[ 2.835842] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 2.835961] #PF: supervisor write access in kernel mode [ 2.836004] #PF: error_code(0x0002) - not-present page [ 2.836043] PGD 2f23067 P4D 2f23067 PUD 2f38067 PMD 0 [ 2.836087] Oops: Oops: 0002 [#1] SMP [ 2.836122] CPU: 0 UID: 0 PID: 227 Comm: packetdrill Not tainted 6.18.0-rc5-virtme #1 PREEMPT(voluntary) [ 2.836205] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2.836266] RIP: 0010:work_grab_pending+0x2f/0x1b0 [ 2.836361] Code: 83 e6 01 41 57 41 56 4c 8d 77 20 41 55 41 54 41 89 f4 55 48 89 d5 53 48 89 fb 9c 58 fa 48 89 45 00 45 85 e4 0f 85 8a 00 00 00 48 0f ba 2b 00 41 0f 92 c5 72 0e 5b 44 89 e8 5d 41 5c 41 5d 41 [ 2.836484] RSP: 0018:ffffb94f8027bcb8 EFLAGS: 00010046 [ 2.836534] RAX: 0000000000000246 RBX: 0000000000000000 RCX: 00000000fffb76b3 [ 2.836593] RDX: ffffb94f8027bcf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2.836649] RBP: ffffb94f8027bcf0 R08: 0000000000000000 R09: 00000000000001d9 [ 2.836707] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2.836765] R13: ffffb94f8027bde8 R14: 0000000000000020 R15: 0000000000000000 [ 2.836836] FS: 0000000037cdd3c0(0000) GS:ffff8cb3d77e6000(0000) knlGS:0000000000000000 [ 2.836908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.836963] CR2: 0000000000000000 CR3: 000000000522b005 CR4: 0000000000772ef0 [ 2.837041] PKRU: 55555554 [ 2.837061] Call Trace: [ 2.837088] [ 2.837160] __cancel_work+0x29/0xe0 [ 2.837206] ? dev_deactivate_many+0x2c9/0x300 [ 2.837264] __cancel_work_sync+0x16/0x80 [ 2.837299] __dev_close_many+0x11b/0x280 [ 2.837343] netif_close_many+0x98/0x160 [ 2.837374] unregister_netdevice_many_notify+0x1d8/0xa50 [ 2.837428] ? __queue_work+0x139/0x4e0 [ 2.837461] unregister_netdevice_queue+0xa0/0xe0 [ 2.837505] __tun_detach+0x45e/0x490 [ 2.837553] tun_chr_close+0x35/0xa0 [ 2.837592] __fput+0xda/0x290 [ 2.837630] __x64_sys_close+0x3d/0x80 [ 2.837660] do_syscall_64+0xa4/0xfd0 [ 2.837703] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 2.837754] RIP: 0033:0x4901eb [ 2.837784] Code: 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 78 04 00 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 21 79 04 00 8b 44 [ 2.837917] RSP: 002b:00007ffc1dd5c2b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2.837979] RAX: ffffffffffffffda RBX: 00007ffc1dd5c808 RCX: 00000000004901eb [ 2.838034] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000005 [ 2.838090] RBP: 00007ffc1dd5c2f0 R08: 0000000000000000 R09: 0000000000000000 [ 2.838173] R10: 0000000001000000 R11: 0000000000000293 R12: 00007ffc1dd5c788 [ 2.838229] R13: 0000000000000001 R14: 000000000054e030 R15: 0000000000000001 [ 2.838287] [ 2.838310] Modules linked in: [ 2.838344] CR2: 0000000000000000 [ 2.838374] ---[ end trace 0000000000000000 ]--- [ 2.838421] RIP: 0010:work_grab_pending+0x2f/0x1b0 [ 2.838467] Code: 83 e6 01 41 57 41 56 4c 8d 77 20 41 55 41 54 41 89 f4 55 48 89 d5 53 48 89 fb 9c 58 fa 48 89 45 00 45 85 e4 0f 85 8a 00 00 00 48 0f ba 2b 00 41 0f 92 c5 72 0e 5b 44 89 e8 5d 41 5c 41 5d 41 [ 2.838612] RSP: 0018:ffffb94f8027bcb8 EFLAGS: 00010046 [ 2.838651] RAX: 0000000000000246 RBX: 0000000000000000 RCX: 00000000fffb76b3 [ 2.838709] RDX: ffffb94f8027bcf0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2.838783] RBP: ffffb94f8027bcf0 R08: 0000000000000000 R09: 00000000000001d9 [ 2.838842] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2.838900] R13: ffffb94f8027bde8 R14: 0000000000000020 R15: 0000000000000000 [ 2.838957] FS: 0000000037cdd3c0(0000) GS:ffff8cb3d77e6000(0000) knlGS:0000000000000000 [ 2.839017] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.839064] CR2: 0000000000000000 CR3: 000000000522b005 CR4: 0000000000772ef0 [ 2.839130] PKRU: 55555554 [ 2.839159] note: packetdrill[227] exited with irqs disabled WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr