[ 100.444958][ T1271] ==================================================================
[ 100.445225][ T1271] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550
[ 100.445458][ T1271] Read of size 4 at addr 0000000000000068 by task ip/1271
[ 100.445646][ T1271]
[ 100.445724][ T1271] CPU: 0 UID: 0 PID: 1271 Comm: ip Not tainted 6.14.0-rc6-virtme #1
[ 100.445729][ T1271] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 100.445732][ T1271] Call Trace:
[ 100.445733][ T1271]
[ 100.445735][ T1271] dump_stack_lvl+0x82/0xd0
[ 100.445742][ T1271] kasan_report+0xbd/0xf0
[ 100.445747][ T1271] ? nexthop_create_group+0x32c/0x1550
[ 100.445752][ T1271] kasan_check_range+0x39/0x1c0
[ 100.445757][ T1271] nexthop_create_group+0x32c/0x1550
[ 100.445762][ T1271] ? __pfx_nexthop_create_group+0x10/0x10
[ 100.445766][ T1271] ? __nla_validate_parse+0x1bc/0x3d0
[ 100.445773][ T1271] rtm_new_nexthop+0x310/0x8b0
[ 100.445777][ T1271] ? hlock_class+0x4e/0x130
[ 100.445781][ T1271] ? mark_lock+0x38/0x3e0
[ 100.445785][ T1271] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 100.445798][ T1271] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 100.445804][ T1271] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 100.445808][ T1271] rtnetlink_rcv_msg+0x712/0xc10
[ 100.445813][ T1271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 100.445817][ T1271] ? hlock_class+0x4e/0x130
[ 100.445819][ T1271] ? mark_lock+0x38/0x3e0
[ 100.445824][ T1271] ? __lock_acquire+0xb9a/0x1680
[ 100.445828][ T1271] netlink_rcv_skb+0x130/0x360
[ 100.445832][ T1271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 100.445836][ T1271] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 100.445844][ T1271] ? netlink_deliver_tap+0x13e/0x340
[ 100.445847][ T1271] ? netlink_deliver_tap+0xc3/0x340
[ 100.445850][ T1271] netlink_unicast+0x44b/0x710
[ 100.445854][ T1271] ? __pfx_netlink_unicast+0x10/0x10
[ 100.445857][ T1271] ? find_held_lock+0x2c/0x110
[ 100.445862][ T1271] netlink_sendmsg+0x723/0xbe0
[ 100.445866][ T1271] ? __pfx_netlink_sendmsg+0x10/0x10
[ 100.445872][ T1271] ____sys_sendmsg+0x7ac/0xa10
[ 100.445878][ T1271] ? __pfx_____sys_sendmsg+0x10/0x10
[ 100.445881][ T1271] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 100.445888][ T1271] ___sys_sendmsg+0xee/0x170
[ 100.445890][ T1271] ? hlock_class+0x4e/0x130
[ 100.445894][ T1271] ? __pfx____sys_sendmsg+0x10/0x10
[ 100.445898][ T1271] ? hlock_class+0x12/0x130
[ 100.445902][ T1271] ? do_user_addr_fault+0x8fd/0xe30
[ 100.445907][ T1271] ? do_user_addr_fault+0x8fd/0xe30
[ 100.445911][ T1271] ? find_held_lock+0x2c/0x110
[ 100.445914][ T1271] ? __lock_release+0x103/0x460
[ 100.445919][ T1271] __sys_sendmsg+0x109/0x1a0
[ 100.445922][ T1271] ? __pfx___sys_sendmsg+0x10/0x10
[ 100.445927][ T1271] ? do_user_addr_fault+0x97c/0xe30
[ 100.445931][ T1271] do_syscall_64+0xc1/0x1d0
[ 100.445936][ T1271] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.445941][ T1271] RIP: 0033:0x7f80429179a7
[ 100.445945][ T1271] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 100.445948][ T1271] RSP: 002b:00007ffc29365e78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 100.445951][ T1271] RAX: ffffffffffffffda RBX: 00007ffc293669d0 RCX: 00007f80429179a7
[ 100.445953][ T1271] RDX: 0000000000000000 RSI: 00007ffc29365ee0 RDI: 0000000000000005
[ 100.445955][ T1271] RBP: 00007ffc293663a0 R08: 0000000030108910 R09: 0000000000000000
[ 100.445957][ T1271] R10: 00007f80427d0708 R11: 0000000000000246 R12: 0000000030108918
[ 100.445958][ T1271] R13: 0000000067da6649 R14: 0000000000498600 R15: 0000000030108910
[ 100.445964][ T1271]
[ 100.445965][ T1271] ==================================================================
[ 100.455042][ T1271] Disabling lock debugging due to kernel taint
[ 100.455241][ T1271] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 100.455592][ T1271] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]
[ 100.455799][ T1271] CPU: 0 UID: 0 PID: 1271 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1
[ 100.456049][ T1271] Tainted: [B]=BAD_PAGE
[ 100.456157][ T1271] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 100.456336][ T1271] RIP: 0010:nexthop_create_group+0x333/0x1550
[ 100.456526][ T1271] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 100.457025][ T1271] RSP: 0018:ffffc90001da73c8 EFLAGS: 00010202
[ 100.457207][ T1271] RAX: 000000000000000d RBX: ffff888007c1ede8 RCX: ffffffff9b453d8a
[ 100.457424][ T1271] RDX: fffffbfff40e2491 RSI: 0000000000000008 RDI: ffffffffa0712480
[ 100.457636][ T1271] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff40e2490
[ 100.457847][ T1271] R10: ffffffffa0712487 R11: 205d313732315420 R12: dffffc0000000000
[ 100.458062][ T1271] R13: ffff888004e624c0 R14: 0000000000000000 R15: 0000000000000068
[ 100.458277][ T1271] FS: 00007f804270b800(0000) GS:ffff88802f200000(0000) knlGS:0000000000000000
[ 100.458521][ T1271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 100.458698][ T1271] CR2: 00007f8042967423 CR3: 000000000bb82006 CR4: 0000000000772ef0
[ 100.458912][ T1271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 100.459126][ T1271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 100.459332][ T1271] PKRU: 55555554
[ 100.459442][ T1271] Call Trace:
[ 100.459549][ T1271]
[ 100.459622][ T1271] ? die_addr+0x41/0xa0
[ 100.459735][ T1271] ? exc_general_protection+0x14d/0x230
[ 100.459884][ T1271] ? asm_exc_general_protection+0x26/0x30
[ 100.460037][ T1271] ? add_taint+0x2a/0x90
[ 100.460152][ T1271] ? nexthop_create_group+0x333/0x1550
[ 100.460296][ T1271] ? nexthop_create_group+0x32c/0x1550
[ 100.460443][ T1271] ? __pfx_nexthop_create_group+0x10/0x10
[ 100.460584][ T1271] ? __nla_validate_parse+0x1bc/0x3d0
[ 100.460727][ T1271] rtm_new_nexthop+0x310/0x8b0
[ 100.460871][ T1271] ? hlock_class+0x4e/0x130
[ 100.461018][ T1271] ? mark_lock+0x38/0x3e0
[ 100.461132][ T1271] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 100.461284][ T1271] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 100.461426][ T1271] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 100.461567][ T1271] rtnetlink_rcv_msg+0x712/0xc10
[ 100.461707][ T1271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 100.461852][ T1271] ? hlock_class+0x4e/0x130
[ 100.461998][ T1271] ? mark_lock+0x38/0x3e0
[ 100.462110][ T1271] ? __lock_acquire+0xb9a/0x1680
[ 100.462251][ T1271] netlink_rcv_skb+0x130/0x360
[ 100.462395][ T1271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 100.462538][ T1271] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 100.462684][ T1271] ? netlink_deliver_tap+0x13e/0x340
[ 100.462824][ T1271] ? netlink_deliver_tap+0xc3/0x340
[ 100.462969][ T1271] netlink_unicast+0x44b/0x710
[ 100.463120][ T1271] ? __pfx_netlink_unicast+0x10/0x10
[ 100.463263][ T1271] ? find_held_lock+0x2c/0x110
[ 100.463401][ T1271] netlink_sendmsg+0x723/0xbe0
[ 100.463546][ T1271] ? __pfx_netlink_sendmsg+0x10/0x10
[ 100.463685][ T1271] ____sys_sendmsg+0x7ac/0xa10
[ 100.463832][ T1271] ? __pfx_____sys_sendmsg+0x10/0x10
[ 100.463975][ T1271] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 100.464159][ T1271] ___sys_sendmsg+0xee/0x170
[ 100.464297][ T1271] ? hlock_class+0x4e/0x130
[ 100.464442][ T1271] ? __pfx____sys_sendmsg+0x10/0x10
[ 100.464587][ T1271] ? hlock_class+0x12/0x130
[ 100.464733][ T1271] ? do_user_addr_fault+0x8fd/0xe30
[ 100.464876][ T1271] ? do_user_addr_fault+0x8fd/0xe30
[ 100.465019][ T1271] ? find_held_lock+0x2c/0x110
[ 100.465181][ T1271] ? __lock_release+0x103/0x460
[ 100.465325][ T1271] __sys_sendmsg+0x109/0x1a0
[ 100.465468][ T1271] ? __pfx___sys_sendmsg+0x10/0x10
[ 100.465613][ T1271] ? do_user_addr_fault+0x97c/0xe30
[ 100.465762][ T1271] do_syscall_64+0xc1/0x1d0
[ 100.465907][ T1271] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.466084][ T1271] RIP: 0033:0x7f80429179a7
[ 100.466217][ T1271] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 100.466681][ T1271] RSP: 002b:00007ffc29365e78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 100.466896][ T1271] RAX: ffffffffffffffda RBX: 00007ffc293669d0 RCX: 00007f80429179a7
[ 100.467114][ T1271] RDX: 0000000000000000 RSI: 00007ffc29365ee0 RDI: 0000000000000005
[ 100.467329][ T1271] RBP: 00007ffc293663a0 R08: 0000000030108910 R09: 0000000000000000
[ 100.467541][ T1271] R10: 00007f80427d0708 R11: 0000000000000246 R12: 0000000030108918
[ 100.467752][ T1271] R13: 0000000067da6649 R14: 0000000000498600 R15: 0000000030108910
[ 100.467968][ T1271]
[ 100.468080][ T1271] Modules linked in: 8021q vxlan ip6_udp_tunnel udp_tunnel bridge stp llc sch_ingress vrf veth
[ 100.468392][ T1271] ---[ end trace 0000000000000000 ]---
[ 100.468537][ T1271] RIP: 0010:nexthop_create_group+0x333/0x1550
[ 100.468719][ T1271] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 100.469225][ T1271] RSP: 0018:ffffc90001da73c8 EFLAGS: 00010202
[ 100.469409][ T1271] RAX: 000000000000000d RBX: ffff888007c1ede8 RCX: ffffffff9b453d8a
[ 100.469624][ T1271] RDX: fffffbfff40e2491 RSI: 0000000000000008 RDI: ffffffffa0712480
[ 100.469838][ T1271] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff40e2490
[ 100.470051][ T1271] R10: ffffffffa0712487 R11: 205d313732315420 R12: dffffc0000000000
[ 100.470265][ T1271] R13: ffff888004e624c0 R14: 0000000000000000 R15: 0000000000000068
[ 100.470483][ T1271] FS: 00007f804270b800(0000) GS:ffff88802f200000(0000) knlGS:0000000000000000
[ 100.470731][ T1271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 100.470916][ T1271] CR2: 00007f8042967423 CR3: 000000000bb82006 CR4: 0000000000772ef0
[ 100.471133][ T1271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 100.471351][ T1271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 100.471562][ T1271] PKRU: 55555554
[ 100.471681][ T1271] Kernel panic - not syncing: Fatal exception
[ 100.472097][ T1271] Kernel Offset: 0x19e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 100.472437][ T1271] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr