[ 11.312875][ T249] ip (249) used greatest stack depth: 23424 bytes left [ 24.763577][ T385] ================================================================== [ 24.763814][ T385] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 24.764039][ T385] Read of size 4 at addr 0000000000000068 by task ip/385 [ 24.764210][ T385] [ 24.764283][ T385] CPU: 0 UID: 0 PID: 385 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 24.764287][ T385] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 24.764289][ T385] Call Trace: [ 24.764291][ T385] [ 24.764293][ T385] dump_stack_lvl+0x82/0xd0 [ 24.764300][ T385] kasan_report+0xbd/0xf0 [ 24.764308][ T385] ? nexthop_create_group+0x32c/0x1550 [ 24.764313][ T385] kasan_check_range+0x39/0x1c0 [ 24.764318][ T385] nexthop_create_group+0x32c/0x1550 [ 24.764324][ T385] ? __pfx_nexthop_create_group+0x10/0x10 [ 24.764327][ T385] ? __nla_validate_parse+0x1bc/0x3d0 [ 24.764335][ T385] rtm_new_nexthop+0x310/0x8b0 [ 24.764339][ T385] ? hlock_class+0x4e/0x130 [ 24.764345][ T385] ? mark_lock+0x38/0x3e0 [ 24.764349][ T385] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.764361][ T385] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 24.764369][ T385] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.764373][ T385] rtnetlink_rcv_msg+0x712/0xc10 [ 24.764377][ T385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.764381][ T385] ? hlock_class+0x4e/0x130 [ 24.764383][ T385] ? mark_lock+0x38/0x3e0 [ 24.764388][ T385] ? __lock_acquire+0xb9a/0x1680 [ 24.764392][ T385] netlink_rcv_skb+0x130/0x360 [ 24.764397][ T385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.764402][ T385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 24.764409][ T385] ? netlink_deliver_tap+0x13e/0x340 [ 24.764412][ T385] ? netlink_deliver_tap+0xc3/0x340 [ 24.764416][ T385] netlink_unicast+0x44b/0x710 [ 24.764420][ T385] ? __pfx_netlink_unicast+0x10/0x10 [ 24.764423][ T385] ? find_held_lock+0x2c/0x110 [ 24.764427][ T385] netlink_sendmsg+0x723/0xbe0 [ 24.764431][ T385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 24.764437][ T385] ____sys_sendmsg+0x7ac/0xa10 [ 24.764446][ T385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 24.764450][ T385] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 24.764457][ T385] ___sys_sendmsg+0xee/0x170 [ 24.764459][ T385] ? hlock_class+0x4e/0x130 [ 24.764462][ T385] ? __pfx____sys_sendmsg+0x10/0x10 [ 24.764467][ T385] ? hlock_class+0x12/0x130 [ 24.764471][ T385] ? do_user_addr_fault+0x8fd/0xe30 [ 24.764478][ T385] ? do_user_addr_fault+0x8fd/0xe30 [ 24.764482][ T385] ? find_held_lock+0x2c/0x110 [ 24.764486][ T385] ? __lock_release+0x103/0x460 [ 24.764490][ T385] __sys_sendmsg+0x109/0x1a0 [ 24.764493][ T385] ? __pfx___sys_sendmsg+0x10/0x10 [ 24.764498][ T385] ? do_user_addr_fault+0x97c/0xe30 [ 24.764503][ T385] do_syscall_64+0xc1/0x1d0 [ 24.764508][ T385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 24.764513][ T385] RIP: 0033:0x7fb9cd06f9a7 [ 24.764517][ T385] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 24.764520][ T385] RSP: 002b:00007ffc53e70608 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.764524][ T385] RAX: ffffffffffffffda RBX: 00007ffc53e71160 RCX: 00007fb9cd06f9a7 [ 24.764526][ T385] RDX: 0000000000000000 RSI: 00007ffc53e70670 RDI: 0000000000000005 [ 24.764527][ T385] RBP: 00007ffc53e70b30 R08: 00000000213f4910 R09: 0000000000000000 [ 24.764529][ T385] R10: 00007fb9ccf28708 R11: 0000000000000246 R12: 00000000213f4918 [ 24.764531][ T385] R13: 0000000067da60b2 R14: 0000000000498600 R15: 00000000213f4910 [ 24.764537][ T385] [ 24.764538][ T385] ================================================================== [ 24.773237][ T385] Disabling lock debugging due to kernel taint [ 24.773430][ T385] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 24.773777][ T385] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 24.773981][ T385] CPU: 0 UID: 0 PID: 385 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 24.774216][ T385] Tainted: [B]=BAD_PAGE [ 24.774320][ T385] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 24.774506][ T385] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 24.774676][ T385] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 24.775168][ T385] RSP: 0018:ffffc90000b273c8 EFLAGS: 00010202 [ 24.775343][ T385] RAX: 000000000000000d RBX: ffff888004dfce68 RCX: ffffffffb8e53d8a [ 24.775546][ T385] RDX: fffffbfff7c22491 RSI: 0000000000000008 RDI: ffffffffbe112480 [ 24.775751][ T385] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff7c22490 [ 24.775960][ T385] R10: ffffffffbe112487 R11: 205d353833542020 R12: dffffc0000000000 [ 24.776171][ T385] R13: ffff88800a1ea040 R14: 0000000000000000 R15: 0000000000000068 [ 24.776370][ T385] FS: 00007fb9cce63800(0000) GS:ffff888036000000(0000) knlGS:0000000000000000 [ 24.776616][ T385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.776780][ T385] CR2: 00007fb9cd0bf423 CR3: 00000000020fe005 CR4: 0000000000772ef0 [ 24.777000][ T385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.777200][ T385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.777412][ T385] PKRU: 55555554 [ 24.777510][ T385] Call Trace: [ 24.777613][ T385] [ 24.777681][ T385] ? die_addr+0x41/0xa0 [ 24.777797][ T385] ? exc_general_protection+0x14d/0x230 [ 24.777956][ T385] ? asm_exc_general_protection+0x26/0x30 [ 24.778091][ T385] ? add_taint+0x2a/0x90 [ 24.778201][ T385] ? nexthop_create_group+0x333/0x1550 [ 24.778337][ T385] ? nexthop_create_group+0x32c/0x1550 [ 24.778477][ T385] ? __pfx_nexthop_create_group+0x10/0x10 [ 24.778607][ T385] ? __nla_validate_parse+0x1bc/0x3d0 [ 24.778741][ T385] rtm_new_nexthop+0x310/0x8b0 [ 24.778881][ T385] ? hlock_class+0x4e/0x130 [ 24.779012][ T385] ? mark_lock+0x38/0x3e0 [ 24.779119][ T385] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.779258][ T385] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 24.779391][ T385] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.779522][ T385] rtnetlink_rcv_msg+0x712/0xc10 [ 24.779653][ T385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.779786][ T385] ? hlock_class+0x4e/0x130 [ 24.779927][ T385] ? mark_lock+0x38/0x3e0 [ 24.780033][ T385] ? __lock_acquire+0xb9a/0x1680 [ 24.780165][ T385] netlink_rcv_skb+0x130/0x360 [ 24.780296][ T385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.780427][ T385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 24.780560][ T385] ? netlink_deliver_tap+0x13e/0x340 [ 24.780690][ T385] ? netlink_deliver_tap+0xc3/0x340 [ 24.780820][ T385] netlink_unicast+0x44b/0x710 [ 24.780973][ T385] ? __pfx_netlink_unicast+0x10/0x10 [ 24.781111][ T385] ? find_held_lock+0x2c/0x110 [ 24.781242][ T385] netlink_sendmsg+0x723/0xbe0 [ 24.781372][ T385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 24.781505][ T385] ____sys_sendmsg+0x7ac/0xa10 [ 24.781636][ T385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 24.781765][ T385] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 24.781935][ T385] ___sys_sendmsg+0xee/0x170 [ 24.782063][ T385] ? hlock_class+0x4e/0x130 [ 24.782192][ T385] ? __pfx____sys_sendmsg+0x10/0x10 [ 24.782330][ T385] ? hlock_class+0x12/0x130 [ 24.782461][ T385] ? do_user_addr_fault+0x8fd/0xe30 [ 24.782589][ T385] ? do_user_addr_fault+0x8fd/0xe30 [ 24.782719][ T385] ? find_held_lock+0x2c/0x110 [ 24.782855][ T385] ? __lock_release+0x103/0x460 [ 24.782988][ T385] __sys_sendmsg+0x109/0x1a0 [ 24.783118][ T385] ? __pfx___sys_sendmsg+0x10/0x10 [ 24.783249][ T385] ? do_user_addr_fault+0x97c/0xe30 [ 24.783381][ T385] do_syscall_64+0xc1/0x1d0 [ 24.783512][ T385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 24.783671][ T385] RIP: 0033:0x7fb9cd06f9a7 [ 24.783809][ T385] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 24.784286][ T385] RSP: 002b:00007ffc53e70608 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.784483][ T385] RAX: ffffffffffffffda RBX: 00007ffc53e71160 RCX: 00007fb9cd06f9a7 [ 24.784684][ T385] RDX: 0000000000000000 RSI: 00007ffc53e70670 RDI: 0000000000000005 [ 24.784885][ T385] RBP: 00007ffc53e70b30 R08: 00000000213f4910 R09: 0000000000000000 [ 24.785101][ T385] R10: 00007fb9ccf28708 R11: 0000000000000246 R12: 00000000213f4918 [ 24.785296][ T385] R13: 0000000067da60b2 R14: 0000000000498600 R15: 00000000213f4910 [ 24.785495][ T385] [ 24.785607][ T385] Modules linked in: vrf veth [ 24.785761][ T385] ---[ end trace 0000000000000000 ]--- [ 24.785894][ T385] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 24.786062][ T385] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 24.786526][ T385] RSP: 0018:ffffc90000b273c8 EFLAGS: 00010202 [ 24.786691][ T385] RAX: 000000000000000d RBX: ffff888004dfce68 RCX: ffffffffb8e53d8a [ 24.786887][ T385] RDX: fffffbfff7c22491 RSI: 0000000000000008 RDI: ffffffffbe112480 [ 24.787082][ T385] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff7c22490 [ 24.787282][ T385] R10: ffffffffbe112487 R11: 205d353833542020 R12: dffffc0000000000 [ 24.787479][ T385] R13: ffff88800a1ea040 R14: 0000000000000000 R15: 0000000000000068 [ 24.787671][ T385] FS: 00007fb9cce63800(0000) GS:ffff888036000000(0000) knlGS:0000000000000000 [ 24.787918][ T385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.788085][ T385] CR2: 00007fb9cd0bf423 CR3: 00000000020fe005 CR4: 0000000000772ef0 [ 24.788307][ T385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.788514][ T385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.788725][ T385] PKRU: 55555554 [ 24.788829][ T385] Kernel panic - not syncing: Fatal exception [ 24.789141][ T385] Kernel Offset: 0x37800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 24.789448][ T385] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr