[ 38.117788][ T70] ================================================================== [ 38.118159][ T70] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 38.118511][ T70] Write of size 8 at addr 0000000000000000 by task kworker/u16:1/70 [ 38.118768][ T70] [ 38.118875][ T70] CPU: 0 UID: 0 PID: 70 Comm: kworker/u16:1 Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 38.118882][ T70] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 38.118889][ T70] Workqueue: netns cleanup_net [ 38.118913][ T70] Call Trace: [ 38.118919][ T70] [ 38.118921][ T70] dump_stack_lvl+0x82/0xc0 [ 38.118941][ T70] ? try_to_grab_pending+0x81/0x6c0 [ 38.118944][ T70] kasan_report+0xca/0x100 [ 38.118960][ T70] ? try_to_grab_pending+0x81/0x6c0 [ 38.118965][ T70] kasan_check_range+0x39/0x1b0 [ 38.118968][ T70] try_to_grab_pending+0x81/0x6c0 [ 38.118973][ T70] __cancel_work+0x7c/0x260 [ 38.118976][ T70] ? enable_delayed_work+0x10/0x10 [ 38.118980][ T70] ? queue_delayed_work_on+0x6a/0xa0 [ 38.118985][ T70] __cancel_work_sync+0x18/0xc0 [ 38.118989][ T70] __dev_close_many+0x1ce/0x810 [ 38.118995][ T70] ? netdev_notify_peers+0x20/0x20 [ 38.118999][ T70] ? netif_close_many+0x201/0x650 [ 38.119003][ T70] netif_close_many+0x201/0x650 [ 38.119006][ T70] ? __mutex_handoff+0x2b0/0x2b0 [ 38.119015][ T70] ? __dev_close_many+0x810/0x810 [ 38.119018][ T70] ? netif_close_many_and_unlock+0x21/0x2a0 [ 38.119023][ T70] unregister_netdevice_many_notify+0x305/0x1b30 [ 38.119031][ T70] ? find_held_lock+0x2b/0x80 [ 38.119038][ T70] ? mutex_is_locked+0x1c/0x50 [ 38.119041][ T70] ? dev_ingress_queue_create+0x190/0x190 [ 38.119044][ T70] ? rtnl_is_locked+0x15/0x20 [ 38.119047][ T70] ? unregister_netdevice_queue+0x6f/0x410 [ 38.119050][ T70] ? unregister_netdevice_many+0x20/0x20 [ 38.119054][ T70] ? unregister_netdevice_many+0x20/0x20 [ 38.119060][ T70] default_device_exit_batch+0x235/0x2d0 [ 38.119064][ T70] ? unregister_netdev+0x60/0x60 [ 38.119070][ T70] ops_undo_list+0x2bf/0x890 [ 38.119074][ T70] ? netns_get+0x110/0x110 [ 38.119076][ T70] ? cleanup_net+0x2d6/0x830 [ 38.119081][ T70] cleanup_net+0x3b2/0x830 [ 38.119085][ T70] ? net_passive_dec+0x190/0x190 [ 38.119088][ T70] ? rcu_is_watching+0x12/0xb0 [ 38.119098][ T70] process_one_work+0xe35/0x1650 [ 38.119104][ T70] ? pwq_dec_nr_in_flight+0x550/0x550 [ 38.119110][ T70] ? assign_work+0x168/0x240 [ 38.119113][ T70] worker_thread+0x591/0xcf0 [ 38.119119][ T70] ? rescuer_thread+0xd10/0xd10 [ 38.119122][ T70] kthread+0x37b/0x5f0 [ 38.119126][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.119129][ T70] ? ret_from_fork+0x1b/0x270 [ 38.119145][ T70] ? __lock_release+0x5d/0x170 [ 38.119149][ T70] ? rcu_is_watching+0x12/0xb0 [ 38.119152][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.119155][ T70] ret_from_fork+0x1db/0x270 [ 38.119159][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.119161][ T70] ret_from_fork_asm+0x11/0x20 [ 38.119175][ T70] [ 38.119176][ T70] ================================================================== [ 38.129125][ T70] Disabling lock debugging due to kernel taint [ 38.129373][ T70] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 38.129643][ T70] #PF: supervisor write access in kernel mode [ 38.129856][ T70] #PF: error_code(0x0002) - not-present page [ 38.130073][ T70] PGD 0 P4D 0 [ 38.130225][ T70] Oops: Oops: 0002 [#1] SMP KASAN [ 38.130419][ T70] CPU: 0 UID: 0 PID: 70 Comm: kworker/u16:1 Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 38.130802][ T70] Tainted: [B]=BAD_PAGE [ 38.130951][ T70] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 38.131165][ T70] Workqueue: netns cleanup_net [ 38.131372][ T70] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 38.131601][ T70] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 7f 7f 81 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 38.132249][ T70] RSP: 0018:ffffc900004b7690 EFLAGS: 00010046 [ 38.132479][ T70] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffa4a3f90a [ 38.132746][ T70] RDX: fffffbfff518b6cd RSI: 0000000000000008 RDI: ffffffffa8c5b660 [ 38.133030][ T70] RBP: ffffc900004b76f8 R08: 0000000000000001 R09: fffffbfff518b6cc [ 38.133296][ T70] R10: ffffffffa8c5b667 R11: ffffc900004b7180 R12: 0000000000000000 [ 38.133562][ T70] R13: 0000000000000286 R14: ffff888013891000 R15: dffffc0000000000 [ 38.133825][ T70] FS: 0000000000000000(0000) GS:ffff88808d610000(0000) knlGS:0000000000000000 [ 38.134141][ T70] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.134393][ T70] CR2: 0000000000000000 CR3: 000000000f112003 CR4: 0000000000772ef0 [ 38.134649][ T70] PKRU: 55555554 [ 38.134777][ T70] Call Trace: [ 38.134924][ T70] [ 38.135022][ T70] __cancel_work+0x7c/0x260 [ 38.135202][ T70] ? enable_delayed_work+0x10/0x10 [ 38.135393][ T70] ? queue_delayed_work_on+0x6a/0xa0 [ 38.135572][ T70] __cancel_work_sync+0x18/0xc0 [ 38.135742][ T70] __dev_close_many+0x1ce/0x810 [ 38.135949][ T70] ? netdev_notify_peers+0x20/0x20 [ 38.136123][ T70] ? netif_close_many+0x201/0x650 [ 38.136325][ T70] netif_close_many+0x201/0x650 [ 38.136499][ T70] ? __mutex_handoff+0x2b0/0x2b0 [ 38.136675][ T70] ? __dev_close_many+0x810/0x810 [ 38.136848][ T70] ? netif_close_many_and_unlock+0x21/0x2a0 [ 38.137070][ T70] unregister_netdevice_many_notify+0x305/0x1b30 [ 38.137296][ T70] ? find_held_lock+0x2b/0x80 [ 38.137478][ T70] ? mutex_is_locked+0x1c/0x50 [ 38.137656][ T70] ? dev_ingress_queue_create+0x190/0x190 [ 38.137828][ T70] ? rtnl_is_locked+0x15/0x20 [ 38.138016][ T70] ? unregister_netdevice_queue+0x6f/0x410 [ 38.138240][ T70] ? unregister_netdevice_many+0x20/0x20 [ 38.138423][ T70] ? unregister_netdevice_many+0x20/0x20 [ 38.138593][ T70] default_device_exit_batch+0x235/0x2d0 [ 38.138762][ T70] ? unregister_netdev+0x60/0x60 [ 38.138961][ T70] ops_undo_list+0x2bf/0x890 [ 38.139140][ T70] ? netns_get+0x110/0x110 [ 38.139327][ T70] ? cleanup_net+0x2d6/0x830 [ 38.139514][ T70] cleanup_net+0x3b2/0x830 [ 38.139694][ T70] ? net_passive_dec+0x190/0x190 [ 38.139875][ T70] ? rcu_is_watching+0x12/0xb0 [ 38.140055][ T70] process_one_work+0xe35/0x1650 [ 38.140269][ T70] ? pwq_dec_nr_in_flight+0x550/0x550 [ 38.140453][ T70] ? assign_work+0x168/0x240 [ 38.140622][ T70] worker_thread+0x591/0xcf0 [ 38.140798][ T70] ? rescuer_thread+0xd10/0xd10 [ 38.140997][ T70] kthread+0x37b/0x5f0 [ 38.141126][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.141306][ T70] ? ret_from_fork+0x1b/0x270 [ 38.141498][ T70] ? __lock_release+0x5d/0x170 [ 38.141678][ T70] ? rcu_is_watching+0x12/0xb0 [ 38.141863][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.142041][ T70] ret_from_fork+0x1db/0x270 [ 38.142224][ T70] ? kthread_is_per_cpu+0xc0/0xc0 [ 38.142411][ T70] ret_from_fork_asm+0x11/0x20 [ 38.142608][ T70] [ 38.142771][ T70] Modules linked in: veth [ 38.142961][ T70] CR2: 0000000000000000 [ 38.143153][ T70] ---[ end trace 0000000000000000 ]--- [ 38.143392][ T70] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 38.143650][ T70] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 7f 7f 81 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 38.144493][ T70] RSP: 0018:ffffc900004b7690 EFLAGS: 00010046 [ 38.144797][ T70] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffa4a3f90a [ 38.145154][ T70] RDX: fffffbfff518b6cd RSI: 0000000000000008 RDI: ffffffffa8c5b660 [ 38.145503][ T70] RBP: ffffc900004b76f8 R08: 0000000000000001 R09: fffffbfff518b6cc [ 38.145859][ T70] R10: ffffffffa8c5b667 R11: ffffc900004b7180 R12: 0000000000000000 [ 38.146217][ T70] R13: 0000000000000286 R14: ffff888013891000 R15: dffffc0000000000 [ 38.146578][ T70] FS: 0000000000000000(0000) GS:ffff88808d610000(0000) knlGS:0000000000000000 [ 38.147025][ T70] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.147362][ T70] CR2: 0000000000000000 CR3: 000000000f112003 CR4: 0000000000772ef0 [ 38.147748][ T70] PKRU: 55555554 [ 38.147956][ T70] Kernel panic - not syncing: Fatal exception [ 38.148408][ T70] Kernel Offset: 0x23400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 38.149023][ T70] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr