====================================== | [ 4644.621178][T18806] eth1: renamed from tmp | [ 4665.252137][T18929] eth1: renamed from tmp | [ 4674.950198][T18972] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI | [ 4674.950660][T18972] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 4674.951242][T18972] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [4674.951472][T18972] RIP: 0010:ip6_rt_pcpu_alloc (./include/net/net_namespace.h:409 ./include/linux/netdevice.h:2709 net/ipv6/route.c:1418) [ 4674.951666][T18972] Code: ff 45 0f b7 ef 49 89 c6 e8 9c f9 3a 00 49 8d 86 08 01 00 00 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 bc 03 00 00 4d 8b be 08 01 00 00 44 89 e9 ba ff All code ======== 0: ff 45 0f incl 0xf(%rbp) 3: b7 ef mov $0xef,%bh 5: 49 89 c6 mov %rax,%r14 8: e8 9c f9 3a 00 call 0x3af9a9 d: 49 8d 86 08 01 00 00 lea 0x108(%r14),%rax 14: 48 89 c2 mov %rax,%rdx 17: 48 89 44 24 08 mov %rax,0x8(%rsp) 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 bc 03 00 00 jne 0x3f0 34: 4d 8b be 08 01 00 00 mov 0x108(%r14),%r15 3b: 44 89 e9 mov %r13d,%ecx 3e: ba .byte 0xba 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 bc 03 00 00 jne 0x3c6 a: 4d 8b be 08 01 00 00 mov 0x108(%r14),%r15 11: 44 89 e9 mov %r13d,%ecx 14: ba .byte 0xba 15: ff .byte 0xff [ 4674.952297][T18972] RSP: 0018:ffffc900086c7520 EFLAGS: 00010206 [ 4674.952528][T18972] RAX: dffffc0000000000 RBX: ffff888018fdd600 RCX: 0000000000000001 [ 4674.952796][T18972] RDX: 0000000000000021 RSI: ffffffff8ba538c0 RDI: ffff8880021f1000 [ 4674.953069][T18972] RBP: ffff888018fdd62c R08: 0000000000000000 R09: 0000000000000001 [ 4674.953338][T18972] R10: 0000000000000078 R11: ffffffff8cd88620 R12: ffffc900086c7620 [ 4674.953605][T18972] R13: 0000000000000008 R14: 0000000000000000 R15: 0000000000000008 [ 4674.953881][T18972] FS: 00007f12e5627740(0000) GS:ffff8880de744000(0000) knlGS:0000000000000000 [ 4674.954195][T18972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 4674.954420][T18972] CR2: 0000564613ff6dec CR3: 0000000018f2f005 CR4: 0000000000772ef0 [ 4674.954689][T18972] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 4674.954963][T18972] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 4674.955229][T18972] PKRU: 55555554 [ 4674.955364][T18972] Call Trace: [ 4674.955499][T18972] [4674.955593][T18972] ? __pfx_ip6_rt_pcpu_alloc (net/ipv6/route.c:1407) [4674.955775][T18972] ? __pfx_rt6_find_cached_rt.constprop.0.isra.0 (net/ipv6/route.c:1833) [4674.956041][T18972] ip6_pol_route (net/ipv6/route.c:1467 net/ipv6/route.c:2302) [4674.956225][T18972] ? __pfx_ip6_pol_route (net/ipv6/route.c:2251) [4674.956404][T18972] ? find_held_lock (kernel/locking/lockdep.c:5348) [4674.956588][T18972] ? fib6_get_table (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv6/ip6_fib.c:295) [4674.956765][T18972] __fib6_rule_action (./include/net/ip6_fib.h:617 net/ipv6/fib6_rules.c:237) [4674.956943][T18972] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2647) [4674.957121][T18972] ? fib_rule_match (net/core/fib_rules.c:305 (discriminator 1)) [4674.957297][T18972] fib_rules_lookup (net/core/fib_rules.c:339 (discriminator 1)) [4674.957472][T18972] ? l3mdev_update_flow (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/l3mdev/l3mdev.c:301) [4674.957651][T18972] ? __pfx_fib_rules_lookup (net/core/fib_rules.c:315) [4674.957830][T18972] ? l3mdev_update_flow (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/l3mdev/l3mdev.c:301) [4674.958006][T18972] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2647) [4674.958180][T18972] fib6_rule_lookup (net/ipv6/fib6_rules.c:115) [4674.958359][T18972] ? __pfx_fib6_rule_lookup (net/ipv6/fib6_rules.c:99) [4674.958540][T18972] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2647) [4674.958722][T18972] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:736) [4674.958901][T18972] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5829) [4674.959081][T18972] ? ip6_route_output_flags (./include/linux/rcupdate.h:331 ./include/linux/rcupdate.h:841 net/ipv6/route.c:2692) [4674.959258][T18972] ip6_route_output_flags (net/ipv6/route.c:2681 net/ipv6/route.c:2693) [4674.959438][T18972] ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1128) [4674.959664][T18972] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1260) [4674.959839][T18972] ? __pfx_ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1255) [4674.960021][T18972] ? sk_dst_check (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/sock.h:2125 net/core/sock.c:619) [4674.960201][T18972] ip6_sk_dst_lookup_flow (net/ipv6/ip6_output.c:1297) [4674.960380][T18972] udpv6_sendmsg (net/ipv6/udp.c:1707) [4674.960556][T18972] ? find_held_lock (kernel/locking/lockdep.c:5348) [4674.960733][T18972] ? __pfx_ip_generic_getfrag (net/ipv4/ip_output.c:927) [4674.960915][T18972] ? __pfx_udpv6_sendmsg (net/ipv6/udp.c:1476) [4674.961093][T18972] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [4674.961274][T18972] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) [4674.961454][T18972] ? __lock_acquire (kernel/locking/lockdep.c:5235) [4674.961629][T18972] ? intel_nhlt_get_dmic_geo.part.0 (sound/hda/intel-nhlt.c:57) [4674.961847][T18972] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) [4674.962023][T18972] ? __lock_release (kernel/locking/lockdep.c:5534) [4674.962206][T18972] ? __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) [4674.962385][T18972] __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) [4674.962560][T18972] ? __pfx___sys_sendto (net/socket.c:2147) [4674.962747][T18972] ? __pfx___sys_recvmsg (net/socket.c:2846) [4674.962928][T18972] __x64_sys_sendto (net/socket.c:2183) [4674.963102][T18972] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:198 arch/x86/entry/syscall_64.c:90) [4674.963282][T18972] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) [4674.963464][T18972] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [4674.963641][T18972] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 4674.963864][T18972] RIP: 0033:0x7f12e5779a4a [ 4674.964064][T18972] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 All code ======== 0: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 4: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax b: eb b8 jmp 0xffffffffffffffc5 d: 0f 1f 00 nopl (%rax) 10: f3 0f 1e fa endbr64 14: 41 89 ca mov %ecx,%r10d 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 15 jne 0x38 23: b8 2c 00 00 00 mov $0x2c,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 7e ja 0xb0 32: c3 ret 33: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 38: 41 54 push %r12 3a: 48 83 ec 30 sub $0x30,%rsp 3e: 44 rex.R 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 7e ja 0x86 8: c3 ret 9: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) e: 41 54 push %r12 10: 48 83 ec 30 sub $0x30,%rsp 14: 44 rex.R 15: 89 .byte 0x89 [ 4674.964695][T18972] RSP: 002b:00007ffd6ebb3258 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 4674.964962][T18972] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f12e5779a4a [ 4674.965227][T18972] RDX: 000000000000000c RSI: 000000000040671e RDI: 0000000000000005 [ 4674.965503][T18972] RBP: 0000000000000005 R08: 00007ffd6ebb37e0 R09: 000000000000001c [ 4674.965763][T18972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6ebb37e0 Finger prints: ip6_rt_pcpu_alloc:ip6_pol_route:__fib6_rule_action:fib_rules_lookup:fib6_rule_lookup