====================================== | [ 2197.659981][ C3] TCP: request_sock_TCP: Possible SYN flooding on port 127.0.0.1:23456. Sending cookies. | [ 2198.065701][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 127.0.0.1:23456. Sending cookies. | [ 2199.981375][ C2] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN NOPTI | [ 2199.981793][ C2] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 2199.982278][ C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 2199.982651][ C2] RIP: 0010:__inet_csk_reqsk_queue_drop (./include/linux/list.h:958 ./include/net/sock.h:744 ./include/net/sock.h:749 net/ipv4/inet_connection_sock.c:1042 net/ipv4/inet_connection_sock.c:1058) [ 2199.982864][ C2] Code: 00 00 00 00 00 fc ff df 41 57 4c 8d 7e 70 41 56 41 55 41 89 d5 4c 89 fa 41 54 48 c1 ea 03 55 48 89 f5 53 48 89 fb 48 83 ec 08 <80> 3c 02 00 0f 85 6c 05 00 00 45 31 e4 48 83 7d 70 00 0f 84 0f 01 All code ======== 0: 00 00 add %al,(%rax) 2: 00 00 add %al,(%rax) 4: 00 fc add %bh,%ah 6: ff (bad) 7: df 41 57 filds 0x57(%rcx) a: 4c 8d 7e 70 lea 0x70(%rsi),%r15 e: 41 56 push %r14 10: 41 55 push %r13 12: 41 89 d5 mov %edx,%r13d 15: 4c 89 fa mov %r15,%rdx 18: 41 54 push %r12 1a: 48 c1 ea 03 shr $0x3,%rdx 1e: 55 push %rbp 1f: 48 89 f5 mov %rsi,%rbp 22: 53 push %rbx 23: 48 89 fb mov %rdi,%rbx 26: 48 83 ec 08 sub $0x8,%rsp 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 6c 05 00 00 jne 0x5a0 34: 45 31 e4 xor %r12d,%r12d 37: 48 83 7d 70 00 cmpq $0x0,0x70(%rbp) 3c: 0f .byte 0xf 3d: 84 0f test %cl,(%rdi) 3f: 01 .byte 0x1 Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 6c 05 00 00 jne 0x576 a: 45 31 e4 xor %r12d,%r12d d: 48 83 7d 70 00 cmpq $0x0,0x70(%rbp) 12: 0f .byte 0xf 13: 84 0f test %cl,(%rdi) 15: 01 .byte 0x1 [ 2199.983438][ C2] RSP: 0018:ffffc90000240c28 EFLAGS: 00010296 [ 2199.983649][ C2] RAX: dffffc0000000000 RBX: ffff888015a2e840 RCX: 1ffff11002eeb14f [ 2199.983879][ C2] RDX: 000000000000000e RSI: 0000000000000000 RDI: ffff888015a2e840 [ 2199.984109][ C2] RBP: 0000000000000000 R08: ffffffff9553fe6f R09: fffffbfff2f2e809 [ 2199.984337][ C2] R10: ffffffff9797404f R11: 0000000000000001 R12: 0000000000000000 [ 2199.984584][ C2] R13: 0000000000000001 R14: ffff888004514800 R15: 0000000000000070 [ 2199.984812][ C2] FS: 0000000000000000(0000) GS:ffff888036100000(0000) knlGS:0000000000000000 [ 2199.985079][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2199.985272][ C2] CR2: 00007ffec1739db8 CR3: 0000000007cc4003 CR4: 0000000000772ef0 [ 2199.985500][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2199.985731][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2199.985957][ C2] PKRU: 55555554 [ 2199.986074][ C2] Call Trace: [ 2199.986192][ C2] [ 2199.986274][ C2] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) [ 2199.986404][ C2] ? exc_general_protection (arch/x86/kernel/traps.c:751 arch/x86/kernel/traps.c:693) [ 2199.986561][ C2] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) [ 2199.986716][ C2] ? reuseport_migrate_sock (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/core/sock_reuseport.c:674) [ 2199.986874][ C2] ? __inet_csk_reqsk_queue_drop (./include/linux/list.h:958 ./include/net/sock.h:744 ./include/net/sock.h:749 net/ipv4/inet_connection_sock.c:1042 net/ipv4/inet_connection_sock.c:1058) [ 2199.987065][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5827) [ 2199.987218][ C2] reqsk_timer_handler (./include/net/request_sock.h:148 net/ipv4/inet_connection_sock.c:1194) [ 2199.987375][ C2] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) [ 2199.987527][ C2] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 2199.987680][ C2] ? __pfx_reqsk_timer_handler (net/ipv4/inet_connection_sock.c:1085) [ 2199.987830][ C2] ? call_timer_fn (kernel/time/timer.c:1791) [ 2199.987989][ C2] ? lock_acquire (kernel/locking/lockdep.c:5798) [ 2199.988142][ C2] ? __pfx_reqsk_timer_handler (net/ipv4/inet_connection_sock.c:1085) [ 2199.988294][ C2] call_timer_fn (kernel/time/timer.c:1794) [ 2199.988446][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1784) [ 2199.988598][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1784) [ 2199.988750][ C2] ? __pfx_call_timer_fn (kernel/time/timer.c:1771) [ 2199.988904][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) [ 2199.989065][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4321) [ 2199.989221][ C2] __run_timers (kernel/time/timer.c:1846 kernel/time/timer.c:2419) [ 2199.989373][ C2] ? __pfx_reqsk_timer_handler (net/ipv4/inet_connection_sock.c:1085) [ 2199.989526][ C2] ? __pfx___run_timers (kernel/time/timer.c:2390) [ 2199.989678][ C2] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 2199.989830][ C2] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 2199.989983][ C2] ? lock_acquire (kernel/locking/lockdep.c:5798) [ 2199.990134][ C2] ? run_timer_softirq (kernel/time/timer.c:2430 kernel/time/timer.c:2423 kernel/time/timer.c:2439 kernel/time/timer.c:2447) [ 2199.990289][ C2] run_timer_softirq (kernel/time/timer.c:2431 kernel/time/timer.c:2423 kernel/time/timer.c:2439 kernel/time/timer.c:2447) [ 2199.990443][ C2] handle_softirqs (kernel/softirq.c:554) [ 2199.990607][ C2] irq_exit_rcu (kernel/softirq.c:589 kernel/softirq.c:428 kernel/softirq.c:637 kernel/softirq.c:649) [ 2199.990721][ C2] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1037 arch/x86/kernel/apic/apic.c:1037) [ 2199.990874][ C2] [ 2199.990953][ C2] [ 2199.991030][ C2] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 2199.991218][ C2] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 2199.991417][ C2] Code: 10 e8 d1 0e 88 fd 48 89 ef e8 e9 7f 88 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d 95 76 3b 6a <74> 0e 5b 5d c3 cc cc cc cc e8 3f 61 b0 fd eb dc 0f 1f 44 00 00 5b All code ======== 0: 10 e8 adc %ch,%al 2: d1 0e rorl (%rsi) 4: 88 fd mov %bh,%ch 6: 48 89 ef mov %rbp,%rdi 9: e8 e9 7f 88 fd call 0xfffffffffd887ff7 e: 81 e3 00 02 00 00 and $0x200,%ebx 14: 75 1d jne 0x33 16: 9c pushf 17: 58 pop %rax 18: f6 c4 02 test $0x2,%ah 1b: 75 29 jne 0x46 1d: 48 85 db test %rbx,%rbx 20: 74 01 je 0x23 22: fb sti 23: 65 ff 0d 95 76 3b 6a decl %gs:0x6a3b7695(%rip) # 0x6a3b76bf 2a:* 74 0e je 0x3a <-- trapping instruction 2c: 5b pop %rbx 2d: 5d pop %rbp 2e: c3 ret 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: e8 3f 61 b0 fd call 0xfffffffffdb06177 38: eb dc jmp 0x16 3a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 3f: 5b pop %rbx Code starting with the faulting instruction =========================================== 0: 74 0e je 0x10 2: 5b pop %rbx 3: 5d pop %rbp 4: c3 ret 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: e8 3f 61 b0 fd call 0xfffffffffdb0614d e: eb dc jmp 0xffffffffffffffec 10: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 15: 5b pop %rbx [ 2199.991962][ C2] RSP: 0018:ffffc900006cf2d0 EFLAGS: 00000282 [ 2199.992153][ C2] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff31fe002 [ 2199.992391][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff95c85241 [ 2199.992619][ C2] RBP: ffff888001041080 R08: 0000000000000001 R09: fffffbfff31f97cf [ 2199.992850][ C2] R10: ffffffff98fcbe7f R11: ffffc900006cf291 R12: ffff888001041080 [ 2199.993091][ C2] R13: ffffea00001d1c00 R14: ffff8880010433c0 R15: ffff888007474000 [ 2199.993323][ C2] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 2199.993515][ C2] get_partial_node.part.0 (mm/slub.c:2863) [ 2199.993671][ C2] ___slab_alloc (mm/slub.c:2824 mm/slub.c:2941 mm/slub.c:3799) [ 2199.993822][ C2] ? __lock_release (kernel/locking/lockdep.c:5501) [ 2199.993974][ C2] ? fs_reclaim_acquire (mm/page_alloc.c:3826 mm/page_alloc.c:3816 mm/page_alloc.c:3846) [ 2199.994129][ C2] ? p9_fcall_init (net/9p/client.c:233) [ 2199.994284][ C2] ? lock_downgrade (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5729) [ 2199.994446][ C2] ? p9_fcall_init (net/9p/client.c:233) [ 2199.994598][ C2] ? __kmalloc_noprof (mm/slub.c:3909 mm/slub.c:3962 mm/slub.c:4123 mm/slub.c:4264 mm/slub.c:4277) [ 2199.994749][ C2] __kmalloc_noprof (mm/slub.c:3909 mm/slub.c:3962 mm/slub.c:4123 mm/slub.c:4264 mm/slub.c:4277) [ 2199.994903][ C2] p9_fcall_init (net/9p/client.c:233) [ 2199.995055][ C2] p9_tag_alloc (net/9p/client.c:298) [ 2199.995207][ C2] ? __pfx_p9_tag_alloc (net/9p/client.c:280) [ 2199.995359][ C2] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 2199.995515][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) [ 2199.995666][ C2] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) [ 2199.995817][ C2] ? is_bpf_text_address (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 kernel/bpf/core.c:769) [ 2199.995969][ C2] p9_client_prepare_req (net/9p/client.c:644) [ 2199.996122][ C2] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) [ 2199.996275][ C2] ? __pfx_p9_client_prepare_req (net/9p/client.c:628) [ 2199.996475][ C2] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) [ 2199.996627][ C2] p9_client_rpc (net/9p/client.c:691 (discriminator 4)) [ 2199.996787][ C2] ? __pfx_p9_client_rpc (net/9p/client.c:675) [ 2199.996939][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) [ 2199.997091][ C2] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) [ 2199.997243][ C2] ? __lock_release (kernel/locking/lockdep.c:5501) [ 2199.997395][ C2] ? __debug_object_init (lib/debugobjects.c:622) [ 2199.997551][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) [ 2199.997704][ C2] p9_client_read_once (net/9p/client.c:1565) [ 2199.997860][ C2] ? __lock_acquire (kernel/locking/lockdep.c:5202) [ 2199.998014][ C2] ? __pfx_p9_client_read_once (net/9p/client.c:1537) [ 2199.998168][ C2] ? mempool_alloc_noprof (mm/mempool.c:402) [ 2199.998324][ C2] p9_client_read (net/9p/client.c:1525) [ 2199.998478][ C2] v9fs_issue_read (fs/9p/vfs_addr.c:78) [ 2199.998633][ C2] ? __pfx_v9fs_issue_read (fs/9p/vfs_addr.c:68) [ 2199.998790][ C2] netfs_dispatch_unbuffered_reads.isra.0 (fs/netfs/direct_read.c:90) [ 2199.998983][ C2] netfs_unbuffered_read (fs/netfs/direct_read.c:129) [ 2199.999139][ C2] netfs_unbuffered_read_iter_locked (fs/netfs/direct_read.c:221) [ 2199.999329][ C2] netfs_unbuffered_read_iter (fs/netfs/direct_read.c:257) [ 2199.999482][ C2] do_iter_readv_writev (fs/read_write.c:832) [ 2199.999636][ C2] ? ovl_verify_lowerdata (fs/overlayfs/namei.c:1026) [ 2199.999798][ C2] ? __pfx_do_iter_readv_writev (fs/read_write.c:821) [ 2199.999951][ C2] ? kasan_save_stack (mm/kasan/common.c:49) [ 2200.000107][ C2] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 2200.000259][ C2] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2200.000453][ C2] vfs_iter_read (fs/read_write.c:923) [ 2200.000605][ C2] ? ovl_real_fdget_meta (fs/overlayfs/file.c:110) [ 2200.000760][ C2] backing_file_read_iter (fs/backing-file.c:183) [ 2200.000913][ C2] ovl_read_iter (./include/linux/file.h:68 fs/overlayfs/file.c:282) [ 2200.001064][ C2] ? __pfx_ovl_read_iter (fs/overlayfs/file.c:263) [ 2200.001215][ C2] ? __pfx_free_object_rcu (mm/kmemleak.c:514) [ 2200.001369][ C2] ? trace_rcu_segcb_stats (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/linux/cpumask.h:570 ./include/linux/cpumask.h:1117 ./include/trace/events/rcu.h:537) [ 2200.001534][ C2] ? __pfx_ovl_file_accessed (fs/overlayfs/file.c:235) [ 2200.001689][ C2] vfs_read (fs/read_write.c:488 fs/read_write.c:569) [ 2200.001806][ C2] ? kmem_cache_free (mm/slub.c:4580 mm/slub.c:4682) [ 2200.001959][ C2] ? do_sys_openat2 (fs/open.c:1424) [ 2200.002112][ C2] ? __pfx_vfs_read (fs/read_write.c:550) [ 2200.002265][ C2] ? __pfx_do_sys_openat2 (fs/open.c:1401) [ 2200.002418][ C2] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 2200.002569][ C2] ? __pfx___up_read (kernel/locking/rwsem.c:1337) [ 2200.002723][ C2] ksys_read (fs/read_write.c:712) [ 2200.002843][ C2] ? __pfx_ksys_read (fs/read_write.c:702) [ 2200.003005][ C2] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 2200.003156][ C2] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2200.003345][ C2] RIP: 0033:0x7f956fd0f138 [ 2200.003501][ C2] Code: c0 48 8d 44 24 d0 48 89 44 24 c8 eb bb 0f 1f 44 00 00 f7 d8 89 05 b8 f0 00 00 b8 ff ff ff ff c3 66 90 f3 0f 1e fa 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 08 c3 0f 1f 80 00 00 00 00 f7 d8 89 05 90 f0 All code ======== 0: c0 48 8d 44 rorb $0x44,-0x73(%rax) 4: 24 d0 and $0xd0,%al 6: 48 89 44 24 c8 mov %rax,-0x38(%rsp) b: eb bb jmp 0xffffffffffffffc8 d: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 12: f7 d8 neg %eax 14: 89 05 b8 f0 00 00 mov %eax,0xf0b8(%rip) # 0xf0d2 1a: b8 ff ff ff ff mov $0xffffffff,%eax 1f: c3 ret 20: 66 90 xchg %ax,%ax 22: f3 0f 1e fa endbr64 26: 31 c0 xor %eax,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 08 ja 0x3a 32: c3 ret 33: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 3a: f7 d8 neg %eax 3c: 89 .byte 0x89 3d: 05 .byte 0x5 3e: 90 nop 3f: f0 lock Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 08 ja 0x10 8: c3 ret 9: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 10: f7 d8 neg %eax 12: 89 .byte 0x89 13: 05 .byte 0x5 14: 90 nop 15: f0 lock [ 2200.004038][ C2] RSP: 002b:00007ffec1739758 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2200.004270][ C2] RAX: ffffffffffffffda RBX: 00007ffec173982f RCX: 00007f956fd0f138 [ 2200.004495][ C2] RDX: 0000000000000340 RSI: 00007ffec1739848 RDI: 0000000000000005 [ 2200.004721][ C2] RBP: 00007ffec17397c0 R08: 0000000000080000 R09: 00007f956fce03f0 [ 2200.004946][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000340 Finger prints: __inet_csk_reqsk_queue_drop:reqsk_timer_handler:call_timer_fn:__run_timers:run_timer_softirq