From: bugzilla-daemon@kernel.org
To: kvm@vger.kernel.org
Subject: [Bug 219900] New: Guest kernel hit kernel panic when used some virtio-net options
Date: Thu, 20 Mar 2025 14:52:46 +0000 [thread overview]
Message-ID: <bug-219900-28872@https.bugzilla.kernel.org/> (raw)
https://bugzilla.kernel.org/show_bug.cgi?id=219900
Bug ID: 219900
Summary: Guest kernel hit kernel panic when used some
virtio-net options
Product: Virtualization
Version: unspecified
Hardware: All
OS: Linux
Status: NEW
Severity: low
Priority: P3
Component: kvm
Assignee: virtualization_kvm@kernel-bugs.osdl.org
Reporter: leiyang@redhat.com
Regression: No
1. Boot up guest with some qemu options
/usr/libexec/qemu-kvm \
-M q35 \
-m 16G \
-smp 12 \
-cpu host \
-device VGA,bus=pcie.0,addr=0x2 \
-drive file=//home/L1.qcow2,media=disk,if=virtio \
-device
virtio-net-pci,id=net0,netdev=hostnet0,ctrl_vq=off,ctrl_rx=off,ctrl_vlan=off,ctrl_mac_addr=off,guest_announce=off,guest_csum=off,bus=pcie.0,addr=0x5
\
-netdev tap,id=hostnet0 \
-serial unix:/tmp/monitor1,server,nowait \
-vnc :0 \
-monitor stdio \
2. Guest can not boot up and hit kernel call trace（Sometimes this problem need
to reboot then reproduced）
[ 12.048169] BUG: kernel NULL pointer dereference, address: 0000000000000010
[ 12.049665] #PF: supervisor write access in kernel mode
[ 12.050707] [drm] Initialized bochs-drm 1.0.0 20130925 for 0000:00:02.0 on
minor 0
[ 12.050732] #PF: error_code(0x0002) - not-present page
[ 12.050735] PGD 0 P4D 0
[ 12.054129] Oops: 0002 [#1] PREEMPT SMP PTI
[ 12.055931] CPU: 4 PID: 702 Comm: (udev-worker) Not tainted 6.3.0-rc7 #3
[ 12.058052] Hardware name: Red Hat KVM/RHEL, BIOS 1.16.1-1.el9 04/01/2014
[ 12.058056] RIP: 0010:virtnet_set_guest_offloads+0x4c/0xc0 [virtio_net]
[ 12.058090] Code: 48 8b 87 f8 00 00 00 48 c7 04 24 00 00 00 00 48 c7 44 24
08 00 00 00 00 48 c7 44 24 10 00 00 00 00 48 c7 44 24 18 00 00 00 00 <48> 89 70
10 48 8b 87 f8 00 00 00 48 89 e7 48 8d 70 10 e8 dd f5 0a
[ 12.058093] RSP: 0018:ffffb41ac07d7a88 EFLAGS: 00010246
[ 12.058097] RAX: 0000000000000000 RBX: ffff8e553d27c9c0 RCX:
0000000000000000
[ 12.058102] RDX: 0000000000000008 RSI: 0000000000000000 RDI:
ffff8e553d27c9c0
[ 12.058104] RBP: 0000000000174829 R08: ffffffffb6eabb60 R09:
ffff8e553d27c0a0
[ 12.058106] R10: 0000000000000008 R11: 0000000000000000 R12:
ffff8e553d27c9c0
[ 12.058108] R13: 0000000000000000 R14: 0000000000000000 R15:
ffff8e55029d2800
[ 12.058110] FS: 00007f3d05923b40(0000) GS:ffff8e586fb00000(0000)
knlGS:0000000000000000
[ 12.058113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 12.058115] CR2: 0000000000000010 CR3: 000000013a41c001 CR4:
0000000000170ee0
[ 12.058120] Call Trace:
[ 12.058131] <TASK>
[ 12.058135] virtnet_set_features+0x64/0xd0 [virtio_net]
[ 12.058148] __netdev_update_features+0x2a7/0xb70
[ 12.058164] ? preempt_count_add+0x6a/0xa0
[ 12.058173] ? _raw_spin_unlock_irq+0x1b/0x40
[ 12.058182] ? pm_runtime_set_memalloc_noio+0x5e/0xa0
[ 12.058189] register_netdevice+0x426/0x670
[ 12.058195] virtnet_probe+0x5b8/0xca0 [virtio_net]
[ 12.058208] virtio_dev_probe+0x1af/0x260
[ 12.058219] really_probe+0x1a2/0x400
[ 12.058226] ? __pfx___driver_attach+0x10/0x10
[ 12.058230] __driver_probe_device+0x78/0x170
[ 12.058233] driver_probe_device+0x1f/0x90
[ 12.058237] __driver_attach+0xce/0x1c0
[ 12.058241] bus_for_each_dev+0x84/0xd0
[ 12.058244] bus_add_driver+0x112/0x210
[ 12.058248] driver_register+0x55/0x100
[ 12.058252] ? __pfx_init_module+0x10/0x10 [virtio_net]
[ 12.058263] virtio_net_driver_init+0x8a/0xff0 [virtio_net]
[ 12.058273] ? __pfx_init_module+0x10/0x10 [virtio_net]
[ 12.058282] do_one_initcall+0x59/0x230
[ 12.058292] do_init_module+0x4a/0x210
[ 12.058300] __do_sys_finit_module+0xac/0x120
[ 12.058306] do_syscall_64+0x5b/0x80
[ 12.058355] ? syscall_exit_to_user_mode+0x17/0x40
[ 12.058360] ? do_syscall_64+0x67/0x80
[ 12.058362] ? do_syscall_64+0x67/0x80
[ 12.058364] ? do_syscall_64+0x67/0x80
[ 12.058365] ? exc_page_fault+0x70/0x170
[ 12.058369] entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 12.058379] fbcon: bochs-drmdrmfb (fb0) is primary device
[ 12.058380] RIP: 0033:0x7f3d0632792d
[ 12.058385] Code: 5d c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89
f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01
f0 ff ff 73 01 c3 48 8b 0d d3 e4 0c 00 f7 d8 64 89 01 48
[ 12.058388] RSP: 002b:00007fffc444e2f8 EFLAGS: 00000246 ORIG_RAX:
0000000000000139
[ 12.058391] RAX: ffffffffffffffda RBX: 00005617f91e4f50 RCX:
00007f3d0632792d
[ 12.058393] RDX: 0000000000000000 RSI: 00007f3d06826453 RDI:
000000000000000e
[ 12.058395] RBP: 00007f3d06826453 R08: 0000000000000000 R09:
00007fffc444e420
[ 12.058397] R10: 000000000000000e R11: 0000000000000246 R12:
0000000000020000
[ 12.058400] R13: 00005617f91e45d0 R14: 0000000000000000 R15:
00005617f91e5f90
[ 12.058403] </TASK>
[ 12.058405] Modules linked in: intel_cstate(+) intel_uncore(-) virtio_net(+)
bochs(+) joydev drm_vram_helper net_failover i2c_i801 drm_ttm_helper failover
ttm i2c_smbus pcspkr acpi_cpufreq(-) lpc_ich fuse loop zram crct10dif_pclmul
crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ghash_clmulni_intel
sha512_ssse3 serio_raw virtio_blk qemu_fw_cfg
[ 12.058451] CR2: 0000000000000010
[ 12.058516] ---[ end trace 0000000000000000 ]---
[ 12.058519] RIP: 0010:virtnet_set_guest_offloads+0x4c/0xc0 [virtio_net]
[ 12.058530] Code: 48 8b 87 f8 00 00 00 48 c7 04 24 00 00 00 00 48 c7 44 24
08 00 00 00 00 48 c7 44 24 10 00 00 00 00 48 c7 44 24 18 00 00 00 00 <48> 89 70
10 48 8b 87 f8 00 00 00 48 89 e7 48 8d 70 10 e8 dd f5 0a
[ 12.058532] RSP: 0018:ffffb41ac07d7a88 EFLAGS: 00010246
[ 12.058535] RAX: 0000000000000000 RBX: ffff8e553d27c9c0 RCX:
0000000000000000
[ 12.058537] RDX: 0000000000000008 RSI: 0000000000000000 RDI:
ffff8e553d27c9c0
[ 12.058538] RBP: 0000000000174829 R08: ffffffffb6eabb60 R09:
ffff8e553d27c0a0
[ 12.058541] R10: 0000000000000008 R11: 0000000000000000 R12:
ffff8e553d27c9c0
[ 12.058543] R13: 0000000000000000 R14: 0000000000000000 R15:
ffff8e55029d2800
[ 12.058545] FS: 00007f3d05923b40(0000) GS:ffff8e586fb00000(0000)
knlGS:0000000000000000
[ 12.058547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 12.058548] CR2: 0000000000000010 CR3: 000000013a41c001 CR4:
0000000000170ee0
[ 12.065375] Adding 8388604k swap on /dev/zram0. Priority:100 extents:1
across:8388604k SSDscFS
--
You may reply to this email to add a comment.
You are receiving this mail because:
You are watching the assignee of the bug.
reply other threads:[~2025-03-20 14:52 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=bug-219900-28872@https.bugzilla.kernel.org/ \
--to=bugzilla-daemon@kernel.org \
--cc=kvm@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.