====================================== | [ 3157.966138] #PF: supervisor read access in kernel mode | [ 3157.966175] #PF: error_code(0x0000) - not-present page | [ 3157.966209] PGD 6b77067 P4D 6b77067 PUD 6ebe067 PMD 0 | [ 3157.966249] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI [ 3157.966344] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 3157.966385] RIP: 0010:ip6_pol_route (net/ipv6/route.c:1384 net/ipv6/route.c:1433 net/ipv6/route.c:2267) [ 3157.966430] Code: d0 f0 41 0f b1 0c 24 0f 85 a4 01 00 00 09 ca 0f 88 dd 00 00 00 e8 ad a0 49 ff 83 cb 08 48 8d 7c 24 18 e8 b0 81 ff ff 0f b7 d3 <48> 8b b8 08 01 00 00 48 89 c6 49 89 c7 e8 2b 7c ff ff 48 89 c3 e8 All code ======== 0: d0 f0 shl %al 2: 41 0f b1 0c 24 cmpxchg %ecx,(%r12) 7: 0f 85 a4 01 00 00 jne 0x1b1 d: 09 ca or %ecx,%edx f: 0f 88 dd 00 00 00 js 0xf2 15: e8 ad a0 49 ff call 0xffffffffff49a0c7 1a: 83 cb 08 or $0x8,%ebx 1d: 48 8d 7c 24 18 lea 0x18(%rsp),%rdi 22: e8 b0 81 ff ff call 0xffffffffffff81d7 27: 0f b7 d3 movzwl %bx,%edx 2a:* 48 8b b8 08 01 00 00 mov 0x108(%rax),%rdi <-- trapping instruction 31: 48 89 c6 mov %rax,%rsi 34: 49 89 c7 mov %rax,%r15 37: e8 2b 7c ff ff call 0xffffffffffff7c67 3c: 48 89 c3 mov %rax,%rbx 3f: e8 .byte 0xe8 Code starting with the faulting instruction =========================================== 0: 48 8b b8 08 01 00 00 mov 0x108(%rax),%rdi 7: 48 89 c6 mov %rax,%rsi a: 49 89 c7 mov %rax,%r15 d: e8 2b 7c ff ff call 0xffffffffffff7c3d 12: 48 89 c3 mov %rax,%rbx 15: e8 .byte 0xe8 [ 3157.966547] RSP: 0018:ffffa4a043c379d8 EFLAGS: 00010246 [ 3157.966586] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000020 [ 3157.966636] RDX: 0000000000000008 RSI: ffffa4a043c37d88 RDI: ffff8c4b473b21a8 [ 3157.966685] RBP: ffff8c4b4326c300 R08: 0000000000000000 R09: 0000000000000000 [ 3157.966741] R10: 0000000000000001 R11: 0000000000000040 R12: ffff8c4b471cd22c [ 3157.966791] R13: ffff8c4b471cd200 R14: 0000000000000080 R15: 0000000000000000 [ 3157.966843] FS: 00007febf9c28740(0000) GS:ffff8c4b7ed80000(0000) knlGS:0000000000000000 [ 3157.966898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3157.966944] CR2: 0000000000000108 CR3: 0000000006e76001 CR4: 0000000000772ef0 [ 3157.966995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3157.967050] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3157.967100] PKRU: 55555554 [ 3157.967117] Call Trace: [ 3157.967136] <TASK> [ 3157.967158] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [ 3157.967193] ? page_fault_oops (arch/x86/mm/fault.c:715) [ 3157.967229] ? hrtimer_try_to_cancel.part.0 (kernel/time/hrtimer.c:1344) [ 3157.967268] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) [ 3157.967301] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 3157.967333] ? ip6_pol_route (net/ipv6/route.c:1384 net/ipv6/route.c:1433 net/ipv6/route.c:2267) [ 3157.967362] ? ip6_pol_route (net/ipv6/route.c:1384 net/ipv6/route.c:1433 net/ipv6/route.c:2267) [ 3157.967387] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2605) [ 3157.967421] fib6_rule_action (./include/net/ip6_fib.h:616 net/ipv6/fib6_rules.c:234 net/ipv6/fib6_rules.c:272) [ 3157.967452] fib_rules_lookup (net/core/fib_rules.c:319 (discriminator 1)) [ 3157.967488] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2605) [ 3157.967525] fib6_rule_lookup (net/ipv6/fib6_rules.c:112) [ 3157.967556] ? __pfx_ip6_pol_route_output (net/ipv6/route.c:2605) [ 3157.967595] ip6_route_output_flags (net/ipv6/route.c:2639 net/ipv6/route.c:2651) [ 3157.967634] ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1128) [ 3157.967673] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1260) [ 3157.967703] ip6_sk_dst_lookup_flow (net/ipv6/ip6_output.c:1297) [ 3157.967742] udpv6_sendmsg (net/ipv6/udp.c:1661) [ 3157.967773] ? __pfx_ip_generic_getfrag (net/ipv4/ip_output.c:936) [ 3157.967814] ? _copy_to_user (./arch/x86/include/asm/smap.h:33 ./arch/x86/include/asm/uaccess_64.h:134 ./arch/x86/include/asm/uaccess_64.h:147 ./include/linux/uaccess.h:197 lib/usercopy.c:26) [ 3157.967847] ? move_addr_to_user (net/socket.c:298) [ 3157.967878] ? ____sys_recvmsg (net/socket.c:2849) [ 3157.967908] ? import_iovec (lib/iov_iter.c:1521) [ 3157.967940] ? __sys_sendto (net/socket.c:729 net/socket.c:744 net/socket.c:2216) [ 3157.967973] __sys_sendto (net/socket.c:729 net/socket.c:744 net/socket.c:2216) [ 3157.967999] ? __sys_recvmsg (./include/linux/file.h:35 net/socket.c:2902) [ 3157.968030] __x64_sys_sendto (net/socket.c:2228 net/socket.c:2224 net/socket.c:2224) [ 3157.968059] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 3157.968091] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 3157.968130] RIP: 0033:0x7febf9d7a85a [ 3157.968162] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 All code ======== 0: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 4: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax b: eb b8 jmp 0xffffffffffffffc5 d: 0f 1f 00 nopl (%rax) 10: f3 0f 1e fa endbr64 14: 41 89 ca mov %ecx,%r10d 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 15 jne 0x38 23: b8 2c 00 00 00 mov $0x2c,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 7e ja 0xb0 32: c3 ret 33: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 38: 41 54 push %r12 3a: 48 83 ec 30 sub $0x30,%rsp 3e: 44 rex.R 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 7e ja 0x86 8: c3 ret 9: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) e: 41 54 push %r12 10: 48 83 ec 30 sub $0x30,%rsp 14: 44 rex.R 15: 89 .byte 0x89 [ 3157.968279] RSP: 002b:00007ffc7024ea08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3157.968334] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007febf9d7a85a [ 3157.968384] RDX: 000000000000000c RSI: 000000000040671e RDI: 0000000000000005 [ 3157.968433] RBP: 0000000000000005 R08: 00007ffc7024ef90 R09: 000000000000001c [ 3157.968483] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7024ef90 Finger prints: ip6_pol_route:fib6_rule_action:fib_rules_lookup:fib6_rule_lookup:ip6_route_output_flags