[ 391.982746][ T3279] ==================================================================
[ 391.982992][ T3279] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550
[ 391.983202][ T3279] Read of size 4 at addr 0000000000000068 by task ip/3279
[ 391.983375][ T3279]
[ 391.983446][ T3279] CPU: 2 UID: 0 PID: 3279 Comm: ip Not tainted 6.14.0-rc6-virtme #1
[ 391.983450][ T3279] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 391.983452][ T3279] Call Trace:
[ 391.983454][ T3279]
[ 391.983456][ T3279] dump_stack_lvl+0x82/0xd0
[ 391.983463][ T3279] kasan_report+0xbd/0xf0
[ 391.983471][ T3279] ? nexthop_create_group+0x32c/0x1550
[ 391.983477][ T3279] kasan_check_range+0x39/0x1c0
[ 391.983481][ T3279] nexthop_create_group+0x32c/0x1550
[ 391.983487][ T3279] ? __pfx_nexthop_create_group+0x10/0x10
[ 391.983491][ T3279] ? __nla_validate_parse+0x1bc/0x3d0
[ 391.983498][ T3279] rtm_new_nexthop+0x310/0x8b0
[ 391.983501][ T3279] ? hlock_class+0x4e/0x130
[ 391.983506][ T3279] ? mark_lock+0x38/0x3e0
[ 391.983511][ T3279] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 391.983523][ T3279] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 391.983529][ T3279] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 391.983532][ T3279] rtnetlink_rcv_msg+0x712/0xc10
[ 391.983536][ T3279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 391.983540][ T3279] ? hlock_class+0x4e/0x130
[ 391.983542][ T3279] ? mark_lock+0x38/0x3e0
[ 391.983548][ T3279] ? __lock_acquire+0xb9a/0x1680
[ 391.983551][ T3279] netlink_rcv_skb+0x130/0x360
[ 391.983556][ T3279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 391.983560][ T3279] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 391.983567][ T3279] ? netlink_deliver_tap+0x13e/0x340
[ 391.983571][ T3279] ? netlink_deliver_tap+0xc3/0x340
[ 391.983575][ T3279] netlink_unicast+0x44b/0x710
[ 391.983579][ T3279] ? __pfx_netlink_unicast+0x10/0x10
[ 391.983582][ T3279] ? find_held_lock+0x2c/0x110
[ 391.983587][ T3279] netlink_sendmsg+0x723/0xbe0
[ 391.983592][ T3279] ? __pfx_netlink_sendmsg+0x10/0x10
[ 391.983599][ T3279] ____sys_sendmsg+0x7ac/0xa10
[ 391.983604][ T3279] ? __pfx_____sys_sendmsg+0x10/0x10
[ 391.983606][ T3279] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 391.983615][ T3279] ___sys_sendmsg+0xee/0x170
[ 391.983618][ T3279] ? hlock_class+0x4e/0x130
[ 391.983622][ T3279] ? __pfx____sys_sendmsg+0x10/0x10
[ 391.983627][ T3279] ? usage_skip+0xf2/0x190
[ 391.983632][ T3279] ? do_user_addr_fault+0x8fd/0xe30
[ 391.983637][ T3279] ? do_user_addr_fault+0x8fd/0xe30
[ 391.983642][ T3279] ? find_held_lock+0x2c/0x110
[ 391.983645][ T3279] ? __lock_release+0x103/0x460
[ 391.983649][ T3279] __sys_sendmsg+0x109/0x1a0
[ 391.983653][ T3279] ? __pfx___sys_sendmsg+0x10/0x10
[ 391.983659][ T3279] ? do_user_addr_fault+0x97c/0xe30
[ 391.983664][ T3279] do_syscall_64+0xc1/0x1d0
[ 391.983669][ T3279] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 391.983674][ T3279] RIP: 0033:0x7f168998d9a7
[ 391.983677][ T3279] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 391.983680][ T3279] RSP: 002b:00007ffc3d1900e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 391.983684][ T3279] RAX: ffffffffffffffda RBX: 00007ffc3d190c58 RCX: 00007f168998d9a7
[ 391.983686][ T3279] RDX: 0000000000000000 RSI: 00007ffc3d190150 RDI: 0000000000000005
[ 391.983688][ T3279] RBP: 00007ffc3d190610 R08: 0000000000000000 R09: 0000000000000000
[ 391.983689][ T3279] R10: 00007f1689846708 R11: 0000000000000246 R12: 00007ffc3d1929f3
[ 391.983691][ T3279] R13: 0000000067da45e6 R14: 0000000000498600 R15: 00000000097c4910
[ 391.983697][ T3279]
[ 391.983698][ T3279] ==================================================================
[ 391.992584][ T3279] Disabling lock debugging due to kernel taint
[ 391.992812][ T3279] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 391.993140][ T3279] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]
[ 391.993329][ T3279] CPU: 2 UID: 0 PID: 3279 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1
[ 391.993553][ T3279] Tainted: [B]=BAD_PAGE
[ 391.993653][ T3279] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 391.993813][ T3279] RIP: 0010:nexthop_create_group+0x333/0x1550
[ 391.993988][ T3279] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 391.994447][ T3279] RSP: 0018:ffffc90000a673c8 EFLAGS: 00010202
[ 391.994611][ T3279] RAX: 000000000000000d RBX: ffff888011768068 RCX: ffffffffa545e00a
[ 391.994807][ T3279] RDX: fffffbfff5605891 RSI: 0000000000000008 RDI: ffffffffab02c480
[ 391.995014][ T3279] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff5605890
[ 391.995205][ T3279] R10: ffffffffab02c487 R11: 205d393732335420 R12: dffffc0000000000
[ 391.995398][ T3279] R13: ffff88800e11cf80 R14: 0000000000000000 R15: 0000000000000068
[ 391.995592][ T3279] FS: 00007f1689781800(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 391.995820][ T3279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 391.995983][ T3279] CR2: 00007f16899dd423 CR3: 0000000011430006 CR4: 0000000000772ef0
[ 391.996177][ T3279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 391.996370][ T3279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 391.996568][ T3279] PKRU: 55555554
[ 391.996667][ T3279] Call Trace:
[ 391.996766][ T3279]
[ 391.996834][ T3279] ? die_addr+0x41/0xa0
[ 391.996938][ T3279] ? exc_general_protection+0x14d/0x230
[ 391.997070][ T3279] ? asm_exc_general_protection+0x26/0x30
[ 391.997202][ T3279] ? add_taint+0x2a/0x90
[ 391.997302][ T3279] ? nexthop_create_group+0x333/0x1550
[ 391.997437][ T3279] ? nexthop_create_group+0x32c/0x1550
[ 391.997568][ T3279] ? __pfx_nexthop_create_group+0x10/0x10
[ 391.997698][ T3279] ? __nla_validate_parse+0x1bc/0x3d0
[ 391.997830][ T3279] rtm_new_nexthop+0x310/0x8b0
[ 391.997967][ T3279] ? hlock_class+0x4e/0x130
[ 391.998099][ T3279] ? mark_lock+0x38/0x3e0
[ 391.998198][ T3279] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 391.998339][ T3279] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 391.998470][ T3279] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 391.998597][ T3279] rtnetlink_rcv_msg+0x712/0xc10
[ 391.998738][ T3279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 391.998872][ T3279] ? hlock_class+0x4e/0x130
[ 391.999006][ T3279] ? mark_lock+0x38/0x3e0
[ 391.999105][ T3279] ? __lock_acquire+0xb9a/0x1680
[ 391.999240][ T3279] netlink_rcv_skb+0x130/0x360
[ 391.999370][ T3279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 391.999500][ T3279] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 391.999633][ T3279] ? netlink_deliver_tap+0x13e/0x340
[ 391.999761][ T3279] ? netlink_deliver_tap+0xc3/0x340
[ 391.999891][ T3279] netlink_unicast+0x44b/0x710
[ 392.000021][ T3279] ? __pfx_netlink_unicast+0x10/0x10
[ 392.000156][ T3279] ? find_held_lock+0x2c/0x110
[ 392.000286][ T3279] netlink_sendmsg+0x723/0xbe0
[ 392.000417][ T3279] ? __pfx_netlink_sendmsg+0x10/0x10
[ 392.000547][ T3279] ____sys_sendmsg+0x7ac/0xa10
[ 392.000677][ T3279] ? __pfx_____sys_sendmsg+0x10/0x10
[ 392.000806][ T3279] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 392.000973][ T3279] ___sys_sendmsg+0xee/0x170
[ 392.001108][ T3279] ? hlock_class+0x4e/0x130
[ 392.001237][ T3279] ? __pfx____sys_sendmsg+0x10/0x10
[ 392.001366][ T3279] ? usage_skip+0xf2/0x190
[ 392.001498][ T3279] ? do_user_addr_fault+0x8fd/0xe30
[ 392.001628][ T3279] ? do_user_addr_fault+0x8fd/0xe30
[ 392.001758][ T3279] ? find_held_lock+0x2c/0x110
[ 392.001888][ T3279] ? __lock_release+0x103/0x460
[ 392.002018][ T3279] __sys_sendmsg+0x109/0x1a0
[ 392.002151][ T3279] ? __pfx___sys_sendmsg+0x10/0x10
[ 392.002282][ T3279] ? do_user_addr_fault+0x97c/0xe30
[ 392.002483][ T3279] do_syscall_64+0xc1/0x1d0
[ 392.002614][ T3279] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 392.002772][ T3279] RIP: 0033:0x7f168998d9a7
[ 392.002915][ T3279] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 392.003445][ T3279] RSP: 002b:00007ffc3d1900e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 392.003707][ T3279] RAX: ffffffffffffffda RBX: 00007ffc3d190c58 RCX: 00007f168998d9a7
[ 392.003899][ T3279] RDX: 0000000000000000 RSI: 00007ffc3d190150 RDI: 0000000000000005
[ 392.004094][ T3279] RBP: 00007ffc3d190610 R08: 0000000000000000 R09: 0000000000000000
[ 392.004356][ T3279] R10: 00007f1689846708 R11: 0000000000000246 R12: 00007ffc3d1929f3
[ 392.004546][ T3279] R13: 0000000067da45e6 R14: 0000000000498600 R15: 00000000097c4910
[ 392.004809][ T3279]
[ 392.004907][ T3279] Modules linked in: vxlan unix_diag
[ 392.005104][ T3279] ---[ end trace 0000000000000000 ]---
[ 392.005249][ T3279] RIP: 0010:nexthop_create_group+0x333/0x1550
[ 392.005501][ T3279] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 392.005959][ T3279] RSP: 0018:ffffc90000a673c8 EFLAGS: 00010202
[ 392.006149][ T3279] RAX: 000000000000000d RBX: ffff888011768068 RCX: ffffffffa545e00a
[ 392.006353][ T3279] RDX: fffffbfff5605891 RSI: 0000000000000008 RDI: ffffffffab02c480
[ 392.006627][ T3279] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff5605890
[ 392.006843][ T3279] R10: ffffffffab02c487 R11: 205d393732335420 R12: dffffc0000000000
[ 392.007086][ T3279] R13: ffff88800e11cf80 R14: 0000000000000000 R15: 0000000000000068
[ 392.007378][ T3279] FS: 00007f1689781800(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 392.007623][ T3279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 392.007815][ T3279] CR2: 00007f16899dd423 CR3: 0000000011430006 CR4: 0000000000772ef0
[ 392.008118][ T3279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 392.008347][ T3279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 392.008653][ T3279] PKRU: 55555554
[ 392.008778][ T3279] Kernel panic - not syncing: Fatal exception
[ 392.009166][ T3279] Kernel Offset: 0x23e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 392.009581][ T3279] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr