[ 17.826170][ T251] tun: Universal TUN/TAP device driver, 1.6
[ 22.428752][ T257] ==================================================================
[ 22.429110][ T257] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0
[ 22.429388][ T257] Write of size 8 at addr 0000000000000000 by task packetdrill/257
[ 22.429646][ T257]
[ 22.429736][ T257] CPU: 1 UID: 0 PID: 257 Comm: packetdrill Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full)
[ 22.429741][ T257] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 22.429743][ T257] Call Trace:
[ 22.429745][ T257]
[ 22.429747][ T257] dump_stack_lvl+0x82/0xc0
[ 22.429754][ T257] ? try_to_grab_pending+0x81/0x6c0
[ 22.429757][ T257] kasan_report+0xca/0x100
[ 22.429763][ T257] ? try_to_grab_pending+0x81/0x6c0
[ 22.429768][ T257] kasan_check_range+0x39/0x1b0
[ 22.429771][ T257] try_to_grab_pending+0x81/0x6c0
[ 22.429776][ T257] __cancel_work+0x7c/0x260
[ 22.429779][ T257] ? enable_delayed_work+0x10/0x10
[ 22.429783][ T257] ? qdisc_destroy+0x50/0x50
[ 22.429791][ T257] __cancel_work_sync+0x18/0xc0
[ 22.429794][ T257] __dev_close_many+0x1ce/0x810
[ 22.429799][ T257] ? netdev_notify_peers+0x20/0x20
[ 22.429802][ T257] ? netif_close_many+0x201/0x650
[ 22.429807][ T257] netif_close_many+0x201/0x650
[ 22.429811][ T257] ? __dev_close_many+0x810/0x810
[ 22.429814][ T257] ? netif_close_many_and_unlock+0x21/0x2a0
[ 22.429819][ T257] unregister_netdevice_many_notify+0x305/0x1b30
[ 22.429823][ T257] ? try_to_wake_up+0x16e/0xd80
[ 22.429830][ T257] ? sched_ttwu_pending+0x530/0x530
[ 22.429833][ T257] ? dev_ingress_queue_create+0x190/0x190
[ 22.429837][ T257] ? find_held_lock+0x2b/0x80
[ 22.429842][ T257] ? __queue_work+0x322/0xab0
[ 22.429845][ T257] ? __lock_release+0x5d/0x170
[ 22.429849][ T257] ? __queue_work+0x322/0xab0
[ 22.429853][ T257] unregister_netdevice_queue+0x29e/0x410
[ 22.429857][ T257] ? unregister_netdevice_many+0x20/0x20
[ 22.429860][ T257] ? queue_delayed_work_on+0x6a/0xa0
[ 22.429863][ T257] ? lockdep_hardirqs_on+0x7c/0x110
[ 22.429868][ T257] __tun_detach+0xd4a/0x10d0 [tun]
[ 22.429878][ T257] tun_chr_close+0xae/0x1c0 [tun]
[ 22.429884][ T257] __fput+0x35c/0xa70
[ 22.429890][ T257] fput_close_sync+0xdd/0x1b0
[ 22.429894][ T257] ? alloc_file_clone+0xf0/0xf0
[ 22.429899][ T257] __x64_sys_close+0x7d/0xd0
[ 22.429903][ T257] do_syscall_64+0xc1/0xfd0
[ 22.429908][ T257] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 22.429911][ T257] RIP: 0033:0x4901eb
[ 22.429915][ T257] Code: 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 78 04 00 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 21 79 04 00 8b 44
[ 22.429917][ T257] RSP: 002b:00007ffc3a2f8eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 22.429921][ T257] RAX: ffffffffffffffda RBX: 00007ffc3a2f93c8 RCX: 00000000004901eb
[ 22.429924][ T257] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000006
[ 22.429925][ T257] RBP: 00007ffc3a2f8ef0 R08: 0000000000000000 R09: 0000000000000000
[ 22.429927][ T257] R10: 00000000225d6050 R11: 0000000000000293 R12: 00007ffc3a2f9388
[ 22.429928][ T257] R13: 0000000000000001 R14: 000000000054e030 R15: 0000000000000001
[ 22.429934][ T257]
[ 22.429936][ T257] ==================================================================
[ 22.439550][ T257] Disabling lock debugging due to kernel taint
[ 22.439767][ T257] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 22.440019][ T257] #PF: supervisor write access in kernel mode
[ 22.440225][ T257] #PF: error_code(0x0002) - not-present page
[ 22.440432][ T257] PGD 4ee8067 P4D 4ee8067 PUD a862067 PMD 0
[ 22.440652][ T257] Oops: Oops: 0002 [#1] SMP KASAN
[ 22.440825][ T257] CPU: 1 UID: 0 PID: 257 Comm: packetdrill Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full)
[ 22.441205][ T257] Tainted: [B]=BAD_PAGE
[ 22.441334][ T257] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 22.441547][ T257] RIP: 0010:try_to_grab_pending+0x81/0x6c0
[ 22.441770][ T257] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e
[ 22.442392][ T257] RSP: 0018:ffffc90000b17900 EFLAGS: 00010046
[ 22.442603][ T257] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffb7840aaa
[ 22.442869][ T257] RDX: fffffbfff774fecd RSI: 0000000000000008 RDI: ffffffffbba7f660
[ 22.443131][ T257] RBP: ffffc90000b17968 R08: 0000000000000001 R09: fffffbfff774fecc
[ 22.443380][ T257] R10: ffffffffbba7f667 R11: ffffc90000b173c0 R12: 0000000000000000
[ 22.443632][ T257] R13: 0000000000000286 R14: ffff88800e0e8000 R15: dffffc0000000000
[ 22.443883][ T257] FS: 00000000225ce3c0(0000) GS:ffff88807a86c000(0000) knlGS:0000000000000000
[ 22.444188][ T257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 22.444397][ T257] CR2: 0000000000000000 CR3: 00000000052e5005 CR4: 0000000000772ef0
[ 22.444758][ T257] PKRU: 55555554
[ 22.444889][ T257] Call Trace:
[ 22.445034][ T257]
[ 22.445124][ T257] __cancel_work+0x7c/0x260
[ 22.445399][ T257] ? enable_delayed_work+0x10/0x10
[ 22.445569][ T257] ? qdisc_destroy+0x50/0x50
[ 22.445737][ T257] __cancel_work_sync+0x18/0xc0
[ 22.445904][ T257] __dev_close_many+0x1ce/0x810
[ 22.446180][ T257] ? netdev_notify_peers+0x20/0x20
[ 22.446350][ T257] ? netif_close_many+0x201/0x650
[ 22.446518][ T257] netif_close_many+0x201/0x650
[ 22.446686][ T257] ? __dev_close_many+0x810/0x810
[ 22.446956][ T257] ? netif_close_many_and_unlock+0x21/0x2a0
[ 22.447164][ T257] unregister_netdevice_many_notify+0x305/0x1b30
[ 22.447402][ T257] ? try_to_wake_up+0x16e/0xd80
[ 22.447580][ T257] ? sched_ttwu_pending+0x530/0x530
[ 22.447848][ T257] ? dev_ingress_queue_create+0x190/0x190
[ 22.448013][ T257] ? find_held_lock+0x2b/0x80
[ 22.448182][ T257] ? __queue_work+0x322/0xab0
[ 22.448353][ T257] ? __lock_release+0x5d/0x170
[ 22.448636][ T257] ? __queue_work+0x322/0xab0
[ 22.448804][ T257] unregister_netdevice_queue+0x29e/0x410
[ 22.448972][ T257] ? unregister_netdevice_many+0x20/0x20
[ 22.449145][ T257] ? queue_delayed_work_on+0x6a/0xa0
[ 22.449416][ T257] ? lockdep_hardirqs_on+0x7c/0x110
[ 22.449595][ T257] __tun_detach+0xd4a/0x10d0 [tun]
[ 22.449771][ T257] tun_chr_close+0xae/0x1c0 [tun]
[ 22.449940][ T257] __fput+0x35c/0xa70
[ 22.450173][ T257] fput_close_sync+0xdd/0x1b0
[ 22.450339][ T257] ? alloc_file_clone+0xf0/0xf0
[ 22.450507][ T257] __x64_sys_close+0x7d/0xd0
[ 22.450683][ T257] do_syscall_64+0xc1/0xfd0
[ 22.450954][ T257] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 22.451169][ T257] RIP: 0033:0x4901eb
[ 22.451305][ T257] Code: 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 78 04 00 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 21 79 04 00 8b 44
[ 22.452017][ T257] RSP: 002b:00007ffc3a2f8eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 22.452275][ T257] RAX: ffffffffffffffda RBX: 00007ffc3a2f93c8 RCX: 00000000004901eb
[ 22.452641][ T257] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000006
[ 22.452894][ T257] RBP: 00007ffc3a2f8ef0 R08: 0000000000000000 R09: 0000000000000000
[ 22.453147][ T257] R10: 00000000225d6050 R11: 0000000000000293 R12: 00007ffc3a2f9388
[ 22.453504][ T257] R13: 0000000000000001 R14: 000000000054e030 R15: 0000000000000001
[ 22.453765][ T257]
[ 22.453895][ T257] Modules linked in: xt_tcpudp xt_conntrack nft_compat nf_tables x_tables nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 tun
[ 22.454390][ T257] CR2: 0000000000000000
[ 22.454518][ T257] ---[ end trace 0000000000000000 ]---
[ 22.454689][ T257] RIP: 0010:try_to_grab_pending+0x81/0x6c0
[ 22.455019][ T257] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e
[ 22.455729][ T257] RSP: 0018:ffffc90000b17900 EFLAGS: 00010046
[ 22.455940][ T257] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffb7840aaa
[ 22.456193][ T257] RDX: fffffbfff774fecd RSI: 0000000000000008 RDI: ffffffffbba7f660
[ 22.456620][ T257] RBP: ffffc90000b17968 R08: 0000000000000001 R09: fffffbfff774fecc
[ 22.456868][ T257] R10: ffffffffbba7f667 R11: ffffc90000b173c0 R12: 0000000000000000
[ 22.457118][ T257] R13: 0000000000000286 R14: ffff88800e0e8000 R15: dffffc0000000000
[ 22.457472][ T257] FS: 00000000225ce3c0(0000) GS:ffff88807a86c000(0000) knlGS:0000000000000000
[ 22.457774][ T257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 22.458098][ T257] CR2: 0000000000000000 CR3: 00000000052e5005 CR4: 0000000000772ef0
[ 22.458370][ T257] PKRU: 55555554
[ 22.458498][ T257] Kernel panic - not syncing: Fatal exception
[ 22.458785][ T257] Kernel Offset: 0x36200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 22.459295][ T257] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr