====================================== | | WAIT TIMEOUT stdout | [ 15.175850][ T223] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN | [ 15.176286][ T223] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 15.176858][ T223] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 15.177079][ T223] RIP: 0010:__flush_work (kernel/workqueue.c:4234) [ 15.177255][ T223] Code: 31 c0 80 fb 01 0f 87 66 2d b6 ff 83 e3 01 0f 84 eb 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e7 00 00 00 49 83 7c 24 18 00 0f 84 c5 00 00 00 All code ======== 0: 31 c0 xor %eax,%eax 2: 80 fb 01 cmp $0x1,%bl 5: 0f 87 66 2d b6 ff ja 0xffffffffffb62d71 b: 83 e3 01 and $0x1,%ebx e: 0f 84 eb 00 00 00 je 0xff 14: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 1b: fc ff df 1e: 49 8d 7c 24 18 lea 0x18(%r12),%rdi 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 e7 00 00 00 jne 0x11b 34: 49 83 7c 24 18 00 cmpq $0x0,0x18(%r12) 3a: 0f 84 c5 00 00 00 je 0x105 Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 e7 00 00 00 jne 0xf1 a: 49 83 7c 24 18 00 cmpq $0x0,0x18(%r12) 10: 0f 84 c5 00 00 00 je 0xdb [ 15.177831][ T223] RSP: 0018:ffffc90000ab7ab8 EFLAGS: 00010206 [ 15.178039][ T223] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 15.178311][ T223] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000018 [ 15.178556][ T223] RBP: 1ffff92000156f57 R08: 0000000000000001 R09: fffff52000156f52 [ 15.178798][ T223] R10: ffffc90000ab7a97 R11: ffffc90000ab77f8 R12: 0000000000000000 [ 15.179062][ T223] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888005e7d0f0 [ 15.179308][ T223] FS: 00007f0c019dc000(0000) GS:ffff8880a9625000(0000) knlGS:0000000000000000 [ 15.179591][ T223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 15.179798][ T223] CR2: 0000559597ef84c8 CR3: 0000000009141005 CR4: 0000000000772ef0 [ 15.180047][ T223] PKRU: 55555554 [ 15.180169][ T223] Call Trace: [ 15.180293][ T223] [ 15.180378][ T223] ? start_flush_work (kernel/workqueue.c:4228) [ 15.180545][ T223] ? __rtnl_unlock (net/core/rtnetlink.c:145 (discriminator 3)) [ 15.180736][ T223] ? netdev_run_todo (./include/linux/list.h:381 net/core/dev.c:11853) [ 15.180902][ T223] virtnet_remove (drivers/net/virtio_net.c:6258 drivers/net/virtio_net.c:7201) [ 15.181070][ T223] virtio_dev_remove (drivers/virtio/virtio.c:378) [ 15.181233][ T223] device_release_driver_internal (drivers/base/dd.c:1276 drivers/base/dd.c:1297) [ 15.181442][ T223] ? sysfs_file_ops (fs/sysfs/file.c:135) [ 15.181604][ T223] unbind_store (drivers/base/bus.c:245) [ 15.181727][ T223] kernfs_fop_write_iter (fs/kernfs/file.c:88 fs/kernfs/file.c:356) [ 15.181891][ T223] vfs_write (fs/read_write.c:594 fs/read_write.c:686) [ 15.182034][ T223] ? kernel_write (fs/read_write.c:667) [ 15.182207][ T223] ? lock_vma_under_rcu (mm/mmap_lock.c:259) [ 15.182373][ T223] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 15.182535][ T223] ksys_write (fs/read_write.c:738) [ 15.182659][ T223] ? __ia32_sys_read (fs/read_write.c:728) [ 15.182821][ T223] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:143 ./include/linux/mmap_lock.h:182 arch/x86/mm/fault.c:1338) [ 15.183010][ T223] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 15.183175][ T223] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 15.183375][ T223] RIP: 0033:0x7f0c01adc257 [ 15.183541][ T223] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 15.184124][ T223] RSP: 002b:00007ffd682c89d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 15.184369][ T223] RAX: ffffffffffffffda RBX: 00007f0c01bd8780 RCX: 00007f0c01adc257 [ 15.184638][ T223] RDX: 0000000000000008 RSI: 0000559597ef74c0 RDI: 0000000000000001 [ 15.184892][ T223] RBP: 0000000000000008 R08: 0000000000000003 R09: 0000000000000077 [ 15.185171][ T223] R10: 0000000000000063 R11: 0000000000000246 R12: 0000000000000008 Finger prints: __flush_work:virtnet_remove:virtio_dev_remove:device_release_driver_internal:unbind_store