[ 18.383987][ T230] ==================================================================
[ 18.384339][ T230] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0
[ 18.384674][ T230] Write of size 8 at addr 0000000000000000 by task packetdrill/230
[ 18.384951][ T230]
[ 18.385053][ T230] CPU: 0 UID: 0 PID: 230 Comm: packetdrill Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full)
[ 18.385057][ T230] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 18.385060][ T230] Call Trace:
[ 18.385062][ T230]
[ 18.385064][ T230] dump_stack_lvl+0x82/0xc0
[ 18.385071][ T230] ? try_to_grab_pending+0x81/0x6c0
[ 18.385079][ T230] kasan_report+0xca/0x100
[ 18.385087][ T230] ? try_to_grab_pending+0x81/0x6c0
[ 18.385094][ T230] kasan_check_range+0x39/0x1b0
[ 18.385099][ T230] try_to_grab_pending+0x81/0x6c0
[ 18.385104][ T230] __cancel_work+0x7c/0x260
[ 18.385107][ T230] ? enable_delayed_work+0x10/0x10
[ 18.385112][ T230] ? qdisc_destroy+0x50/0x50
[ 18.385118][ T230] __cancel_work_sync+0x18/0xc0
[ 18.385123][ T230] __dev_close_many+0x1ce/0x810
[ 18.385127][ T230] ? netdev_notify_peers+0x20/0x20
[ 18.385131][ T230] ? netif_close_many+0x201/0x650
[ 18.385135][ T230] netif_close_many+0x201/0x650
[ 18.385138][ T230] ? __dev_close_many+0x810/0x810
[ 18.385142][ T230] ? netif_close_many_and_unlock+0x21/0x2a0
[ 18.385146][ T230] unregister_netdevice_many_notify+0x305/0x1b30
[ 18.385150][ T230] ? try_to_wake_up+0x16e/0xd80
[ 18.385156][ T230] ? sched_ttwu_pending+0x530/0x530
[ 18.385159][ T230] ? dev_ingress_queue_create+0x190/0x190
[ 18.385162][ T230] ? find_held_lock+0x2b/0x80
[ 18.385166][ T230] ? __queue_work+0x322/0xab0
[ 18.385169][ T230] ? __lock_release+0x5d/0x170
[ 18.385173][ T230] ? __queue_work+0x322/0xab0
[ 18.385177][ T230] unregister_netdevice_queue+0x29e/0x410
[ 18.385181][ T230] ? unregister_netdevice_many+0x20/0x20
[ 18.385185][ T230] ? queue_delayed_work_on+0x6a/0xa0
[ 18.385188][ T230] ? lockdep_hardirqs_on+0x7c/0x110
[ 18.385194][ T230] __tun_detach+0xd4a/0x10d0
[ 18.385201][ T230] tun_chr_close+0xae/0x1c0
[ 18.385205][ T230] __fput+0x35c/0xa70
[ 18.385212][ T230] fput_close_sync+0xdd/0x1b0
[ 18.385216][ T230] ? alloc_file_clone+0xf0/0xf0
[ 18.385220][ T230] __x64_sys_close+0x7d/0xd0
[ 18.385224][ T230] do_syscall_64+0xc1/0xfd0
[ 18.385229][ T230] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 18.385232][ T230] RIP: 0033:0x4901eb
[ 18.385237][ T230] Code: 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 78 04 00 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 21 79 04 00 8b 44
[ 18.385240][ T230] RSP: 002b:00007ffc7a5a9990 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 18.385244][ T230] RAX: ffffffffffffffda RBX: 00007ffc7a5a9ef0 RCX: 00000000004901eb
[ 18.385246][ T230] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000005
[ 18.385248][ T230] RBP: 00007ffc7a5a99d0 R08: 0000000000000000 R09: 0000000000000000
[ 18.385249][ T230] R10: 0000000000000080 R11: 0000000000000293 R12: 00007ffc7a5a9e68
[ 18.385251][ T230] R13: 0000000000000001 R14: 000000000054e030 R15: 0000000000000001
[ 18.385258][ T230]
[ 18.385259][ T230] ==================================================================
[ 18.395779][ T230] Disabling lock debugging due to kernel taint
[ 18.396009][ T230] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 18.396281][ T230] #PF: supervisor write access in kernel mode
[ 18.396524][ T230] #PF: error_code(0x0002) - not-present page
[ 18.396759][ T230] PGD 25f2067 P4D 25f2067 PUD 9e83067 PMD 0
[ 18.396989][ T230] Oops: Oops: 0002 [#1] SMP KASAN
[ 18.397183][ T230] CPU: 0 UID: 0 PID: 230 Comm: packetdrill Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full)
[ 18.397602][ T230] Tainted: [B]=BAD_PAGE
[ 18.397749][ T230] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 18.397986][ T230] RIP: 0010:try_to_grab_pending+0x81/0x6c0
[ 18.398227][ T230] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 7f 7f 81 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e
[ 18.398889][ T230] RSP: 0018:ffffc90000a87900 EFLAGS: 00010046
[ 18.399128][ T230] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffa023e90a
[ 18.399412][ T230] RDX: fffffbfff488a0cd RSI: 0000000000000008 RDI: ffffffffa4450660
[ 18.399692][ T230] RBP: ffffc90000a87968 R08: 0000000000000001 R09: fffffbfff488a0cc
[ 18.399960][ T230] R10: ffffffffa4450667 R11: ffffc90000a873c0 R12: 0000000000000000
[ 18.400232][ T230] R13: 0000000000000286 R14: ffff888009398000 R15: dffffc0000000000
[ 18.400529][ T230] FS: 0000000039abd3c0(0000) GS:ffff888091e1b000(0000) knlGS:0000000000000000
[ 18.400853][ T230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 18.401086][ T230] CR2: 0000000000000000 CR3: 000000000c3ef004 CR4: 0000000000772ef0
[ 18.401368][ T230] PKRU: 55555554
[ 18.401518][ T230] Call Trace:
[ 18.401662][ T230]
[ 18.401759][ T230] __cancel_work+0x7c/0x260
[ 18.401942][ T230] ? enable_delayed_work+0x10/0x10
[ 18.402131][ T230] ? qdisc_destroy+0x50/0x50
[ 18.402310][ T230] __cancel_work_sync+0x18/0xc0
[ 18.402510][ T230] __dev_close_many+0x1ce/0x810
[ 18.402699][ T230] ? netdev_notify_peers+0x20/0x20
[ 18.402876][ T230] ? netif_close_many+0x201/0x650
[ 18.403058][ T230] netif_close_many+0x201/0x650
[ 18.403241][ T230] ? __dev_close_many+0x810/0x810
[ 18.403430][ T230] ? netif_close_many_and_unlock+0x21/0x2a0
[ 18.403660][ T230] unregister_netdevice_many_notify+0x305/0x1b30
[ 18.403884][ T230] ? try_to_wake_up+0x16e/0xd80
[ 18.404077][ T230] ? sched_ttwu_pending+0x530/0x530
[ 18.404260][ T230] ? dev_ingress_queue_create+0x190/0x190
[ 18.404463][ T230] ? find_held_lock+0x2b/0x80
[ 18.404643][ T230] ? __queue_work+0x322/0xab0
[ 18.404832][ T230] ? __lock_release+0x5d/0x170
[ 18.405012][ T230] ? __queue_work+0x322/0xab0
[ 18.405196][ T230] unregister_netdevice_queue+0x29e/0x410
[ 18.405379][ T230] ? unregister_netdevice_many+0x20/0x20
[ 18.405571][ T230] ? queue_delayed_work_on+0x6a/0xa0
[ 18.405759][ T230] ? lockdep_hardirqs_on+0x7c/0x110
[ 18.405944][ T230] __tun_detach+0xd4a/0x10d0
[ 18.406133][ T230] tun_chr_close+0xae/0x1c0
[ 18.406311][ T230] __fput+0x35c/0xa70
[ 18.406467][ T230] fput_close_sync+0xdd/0x1b0
[ 18.406643][ T230] ? alloc_file_clone+0xf0/0xf0
[ 18.406830][ T230] __x64_sys_close+0x7d/0xd0
[ 18.407007][ T230] do_syscall_64+0xc1/0xfd0
[ 18.407192][ T230] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 18.407431][ T230] RIP: 0033:0x4901eb
[ 18.407584][ T230] Code: 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 78 04 00 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 21 79 04 00 8b 44
[ 18.408334][ T230] RSP: 002b:00007ffc7a5a9990 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 18.408630][ T230] RAX: ffffffffffffffda RBX: 00007ffc7a5a9ef0 RCX: 00000000004901eb
[ 18.409002][ T230] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000005
[ 18.409271][ T230] RBP: 00007ffc7a5a99d0 R08: 0000000000000000 R09: 0000000000000000
[ 18.409661][ T230] R10: 0000000000000080 R11: 0000000000000293 R12: 00007ffc7a5a9e68
[ 18.409930][ T230] R13: 0000000000000001 R14: 000000000054e030 R15: 0000000000000001
[ 18.410207][ T230]
[ 18.410466][ T230] Modules linked in:
[ 18.410611][ T230] CR2: 0000000000000000
[ 18.410755][ T230] ---[ end trace 0000000000000000 ]---
[ 18.410931][ T230] RIP: 0010:try_to_grab_pending+0x81/0x6c0
[ 18.411165][ T230] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 7f 7f 81 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e
[ 18.411812][ T230] RSP: 0018:ffffc90000a87900 EFLAGS: 00010046
[ 18.412158][ T230] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffa023e90a
[ 18.412432][ T230] RDX: fffffbfff488a0cd RSI: 0000000000000008 RDI: ffffffffa4450660
[ 18.412716][ T230] RBP: ffffc90000a87968 R08: 0000000000000001 R09: fffffbfff488a0cc
[ 18.413080][ T230] R10: ffffffffa4450667 R11: ffffc90000a873c0 R12: 0000000000000000
[ 18.413339][ T230] R13: 0000000000000286 R14: ffff888009398000 R15: dffffc0000000000
[ 18.413731][ T230] FS: 0000000039abd3c0(0000) GS:ffff888091e1b000(0000) knlGS:0000000000000000
[ 18.414060][ T230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 18.414283][ T230] CR2: 0000000000000000 CR3: 000000000c3ef004 CR4: 0000000000772ef0
[ 18.414668][ T230] PKRU: 55555554
[ 18.414806][ T230] Kernel panic - not syncing: Fatal exception
[ 18.415101][ T230] Kernel Offset: 0x1ec00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 18.415646][ T230] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr