[ 51.253527][ T925] ================================================================== [ 51.253820][ T925] BUG: KASAN: null-ptr-deref in nexthop_create_group+0x32c/0x1550 [ 51.254072][ T925] Read of size 4 at addr 0000000000000068 by task ip/925 [ 51.254269][ T925] [ 51.254347][ T925] CPU: 3 UID: 0 PID: 925 Comm: ip Not tainted 6.14.0-rc6-virtme #1 [ 51.254352][ T925] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 51.254355][ T925] Call Trace: [ 51.254357][ T925] [ 51.254358][ T925] dump_stack_lvl+0x82/0xd0 [ 51.254366][ T925] kasan_report+0xbd/0xf0 [ 51.254374][ T925] ? nexthop_create_group+0x32c/0x1550 [ 51.254381][ T925] kasan_check_range+0x39/0x1c0 [ 51.254384][ T925] nexthop_create_group+0x32c/0x1550 [ 51.254391][ T925] ? __pfx_nexthop_create_group+0x10/0x10 [ 51.254395][ T925] ? __nla_validate_parse+0x1bc/0x3d0 [ 51.254402][ T925] rtm_new_nexthop+0x310/0x8b0 [ 51.254406][ T925] ? hlock_class+0x4e/0x130 [ 51.254411][ T925] ? mark_lock+0x38/0x3e0 [ 51.254415][ T925] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 51.254432][ T925] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 51.254439][ T925] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 51.254443][ T925] rtnetlink_rcv_msg+0x712/0xc10 [ 51.254449][ T925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.254454][ T925] ? hlock_class+0x4e/0x130 [ 51.254458][ T925] ? mark_lock+0x38/0x3e0 [ 51.254465][ T925] ? __lock_acquire+0xb9a/0x1680 [ 51.254470][ T925] netlink_rcv_skb+0x130/0x360 [ 51.254477][ T925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.254482][ T925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.254494][ T925] ? netlink_deliver_tap+0x13e/0x340 [ 51.254499][ T925] ? netlink_deliver_tap+0xc3/0x340 [ 51.254505][ T925] netlink_unicast+0x44b/0x710 [ 51.254511][ T925] ? __pfx_netlink_unicast+0x10/0x10 [ 51.254516][ T925] ? find_held_lock+0x2c/0x110 [ 51.254523][ T925] netlink_sendmsg+0x723/0xbe0 [ 51.254529][ T925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.254539][ T925] ____sys_sendmsg+0x7ac/0xa10 [ 51.254547][ T925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.254551][ T925] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 51.254559][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.254567][ T925] ___sys_sendmsg+0xee/0x170 [ 51.254574][ T925] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.254579][ T925] ? find_held_lock+0x2c/0x110 [ 51.254584][ T925] ? __lock_release+0x103/0x460 [ 51.254587][ T925] ? rcu_do_batch+0x34d/0xf20 [ 51.254594][ T925] ? __pfx___lock_release+0x10/0x10 [ 51.254597][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.254606][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.254617][ T925] __sys_sendmsg+0x109/0x1a0 [ 51.254622][ T925] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.254625][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.254630][ T925] ? handle_softirqs+0x32e/0x5c0 [ 51.254638][ T925] do_syscall_64+0xc1/0x1d0 [ 51.254645][ T925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.254650][ T925] RIP: 0033:0x7f62ae3859a7 [ 51.254654][ T925] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 51.254657][ T925] RSP: 002b:00007ffe46230ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.254661][ T925] RAX: ffffffffffffffda RBX: 00007ffe46231a40 RCX: 00007f62ae3859a7 [ 51.254663][ T925] RDX: 0000000000000000 RSI: 00007ffe46230f40 RDI: 0000000000000005 [ 51.254665][ T925] RBP: 00007ffe46231400 R08: 00000000145c0910 R09: 0000000000000000 [ 51.254667][ T925] R10: 00007f62ae23e708 R11: 0000000000000246 R12: 00000000145c0910 [ 51.254669][ T925] R13: 0000000067da7309 R14: 0000000000498600 R15: 00000000145c0910 [ 51.254675][ T925] [ 51.254676][ T925] ================================================================== [ 51.265926][ T925] Disabling lock debugging due to kernel taint [ 51.266466][ T925] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 51.266878][ T925] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 51.267161][ T925] CPU: 3 UID: 0 PID: 925 Comm: ip Tainted: G B 6.14.0-rc6-virtme #1 [ 51.267489][ T925] Tainted: [B]=BAD_PAGE [ 51.267646][ T925] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 51.267877][ T925] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 51.268147][ T925] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 51.268936][ T925] RSP: 0018:ffffc90001fa73c8 EFLAGS: 00010202 [ 51.269223][ T925] RAX: 000000000000000d RBX: ffff88800fce66e8 RCX: ffffffff8c65e00a [ 51.269562][ T925] RDX: fffffbfff2445891 RSI: 0000000000000008 RDI: ffffffff9222c480 [ 51.269905][ T925] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2445890 [ 51.270237][ T925] R10: ffffffff9222c487 R11: 205d353239542020 R12: dffffc0000000000 [ 51.270570][ T925] R13: ffff88800bb4c080 R14: 0000000000000000 R15: 0000000000000068 [ 51.270903][ T925] FS: 00007f62ae179800(0000) GS:ffff88806cf80000(0000) knlGS:0000000000000000 [ 51.271294][ T925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.271585][ T925] CR2: 00007f62ae3d5423 CR3: 00000000028bc002 CR4: 0000000000772ef0 [ 51.271923][ T925] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.272253][ T925] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.272525][ T925] PKRU: 55555554 [ 51.272647][ T925] Call Trace: [ 51.272761][ T925] [ 51.272841][ T925] ? die_addr+0x41/0xa0 [ 51.272990][ T925] ? exc_general_protection+0x14d/0x230 [ 51.273182][ T925] ? asm_exc_general_protection+0x26/0x30 [ 51.273335][ T925] ? add_taint+0x2a/0x90 [ 51.273450][ T925] ? nexthop_create_group+0x333/0x1550 [ 51.273601][ T925] ? nexthop_create_group+0x32c/0x1550 [ 51.273758][ T925] ? __pfx_nexthop_create_group+0x10/0x10 [ 51.273907][ T925] ? __nla_validate_parse+0x1bc/0x3d0 [ 51.274057][ T925] rtm_new_nexthop+0x310/0x8b0 [ 51.274250][ T925] ? hlock_class+0x4e/0x130 [ 51.274450][ T925] ? mark_lock+0x38/0x3e0 [ 51.274601][ T925] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 51.274815][ T925] ? rtnetlink_rcv_msg+0x6ef/0xc10 [ 51.275022][ T925] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 51.275238][ T925] rtnetlink_rcv_msg+0x712/0xc10 [ 51.275427][ T925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.275576][ T925] ? hlock_class+0x4e/0x130 [ 51.275725][ T925] ? mark_lock+0x38/0x3e0 [ 51.275839][ T925] ? __lock_acquire+0xb9a/0x1680 [ 51.275992][ T925] netlink_rcv_skb+0x130/0x360 [ 51.276163][ T925] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.276348][ T925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 51.276502][ T925] ? netlink_deliver_tap+0x13e/0x340 [ 51.276652][ T925] ? netlink_deliver_tap+0xc3/0x340 [ 51.276847][ T925] netlink_unicast+0x44b/0x710 [ 51.277035][ T925] ? __pfx_netlink_unicast+0x10/0x10 [ 51.277215][ T925] ? find_held_lock+0x2c/0x110 [ 51.277426][ T925] netlink_sendmsg+0x723/0xbe0 [ 51.277600][ T925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.277767][ T925] ____sys_sendmsg+0x7ac/0xa10 [ 51.277918][ T925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.278062][ T925] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 51.278266][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.278508][ T925] ___sys_sendmsg+0xee/0x170 [ 51.278664][ T925] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.278814][ T925] ? find_held_lock+0x2c/0x110 [ 51.278963][ T925] ? __lock_release+0x103/0x460 [ 51.279115][ T925] ? rcu_do_batch+0x34d/0xf20 [ 51.279269][ T925] ? __pfx___lock_release+0x10/0x10 [ 51.279433][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.279660][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.279887][ T925] __sys_sendmsg+0x109/0x1a0 [ 51.280038][ T925] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.280192][ T925] ? lockdep_hardirqs_on_prepare+0x12b/0x410 [ 51.280430][ T925] ? handle_softirqs+0x32e/0x5c0 [ 51.280624][ T925] do_syscall_64+0xc1/0x1d0 [ 51.280811][ T925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.281020][ T925] RIP: 0033:0x7f62ae3859a7 [ 51.281241][ T925] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 51.281807][ T925] RSP: 002b:00007ffe46230ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.282107][ T925] RAX: ffffffffffffffda RBX: 00007ffe46231a40 RCX: 00007f62ae3859a7 [ 51.282418][ T925] RDX: 0000000000000000 RSI: 00007ffe46230f40 RDI: 0000000000000005 [ 51.282665][ T925] RBP: 00007ffe46231400 R08: 00000000145c0910 R09: 0000000000000000 [ 51.283047][ T925] R10: 00007f62ae23e708 R11: 0000000000000246 R12: 00000000145c0910 [ 51.283291][ T925] R13: 0000000067da7309 R14: 0000000000498600 R15: 00000000145c0910 [ 51.283513][ T925] [ 51.283697][ T925] Modules linked in: [ 51.283831][ T925] ---[ end trace 0000000000000000 ]--- [ 51.283979][ T925] RIP: 0010:nexthop_create_group+0x333/0x1550 [ 51.284192][ T925] Code: 5c 09 00 00 45 3b 7e 60 72 c0 76 06 49 83 c6 08 eb bc 4d 8d 7e 68 be 04 00 00 00 4c 89 ff e8 c4 a2 27 fe 4c 89 f8 48 c1 e8 03 <42> 0f b6 14 20 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 51.284852][ T925] RSP: 0018:ffffc90001fa73c8 EFLAGS: 00010202 [ 51.285090][ T925] RAX: 000000000000000d RBX: ffff88800fce66e8 RCX: ffffffff8c65e00a [ 51.285369][ T925] RDX: fffffbfff2445891 RSI: 0000000000000008 RDI: ffffffff9222c480 [ 51.285615][ T925] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff2445890 [ 51.285971][ T925] R10: ffffffff9222c487 R11: 205d353239542020 R12: dffffc0000000000 [ 51.286266][ T925] R13: ffff88800bb4c080 R14: 0000000000000000 R15: 0000000000000068 [ 51.286528][ T925] FS: 00007f62ae179800(0000) GS:ffff88806cf80000(0000) knlGS:0000000000000000 [ 51.286859][ T925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.287037][ T925] CR2: 00007f62ae3d5423 CR3: 00000000028bc002 CR4: 0000000000772ef0 [ 51.287342][ T925] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.287554][ T925] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.287824][ T925] PKRU: 55555554 [ 51.287958][ T925] Kernel panic - not syncing: Fatal exception [ 51.288449][ T925] Kernel Offset: 0xb000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 51.288906][ T925] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr