[ 16.396801][ T253] ip (253) used greatest stack depth: 23712 bytes left [ 32.081549][ T12] ================================================================== [ 32.081916][ T12] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 32.082233][ T12] Write of size 8 at addr 0000000000000000 by task kworker/u16:0/12 [ 32.082525][ T12] [ 32.082632][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u16:0 Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 32.082637][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 32.082640][ T12] Workqueue: netns cleanup_net [ 32.082657][ T12] Call Trace: [ 32.082661][ T12] [ 32.082664][ T12] dump_stack_lvl+0x82/0xc0 [ 32.082678][ T12] ? try_to_grab_pending+0x81/0x6c0 [ 32.082681][ T12] kasan_report+0xca/0x100 [ 32.082694][ T12] ? try_to_grab_pending+0x81/0x6c0 [ 32.082699][ T12] kasan_check_range+0x39/0x1b0 [ 32.082704][ T12] try_to_grab_pending+0x81/0x6c0 [ 32.082709][ T12] __cancel_work+0x7c/0x260 [ 32.082712][ T12] ? enable_delayed_work+0x10/0x10 [ 32.082716][ T12] ? queue_delayed_work_on+0x6a/0xa0 [ 32.082721][ T12] __cancel_work_sync+0x18/0xc0 [ 32.082725][ T12] __dev_close_many+0x1ce/0x810 [ 32.082731][ T12] ? netdev_notify_peers+0x20/0x20 [ 32.082736][ T12] ? netif_close_many+0x201/0x650 [ 32.082741][ T12] netif_close_many+0x201/0x650 [ 32.082744][ T12] ? __mutex_handoff+0x2b0/0x2b0 [ 32.082751][ T12] ? __dev_close_many+0x810/0x810 [ 32.082755][ T12] ? netif_close_many_and_unlock+0x21/0x2a0 [ 32.082759][ T12] unregister_netdevice_many_notify+0x305/0x1b30 [ 32.082763][ T12] ? find_held_lock+0x2b/0x80 [ 32.082768][ T12] ? mutex_is_locked+0x1c/0x50 [ 32.082771][ T12] ? dev_ingress_queue_create+0x190/0x190 [ 32.082774][ T12] ? rtnl_is_locked+0x15/0x20 [ 32.082779][ T12] ? unregister_netdevice_queue+0x6f/0x410 [ 32.082781][ T12] ? unregister_netdevice_many+0x20/0x20 [ 32.082785][ T12] ? unregister_netdevice_many+0x20/0x20 [ 32.082791][ T12] default_device_exit_batch+0x235/0x2d0 [ 32.082795][ T12] ? unregister_netdev+0x60/0x60 [ 32.082801][ T12] ops_undo_list+0x2bf/0x890 [ 32.082810][ T12] ? netns_get+0x110/0x110 [ 32.082813][ T12] ? cleanup_net+0x2d6/0x830 [ 32.082818][ T12] cleanup_net+0x3b2/0x830 [ 32.082821][ T12] ? net_passive_dec+0x190/0x190 [ 32.082824][ T12] ? rcu_is_watching+0x12/0xb0 [ 32.082834][ T12] process_one_work+0xe35/0x1650 [ 32.082840][ T12] ? pwq_dec_nr_in_flight+0x550/0x550 [ 32.082845][ T12] ? assign_work+0x168/0x240 [ 32.082849][ T12] worker_thread+0x591/0xcf0 [ 32.082854][ T12] ? rescuer_thread+0xd10/0xd10 [ 32.082858][ T12] kthread+0x37b/0x5f0 [ 32.082863][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 32.082865][ T12] ? ret_from_fork+0x1b/0x270 [ 32.082875][ T12] ? __lock_release+0x5d/0x170 [ 32.082879][ T12] ? rcu_is_watching+0x12/0xb0 [ 32.082882][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 32.082885][ T12] ret_from_fork+0x1db/0x270 [ 32.082889][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 32.082891][ T12] ret_from_fork_asm+0x11/0x20 [ 32.082904][ T12] [ 32.082906][ T12] ================================================================== [ 32.093704][ T12] Disabling lock debugging due to kernel taint [ 32.093957][ T12] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 32.094231][ T12] #PF: supervisor write access in kernel mode [ 32.094556][ T12] #PF: error_code(0x0002) - not-present page [ 32.094781][ T12] PGD 0 P4D 0 [ 32.094925][ T12] Oops: Oops: 0002 [#1] SMP KASAN [ 32.095117][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u16:0 Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 32.095632][ T12] Tainted: [B]=BAD_PAGE [ 32.095779][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 32.096014][ T12] Workqueue: netns cleanup_net [ 32.096311][ T12] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 32.096546][ T12] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 32.097175][ T12] RSP: 0018:ffffc900000c7690 EFLAGS: 00010046 [ 32.097404][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffac040aaa [ 32.097777][ T12] RDX: fffffbfff604fecd RSI: 0000000000000008 RDI: ffffffffb027f660 [ 32.098056][ T12] RBP: ffffc900000c76f8 R08: 0000000000000001 R09: fffffbfff604fecc [ 32.098333][ T12] R10: ffffffffb027f667 R11: ffffc900000c7180 R12: 0000000000000000 [ 32.098608][ T12] R13: 0000000000000286 R14: ffff88800254c000 R15: dffffc0000000000 [ 32.098885][ T12] FS: 0000000000000000(0000) GS:ffff888085fec000(0000) knlGS:0000000000000000 [ 32.099205][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.099544][ T12] CR2: 0000000000000000 CR3: 000000001b135005 CR4: 0000000000772ef0 [ 32.099821][ T12] PKRU: 55555554 [ 32.099962][ T12] Call Trace: [ 32.100100][ T12] [ 32.100201][ T12] __cancel_work+0x7c/0x260 [ 32.100387][ T12] ? enable_delayed_work+0x10/0x10 [ 32.100573][ T12] ? queue_delayed_work_on+0x6a/0xa0 [ 32.100865][ T12] __cancel_work_sync+0x18/0xc0 [ 32.101045][ T12] __dev_close_many+0x1ce/0x810 [ 32.101225][ T12] ? netdev_notify_peers+0x20/0x20 [ 32.101405][ T12] ? netif_close_many+0x201/0x650 [ 32.101587][ T12] netif_close_many+0x201/0x650 [ 32.101768][ T12] ? __mutex_handoff+0x2b0/0x2b0 [ 32.101948][ T12] ? __dev_close_many+0x810/0x810 [ 32.102128][ T12] ? netif_close_many_and_unlock+0x21/0x2a0 [ 32.102360][ T12] unregister_netdevice_many_notify+0x305/0x1b30 [ 32.102593][ T12] ? find_held_lock+0x2b/0x80 [ 32.102776][ T12] ? mutex_is_locked+0x1c/0x50 [ 32.102960][ T12] ? dev_ingress_queue_create+0x190/0x190 [ 32.103232][ T12] ? rtnl_is_locked+0x15/0x20 [ 32.103416][ T12] ? unregister_netdevice_queue+0x6f/0x410 [ 32.103641][ T12] ? unregister_netdevice_many+0x20/0x20 [ 32.103829][ T12] ? unregister_netdevice_many+0x20/0x20 [ 32.104011][ T12] default_device_exit_batch+0x235/0x2d0 [ 32.104186][ T12] ? unregister_netdev+0x60/0x60 [ 32.104388][ T12] ops_undo_list+0x2bf/0x890 [ 32.104573][ T12] ? netns_get+0x110/0x110 [ 32.104750][ T12] ? cleanup_net+0x2d6/0x830 [ 32.104929][ T12] cleanup_net+0x3b2/0x830 [ 32.105124][ T12] ? net_passive_dec+0x190/0x190 [ 32.105307][ T12] ? rcu_is_watching+0x12/0xb0 [ 32.105584][ T12] process_one_work+0xe35/0x1650 [ 32.105763][ T12] ? pwq_dec_nr_in_flight+0x550/0x550 [ 32.105953][ T12] ? assign_work+0x168/0x240 [ 32.106136][ T12] worker_thread+0x591/0xcf0 [ 32.106332][ T12] ? rescuer_thread+0xd10/0xd10 [ 32.106517][ T12] kthread+0x37b/0x5f0 [ 32.106662][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 32.106843][ T12] ? ret_from_fork+0x1b/0x270 [ 32.107028][ T12] ? __lock_release+0x5d/0x170 [ 32.107207][ T12] ? rcu_is_watching+0x12/0xb0 [ 32.107390][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 32.107571][ T12] ret_from_fork+0x1db/0x270 [ 32.107751][ T12] ? kthread_is_per_cpu+0xc0/0xc0 [ 32.107931][ T12] ret_from_fork_asm+0x11/0x20 [ 32.108119][ T12] [ 32.108270][ T12] Modules linked in: nft_ct nf_conntrack_netlink veth nft_nat nft_numgen nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables [ 32.108893][ T12] CR2: 0000000000000000 [ 32.109039][ T12] ---[ end trace 0000000000000000 ]--- [ 32.109331][ T12] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 32.109570][ T12] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 df 81 84 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 32.110330][ T12] RSP: 0018:ffffc900000c7690 EFLAGS: 00010046 [ 32.110569][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffac040aaa [ 32.110850][ T12] RDX: fffffbfff604fecd RSI: 0000000000000008 RDI: ffffffffb027f660 [ 32.111127][ T12] RBP: ffffc900000c76f8 R08: 0000000000000001 R09: fffffbfff604fecc [ 32.111402][ T12] R10: ffffffffb027f667 R11: ffffc900000c7180 R12: 0000000000000000 [ 32.111677][ T12] R13: 0000000000000286 R14: ffff88800254c000 R15: dffffc0000000000 [ 32.111973][ T12] FS: 0000000000000000(0000) GS:ffff888085fec000(0000) knlGS:0000000000000000 [ 32.112302][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.112545][ T12] CR2: 0000000000000000 CR3: 000000001b135005 CR4: 0000000000772ef0 [ 32.112823][ T12] PKRU: 55555554 [ 32.112969][ T12] Kernel panic - not syncing: Fatal exception [ 32.113395][ T12] Kernel Offset: 0x2aa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 32.113918][ T12] ---[ end Kernel panic - not syncing: Fatal exception ]--- HARD STOP (105.063564) WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr