[ 10.197617][ T249] ip (249) used greatest stack depth: 24264 bytes left [ 23.562521][ T383] ================================================================== [ 23.562774][ T383] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 23.562997][ T383] Read of size 4 at addr 0000000000000068 by task ip/383 [ 23.563174][ T383] [ 23.563253][ T383] CPU: 2 UID: 0 PID: 383 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 23.563258][ T383] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 23.563260][ T383] Call Trace: [ 23.563263][ T383] [ 23.563265][ T383] dump_stack_lvl+0x82/0xd0 [ 23.563272][ T383] kasan_report+0xbd/0xf0 [ 23.563279][ T383] ? nexthop_create_group+0x32c/0x1550 [ 23.563284][ T383] kasan_check_range+0x39/0x1c0 [ 23.563289][ T383] nexthop_create_group+0x32c/0x1550 [ 23.563295][ T383] ? __pfx_nexthop_create_group+0x10/0x10 [ 23.563298][ T383] ? __nla_validate_parse+0x1bc/0x3d0 [ 23.563306][ T383] rtm_new_nexthop+0x310/0x8b0 [ 23.563311][ T383] ? hlock_class+0x4e/0x130 [ 23.563316][ T383] ? mark_lock+0x38/0x3e0 [ 23.563321][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 23.563334][ T383] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 23.563341][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 23.563345][ T383] rtnetlink_rcv_msg+0x712/0xc10 [ 23.563349][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 23.563353][ T383] ? hlock_class+0x4e/0x130 [ 23.563355][ T383] ? mark_lock+0x38/0x3e0 [ 23.563360][ T383] ? __lock_acquire+0xb9a/0x1680 [ 23.563364][ T383] netlink_rcv_skb+0x130/0x360 [ 23.563369][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 23.563374][ T383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 23.563381][ T383] ? netlink_deliver_tap+0x13e/0x340 [ 23.563385][ T383] ? netlink_deliver_tap+0xc3/0x340 [ 23.563388][ T383] netlink_unicast+0x44b/0x710 [ 23.563392][ T383] ? __pfx_netlink_unicast+0x10/0x10 [ 23.563395][ T383] ? find_held_lock+0x2c/0x110 [ 23.563400][ T383] netlink_sendmsg+0x723/0xbe0 [ 23.563404][ T383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 23.563410][ T383] ____sys_sendmsg+0x7ac/0xa10 [ 23.563418][ T383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 23.563421][ T383] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 23.563429][ T383] ___sys_sendmsg+0xee/0x170 [ 23.563431][ T383] ? hlock_class+0x4e/0x130 [ 23.563434][ T383] ? __pfx____sys_sendmsg+0x10/0x10 [ 23.563439][ T383] ? hlock_class+0x12/0x130 [ 23.563443][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 23.563448][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 23.563453][ T383] ? find_held_lock+0x2c/0x110 [ 23.563456][ T383] ? __lock_release+0x103/0x460 [ 23.563461][ T383] __sys_sendmsg+0x109/0x1a0 [ 23.563464][ T383] ? __pfx___sys_sendmsg+0x10/0x10 [ 23.563469][ T383] ? do_user_addr_fault+0x97c/0xe30 [ 23.563474][ T383] do_syscall_64+0xc1/0x1d0 [ 23.563480][ T383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 23.563486][ T383] RIP: 0033:0x7f7898c5c9a7 [ 23.563491][ T383] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 23.563494][ T383] RSP: 002b:00007ffd5e48ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 23.563498][ T383] RAX: ffffffffffffffda RBX: 00007ffd5e48fab0 RCX: 00007f7898c5c9a7 [ 23.563500][ T383] RDX: 0000000000000000 RSI: 00007ffd5e48efb0 RDI: 0000000000000005 [ 23.563502][ T383] RBP: 00007ffd5e48f470 R08: 0000000000000004 R09: 00007f7898bda980 [ 23.563504][ T383] R10: 00007f7898b15708 R11: 0000000000000246 R12: 00007ffd5e491997 [ 23.563506][ T383] R13: 0000000067da3ef0 R14: 0000000000498600 R15: 00000000017be910 [ 23.563512][ T383] [ 23.563513][ T383] ================================================================== [ 23.572689][ T383] Disabling lock debugging due to kernel taint [ 23.572905][ T383] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 23.573256][ T383] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 23.573472][ T383] CPU: 2 UID: 0 PID: 383 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 23.573724][ T383] Tainted: [B]=BAD_PAGE [ 23.573833][ T383] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 23.574011][ T383] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 23.574198][ T383] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 23.574697][ T383] RSP: 0018:ffffc90000c173c8 EFLAGS: 00010202 [ 23.574877][ T383] RAX: 000000000000000d RBX: ffff88800aedc068 RCX: ffffffff8ca53d8a [ 23.575094][ T383] RDX: fffffbfff23a2491 RSI: 0000000000000008 RDI: ffffffff91d12480 [ 23.575307][ T383] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff23a2490 [ 23.575518][ T383] R10: ffffffff91d12487 R11: 205d333833542020 R12: dffffc0000000000 [ 23.575727][ T383] R13: ffff88800be87000 R14: 0000000000000000 R15: 0000000000000068 [ 23.575939][ T383] FS: 00007f7898a50800(0000) GS:ffff88802f700000(0000) knlGS:0000000000000000 [ 23.576186][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.576367][ T383] CR2: 00007f7898cac423 CR3: 0000000005f8c004 CR4: 0000000000772ef0 [ 23.576577][ T383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.576794][ T383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.577004][ T383] PKRU: 55555554 [ 23.577111][ T383] Call Trace: [ 23.577218][ T383] [ 23.577294][ T383] ? die_addr+0x41/0xa0 [ 23.577409][ T383] ? exc_general_protection+0x14d/0x230 [ 23.577559][ T383] ? asm_exc_general_protection+0x26/0x30 [ 23.577717][ T383] ? add_taint+0x2a/0x90 [ 23.577828][ T383] ? nexthop_create_group+0x333/0x1550 [ 23.577968][ T383] ? nexthop_create_group+0x32c/0x1550 [ 23.578109][ T383] ? __pfx_nexthop_create_group+0x10/0x10 [ 23.578250][ T383] ? __nla_validate_parse+0x1bc/0x3d0 [ 23.578396][ T383] rtm_new_nexthop+0x310/0x8b0 [ 23.578539][ T383] ? hlock_class+0x4e/0x130 [ 23.578684][ T383] ? mark_lock+0x38/0x3e0 [ 23.578793][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 23.578942][ T383] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 23.579090][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 23.579232][ T383] rtnetlink_rcv_msg+0x712/0xc10 [ 23.579375][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 23.579516][ T383] ? hlock_class+0x4e/0x130 [ 23.579659][ T383] ? mark_lock+0x38/0x3e0 [ 23.579766][ T383] ? __lock_acquire+0xb9a/0x1680 [ 23.579909][ T383] netlink_rcv_skb+0x130/0x360 [ 23.580051][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 23.580195][ T383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 23.580338][ T383] ? netlink_deliver_tap+0x13e/0x340 [ 23.580478][ T383] ? netlink_deliver_tap+0xc3/0x340 [ 23.580621][ T383] netlink_unicast+0x44b/0x710 [ 23.580763][ T383] ? __pfx_netlink_unicast+0x10/0x10 [ 23.580903][ T383] ? find_held_lock+0x2c/0x110 [ 23.581045][ T383] netlink_sendmsg+0x723/0xbe0 [ 23.581186][ T383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 23.581330][ T383] ____sys_sendmsg+0x7ac/0xa10 [ 23.581472][ T383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 23.581610][ T383] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 23.581791][ T383] ___sys_sendmsg+0xee/0x170 [ 23.581930][ T383] ? hlock_class+0x4e/0x130 [ 23.582077][ T383] ? __pfx____sys_sendmsg+0x10/0x10 [ 23.582236][ T383] ? hlock_class+0x12/0x130 [ 23.582377][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 23.582519][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 23.582660][ T383] ? find_held_lock+0x2c/0x110 [ 23.582803][ T383] ? __lock_release+0x103/0x460 [ 23.582944][ T383] __sys_sendmsg+0x109/0x1a0 [ 23.583083][ T383] ? __pfx___sys_sendmsg+0x10/0x10 [ 23.583227][ T383] ? do_user_addr_fault+0x97c/0xe30 [ 23.583369][ T383] do_syscall_64+0xc1/0x1d0 [ 23.583511][ T383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 23.583685][ T383] RIP: 0033:0x7f7898c5c9a7 [ 23.583841][ T383] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 23.584337][ T383] RSP: 002b:00007ffd5e48ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 23.584549][ T383] RAX: ffffffffffffffda RBX: 00007ffd5e48fab0 RCX: 00007f7898c5c9a7 [ 23.584765][ T383] RDX: 0000000000000000 RSI: 00007ffd5e48efb0 RDI: 0000000000000005 [ 23.584977][ T383] RBP: 00007ffd5e48f470 R08: 0000000000000004 R09: 00007f7898bda980 [ 23.585189][ T383] R10: 00007f7898b15708 R11: 0000000000000246 R12: 00007ffd5e491997 [ 23.585400][ T383] R13: 0000000067da3ef0 R14: 0000000000498600 R15: 00000000017be910 [ 23.585620][ T383] [ 23.585728][ T383] Modules linked in: vrf veth [ 23.585915][ T383] ---[ end trace 0000000000000000 ]--- [ 23.586075][ T383] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 23.586273][ T383] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 23.586781][ T383] RSP: 0018:ffffc90000c173c8 EFLAGS: 00010202 [ 23.586975][ T383] RAX: 000000000000000d RBX: ffff88800aedc068 RCX: ffffffff8ca53d8a [ 23.587204][ T383] RDX: fffffbfff23a2491 RSI: 0000000000000008 RDI: ffffffff91d12480 [ 23.587434][ T383] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff23a2490 [ 23.587660][ T383] R10: ffffffff91d12487 R11: 205d333833542020 R12: dffffc0000000000 [ 23.587881][ T383] R13: ffff88800be87000 R14: 0000000000000000 R15: 0000000000000068 [ 23.588106][ T383] FS: 00007f7898a50800(0000) GS:ffff88802f700000(0000) knlGS:0000000000000000 [ 23.588372][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.588561][ T383] CR2: 00007f7898cac423 CR3: 0000000005f8c004 CR4: 0000000000772ef0 [ 23.588787][ T383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.589012][ T383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.589240][ T383] PKRU: 55555554 [ 23.589360][ T383] Kernel panic - not syncing: Fatal exception [ 23.589699][ T383] Kernel Offset: 0xb400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 23.590026][ T383] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr