====================================== | [ 90.262428] #PF: supervisor read access in kernel mode | [ 90.262470] #PF: error_code(0x0000) - not-present page | [ 90.262511] PGD 653d067 P4D 653d067 PUD 6b22067 PMD 0 | [ 90.262560] Oops: Oops: 0000 [#1] SMP NOPTI [ 90.262686] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 90.262750] RIP: 0010:xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3181) [ 90.262808] Code: 41 57 45 89 cf 41 56 41 55 49 89 d5 41 54 49 89 fc 55 48 89 f5 53 44 89 c3 48 83 ec 40 65 48 8b 05 1a 1b 54 01 48 89 44 24 38 <48> 8b 46 08 44 0f b7 30 48 85 c9 0f 84 f3 00 00 00 0f b6 41 12 48 All code ======== 0: 41 57 push %r15 2: 45 89 cf mov %r9d,%r15d 5: 41 56 push %r14 7: 41 55 push %r13 9: 49 89 d5 mov %rdx,%r13 c: 41 54 push %r12 e: 49 89 fc mov %rdi,%r12 11: 55 push %rbp 12: 48 89 f5 mov %rsi,%rbp 15: 53 push %rbx 16: 44 89 c3 mov %r8d,%ebx 19: 48 83 ec 40 sub $0x40,%rsp 1d: 65 48 8b 05 1a 1b 54 mov %gs:0x1541b1a(%rip),%rax # 0x1541b3f 24: 01 25: 48 89 44 24 38 mov %rax,0x38(%rsp) 2a:* 48 8b 46 08 mov 0x8(%rsi),%rax <-- trapping instruction 2e: 44 0f b7 30 movzwl (%rax),%r14d 32: 48 85 c9 test %rcx,%rcx 35: 0f 84 f3 00 00 00 je 0x12e 3b: 0f b6 41 12 movzbl 0x12(%rcx),%eax 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 8b 46 08 mov 0x8(%rsi),%rax 4: 44 0f b7 30 movzwl (%rax),%r14d 8: 48 85 c9 test %rcx,%rcx b: 0f 84 f3 00 00 00 je 0x104 11: 0f b6 41 12 movzbl 0x12(%rcx),%eax 15: 48 rex.W [ 90.262947] RSP: 0018:ffffbb4dc066fc90 EFLAGS: 00010286 [ 90.262989] RAX: 0ca7f249ea585c00 RBX: 0000000000000006 RCX: ffff8f224105ee40 [ 90.263058] RDX: ffffbb4dc066fd50 RSI: 0000000000000000 RDI: ffff8f2245869b80 [ 90.263116] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 90.263172] R10: 0000000000000040 R11: ffffffffb5a1abec R12: ffff8f2245869b80 [ 90.263236] R13: ffffbb4dc066fd50 R14: ffffbb4dc066fd50 R15: 0000000000000000 [ 90.263296] FS: 00007facd0196300(0000) GS:ffff8f22c7b76000(0000) knlGS:0000000000000000 [ 90.263358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.263400] CR2: 0000000000000008 CR3: 0000000001e7c004 CR4: 0000000000772ef0 [ 90.263449] PKRU: 55555554 [ 90.263469] Call Trace: [ 90.263490] [ 90.263518] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1231) [ 90.263563] xfrm_lookup_route (net/xfrm/xfrm_policy.c:3351) [ 90.263589] ip6_datagram_dst_update (net/ipv6/datagram.c:96 (discriminator 6)) [ 90.263631] __ip6_datagram_connect (net/ipv6/datagram.c:255) [ 90.263669] ? ip6_datagram_release_cb (./include/net/sock.h:2136 net/ipv6/datagram.c:129 net/ipv6/datagram.c:121) [ 90.263709] udpv6_connect (net/ipv6/udp.c:1310) [ 90.263755] __sys_connect (./include/linux/file.h:62 ./include/linux/file.h:83 net/socket.c:2095) [ 90.263796] ? sock_alloc_file (./include/linux/fs.h:3218 net/socket.c:486) [ 90.263831] ? __sys_socket (net/socket.c:503 net/socket.c:1740) [ 90.263865] __x64_sys_connect (net/socket.c:2111 net/socket.c:2108 net/socket.c:2108) [ 90.263892] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 90.263931] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 90.263980] RIP: 0033:0x7facd042cd77 [ 90.264011] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89 All code ======== 0: 64 89 01 mov %eax,%fs:(%rcx) 3: 48 83 c8 ff or $0xffffffffffffffff,%rax 7: c3 ret 8: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) f: 00 00 00 12: 90 nop 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2a 00 00 00 mov $0x2a,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 18 sub $0x18,%rsp 37: 89 54 24 0c mov %edx,0xc(%rsp) 3b: 48 89 34 24 mov %rsi,(%rsp) 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 18 sub $0x18,%rsp d: 89 54 24 0c mov %edx,0xc(%rsp) 11: 48 89 34 24 mov %rsi,(%rsp) 15: 89 .byte 0x89 [ 90.264134] RSP: 002b:00007ffee9585bd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 90.264190] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007facd042cd77 [ 90.264252] RDX: 000000000000001c RSI: 000000000041861c RDI: 0000000000000006 [ 90.264309] RBP: 00007ffee9585ec0 R08: 00007ffee9585ef8 R09: 0000000000000002 [ 90.264362] R10: 00007facd03245a0 R11: 0000000000000246 R12: 00007ffee9586218 Finger prints: xfrm_lookup_with_ifid:xfrm_lookup_route:ip6_datagram_dst_update:__ip6_datagram_connect:udpv6_connect