[ 159.354875][ T2620] ==================================================================
[ 159.355124][ T2620] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550
[ 159.355343][ T2620] Read of size 4 at addr 0000000000000068 by task ip/2620
[ 159.355521][ T2620]
[ 159.355596][ T2620] CPU: 0 UID: 0 PID: 2620 Comm: ip Not tainted 6.14.0-rc6-virtme #1
[ 159.355600][ T2620] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 159.355603][ T2620] Call Trace:
[ 159.355604][ T2620]
[ 159.355606][ T2620] dump_stack_lvl+0x82/0xd0
[ 159.355614][ T2620] kasan_report+0xbd/0xf0
[ 159.355622][ T2620] ? nexthop_create_group+0x32c/0x1550
[ 159.355628][ T2620] kasan_check_range+0x39/0x1c0
[ 159.355631][ T2620] nexthop_create_group+0x32c/0x1550
[ 159.355638][ T2620] ? __pfx_nexthop_create_group+0x10/0x10
[ 159.355641][ T2620] ? __nla_validate_parse+0x1bc/0x3d0
[ 159.355649][ T2620] rtm_new_nexthop+0x310/0x8b0
[ 159.355652][ T2620] ? hlock_class+0x4e/0x130
[ 159.355656][ T2620] ? mark_lock+0x38/0x3e0
[ 159.355661][ T2620] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 159.355673][ T2620] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 159.355679][ T2620] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 159.355682][ T2620] rtnetlink_rcv_msg+0x712/0xc10
[ 159.355686][ T2620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 159.355689][ T2620] ? hlock_class+0x4e/0x130
[ 159.355692][ T2620] ? mark_lock+0x38/0x3e0
[ 159.355697][ T2620] ? __lock_acquire+0xb9a/0x1680
[ 159.355701][ T2620] netlink_rcv_skb+0x130/0x360
[ 159.355705][ T2620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 159.355709][ T2620] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 159.355717][ T2620] ? netlink_deliver_tap+0x13e/0x340
[ 159.355721][ T2620] ? netlink_deliver_tap+0xc3/0x340
[ 159.355724][ T2620] netlink_unicast+0x44b/0x710
[ 159.355729][ T2620] ? __pfx_netlink_unicast+0x10/0x10
[ 159.355732][ T2620] ? find_held_lock+0x2c/0x110
[ 159.355737][ T2620] netlink_sendmsg+0x723/0xbe0
[ 159.355741][ T2620] ? __pfx_netlink_sendmsg+0x10/0x10
[ 159.355748][ T2620] ____sys_sendmsg+0x7ac/0xa10
[ 159.355753][ T2620] ? __pfx_____sys_sendmsg+0x10/0x10
[ 159.355755][ T2620] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 159.355764][ T2620] ___sys_sendmsg+0xee/0x170
[ 159.355767][ T2620] ? hlock_class+0x4e/0x130
[ 159.355770][ T2620] ? __pfx____sys_sendmsg+0x10/0x10
[ 159.355775][ T2620] ? usage_skip+0xf2/0x190
[ 159.355781][ T2620] ? do_user_addr_fault+0x8fd/0xe30
[ 159.355785][ T2620] ? do_user_addr_fault+0x8fd/0xe30
[ 159.355790][ T2620] ? find_held_lock+0x2c/0x110
[ 159.355794][ T2620] ? __lock_release+0x103/0x460
[ 159.355797][ T2620] __sys_sendmsg+0x109/0x1a0
[ 159.355801][ T2620] ? __pfx___sys_sendmsg+0x10/0x10
[ 159.355807][ T2620] ? do_user_addr_fault+0x97c/0xe30
[ 159.355812][ T2620] do_syscall_64+0xc1/0x1d0
[ 159.355818][ T2620] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 159.355822][ T2620] RIP: 0033:0x7f92699d49a7
[ 159.355825][ T2620] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 159.355828][ T2620] RSP: 002b:00007fffc314f088 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 159.355833][ T2620] RAX: ffffffffffffffda RBX: 00007fffc314fbf0 RCX: 00007f92699d49a7
[ 159.355835][ T2620] RDX: 0000000000000000 RSI: 00007fffc314f0f0 RDI: 0000000000000005
[ 159.355836][ T2620] RBP: 00007fffc314f5b0 R08: 00000000336ff910 R09: 0000000000000000
[ 159.355838][ T2620] R10: 00007f926988d708 R11: 0000000000000246 R12: 00000000336ff910
[ 159.355840][ T2620] R13: 0000000067da489f R14: 0000000000498600 R15: 00000000336ff910
[ 159.355846][ T2620]
[ 159.355847][ T2620] ==================================================================
[ 159.364061][ T2620] Disabling lock debugging due to kernel taint
[ 159.364249][ T2620] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 159.364648][ T2620] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f]
[ 159.364843][ T2620] CPU: 0 UID: 0 PID: 2620 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1
[ 159.365078][ T2620] Tainted: [B]=BAD_PAGE
[ 159.365185][ T2620] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 159.365354][ T2620] RIP: 0010:nexthop_create_group+0x333/0x1550
[ 159.365527][ T2620] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 159.366064][ T2620] RSP: 0018:ffffc90001d773c8 EFLAGS: 00010202
[ 159.366302][ T2620] RAX: 000000000000000d RBX: ffff88800550b868 RCX: ffffffffa1a5e00a
[ 159.366497][ T2620] RDX: fffffbfff4ec5891 RSI: 0000000000000008 RDI: ffffffffa762c480
[ 159.366694][ T2620] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff4ec5890
[ 159.366964][ T2620] R10: ffffffffa762c487 R11: 205d303236325420 R12: dffffc0000000000
[ 159.367166][ T2620] R13: ffff88800bce5280 R14: 0000000000000000 R15: 0000000000000068
[ 159.367363][ T2620] FS: 00007f92697c8800(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 159.367665][ T2620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 159.367831][ T2620] CR2: 00007f9269a24423 CR3: 000000000bf4c004 CR4: 0000000000772ef0
[ 159.368104][ T2620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 159.368301][ T2620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 159.368496][ T2620] PKRU: 55555554
[ 159.368598][ T2620] Call Trace:
[ 159.368765][ T2620]
[ 159.368833][ T2620] ? die_addr+0x41/0xa0
[ 159.368939][ T2620] ? exc_general_protection+0x14d/0x230
[ 159.369080][ T2620] ? asm_exc_general_protection+0x26/0x30
[ 159.369212][ T2620] ? add_taint+0x2a/0x90
[ 159.369381][ T2620] ? nexthop_create_group+0x333/0x1550
[ 159.369513][ T2620] ? nexthop_create_group+0x32c/0x1550
[ 159.369656][ T2620] ? __pfx_nexthop_create_group+0x10/0x10
[ 159.369791][ T2620] ? __nla_validate_parse+0x1bc/0x3d0
[ 159.369996][ T2620] rtm_new_nexthop+0x310/0x8b0
[ 159.370140][ T2620] ? hlock_class+0x4e/0x130
[ 159.370275][ T2620] ? mark_lock+0x38/0x3e0
[ 159.370376][ T2620] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 159.370584][ T2620] ? rtnetlink_rcv_msg+0x6ef/0xc10
[ 159.370716][ T2620] ? __pfx_rtm_new_nexthop+0x10/0x10
[ 159.370846][ T2620] rtnetlink_rcv_msg+0x712/0xc10
[ 159.370978][ T2620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 159.371112][ T2620] ? hlock_class+0x4e/0x130
[ 159.371245][ T2620] ? mark_lock+0x38/0x3e0
[ 159.371348][ T2620] ? __lock_acquire+0xb9a/0x1680
[ 159.371481][ T2620] netlink_rcv_skb+0x130/0x360
[ 159.371684][ T2620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 159.371816][ T2620] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 159.371951][ T2620] ? netlink_deliver_tap+0x13e/0x340
[ 159.372094][ T2620] ? netlink_deliver_tap+0xc3/0x340
[ 159.372294][ T2620] netlink_unicast+0x44b/0x710
[ 159.372430][ T2620] ? __pfx_netlink_unicast+0x10/0x10
[ 159.372561][ T2620] ? find_held_lock+0x2c/0x110
[ 159.372699][ T2620] netlink_sendmsg+0x723/0xbe0
[ 159.372898][ T2620] ? __pfx_netlink_sendmsg+0x10/0x10
[ 159.373032][ T2620] ____sys_sendmsg+0x7ac/0xa10
[ 159.373172][ T2620] ? __pfx_____sys_sendmsg+0x10/0x10
[ 159.373307][ T2620] ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 159.373544][ T2620] ___sys_sendmsg+0xee/0x170
[ 159.373678][ T2620] ? hlock_class+0x4e/0x130
[ 159.373807][ T2620] ? __pfx____sys_sendmsg+0x10/0x10
[ 159.373938][ T2620] ? usage_skip+0xf2/0x190
[ 159.374134][ T2620] ? do_user_addr_fault+0x8fd/0xe30
[ 159.374271][ T2620] ? do_user_addr_fault+0x8fd/0xe30
[ 159.374402][ T2620] ? find_held_lock+0x2c/0x110
[ 159.374532][ T2620] ? __lock_release+0x103/0x460
[ 159.374729][ T2620] __sys_sendmsg+0x109/0x1a0
[ 159.374859][ T2620] ? __pfx___sys_sendmsg+0x10/0x10
[ 159.374990][ T2620] ? do_user_addr_fault+0x97c/0xe30
[ 159.375121][ T2620] do_syscall_64+0xc1/0x1d0
[ 159.375323][ T2620] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 159.375487][ T2620] RIP: 0033:0x7f92699d49a7
[ 159.375625][ T2620] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
[ 159.376153][ T2620] RSP: 002b:00007fffc314f088 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 159.376356][ T2620] RAX: ffffffffffffffda RBX: 00007fffc314fbf0 RCX: 00007f92699d49a7
[ 159.376620][ T2620] RDX: 0000000000000000 RSI: 00007fffc314f0f0 RDI: 0000000000000005
[ 159.376812][ T2620] RBP: 00007fffc314f5b0 R08: 00000000336ff910 R09: 0000000000000000
[ 159.377078][ T2620] R10: 00007f926988d708 R11: 0000000000000246 R12: 00000000336ff910
[ 159.377281][ T2620] R13: 0000000067da489f R14: 0000000000498600 R15: 00000000336ff910
[ 159.377480][ T2620]
[ 159.377581][ T2620] Modules linked in: sctp vxlan sch_etf sch_fq act_mirred cls_flower sch_ingress [last unloaded: psample]
[ 159.378468][ T2620] ---[ end trace 0000000000000000 ]---
[ 159.378609][ T2620] RIP: 0010:nexthop_create_group+0x333/0x1550
[ 159.378779][ T2620] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 159.379242][ T2620] RSP: 0018:ffffc90001d773c8 EFLAGS: 00010202
[ 159.379405][ T2620] RAX: 000000000000000d RBX: ffff88800550b868 RCX: ffffffffa1a5e00a
[ 159.379678][ T2620] RDX: fffffbfff4ec5891 RSI: 0000000000000008 RDI: ffffffffa762c480
[ 159.379877][ T2620] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff4ec5890
[ 159.380076][ T2620] R10: ffffffffa762c487 R11: 205d303236325420 R12: dffffc0000000000
[ 159.380336][ T2620] R13: ffff88800bce5280 R14: 0000000000000000 R15: 0000000000000068
[ 159.380531][ T2620] FS: 00007f92697c8800(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 159.380828][ T2620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 159.380991][ T2620] CR2: 00007f9269a24423 CR3: 000000000bf4c004 CR4: 0000000000772ef0
[ 159.381200][ T2620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 159.381464][ T2620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 159.381666][ T2620] PKRU: 55555554
[ 159.381764][ T2620] Kernel panic - not syncing: Fatal exception
[ 159.382098][ T2620] Kernel Offset: 0x20400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[ 159.382476][ T2620] ---[ end Kernel panic - not syncing: Fatal exception ]---
WAIT TIMEOUT stderr
Ctrl-C stderr
Ctrl-C stderr
WAIT TIMEOUT stderr