====================================== | [ 5106.060994][T17482] eth1: renamed from tmp | [ 5128.326354][T17590] eth1: renamed from tmp | [ 5138.947401][T17629] general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] PREEMPT SMP KASAN NOPTI | [ 5138.947787][T17629] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 5138.948177][T17629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [5138.948464][T17629] RIP: 0010:ip6_rt_pcpu_alloc (./include/net/net_namespace.h:383 ./include/linux/netdevice.h:2579 net/ipv6/route.c:1380) [ 5138.948616][T17629] Code: 08 e8 ca bf fe ff 44 0f b7 f3 49 89 c7 e8 6e c2 41 00 49 8d 9f 18 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 01 00 0f 85 24 03 00 00 49 8b bf 18 01 00 00 44 89 f2 4c 89 All code ======== 0: 08 e8 or %ch,%al 2: ca bf fe lret $0xfebf 5: ff 44 0f b7 incl -0x49(%rdi,%rcx,1) 9: f3 49 89 c7 repz mov %rax,%r15 d: e8 6e c2 41 00 call 0x41c280 12: 49 8d 9f 18 01 00 00 lea 0x118(%r15),%rbx 19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 20: fc ff df 23: 48 89 d9 mov %rbx,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx 2a:* 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) <-- trapping instruction 2e: 0f 85 24 03 00 00 jne 0x358 34: 49 8b bf 18 01 00 00 mov 0x118(%r15),%rdi 3b: 44 89 f2 mov %r14d,%edx 3e: 4c rex.WR 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 80 3c 01 00 cmpb $0x0,(%rcx,%rax,1) 4: 0f 85 24 03 00 00 jne 0x32e a: 49 8b bf 18 01 00 00 mov 0x118(%r15),%rdi 11: 44 89 f2 mov %r14d,%edx 14: 4c rex.WR 15: 89 .byte 0x89 [ 5138.949070][T17629] RSP: 0018:ffffc9000c75f528 EFLAGS: 00010202 [ 5138.949239][T17629] RAX: dffffc0000000000 RBX: 0000000000000118 RCX: 0000000000000023 [ 5138.949434][T17629] RDX: 1ffff110015a2237 RSI: ffff888003858ae8 RDI: ffff88800ad11000 [ 5138.949626][T17629] RBP: ffff88800651322c R08: 0000000000000000 R09: ffff888003858ae8 [ 5138.949819][T17629] R10: 1ffff920018ebe5e R11: ffff88800acb1a00 R12: ffff888006513200 [ 5138.950012][T17629] R13: ffffc9000c75f628 R14: 0000000000000008 R15: 0000000000000000 [ 5138.950210][T17629] FS: 00007f62da583740(0000) GS:ffff88802f400000(0000) knlGS:0000000000000000 [ 5138.950428][T17629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 5138.950586][T17629] CR2: 00007f0059bcd270 CR3: 000000000659a004 CR4: 0000000000770ef0 [ 5138.950777][T17629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 5138.950970][T17629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 5138.951160][T17629] PKRU: 55555554 [ 5138.951259][T17629] Call Trace: [ 5138.951354][T17629] [5138.951418][T17629] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) [5138.951518][T17629] ? exc_general_protection (arch/x86/kernel/traps.c:702 arch/x86/kernel/traps.c:644) [5138.951652][T17629] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) [5138.951783][T17629] ? ip6_rt_pcpu_alloc (./include/net/net_namespace.h:383 ./include/linux/netdevice.h:2579 net/ipv6/route.c:1380) [5138.951912][T17629] ? ip6_rt_pcpu_alloc (./include/net/net_namespace.h:383 ./include/linux/netdevice.h:2579 net/ipv6/route.c:1380) [5138.952037][T17629] ? __pfx_ip6_rt_pcpu_alloc (net/ipv6/route.c:1369) [5138.952161][T17629] ? __pfx_rt6_find_cached_rt.constprop.0.isra.0 (net/ipv6/route.c:1796) [5138.952349][T17629] ip6_pol_route (net/ipv6/route.c:1428 net/ipv6/route.c:2265) [5138.952479][T17629] ? __pfx_ip6_pol_route (net/ipv6/route.c:2214) [5138.952606][T17629] ? fib6_get_table (./include/linux/rcupdate.h:339 ./include/linux/rcupdate.h:814 net/ipv6/ip6_fib.c:288) [5138.952733][T17629] __fib6_rule_action (./include/net/ip6_fib.h:616 net/ipv6/fib6_rules.c:233) [5138.952861][T17629] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2603) [5138.952996][T17629] ? l3mdev_fib_rule_match (net/l3mdev/l3mdev.c:269) [5138.953122][T17629] fib_rules_lookup (net/core/fib_rules.c:317 (discriminator 1)) [5138.953251][T17629] ? __pfx_fib_rules_lookup (net/core/fib_rules.c:293) [5138.953374][T17629] ? l3mdev_update_flow (./include/linux/rcupdate.h:329 ./include/linux/rcupdate.h:781 net/l3mdev/l3mdev.c:275) [5138.953499][T17629] ? l3mdev_update_flow (./include/linux/rcupdate.h:339 ./include/linux/rcupdate.h:814 net/l3mdev/l3mdev.c:299) [5138.953624][T17629] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2603) [5138.953748][T17629] fib6_rule_lookup (net/ipv6/fib6_rules.c:111) [5138.953877][T17629] ? __pfx_fib6_rule_lookup (net/ipv6/fib6_rules.c:95) [5138.954002][T17629] ? ip6_route_output_flags (./include/linux/rcupdate.h:329 ./include/linux/rcupdate.h:781 net/ipv6/route.c:2648) [5138.954128][T17629] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) [5138.954253][T17629] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2603) [5138.954378][T17629] ? ip6_route_output_flags (./include/linux/rcupdate.h:329 ./include/linux/rcupdate.h:781 net/ipv6/route.c:2648) [5138.954502][T17629] ? lock_acquire (kernel/locking/lockdep.c:5727) [5138.954625][T17629] ? ip6_route_output_flags (./include/linux/rcupdate.h:329 ./include/linux/rcupdate.h:781 net/ipv6/route.c:2648) [5138.954751][T17629] ip6_route_output_flags (net/ipv6/route.c:2637 net/ipv6/route.c:2649) [5138.954880][T17629] ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1120) [5138.955036][T17629] ? __pfx___lock_release (kernel/locking/lockdep.c:5406) [5138.955160][T17629] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) [5138.955286][T17629] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1251) [5138.955414][T17629] ? __pfx_ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1246) [5138.955541][T17629] ip6_sk_dst_lookup_flow (net/ipv6/ip6_output.c:1288) [5138.955665][T17629] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) [5138.955793][T17629] udpv6_sendmsg (net/ipv6/udp.c:1566) [5138.955919][T17629] ? lock_acquire (kernel/locking/lockdep.c:5727) [5138.956041][T17629] ? __might_fault (mm/memory.c:6220 mm/memory.c:6213) [5138.956168][T17629] ? __pfx_ip_generic_getfrag (net/ipv4/ip_output.c:935) [5138.956294][T17629] ? __pfx_udpv6_sendmsg (net/ipv6/udp.c:1330) [5138.956423][T17629] ? __pfx_____sys_recvmsg (net/socket.c:2781) [5138.956552][T17629] ? find_held_lock (kernel/locking/lockdep.c:5244) [5138.956679][T17629] ? __might_fault (mm/memory.c:6220 mm/memory.c:6213) [5138.956806][T17629] ? lock_acquire (kernel/locking/lockdep.c:5727) [5138.956930][T17629] ? __might_fault (mm/memory.c:6220 mm/memory.c:6213) [5138.957055][T17629] ? __might_fault (mm/memory.c:6220 mm/memory.c:6213) [5138.957181][T17629] ? __sys_sendto (net/socket.c:730 net/socket.c:745 net/socket.c:2191) [5138.957306][T17629] __sys_sendto (net/socket.c:730 net/socket.c:745 net/socket.c:2191) [5138.957430][T17629] ? __pfx___sys_sendto (net/socket.c:2161) [5138.957554][T17629] ? __pfx_poll_select_finish (fs/select.c:301) [5138.957684][T17629] ? __sys_recvmsg (./include/linux/file.h:34 net/socket.c:2877) [5138.957813][T17629] __x64_sys_sendto (net/socket.c:2199) [5138.957940][T17629] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:4300 kernel/locking/lockdep.c:4359) [5138.958096][T17629] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [5138.958222][T17629] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 5138.958380][T17629] RIP: 0033:0x7f62da6d585a [ 5138.958515][T17629] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 All code ======== 0: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 4: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax b: eb b8 jmp 0xffffffffffffffc5 d: 0f 1f 00 nopl (%rax) 10: f3 0f 1e fa endbr64 14: 41 89 ca mov %ecx,%r10d 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 15 jne 0x38 23: b8 2c 00 00 00 mov $0x2c,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 7e ja 0xb0 32: c3 ret 33: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 38: 41 54 push %r12 3a: 48 83 ec 30 sub $0x30,%rsp 3e: 44 rex.R 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 7e ja 0x86 8: c3 ret 9: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) e: 41 54 push %r12 10: 48 83 ec 30 sub $0x30,%rsp 14: 44 rex.R 15: 89 .byte 0x89 [ 5138.958961][T17629] RSP: 002b:00007ffc51247d58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 5138.959156][T17629] RAX: ffffffffffffffda RBX: 00007ffc51247e40 RCX: 00007f62da6d585a [ 5138.959344][T17629] RDX: 000000000000000c RSI: 00007ffc51247f40 RDI: 0000000000000005 [ 5138.959530][T17629] RBP: 0000000000000005 R08: 00007ffc51247d80 R09: 000000000000001c [ 5138.959718][T17629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000003200000029 Finger prints: ip6_rt_pcpu_alloc:ip6_pol_route:__fib6_rule_action:fib_rules_lookup:fib6_rule_lookup