900000c76f8 R08: 0000000000000001 R09: fffffbfff27cfecc [ 38.524628][ T12] R10: ffffffff93e7f667 R11: ffffc900000c7180 R12: 0000000000000000 [ 38.524967][ T12] R13: 0000000000000286 R14: ffff888009b41000 R15: dffffc0000000000 [ 38.525207][ T12] FS: 0000000000000000(0000) GS:ffff88809c7ec000(0000) knlGS:0000000000000000 [ 38.525494][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.525695][ T12] CR2: 0000000000000000 CR3: 0000000037935003 CR4: 0000000000772ef0 [ 38.525940][ T12] PKRU: 55555554 [ 38.526158][ T12] Kernel panic - not syncing: Fatal exception [ 38.526423][ T12] Kernel Offset: 0xe600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 38.526902][ T12] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr