[ 206.313868][ T819] ================================================================== [ 206.314105][ T819] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 206.314316][ T819] Read of size 4 at addr 0000000000000068 by task ip/819 [ 206.314489][ T819] [ 206.314564][ T819] CPU: 3 UID: 0 PID: 819 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 206.314569][ T819] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 206.314572][ T819] Call Trace: [ 206.314574][ T819] [ 206.314576][ T819] dump_stack_lvl+0x82/0xd0 [ 206.314584][ T819] kasan_report+0xbd/0xf0 [ 206.314590][ T819] ? nexthop_create_group+0x32c/0x1550 [ 206.314596][ T819] kasan_check_range+0x39/0x1c0 [ 206.314600][ T819] nexthop_create_group+0x32c/0x1550 [ 206.314606][ T819] ? __pfx_nexthop_create_group+0x10/0x10 [ 206.314609][ T819] ? __nla_validate_parse+0x1bc/0x3d0 [ 206.314617][ T819] rtm_new_nexthop+0x310/0x8b0 [ 206.314621][ T819] ? hlock_class+0x4e/0x130 [ 206.314627][ T819] ? mark_lock+0x38/0x3e0 [ 206.314632][ T819] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 206.314644][ T819] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 206.314652][ T819] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 206.314656][ T819] rtnetlink_rcv_msg+0x712/0xc10 [ 206.314661][ T819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.314664][ T819] ? hlock_class+0x4e/0x130 [ 206.314667][ T819] ? mark_lock+0x38/0x3e0 [ 206.314671][ T819] ? __lock_acquire+0xb9a/0x1680 [ 206.314676][ T819] netlink_rcv_skb+0x130/0x360 [ 206.314681][ T819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.314685][ T819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.314693][ T819] ? netlink_deliver_tap+0x13e/0x340 [ 206.314696][ T819] ? netlink_deliver_tap+0xc3/0x340 [ 206.314699][ T819] netlink_unicast+0x44b/0x710 [ 206.314703][ T819] ? __pfx_netlink_unicast+0x10/0x10 [ 206.314706][ T819] ? find_held_lock+0x2c/0x110 [ 206.314711][ T819] netlink_sendmsg+0x723/0xbe0 [ 206.314715][ T819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.314722][ T819] ____sys_sendmsg+0x7ac/0xa10 [ 206.314730][ T819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.314733][ T819] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 206.314740][ T819] ___sys_sendmsg+0xee/0x170 [ 206.314743][ T819] ? hlock_class+0x4e/0x130 [ 206.314746][ T819] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.314751][ T819] ? hlock_class+0x12/0x130 [ 206.314756][ T819] ? do_user_addr_fault+0x8fd/0xe30 [ 206.314761][ T819] ? do_user_addr_fault+0x8fd/0xe30 [ 206.314765][ T819] ? find_held_lock+0x2c/0x110 [ 206.314769][ T819] ? __lock_release+0x103/0x460 [ 206.314773][ T819] __sys_sendmsg+0x109/0x1a0 [ 206.314776][ T819] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.314781][ T819] ? do_user_addr_fault+0x97c/0xe30 [ 206.314786][ T819] do_syscall_64+0xc1/0x1d0 [ 206.314791][ T819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.314796][ T819] RIP: 0033:0x7f789efba9a7 [ 206.314801][ T819] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 206.314803][ T819] RSP: 002b:00007ffecedad518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.314808][ T819] RAX: ffffffffffffffda RBX: 00007ffecedae080 RCX: 00007f789efba9a7 [ 206.314810][ T819] RDX: 0000000000000000 RSI: 00007ffecedad580 RDI: 0000000000000005 [ 206.314812][ T819] RBP: 00007ffecedada40 R08: 0000000000000004 R09: 00007f789ef38980 [ 206.314814][ T819] R10: 00007f789ee73708 R11: 0000000000000246 R12: 00007ffecedae997 [ 206.314815][ T819] R13: 0000000067da3a4f R14: 0000000000498600 R15: 0000000036b51910 [ 206.314821][ T819] [ 206.314822][ T819] ================================================================== [ 206.323040][ T819] Disabling lock debugging due to kernel taint [ 206.323446][ T819] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 206.323774][ T819] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 206.323966][ T819] CPU: 3 UID: 0 PID: 819 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 206.324197][ T819] Tainted: [B]=BAD_PAGE [ 206.324295][ T819] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 206.324462][ T819] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 206.324634][ T819] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 206.325088][ T819] RSP: 0018:ffffc900019673c8 EFLAGS: 00010202 [ 206.325259][ T819] RAX: 000000000000000d RBX: ffff88800272cae8 RCX: ffffffffad453d8a [ 206.325454][ T819] RDX: fffffbfff64e2491 RSI: 0000000000000008 RDI: ffffffffb2712480 [ 206.325646][ T819] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff64e2490 [ 206.325838][ T819] R10: ffffffffb2712487 R11: 205d393138542020 R12: dffffc0000000000 [ 206.326034][ T819] R13: ffff888008d8f000 R14: 0000000000000000 R15: 0000000000000068 [ 206.326232][ T819] FS: 00007f789edae800(0000) GS:ffff888036180000(0000) knlGS:0000000000000000 [ 206.326456][ T819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.326620][ T819] CR2: 00007f789f00a423 CR3: 000000000f86a003 CR4: 0000000000772ef0 [ 206.326813][ T819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.327011][ T819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.327208][ T819] PKRU: 55555554 [ 206.327318][ T819] Call Trace: [ 206.327420][ T819] [ 206.327489][ T819] ? die_addr+0x41/0xa0 [ 206.327596][ T819] ? exc_general_protection+0x14d/0x230 [ 206.327732][ T819] ? asm_exc_general_protection+0x26/0x30 [ 206.327866][ T819] ? add_taint+0x2a/0x90 [ 206.327967][ T819] ? nexthop_create_group+0x333/0x1550 [ 206.328097][ T819] ? nexthop_create_group+0x32c/0x1550 [ 206.328241][ T819] ? __pfx_nexthop_create_group+0x10/0x10 [ 206.328370][ T819] ? __nla_validate_parse+0x1bc/0x3d0 [ 206.328501][ T819] rtm_new_nexthop+0x310/0x8b0 [ 206.328636][ T819] ? hlock_class+0x4e/0x130 [ 206.328772][ T819] ? mark_lock+0x38/0x3e0 [ 206.328873][ T819] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 206.329009][ T819] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 206.329143][ T819] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 206.329283][ T819] rtnetlink_rcv_msg+0x712/0xc10 [ 206.329477][ T819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.329685][ T819] ? hlock_class+0x4e/0x130 [ 206.329897][ T819] ? mark_lock+0x38/0x3e0 [ 206.330056][ T819] ? __lock_acquire+0xb9a/0x1680 [ 206.330266][ T819] netlink_rcv_skb+0x130/0x360 [ 206.330474][ T819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.330683][ T819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.330895][ T819] ? netlink_deliver_tap+0x13e/0x340 [ 206.331098][ T819] ? netlink_deliver_tap+0xc3/0x340 [ 206.331315][ T819] netlink_unicast+0x44b/0x710 [ 206.331489][ T819] ? __pfx_netlink_unicast+0x10/0x10 [ 206.331646][ T819] ? find_held_lock+0x2c/0x110 [ 206.331779][ T819] netlink_sendmsg+0x723/0xbe0 [ 206.331909][ T819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.332042][ T819] ____sys_sendmsg+0x7ac/0xa10 [ 206.332175][ T819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.332309][ T819] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 206.332472][ T819] ___sys_sendmsg+0xee/0x170 [ 206.332599][ T819] ? hlock_class+0x4e/0x130 [ 206.332729][ T819] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.332859][ T819] ? hlock_class+0x12/0x130 [ 206.332992][ T819] ? do_user_addr_fault+0x8fd/0xe30 [ 206.333124][ T819] ? do_user_addr_fault+0x8fd/0xe30 [ 206.333261][ T819] ? find_held_lock+0x2c/0x110 [ 206.333394][ T819] ? __lock_release+0x103/0x460 [ 206.333522][ T819] __sys_sendmsg+0x109/0x1a0 [ 206.333653][ T819] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.333783][ T819] ? do_user_addr_fault+0x97c/0xe30 [ 206.333912][ T819] do_syscall_64+0xc1/0x1d0 [ 206.334043][ T819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.334206][ T819] RIP: 0033:0x7f789efba9a7 [ 206.334349][ T819] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 206.334805][ T819] RSP: 002b:00007ffecedad518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.335000][ T819] RAX: ffffffffffffffda RBX: 00007ffecedae080 RCX: 00007f789efba9a7 [ 206.335200][ T819] RDX: 0000000000000000 RSI: 00007ffecedad580 RDI: 0000000000000005 [ 206.335401][ T819] RBP: 00007ffecedada40 R08: 0000000000000004 R09: 00007f789ef38980 [ 206.335595][ T819] R10: 00007f789ee73708 R11: 0000000000000246 R12: 00007ffecedae997 [ 206.335789][ T819] R13: 0000000067da3a4f R14: 0000000000498600 R15: 0000000036b51910 [ 206.335991][ T819] [ 206.336092][ T819] Modules linked in: act_gact cls_flower sch_ingress 8021q ip_gre gre vrf veth [ 206.336357][ T819] ---[ end trace 0000000000000000 ]--- [ 206.336489][ T819] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 206.336656][ T819] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 206.337203][ T819] RSP: 0018:ffffc900019673c8 EFLAGS: 00010202 [ 206.337373][ T819] RAX: 000000000000000d RBX: ffff88800272cae8 RCX: ffffffffad453d8a [ 206.337565][ T819] RDX: fffffbfff64e2491 RSI: 0000000000000008 RDI: ffffffffb2712480 [ 206.337759][ T819] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff64e2490 [ 206.337956][ T819] R10: ffffffffb2712487 R11: 205d393138542020 R12: dffffc0000000000 [ 206.338166][ T819] R13: ffff888008d8f000 R14: 0000000000000000 R15: 0000000000000068 [ 206.338359][ T819] FS: 00007f789edae800(0000) GS:ffff888036180000(0000) knlGS:0000000000000000 [ 206.338605][ T819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.338775][ T819] CR2: 00007f789f00a423 CR3: 000000000f86a003 CR4: 0000000000772ef0 [ 206.338968][ T819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.339168][ T819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.339362][ T819] PKRU: 55555554 [ 206.339463][ T819] Kernel panic - not syncing: Fatal exception [ 206.339799][ T819] Kernel Offset: 0x2be00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 206.340133][ T819] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr