====================================== | | WAIT TIMEOUT stdout | [ 15.833669][ T223] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN | [ 15.834248][ T223] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 15.835155][ T223] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 15.835526][ T223] RIP: 0010:__flush_work (kernel/workqueue.c:4234) [ 15.835798][ T223] Code: 31 c0 80 fb 01 0f 87 66 2d b6 ff 83 e3 01 0f 84 eb 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e7 00 00 00 49 83 7c 24 18 00 0f 84 c5 00 00 00 All code ======== 0: 31 c0 xor %eax,%eax 2: 80 fb 01 cmp $0x1,%bl 5: 0f 87 66 2d b6 ff ja 0xffffffffffb62d71 b: 83 e3 01 and $0x1,%ebx e: 0f 84 eb 00 00 00 je 0xff 14: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 1b: fc ff df 1e: 49 8d 7c 24 18 lea 0x18(%r12),%rdi 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 e7 00 00 00 jne 0x11b 34: 49 83 7c 24 18 00 cmpq $0x0,0x18(%r12) 3a: 0f 84 c5 00 00 00 je 0x105 Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 e7 00 00 00 jne 0xf1 a: 49 83 7c 24 18 00 cmpq $0x0,0x18(%r12) 10: 0f 84 c5 00 00 00 je 0xdb [ 15.836723][ T223] RSP: 0018:ffffc90000a67ab8 EFLAGS: 00010206 [ 15.837063][ T223] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 15.837469][ T223] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000018 [ 15.837865][ T223] RBP: 1ffff9200014cf57 R08: 0000000000000001 R09: fffff5200014cf52 [ 15.838268][ T223] R10: ffffc90000a67a97 R11: ffffc90000a677f8 R12: 0000000000000000 [ 15.838663][ T223] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88800576d0f0 [ 15.839061][ T223] FS: 00007f3576750000(0000) GS:ffff888086825000(0000) knlGS:0000000000000000 [ 15.839540][ T223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 15.839877][ T223] CR2: 000055ffe3af24c8 CR3: 000000000911d005 CR4: 0000000000772ef0 [ 15.840277][ T223] PKRU: 55555554 [ 15.840476][ T223] Call Trace: [ 15.840679][ T223] [ 15.840813][ T223] ? start_flush_work (kernel/workqueue.c:4228) [ 15.841086][ T223] ? __rtnl_unlock (net/core/rtnetlink.c:145 (discriminator 3)) [ 15.841361][ T223] ? netdev_run_todo (./include/linux/list.h:381 net/core/dev.c:11853) [ 15.841638][ T223] virtnet_remove (drivers/net/virtio_net.c:6258 drivers/net/virtio_net.c:7201) [ 15.841901][ T223] virtio_dev_remove (drivers/virtio/virtio.c:378) [ 15.842170][ T223] device_release_driver_internal (drivers/base/dd.c:1276 drivers/base/dd.c:1297) [ 15.842521][ T223] ? sysfs_file_ops (fs/sysfs/file.c:135) [ 15.842801][ T223] unbind_store (drivers/base/bus.c:245) [ 15.843026][ T223] kernfs_fop_write_iter (fs/kernfs/file.c:88 fs/kernfs/file.c:356) [ 15.843286][ T223] vfs_write (fs/read_write.c:594 fs/read_write.c:686) [ 15.843476][ T223] ? kernel_write (fs/read_write.c:667) [ 15.843730][ T223] ? lock_vma_under_rcu (mm/mmap_lock.c:259) [ 15.843993][ T223] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 15.844244][ T223] ksys_write (fs/read_write.c:738) [ 15.844379][ T223] ? __ia32_sys_read (fs/read_write.c:728) [ 15.844542][ T223] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:143 ./include/linux/mmap_lock.h:182 arch/x86/mm/fault.c:1338) [ 15.844709][ T223] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 15.844873][ T223] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 15.845074][ T223] RIP: 0033:0x7f3576850257 [ 15.845245][ T223] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 15.845822][ T223] RSP: 002b:00007fffe8a8d008 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 15.846066][ T223] RAX: ffffffffffffffda RBX: 00007f357694c780 RCX: 00007f3576850257 [ 15.846311][ T223] RDX: 0000000000000008 RSI: 000055ffe3af14c0 RDI: 0000000000000001 [ 15.846558][ T223] RBP: 0000000000000008 R08: 0000000000000003 R09: 0000000000000077 [ 15.846802][ T223] R10: 0000000000000063 R11: 0000000000000246 R12: 0000000000000008 Finger prints: __flush_work:virtnet_remove:virtio_dev_remove:device_release_driver_internal:unbind_store