[ 10.832873][ T250] ip (250) used greatest stack depth: 23888 bytes left [ 24.239396][ T383] ================================================================== [ 24.239638][ T383] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 24.239856][ T383] Read of size 4 at addr 0000000000000068 by task ip/383 [ 24.240018][ T383] [ 24.240091][ T383] CPU: 0 UID: 0 PID: 383 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 24.240097][ T383] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 24.240099][ T383] Call Trace: [ 24.240102][ T383] [ 24.240103][ T383] dump_stack_lvl+0x82/0xd0 [ 24.240111][ T383] kasan_report+0xbd/0xf0 [ 24.240118][ T383] ? nexthop_create_group+0x32c/0x1550 [ 24.240123][ T383] kasan_check_range+0x39/0x1c0 [ 24.240127][ T383] nexthop_create_group+0x32c/0x1550 [ 24.240133][ T383] ? __pfx_nexthop_create_group+0x10/0x10 [ 24.240137][ T383] ? __nla_validate_parse+0x1bc/0x3d0 [ 24.240145][ T383] rtm_new_nexthop+0x310/0x8b0 [ 24.240149][ T383] ? hlock_class+0x4e/0x130 [ 24.240154][ T383] ? mark_lock+0x38/0x3e0 [ 24.240158][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.240171][ T383] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 24.240178][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.240181][ T383] rtnetlink_rcv_msg+0x712/0xc10 [ 24.240186][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.240189][ T383] ? hlock_class+0x4e/0x130 [ 24.240192][ T383] ? mark_lock+0x38/0x3e0 [ 24.240197][ T383] ? __lock_acquire+0xb9a/0x1680 [ 24.240201][ T383] netlink_rcv_skb+0x130/0x360 [ 24.240206][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.240211][ T383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 24.240218][ T383] ? netlink_deliver_tap+0x13e/0x340 [ 24.240221][ T383] ? netlink_deliver_tap+0xc3/0x340 [ 24.240225][ T383] netlink_unicast+0x44b/0x710 [ 24.240229][ T383] ? __pfx_netlink_unicast+0x10/0x10 [ 24.240232][ T383] ? find_held_lock+0x2c/0x110 [ 24.240236][ T383] netlink_sendmsg+0x723/0xbe0 [ 24.240241][ T383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 24.240246][ T383] ____sys_sendmsg+0x7ac/0xa10 [ 24.240254][ T383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 24.240258][ T383] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 24.240265][ T383] ___sys_sendmsg+0xee/0x170 [ 24.240267][ T383] ? hlock_class+0x4e/0x130 [ 24.240270][ T383] ? __pfx____sys_sendmsg+0x10/0x10 [ 24.240275][ T383] ? hlock_class+0x12/0x130 [ 24.240279][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 24.240285][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 24.240289][ T383] ? find_held_lock+0x2c/0x110 [ 24.240292][ T383] ? __lock_release+0x103/0x460 [ 24.240297][ T383] __sys_sendmsg+0x109/0x1a0 [ 24.240300][ T383] ? __pfx___sys_sendmsg+0x10/0x10 [ 24.240305][ T383] ? do_user_addr_fault+0x97c/0xe30 [ 24.240310][ T383] do_syscall_64+0xc1/0x1d0 [ 24.240316][ T383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 24.240321][ T383] RIP: 0033:0x7f5d930fb9a7 [ 24.240325][ T383] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 24.240328][ T383] RSP: 002b:00007ffcac355018 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.240331][ T383] RAX: ffffffffffffffda RBX: 00007ffcac355b80 RCX: 00007f5d930fb9a7 [ 24.240334][ T383] RDX: 0000000000000000 RSI: 00007ffcac355080 RDI: 0000000000000005 [ 24.240336][ T383] RBP: 00007ffcac355540 R08: 0000000000000004 R09: 00007f5d93079980 [ 24.240337][ T383] R10: 00007f5d92fb4708 R11: 0000000000000246 R12: 00007ffcac357997 [ 24.240340][ T383] R13: 0000000067da6666 R14: 0000000000498600 R15: 000000001c0df910 [ 24.240345][ T383] [ 24.240347][ T383] ================================================================== [ 24.248752][ T383] Disabling lock debugging due to kernel taint [ 24.248933][ T383] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 24.249258][ T383] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 24.249451][ T383] CPU: 0 UID: 0 PID: 383 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 24.249683][ T383] Tainted: [B]=BAD_PAGE [ 24.249784][ T383] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 24.249953][ T383] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 24.250121][ T383] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 24.250584][ T383] RSP: 0018:ffffc90000b373c8 EFLAGS: 00010202 [ 24.250771][ T383] RAX: 000000000000000d RBX: ffff888010865fe8 RCX: ffffffff8be53d8a [ 24.250971][ T383] RDX: fffffbfff2222491 RSI: 0000000000000008 RDI: ffffffff91112480 [ 24.251162][ T383] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2222490 [ 24.251355][ T383] R10: ffffffff91112487 R11: 205d333833542020 R12: dffffc0000000000 [ 24.251547][ T383] R13: ffff88801281b400 R14: 0000000000000000 R15: 0000000000000068 [ 24.251746][ T383] FS: 00007f5d92eef800(0000) GS:ffff888036000000(0000) knlGS:0000000000000000 [ 24.251970][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.252135][ T383] CR2: 00007f5d9314b423 CR3: 00000000059b0006 CR4: 0000000000772ef0 [ 24.252327][ T383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.252522][ T383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.252715][ T383] PKRU: 55555554 [ 24.252812][ T383] Call Trace: [ 24.252908][ T383] [ 24.252977][ T383] ? die_addr+0x41/0xa0 [ 24.253084][ T383] ? exc_general_protection+0x14d/0x230 [ 24.253219][ T383] ? asm_exc_general_protection+0x26/0x30 [ 24.253357][ T383] ? add_taint+0x2a/0x90 [ 24.253457][ T383] ? nexthop_create_group+0x333/0x1550 [ 24.253589][ T383] ? nexthop_create_group+0x32c/0x1550 [ 24.253720][ T383] ? __pfx_nexthop_create_group+0x10/0x10 [ 24.253850][ T383] ? __nla_validate_parse+0x1bc/0x3d0 [ 24.253981][ T383] rtm_new_nexthop+0x310/0x8b0 [ 24.254114][ T383] ? hlock_class+0x4e/0x130 [ 24.254246][ T383] ? mark_lock+0x38/0x3e0 [ 24.254352][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.254522][ T383] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 24.254658][ T383] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 24.254787][ T383] rtnetlink_rcv_msg+0x712/0xc10 [ 24.254915][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.255042][ T383] ? hlock_class+0x4e/0x130 [ 24.255175][ T383] ? mark_lock+0x38/0x3e0 [ 24.255275][ T383] ? __lock_acquire+0xb9a/0x1680 [ 24.255412][ T383] netlink_rcv_skb+0x130/0x360 [ 24.255541][ T383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 24.255671][ T383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 24.255803][ T383] ? netlink_deliver_tap+0x13e/0x340 [ 24.255931][ T383] ? netlink_deliver_tap+0xc3/0x340 [ 24.256063][ T383] netlink_unicast+0x44b/0x710 [ 24.256193][ T383] ? __pfx_netlink_unicast+0x10/0x10 [ 24.256325][ T383] ? find_held_lock+0x2c/0x110 [ 24.256454][ T383] netlink_sendmsg+0x723/0xbe0 [ 24.256585][ T383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 24.256717][ T383] ____sys_sendmsg+0x7ac/0xa10 [ 24.256850][ T383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 24.256978][ T383] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 24.257142][ T383] ___sys_sendmsg+0xee/0x170 [ 24.257272][ T383] ? hlock_class+0x4e/0x130 [ 24.257402][ T383] ? __pfx____sys_sendmsg+0x10/0x10 [ 24.257541][ T383] ? hlock_class+0x12/0x130 [ 24.257670][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 24.257800][ T383] ? do_user_addr_fault+0x8fd/0xe30 [ 24.257929][ T383] ? find_held_lock+0x2c/0x110 [ 24.258059][ T383] ? __lock_release+0x103/0x460 [ 24.258188][ T383] __sys_sendmsg+0x109/0x1a0 [ 24.258318][ T383] ? __pfx___sys_sendmsg+0x10/0x10 [ 24.258451][ T383] ? do_user_addr_fault+0x97c/0xe30 [ 24.258607][ T383] do_syscall_64+0xc1/0x1d0 [ 24.258736][ T383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 24.258895][ T383] RIP: 0033:0x7f5d930fb9a7 [ 24.259036][ T383] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 24.259487][ T383] RSP: 002b:00007ffcac355018 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.259682][ T383] RAX: ffffffffffffffda RBX: 00007ffcac355b80 RCX: 00007f5d930fb9a7 [ 24.259880][ T383] RDX: 0000000000000000 RSI: 00007ffcac355080 RDI: 0000000000000005 [ 24.260071][ T383] RBP: 00007ffcac355540 R08: 0000000000000004 R09: 00007f5d93079980 [ 24.260261][ T383] R10: 00007f5d92fb4708 R11: 0000000000000246 R12: 00007ffcac357997 [ 24.260456][ T383] R13: 0000000067da6666 R14: 0000000000498600 R15: 000000001c0df910 [ 24.260656][ T383] [ 24.260754][ T383] Modules linked in: vrf veth [ 24.260903][ T383] ---[ end trace 0000000000000000 ]--- [ 24.261035][ T383] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 24.261200][ T383] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 84 19 2f fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 24.261661][ T383] RSP: 0018:ffffc90000b373c8 EFLAGS: 00010202 [ 24.261821][ T383] RAX: 000000000000000d RBX: ffff888010865fe8 RCX: ffffffff8be53d8a [ 24.262012][ T383] RDX: fffffbfff2222491 RSI: 0000000000000008 RDI: ffffffff91112480 [ 24.262203][ T383] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2222490 [ 24.262405][ T383] R10: ffffffff91112487 R11: 205d333833542020 R12: dffffc0000000000 [ 24.262623][ T383] R13: ffff88801281b400 R14: 0000000000000000 R15: 0000000000000068 [ 24.262823][ T383] FS: 00007f5d92eef800(0000) GS:ffff888036000000(0000) knlGS:0000000000000000 [ 24.263046][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.263209][ T383] CR2: 00007f5d9314b423 CR3: 00000000059b0006 CR4: 0000000000772ef0 [ 24.263405][ T383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.263599][ T383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.263789][ T383] PKRU: 55555554 [ 24.263887][ T383] Kernel panic - not syncing: Fatal exception [ 24.264182][ T383] Kernel Offset: 0xa800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 24.264479][ T383] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr