====================================== | [ 9.422499][ T207] team0: entered promiscuous mode | [ 9.422655][ T207] dummyteam: entered promiscuous mode | [ 9.518017][ T211] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000118: 0000 [#1] SMP KASAN | [ 9.518220][ T211] KASAN: null-ptr-deref in range [0x00000000000008c0-0x00000000000008c7] [ 9.518477][ T211] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 9.518575][ T211] RIP: 0010:macvlan_port_release_mac (drivers/net/macvlan.c:79 drivers/net/macvlan.c:808) [ 9.518680][ T211] Code: f3 f3 65 48 8b 05 2d f0 de 02 48 89 84 24 f0 00 00 00 31 c0 e8 0e ff ff ff 48 8d b8 c0 08 00 00 48 89 c1 48 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 74 08 3c 03 0f 8e 2a 02 00 00 f6 81 c0 08 00 00 All code ======== 0: f3 f3 65 48 8b 05 2d repz repz mov %gs:0x2def02d(%rip),%rax # 0x2def037 7: f0 de 02 a: 48 89 84 24 f0 00 00 mov %rax,0xf0(%rsp) 11: 00 12: 31 c0 xor %eax,%eax 14: e8 0e ff ff ff call 0xffffffffffffff27 19: 48 8d b8 c0 08 00 00 lea 0x8c0(%rax),%rdi 20: 48 89 c1 mov %rax,%rcx 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 0f b6 04 28 movzbl (%rax,%rbp,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 74 08 je 0x3a 32: 3c 03 cmp $0x3,%al 34: 0f 8e 2a 02 00 00 jle 0x264 3a: f6 .byte 0xf6 3b: 81 .byte 0x81 3c: c0 08 00 rorb $0x0,(%rax) ... Code starting with the faulting instruction =========================================== 0: 0f b6 04 28 movzbl (%rax,%rbp,1),%eax 4: 84 c0 test %al,%al 6: 74 08 je 0x10 8: 3c 03 cmp $0x3,%al a: 0f 8e 2a 02 00 00 jle 0x23a 10: f6 .byte 0xf6 11: 81 .byte 0x81 12: c0 08 00 rorb $0x0,(%rax) ... [ 9.518949][ T211] RSP: 0018:ffa00000007a70b0 EFLAGS: 00010216 [ 9.519046][ T211] RAX: 0000000000000118 RBX: 1ff40000000f4e19 RCX: 0000000000000000 [ 9.519159][ T211] RDX: 1fe22000018fa41f RSI: ffffffffac06ffcb RDI: 00000000000008c0 [ 9.519272][ T211] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 9.519390][ T211] R10: 0000000000000001 R11: 0000000000000001 R12: ff1100000c7c2818 [ 9.519504][ T211] R13: 0000000000000007 R14: ff1100000c7d2000 R15: dffffc0000000000 [ 9.519616][ T211] FS: 00007f86a0ca1840(0000) GS:ff11000087954000(0000) knlGS:0000000000000000 [ 9.519750][ T211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 9.519845][ T211] CR2: 00000000004eca98 CR3: 000000000f8f1002 CR4: 0000000000771ef0 [ 9.519956][ T211] PKRU: 55555554 [ 9.520013][ T211] Call Trace: [ 9.520069][ T211] [ 9.520110][ T211] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 9.520189][ T211] ? macvlan_port_get_rtnl (drivers/net/macvlan.c:128 (discriminator 9)) [ 9.520264][ T211] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 9.520351][ T211] ? enable_work (kernel/workqueue.c:4630 (discriminator 6)) [ 9.520430][ T211] ? mod_delayed_work_on (kernel/workqueue.c:2660) [ 9.520507][ T211] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 9.520584][ T211] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 9.520659][ T211] ? __cancel_work_sync (kernel/workqueue.c:4497) [ 9.520733][ T211] macvlan_port_destroy (drivers/net/macvlan.c:1344) [ 9.520810][ T211] unregister_netdevice_many_notify (net/core/dev.c:12460) [ 9.520906][ T211] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 9.521000][ T211] ? __netdev_upper_dev_unlink (net/core/dev.c:9037) [ 9.521093][ T211] rtnl_dellink (net/core/rtnetlink.c:3601 net/core/rtnetlink.c:3643) [ 9.521167][ T211] ? mark_usage (kernel/locking/lockdep.c:4674) [ 9.521240][ T211] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 9.521315][ T211] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 9.521393][ T211] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 9.521469][ T211] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 9.521549][ T211] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 9.521624][ T211] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 9.521697][ T211] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 9.521773][ T211] ? mark_usage (kernel/locking/lockdep.c:4674) [ 9.521847][ T211] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 9.521921][ T211] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 9.521996][ T211] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 9.522070][ T211] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 9.522143][ T211] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 9.522217][ T211] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 9.522293][ T211] rtnetlink_rcv_msg (net/core/rtnetlink.c:7079) [ 9.522376][ T211] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 9.522451][ T211] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 9.522538][ T211] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 9.522613][ T211] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 9.522687][ T211] netlink_rcv_skb (net/netlink/af_netlink.c:2556) [ 9.522768][ T211] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 9.522843][ T211] ? netlink_ack (./include/linux/skbuff.h:2718) [ 9.522917][ T211] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2)) [ 9.522993][ T211] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2)) [ 9.523069][ T211] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345) [ 9.523143][ T211] ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1)) [ 9.523220][ T211] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 9.523294][ T211] netlink_sendmsg (net/netlink/af_netlink.c:1900) [ 9.523375][ T211] ? netlink_unicast (./include/net/net_namespace.h:419 (discriminator 7)) [ 9.523449][ T211] ? __might_fault (mm/memory.c:7292 (discriminator 5)) [ 9.523527][ T211] ____sys_sendmsg (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2684 (discriminator 4)) [ 9.523603][ T211] ? copy_msghdr_from_user (net/socket.c:2621) [ 9.523677][ T211] ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5373) [ 9.523772][ T211] ? move_addr_to_kernel (net/socket.c:258) [ 9.523848][ T211] ___sys_sendmsg (net/socket.c:2738) [ 9.523924][ T211] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 9.524020][ T211] ? copy_msghdr_from_user (net/socket.c:2590) [ 9.524100][ T211] __sys_sendmsg (net/socket.c:2770) [ 9.524175][ T211] ? __sys_sendmsg_sock (net/socket.c:2751) [ 9.524251][ T211] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 9.524328][ T211] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 9.524409][ T211] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 9.524485][ T211] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 9.524560][ T211] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 9.524653][ T211] RIP: 0033:0x7f86a0eda54e [ 9.524741][ T211] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 9.525014][ T211] RSP: 002b:00007ffc09d29370 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 9.525126][ T211] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f86a0eda54e [ 9.525239][ T211] RDX: 0000000000000000 RSI: 00007ffc09d29420 RDI: 0000000000000005 [ 9.525359][ T211] RBP: 00007ffc09d29380 R08: 0000000000000000 R09: 0000000000000000 [ 9.525478][ T211] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a506ceb Finger prints: macvlan_port_release_mac:macvlan_port_destroy:unregister_netdevice_many_notify:rtnl_dellink:rtnetlink_rcv_msg