[ 52.496992][ T644] ================================================================== [ 52.497268][ T644] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 52.497503][ T644] Read of size 4 at addr 0000000000000068 by task ip/644 [ 52.497693][ T644] [ 52.497775][ T644] CPU: 0 UID: 0 PID: 644 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 52.497780][ T644] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 52.497782][ T644] Call Trace: [ 52.497784][ T644] [ 52.497786][ T644] dump_stack_lvl+0x82/0xd0 [ 52.497792][ T644] kasan_report+0xbd/0xf0 [ 52.497797][ T644] ? nexthop_create_group+0x32c/0x1550 [ 52.497803][ T644] kasan_check_range+0x39/0x1c0 [ 52.497807][ T644] nexthop_create_group+0x32c/0x1550 [ 52.497812][ T644] ? __pfx_nexthop_create_group+0x10/0x10 [ 52.497816][ T644] ? __nla_validate_parse+0x1bc/0x3d0 [ 52.497826][ T644] rtm_new_nexthop+0x310/0x8b0 [ 52.497832][ T644] ? hlock_class+0x4e/0x130 [ 52.497838][ T644] ? mark_lock+0x38/0x3e0 [ 52.497843][ T644] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 52.497861][ T644] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 52.497866][ T644] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 52.497870][ T644] rtnetlink_rcv_msg+0x712/0xc10 [ 52.497875][ T644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.497878][ T644] ? hlock_class+0x4e/0x130 [ 52.497881][ T644] ? mark_lock+0x38/0x3e0 [ 52.497886][ T644] ? __lock_acquire+0xb9a/0x1680 [ 52.497890][ T644] netlink_rcv_skb+0x130/0x360 [ 52.497894][ T644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.497899][ T644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.497906][ T644] ? netlink_deliver_tap+0x13e/0x340 [ 52.497909][ T644] ? netlink_deliver_tap+0xc3/0x340 [ 52.497913][ T644] netlink_unicast+0x44b/0x710 [ 52.497916][ T644] ? __pfx_netlink_unicast+0x10/0x10 [ 52.497920][ T644] ? find_held_lock+0x2c/0x110 [ 52.497924][ T644] netlink_sendmsg+0x723/0xbe0 [ 52.497928][ T644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.497934][ T644] ____sys_sendmsg+0x7ac/0xa10 [ 52.497940][ T644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.497944][ T644] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 52.497950][ T644] ___sys_sendmsg+0xee/0x170 [ 52.497954][ T644] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.497956][ T644] ? __pfx___lock_release+0x10/0x10 [ 52.497960][ T644] ? __pfx_handle_pte_fault+0x10/0x10 [ 52.497966][ T644] ? __handle_mm_fault+0x403/0x5e0 [ 52.497970][ T644] ? __pfx___handle_mm_fault+0x10/0x10 [ 52.497972][ T644] ? mt_find+0x2be/0x3d0 [ 52.497978][ T644] ? find_held_lock+0x2c/0x110 [ 52.497982][ T644] ? __lock_release+0x103/0x460 [ 52.497984][ T644] ? do_user_addr_fault+0x374/0xe30 [ 52.497990][ T644] __sys_sendmsg+0x109/0x1a0 [ 52.497993][ T644] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.497998][ T644] ? do_user_addr_fault+0x374/0xe30 [ 52.498003][ T644] do_syscall_64+0xc1/0x1d0 [ 52.498007][ T644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.498012][ T644] RIP: 0033:0x7f5b59e549a7 [ 52.498016][ T644] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 52.498019][ T644] RSP: 002b:00007ffd5e645008 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.498023][ T644] RAX: ffffffffffffffda RBX: 00007ffd5e645b90 RCX: 00007f5b59e549a7 [ 52.498025][ T644] RDX: 0000000000000000 RSI: 00007ffd5e645070 RDI: 0000000000000005 [ 52.498027][ T644] RBP: 00007ffd5e645530 R08: 0000000000000002 R09: 0000000000000000 [ 52.498028][ T644] R10: 00007f5b59d0d708 R11: 0000000000000246 R12: 0000000000000001 [ 52.498030][ T644] R13: 0000000067da3cd4 R14: 0000000000498600 R15: 00007ffd5e646992 [ 52.498036][ T644] [ 52.498037][ T644] ================================================================== [ 52.508666][ T644] Disabling lock debugging due to kernel taint [ 52.508870][ T644] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 52.509229][ T644] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 52.509447][ T644] CPU: 0 UID: 0 PID: 644 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 52.509700][ T644] Tainted: [B]=BAD_PAGE [ 52.509811][ T644] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 52.509999][ T644] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 52.510189][ T644] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 52.510701][ T644] RSP: 0018:ffffc900015273c8 EFLAGS: 00010202 [ 52.510887][ T644] RAX: 000000000000000d RBX: ffff88800e0aaa68 RCX: ffffffff91253d8a [ 52.511112][ T644] RDX: fffffbfff2ca2491 RSI: 0000000000000008 RDI: ffffffff96512480 [ 52.511330][ T644] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2ca2490 [ 52.511545][ T644] R10: ffffffff96512487 R11: 205d343436542020 R12: dffffc0000000000 [ 52.511763][ T644] R13: ffff8880059ff240 R14: 0000000000000000 R15: 0000000000000068 [ 52.511986][ T644] FS: 00007f5b59c48800(0000) GS:ffff88802f400000(0000) knlGS:0000000000000000 [ 52.512238][ T644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.512423][ T644] CR2: 00007f5b59ea3ac0 CR3: 0000000001ff8002 CR4: 0000000000772ef0 [ 52.512639][ T644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.512863][ T644] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.513083][ T644] PKRU: 55555554 [ 52.513194][ T644] Call Trace: [ 52.513304][ T644] [ 52.513384][ T644] ? die_addr+0x41/0xa0 [ 52.513500][ T644] ? exc_general_protection+0x14d/0x230 [ 52.513653][ T644] ? asm_exc_general_protection+0x26/0x30 [ 52.513803][ T644] ? add_taint+0x2a/0x90 [ 52.513922][ T644] ? nexthop_create_group+0x333/0x1550 [ 52.514069][ T644] ? nexthop_create_group+0x32c/0x1550 [ 52.514218][ T644] ? __pfx_nexthop_create_group+0x10/0x10 [ 52.514362][ T644] ? __nla_validate_parse+0x1bc/0x3d0 [ 52.514511][ T644] rtm_new_nexthop+0x310/0x8b0 [ 52.514659][ T644] ? hlock_class+0x4e/0x130 [ 52.514808][ T644] ? mark_lock+0x38/0x3e0 [ 52.514921][ T644] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 52.515074][ T644] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 52.515225][ T644] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 52.515369][ T644] rtnetlink_rcv_msg+0x712/0xc10 [ 52.515514][ T644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.515662][ T644] ? hlock_class+0x4e/0x130 [ 52.515807][ T644] ? mark_lock+0x38/0x3e0 [ 52.515922][ T644] ? __lock_acquire+0xb9a/0x1680 [ 52.516067][ T644] netlink_rcv_skb+0x130/0x360 [ 52.516228][ T644] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.516376][ T644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.516524][ T644] ? netlink_deliver_tap+0x13e/0x340 [ 52.516668][ T644] ? netlink_deliver_tap+0xc3/0x340 [ 52.516813][ T644] netlink_unicast+0x44b/0x710 [ 52.516969][ T644] ? __pfx_netlink_unicast+0x10/0x10 [ 52.517113][ T644] ? find_held_lock+0x2c/0x110 [ 52.517258][ T644] netlink_sendmsg+0x723/0xbe0 [ 52.517406][ T644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.517555][ T644] ____sys_sendmsg+0x7ac/0xa10 [ 52.517703][ T644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.517849][ T644] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 52.518039][ T644] ___sys_sendmsg+0xee/0x170 [ 52.518185][ T644] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.518330][ T644] ? __pfx___lock_release+0x10/0x10 [ 52.518476][ T644] ? __pfx_handle_pte_fault+0x10/0x10 [ 52.518625][ T644] ? __handle_mm_fault+0x403/0x5e0 [ 52.518771][ T644] ? __pfx___handle_mm_fault+0x10/0x10 [ 52.518916][ T644] ? mt_find+0x2be/0x3d0 [ 52.519036][ T644] ? find_held_lock+0x2c/0x110 [ 52.519181][ T644] ? __lock_release+0x103/0x460 [ 52.519326][ T644] ? do_user_addr_fault+0x374/0xe30 [ 52.519472][ T644] __sys_sendmsg+0x109/0x1a0 [ 52.519616][ T644] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.519761][ T644] ? do_user_addr_fault+0x374/0xe30 [ 52.519910][ T644] do_syscall_64+0xc1/0x1d0 [ 52.520061][ T644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.520241][ T644] RIP: 0033:0x7f5b59e549a7 [ 52.520393][ T644] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 52.520901][ T644] RSP: 002b:00007ffd5e645008 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.521128][ T644] RAX: ffffffffffffffda RBX: 00007ffd5e645b90 RCX: 00007f5b59e549a7 [ 52.521346][ T644] RDX: 0000000000000000 RSI: 00007ffd5e645070 RDI: 0000000000000005 [ 52.521564][ T644] RBP: 00007ffd5e645530 R08: 0000000000000002 R09: 0000000000000000 [ 52.521781][ T644] R10: 00007f5b59d0d708 R11: 0000000000000246 R12: 0000000000000001 [ 52.522005][ T644] R13: 0000000067da3cd4 R14: 0000000000498600 R15: 00007ffd5e646992 [ 52.522232][ T644] [ 52.522342][ T644] Modules linked in: ip_gre gre 8021q vrf veth [ 52.522544][ T644] ---[ end trace 0000000000000000 ]--- [ 52.522691][ T644] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 52.522882][ T644] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 52.523405][ T644] RSP: 0018:ffffc900015273c8 EFLAGS: 00010202 [ 52.523585][ T644] RAX: 000000000000000d RBX: ffff88800e0aaa68 RCX: ffffffff91253d8a [ 52.523800][ T644] RDX: fffffbfff2ca2491 RSI: 0000000000000008 RDI: ffffffff96512480 [ 52.524026][ T644] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2ca2490 [ 52.524252][ T644] R10: ffffffff96512487 R11: 205d343436542020 R12: dffffc0000000000 [ 52.524469][ T644] R13: ffff8880059ff240 R14: 0000000000000000 R15: 0000000000000068 [ 52.524685][ T644] FS: 00007f5b59c48800(0000) GS:ffff88802f400000(0000) knlGS:0000000000000000 [ 52.524939][ T644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.525119][ T644] CR2: 00007f5b59ea3ac0 CR3: 0000000001ff8002 CR4: 0000000000772ef0 [ 52.525345][ T644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.525562][ T644] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.525783][ T644] PKRU: 55555554 [ 52.525901][ T644] Kernel panic - not syncing: Fatal exception [ 52.526162][ T644] Kernel Offset: 0xfc00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 52.526494][ T644] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr