====================================== | [ 10.214392][ T197] dummy1: left promiscuous mode | [ 10.218899][ T215] ip (215) used greatest stack depth: 24144 bytes left | [ 10.247735][ T216] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000118: 0000 [#1] SMP KASAN | [ 10.248012][ T216] KASAN: null-ptr-deref in range [0x00000000000008c0-0x00000000000008c7] [ 10.248386][ T216] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 10.248529][ T216] RIP: 0010:macvlan_port_release_mac (drivers/net/macvlan.c:79 drivers/net/macvlan.c:808) [ 10.248679][ T216] Code: f3 f3 65 48 8b 05 2d f0 de 02 48 89 84 24 f0 00 00 00 31 c0 e8 0e ff ff ff 48 8d b8 c0 08 00 00 48 89 c1 48 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 74 08 3c 03 0f 8e 2a 02 00 00 f6 81 c0 08 00 00 All code ======== 0: f3 f3 65 48 8b 05 2d repz repz mov %gs:0x2def02d(%rip),%rax # 0x2def037 7: f0 de 02 a: 48 89 84 24 f0 00 00 mov %rax,0xf0(%rsp) 11: 00 12: 31 c0 xor %eax,%eax 14: e8 0e ff ff ff call 0xffffffffffffff27 19: 48 8d b8 c0 08 00 00 lea 0x8c0(%rax),%rdi 20: 48 89 c1 mov %rax,%rcx 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 0f b6 04 28 movzbl (%rax,%rbp,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 74 08 je 0x3a 32: 3c 03 cmp $0x3,%al 34: 0f 8e 2a 02 00 00 jle 0x264 3a: f6 .byte 0xf6 3b: 81 .byte 0x81 3c: c0 08 00 rorb $0x0,(%rax) ... Code starting with the faulting instruction =========================================== 0: 0f b6 04 28 movzbl (%rax,%rbp,1),%eax 4: 84 c0 test %al,%al 6: 74 08 je 0x10 8: 3c 03 cmp $0x3,%al a: 0f 8e 2a 02 00 00 jle 0x23a 10: f6 .byte 0xf6 11: 81 .byte 0x81 12: c0 08 00 rorb $0x0,(%rax) ... [ 10.249079][ T216] RSP: 0018:ffa00000015c6e78 EFLAGS: 00010216 [ 10.249236][ T216] RAX: 0000000000000118 RBX: 1ff40000002b8dd2 RCX: 0000000000000000 [ 10.249410][ T216] RDX: 1fe220000145141f RSI: ffffffff99a6ffcb RDI: 00000000000008c0 [ 10.249574][ T216] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 10.249743][ T216] R10: 0000000000000002 R11: 0000000000000001 R12: ff1100000b07a818 [ 10.249910][ T216] R13: 0000000000000007 R14: ff1100000a28a000 R15: dffffc0000000000 [ 10.250080][ T216] FS: 00007ff9444d5840(0000) GS:ff11000099fd4000(0000) knlGS:0000000000000000 [ 10.250286][ T216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 10.250432][ T216] CR2: 00000000004ec888 CR3: 0000000009750002 CR4: 0000000000771ef0 [ 10.250604][ T216] PKRU: 55555554 [ 10.250690][ T216] Call Trace: [ 10.250777][ T216] [ 10.250836][ T216] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 10.250953][ T216] ? macvlan_port_get_rtnl (drivers/net/macvlan.c:128 (discriminator 9)) [ 10.251069][ T216] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 10.251189][ T216] ? enable_work (kernel/workqueue.c:4630 (discriminator 6)) [ 10.251301][ T216] ? mod_delayed_work_on (kernel/workqueue.c:2660) [ 10.251413][ T216] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 10.251525][ T216] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 10.251634][ T216] ? __cancel_work_sync (kernel/workqueue.c:4497) [ 10.251741][ T216] macvlan_port_destroy (drivers/net/macvlan.c:1344) [ 10.251852][ T216] unregister_netdevice_many_notify (net/core/dev.c:12460) [ 10.251997][ T216] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 10.252137][ T216] ? __netdev_upper_dev_unlink (net/core/dev.c:9037) [ 10.252283][ T216] macvlan_device_event (drivers/net/macvlan.c:1925) [ 10.252399][ T216] ? xfrm_dev_state_flush (net/xfrm/xfrm_state.c:3141 net/xfrm/xfrm_state.c:1018) [ 10.252512][ T216] ? macvlan_set_mac_address (drivers/net/macvlan.c:792) [ 10.252625][ T216] notifier_call_chain (kernel/notifier.c:85) [ 10.252737][ T216] unregister_netdevice_many_notify (net/core/dev.c:2291 net/core/dev.c:2305 net/core/dev.c:12441) [ 10.252881][ T216] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 10.253021][ T216] ? mutex_is_locked (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.h:48 kernel/locking/mutex.c:65) [ 10.253134][ T216] ? rtnl_is_locked (net/core/rtnetlink.c:169) [ 10.253253][ T216] ? unregister_netdevice_queue (net/core/dev.c:12306 (discriminator 1)) [ 10.253392][ T216] rtnl_dellink (net/core/rtnetlink.c:3601 net/core/rtnetlink.c:3643) [ 10.253506][ T216] ? mark_usage (kernel/locking/lockdep.c:4674) [ 10.253616][ T216] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 10.253728][ T216] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 10.253838][ T216] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 10.253949][ T216] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 10.254070][ T216] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 10.254191][ T216] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 10.254306][ T216] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 10.254421][ T216] ? mark_usage (kernel/locking/lockdep.c:4674) [ 10.254536][ T216] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 10.254651][ T216] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 10.254764][ T216] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 10.254882][ T216] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 10.254997][ T216] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 10.255113][ T216] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 10.255232][ T216] rtnetlink_rcv_msg (net/core/rtnetlink.c:7079) [ 10.255347][ T216] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 10.255462][ T216] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 10.255578][ T216] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 10.255694][ T216] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 10.255808][ T216] netlink_rcv_skb (net/netlink/af_netlink.c:2556) [ 10.255922][ T216] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 10.256036][ T216] ? netlink_ack (./include/linux/skbuff.h:2718) [ 10.256159][ T216] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2)) [ 10.256273][ T216] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2)) [ 10.256385][ T216] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345) [ 10.256495][ T216] ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1)) [ 10.256609][ T216] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 10.256724][ T216] netlink_sendmsg (net/netlink/af_netlink.c:1900) [ 10.256837][ T216] ? netlink_unicast (./include/net/net_namespace.h:419 (discriminator 7)) [ 10.256949][ T216] ? __might_fault (mm/memory.c:7292 (discriminator 5)) [ 10.257067][ T216] ____sys_sendmsg (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2684 (discriminator 4)) [ 10.257187][ T216] ? copy_msghdr_from_user (net/socket.c:2621) [ 10.257299][ T216] ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5373) [ 10.257438][ T216] ? move_addr_to_kernel (net/socket.c:258) [ 10.257552][ T216] ___sys_sendmsg (net/socket.c:2738) [ 10.257666][ T216] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 10.257807][ T216] ? copy_msghdr_from_user (net/socket.c:2590) [ 10.257929][ T216] __sys_sendmsg (net/socket.c:2770) [ 10.258041][ T216] ? __sys_sendmsg_sock (net/socket.c:2751) [ 10.258156][ T216] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 10.258270][ T216] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 10.258382][ T216] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 10.258496][ T216] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 10.258606][ T216] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 10.258738][ T216] RIP: 0033:0x7ff94470e54e [ 10.258859][ T216] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 10.259264][ T216] RSP: 002b:00007ffe8ba1c4d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 10.259434][ T216] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff94470e54e [ 10.259601][ T216] RDX: 0000000000000000 RSI: 00007ffe8ba1c580 RDI: 0000000000000005 [ 10.259772][ T216] RBP: 00007ffe8ba1c4e0 R08: 0000000000000000 R09: 0000000000000000 [ 10.259943][ T216] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a509166 Finger prints: macvlan_port_release_mac:macvlan_port_destroy:unregister_netdevice_many_notify:macvlan_device_event:notifier_call_chain