[ 159.410603][ T2217] ================================================================== [ 159.410879][ T2217] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 159.411121][ T2217] Read of size 4 at addr 0000000000000068 by task ip/2217 [ 159.411306][ T2217] [ 159.411386][ T2217] CPU: 3 UID: 0 PID: 2217 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 159.411391][ T2217] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 159.411395][ T2217] Call Trace: [ 159.411397][ T2217] [ 159.411399][ T2217] dump_stack_lvl+0x82/0xd0 [ 159.411407][ T2217] kasan_report+0xbd/0xf0 [ 159.411417][ T2217] ? nexthop_create_group+0x32c/0x1550 [ 159.411423][ T2217] kasan_check_range+0x39/0x1c0 [ 159.411427][ T2217] nexthop_create_group+0x32c/0x1550 [ 159.411434][ T2217] ? __pfx_nexthop_create_group+0x10/0x10 [ 159.411438][ T2217] ? __nla_validate_parse+0x1bc/0x3d0 [ 159.411446][ T2217] rtm_new_nexthop+0x310/0x8b0 [ 159.411450][ T2217] ? hlock_class+0x4e/0x130 [ 159.411456][ T2217] ? mark_lock+0x38/0x3e0 [ 159.411461][ T2217] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 159.411474][ T2217] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 159.411482][ T2217] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 159.411485][ T2217] rtnetlink_rcv_msg+0x712/0xc10 [ 159.411489][ T2217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.411492][ T2217] ? hlock_class+0x4e/0x130 [ 159.411495][ T2217] ? mark_lock+0x38/0x3e0 [ 159.411500][ T2217] ? __lock_acquire+0xb9a/0x1680 [ 159.411504][ T2217] netlink_rcv_skb+0x130/0x360 [ 159.411510][ T2217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.411514][ T2217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.411522][ T2217] ? netlink_deliver_tap+0x13e/0x340 [ 159.411526][ T2217] ? netlink_deliver_tap+0xc3/0x340 [ 159.411530][ T2217] netlink_unicast+0x44b/0x710 [ 159.411534][ T2217] ? __pfx_netlink_unicast+0x10/0x10 [ 159.411537][ T2217] ? find_held_lock+0x2c/0x110 [ 159.411542][ T2217] netlink_sendmsg+0x723/0xbe0 [ 159.411548][ T2217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.411554][ T2217] ____sys_sendmsg+0x7ac/0xa10 [ 159.411562][ T2217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.411564][ T2217] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.411573][ T2217] ___sys_sendmsg+0xee/0x170 [ 159.411577][ T2217] ? hlock_class+0x4e/0x130 [ 159.411580][ T2217] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.411586][ T2217] ? usage_skip+0xf2/0x190 [ 159.411591][ T2217] ? do_user_addr_fault+0x8fd/0xe30 [ 159.411599][ T2217] ? do_user_addr_fault+0x8fd/0xe30 [ 159.411604][ T2217] ? find_held_lock+0x2c/0x110 [ 159.411608][ T2217] ? __lock_release+0x103/0x460 [ 159.411611][ T2217] __sys_sendmsg+0x109/0x1a0 [ 159.411615][ T2217] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.411621][ T2217] ? do_user_addr_fault+0x97c/0xe30 [ 159.411626][ T2217] do_syscall_64+0xc1/0x1d0 [ 159.411635][ T2217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.411641][ T2217] RIP: 0033:0x7f0eb0f309a7 [ 159.411647][ T2217] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 159.411650][ T2217] RSP: 002b:00007ffc0c446b48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.411655][ T2217] RAX: ffffffffffffffda RBX: 00007ffc0c4476b8 RCX: 00007f0eb0f309a7 [ 159.411657][ T2217] RDX: 0000000000000000 RSI: 00007ffc0c446bb0 RDI: 0000000000000005 [ 159.411659][ T2217] RBP: 00007ffc0c447070 R08: 0000000000000000 R09: 0000000000000000 [ 159.411660][ T2217] R10: 00007f0eb0de9708 R11: 0000000000000246 R12: 00007ffc0c4479f3 [ 159.411662][ T2217] R13: 0000000067da7311 R14: 0000000000498600 R15: 0000000028387910 [ 159.411668][ T2217] [ 159.411669][ T2217] ================================================================== [ 159.421570][ T2217] Disabling lock debugging due to kernel taint [ 159.421850][ T2217] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 159.422290][ T2217] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 159.422516][ T2217] CPU: 3 UID: 0 PID: 2217 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 159.422780][ T2217] Tainted: [B]=BAD_PAGE [ 159.422898][ T2217] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 159.423088][ T2217] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 159.423299][ T2217] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 159.423818][ T2217] RSP: 0018:ffffc900011a73c8 EFLAGS: 00010202 [ 159.424029][ T2217] RAX: 000000000000000d RBX: ffff8880099bd1e8 RCX: ffffffff8e45e00a [ 159.424267][ T2217] RDX: fffffbfff2805891 RSI: 0000000000000008 RDI: ffffffff9402c480 [ 159.424496][ T2217] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2805890 [ 159.424725][ T2217] R10: ffffffff9402c487 R11: 205d373132325420 R12: dffffc0000000000 [ 159.424944][ T2217] R13: ffff88800a401580 R14: 0000000000000000 R15: 0000000000000068 [ 159.425188][ T2217] FS: 00007f0eb0d24800(0000) GS:ffff888065980000(0000) knlGS:0000000000000000 [ 159.425459][ T2217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.425661][ T2217] CR2: 00007f0eb0f80423 CR3: 000000000bd50001 CR4: 0000000000772ef0 [ 159.425894][ T2217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.426127][ T2217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.426368][ T2217] PKRU: 55555554 [ 159.426485][ T2217] Call Trace: [ 159.426599][ T2217] [ 159.426678][ T2217] ? die_addr+0x41/0xa0 [ 159.426792][ T2217] ? exc_general_protection+0x14d/0x230 [ 159.426946][ T2217] ? asm_exc_general_protection+0x26/0x30 [ 159.427105][ T2217] ? add_taint+0x2a/0x90 [ 159.427234][ T2217] ? nexthop_create_group+0x333/0x1550 [ 159.427389][ T2217] ? nexthop_create_group+0x32c/0x1550 [ 159.427552][ T2217] ? __pfx_nexthop_create_group+0x10/0x10 [ 159.427705][ T2217] ? __nla_validate_parse+0x1bc/0x3d0 [ 159.427864][ T2217] rtm_new_nexthop+0x310/0x8b0 [ 159.428026][ T2217] ? hlock_class+0x4e/0x130 [ 159.428186][ T2217] ? mark_lock+0x38/0x3e0 [ 159.428314][ T2217] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 159.428474][ T2217] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 159.428634][ T2217] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 159.428793][ T2217] rtnetlink_rcv_msg+0x712/0xc10 [ 159.428942][ T2217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.429091][ T2217] ? hlock_class+0x4e/0x130 [ 159.429240][ T2217] ? mark_lock+0x38/0x3e0 [ 159.429365][ T2217] ? __lock_acquire+0xb9a/0x1680 [ 159.429520][ T2217] netlink_rcv_skb+0x130/0x360 [ 159.429673][ T2217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.429825][ T2217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.429979][ T2217] ? netlink_deliver_tap+0x13e/0x340 [ 159.430154][ T2217] ? netlink_deliver_tap+0xc3/0x340 [ 159.430306][ T2217] netlink_unicast+0x44b/0x710 [ 159.430463][ T2217] ? __pfx_netlink_unicast+0x10/0x10 [ 159.430614][ T2217] ? find_held_lock+0x2c/0x110 [ 159.430765][ T2217] netlink_sendmsg+0x723/0xbe0 [ 159.430919][ T2217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.431070][ T2217] ____sys_sendmsg+0x7ac/0xa10 [ 159.431228][ T2217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.431378][ T2217] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.431572][ T2217] ___sys_sendmsg+0xee/0x170 [ 159.431722][ T2217] ? hlock_class+0x4e/0x130 [ 159.431873][ T2217] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.432028][ T2217] ? usage_skip+0xf2/0x190 [ 159.432182][ T2217] ? do_user_addr_fault+0x8fd/0xe30 [ 159.432333][ T2217] ? do_user_addr_fault+0x8fd/0xe30 [ 159.432489][ T2217] ? find_held_lock+0x2c/0x110 [ 159.432639][ T2217] ? __lock_release+0x103/0x460 [ 159.432800][ T2217] __sys_sendmsg+0x109/0x1a0 [ 159.432953][ T2217] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.433105][ T2217] ? do_user_addr_fault+0x97c/0xe30 [ 159.433256][ T2217] do_syscall_64+0xc1/0x1d0 [ 159.433404][ T2217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.433605][ T2217] RIP: 0033:0x7f0eb0f309a7 [ 159.433791][ T2217] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 159.434383][ T2217] RSP: 002b:00007ffc0c446b48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.434687][ T2217] RAX: ffffffffffffffda RBX: 00007ffc0c4476b8 RCX: 00007f0eb0f309a7 [ 159.435031][ T2217] RDX: 0000000000000000 RSI: 00007ffc0c446bb0 RDI: 0000000000000005 [ 159.435390][ T2217] RBP: 00007ffc0c447070 R08: 0000000000000000 R09: 0000000000000000 [ 159.435742][ T2217] R10: 00007f0eb0de9708 R11: 0000000000000246 R12: 00007ffc0c4479f3 [ 159.436095][ T2217] R13: 0000000067da7311 R14: 0000000000498600 R15: 0000000028387910 [ 159.436457][ T2217] [ 159.436646][ T2217] Modules linked in: unix_diag vxlan ipt_rpfilter nft_compat nf_tables act_mirred act_tunnel_key cls_flower bareudp mpls_gso mpls_iptunnel mpls_router sch_ingress [last unloaded: psample] [ 159.437441][ T2217] ---[ end trace 0000000000000000 ]--- [ 159.437680][ T2217] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 159.437883][ T2217] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 159.438513][ T2217] RSP: 0018:ffffc900011a73c8 EFLAGS: 00010202 [ 159.438706][ T2217] RAX: 000000000000000d RBX: ffff8880099bd1e8 RCX: ffffffff8e45e00a [ 159.438996][ T2217] RDX: fffffbfff2805891 RSI: 0000000000000008 RDI: ffffffff9402c480 [ 159.439248][ T2217] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2805890 [ 159.439475][ T2217] R10: ffffffff9402c487 R11: 205d373132325420 R12: dffffc0000000000 [ 159.439783][ T2217] R13: ffff88800a401580 R14: 0000000000000000 R15: 0000000000000068 [ 159.440019][ T2217] FS: 00007f0eb0d24800(0000) GS:ffff888065980000(0000) knlGS:0000000000000000 [ 159.440316][ T2217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.440600][ T2217] CR2: 00007f0eb0f80423 CR3: 000000000bd50001 CR4: 0000000000772ef0 [ 159.440829][ T2217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.441131][ T2217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.441356][ T2217] PKRU: 55555554 [ 159.441485][ T2217] Kernel panic - not syncing: Fatal exception [ 159.441812][ T2217] Kernel Offset: 0xce00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 159.442235][ T2217] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr