====================================== | 0 | xx__-> [ 925.705128][T13958] ------------[ cut here ]------------ | [ 925.705308][T13958] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/13958 | [ 925.705568][T13958] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth [ 925.707470][T13958] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 925.707648][T13958] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 925.707800][T13958] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 925.708488][T13958] RSP: 0018:ffa00000026775d0 EFLAGS: 00010286 [ 925.708668][T13958] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000189bebf [ 925.708875][T13958] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4df5f8 [ 925.709183][T13958] RBP: 1ff40000004ceebb R08: 1fe220000189bec0 R09: fffa3bfffffb0b24 [ 925.709441][T13958] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c4df3b4 [ 925.709657][T13958] R13: ff1100000c4df380 R14: ffffffff931c7940 R15: ff1100000c4df540 [ 925.709882][T13958] FS: 00007fb1005ae440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 925.710228][T13958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.710409][T13958] CR2: 000000000044f720 CR3: 000000000242a002 CR4: 0000000000771ef0 [ 925.710621][T13958] PKRU: 55555554 [ 925.710729][T13958] Call Trace: [ 925.710836][T13958] [ 925.711006][T13958] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 925.711149][T13958] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 925.711297][T13958] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 925.711445][T13958] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.711584][T13958] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.711724][T13958] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 925.711861][T13958] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 925.712103][T13958] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 925.712256][T13958] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.712404][T13958] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 925.712559][T13958] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 925.712699][T13958] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 925.712852][T13958] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 925.713104][T13958] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 925.713246][T13958] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 925.713385][T13958] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 925.713529][T13958] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.713669][T13958] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 925.713825][T13958] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 925.714044][T13958] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 925.714186][T13958] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 925.714320][T13958] ? copy_msghdr_from_user (net/socket.c:2525) [ 925.714457][T13958] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 925.714635][T13958] ? move_addr_to_kernel (net/socket.c:2511) [ 925.714775][T13958] ? filemap_map_folio_range (mm/filemap.c:3873) [ 925.714982][T13958] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.715126][T13958] ___sys_sendmsg (net/socket.c:2641) [ 925.715267][T13958] ? copy_msghdr_from_user (net/socket.c:2628) [ 925.715415][T13958] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 925.715559][T13958] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 925.715702][T13958] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 925.715849][T13958] ? __sys_sendmsg_sock (net/socket.c:2656) [ 925.716093][T13958] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 925.716247][T13958] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.716390][T13958] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.716535][T13958] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 925.716677][T13958] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 925.716828][T13958] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 925.717061][T13958] RIP: 0033:0x7fb100708c5e [ 925.717210][T13958] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 925.717716][T13958] RSP: 002b:00007ffe3d9d1080 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 925.717989][T13958] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb100708c5e [ 925.718214][T13958] RDX: 0000000000000000 RSI: 00007ffe3d9d1140 RDI: 0000000000000005 [ 925.718420][T13958] RBP: 00007ffe3d9d1090 R08: 0000000000000000 R09: 0000000000000000 [ 925.718617][T13958] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 925.718835][T13958] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 925.787617][T13962] ------------[ cut here ]------------ | [ 925.787796][T13962] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/13962 | [ 925.788074][T13962] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 925.788943][T13962] Tainted: [W]=WARN [ 925.789050][T13962] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 925.789223][T13962] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 925.789375][T13962] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 925.789890][T13962] RSP: 0018:ffa00000026775d0 EFLAGS: 00010286 [ 925.790076][T13962] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003875137 [ 925.790288][T13962] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a89b8 [ 925.790519][T13962] RBP: 1ff40000004ceebb R08: 1fe2200003875138 R09: fffa3bfffffb0b24 [ 925.790716][T13962] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8af4 [ 925.790931][T13962] R13: ff1100001c3a8ac0 R14: ffffffff931c7940 R15: ff1100001c3a8900 [ 925.791146][T13962] FS: 00007f78b34d5440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 925.791408][T13962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.791586][T13962] CR2: 000000000044f720 CR3: 00000000107fd002 CR4: 0000000000771ef0 [ 925.791835][T13962] PKRU: 55555554 [ 925.791945][T13962] Call Trace: [ 925.792046][T13962] [ 925.792115][T13962] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 925.792268][T13962] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 925.792439][T13962] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 925.792579][T13962] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.792715][T13962] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.792859][T13962] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 925.793004][T13962] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 925.793143][T13962] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 925.793288][T13962] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.793435][T13962] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 925.793589][T13962] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 925.793723][T13962] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 925.793859][T13962] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 925.794001][T13962] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 925.794144][T13962] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 925.794282][T13962] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 925.794430][T13962] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.794572][T13962] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 925.794705][T13962] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 925.794841][T13962] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 925.794984][T13962] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 925.795116][T13962] ? copy_msghdr_from_user (net/socket.c:2525) [ 925.795247][T13962] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 925.795428][T13962] ? move_addr_to_kernel (net/socket.c:2511) [ 925.795565][T13962] ? filemap_map_folio_range (mm/filemap.c:3873) [ 925.795697][T13962] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.795835][T13962] ___sys_sendmsg (net/socket.c:2641) [ 925.795975][T13962] ? copy_msghdr_from_user (net/socket.c:2628) [ 925.796117][T13962] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 925.796258][T13962] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 925.796399][T13962] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 925.796538][T13962] ? __sys_sendmsg_sock (net/socket.c:2656) [ 925.796679][T13962] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 925.796817][T13962] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.796960][T13962] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.797100][T13962] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 925.797253][T13962] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 925.797405][T13962] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 925.797581][T13962] RIP: 0033:0x7f78b362fc5e [ 925.797747][T13962] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 925.798339][T13962] RSP: 002b:00007ffe7daf7200 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 925.798553][T13962] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f78b362fc5e [ 925.798759][T13962] RDX: 0000000000000000 RSI: 00007ffe7daf72c0 RDI: 0000000000000005 [ 925.799030][T13962] RBP: 00007ffe7daf7210 R08: 0000000000000000 R09: 0000000000000000 [ 925.799232][T13962] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 925.799464][T13962] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 925.885051][T13968] ------------[ cut here ]------------ | [ 925.885223][T13968] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/13968 | [ 925.885470][T13968] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 925.886282][T13968] Tainted: [W]=WARN [ 925.886403][T13968] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 925.886574][T13968] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 925.886721][T13968] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 925.887235][T13968] RSP: 0018:ffa00000027375d0 EFLAGS: 00010286 [ 925.887422][T13968] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038752bf [ 925.887628][T13968] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a95f8 [ 925.887845][T13968] RBP: 1ff40000004e6ebb R08: 1fe22000038752c0 R09: fffa3bfffffb0b24 [ 925.888057][T13968] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9734 [ 925.888264][T13968] R13: ff1100001c3a9700 R14: ffffffff931c7940 R15: ff1100001c3a9540 [ 925.888477][T13968] FS: 00007fc3a92c7440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 925.888719][T13968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.888892][T13968] CR2: 000000000044f720 CR3: 000000000b607004 CR4: 0000000000771ef0 [ 925.889109][T13968] PKRU: 55555554 [ 925.889214][T13968] Call Trace: [ 925.889317][T13968] [ 925.889390][T13968] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 925.889536][T13968] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 925.889682][T13968] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 925.889841][T13968] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.890440][T13968] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.890600][T13968] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 925.890744][T13968] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 925.890886][T13968] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 925.891033][T13968] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.891175][T13968] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 925.891340][T13968] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 925.891510][T13968] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 925.891656][T13968] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 925.891800][T13968] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 925.891973][T13968] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 925.892129][T13968] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 925.892286][T13968] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.892440][T13968] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 925.892580][T13968] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 925.892728][T13968] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 925.892874][T13968] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 925.893027][T13968] ? copy_msghdr_from_user (net/socket.c:2525) [ 925.893174][T13968] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 925.893350][T13968] ? move_addr_to_kernel (net/socket.c:2511) [ 925.893502][T13968] ? filemap_map_folio_range (mm/filemap.c:3873) [ 925.893643][T13968] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.893791][T13968] ___sys_sendmsg (net/socket.c:2641) [ 925.893938][T13968] ? copy_msghdr_from_user (net/socket.c:2628) [ 925.894090][T13968] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 925.894251][T13968] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 925.894393][T13968] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 925.894544][T13968] ? __sys_sendmsg_sock (net/socket.c:2656) [ 925.894688][T13968] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 925.894833][T13968] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.894975][T13968] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.895118][T13968] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 925.895276][T13968] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 925.895417][T13968] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 925.895599][T13968] RIP: 0033:0x7fc3a9421c5e [ 925.895761][T13968] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 925.896280][T13968] RSP: 002b:00007ffde0642e70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 925.896502][T13968] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc3a9421c5e [ 925.896714][T13968] RDX: 0000000000000000 RSI: 00007ffde0642f30 RDI: 0000000000000005 [ 925.896931][T13968] RBP: 00007ffde0642e80 R08: 0000000000000000 R09: 0000000000000000 [ 925.897142][T13968] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 925.897349][T13968] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 925.963850][T13972] ------------[ cut here ]------------ | [ 925.964077][T13972] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/13972 | [ 925.964348][T13972] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 925.965107][T13972] Tainted: [W]=WARN [ 925.965208][T13972] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 925.965372][T13972] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 925.965515][T13972] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 925.965992][T13972] RSP: 0018:ffa00000027275d0 EFLAGS: 00010286 [ 925.966161][T13972] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000011ac687 [ 925.966357][T13972] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000008d63438 [ 925.966559][T13972] RBP: 1ff40000004e4ebb R08: 1fe22000011ac688 R09: fffa3bfffffb0b24 [ 925.966754][T13972] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff11000008d63574 [ 925.966955][T13972] R13: ff11000008d63540 R14: ffffffff931c7940 R15: ff11000008d63380 [ 925.967153][T13972] FS: 00007eff158a2440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 925.967389][T13972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.967557][T13972] CR2: 000000000044f720 CR3: 0000000019562003 CR4: 0000000000771ef0 [ 925.967753][T13972] PKRU: 55555554 [ 925.967853][T13972] Call Trace: [ 925.967962][T13972] [ 925.968031][T13972] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 925.968162][T13972] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 925.968302][T13972] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 925.968439][T13972] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.968569][T13972] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.968704][T13972] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 925.968834][T13972] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 925.968970][T13972] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 925.969101][T13972] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 925.969233][T13972] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 925.969373][T13972] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 925.969511][T13972] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 925.969650][T13972] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 925.969788][T13972] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 925.970261][T13972] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 925.970421][T13972] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 925.970579][T13972] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.970722][T13972] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 925.970881][T13972] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 925.971024][T13972] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 925.971161][T13972] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 925.971291][T13972] ? copy_msghdr_from_user (net/socket.c:2525) [ 925.971428][T13972] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 925.971589][T13972] ? move_addr_to_kernel (net/socket.c:2511) [ 925.971723][T13972] ? filemap_map_folio_range (mm/filemap.c:3873) [ 925.971855][T13972] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 925.971994][T13972] ___sys_sendmsg (net/socket.c:2641) [ 925.972125][T13972] ? copy_msghdr_from_user (net/socket.c:2628) [ 925.972260][T13972] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 925.972393][T13972] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 925.972532][T13972] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 925.972663][T13972] ? __sys_sendmsg_sock (net/socket.c:2656) [ 925.972798][T13972] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 925.972933][T13972] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.973065][T13972] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 925.973196][T13972] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 925.973326][T13972] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 925.973466][T13972] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 925.973628][T13972] RIP: 0033:0x7eff159fcc5e [ 925.973769][T13972] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 925.974276][T13972] RSP: 002b:00007ffdc411f220 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 925.974518][T13972] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007eff159fcc5e [ 925.974726][T13972] RDX: 0000000000000000 RSI: 00007ffdc411f2e0 RDI: 0000000000000005 [ 925.974937][T13972] RBP: 00007ffdc411f230 R08: 0000000000000000 R09: 0000000000000000 [ 925.975144][T13972] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 925.975349][T13972] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 926.039804][T13978] ------------[ cut here ]------------ | [ 926.040174][T13978] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/13978 | [ 926.040420][T13978] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.041200][T13978] Tainted: [W]=WARN [ 926.041305][T13978] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.041478][T13978] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.041637][T13978] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.042124][T13978] RSP: 0018:ffa00000027475d0 EFLAGS: 00010286 [ 926.042299][T13978] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000011ac5df [ 926.042503][T13978] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000008d62ef8 [ 926.042708][T13978] RBP: 1ff40000004e8ebb R08: 1fe22000011ac5e0 R09: fffa3bfffffb0b24 [ 926.042911][T13978] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff11000008d62074 [ 926.043132][T13978] R13: ff11000008d62040 R14: ffffffff931c7940 R15: ff11000008d62e40 [ 926.043335][T13978] FS: 00007f0d23701440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 926.043573][T13978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.043777][T13978] CR2: 000000000044f720 CR3: 000000000f68f001 CR4: 0000000000771ef0 [ 926.043999][T13978] PKRU: 55555554 [ 926.044104][T13978] Call Trace: [ 926.044211][T13978] [ 926.044282][T13978] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.044428][T13978] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.044573][T13978] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.044717][T13978] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.044853][T13978] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.045095][T13978] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.045233][T13978] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.045372][T13978] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.045512][T13978] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.045727][T13978] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.045869][T13978] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.046022][T13978] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.046159][T13978] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.046368][T13978] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.046513][T13978] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.046649][T13978] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.046787][T13978] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.047007][T13978] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.047153][T13978] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.047296][T13978] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.047436][T13978] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.047663][T13978] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.047802][T13978] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.047976][T13978] ? move_addr_to_kernel (net/socket.c:2511) [ 926.048114][T13978] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.048329][T13978] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.048496][T13978] ___sys_sendmsg (net/socket.c:2641) [ 926.048644][T13978] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.048785][T13978] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.049013][T13978] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.049152][T13978] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.049289][T13978] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.049437][T13978] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.049651][T13978] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.049789][T13978] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.049931][T13978] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.050071][T13978] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.050302][T13978] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.050482][T13978] RIP: 0033:0x7f0d2385bc5e [ 926.050633][T13978] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.051209][T13978] RSP: 002b:00007ffc2d0e29a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.051423][T13978] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0d2385bc5e [ 926.051709][T13978] RDX: 0000000000000000 RSI: 00007ffc2d0e2a60 RDI: 0000000000000005 [ 926.051919][T13978] RBP: 00007ffc2d0e29b0 R08: 0000000000000000 R09: 0000000000000000 [ 926.052207][T13978] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.052424][T13978] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 926.129626][T13982] ------------[ cut here ]------------ | [ 926.129814][T13982] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/13982 | [ 926.130411][T13982] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.131253][T13982] Tainted: [W]=WARN [ 926.131367][T13982] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.131587][T13982] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.131737][T13982] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.132246][T13982] RSP: 0018:ffa00000027775d0 EFLAGS: 00010286 [ 926.132445][T13982] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea04c7 [ 926.132642][T13982] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502638 [ 926.132853][T13982] RBP: 1ff40000004eeebb R08: 1fe2200001ea04c8 R09: fffa3bfffffb0b24 [ 926.133068][T13982] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502774 [ 926.133266][T13982] R13: ff1100000f502740 R14: ffffffff931c7940 R15: ff1100000f502580 [ 926.133494][T13982] FS: 00007efcd4651440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 926.133747][T13982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.133923][T13982] CR2: 000000000044f720 CR3: 000000000f68f003 CR4: 0000000000771ef0 [ 926.134122][T13982] PKRU: 55555554 [ 926.134222][T13982] Call Trace: [ 926.134322][T13982] [ 926.134390][T13982] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.134538][T13982] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.134679][T13982] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.134812][T13982] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.134958][T13982] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.135100][T13982] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.135259][T13982] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.135393][T13982] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.135530][T13982] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.135662][T13982] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.135799][T13982] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.135937][T13982] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.136071][T13982] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.136214][T13982] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.136352][T13982] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.136497][T13982] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.136634][T13982] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.136774][T13982] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.136924][T13982] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.137060][T13982] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.137194][T13982] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.137325][T13982] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.137462][T13982] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.137668][T13982] ? move_addr_to_kernel (net/socket.c:2511) [ 926.137833][T13982] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.138025][T13982] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.138181][T13982] ___sys_sendmsg (net/socket.c:2641) [ 926.138323][T13982] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.138466][T13982] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.138610][T13982] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.138752][T13982] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.138887][T13982] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.139036][T13982] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.139191][T13982] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.139334][T13982] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.139491][T13982] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.139632][T13982] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.139788][T13982] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.139964][T13982] RIP: 0033:0x7efcd47abc5e [ 926.140104][T13982] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.140583][T13982] RSP: 002b:00007fffc0d73bb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.140783][T13982] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007efcd47abc5e [ 926.140985][T13982] RDX: 0000000000000000 RSI: 00007fffc0d73c70 RDI: 0000000000000005 [ 926.141183][T13982] RBP: 00007fffc0d73bc0 R08: 0000000000000000 R09: 0000000000000000 [ 926.141388][T13982] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.141626][T13982] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 926.219359][T13988] ------------[ cut here ]------------ | [ 926.219560][T13988] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/13988 | [ 926.219821][T13988] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.220657][T13988] Tainted: [W]=WARN [ 926.220785][T13988] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.220967][T13988] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.221118][T13988] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.221628][T13988] RSP: 0018:ffa0000001fef5d0 EFLAGS: 00010286 [ 926.221806][T13988] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0457 [ 926.222017][T13988] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 926.222225][T13988] RBP: 1ff40000003fdebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b24 [ 926.222434][T13988] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502af4 [ 926.222643][T13988] R13: ff1100000f502ac0 R14: ffffffff931c7940 R15: ff1100000f502200 [ 926.222849][T13988] FS: 00007f54f245e440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 926.223104][T13988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.223280][T13988] CR2: 000000000044f720 CR3: 0000000010101005 CR4: 0000000000771ef0 [ 926.223508][T13988] PKRU: 55555554 [ 926.223612][T13988] Call Trace: [ 926.223715][T13988] [ 926.223786][T13988] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.223931][T13988] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.224078][T13988] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.224219][T13988] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.224361][T13988] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.224510][T13988] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.224653][T13988] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.224795][T13988] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.224940][T13988] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.225085][T13988] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.225228][T13988] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.225378][T13988] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.225526][T13988] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.225664][T13988] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.225802][T13988] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.226491][T13988] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.226653][T13988] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.226793][T13988] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.226939][T13988] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.227081][T13988] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.227214][T13988] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.227365][T13988] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.227509][T13988] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.227683][T13988] ? move_addr_to_kernel (net/socket.c:2511) [ 926.227815][T13988] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.227956][T13988] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.228089][T13988] ___sys_sendmsg (net/socket.c:2641) [ 926.228222][T13988] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.228370][T13988] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.228523][T13988] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.228663][T13988] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.228808][T13988] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.228957][T13988] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.229111][T13988] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.229250][T13988] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.229387][T13988] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.229531][T13988] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.229683][T13988] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.230231][T13988] RIP: 0033:0x7f54f25b8c5e [ 926.230423][T13988] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.230899][T13988] RSP: 002b:00007ffd86794630 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.231132][T13988] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f54f25b8c5e [ 926.231338][T13988] RDX: 0000000000000000 RSI: 00007ffd867946f0 RDI: 0000000000000005 [ 926.231595][T13988] RBP: 00007ffd86794640 R08: 0000000000000000 R09: 0000000000000000 [ 926.231790][T13988] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.231994][T13988] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 926.299289][T13992] ------------[ cut here ]------------ | [ 926.299480][T13992] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/13992 | [ 926.299718][T13992] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.301040][T13992] Tainted: [W]=WARN [ 926.301166][T13992] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.301365][T13992] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.301542][T13992] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.302077][T13992] RSP: 0018:ffa00000026775d0 EFLAGS: 00010286 [ 926.302247][T13992] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c201f [ 926.302490][T13992] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6100f8 [ 926.302723][T13992] RBP: 1ff40000004ceebb R08: 1fe22000034c2020 R09: fffa3bfffffb0b24 [ 926.302964][T13992] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611ab4 [ 926.303165][T13992] R13: ff1100001a611a80 R14: ffffffff931c7940 R15: ff1100001a610040 [ 926.303394][T13992] FS: 00007f85cc4b6440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 926.303634][T13992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.303801][T13992] CR2: 000000000044f720 CR3: 00000000101f8002 CR4: 0000000000771ef0 [ 926.304005][T13992] PKRU: 55555554 [ 926.304107][T13992] Call Trace: [ 926.304205][T13992] [ 926.304273][T13992] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.304408][T13992] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.304548][T13992] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.304680][T13992] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.304811][T13992] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.304951][T13992] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.305081][T13992] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.305237][T13992] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.305406][T13992] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.305541][T13992] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.305676][T13992] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.305807][T13992] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.305945][T13992] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.306082][T13992] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.306210][T13992] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.306350][T13992] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.306495][T13992] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.306627][T13992] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.306758][T13992] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.306898][T13992] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.307040][T13992] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.307179][T13992] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.307317][T13992] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.307509][T13992] ? move_addr_to_kernel (net/socket.c:2511) [ 926.307656][T13992] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.307811][T13992] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.307992][T13992] ___sys_sendmsg (net/socket.c:2641) [ 926.308133][T13992] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.308272][T13992] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.308418][T13992] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.308560][T13992] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.308705][T13992] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.308847][T13992] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.308993][T13992] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.309128][T13992] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.309265][T13992] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.309406][T13992] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.309541][T13992] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.309706][T13992] RIP: 0033:0x7f85cc610c5e [ 926.309853][T13992] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.310349][T13992] RSP: 002b:00007fff0a07e760 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.310565][T13992] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f85cc610c5e [ 926.310772][T13992] RDX: 0000000000000000 RSI: 00007fff0a07e820 RDI: 0000000000000005 [ 926.310983][T13992] RBP: 00007fff0a07e770 R08: 0000000000000000 R09: 0000000000000000 [ 926.311196][T13992] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.311408][T13992] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 926.380301][T13998] ------------[ cut here ]------------ | [ 926.380502][T13998] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/13998 | [ 926.380752][T13998] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.381558][T13998] Tainted: [W]=WARN [ 926.381668][T13998] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.381836][T13998] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.381988][T13998] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.382480][T13998] RSP: 0018:ffa00000027e75d0 EFLAGS: 00010286 [ 926.382656][T13998] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c20c7 [ 926.382857][T13998] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610638 [ 926.383067][T13998] RBP: 1ff40000004fcebb R08: 1fe22000034c20c8 R09: fffa3bfffffb0b24 [ 926.383268][T13998] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6103f4 [ 926.383479][T13998] R13: ff1100001a6103c0 R14: ffffffff931c7940 R15: ff1100001a610580 [ 926.383679][T13998] FS: 00007fad9e1d7440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 926.383932][T13998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.384116][T13998] CR2: 000000000044f720 CR3: 000000000c6c7005 CR4: 0000000000771ef0 [ 926.384321][T13998] PKRU: 55555554 [ 926.384433][T13998] Call Trace: [ 926.384538][T13998] [ 926.384607][T13998] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.384745][T13998] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.384886][T13998] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.385031][T13998] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.385168][T13998] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.385308][T13998] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.385451][T13998] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.385599][T13998] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.385733][T13998] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.385868][T13998] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.386017][T13998] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.386162][T13998] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.386302][T13998] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.386440][T13998] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.386584][T13998] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.386726][T13998] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.386865][T13998] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.387008][T13998] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.387142][T13998] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.387276][T13998] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.387420][T13998] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.387554][T13998] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.387687][T13998] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.387852][T13998] ? move_addr_to_kernel (net/socket.c:2511) [ 926.387992][T13998] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.388137][T13998] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.388275][T13998] ___sys_sendmsg (net/socket.c:2641) [ 926.388415][T13998] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.388552][T13998] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.388694][T13998] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.388841][T13998] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.388985][T13998] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.389122][T13998] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.389256][T13998] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.389391][T13998] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.389530][T13998] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.389671][T13998] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.389811][T13998] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.389997][T13998] RIP: 0033:0x7fad9e331c5e [ 926.390148][T13998] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.390645][T13998] RSP: 002b:00007fffd37f19c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.390847][T13998] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fad9e331c5e [ 926.391060][T13998] RDX: 0000000000000000 RSI: 00007fffd37f1a80 RDI: 0000000000000005 [ 926.391270][T13998] RBP: 00007fffd37f19d0 R08: 0000000000000000 R09: 0000000000000000 [ 926.391481][T13998] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.391694][T13998] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 926.461753][T14002] ------------[ cut here ]------------ | [ 926.462546][T14002] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14002 | [ 926.462840][T14002] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.463773][T14002] Tainted: [W]=WARN [ 926.463953][T14002] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.464190][T14002] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.464404][T14002] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.464972][T14002] RSP: 0018:ffa00000027b75d0 EFLAGS: 00010286 [ 926.465204][T14002] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000215e857 [ 926.465467][T14002] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000010af42b8 [ 926.465750][T14002] RBP: 1ff40000004f6ebb R08: 1fe220000215e858 R09: fffa3bfffffb0b24 [ 926.466038][T14002] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff11000010af43f4 [ 926.466304][T14002] R13: ff11000010af43c0 R14: ffffffff931c7940 R15: ff11000010af4200 [ 926.466590][T14002] FS: 00007f81be0f2440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 926.466910][T14002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.467144][T14002] CR2: 000000000044f720 CR3: 000000000bef3004 CR4: 0000000000771ef0 [ 926.467413][T14002] PKRU: 55555554 [ 926.467568][T14002] Call Trace: [ 926.467722][T14002] [ 926.467847][T14002] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.468055][T14002] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.468264][T14002] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.468486][T14002] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.468681][T14002] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.468906][T14002] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.469088][T14002] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.469290][T14002] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.469488][T14002] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.469679][T14002] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.469916][T14002] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.470146][T14002] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.470384][T14002] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.470583][T14002] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.470763][T14002] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.470965][T14002] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.471168][T14002] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.471356][T14002] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.471548][T14002] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.471770][T14002] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.471984][T14002] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.472207][T14002] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.472402][T14002] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.472616][T14002] ? move_addr_to_kernel (net/socket.c:2511) [ 926.472804][T14002] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.473018][T14002] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.473242][T14002] ___sys_sendmsg (net/socket.c:2641) [ 926.473468][T14002] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.473685][T14002] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.473875][T14002] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.474076][T14002] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.474303][T14002] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.474534][T14002] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.474753][T14002] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.474950][T14002] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.475139][T14002] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.475323][T14002] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.475515][T14002] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.475734][T14002] RIP: 0033:0x7f81be24cc5e [ 926.475937][T14002] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.476509][T14002] RSP: 002b:00007fffd76413a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.476816][T14002] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f81be24cc5e [ 926.477122][T14002] RDX: 0000000000000000 RSI: 00007fffd7641460 RDI: 0000000000000005 [ 926.477372][T14002] RBP: 00007fffd76413b0 R08: 0000000000000000 R09: 0000000000000000 [ 926.477649][T14002] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.477947][T14002] R13: 0000000069cbe7e5 R14: 0000000000000004 R15: 000000000049d620 | [ 926.554629][T14008] ------------[ cut here ]------------ | [ 926.554861][T14008] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14008 | [ 926.555369][T14008] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.556296][T14008] Tainted: [W]=WARN [ 926.556470][T14008] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.556715][T14008] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.556927][T14008] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.557476][T14008] RSP: 0018:ffa00000027c75d0 EFLAGS: 00010286 [ 926.557738][T14008] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000215eb2f [ 926.558018][T14008] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000010af5978 [ 926.558279][T14008] RBP: 1ff40000004f8ebb R08: 1fe220000215eb30 R09: fffa3bfffffb0b24 [ 926.558561][T14008] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff11000010af51f4 [ 926.558843][T14008] R13: ff11000010af51c0 R14: ffffffff931c7940 R15: ff11000010af58c0 [ 926.559120][T14008] FS: 00007f4fde34d440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 926.559427][T14008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.559657][T14008] CR2: 000000000044f720 CR3: 0000000019a2e001 CR4: 0000000000771ef0 [ 926.559932][T14008] PKRU: 55555554 [ 926.560095][T14008] Call Trace: [ 926.560252][T14008] [ 926.560372][T14008] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.560572][T14008] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.560779][T14008] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.560982][T14008] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.561175][T14008] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.561366][T14008] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.561570][T14008] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.561782][T14008] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.562005][T14008] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.562199][T14008] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.562385][T14008] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.562585][T14008] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.562781][T14008] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.563102][T14008] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.563304][T14008] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.563512][T14008] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.563701][T14008] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.563890][T14008] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.564104][T14008] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.564297][T14008] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.564494][T14008] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.564710][T14008] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.564946][T14008] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.565173][T14008] ? move_addr_to_kernel (net/socket.c:2511) [ 926.565360][T14008] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.565576][T14008] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.565793][T14008] ___sys_sendmsg (net/socket.c:2641) [ 926.565997][T14008] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.566205][T14008] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.566442][T14008] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.566644][T14008] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.566846][T14008] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.567065][T14008] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.567265][T14008] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.568174][T14008] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.568369][T14008] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.568573][T14008] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.568772][T14008] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.569013][T14008] RIP: 0033:0x7f4fde4a7c5e [ 926.569225][T14008] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.569814][T14008] RSP: 002b:00007ffce74ff7c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.570102][T14008] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4fde4a7c5e [ 926.570363][T14008] RDX: 0000000000000000 RSI: 00007ffce74ff880 RDI: 0000000000000005 [ 926.570651][T14008] RBP: 00007ffce74ff7d0 R08: 0000000000000000 R09: 0000000000000000 [ 926.570938][T14008] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.571197][T14008] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 926.639571][T14012] ------------[ cut here ]------------ | [ 926.639740][T14012] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14012 | [ 926.640225][T14012] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.641026][T14012] Tainted: [W]=WARN [ 926.641128][T14012] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.641302][T14012] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.641449][T14012] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.641932][T14012] RSP: 0018:ffa00000027f75d0 EFLAGS: 00010286 [ 926.642115][T14012] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b2f [ 926.642318][T14012] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d978 [ 926.642520][T14012] RBP: 1ff40000004feebb R08: 1fe22000036f1b30 R09: fffa3bfffffb0b24 [ 926.642720][T14012] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78de34 [ 926.642928][T14012] R13: ff1100001b78de00 R14: ffffffff931c7940 R15: ff1100001b78d8c0 [ 926.643124][T14012] FS: 00007f63fd677440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 926.643361][T14012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.643538][T14012] CR2: 000000000044f720 CR3: 000000001a9e9006 CR4: 0000000000771ef0 [ 926.643743][T14012] PKRU: 55555554 [ 926.643843][T14012] Call Trace: [ 926.643948][T14012] [ 926.644023][T14012] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.644155][T14012] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.644297][T14012] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.644444][T14012] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.644575][T14012] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.644721][T14012] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.644853][T14012] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.644991][T14012] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.645134][T14012] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.645265][T14012] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.645402][T14012] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.645534][T14012] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.645666][T14012] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.645799][T14012] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.645940][T14012] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.646078][T14012] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.646216][T14012] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.646349][T14012] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.646496][T14012] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.646631][T14012] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.646766][T14012] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.646905][T14012] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.647038][T14012] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.647207][T14012] ? move_addr_to_kernel (net/socket.c:2511) [ 926.647340][T14012] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.647476][T14012] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.647624][T14012] ___sys_sendmsg (net/socket.c:2641) [ 926.647767][T14012] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.647921][T14012] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.648060][T14012] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.648197][T14012] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.648335][T14012] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.648479][T14012] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.648616][T14012] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.648753][T14012] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.648904][T14012] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.649048][T14012] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.649182][T14012] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.649352][T14012] RIP: 0033:0x7f63fd7d1c5e [ 926.649501][T14012] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.650009][T14012] RSP: 002b:00007ffd4c08c1b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.650215][T14012] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f63fd7d1c5e [ 926.650430][T14012] RDX: 0000000000000000 RSI: 00007ffd4c08c270 RDI: 0000000000000005 [ 926.650640][T14012] RBP: 00007ffd4c08c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 926.650837][T14012] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.651045][T14012] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 926.728498][T14018] ------------[ cut here ]------------ | [ 926.728714][T14018] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14018 | [ 926.729236][T14018] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.730144][T14018] Tainted: [W]=WARN [ 926.730303][T14018] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.730538][T14018] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.730758][T14018] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.731331][T14018] RSP: 0018:ffa00000027c75d0 EFLAGS: 00010286 [ 926.731575][T14018] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1857 [ 926.731865][T14018] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c2b8 [ 926.732137][T14018] RBP: 1ff40000004f8ebb R08: 1fe22000036f1858 R09: fffa3bfffffb0b24 [ 926.732402][T14018] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78c3f4 [ 926.732648][T14018] R13: ff1100001b78c3c0 R14: ffffffff931c7940 R15: ff1100001b78c200 [ 926.732928][T14018] FS: 00007fa86c9fa440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 926.733215][T14018] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.733448][T14018] CR2: 000000000044f720 CR3: 000000001c3a2002 CR4: 0000000000771ef0 [ 926.733717][T14018] PKRU: 55555554 [ 926.733876][T14018] Call Trace: [ 926.734042][T14018] [ 926.734164][T14018] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.734357][T14018] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.734559][T14018] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.734744][T14018] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.734941][T14018] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.735133][T14018] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.735321][T14018] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.735515][T14018] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.735709][T14018] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.735912][T14018] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.736107][T14018] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.736294][T14018] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.736494][T14018] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.736688][T14018] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.736870][T14018] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.737070][T14018] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.737255][T14018] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.737445][T14018] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.737630][T14018] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.737843][T14018] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.738054][T14018] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.738249][T14018] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.738449][T14018] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.738680][T14018] ? move_addr_to_kernel (net/socket.c:2511) [ 926.738875][T14018] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.739082][T14018] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.739267][T14018] ___sys_sendmsg (net/socket.c:2641) [ 926.739460][T14018] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.739661][T14018] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.739850][T14018] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.740051][T14018] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.740237][T14018] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.740440][T14018] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.740628][T14018] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.740817][T14018] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.741012][T14018] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.741196][T14018] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.741392][T14018] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.741615][T14018] RIP: 0033:0x7fa86cb54c5e [ 926.741805][T14018] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.742335][T14018] RSP: 002b:00007fff782f1fd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.742596][T14018] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa86cb54c5e [ 926.742857][T14018] RDX: 0000000000000000 RSI: 00007fff782f2090 RDI: 0000000000000005 [ 926.743125][T14018] RBP: 00007fff782f1fe0 R08: 0000000000000000 R09: 0000000000000000 [ 926.743392][T14018] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.743667][T14018] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 926.804430][T14022] ------------[ cut here ]------------ | [ 926.804622][T14022] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14022 | [ 926.804921][T14022] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.805800][T14022] Tainted: [W]=WARN [ 926.806278][T14022] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.806506][T14022] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.806700][T14022] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.807259][T14022] RSP: 0018:ffa00000027b75d0 EFLAGS: 00010286 [ 926.807481][T14022] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387532f [ 926.807739][T14022] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9978 [ 926.807998][T14022] RBP: 1ff40000004f6ebb R08: 1fe2200003875330 R09: fffa3bfffffb0b24 [ 926.808250][T14022] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8e74 [ 926.808521][T14022] R13: ff1100001c3a8e40 R14: ffffffff931c7940 R15: ff1100001c3a98c0 [ 926.808790][T14022] FS: 00007f73b5b99440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 926.809095][T14022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.809314][T14022] CR2: 000000000044f720 CR3: 000000001c3a2004 CR4: 0000000000771ef0 [ 926.809570][T14022] PKRU: 55555554 [ 926.809736][T14022] Call Trace: [ 926.809911][T14022] [ 926.810041][T14022] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.810241][T14022] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.810459][T14022] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.810649][T14022] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.810835][T14022] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.811061][T14022] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.811267][T14022] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.811485][T14022] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.811696][T14022] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.811883][T14022] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.812082][T14022] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.812262][T14022] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.812478][T14022] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.812670][T14022] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.812862][T14022] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.813065][T14022] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.813258][T14022] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.813457][T14022] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.813654][T14022] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.813840][T14022] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.814093][T14022] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.814291][T14022] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.814478][T14022] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.814691][T14022] ? move_addr_to_kernel (net/socket.c:2511) [ 926.814905][T14022] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.815107][T14022] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.815308][T14022] ___sys_sendmsg (net/socket.c:2641) [ 926.815508][T14022] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.815703][T14022] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.815915][T14022] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.816115][T14022] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.816299][T14022] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.816498][T14022] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.816690][T14022] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.816887][T14022] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.817095][T14022] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.817296][T14022] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.817501][T14022] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.817729][T14022] RIP: 0033:0x7f73b5cf3c5e [ 926.817939][T14022] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.818480][T14022] RSP: 002b:00007ffffebb5d70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.818725][T14022] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f73b5cf3c5e [ 926.818979][T14022] RDX: 0000000000000000 RSI: 00007ffffebb5e30 RDI: 0000000000000005 [ 926.819224][T14022] RBP: 00007ffffebb5d80 R08: 0000000000000000 R09: 0000000000000000 [ 926.819475][T14022] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.819717][T14022] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 926.944327][T14037] ------------[ cut here ]------------ | [ 926.944562][T14037] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14037 | [ 926.944872][T14037] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 926.945817][T14037] Tainted: [W]=WARN [ 926.945983][T14037] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 926.946235][T14037] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 926.946444][T14037] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 926.947532][T14037] RSP: 0018:ffa00000021ef5d0 EFLAGS: 00010286 [ 926.947760][T14037] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038752f7 [ 926.948033][T14037] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a97b8 [ 926.948323][T14037] RBP: 1ff400000043debb R08: 1fe22000038752f8 R09: fffa3bfffffb0b37 [ 926.948582][T14037] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9e34 [ 926.948859][T14037] R13: ff1100001c3a9e00 R14: ffffffff931c7940 R15: ff1100001c3a9700 [ 926.949129][T14037] FS: 00007ff71a130440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 926.949426][T14037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.949678][T14037] CR2: 000000000044f720 CR3: 000000001a2cb002 CR4: 0000000000771ef0 [ 926.949947][T14037] PKRU: 55555554 [ 926.950099][T14037] Call Trace: [ 926.950249][T14037] [ 926.950378][T14037] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 926.950582][T14037] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 926.950801][T14037] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 926.951016][T14037] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.951201][T14037] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.951388][T14037] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 926.951584][T14037] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 926.951780][T14037] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 926.951987][T14037] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 926.952187][T14037] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 926.952382][T14037] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 926.952578][T14037] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 926.952771][T14037] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 926.952979][T14037] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 926.953168][T14037] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 926.953360][T14037] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 926.953559][T14037] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.953755][T14037] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 926.953965][T14037] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 926.954156][T14037] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 926.954355][T14037] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 926.954558][T14037] ? copy_msghdr_from_user (net/socket.c:2525) [ 926.954747][T14037] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 926.954979][T14037] ? move_addr_to_kernel (net/socket.c:2511) [ 926.955173][T14037] ? filemap_map_folio_range (mm/filemap.c:3873) [ 926.955363][T14037] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 926.955576][T14037] ___sys_sendmsg (net/socket.c:2641) [ 926.955782][T14037] ? copy_msghdr_from_user (net/socket.c:2628) [ 926.955993][T14037] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 926.956192][T14037] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 926.956410][T14037] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 926.956603][T14037] ? __sys_sendmsg_sock (net/socket.c:2656) [ 926.956801][T14037] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 926.957005][T14037] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.957197][T14037] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 926.957404][T14037] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 926.957595][T14037] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 926.957789][T14037] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 926.958022][T14037] RIP: 0033:0x7ff71a28ac5e [ 926.958220][T14037] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 926.958780][T14037] RSP: 002b:00007fffba5ae440 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 926.959068][T14037] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff71a28ac5e [ 926.959326][T14037] RDX: 0000000000000000 RSI: 00007fffba5ae500 RDI: 0000000000000005 [ 926.959594][T14037] RBP: 00007fffba5ae450 R08: 0000000000000000 R09: 0000000000000000 [ 926.959859][T14037] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 926.960130][T14037] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 927.027552][T14041] ------------[ cut here ]------------ | [ 927.027757][T14041] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14041 | [ 927.028676][T14041] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.029867][T14041] Tainted: [W]=WARN [ 927.030139][T14041] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.030480][T14041] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.030785][T14041] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.031474][T14041] RSP: 0018:ffa00000028875d0 EFLAGS: 00010286 [ 927.031761][T14041] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000011ac687 [ 927.032111][T14041] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000008d63438 [ 927.032460][T14041] RBP: 1ff4000000510ebb R08: 1fe22000011ac688 R09: fffa3bfffffb0b37 [ 927.032777][T14041] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff11000008d63574 [ 927.033087][T14041] R13: ff11000008d63540 R14: ffffffff931c7940 R15: ff11000008d63380 [ 927.033458][T14041] FS: 00007fc0b6510440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 927.033823][T14041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.034061][T14041] CR2: 000000000044f720 CR3: 000000000daac006 CR4: 0000000000771ef0 [ 927.034307][T14041] PKRU: 55555554 [ 927.034469][T14041] Call Trace: [ 927.034618][T14041] [ 927.034736][T14041] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.034949][T14041] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.035166][T14041] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.035375][T14041] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.035640][T14041] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.035858][T14041] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.036050][T14041] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.036285][T14041] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.036483][T14041] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.036696][T14041] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.036919][T14041] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.037106][T14041] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.037291][T14041] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.037498][T14041] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.037691][T14041] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.037888][T14041] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.038114][T14041] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.038316][T14041] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.038528][T14041] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.038733][T14041] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.038940][T14041] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.039136][T14041] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.039326][T14041] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.039577][T14041] ? move_addr_to_kernel (net/socket.c:2511) [ 927.039763][T14041] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.039982][T14041] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.040169][T14041] ___sys_sendmsg (net/socket.c:2641) [ 927.040365][T14041] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.040567][T14041] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.040760][T14041] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.040964][T14041] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.041156][T14041] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.041349][T14041] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.041550][T14041] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.041742][T14041] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.041953][T14041] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.042143][T14041] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.042334][T14041] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.042574][T14041] RIP: 0033:0x7fc0b666ac5e [ 927.042772][T14041] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.043342][T14041] RSP: 002b:00007ffd3817f000 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.043603][T14041] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc0b666ac5e [ 927.043850][T14041] RDX: 0000000000000000 RSI: 00007ffd3817f0c0 RDI: 0000000000000005 [ 927.044122][T14041] RBP: 00007ffd3817f010 R08: 0000000000000000 R09: 0000000000000000 [ 927.044377][T14041] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.044644][T14041] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 927.125719][T14047] ------------[ cut here ]------------ | [ 927.125880][T14047] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14047 | [ 927.126152][T14047] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.126940][T14047] Tainted: [W]=WARN [ 927.127048][T14047] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.127220][T14047] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.127362][T14047] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.127872][T14047] RSP: 0018:ffa00000028975d0 EFLAGS: 00010286 [ 927.128046][T14047] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000011ac48f [ 927.128251][T14047] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000008d62478 [ 927.128472][T14047] RBP: 1ff4000000512ebb R08: 1fe22000011ac490 R09: fffa3bfffffb0b37 [ 927.128684][T14047] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff11000008d63e34 [ 927.128907][T14047] R13: ff11000008d63e00 R14: ffffffff931c7940 R15: ff11000008d623c0 [ 927.129119][T14047] FS: 00007fce1c33f440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 927.129362][T14047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.129544][T14047] CR2: 000000000044f720 CR3: 0000000017ddc006 CR4: 0000000000771ef0 [ 927.129753][T14047] PKRU: 55555554 [ 927.129857][T14047] Call Trace: [ 927.129968][T14047] [ 927.130040][T14047] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.130180][T14047] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.130329][T14047] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.130473][T14047] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.130613][T14047] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.130755][T14047] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.130906][T14047] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.131054][T14047] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.131198][T14047] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.131344][T14047] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.131493][T14047] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.131630][T14047] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.131770][T14047] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.131911][T14047] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.132046][T14047] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.132186][T14047] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.132324][T14047] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.132468][T14047] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.132605][T14047] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.132744][T14047] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.132883][T14047] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.133454][T14047] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.133593][T14047] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.133765][T14047] ? move_addr_to_kernel (net/socket.c:2511) [ 927.133908][T14047] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.134052][T14047] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.134197][T14047] ___sys_sendmsg (net/socket.c:2641) [ 927.134334][T14047] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.134479][T14047] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.134620][T14047] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.134762][T14047] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.134904][T14047] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.135044][T14047] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.135181][T14047] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.135319][T14047] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.135461][T14047] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.135605][T14047] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.135746][T14047] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.135926][T14047] RIP: 0033:0x7fce1c499c5e [ 927.136074][T14047] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.136575][T14047] RSP: 002b:00007ffd93171970 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.136789][T14047] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fce1c499c5e [ 927.137005][T14047] RDX: 0000000000000000 RSI: 00007ffd93171a30 RDI: 0000000000000005 [ 927.137213][T14047] RBP: 00007ffd93171980 R08: 0000000000000000 R09: 0000000000000000 [ 927.137433][T14047] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.137653][T14047] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 927.214933][T14051] ------------[ cut here ]------------ | [ 927.215104][T14051] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14051 | [ 927.215359][T14051] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.216202][T14051] Tainted: [W]=WARN [ 927.216311][T14051] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.216521][T14051] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.216669][T14051] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.217178][T14051] RSP: 0018:ffa00000028975d0 EFLAGS: 00010286 [ 927.217360][T14051] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000215e9a7 [ 927.217577][T14051] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000010af4d38 [ 927.217786][T14051] RBP: 1ff4000000512ebb R08: 1fe220000215e9a8 R09: fffa3bfffffb0b37 [ 927.218001][T14051] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff11000010af4e74 [ 927.218211][T14051] R13: ff11000010af4e40 R14: ffffffff931c7940 R15: ff11000010af4c80 [ 927.218426][T14051] FS: 00007f519b3e6440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 927.218669][T14051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.218843][T14051] CR2: 000000000044f720 CR3: 00000000105c7005 CR4: 0000000000771ef0 [ 927.219058][T14051] PKRU: 55555554 [ 927.219164][T14051] Call Trace: [ 927.219268][T14051] [ 927.219340][T14051] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.219484][T14051] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.219630][T14051] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.219770][T14051] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.219910][T14051] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.220049][T14051] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.220179][T14051] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.220313][T14051] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.220451][T14051] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.220583][T14051] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.220717][T14051] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.220847][T14051] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.221198][T14051] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.221342][T14051] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.221484][T14051] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.221622][T14051] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.221763][T14051] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.221903][T14051] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.222035][T14051] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.222167][T14051] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.222300][T14051] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.222437][T14051] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.222568][T14051] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.222881][T14051] ? move_addr_to_kernel (net/socket.c:2511) [ 927.223018][T14051] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.223149][T14051] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.223281][T14051] ___sys_sendmsg (net/socket.c:2641) [ 927.223426][T14051] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.223564][T14051] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.223713][T14051] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.223857][T14051] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.224019][T14051] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.224154][T14051] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.224289][T14051] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.224431][T14051] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.224583][T14051] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.224722][T14051] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.224860][T14051] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.225041][T14051] RIP: 0033:0x7f519b540c5e [ 927.225189][T14051] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.225694][T14051] RSP: 002b:00007fff2c885980 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.225902][T14051] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f519b540c5e [ 927.226100][T14051] RDX: 0000000000000000 RSI: 00007fff2c885a40 RDI: 0000000000000005 [ 927.226329][T14051] RBP: 00007fff2c885990 R08: 0000000000000000 R09: 0000000000000000 [ 927.226554][T14051] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.226763][T14051] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 927.308187][T14057] ------------[ cut here ]------------ | [ 927.308355][T14057] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14057 | [ 927.308610][T14057] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.309424][T14057] Tainted: [W]=WARN [ 927.309526][T14057] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.309725][T14057] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.309873][T14057] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.310371][T14057] RSP: 0018:ffa00000028f75d0 EFLAGS: 00010286 [ 927.310556][T14057] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea064f [ 927.310759][T14057] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503278 [ 927.310971][T14057] RBP: 1ff400000051eebb R08: 1fe2200001ea0650 R09: fffa3bfffffb0b37 [ 927.311173][T14057] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502cb4 [ 927.311371][T14057] R13: ff1100000f502c80 R14: ffffffff931c7940 R15: ff1100000f5031c0 [ 927.311579][T14057] FS: 00007f41372b6440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 927.311823][T14057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.312023][T14057] CR2: 000000000044f720 CR3: 0000000017f38001 CR4: 0000000000771ef0 [ 927.312261][T14057] PKRU: 55555554 [ 927.312365][T14057] Call Trace: [ 927.312489][T14057] [ 927.312561][T14057] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.312728][T14057] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.312884][T14057] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.313061][T14057] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.313196][T14057] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.313334][T14057] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.313479][T14057] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.313616][T14057] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.313753][T14057] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.313891][T14057] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.314035][T14057] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.314169][T14057] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.314304][T14057] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.314451][T14057] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.314582][T14057] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.314714][T14057] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.314846][T14057] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.315388][T14057] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.315549][T14057] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.315683][T14057] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.315818][T14057] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.315976][T14057] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.316110][T14057] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.316275][T14057] ? move_addr_to_kernel (net/socket.c:2511) [ 927.316420][T14057] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.316561][T14057] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.316697][T14057] ___sys_sendmsg (net/socket.c:2641) [ 927.316829][T14057] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.316973][T14057] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.317128][T14057] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.317264][T14057] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.317413][T14057] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.317554][T14057] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.317697][T14057] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.317834][T14057] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.317979][T14057] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.318119][T14057] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.318264][T14057] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.318440][T14057] RIP: 0033:0x7f4137410c5e [ 927.318582][T14057] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.319066][T14057] RSP: 002b:00007ffcdca08320 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.319265][T14057] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4137410c5e [ 927.319469][T14057] RDX: 0000000000000000 RSI: 00007ffcdca083e0 RDI: 0000000000000005 [ 927.319684][T14057] RBP: 00007ffcdca08330 R08: 0000000000000000 R09: 0000000000000000 [ 927.319936][T14057] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.320160][T14057] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 927.388299][T14061] ------------[ cut here ]------------ | [ 927.388516][T14061] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14061 | [ 927.388823][T14061] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.389699][T14061] Tainted: [W]=WARN [ 927.389856][T14061] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.390084][T14061] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.390283][T14061] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.390822][T14061] RSP: 0018:ffa00000028875d0 EFLAGS: 00010286 [ 927.391057][T14061] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea04c7 [ 927.391301][T14061] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502638 [ 927.391556][T14061] RBP: 1ff4000000510ebb R08: 1fe2200001ea04c8 R09: fffa3bfffffb0b37 [ 927.391804][T14061] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502774 [ 927.392266][T14061] R13: ff1100000f502740 R14: ffffffff931c7940 R15: ff1100000f502580 [ 927.392599][T14061] FS: 00007f10caad9440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 927.392943][T14061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.393196][T14061] CR2: 000000000044f720 CR3: 000000000d968004 CR4: 0000000000771ef0 [ 927.393476][T14061] PKRU: 55555554 [ 927.393636][T14061] Call Trace: [ 927.393795][T14061] [ 927.393937][T14061] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.394134][T14061] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.394342][T14061] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.394612][T14061] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.394814][T14061] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.395029][T14061] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.395231][T14061] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.395441][T14061] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.395634][T14061] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.395825][T14061] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.396047][T14061] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.396237][T14061] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.396436][T14061] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.396641][T14061] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.396843][T14061] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.397051][T14061] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.397254][T14061] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.397450][T14061] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.397640][T14061] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.397828][T14061] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.398032][T14061] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.398233][T14061] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.398433][T14061] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.398662][T14061] ? move_addr_to_kernel (net/socket.c:2511) [ 927.398853][T14061] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.399057][T14061] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.399259][T14061] ___sys_sendmsg (net/socket.c:2641) [ 927.399465][T14061] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.399661][T14061] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.399860][T14061] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.400061][T14061] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.400250][T14061] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.400465][T14061] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.400674][T14061] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.400876][T14061] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.401089][T14061] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.401295][T14061] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.401506][T14061] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.401727][T14061] RIP: 0033:0x7f10cac33c5e [ 927.401943][T14061] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.402521][T14061] RSP: 002b:00007ffffa02f0f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.402790][T14061] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f10cac33c5e [ 927.403062][T14061] RDX: 0000000000000000 RSI: 00007ffffa02f1b0 RDI: 0000000000000005 [ 927.403317][T14061] RBP: 00007ffffa02f100 R08: 0000000000000000 R09: 0000000000000000 [ 927.403581][T14061] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.403861][T14061] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 927.486174][T14067] ------------[ cut here ]------------ | [ 927.486380][T14067] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14067 | [ 927.486675][T14067] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.487944][T14067] Tainted: [W]=WARN [ 927.488119][T14067] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.488377][T14067] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.488612][T14067] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.489249][T14067] RSP: 0018:ffa00000028e75d0 EFLAGS: 00010286 [ 927.489529][T14067] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c22f7 [ 927.489790][T14067] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6117b8 [ 927.490083][T14067] RBP: 1ff400000051cebb R08: 1fe22000034c22f8 R09: fffa3bfffffb0b37 [ 927.490331][T14067] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a6118f4 [ 927.490626][T14067] R13: ff1100001a6118c0 R14: ffffffff931c7940 R15: ff1100001a611700 [ 927.490887][T14067] FS: 00007fdf4bf05440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 927.491195][T14067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.491429][T14067] CR2: 000000000044f720 CR3: 000000000f694001 CR4: 0000000000771ef0 [ 927.491692][T14067] PKRU: 55555554 [ 927.491846][T14067] Call Trace: [ 927.492014][T14067] [ 927.492136][T14067] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.492326][T14067] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.492535][T14067] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.492727][T14067] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.492926][T14067] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.493122][T14067] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.493309][T14067] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.493509][T14067] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.493702][T14067] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.493907][T14067] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.494099][T14067] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.494286][T14067] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.494480][T14067] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.494664][T14067] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.494846][T14067] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.495046][T14067] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.495246][T14067] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.495438][T14067] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.495625][T14067] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.495809][T14067] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.496017][T14067] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.496203][T14067] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.496387][T14067] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.496610][T14067] ? move_addr_to_kernel (net/socket.c:2511) [ 927.496795][T14067] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.496994][T14067] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.497188][T14067] ___sys_sendmsg (net/socket.c:2641) [ 927.497383][T14067] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.497579][T14067] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.497766][T14067] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.497963][T14067] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.498147][T14067] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.498333][T14067] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.498525][T14067] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.498714][T14067] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.498911][T14067] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.499093][T14067] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.499277][T14067] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.499503][T14067] RIP: 0033:0x7fdf4c05fc5e [ 927.499695][T14067] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.500228][T14067] RSP: 002b:00007ffe3a18b1f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.500486][T14067] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fdf4c05fc5e [ 927.500731][T14067] RDX: 0000000000000000 RSI: 00007ffe3a18b2b0 RDI: 0000000000000005 [ 927.500989][T14067] RBP: 00007ffe3a18b200 R08: 0000000000000000 R09: 0000000000000000 [ 927.501239][T14067] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.501492][T14067] R13: 0000000069cbe7e6 R14: 0000000000000004 R15: 000000000049d620 | [ 927.570926][T14071] ------------[ cut here ]------------ | [ 927.571132][T14071] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14071 | [ 927.571424][T14071] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.573086][T14071] Tainted: [W]=WARN [ 927.573259][T14071] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.573488][T14071] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.573699][T14071] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.574316][T14071] RSP: 0018:ffa00000028575d0 EFLAGS: 00010286 [ 927.574593][T14071] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000215e937 [ 927.574887][T14071] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000010af49b8 [ 927.575155][T14071] RBP: 1ff400000050aebb R08: 1fe220000215e938 R09: fffa3bfffffb0b37 [ 927.575408][T14071] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff11000010af5574 [ 927.575667][T14071] R13: ff11000010af5540 R14: ffffffff931c7940 R15: ff11000010af4900 [ 927.575948][T14071] FS: 00007fcc6c9bd440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 927.576234][T14071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.576458][T14071] CR2: 000000000044f720 CR3: 000000000f694003 CR4: 0000000000771ef0 [ 927.576707][T14071] PKRU: 55555554 [ 927.576857][T14071] Call Trace: [ 927.577020][T14071] [ 927.577137][T14071] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.577320][T14071] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.577520][T14071] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.577704][T14071] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.577887][T14071] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.578088][T14071] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.578284][T14071] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.578523][T14071] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.578710][T14071] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.578907][T14071] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.579097][T14071] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.579278][T14071] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.579471][T14071] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.579656][T14071] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.579837][T14071] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.580036][T14071] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.580220][T14071] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.580410][T14071] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.580594][T14071] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.580779][T14071] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.580979][T14071] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.581163][T14071] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.581350][T14071] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.581571][T14071] ? move_addr_to_kernel (net/socket.c:2511) [ 927.581756][T14071] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.581946][T14071] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.582135][T14071] ___sys_sendmsg (net/socket.c:2641) [ 927.582318][T14071] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.582511][T14071] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.582701][T14071] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.582886][T14071] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.583083][T14071] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.583271][T14071] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.583461][T14071] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.583656][T14071] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.583843][T14071] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.584041][T14071] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.584230][T14071] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.584452][T14071] RIP: 0033:0x7fcc6cb17c5e [ 927.584642][T14071] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.585182][T14071] RSP: 002b:00007ffea6e79cd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.585461][T14071] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcc6cb17c5e [ 927.585724][T14071] RDX: 0000000000000000 RSI: 00007ffea6e79d90 RDI: 0000000000000005 [ 927.586003][T14071] RBP: 00007ffea6e79ce0 R08: 0000000000000000 R09: 0000000000000000 [ 927.586291][T14071] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.586593][T14071] R13: 0000000069cbe7e7 R14: 0000000000000004 R15: 000000000049d620 | [ 927.661325][T14077] ------------[ cut here ]------------ | [ 927.661506][T14077] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14077 | [ 927.661748][T14077] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.662561][T14077] Tainted: [W]=WARN [ 927.662662][T14077] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.662834][T14077] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.662984][T14077] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.663468][T14077] RSP: 0018:ffa00000021ef5d0 EFLAGS: 00010286 [ 927.663640][T14077] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000215e8ff [ 927.663872][T14077] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff11000010af47f8 [ 927.664086][T14077] RBP: 1ff400000043debb R08: 1fe220000215e900 R09: fffa3bfffffb0b37 [ 927.664294][T14077] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff11000010af5034 [ 927.664513][T14077] R13: ff11000010af5000 R14: ffffffff931c7940 R15: ff11000010af4740 [ 927.664738][T14077] FS: 00007fca05906440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 927.664996][T14077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.665171][T14077] CR2: 000000000044f720 CR3: 000000000d968001 CR4: 0000000000771ef0 [ 927.665384][T14077] PKRU: 55555554 [ 927.665495][T14077] Call Trace: [ 927.665607][T14077] [ 927.665678][T14077] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.665822][T14077] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.665981][T14077] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.666125][T14077] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.666266][T14077] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.666411][T14077] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.666565][T14077] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.666702][T14077] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.666836][T14077] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.666976][T14077] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.667118][T14077] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.667248][T14077] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.667385][T14077] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.667530][T14077] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.667700][T14077] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.667880][T14077] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.668062][T14077] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.668236][T14077] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.668373][T14077] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.668536][T14077] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.668670][T14077] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.668801][T14077] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.668938][T14077] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.669104][T14077] ? move_addr_to_kernel (net/socket.c:2511) [ 927.669242][T14077] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.669385][T14077] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.669522][T14077] ___sys_sendmsg (net/socket.c:2641) [ 927.669659][T14077] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.669797][T14077] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.669943][T14077] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.670096][T14077] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.670241][T14077] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.670379][T14077] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.670518][T14077] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.670680][T14077] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.670812][T14077] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.670955][T14077] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.671123][T14077] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.671321][T14077] RIP: 0033:0x7fca05a60c5e [ 927.671497][T14077] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.671998][T14077] RSP: 002b:00007ffe1c9b1430 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.672209][T14077] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fca05a60c5e [ 927.672423][T14077] RDX: 0000000000000000 RSI: 00007ffe1c9b14f0 RDI: 0000000000000005 [ 927.672636][T14077] RBP: 00007ffe1c9b1440 R08: 0000000000000000 R09: 0000000000000000 [ 927.672847][T14077] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.673061][T14077] R13: 0000000069cbe7e7 R14: 0000000000000004 R15: 000000000049d620 | [ 927.739380][T14081] ------------[ cut here ]------------ | [ 927.739561][T14081] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14081 | [ 927.739805][T14081] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.740976][T14081] Tainted: [W]=WARN [ 927.741077][T14081] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.741254][T14081] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.741398][T14081] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.741968][T14081] RSP: 0018:ffa00000028f75d0 EFLAGS: 00010286 [ 927.742137][T14081] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000035524c7 [ 927.742477][T14081] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001aa92638 [ 927.742675][T14081] RBP: 1ff400000051eebb R08: 1fe22000035524c8 R09: fffa3bfffffb0b37 [ 927.742870][T14081] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001aa923f4 [ 927.743076][T14081] R13: ff1100001aa923c0 R14: ffffffff931c7940 R15: ff1100001aa92580 [ 927.743272][T14081] FS: 00007f536cf13440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 927.743508][T14081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.743672][T14081] CR2: 000000000044f720 CR3: 000000001a1d5003 CR4: 0000000000771ef0 [ 927.743874][T14081] PKRU: 55555554 [ 927.743978][T14081] Call Trace: [ 927.744075][T14081] [ 927.744141][T14081] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.744276][T14081] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.744441][T14081] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.744589][T14081] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.744729][T14081] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.744864][T14081] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.744999][T14081] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.745131][T14081] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.745260][T14081] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.745416][T14081] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.745555][T14081] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.745683][T14081] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.745816][T14081] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.745957][T14081] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.746093][T14081] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.746229][T14081] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.746370][T14081] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.746518][T14081] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.746666][T14081] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.746807][T14081] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.746950][T14081] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.747093][T14081] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.747229][T14081] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.747407][T14081] ? move_addr_to_kernel (net/socket.c:2511) [ 927.747550][T14081] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.747694][T14081] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.747845][T14081] ___sys_sendmsg (net/socket.c:2641) [ 927.747988][T14081] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.748126][T14081] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.748275][T14081] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.748529][T14081] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.748660][T14081] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.748793][T14081] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.748929][T14081] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.749077][T14081] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.749229][T14081] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.749358][T14081] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.749498][T14081] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.749665][T14081] RIP: 0033:0x7f536d06dc5e [ 927.749812][T14081] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.750299][T14081] RSP: 002b:00007ffcfd3ce960 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.750515][T14081] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f536d06dc5e [ 927.750726][T14081] RDX: 0000000000000000 RSI: 00007ffcfd3cea20 RDI: 0000000000000005 [ 927.750939][T14081] RBP: 00007ffcfd3ce970 R08: 0000000000000000 R09: 0000000000000000 [ 927.751181][T14081] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.751390][T14081] R13: 0000000069cbe7e7 R14: 0000000000000004 R15: 000000000049d620 | [ 927.835771][T14087] ------------[ cut here ]------------ | [ 927.835949][T14087] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14087 | [ 927.836178][T14087] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.837368][T14087] Tainted: [W]=WARN [ 927.837473][T14087] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.837642][T14087] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.837795][T14087] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.838348][T14087] RSP: 0018:ffa00000028e75d0 EFLAGS: 00010286 [ 927.838520][T14087] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000355256f [ 927.838715][T14087] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001aa92b78 [ 927.838920][T14087] RBP: 1ff400000051cebb R08: 1fe2200003552570 R09: fffa3bfffffb0b37 [ 927.839115][T14087] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001aa92934 [ 927.839310][T14087] R13: ff1100001aa92900 R14: ffffffff931c7940 R15: ff1100001aa92ac0 [ 927.839516][T14087] FS: 00007ff0169cb440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 927.839753][T14087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.839923][T14087] CR2: 000000000044f720 CR3: 000000000c428005 CR4: 0000000000771ef0 [ 927.840121][T14087] PKRU: 55555554 [ 927.840221][T14087] Call Trace: [ 927.840324][T14087] [ 927.840391][T14087] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.840529][T14087] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.840668][T14087] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.840800][T14087] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.840936][T14087] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.841070][T14087] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.841199][T14087] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.841331][T14087] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.841468][T14087] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.841600][T14087] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.841737][T14087] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.841869][T14087] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.842005][T14087] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.842140][T14087] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.842269][T14087] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.842426][T14087] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.842561][T14087] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.842693][T14087] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.842827][T14087] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.842966][T14087] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.843101][T14087] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.843233][T14087] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.843364][T14087] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.843531][T14087] ? move_addr_to_kernel (net/socket.c:2511) [ 927.843672][T14087] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.843806][T14087] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.843942][T14087] ___sys_sendmsg (net/socket.c:2641) [ 927.844076][T14087] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.844211][T14087] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.844347][T14087] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.844483][T14087] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.844614][T14087] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.844750][T14087] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.844881][T14087] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.845019][T14087] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.845150][T14087] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.845281][T14087] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.845418][T14087] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.845582][T14087] RIP: 0033:0x7ff016b25c5e [ 927.845721][T14087] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.846199][T14087] RSP: 002b:00007ffd014e48c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.846402][T14087] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff016b25c5e [ 927.846601][T14087] RDX: 0000000000000000 RSI: 00007ffd014e4980 RDI: 0000000000000005 [ 927.846802][T14087] RBP: 00007ffd014e48d0 R08: 0000000000000000 R09: 0000000000000000 [ 927.847004][T14087] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.847198][T14087] R13: 0000000069cbe7e7 R14: 0000000000000004 R15: 000000000049d620 | [ 927.920422][T14091] ------------[ cut here ]------------ | [ 927.920590][T14091] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14091 | [ 927.920838][T14091] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 927.921980][T14091] Tainted: [W]=WARN [ 927.922085][T14091] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 927.922262][T14091] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 927.922414][T14091] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 927.922920][T14091] RSP: 0018:ffa00000028c75d0 EFLAGS: 00010286 [ 927.923101][T14091] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f19df [ 927.923313][T14091] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cef8 [ 927.923532][T14091] RBP: 1ff4000000518ebb R08: 1fe22000036f19e0 R09: fffa3bfffffb0b37 [ 927.923743][T14091] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d574 [ 927.923962][T14091] R13: ff1100001b78d540 R14: ffffffff931c7940 R15: ff1100001b78ce40 [ 927.924175][T14091] FS: 00007fb4948e0440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 927.924434][T14091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.924610][T14091] CR2: 000000000044f720 CR3: 000000001a5c8001 CR4: 0000000000771ef0 [ 927.924825][T14091] PKRU: 55555554 [ 927.924938][T14091] Call Trace: [ 927.925042][T14091] [ 927.925114][T14091] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 927.925259][T14091] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 927.925411][T14091] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 927.925554][T14091] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.925695][T14091] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.925839][T14091] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 927.925984][T14091] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 927.926124][T14091] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 927.926263][T14091] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 927.926405][T14091] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 927.926550][T14091] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 927.926686][T14091] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 927.926828][T14091] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 927.926973][T14091] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 927.927111][T14091] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 927.927251][T14091] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 927.927389][T14091] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.927541][T14091] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 927.927679][T14091] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 927.927818][T14091] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 927.927969][T14091] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 927.928108][T14091] ? copy_msghdr_from_user (net/socket.c:2525) [ 927.928248][T14091] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 927.928433][T14091] ? move_addr_to_kernel (net/socket.c:2511) [ 927.928572][T14091] ? filemap_map_folio_range (mm/filemap.c:3873) [ 927.928717][T14091] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 927.928858][T14091] ___sys_sendmsg (net/socket.c:2641) [ 927.929008][T14091] ? copy_msghdr_from_user (net/socket.c:2628) [ 927.929156][T14091] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 927.929316][T14091] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 927.929469][T14091] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 927.929605][T14091] ? __sys_sendmsg_sock (net/socket.c:2656) [ 927.929740][T14091] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 927.929882][T14091] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.930020][T14091] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 927.930153][T14091] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 927.930283][T14091] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 927.930420][T14091] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 927.930586][T14091] RIP: 0033:0x7fb494a3ac5e [ 927.930740][T14091] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 927.931248][T14091] RSP: 002b:00007ffd039fb720 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 927.931479][T14091] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb494a3ac5e [ 927.931694][T14091] RDX: 0000000000000000 RSI: 00007ffd039fb7e0 RDI: 0000000000000005 [ 927.931906][T14091] RBP: 00007ffd039fb730 R08: 0000000000000000 R09: 0000000000000000 [ 927.932129][T14091] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 927.932351][T14091] R13: 0000000069cbe7e7 R14: 0000000000000004 R15: 000000000049d620 | [ 928.011832][T14097] ------------[ cut here ]------------ | [ 928.012012][T14097] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14097 | [ 928.012256][T14097] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 928.013045][T14097] Tainted: [W]=WARN [ 928.013148][T14097] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 928.013323][T14097] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 928.013499][T14097] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 928.014016][T14097] RSP: 0018:ffa00000028f75d0 EFLAGS: 00010286 [ 928.014209][T14097] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1af7 [ 928.014420][T14097] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d7b8 [ 928.014622][T14097] RBP: 1ff400000051eebb R08: 1fe22000036f1af8 R09: fffa3bfffffb0b37 [ 928.014829][T14097] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d034 [ 928.015040][T14097] R13: ff1100001b78d000 R14: ffffffff931c7940 R15: ff1100001b78d700 [ 928.015248][T14097] FS: 00007f38bab4d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 928.015507][T14097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.015681][T14097] CR2: 000000000044f720 CR3: 000000000c428003 CR4: 0000000000771ef0 [ 928.015910][T14097] PKRU: 55555554 [ 928.016017][T14097] Call Trace: [ 928.016122][T14097] [ 928.016194][T14097] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 928.016331][T14097] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 928.016487][T14097] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 928.016624][T14097] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 928.016759][T14097] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 928.017344][T14097] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 928.017518][T14097] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 928.017661][T14097] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 928.017798][T14097] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 928.017958][T14097] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 928.018117][T14097] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 928.018260][T14097] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 928.018408][T14097] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 928.018551][T14097] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 928.018694][T14097] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 928.018833][T14097] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 928.018974][T14097] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 928.019112][T14097] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 928.019252][T14097] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 928.019389][T14097] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 928.019544][T14097] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 928.019680][T14097] ? copy_msghdr_from_user (net/socket.c:2525) [ 928.019822][T14097] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 928.020005][T14097] ? move_addr_to_kernel (net/socket.c:2511) [ 928.020148][T14097] ? filemap_map_folio_range (mm/filemap.c:3873) [ 928.020296][T14097] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 928.020447][T14097] ___sys_sendmsg (net/socket.c:2641) [ 928.020583][T14097] ? copy_msghdr_from_user (net/socket.c:2628) [ 928.020723][T14097] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 928.020866][T14097] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 928.021009][T14097] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 928.021148][T14097] ? __sys_sendmsg_sock (net/socket.c:2656) [ 928.021287][T14097] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 928.021430][T14097] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 928.021566][T14097] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 928.021704][T14097] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 928.021839][T14097] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 928.021980][T14097] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 928.022152][T14097] RIP: 0033:0x7f38baca7c5e [ 928.022299][T14097] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 928.022796][T14097] RSP: 002b:00007ffe283c83d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 928.023020][T14097] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f38baca7c5e [ 928.023234][T14097] RDX: 0000000000000000 RSI: 00007ffe283c8490 RDI: 0000000000000005 [ 928.023450][T14097] RBP: 00007ffe283c83e0 R08: 0000000000000000 R09: 0000000000000000 [ 928.023662][T14097] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 928.023878][T14097] R13: 0000000069cbe7e7 R14: 0000000000000004 R15: 000000000049d620 | [ 928.094177][T14101] ------------[ cut here ]------------ | [ 928.094366][T14101] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14101 | [ 928.094627][T14101] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 928.095443][T14101] Tainted: [W]=WARN [ 928.095549][T14101] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 928.095838][T14101] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 928.095992][T14101] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 928.096489][T14101] RSP: 0018:ffa00000028f75d0 EFLAGS: 00010286 [ 928.096669][T14101] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387501f [ 928.096873][T14101] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a80f8 [ 928.097083][T14101] RBP: 1ff400000051eebb R08: 1fe2200003875020 R09: fffa3bfffffb0b37 [ 928.097286][T14101] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a83f4 [ 928.097501][T14101] R13: ff1100001c3a83c0 R14: ffffffff931c7940 R15: ff1100001c3a8040 [ 928.097708][T14101] FS: 00007f45f7cf0440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 928.097968][T14101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.098140][T14101] CR2: 000000000044f720 CR3: 0000000017f3b002 CR4: 0000000000771ef0 [ 928.098344][T14101] PKRU: 55555554 [ 928.098452][T14101] Call Trace: [ 928.098554][T14101] [ 928.098624][T14101] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 928.098768][T14101] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 928.098923][T14101] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 928.099069][T14101] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 928.099204][T14101] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 928.099350][T14101] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 928.099492][T14101] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 928.099628][T14101] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 928.099771][T14101] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 928.099950][T14101] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 928.100101][T14101] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 928.100247][T14101] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 928.100403][T14101] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 928.100551][T14101] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 928.100701][T14101] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 928.100858][T14101] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 928.101009][T14101] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 928.101165][T14101] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 928.101319][T14101] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 928.101478][T14101] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 928.101629][T14101] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 928.101777][T14101] ? copy_msghdr_from_user (net/socket.c:2525) [ 928.101930][T14101] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 928.102112][T14101] ? move_addr_to_kernel (net/socket.c:2511) [ 928.102258][T14101] ? filemap_map_folio_range (mm/filemap.c:3873) [ 928.102473][T14101] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 928.102621][T14101] ___sys_sendmsg (net/socket.c:2641) [ 928.102768][T14101] ? copy_msghdr_from_user (net/socket.c:2628) [ 928.102934][T14101] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 928.103090][T14101] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 928.103238][T14101] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 928.103382][T14101] ? __sys_sendmsg_sock (net/socket.c:2656) [ 928.103535][T14101] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 928.103680][T14101] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 928.103825][T14101] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 928.103975][T14101] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 928.104121][T14101] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 928.104265][T14101] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 928.104449][T14101] RIP: 0033:0x7f45f7e4ac5e [ 928.104602][T14101] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 928.105120][T14101] RSP: 002b:00007ffebde414d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 928.105338][T14101] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f45f7e4ac5e [ 928.105560][T14101] RDX: 0000000000000000 RSI: 00007ffebde41590 RDI: 0000000000000005 [ 928.105783][T14101] RBP: 00007ffebde414e0 R08: 0000000000000000 R09: 0000000000000000 [ 928.106002][T14101] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 928.106219][T14101] R13: 0000000069cbe7e7 R14: 0000000000000004 R15: 000000000049d620 | [ 930.784337][T14326] ------------[ cut here ]------------ | [ 930.784533][T14326] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14326 | [ 930.784783][T14326] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 930.785615][T14326] Tainted: [W]=WARN [ 930.785719][T14326] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 930.785929][T14326] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 930.786083][T14326] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 930.786589][T14326] RSP: 0018:ffa00000031d75d0 EFLAGS: 00010286 [ 930.786769][T14326] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c208f [ 930.786995][T14326] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610478 [ 930.787233][T14326] RBP: 1ff400000063aebb R08: 1fe22000034c2090 R09: fffa3bfffffb0b24 [ 930.787456][T14326] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6105b4 [ 930.787661][T14326] R13: ff1100001a610580 R14: ffffffff931c7940 R15: ff1100001a6103c0 [ 930.787862][T14326] FS: 00007f7a7ce26440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 930.788141][T14326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 930.788327][T14326] CR2: 000000000044f720 CR3: 0000000010313002 CR4: 0000000000771ef0 [ 930.788545][T14326] PKRU: 55555554 [ 930.788658][T14326] Call Trace: [ 930.788764][T14326] [ 930.788837][T14326] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 930.788989][T14326] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 930.789144][T14326] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 930.789279][T14326] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 930.789424][T14326] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.789563][T14326] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 930.789699][T14326] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 930.789837][T14326] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 930.790116][T14326] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 930.790258][T14326] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 930.790404][T14326] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 930.790541][T14326] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 930.790684][T14326] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 930.790854][T14326] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 930.791004][T14326] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 930.791140][T14326] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 930.791280][T14326] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.791443][T14326] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 930.791581][T14326] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 930.791720][T14326] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 930.791862][T14326] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 930.792013][T14326] ? copy_msghdr_from_user (net/socket.c:2525) [ 930.792149][T14326] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 930.792315][T14326] ? move_addr_to_kernel (net/socket.c:2511) [ 930.792455][T14326] ? filemap_map_folio_range (mm/filemap.c:3873) [ 930.792588][T14326] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.792742][T14326] ___sys_sendmsg (net/socket.c:2641) [ 930.792880][T14326] ? copy_msghdr_from_user (net/socket.c:2628) [ 930.793028][T14326] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 930.793172][T14326] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 930.793318][T14326] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 930.793467][T14326] ? __sys_sendmsg_sock (net/socket.c:2656) [ 930.793609][T14326] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 930.793749][T14326] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 930.793888][T14326] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 930.794033][T14326] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 930.794176][T14326] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 930.794320][T14326] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 930.794501][T14326] RIP: 0033:0x7f7a7cf80c5e [ 930.794652][T14326] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 930.795153][T14326] RSP: 002b:00007ffff8e04a50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 930.795366][T14326] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7a7cf80c5e [ 930.795580][T14326] RDX: 0000000000000000 RSI: 00007ffff8e04b10 RDI: 0000000000000005 [ 930.795788][T14326] RBP: 00007ffff8e04a60 R08: 0000000000000000 R09: 0000000000000000 [ 930.796007][T14326] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 930.796213][T14326] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 930.864577][T14330] ------------[ cut here ]------------ | [ 930.864758][T14330] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14330 | [ 930.865461][T14330] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 930.866268][T14330] Tainted: [W]=WARN [ 930.866375][T14330] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 930.866580][T14330] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 930.866728][T14330] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 930.867238][T14330] RSP: 0018:ffa00000031375d0 EFLAGS: 00010286 [ 930.867430][T14330] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0537 [ 930.867643][T14330] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5029b8 [ 930.867856][T14330] RBP: 1ff4000000626ebb R08: 1fe2200001ea0538 R09: fffa3bfffffb0b24 [ 930.868078][T14330] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611c74 [ 930.868289][T14330] R13: ff1100001a611c40 R14: ffffffff931c7940 R15: ff1100000f502900 [ 930.868513][T14330] FS: 00007fd3cde7b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 930.868768][T14330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 930.868955][T14330] CR2: 000000000044f720 CR3: 000000000c52d005 CR4: 0000000000771ef0 [ 930.869167][T14330] PKRU: 55555554 [ 930.869276][T14330] Call Trace: [ 930.869382][T14330] [ 930.869467][T14330] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 930.869607][T14330] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 930.869756][T14330] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 930.869908][T14330] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 930.870047][T14330] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.870189][T14330] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 930.870329][T14330] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 930.870475][T14330] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 930.870614][T14330] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 930.870751][T14330] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 930.870887][T14330] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 930.871033][T14330] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 930.871172][T14330] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 930.871316][T14330] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 930.871461][T14330] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 930.871599][T14330] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 930.871742][T14330] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.871884][T14330] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 930.872038][T14330] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 930.872178][T14330] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 930.872321][T14330] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 930.872472][T14330] ? copy_msghdr_from_user (net/socket.c:2525) [ 930.872616][T14330] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 930.872788][T14330] ? move_addr_to_kernel (net/socket.c:2511) [ 930.872939][T14330] ? filemap_map_folio_range (mm/filemap.c:3873) [ 930.873082][T14330] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.873216][T14330] ___sys_sendmsg (net/socket.c:2641) [ 930.873354][T14330] ? copy_msghdr_from_user (net/socket.c:2628) [ 930.873500][T14330] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 930.873644][T14330] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 930.873780][T14330] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 930.873923][T14330] ? __sys_sendmsg_sock (net/socket.c:2656) [ 930.874058][T14330] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 930.874193][T14330] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 930.874341][T14330] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 930.874479][T14330] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 930.874611][T14330] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 930.874745][T14330] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 930.874919][T14330] RIP: 0033:0x7fd3cdfd5c5e [ 930.875068][T14330] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 930.875573][T14330] RSP: 002b:00007fff033257f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 930.875784][T14330] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd3cdfd5c5e [ 930.875996][T14330] RDX: 0000000000000000 RSI: 00007fff033258b0 RDI: 0000000000000005 [ 930.876206][T14330] RBP: 00007fff03325800 R08: 0000000000000000 R09: 0000000000000000 [ 930.876419][T14330] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 930.876627][T14330] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 930.969628][T14336] ------------[ cut here ]------------ | [ 930.969812][T14336] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14336 | [ 930.970070][T14336] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 930.970877][T14336] Tainted: [W]=WARN [ 930.970990][T14336] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 930.971168][T14336] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 930.971323][T14336] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 930.971836][T14336] RSP: 0018:ffa00000030375d0 EFLAGS: 00010286 [ 930.972017][T14336] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea056f [ 930.972223][T14336] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502b78 [ 930.972431][T14336] RBP: 1ff4000000606ebb R08: 1fe2200001ea0570 R09: fffa3bfffffb0b24 [ 930.972631][T14336] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502234 [ 930.972833][T14336] R13: ff1100000f502200 R14: ffffffff931c7940 R15: ff1100000f502ac0 [ 930.973449][T14336] FS: 00007fc0916cd440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 930.973709][T14336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 930.973886][T14336] CR2: 000000000044f720 CR3: 000000001924e002 CR4: 0000000000771ef0 [ 930.974103][T14336] PKRU: 55555554 [ 930.974210][T14336] Call Trace: [ 930.974317][T14336] [ 930.974394][T14336] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 930.974540][T14336] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 930.974687][T14336] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 930.974831][T14336] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 930.974973][T14336] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.975108][T14336] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 930.975239][T14336] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 930.975371][T14336] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 930.975509][T14336] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 930.975643][T14336] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 930.975779][T14336] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 930.975919][T14336] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 930.976051][T14336] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 930.976189][T14336] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 930.976325][T14336] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 930.976476][T14336] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 930.976610][T14336] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.976750][T14336] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 930.976890][T14336] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 930.977035][T14336] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 930.977178][T14336] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 930.977316][T14336] ? copy_msghdr_from_user (net/socket.c:2525) [ 930.977460][T14336] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 930.977629][T14336] ? move_addr_to_kernel (net/socket.c:2511) [ 930.977770][T14336] ? filemap_map_folio_range (mm/filemap.c:3873) [ 930.977910][T14336] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 930.978054][T14336] ___sys_sendmsg (net/socket.c:2641) [ 930.978189][T14336] ? copy_msghdr_from_user (net/socket.c:2628) [ 930.978326][T14336] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 930.978466][T14336] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 930.978599][T14336] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 930.978732][T14336] ? __sys_sendmsg_sock (net/socket.c:2656) [ 930.978868][T14336] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 930.979004][T14336] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 930.979137][T14336] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 930.979268][T14336] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 930.979403][T14336] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 930.979537][T14336] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 930.979701][T14336] RIP: 0033:0x7fc091827c5e [ 930.979841][T14336] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 930.980311][T14336] RSP: 002b:00007fff79797820 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 930.980523][T14336] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc091827c5e [ 930.980721][T14336] RDX: 0000000000000000 RSI: 00007fff797978e0 RDI: 0000000000000005 [ 930.980923][T14336] RBP: 00007fff79797830 R08: 0000000000000000 R09: 0000000000000000 [ 930.981120][T14336] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 930.981332][T14336] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 931.039461][T14340] ------------[ cut here ]------------ | [ 931.039630][T14340] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14340 | [ 931.039866][T14340] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.040942][T14340] Tainted: [W]=WARN [ 931.041045][T14340] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.041212][T14340] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.041355][T14340] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.041840][T14340] RSP: 0018:ffa00000031c75d0 EFLAGS: 00010286 [ 931.042016][T14340] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea064f [ 931.042212][T14340] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503278 [ 931.042411][T14340] RBP: 1ff4000000638ebb R08: 1fe2200001ea0650 R09: fffa3bfffffb0b24 [ 931.042607][T14340] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502cb4 [ 931.042803][T14340] R13: ff1100000f502c80 R14: ffffffff931c7940 R15: ff1100000f5031c0 [ 931.043003][T14340] FS: 00007f7547f58440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 931.043234][T14340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.043405][T14340] CR2: 000000000044f720 CR3: 000000001082f005 CR4: 0000000000771ef0 [ 931.043606][T14340] PKRU: 55555554 [ 931.043709][T14340] Call Trace: [ 931.043809][T14340] [ 931.043877][T14340] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.044016][T14340] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.044155][T14340] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.044304][T14340] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.044443][T14340] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.044580][T14340] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.044711][T14340] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.044841][T14340] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.044978][T14340] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.045108][T14340] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.045242][T14340] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.045371][T14340] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.045511][T14340] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.045642][T14340] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.045773][T14340] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.045909][T14340] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.046041][T14340] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.046172][T14340] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.046304][T14340] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.046441][T14340] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.046575][T14340] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.046734][T14340] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.046879][T14340] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.047055][T14340] ? move_addr_to_kernel (net/socket.c:2511) [ 931.047192][T14340] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.047330][T14340] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.047475][T14340] ___sys_sendmsg (net/socket.c:2641) [ 931.047610][T14340] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.047754][T14340] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.047902][T14340] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.048044][T14340] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.048185][T14340] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.048334][T14340] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.048473][T14340] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.048604][T14340] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.048742][T14340] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.048877][T14340] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.049013][T14340] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.049176][T14340] RIP: 0033:0x7f75480b2c5e [ 931.049314][T14340] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.049796][T14340] RSP: 002b:00007ffd679bb330 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.050020][T14340] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f75480b2c5e [ 931.050230][T14340] RDX: 0000000000000000 RSI: 00007ffd679bb3f0 RDI: 0000000000000005 [ 931.050449][T14340] RBP: 00007ffd679bb340 R08: 0000000000000000 R09: 0000000000000000 [ 931.050657][T14340] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.050860][T14340] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 931.134430][T14346] ------------[ cut here ]------------ | [ 931.134649][T14346] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14346 | [ 931.134943][T14346] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.135838][T14346] Tainted: [W]=WARN [ 931.136003][T14346] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.136220][T14346] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.136420][T14346] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.136950][T14346] RSP: 0018:ffa00000031d75d0 EFLAGS: 00010286 [ 931.137172][T14346] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1bd7 [ 931.137425][T14346] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78deb8 [ 931.137676][T14346] RBP: 1ff400000063aebb R08: 1fe22000036f1bd8 R09: fffa3bfffffb0b24 [ 931.137933][T14346] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d8f4 [ 931.138178][T14346] R13: ff1100001b78d8c0 R14: ffffffff931c7940 R15: ff1100001b78de00 [ 931.138435][T14346] FS: 00007f2a4b083440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 931.138725][T14346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.138954][T14346] CR2: 000000000044f720 CR3: 000000001037c001 CR4: 0000000000771ef0 [ 931.139203][T14346] PKRU: 55555554 [ 931.139352][T14346] Call Trace: [ 931.139521][T14346] [ 931.139646][T14346] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.139834][T14346] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.140041][T14346] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.140227][T14346] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.140415][T14346] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.140601][T14346] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.140783][T14346] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.140979][T14346] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.141162][T14346] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.141346][T14346] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.141540][T14346] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.141723][T14346] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.141922][T14346] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.142106][T14346] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.142287][T14346] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.142478][T14346] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.142661][T14346] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.142847][T14346] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.143053][T14346] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.143254][T14346] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.143448][T14346] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.143640][T14346] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.143824][T14346] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.144050][T14346] ? move_addr_to_kernel (net/socket.c:2511) [ 931.144248][T14346] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.144438][T14346] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.144634][T14346] ___sys_sendmsg (net/socket.c:2641) [ 931.144833][T14346] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.145040][T14346] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.145232][T14346] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.145432][T14346] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.145622][T14346] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.145819][T14346] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.146016][T14346] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.146208][T14346] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.146402][T14346] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.146590][T14346] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.146776][T14346] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.147006][T14346] RIP: 0033:0x7f2a4b1ddc5e [ 931.147198][T14346] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.147754][T14346] RSP: 002b:00007ffe7f380620 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.148025][T14346] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2a4b1ddc5e [ 931.148282][T14346] RDX: 0000000000000000 RSI: 00007ffe7f3806e0 RDI: 0000000000000005 [ 931.148541][T14346] RBP: 00007ffe7f380630 R08: 0000000000000000 R09: 0000000000000000 [ 931.148787][T14346] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.149043][T14346] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 931.230052][T14350] ------------[ cut here ]------------ | [ 931.230289][T14350] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14350 | [ 931.230607][T14350] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.231550][T14350] Tainted: [W]=WARN [ 931.231706][T14350] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.231950][T14350] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.232152][T14350] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.232725][T14350] RSP: 0018:ffa00000032075d0 EFLAGS: 00010286 [ 931.232973][T14350] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1937 [ 931.233227][T14350] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c9b8 [ 931.233507][T14350] RBP: 1ff4000000640ebb R08: 1fe22000036f1938 R09: fffa3bfffffb0b24 [ 931.233756][T14350] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78dab4 [ 931.234014][T14350] R13: ff1100001b78da80 R14: ffffffff931c7940 R15: ff1100001b78c900 [ 931.234269][T14350] FS: 00007fac62666440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 931.234578][T14350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.234807][T14350] CR2: 000000000044f720 CR3: 000000001037c005 CR4: 0000000000771ef0 [ 931.235089][T14350] PKRU: 55555554 [ 931.235241][T14350] Call Trace: [ 931.235404][T14350] [ 931.235528][T14350] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.235721][T14350] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.236324][T14350] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.236521][T14350] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.236705][T14350] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.236908][T14350] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.237091][T14350] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.237281][T14350] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.237476][T14350] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.237663][T14350] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.237853][T14350] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.238046][T14350] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.238232][T14350] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.238425][T14350] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.238609][T14350] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.238800][T14350] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.238999][T14350] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.239205][T14350] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.239413][T14350] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.239618][T14350] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.239806][T14350] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.240020][T14350] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.240221][T14350] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.240461][T14350] ? move_addr_to_kernel (net/socket.c:2511) [ 931.240688][T14350] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.240941][T14350] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.241172][T14350] ___sys_sendmsg (net/socket.c:2641) [ 931.241404][T14350] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.241593][T14350] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.241781][T14350] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.241984][T14350] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.242172][T14350] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.242357][T14350] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.242553][T14350] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.242742][T14350] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.242943][T14350] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.243129][T14350] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.243351][T14350] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.243580][T14350] RIP: 0033:0x7fac627c0c5e [ 931.243792][T14350] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.244384][T14350] RSP: 002b:00007ffc80a3b920 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.244654][T14350] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fac627c0c5e [ 931.244919][T14350] RDX: 0000000000000000 RSI: 00007ffc80a3b9e0 RDI: 0000000000000005 [ 931.245175][T14350] RBP: 00007ffc80a3b930 R08: 0000000000000000 R09: 0000000000000000 [ 931.245433][T14350] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.245687][T14350] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 931.314817][T14356] ------------[ cut here ]------------ | [ 931.315197][T14356] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14356 | [ 931.315450][T14356] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.316260][T14356] Tainted: [W]=WARN [ 931.316366][T14356] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.316543][T14356] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.316685][T14356] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.317170][T14356] RSP: 0018:ffa00000032275d0 EFLAGS: 00010286 [ 931.317341][T14356] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1a87 [ 931.317543][T14356] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d438 [ 931.317743][T14356] RBP: 1ff4000000644ebb R08: 1fe22000036f1a88 R09: fffa3bfffffb0b24 [ 931.317944][T14356] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d1f4 [ 931.318141][T14356] R13: ff1100001b78d1c0 R14: ffffffff931c7940 R15: ff1100001b78d380 [ 931.318342][T14356] FS: 00007f7aed39b440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 931.318584][T14356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.318755][T14356] CR2: 000000000044f720 CR3: 00000000102e6003 CR4: 0000000000771ef0 [ 931.319014][T14356] PKRU: 55555554 [ 931.319121][T14356] Call Trace: [ 931.319230][T14356] [ 931.319298][T14356] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.319444][T14356] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.319587][T14356] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.319731][T14356] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.319878][T14356] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.320018][T14356] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.320153][T14356] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.320289][T14356] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.320426][T14356] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.320561][T14356] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.320699][T14356] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.320833][T14356] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.320973][T14356] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.321108][T14356] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.321240][T14356] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.321372][T14356] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.321512][T14356] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.321646][T14356] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.321797][T14356] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.321947][T14356] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.322082][T14356] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.322217][T14356] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.322376][T14356] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.322571][T14356] ? move_addr_to_kernel (net/socket.c:2511) [ 931.322728][T14356] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.322881][T14356] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.323044][T14356] ___sys_sendmsg (net/socket.c:2641) [ 931.323200][T14356] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.323369][T14356] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.323527][T14356] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.323680][T14356] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.323837][T14356] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.324002][T14356] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.324144][T14356] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.324281][T14356] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.324443][T14356] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.324583][T14356] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.324717][T14356] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.324883][T14356] RIP: 0033:0x7f7aed4f5c5e [ 931.325029][T14356] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.325553][T14356] RSP: 002b:00007ffe7bd44840 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.325758][T14356] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7aed4f5c5e [ 931.325967][T14356] RDX: 0000000000000000 RSI: 00007ffe7bd44900 RDI: 0000000000000005 [ 931.326168][T14356] RBP: 00007ffe7bd44850 R08: 0000000000000000 R09: 0000000000000000 [ 931.326366][T14356] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.326573][T14356] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 931.401937][T14360] ------------[ cut here ]------------ | [ 931.402109][T14360] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14360 | [ 931.402361][T14360] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.403166][T14360] Tainted: [W]=WARN [ 931.403275][T14360] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.403457][T14360] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.403607][T14360] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.404118][T14360] RSP: 0018:ffa00000031c75d0 EFLAGS: 00010286 [ 931.404292][T14360] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038750c7 [ 931.404501][T14360] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8638 [ 931.404710][T14360] RBP: 1ff4000000638ebb R08: 1fe22000038750c8 R09: fffa3bfffffb0b24 [ 931.404930][T14360] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9e34 [ 931.405144][T14360] R13: ff1100001c3a9e00 R14: ffffffff931c7940 R15: ff1100001c3a8580 [ 931.405357][T14360] FS: 00007fee327bf440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 931.405604][T14360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.405807][T14360] CR2: 000000000044f720 CR3: 000000001ade0004 CR4: 0000000000771ef0 [ 931.406035][T14360] PKRU: 55555554 [ 931.406140][T14360] Call Trace: [ 931.406248][T14360] [ 931.406324][T14360] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.406469][T14360] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.406611][T14360] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.406747][T14360] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.406881][T14360] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.407371][T14360] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.407510][T14360] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.407645][T14360] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.407778][T14360] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.407920][T14360] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.408056][T14360] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.408188][T14360] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.408321][T14360] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.408460][T14360] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.408591][T14360] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.408723][T14360] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.408857][T14360] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.408998][T14360] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.409132][T14360] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.409279][T14360] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.409428][T14360] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.409571][T14360] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.409709][T14360] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.409888][T14360] ? move_addr_to_kernel (net/socket.c:2511) [ 931.410042][T14360] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.410182][T14360] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.410324][T14360] ___sys_sendmsg (net/socket.c:2641) [ 931.410468][T14360] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.410615][T14360] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.410770][T14360] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.410924][T14360] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.411072][T14360] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.411220][T14360] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.411368][T14360] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.411514][T14360] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.411656][T14360] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.411794][T14360] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.411939][T14360] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.412124][T14360] RIP: 0033:0x7fee32919c5e [ 931.412281][T14360] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.412823][T14360] RSP: 002b:00007ffc15018fc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.413063][T14360] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fee32919c5e [ 931.413293][T14360] RDX: 0000000000000000 RSI: 00007ffc15019080 RDI: 0000000000000005 [ 931.413524][T14360] RBP: 00007ffc15018fd0 R08: 0000000000000000 R09: 0000000000000000 [ 931.413784][T14360] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.414011][T14360] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 931.483034][T14366] ------------[ cut here ]------------ | [ 931.483222][T14366] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14366 | [ 931.483472][T14366] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.484248][T14366] Tainted: [W]=WARN [ 931.484350][T14366] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.484524][T14366] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.484669][T14366] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.485151][T14366] RSP: 0018:ffa00000031d75d0 EFLAGS: 00010286 [ 931.485325][T14366] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003875287 [ 931.485533][T14366] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9438 [ 931.485762][T14366] RBP: 1ff400000063aebb R08: 1fe2200003875288 R09: fffa3bfffffb0b24 [ 931.485974][T14366] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8cb4 [ 931.486177][T14366] R13: ff1100001c3a8c80 R14: ffffffff931c7940 R15: ff1100001c3a9380 [ 931.486381][T14366] FS: 00007f0e67aae440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 931.486629][T14366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.486800][T14366] CR2: 000000000044f720 CR3: 000000000c71c001 CR4: 0000000000771ef0 [ 931.487006][T14366] PKRU: 55555554 [ 931.487108][T14366] Call Trace: [ 931.487210][T14366] [ 931.487289][T14366] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.487434][T14366] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.487575][T14366] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.487709][T14366] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.487843][T14366] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.487994][T14366] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.488134][T14366] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.488277][T14366] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.488428][T14366] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.488570][T14366] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.488714][T14366] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.488855][T14366] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.489087][T14366] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.489230][T14366] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.489369][T14366] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.489510][T14366] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.489648][T14366] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.489782][T14366] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.489988][T14366] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.490123][T14366] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.490274][T14366] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.490412][T14366] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.490568][T14366] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.490735][T14366] ? move_addr_to_kernel (net/socket.c:2511) [ 931.490876][T14366] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.491080][T14366] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.491216][T14366] ___sys_sendmsg (net/socket.c:2641) [ 931.491348][T14366] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.491491][T14366] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.491628][T14366] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.491765][T14366] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.492154][T14366] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.492299][T14366] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.492444][T14366] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.492588][T14366] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.492730][T14366] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.492870][T14366] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.493090][T14366] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.493265][T14366] RIP: 0033:0x7f0e67c08c5e [ 931.493425][T14366] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.493992][T14366] RSP: 002b:00007ffedefd6c80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.494200][T14366] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0e67c08c5e [ 931.494418][T14366] RDX: 0000000000000000 RSI: 00007ffedefd6d40 RDI: 0000000000000005 [ 931.494619][T14366] RBP: 00007ffedefd6c90 R08: 0000000000000000 R09: 0000000000000000 [ 931.494817][T14366] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.495091][T14366] R13: 0000000069cbe7ea R14: 0000000000000004 R15: 000000000049d620 | [ 931.568655][T14370] ------------[ cut here ]------------ | [ 931.568847][T14370] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14370 | [ 931.569106][T14370] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.569930][T14370] Tainted: [W]=WARN [ 931.570033][T14370] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.570235][T14370] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.570403][T14370] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.570907][T14370] RSP: 0018:ffa00000032775d0 EFLAGS: 00010286 [ 931.571090][T14370] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192ea4f [ 931.571302][T14370] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975278 [ 931.571522][T14370] RBP: 1ff400000064eebb R08: 1fe220000192ea50 R09: fffa3bfffffb0b24 [ 931.571736][T14370] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975034 [ 931.571951][T14370] R13: ff1100000c975000 R14: ffffffff931c7940 R15: ff1100000c9751c0 [ 931.572165][T14370] FS: 00007fd1aa986440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 931.572422][T14370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.572603][T14370] CR2: 000000000044f720 CR3: 000000001acf9006 CR4: 0000000000771ef0 [ 931.572815][T14370] PKRU: 55555554 [ 931.572926][T14370] Call Trace: [ 931.573030][T14370] [ 931.573099][T14370] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.573240][T14370] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.573385][T14370] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.573525][T14370] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.573664][T14370] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.573805][T14370] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.573945][T14370] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.574127][T14370] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.574266][T14370] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.574472][T14370] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.574613][T14370] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.574745][T14370] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.574883][T14370] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.575024][T14370] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.575161][T14370] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.575306][T14370] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.575477][T14370] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.575612][T14370] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.575750][T14370] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.575887][T14370] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.576033][T14370] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.576168][T14370] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.576303][T14370] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.576476][T14370] ? move_addr_to_kernel (net/socket.c:2511) [ 931.576612][T14370] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.576752][T14370] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.577015][T14370] ___sys_sendmsg (net/socket.c:2641) [ 931.577154][T14370] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.577301][T14370] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.577443][T14370] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.577578][T14370] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.577732][T14370] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.577875][T14370] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.578025][T14370] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.578165][T14370] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.578302][T14370] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.578442][T14370] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.578601][T14370] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.578771][T14370] RIP: 0033:0x7fd1aaae0c5e [ 931.578920][T14370] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.579410][T14370] RSP: 002b:00007fff1bbd1660 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.579647][T14370] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd1aaae0c5e [ 931.579858][T14370] RDX: 0000000000000000 RSI: 00007fff1bbd1720 RDI: 0000000000000005 [ 931.580076][T14370] RBP: 00007fff1bbd1670 R08: 0000000000000000 R09: 0000000000000000 [ 931.580299][T14370] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.580514][T14370] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 931.653335][T14376] ------------[ cut here ]------------ | [ 931.653528][T14376] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14376 | [ 931.653795][T14376] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.654648][T14376] Tainted: [W]=WARN [ 931.654757][T14376] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.654944][T14376] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.655100][T14376] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.655612][T14376] RSP: 0018:ffa00000031375d0 EFLAGS: 00010286 [ 931.655798][T14376] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eaf7 [ 931.656026][T14376] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 931.656237][T14376] RBP: 1ff4000000626ebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b24 [ 931.656455][T14376] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975574 [ 931.656670][T14376] R13: ff1100000c975540 R14: ffffffff931c7940 R15: ff1100000c975700 [ 931.656887][T14376] FS: 00007fe5ffc6d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 931.657144][T14376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.657323][T14376] CR2: 000000000044f720 CR3: 0000000019be1005 CR4: 0000000000771ef0 [ 931.657542][T14376] PKRU: 55555554 [ 931.657651][T14376] Call Trace: [ 931.657760][T14376] [ 931.657833][T14376] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.657986][T14376] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.658137][T14376] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.658278][T14376] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.658427][T14376] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.658573][T14376] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.658713][T14376] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.658858][T14376] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.659019][T14376] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.659162][T14376] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.659305][T14376] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.659452][T14376] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.659596][T14376] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.659743][T14376] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.659886][T14376] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.660034][T14376] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.660177][T14376] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.660320][T14376] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.660471][T14376] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.660613][T14376] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.660757][T14376] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.660905][T14376] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.661049][T14376] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.661223][T14376] ? move_addr_to_kernel (net/socket.c:2511) [ 931.661366][T14376] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.661510][T14376] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.661659][T14376] ___sys_sendmsg (net/socket.c:2641) [ 931.661800][T14376] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.661949][T14376] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.662103][T14376] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.662248][T14376] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.662399][T14376] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.662545][T14376] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.662687][T14376] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.662830][T14376] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.662981][T14376] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.663122][T14376] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.663261][T14376] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.663435][T14376] RIP: 0033:0x7fe5ffdc7c5e [ 931.663579][T14376] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.664076][T14376] RSP: 002b:00007ffe94b50d70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.664283][T14376] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe5ffdc7c5e [ 931.664490][T14376] RDX: 0000000000000000 RSI: 00007ffe94b50e30 RDI: 0000000000000005 [ 931.664690][T14376] RBP: 00007ffe94b50d80 R08: 0000000000000000 R09: 0000000000000000 [ 931.664907][T14376] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.665118][T14376] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 931.736567][T14380] ------------[ cut here ]------------ | [ 931.736735][T14380] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14380 | [ 931.736984][T14380] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.737769][T14380] Tainted: [W]=WARN [ 931.737876][T14380] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.738055][T14380] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.738203][T14380] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.738686][T14380] RSP: 0018:ffa00000031375d0 EFLAGS: 00010286 [ 931.738867][T14380] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229ddf [ 931.739074][T14380] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914eef8 [ 931.739274][T14380] RBP: 1ff4000000626ebb R08: 1fe2200003229de0 R09: fffa3bfffffb0b24 [ 931.739482][T14380] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914ecb4 [ 931.739682][T14380] R13: ff1100001914ec80 R14: ffffffff931c7940 R15: ff1100001914ee40 [ 931.739886][T14380] FS: 00007ffb4a07e440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 931.740128][T14380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.740296][T14380] CR2: 000000000044f720 CR3: 000000001ad93002 CR4: 0000000000771ef0 [ 931.740502][T14380] PKRU: 55555554 [ 931.740602][T14380] Call Trace: [ 931.740702][T14380] [ 931.740771][T14380] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.740911][T14380] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.741053][T14380] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.741189][T14380] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.741321][T14380] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.741474][T14380] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.741607][T14380] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.741742][T14380] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.741875][T14380] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.742015][T14380] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.742153][T14380] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.742290][T14380] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.742432][T14380] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.742569][T14380] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.742705][T14380] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.742848][T14380] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.742991][T14380] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.743125][T14380] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.743259][T14380] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.743397][T14380] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.743541][T14380] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.743682][T14380] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.743821][T14380] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.744003][T14380] ? move_addr_to_kernel (net/socket.c:2511) [ 931.744144][T14380] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.744283][T14380] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.744429][T14380] ___sys_sendmsg (net/socket.c:2641) [ 931.744567][T14380] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.744712][T14380] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.744855][T14380] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.745004][T14380] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.745145][T14380] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.745287][T14380] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.745430][T14380] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.745574][T14380] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.745715][T14380] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.745854][T14380] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.746000][T14380] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.746172][T14380] RIP: 0033:0x7ffb4a1d8c5e [ 931.746319][T14380] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.746843][T14380] RSP: 002b:00007ffe685250d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.747064][T14380] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ffb4a1d8c5e [ 931.747273][T14380] RDX: 0000000000000000 RSI: 00007ffe68525190 RDI: 0000000000000005 [ 931.747572][T14380] RBP: 00007ffe685250e0 R08: 0000000000000000 R09: 0000000000000000 [ 931.747778][T14380] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.748068][T14380] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 931.817859][T14386] ------------[ cut here ]------------ | [ 931.818058][T14386] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14386 | [ 931.818314][T14386] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.819112][T14386] Tainted: [W]=WARN [ 931.819217][T14386] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.819402][T14386] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.819548][T14386] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.821093][T14386] RSP: 0018:ffa00000032475d0 EFLAGS: 00010286 [ 931.821268][T14386] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229e87 [ 931.821476][T14386] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f438 [ 931.821678][T14386] RBP: 1ff4000000648ebb R08: 1fe2200003229e88 R09: fffa3bfffffb0b24 [ 931.821890][T14386] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f1f4 [ 931.822153][T14386] R13: ff1100001914f1c0 R14: ffffffff931c7940 R15: ff1100001914f380 [ 931.822363][T14386] FS: 00007f91b8752440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 931.822608][T14386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.822779][T14386] CR2: 000000000044f720 CR3: 000000001958b002 CR4: 0000000000771ef0 [ 931.823058][T14386] PKRU: 55555554 [ 931.823161][T14386] Call Trace: [ 931.823261][T14386] [ 931.823330][T14386] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.823482][T14386] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.823629][T14386] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.823776][T14386] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.823990][T14386] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.824125][T14386] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.824264][T14386] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.824409][T14386] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.824552][T14386] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.824694][T14386] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.824835][T14386] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.825047][T14386] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.825181][T14386] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.825317][T14386] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.825457][T14386] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.825590][T14386] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.825724][T14386] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.825859][T14386] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.826072][T14386] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.826207][T14386] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.826342][T14386] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.826481][T14386] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.826614][T14386] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.826780][T14386] ? move_addr_to_kernel (net/socket.c:2511) [ 931.826996][T14386] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.827135][T14386] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.827277][T14386] ___sys_sendmsg (net/socket.c:2641) [ 931.827420][T14386] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.827565][T14386] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.827708][T14386] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.827849][T14386] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.828057][T14386] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.828200][T14386] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.828341][T14386] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.828484][T14386] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.828628][T14386] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.828767][T14386] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.828983][T14386] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.829147][T14386] RIP: 0033:0x7f91b88acc5e [ 931.829288][T14386] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.829769][T14386] RSP: 002b:00007ffefb13f5d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.830052][T14386] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f91b88acc5e [ 931.830254][T14386] RDX: 0000000000000000 RSI: 00007ffefb13f690 RDI: 0000000000000005 [ 931.830460][T14386] RBP: 00007ffefb13f5e0 R08: 0000000000000000 R09: 0000000000000000 [ 931.830660][T14386] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.830860][T14386] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 931.910758][T14390] ------------[ cut here ]------------ | [ 931.911178][T14390] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14390 | [ 931.911466][T14390] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 931.912258][T14390] Tainted: [W]=WARN [ 931.912361][T14390] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.912537][T14390] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 931.912682][T14390] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 931.913181][T14390] RSP: 0018:ffa00000032c75d0 EFLAGS: 00010286 [ 931.913355][T14390] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c20ff [ 931.913597][T14390] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6107f8 [ 931.913817][T14390] RBP: 1ff4000000658ebb R08: 1fe22000034c2100 R09: fffa3bfffffb0b24 [ 931.914071][T14390] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611c74 [ 931.914288][T14390] R13: ff1100001a611c40 R14: ffffffff931c7940 R15: ff1100001a610740 [ 931.914511][T14390] FS: 00007ff8e7b90440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 931.914760][T14390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.914950][T14390] CR2: 000000000044f720 CR3: 00000000193e2002 CR4: 0000000000771ef0 [ 931.915167][T14390] PKRU: 55555554 [ 931.915274][T14390] Call Trace: [ 931.915379][T14390] [ 931.915466][T14390] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 931.915609][T14390] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 931.915759][T14390] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 931.915907][T14390] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.916068][T14390] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.916220][T14390] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 931.916376][T14390] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 931.916525][T14390] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 931.916666][T14390] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 931.916802][T14390] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 931.916979][T14390] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 931.917128][T14390] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 931.917280][T14390] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 931.917422][T14390] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 931.917556][T14390] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 931.917691][T14390] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 931.917826][T14390] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.917972][T14390] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 931.918108][T14390] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 931.918242][T14390] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 931.918379][T14390] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 931.918517][T14390] ? copy_msghdr_from_user (net/socket.c:2525) [ 931.918650][T14390] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 931.918815][T14390] ? move_addr_to_kernel (net/socket.c:2511) [ 931.918959][T14390] ? filemap_map_folio_range (mm/filemap.c:3873) [ 931.919094][T14390] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 931.919228][T14390] ___sys_sendmsg (net/socket.c:2641) [ 931.919360][T14390] ? copy_msghdr_from_user (net/socket.c:2628) [ 931.919509][T14390] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 931.919647][T14390] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 931.919782][T14390] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 931.919921][T14390] ? __sys_sendmsg_sock (net/socket.c:2656) [ 931.920057][T14390] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 931.920189][T14390] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.920323][T14390] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 931.920460][T14390] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 931.920594][T14390] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 931.920727][T14390] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 931.920899][T14390] RIP: 0033:0x7ff8e7ceac5e [ 931.921039][T14390] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 931.921520][T14390] RSP: 002b:00007ffdd5f830f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 931.921721][T14390] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff8e7ceac5e [ 931.921930][T14390] RDX: 0000000000000000 RSI: 00007ffdd5f831b0 RDI: 0000000000000005 [ 931.922129][T14390] RBP: 00007ffdd5f83100 R08: 0000000000000000 R09: 0000000000000000 [ 931.922330][T14390] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 931.922546][T14390] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.009272][T14396] ------------[ cut here ]------------ | [ 932.009466][T14396] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14396 | [ 932.009712][T14396] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.010515][T14396] Tainted: [W]=WARN [ 932.010618][T14396] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.010791][T14396] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.010958][T14396] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.011477][T14396] RSP: 0018:ffa00000032475d0 EFLAGS: 00010286 [ 932.011659][T14396] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c2287 [ 932.011868][T14396] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611438 [ 932.012081][T14396] RBP: 1ff4000000648ebb R08: 1fe22000034c2288 R09: fffa3bfffffb0b24 [ 932.012294][T14396] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6103f4 [ 932.012513][T14396] R13: ff1100001a6103c0 R14: ffffffff931c7940 R15: ff1100001a611380 [ 932.012723][T14396] FS: 00007f44f8a0d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 932.012975][T14396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.013150][T14396] CR2: 000000000044f720 CR3: 0000000017ecc004 CR4: 0000000000771ef0 [ 932.013361][T14396] PKRU: 55555554 [ 932.013473][T14396] Call Trace: [ 932.013577][T14396] [ 932.013648][T14396] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.013790][T14396] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.013948][T14396] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.014091][T14396] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.014228][T14396] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.014372][T14396] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.014514][T14396] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.014654][T14396] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.014793][T14396] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.014936][T14396] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.015077][T14396] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.015213][T14396] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.015351][T14396] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.015493][T14396] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.015630][T14396] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.015767][T14396] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.015908][T14396] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.016063][T14396] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.016201][T14396] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.016339][T14396] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.016494][T14396] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.016636][T14396] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.016780][T14396] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.016957][T14396] ? move_addr_to_kernel (net/socket.c:2511) [ 932.017101][T14396] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.017241][T14396] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.017386][T14396] ___sys_sendmsg (net/socket.c:2641) [ 932.017540][T14396] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.017684][T14396] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.017825][T14396] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.017980][T14396] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.018116][T14396] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.018264][T14396] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.018418][T14396] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.018560][T14396] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.018698][T14396] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.018837][T14396] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.018984][T14396] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.019156][T14396] RIP: 0033:0x7f44f8b67c5e [ 932.019307][T14396] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.019814][T14396] RSP: 002b:00007ffda11e0510 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.020030][T14396] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f44f8b67c5e [ 932.020240][T14396] RDX: 0000000000000000 RSI: 00007ffda11e05d0 RDI: 0000000000000005 [ 932.020452][T14396] RBP: 00007ffda11e0520 R08: 0000000000000000 R09: 0000000000000000 [ 932.020659][T14396] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.020878][T14396] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.088627][T14400] ------------[ cut here ]------------ | [ 932.088811][T14400] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14400 | [ 932.089534][T14400] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.090434][T14400] Tainted: [W]=WARN [ 932.090542][T14400] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.090717][T14400] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.090871][T14400] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.091459][T14400] RSP: 0018:ffa00000032475d0 EFLAGS: 00010286 [ 932.091638][T14400] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea04c7 [ 932.091845][T14400] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502638 [ 932.092114][T14400] RBP: 1ff4000000648ebb R08: 1fe2200001ea04c8 R09: fffa3bfffffb0b24 [ 932.092322][T14400] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503034 [ 932.092534][T14400] R13: ff1100000f503000 R14: ffffffff931c7940 R15: ff1100000f502580 [ 932.092740][T14400] FS: 00007f45f9529440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 932.093056][T14400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.093234][T14400] CR2: 000000000044f720 CR3: 0000000018302005 CR4: 0000000000771ef0 [ 932.093447][T14400] PKRU: 55555554 [ 932.093553][T14400] Call Trace: [ 932.093657][T14400] [ 932.093728][T14400] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.093868][T14400] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.094085][T14400] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.094226][T14400] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.094367][T14400] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.094512][T14400] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.094648][T14400] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.094790][T14400] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.094996][T14400] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.095143][T14400] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.095293][T14400] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.095439][T14400] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.095579][T14400] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.095720][T14400] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.095862][T14400] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.096070][T14400] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.096210][T14400] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.096353][T14400] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.096500][T14400] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.096640][T14400] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.096786][T14400] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.096997][T14400] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.097139][T14400] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.097314][T14400] ? move_addr_to_kernel (net/socket.c:2511) [ 932.097467][T14400] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.097606][T14400] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.097747][T14400] ___sys_sendmsg (net/socket.c:2641) [ 932.097966][T14400] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.098111][T14400] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.098253][T14400] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.098400][T14400] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.098545][T14400] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.098689][T14400] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.098828][T14400] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.099142][T14400] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.099284][T14400] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.099434][T14400] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.099579][T14400] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.099755][T14400] RIP: 0033:0x7f45f9683c5e [ 932.100011][T14400] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.100523][T14400] RSP: 002b:00007ffe8c4de5a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.100735][T14400] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f45f9683c5e [ 932.101045][T14400] RDX: 0000000000000000 RSI: 00007ffe8c4de660 RDI: 0000000000000005 [ 932.101252][T14400] RBP: 00007ffe8c4de5b0 R08: 0000000000000000 R09: 0000000000000000 [ 932.101476][T14400] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.101691][T14400] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.174084][T14406] ------------[ cut here ]------------ | [ 932.174256][T14406] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14406 | [ 932.174508][T14406] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.175301][T14406] Tainted: [W]=WARN [ 932.175412][T14406] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.175590][T14406] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.175744][T14406] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.176249][T14406] RSP: 0018:ffa00000032875d0 EFLAGS: 00010286 [ 932.176433][T14406] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0687 [ 932.176640][T14406] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503438 [ 932.176848][T14406] RBP: 1ff4000000650ebb R08: 1fe2200001ea0688 R09: fffa3bfffffb0b24 [ 932.177064][T14406] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502e74 [ 932.177275][T14406] R13: ff1100000f502e40 R14: ffffffff931c7940 R15: ff1100000f503380 [ 932.177488][T14406] FS: 00007f9253c3c440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 932.177731][T14406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.177909][T14406] CR2: 000000000044f720 CR3: 0000000010501002 CR4: 0000000000771ef0 [ 932.178118][T14406] PKRU: 55555554 [ 932.178222][T14406] Call Trace: [ 932.178326][T14406] [ 932.178400][T14406] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.178539][T14406] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.178685][T14406] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.178825][T14406] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.178967][T14406] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.179109][T14406] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.179249][T14406] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.179395][T14406] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.179535][T14406] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.179672][T14406] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.179812][T14406] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.179956][T14406] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.180096][T14406] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.180237][T14406] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.180373][T14406] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.180518][T14406] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.180655][T14406] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.180806][T14406] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.180949][T14406] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.181088][T14406] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.181229][T14406] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.181370][T14406] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.181513][T14406] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.181683][T14406] ? move_addr_to_kernel (net/socket.c:2511) [ 932.181823][T14406] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.181966][T14406] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.182106][T14406] ___sys_sendmsg (net/socket.c:2641) [ 932.182243][T14406] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.182390][T14406] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.182533][T14406] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.182673][T14406] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.182811][T14406] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.182958][T14406] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.183097][T14406] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.183236][T14406] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.183376][T14406] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.183519][T14406] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.183659][T14406] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.183833][T14406] RIP: 0033:0x7f9253d96c5e [ 932.183984][T14406] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.184473][T14406] RSP: 002b:00007fff6bf85100 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.184674][T14406] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9253d96c5e [ 932.184874][T14406] RDX: 0000000000000000 RSI: 00007fff6bf851c0 RDI: 0000000000000005 [ 932.185079][T14406] RBP: 00007fff6bf85110 R08: 0000000000000000 R09: 0000000000000000 [ 932.185278][T14406] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.185486][T14406] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.252406][T14410] ------------[ cut here ]------------ | [ 932.252581][T14410] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14410 | [ 932.252830][T14410] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.254092][T14410] Tainted: [W]=WARN [ 932.254191][T14410] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.254359][T14410] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.254510][T14410] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.254988][T14410] RSP: 0018:ffa00000032475d0 EFLAGS: 00010286 [ 932.255159][T14410] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b67 [ 932.255360][T14410] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 932.255567][T14410] RBP: 1ff4000000648ebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b24 [ 932.255777][T14410] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78c774 [ 932.255990][T14410] R13: ff1100001b78c740 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 932.256198][T14410] FS: 00007f2b565a1440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 932.256437][T14410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.256607][T14410] CR2: 000000000044f720 CR3: 000000000c7d0005 CR4: 0000000000771ef0 [ 932.256810][T14410] PKRU: 55555554 [ 932.256919][T14410] Call Trace: [ 932.257019][T14410] [ 932.257087][T14410] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.257251][T14410] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.257402][T14410] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.257536][T14410] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.257668][T14410] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.257804][T14410] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.257940][T14410] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.258073][T14410] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.258216][T14410] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.258354][T14410] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.258501][T14410] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.258633][T14410] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.258768][T14410] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.258909][T14410] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.259046][T14410] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.259177][T14410] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.259319][T14410] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.259464][T14410] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.259597][T14410] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.259729][T14410] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.259865][T14410] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.260008][T14410] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.260141][T14410] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.260306][T14410] ? move_addr_to_kernel (net/socket.c:2511) [ 932.260447][T14410] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.260581][T14410] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.260715][T14410] ___sys_sendmsg (net/socket.c:2641) [ 932.260848][T14410] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.260992][T14410] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.261132][T14410] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.261267][T14410] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.261412][T14410] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.261554][T14410] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.261694][T14410] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.261832][T14410] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.261977][T14410] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.262113][T14410] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.262247][T14410] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.262430][T14410] RIP: 0033:0x7f2b566fbc5e [ 932.262575][T14410] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.263068][T14410] RSP: 002b:00007fff3b0d1490 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.263289][T14410] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2b566fbc5e [ 932.263502][T14410] RDX: 0000000000000000 RSI: 00007fff3b0d1550 RDI: 0000000000000005 [ 932.263703][T14410] RBP: 00007fff3b0d14a0 R08: 0000000000000000 R09: 0000000000000000 [ 932.263907][T14410] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.264109][T14410] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.341348][T14416] ------------[ cut here ]------------ | [ 932.341541][T14416] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14416 | [ 932.341794][T14416] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.342790][T14416] Tainted: [W]=WARN [ 932.342905][T14416] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.343095][T14416] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.343253][T14416] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.343772][T14416] RSP: 0018:ffa00000032f75d0 EFLAGS: 00010286 [ 932.343959][T14416] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f19df [ 932.344177][T14416] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cef8 [ 932.344390][T14416] RBP: 1ff400000065eebb R08: 1fe22000036f19e0 R09: fffa3bfffffb0b24 [ 932.344599][T14416] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78caf4 [ 932.344811][T14416] R13: ff1100001b78cac0 R14: ffffffff931c7940 R15: ff1100001b78ce40 [ 932.345033][T14416] FS: 00007f9b2c7d3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 932.345278][T14416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.345451][T14416] CR2: 000000000044f720 CR3: 0000000017090001 CR4: 0000000000771ef0 [ 932.345665][T14416] PKRU: 55555554 [ 932.345766][T14416] Call Trace: [ 932.345867][T14416] [ 932.345942][T14416] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.346080][T14416] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.346225][T14416] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.346370][T14416] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.346517][T14416] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.346663][T14416] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.346801][T14416] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.346988][T14416] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.347123][T14416] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.347254][T14416] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.347395][T14416] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.347528][T14416] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.347673][T14416] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.347820][T14416] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.347974][T14416] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.348120][T14416] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.348258][T14416] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.348408][T14416] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.348554][T14416] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.348694][T14416] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.348845][T14416] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.348989][T14416] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.349128][T14416] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.349299][T14416] ? move_addr_to_kernel (net/socket.c:2511) [ 932.349464][T14416] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.349611][T14416] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.349752][T14416] ___sys_sendmsg (net/socket.c:2641) [ 932.349903][T14416] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.350049][T14416] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.350192][T14416] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.350339][T14416] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.350485][T14416] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.350629][T14416] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.350769][T14416] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.350910][T14416] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.351053][T14416] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.351197][T14416] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.351335][T14416] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.351508][T14416] RIP: 0033:0x7f9b2c92dc5e [ 932.351650][T14416] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.352157][T14416] RSP: 002b:00007ffec7c0efc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.352369][T14416] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9b2c92dc5e [ 932.352574][T14416] RDX: 0000000000000000 RSI: 00007ffec7c0f080 RDI: 0000000000000005 [ 932.352775][T14416] RBP: 00007ffec7c0efd0 R08: 0000000000000000 R09: 0000000000000000 [ 932.352976][T14416] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.353174][T14416] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.422268][T14420] ------------[ cut here ]------------ | [ 932.422467][T14420] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14420 | [ 932.422713][T14420] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.423520][T14420] Tainted: [W]=WARN [ 932.423625][T14420] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.423792][T14420] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.423948][T14420] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.424426][T14420] RSP: 0018:ffa00000031375d0 EFLAGS: 00010286 [ 932.424603][T14420] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038752f7 [ 932.424806][T14420] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a97b8 [ 932.425012][T14420] RBP: 1ff4000000626ebb R08: 1fe22000038752f8 R09: fffa3bfffffb0b24 [ 932.425210][T14420] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a91f4 [ 932.425408][T14420] R13: ff1100001c3a91c0 R14: ffffffff931c7940 R15: ff1100001c3a9700 [ 932.425609][T14420] FS: 00007fa6b4194440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 932.425846][T14420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.426031][T14420] CR2: 000000000044f720 CR3: 000000000db78004 CR4: 0000000000771ef0 [ 932.426246][T14420] PKRU: 55555554 [ 932.426350][T14420] Call Trace: [ 932.426457][T14420] [ 932.426528][T14420] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.426669][T14420] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.426817][T14420] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.426964][T14420] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.427101][T14420] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.427258][T14420] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.427403][T14420] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.427534][T14420] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.427685][T14420] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.427820][T14420] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.427977][T14420] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.428107][T14420] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.428240][T14420] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.428371][T14420] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.428539][T14420] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.428670][T14420] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.428805][T14420] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.428940][T14420] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.429075][T14420] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.429207][T14420] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.429344][T14420] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.429496][T14420] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.429626][T14420] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.429790][T14420] ? move_addr_to_kernel (net/socket.c:2511) [ 932.429934][T14420] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.430073][T14420] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.430210][T14420] ___sys_sendmsg (net/socket.c:2641) [ 932.430343][T14420] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.430487][T14420] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.430622][T14420] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.430758][T14420] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.430892][T14420] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.431032][T14420] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.431169][T14420] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.431305][T14420] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.431482][T14420] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.431614][T14420] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.431744][T14420] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.431911][T14420] RIP: 0033:0x7fa6b42eec5e [ 932.432051][T14420] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.432527][T14420] RSP: 002b:00007ffc765485f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.432822][T14420] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa6b42eec5e [ 932.433045][T14420] RDX: 0000000000000000 RSI: 00007ffc765486b0 RDI: 0000000000000005 [ 932.433322][T14420] RBP: 00007ffc76548600 R08: 0000000000000000 R09: 0000000000000000 [ 932.433523][T14420] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.433718][T14420] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.505428][T14426] ------------[ cut here ]------------ | [ 932.505602][T14426] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14426 | [ 932.505848][T14426] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.506654][T14426] Tainted: [W]=WARN [ 932.506756][T14426] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.506931][T14426] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.507073][T14426] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.507587][T14426] RSP: 0018:ffa00000032775d0 EFLAGS: 00010286 [ 932.507765][T14426] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038752bf [ 932.507973][T14426] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a95f8 [ 932.508182][T14426] RBP: 1ff400000064eebb R08: 1fe22000038752c0 R09: fffa3bfffffb0b24 [ 932.508395][T14426] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a85b4 [ 932.508596][T14426] R13: ff1100001c3a8580 R14: ffffffff931c7940 R15: ff1100001c3a9540 [ 932.508798][T14426] FS: 00007f6874447440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 932.509048][T14426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.509217][T14426] CR2: 000000000044f720 CR3: 000000001abbe005 CR4: 0000000000771ef0 [ 932.509422][T14426] PKRU: 55555554 [ 932.509527][T14426] Call Trace: [ 932.509626][T14426] [ 932.509694][T14426] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.509834][T14426] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.509981][T14426] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.510119][T14426] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.510257][T14426] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.510403][T14426] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.510542][T14426] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.510681][T14426] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.510816][T14426] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.510957][T14426] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.511092][T14426] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.511227][T14426] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.511363][T14426] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.511501][T14426] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.511632][T14426] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.511769][T14426] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.511909][T14426] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.512043][T14426] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.512180][T14426] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.512313][T14426] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.512456][T14426] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.512588][T14426] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.512721][T14426] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.512889][T14426] ? move_addr_to_kernel (net/socket.c:2511) [ 932.513053][T14426] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.513204][T14426] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.513346][T14426] ___sys_sendmsg (net/socket.c:2641) [ 932.513493][T14426] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.513644][T14426] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.513793][T14426] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.513942][T14426] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.514095][T14426] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.514250][T14426] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.514393][T14426] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.514533][T14426] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.514674][T14426] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.514813][T14426] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.514958][T14426] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.515133][T14426] RIP: 0033:0x7f68745a1c5e [ 932.515282][T14426] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.515788][T14426] RSP: 002b:00007fff2df98ee0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.516007][T14426] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f68745a1c5e [ 932.516210][T14426] RDX: 0000000000000000 RSI: 00007fff2df98fa0 RDI: 0000000000000005 [ 932.516417][T14426] RBP: 00007fff2df98ef0 R08: 0000000000000000 R09: 0000000000000000 [ 932.516614][T14426] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.516819][T14426] R13: 0000000069cbe7eb R14: 0000000000000004 R15: 000000000049d620 | [ 932.586152][T14430] ------------[ cut here ]------------ | [ 932.586335][T14430] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14430 | [ 932.586599][T14430] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.587796][T14430] Tainted: [W]=WARN [ 932.587909][T14430] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.588093][T14430] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.588241][T14430] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.588753][T14430] RSP: 0018:ffa00000032a75d0 EFLAGS: 00010286 [ 932.588940][T14430] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387516f [ 932.589150][T14430] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8b78 [ 932.589355][T14430] RBP: 1ff4000000654ebb R08: 1fe2200003875170 R09: fffa3bfffffb0b24 [ 932.589571][T14430] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a98f4 [ 932.589776][T14430] R13: ff1100001c3a98c0 R14: ffffffff931c7940 R15: ff1100001c3a8ac0 [ 932.589988][T14430] FS: 00007f1842917440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 932.590230][T14430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.590401][T14430] CR2: 000000000044f720 CR3: 000000000c52b003 CR4: 0000000000771ef0 [ 932.590602][T14430] PKRU: 55555554 [ 932.590708][T14430] Call Trace: [ 932.590814][T14430] [ 932.590884][T14430] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.591029][T14430] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.591175][T14430] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.591308][T14430] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.591451][T14430] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.591585][T14430] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.591717][T14430] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.591857][T14430] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.591998][T14430] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.592131][T14430] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.592264][T14430] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.592399][T14430] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.592532][T14430] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.592662][T14430] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.592798][T14430] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.592941][T14430] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.593074][T14430] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.593212][T14430] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.593343][T14430] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.593500][T14430] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.593645][T14430] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.593783][T14430] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.593919][T14430] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.594086][T14430] ? move_addr_to_kernel (net/socket.c:2511) [ 932.594218][T14430] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.594349][T14430] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.594486][T14430] ___sys_sendmsg (net/socket.c:2641) [ 932.594625][T14430] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.594761][T14430] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.594909][T14430] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.595048][T14430] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.595179][T14430] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.595313][T14430] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.595449][T14430] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.595581][T14430] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.595713][T14430] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.595843][T14430] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.595983][T14430] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.596146][T14430] RIP: 0033:0x7f1842a71c5e [ 932.596286][T14430] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.596767][T14430] RSP: 002b:00007ffdc7b28840 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.596972][T14430] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1842a71c5e [ 932.597167][T14430] RDX: 0000000000000000 RSI: 00007ffdc7b28900 RDI: 0000000000000005 [ 932.597362][T14430] RBP: 00007ffdc7b28850 R08: 0000000000000000 R09: 0000000000000000 [ 932.597561][T14430] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.597773][T14430] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 932.674258][T14436] ------------[ cut here ]------------ | [ 932.674492][T14436] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14436 | [ 932.674785][T14436] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.676974][T14436] Tainted: [W]=WARN [ 932.677206][T14436] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.677515][T14436] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.677712][T14436] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.678275][T14436] RSP: 0018:ffa00000033175d0 EFLAGS: 00010286 [ 932.678556][T14436] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eaf7 [ 932.678815][T14436] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 932.679097][T14436] RBP: 1ff4000000662ebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b24 [ 932.679380][T14436] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975574 [ 932.679690][T14436] R13: ff1100000c975540 R14: ffffffff931c7940 R15: ff1100000c975700 [ 932.679972][T14436] FS: 00007fcfa564e440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 932.680290][T14436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.680546][T14436] CR2: 000000000044f720 CR3: 000000001b2bf006 CR4: 0000000000771ef0 [ 932.680797][T14436] PKRU: 55555554 [ 932.680966][T14436] Call Trace: [ 932.681121][T14436] [ 932.681247][T14436] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.681448][T14436] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.681648][T14436] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.681838][T14436] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.682043][T14436] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.682259][T14436] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.682460][T14436] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.682654][T14436] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.682839][T14436] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.683047][T14436] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.683249][T14436] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.683459][T14436] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.683647][T14436] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.683839][T14436] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.684038][T14436] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.684240][T14436] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.684439][T14436] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.684625][T14436] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.684814][T14436] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.685017][T14436] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.685212][T14436] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.685407][T14436] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.685594][T14436] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.685814][T14436] ? move_addr_to_kernel (net/socket.c:2511) [ 932.686014][T14436] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.686201][T14436] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.686400][T14436] ___sys_sendmsg (net/socket.c:2641) [ 932.686585][T14436] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.686777][T14436] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.686979][T14436] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.687165][T14436] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.687351][T14436] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.687548][T14436] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.687734][T14436] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.687933][T14436] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.688117][T14436] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.688300][T14436] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.688501][T14436] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.688717][T14436] RIP: 0033:0x7fcfa57a8c5e [ 932.688919][T14436] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.689458][T14436] RSP: 002b:00007ffe5d59e070 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.689710][T14436] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcfa57a8c5e [ 932.689972][T14436] RDX: 0000000000000000 RSI: 00007ffe5d59e130 RDI: 0000000000000005 [ 932.690226][T14436] RBP: 00007ffe5d59e080 R08: 0000000000000000 R09: 0000000000000000 [ 932.690579][T14436] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.690951][T14436] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 932.774570][T14440] ------------[ cut here ]------------ | [ 932.774767][T14440] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14440 | [ 932.775574][T14440] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.776449][T14440] Tainted: [W]=WARN [ 932.776552][T14440] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.776721][T14440] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.776866][T14440] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.777450][T14440] RSP: 0018:ffa00000033175d0 EFLAGS: 00010286 [ 932.777657][T14440] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e88f [ 932.777962][T14440] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974478 [ 932.778185][T14440] RBP: 1ff4000000662ebb R08: 1fe220000192e890 R09: fffa3bfffffb0b24 [ 932.778395][T14440] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c9745b4 [ 932.778633][T14440] R13: ff1100000c974580 R14: ffffffff931c7940 R15: ff1100000c9743c0 [ 932.778859][T14440] FS: 00007f7f9848c440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 932.779106][T14440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.779272][T14440] CR2: 000000000044f720 CR3: 000000001a9f5001 CR4: 0000000000771ef0 [ 932.779536][T14440] PKRU: 55555554 [ 932.779639][T14440] Call Trace: [ 932.779742][T14440] [ 932.779811][T14440] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.779972][T14440] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.780115][T14440] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.780249][T14440] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.780383][T14440] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.780528][T14440] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.780659][T14440] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.780792][T14440] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.780933][T14440] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.781075][T14440] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.781209][T14440] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.781339][T14440] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.781523][T14440] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.781660][T14440] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.781794][T14440] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.781966][T14440] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.782123][T14440] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.782293][T14440] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.782468][T14440] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.782633][T14440] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.782809][T14440] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.782955][T14440] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.783124][T14440] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.783332][T14440] ? move_addr_to_kernel (net/socket.c:2511) [ 932.783488][T14440] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.783650][T14440] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.783788][T14440] ___sys_sendmsg (net/socket.c:2641) [ 932.783931][T14440] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.784085][T14440] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.784226][T14440] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.784409][T14440] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.784559][T14440] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.784711][T14440] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.784847][T14440] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.784991][T14440] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.785126][T14440] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.785286][T14440] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.785458][T14440] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.785655][T14440] RIP: 0033:0x7f7f985e6c5e [ 932.785822][T14440] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.786343][T14440] RSP: 002b:00007ffe63f84cc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.786584][T14440] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7f985e6c5e [ 932.786824][T14440] RDX: 0000000000000000 RSI: 00007ffe63f84d80 RDI: 0000000000000005 [ 932.787049][T14440] RBP: 00007ffe63f84cd0 R08: 0000000000000000 R09: 0000000000000000 [ 932.787255][T14440] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.787510][T14440] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 932.873858][T14446] ------------[ cut here ]------------ | [ 932.874046][T14446] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14446 | [ 932.874290][T14446] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.875120][T14446] Tainted: [W]=WARN [ 932.875222][T14446] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.875396][T14446] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.875539][T14446] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.876026][T14446] RSP: 0018:ffa00000033375d0 EFLAGS: 00010286 [ 932.876199][T14446] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229fd7 [ 932.876403][T14446] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914feb8 [ 932.876607][T14446] RBP: 1ff4000000666ebb R08: 1fe2200003229fd8 R09: fffa3bfffffb0b24 [ 932.876808][T14446] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974074 [ 932.877012][T14446] R13: ff1100000c974040 R14: ffffffff931c7940 R15: ff1100001914fe00 [ 932.877214][T14446] FS: 00007f38504d1440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 932.877454][T14446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.877624][T14446] CR2: 000000000044f720 CR3: 000000001958a006 CR4: 0000000000771ef0 [ 932.877828][T14446] PKRU: 55555554 [ 932.877934][T14446] Call Trace: [ 932.878035][T14446] [ 932.878104][T14446] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.878243][T14446] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.878388][T14446] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.878524][T14446] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.878659][T14446] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.878798][T14446] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.878937][T14446] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.879079][T14446] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.879212][T14446] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.879344][T14446] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.879485][T14446] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.879618][T14446] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.879754][T14446] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.879889][T14446] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.880080][T14446] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.880214][T14446] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.880347][T14446] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.880483][T14446] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.880620][T14446] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.880773][T14446] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.880962][T14446] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.881098][T14446] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.881231][T14446] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.881400][T14446] ? move_addr_to_kernel (net/socket.c:2511) [ 932.881536][T14446] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.881672][T14446] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.881808][T14446] ___sys_sendmsg (net/socket.c:2641) [ 932.881996][T14446] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.882134][T14446] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.882272][T14446] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.882414][T14446] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.882555][T14446] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.882691][T14446] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.882825][T14446] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.883017][T14446] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.883151][T14446] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.883306][T14446] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.883447][T14446] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.883612][T14446] RIP: 0033:0x7f385062bc5e [ 932.883756][T14446] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.884318][T14446] RSP: 002b:00007ffd3772b1c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.884535][T14446] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f385062bc5e [ 932.884737][T14446] RDX: 0000000000000000 RSI: 00007ffd3772b280 RDI: 0000000000000005 [ 932.885003][T14446] RBP: 00007ffd3772b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 932.885205][T14446] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.885432][T14446] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 932.953778][T14450] ------------[ cut here ]------------ | [ 932.953966][T14450] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14450 | [ 932.954222][T14450] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 932.955036][T14450] Tainted: [W]=WARN [ 932.955144][T14450] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 932.955316][T14450] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 932.955472][T14450] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 932.955973][T14450] RSP: 0018:ffa00000033875d0 EFLAGS: 00010286 [ 932.956149][T14450] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229c8f [ 932.956355][T14450] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914e478 [ 932.956574][T14450] RBP: 1ff4000000670ebb R08: 1fe2200003229c90 R09: fffa3bfffffb0b24 [ 932.956788][T14450] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e5b4 [ 932.957015][T14450] R13: ff1100001914e580 R14: ffffffff931c7940 R15: ff1100001914e3c0 [ 932.957224][T14450] FS: 00007f7a56c58440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 932.957498][T14450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.957677][T14450] CR2: 000000000044f720 CR3: 00000000171fc006 CR4: 0000000000771ef0 [ 932.957883][T14450] PKRU: 55555554 [ 932.958003][T14450] Call Trace: [ 932.958104][T14450] [ 932.958178][T14450] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 932.958320][T14450] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 932.958473][T14450] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 932.958621][T14450] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.958793][T14450] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.958961][T14450] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 932.959122][T14450] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 932.959267][T14450] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 932.959415][T14450] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 932.959562][T14450] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 932.959704][T14450] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 932.959836][T14450] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 932.959973][T14450] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 932.960110][T14450] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 932.960256][T14450] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 932.960401][T14450] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 932.960546][T14450] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.960685][T14450] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 932.960833][T14450] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 932.960991][T14450] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 932.961143][T14450] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 932.961288][T14450] ? copy_msghdr_from_user (net/socket.c:2525) [ 932.961437][T14450] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 932.961621][T14450] ? move_addr_to_kernel (net/socket.c:2511) [ 932.961777][T14450] ? filemap_map_folio_range (mm/filemap.c:3873) [ 932.961933][T14450] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 932.962078][T14450] ___sys_sendmsg (net/socket.c:2641) [ 932.962224][T14450] ? copy_msghdr_from_user (net/socket.c:2628) [ 932.962377][T14450] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 932.962528][T14450] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 932.962670][T14450] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 932.962814][T14450] ? __sys_sendmsg_sock (net/socket.c:2656) [ 932.962962][T14450] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 932.963103][T14450] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.963261][T14450] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 932.963410][T14450] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 932.963552][T14450] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 932.963700][T14450] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 932.963884][T14450] RIP: 0033:0x7f7a56db2c5e [ 932.964043][T14450] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 932.964576][T14450] RSP: 002b:00007ffe804019b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 932.964790][T14450] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7a56db2c5e [ 932.965013][T14450] RDX: 0000000000000000 RSI: 00007ffe80401a70 RDI: 0000000000000005 [ 932.965231][T14450] RBP: 00007ffe804019c0 R08: 0000000000000000 R09: 0000000000000000 [ 932.965502][T14450] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 932.965820][T14450] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 933.060419][T14456] ------------[ cut here ]------------ | [ 933.060609][T14456] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14456 | [ 933.060856][T14456] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.061789][T14456] Tainted: [W]=WARN [ 933.061963][T14456] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.062159][T14456] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.062318][T14456] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.062839][T14456] RSP: 0018:ffa00000033875d0 EFLAGS: 00010286 [ 933.063098][T14456] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229e87 [ 933.063316][T14456] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f438 [ 933.063533][T14456] RBP: 1ff4000000670ebb R08: 1fe2200003229e88 R09: fffa3bfffffb0b24 [ 933.063747][T14456] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e074 [ 933.064047][T14456] R13: ff1100001914e040 R14: ffffffff931c7940 R15: ff1100001914f380 [ 933.064273][T14456] FS: 00007ff3db8cb440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 933.064528][T14456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.064704][T14456] CR2: 000000000044f720 CR3: 00000000106d8004 CR4: 0000000000771ef0 [ 933.064993][T14456] PKRU: 55555554 [ 933.065100][T14456] Call Trace: [ 933.065206][T14456] [ 933.065279][T14456] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.065419][T14456] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.065579][T14456] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.065726][T14456] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.065867][T14456] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.066098][T14456] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.066240][T14456] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.066384][T14456] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.066533][T14456] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.066674][T14456] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.066826][T14456] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.066981][T14456] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.067128][T14456] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.067273][T14456] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.067427][T14456] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.067579][T14456] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.067727][T14456] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.067891][T14456] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.068039][T14456] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.068179][T14456] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.068336][T14456] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.068478][T14456] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.068644][T14456] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.068853][T14456] ? move_addr_to_kernel (net/socket.c:2511) [ 933.069001][T14456] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.069154][T14456] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.069293][T14456] ___sys_sendmsg (net/socket.c:2641) [ 933.069432][T14456] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.069579][T14456] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.069718][T14456] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.069863][T14456] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.070035][T14456] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.070179][T14456] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.070318][T14456] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.070461][T14456] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.070597][T14456] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.070738][T14456] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.070876][T14456] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.071062][T14456] RIP: 0033:0x7ff3dba25c5e [ 933.071217][T14456] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.071718][T14456] RSP: 002b:00007ffdfb965d00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.071940][T14456] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff3dba25c5e [ 933.072164][T14456] RDX: 0000000000000000 RSI: 00007ffdfb965dc0 RDI: 0000000000000005 [ 933.072371][T14456] RBP: 00007ffdfb965d10 R08: 0000000000000000 R09: 0000000000000000 [ 933.072599][T14456] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.072812][T14456] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 933.146998][T14460] ------------[ cut here ]------------ | [ 933.147221][T14460] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14460 | [ 933.147586][T14460] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.148491][T14460] Tainted: [W]=WARN [ 933.148602][T14460] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.148786][T14460] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.149329][T14460] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.149873][T14460] RSP: 0018:ffa00000032475d0 EFLAGS: 00010286 [ 933.150055][T14460] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c21a7 [ 933.150292][T14460] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610d38 [ 933.150505][T14460] RBP: 1ff4000000648ebb R08: 1fe22000034c21a8 R09: fffa3bfffffb0b24 [ 933.150738][T14460] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610774 [ 933.150978][T14460] R13: ff1100001a610740 R14: ffffffff931c7940 R15: ff1100001a610c80 [ 933.151366][T14460] FS: 00007fb90e8e5440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 933.151646][T14460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.151830][T14460] CR2: 000000000044f720 CR3: 0000000019414001 CR4: 0000000000771ef0 [ 933.152063][T14460] PKRU: 55555554 [ 933.152172][T14460] Call Trace: [ 933.152289][T14460] [ 933.152369][T14460] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.152527][T14460] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.152687][T14460] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.152835][T14460] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.152980][T14460] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.153152][T14460] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.153293][T14460] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.153449][T14460] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.153593][T14460] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.153742][T14460] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.153887][T14460] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.154031][T14460] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.154173][T14460] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.154318][T14460] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.154471][T14460] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.154624][T14460] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.154773][T14460] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.154928][T14460] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.155075][T14460] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.155216][T14460] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.155360][T14460] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.155530][T14460] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.155671][T14460] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.155850][T14460] ? move_addr_to_kernel (net/socket.c:2511) [ 933.155998][T14460] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.156139][T14460] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.156281][T14460] ___sys_sendmsg (net/socket.c:2641) [ 933.156433][T14460] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.156577][T14460] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.156721][T14460] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.156863][T14460] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.157009][T14460] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.157166][T14460] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.157318][T14460] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.157459][T14460] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.157594][T14460] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.157727][T14460] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.157861][T14460] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.158038][T14460] RIP: 0033:0x7fb90ea3fc5e [ 933.158182][T14460] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.158693][T14460] RSP: 002b:00007ffd1f3ee740 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.158905][T14460] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb90ea3fc5e [ 933.159107][T14460] RDX: 0000000000000000 RSI: 00007ffd1f3ee800 RDI: 0000000000000005 [ 933.159308][T14460] RBP: 00007ffd1f3ee750 R08: 0000000000000000 R09: 0000000000000000 [ 933.159515][T14460] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.159720][T14460] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 933.242626][T14466] ------------[ cut here ]------------ | [ 933.242810][T14466] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14466 | [ 933.243067][T14466] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.243873][T14466] Tainted: [W]=WARN [ 933.243986][T14466] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.244167][T14466] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.244318][T14466] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.244829][T14466] RSP: 0018:ffa00000032f75d0 EFLAGS: 00010286 [ 933.245012][T14466] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c22f7 [ 933.245219][T14466] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6117b8 [ 933.245426][T14466] RBP: 1ff400000065eebb R08: 1fe22000034c22f8 R09: fffa3bfffffb0b24 [ 933.245636][T14466] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6118f4 [ 933.245854][T14466] R13: ff1100001a6118c0 R14: ffffffff931c7940 R15: ff1100001a611700 [ 933.246078][T14466] FS: 00007f8cee100440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 933.246320][T14466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.246494][T14466] CR2: 000000000044f720 CR3: 000000001ade3005 CR4: 0000000000771ef0 [ 933.246709][T14466] PKRU: 55555554 [ 933.246813][T14466] Call Trace: [ 933.246926][T14466] [ 933.247001][T14466] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.247142][T14466] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.247295][T14466] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.247436][T14466] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.247571][T14466] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.247715][T14466] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.247866][T14466] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.248459][T14466] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.248601][T14466] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.248740][T14466] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.248877][T14466] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.249017][T14466] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.249152][T14466] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.249290][T14466] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.249431][T14466] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.249566][T14466] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.249703][T14466] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.249844][T14466] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.249996][T14466] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.250130][T14466] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.250266][T14466] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.250404][T14466] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.250538][T14466] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.250703][T14466] ? move_addr_to_kernel (net/socket.c:2511) [ 933.250840][T14466] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.250979][T14466] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.251121][T14466] ___sys_sendmsg (net/socket.c:2641) [ 933.251260][T14466] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.251414][T14466] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.251553][T14466] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.251690][T14466] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.251827][T14466] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.251970][T14466] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.252104][T14466] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.252241][T14466] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.252377][T14466] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.252518][T14466] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.252653][T14466] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.252822][T14466] RIP: 0033:0x7f8cee25ac5e [ 933.252971][T14466] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.253467][T14466] RSP: 002b:00007ffea0d3fe60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.253672][T14466] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8cee25ac5e [ 933.253874][T14466] RDX: 0000000000000000 RSI: 00007ffea0d3ff20 RDI: 0000000000000005 [ 933.254078][T14466] RBP: 00007ffea0d3fe70 R08: 0000000000000000 R09: 0000000000000000 [ 933.254286][T14466] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.254500][T14466] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 933.325805][T14470] ------------[ cut here ]------------ | [ 933.325987][T14470] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14470 | [ 933.326237][T14470] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.327042][T14470] Tainted: [W]=WARN [ 933.327158][T14470] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.327346][T14470] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.327502][T14470] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.328006][T14470] RSP: 0018:ffa00000033375d0 EFLAGS: 00010286 [ 933.328188][T14470] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1a4f [ 933.328394][T14470] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d278 [ 933.328605][T14470] RBP: 1ff4000000666ebb R08: 1fe22000036f1a50 R09: fffa3bfffffb0b24 [ 933.328804][T14470] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d3b4 [ 933.329004][T14470] R13: ff1100001b78d380 R14: ffffffff931c7940 R15: ff1100001b78d1c0 [ 933.329203][T14470] FS: 00007f56b8d85440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 933.329452][T14470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.329624][T14470] CR2: 000000000044f720 CR3: 000000001ade3004 CR4: 0000000000771ef0 [ 933.329824][T14470] PKRU: 55555554 [ 933.329934][T14470] Call Trace: [ 933.330034][T14470] [ 933.330104][T14470] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.330251][T14470] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.330407][T14470] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.330542][T14470] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.330675][T14470] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.330819][T14470] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.331256][T14470] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.331415][T14470] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.331550][T14470] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.331682][T14470] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.331823][T14470] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.331962][T14470] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.332097][T14470] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.332231][T14470] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.332365][T14470] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.332505][T14470] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.332638][T14470] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.332782][T14470] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.332921][T14470] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.333055][T14470] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.333191][T14470] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.333324][T14470] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.333463][T14470] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.333625][T14470] ? move_addr_to_kernel (net/socket.c:2511) [ 933.333759][T14470] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.333899][T14470] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.334035][T14470] ___sys_sendmsg (net/socket.c:2641) [ 933.334167][T14470] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.334321][T14470] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.334461][T14470] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.334595][T14470] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.334728][T14470] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.334874][T14470] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.335012][T14470] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.335146][T14470] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.335280][T14470] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.335417][T14470] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.335550][T14470] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.335714][T14470] RIP: 0033:0x7f56b8edfc5e [ 933.335855][T14470] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.336342][T14470] RSP: 002b:00007ffdbd0fd9e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.336549][T14470] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f56b8edfc5e [ 933.336748][T14470] RDX: 0000000000000000 RSI: 00007ffdbd0fdaa0 RDI: 0000000000000005 [ 933.336951][T14470] RBP: 00007ffdbd0fd9f0 R08: 0000000000000000 R09: 0000000000000000 [ 933.337153][T14470] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.337361][T14470] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 933.419573][T14476] ------------[ cut here ]------------ | [ 933.419744][T14476] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14476 | [ 933.420610][T14476] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.421656][T14476] Tainted: [W]=WARN [ 933.421763][T14476] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.422057][T14476] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.422214][T14476] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.422725][T14476] RSP: 0018:ffa00000033575d0 EFLAGS: 00010286 [ 933.423006][T14476] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea048f [ 933.423215][T14476] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502478 [ 933.423433][T14476] RBP: 1ff400000066aebb R08: 1fe2200001ea0490 R09: fffa3bfffffb0b24 [ 933.423640][T14476] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502934 [ 933.423851][T14476] R13: ff1100000f502900 R14: ffffffff931c7940 R15: ff1100000f5023c0 [ 933.424165][T14476] FS: 00007f1bbecd1440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 933.424422][T14476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.424598][T14476] CR2: 000000000044f720 CR3: 000000001a81b003 CR4: 0000000000771ef0 [ 933.424817][T14476] PKRU: 55555554 [ 933.425027][T14476] Call Trace: [ 933.425136][T14476] [ 933.425209][T14476] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.425348][T14476] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.425506][T14476] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.425663][T14476] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.425797][T14476] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.426052][T14476] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.426186][T14476] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.426319][T14476] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.426468][T14476] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.426626][T14476] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.426790][T14476] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.427002][T14476] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.427162][T14476] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.427318][T14476] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.427485][T14476] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.427654][T14476] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.427806][T14476] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.428012][T14476] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.428153][T14476] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.428309][T14476] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.428489][T14476] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.428654][T14476] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.428818][T14476] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.429039][T14476] ? move_addr_to_kernel (net/socket.c:2511) [ 933.429208][T14476] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.429405][T14476] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.429583][T14476] ___sys_sendmsg (net/socket.c:2641) [ 933.429746][T14476] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.429947][T14476] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.430091][T14476] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.430248][T14476] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.430432][T14476] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.430599][T14476] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.430754][T14476] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.430907][T14476] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.431047][T14476] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.431195][T14476] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.431335][T14476] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.431516][T14476] RIP: 0033:0x7f1bbee2bc5e [ 933.431666][T14476] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.432177][T14476] RSP: 002b:00007ffc9ea983b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.432421][T14476] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1bbee2bc5e [ 933.432645][T14476] RDX: 0000000000000000 RSI: 00007ffc9ea98470 RDI: 0000000000000005 [ 933.432855][T14476] RBP: 00007ffc9ea983c0 R08: 0000000000000000 R09: 0000000000000000 [ 933.433069][T14476] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.433287][T14476] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 933.502692][T14480] ------------[ cut here ]------------ | [ 933.502891][T14480] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14480 | [ 933.503175][T14480] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.503971][T14480] Tainted: [W]=WARN [ 933.504075][T14480] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.504279][T14480] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.504437][T14480] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.505532][T14480] RSP: 0018:ffa00000034175d0 EFLAGS: 00010286 [ 933.505711][T14480] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1bd7 [ 933.505986][T14480] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78deb8 [ 933.506186][T14480] RBP: 1ff4000000682ebb R08: 1fe22000036f1bd8 R09: fffa3bfffffb0b24 [ 933.506404][T14480] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78ce74 [ 933.506620][T14480] R13: ff1100001b78ce40 R14: ffffffff931c7940 R15: ff1100001b78de00 [ 933.506822][T14480] FS: 00007ff6d5665440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 933.507075][T14480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.507252][T14480] CR2: 000000000044f720 CR3: 000000001a81b001 CR4: 0000000000771ef0 [ 933.507467][T14480] PKRU: 55555554 [ 933.507570][T14480] Call Trace: [ 933.507684][T14480] [ 933.507753][T14480] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.507888][T14480] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.508045][T14480] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.508184][T14480] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.508323][T14480] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.508469][T14480] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.508610][T14480] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.508749][T14480] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.508886][T14480] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.509031][T14480] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.509172][T14480] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.509309][T14480] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.509453][T14480] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.509610][T14480] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.509749][T14480] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.509886][T14480] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.510032][T14480] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.510172][T14480] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.510312][T14480] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.510457][T14480] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.510600][T14480] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.510741][T14480] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.510885][T14480] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.511064][T14480] ? move_addr_to_kernel (net/socket.c:2511) [ 933.511213][T14480] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.511351][T14480] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.511510][T14480] ___sys_sendmsg (net/socket.c:2641) [ 933.511647][T14480] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.511793][T14480] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.511944][T14480] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.512094][T14480] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.512251][T14480] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.512401][T14480] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.512531][T14480] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.512665][T14480] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.512806][T14480] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.512949][T14480] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.513085][T14480] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.513253][T14480] RIP: 0033:0x7ff6d57bfc5e [ 933.513402][T14480] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.513884][T14480] RSP: 002b:00007ffe45f47dc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.514093][T14480] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff6d57bfc5e [ 933.514295][T14480] RDX: 0000000000000000 RSI: 00007ffe45f47e80 RDI: 0000000000000005 [ 933.514507][T14480] RBP: 00007ffe45f47dd0 R08: 0000000000000000 R09: 0000000000000000 [ 933.514710][T14480] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.514912][T14480] R13: 0000000069cbe7ec R14: 0000000000000004 R15: 000000000049d620 | [ 933.593883][T14486] ------------[ cut here ]------------ | [ 933.594417][T14486] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14486 | [ 933.594657][T14486] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.595512][T14486] Tainted: [W]=WARN [ 933.595616][T14486] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.595792][T14486] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.595943][T14486] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.596443][T14486] RSP: 0018:ffa00000033875d0 EFLAGS: 00010286 [ 933.596614][T14486] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1857 [ 933.596816][T14486] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c2b8 [ 933.597017][T14486] RBP: 1ff4000000670ebb R08: 1fe22000036f1858 R09: fffa3bfffffb0b24 [ 933.597213][T14486] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78c5b4 [ 933.597416][T14486] R13: ff1100001b78c580 R14: ffffffff931c7940 R15: ff1100001b78c200 [ 933.597627][T14486] FS: 00007fb9786aa440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 933.597872][T14486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.598052][T14486] CR2: 000000000044f720 CR3: 00000000195e1005 CR4: 0000000000771ef0 [ 933.598265][T14486] PKRU: 55555554 [ 933.598371][T14486] Call Trace: [ 933.598486][T14486] [ 933.598590][T14486] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.598732][T14486] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.598879][T14486] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.599023][T14486] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.599170][T14486] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.599307][T14486] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.599444][T14486] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.599579][T14486] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.599709][T14486] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.599840][T14486] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.599985][T14486] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.600118][T14486] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.600249][T14486] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.600380][T14486] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.600517][T14486] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.600649][T14486] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.600790][T14486] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.600928][T14486] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.601061][T14486] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.601190][T14486] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.601323][T14486] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.601468][T14486] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.601601][T14486] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.601764][T14486] ? move_addr_to_kernel (net/socket.c:2511) [ 933.601902][T14486] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.602034][T14486] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.602167][T14486] ___sys_sendmsg (net/socket.c:2641) [ 933.602300][T14486] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.602442][T14486] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.602582][T14486] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.602747][T14486] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.602884][T14486] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.603026][T14486] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.603158][T14486] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.603291][T14486] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.603439][T14486] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.603578][T14486] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.603720][T14486] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.603891][T14486] RIP: 0033:0x7fb978804c5e [ 933.604044][T14486] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.604544][T14486] RSP: 002b:00007ffe42a1ccd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.604756][T14486] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb978804c5e [ 933.604973][T14486] RDX: 0000000000000000 RSI: 00007ffe42a1cd90 RDI: 0000000000000005 [ 933.605179][T14486] RBP: 00007ffe42a1cce0 R08: 0000000000000000 R09: 0000000000000000 [ 933.605391][T14486] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.605601][T14486] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 933.673036][T14490] ------------[ cut here ]------------ | [ 933.673217][T14490] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14490 | [ 933.673457][T14490] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.674222][T14490] Tainted: [W]=WARN [ 933.674327][T14490] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.674500][T14490] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.674641][T14490] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.675218][T14490] RSP: 0018:ffa00000032475d0 EFLAGS: 00010286 [ 933.675395][T14490] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038751df [ 933.675589][T14490] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8ef8 [ 933.675784][T14490] RBP: 1ff4000000648ebb R08: 1fe22000038751e0 R09: fffa3bfffffb0b24 [ 933.676064][T14490] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8234 [ 933.676261][T14490] R13: ff1100001c3a8200 R14: ffffffff931c7940 R15: ff1100001c3a8e40 [ 933.676463][T14490] FS: 00007f52461b2440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 933.676695][T14490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.676863][T14490] CR2: 000000000044f720 CR3: 000000001b994005 CR4: 0000000000771ef0 [ 933.677134][T14490] PKRU: 55555554 [ 933.677233][T14490] Call Trace: [ 933.677331][T14490] [ 933.677400][T14490] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.677533][T14490] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.677673][T14490] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.677809][T14490] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.678024][T14490] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.678160][T14490] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.678295][T14490] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.678433][T14490] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.678563][T14490] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.678699][T14490] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.678872][T14490] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.679108][T14490] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.679273][T14490] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.679438][T14490] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.679593][T14490] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.679736][T14490] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.679956][T14490] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.680097][T14490] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.680235][T14490] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.680373][T14490] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.680523][T14490] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.680657][T14490] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.680796][T14490] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.681045][T14490] ? move_addr_to_kernel (net/socket.c:2511) [ 933.681176][T14490] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.681306][T14490] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.681447][T14490] ___sys_sendmsg (net/socket.c:2641) [ 933.681577][T14490] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.681714][T14490] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.681851][T14490] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.682052][T14490] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.682183][T14490] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.682317][T14490] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.682453][T14490] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.682584][T14490] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.682715][T14490] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.682848][T14490] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.683045][T14490] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.683216][T14490] RIP: 0033:0x7f524630cc5e [ 933.683361][T14490] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.683838][T14490] RSP: 002b:00007ffc07e34580 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.684042][T14490] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f524630cc5e [ 933.684237][T14490] RDX: 0000000000000000 RSI: 00007ffc07e34640 RDI: 0000000000000005 [ 933.684444][T14490] RBP: 00007ffc07e34590 R08: 0000000000000000 R09: 0000000000000000 [ 933.684644][T14490] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.684842][T14490] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 933.762538][T14496] ------------[ cut here ]------------ | [ 933.762721][T14496] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14496 | [ 933.762985][T14496] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.763780][T14496] Tainted: [W]=WARN [ 933.763883][T14496] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.764132][T14496] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.764275][T14496] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.764753][T14496] RSP: 0018:ffa00000034775d0 EFLAGS: 00010286 [ 933.765011][T14496] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387516f [ 933.765212][T14496] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8b78 [ 933.765423][T14496] RBP: 1ff400000068eebb R08: 1fe2200003875170 R09: fffa3bfffffb0b24 [ 933.765628][T14496] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a98f4 [ 933.765830][T14496] R13: ff1100001c3a98c0 R14: ffffffff931c7940 R15: ff1100001c3a8ac0 [ 933.766083][T14496] FS: 00007fe6b778d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 933.766320][T14496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.766496][T14496] CR2: 000000000044f720 CR3: 000000001a80f002 CR4: 0000000000771ef0 [ 933.766694][T14496] PKRU: 55555554 [ 933.766794][T14496] Call Trace: [ 933.766943][T14496] [ 933.767012][T14496] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.767144][T14496] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.767285][T14496] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.767425][T14496] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.767562][T14496] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.767702][T14496] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.767833][T14496] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.768020][T14496] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.768153][T14496] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.768285][T14496] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.768429][T14496] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.768560][T14496] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.768693][T14496] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.768827][T14496] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.769008][T14496] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.769141][T14496] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.769279][T14496] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.769426][T14496] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.769561][T14496] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.769714][T14496] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.769858][T14496] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.770048][T14496] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.770189][T14496] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.770356][T14496] ? move_addr_to_kernel (net/socket.c:2511) [ 933.770518][T14496] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.770657][T14496] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.770798][T14496] ___sys_sendmsg (net/socket.c:2641) [ 933.770988][T14496] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.771132][T14496] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.771278][T14496] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.771425][T14496] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.771579][T14496] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.771731][T14496] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.771871][T14496] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.772099][T14496] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.772239][T14496] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.772377][T14496] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.772527][T14496] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.772707][T14496] RIP: 0033:0x7fe6b78e7c5e [ 933.772855][T14496] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.773435][T14496] RSP: 002b:00007ffe0f36b570 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.773647][T14496] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe6b78e7c5e [ 933.773858][T14496] RDX: 0000000000000000 RSI: 00007ffe0f36b630 RDI: 0000000000000005 [ 933.774108][T14496] RBP: 00007ffe0f36b580 R08: 0000000000000000 R09: 0000000000000000 [ 933.774313][T14496] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.774524][T14496] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 933.866291][T14500] ------------[ cut here ]------------ | [ 933.866486][T14500] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14500 | [ 933.866728][T14500] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.867945][T14500] Tainted: [W]=WARN [ 933.868054][T14500] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.868280][T14500] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.868467][T14500] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.869018][T14500] RSP: 0018:ffa00000034175d0 EFLAGS: 00010286 [ 933.869206][T14500] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e937 [ 933.869425][T14500] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9749b8 [ 933.869627][T14500] RBP: 1ff4000000682ebb R08: 1fe220000192e938 R09: fffa3bfffffb0b24 [ 933.869826][T14500] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974774 [ 933.870033][T14500] R13: ff1100000c974740 R14: ffffffff931c7940 R15: ff1100000c974900 [ 933.870245][T14500] FS: 00007f0019168440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 933.870492][T14500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.870668][T14500] CR2: 000000000044f720 CR3: 000000001045f002 CR4: 0000000000771ef0 [ 933.870870][T14500] PKRU: 55555554 [ 933.870976][T14500] Call Trace: [ 933.871077][T14500] [ 933.871146][T14500] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.871283][T14500] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.871452][T14500] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.871593][T14500] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.871733][T14500] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.871874][T14500] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.872015][T14500] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.872157][T14500] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.872292][T14500] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.872434][T14500] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.872569][T14500] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.872716][T14500] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.872857][T14500] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.873004][T14500] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.873141][T14500] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.873279][T14500] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.873419][T14500] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.873553][T14500] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.873687][T14500] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.873819][T14500] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.873963][T14500] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.874097][T14500] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.874231][T14500] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.874405][T14500] ? move_addr_to_kernel (net/socket.c:2511) [ 933.874539][T14500] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.874671][T14500] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.874829][T14500] ___sys_sendmsg (net/socket.c:2641) [ 933.874971][T14500] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.875108][T14500] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.875249][T14500] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.875393][T14500] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.875526][T14500] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.875665][T14500] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.875803][T14500] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.875941][T14500] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.876075][T14500] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.876213][T14500] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.876351][T14500] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.876569][T14500] RIP: 0033:0x7f00192c2c5e [ 933.876716][T14500] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.877206][T14500] RSP: 002b:00007ffd2c4cd680 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.877419][T14500] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f00192c2c5e [ 933.877618][T14500] RDX: 0000000000000000 RSI: 00007ffd2c4cd740 RDI: 0000000000000005 [ 933.877815][T14500] RBP: 00007ffd2c4cd690 R08: 0000000000000000 R09: 0000000000000000 [ 933.878046][T14500] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.878255][T14500] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 933.972310][T14506] ------------[ cut here ]------------ | [ 933.972521][T14506] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14506 | [ 933.972791][T14506] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 933.974054][T14506] Tainted: [W]=WARN [ 933.974164][T14506] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 933.974341][T14506] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 933.974525][T14506] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 933.975072][T14506] RSP: 0018:ffa00000034475d0 EFLAGS: 00010286 [ 933.975252][T14506] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e9df [ 933.975474][T14506] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974ef8 [ 933.975684][T14506] RBP: 1ff4000000688ebb R08: 1fe220000192e9e0 R09: fffa3bfffffb0b24 [ 933.975901][T14506] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974cb4 [ 933.976112][T14506] R13: ff1100000c974c80 R14: ffffffff931c7940 R15: ff1100000c974e40 [ 933.976329][T14506] FS: 00007fc8fd7e1440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 933.976591][T14506] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.976762][T14506] CR2: 000000000044f720 CR3: 000000001a81f002 CR4: 0000000000771ef0 [ 933.976970][T14506] PKRU: 55555554 [ 933.977072][T14506] Call Trace: [ 933.977182][T14506] [ 933.977254][T14506] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 933.977403][T14506] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 933.977550][T14506] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 933.977687][T14506] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.977823][T14506] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.977968][T14506] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 933.978107][T14506] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 933.978251][T14506] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 933.978430][T14506] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 933.978568][T14506] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 933.978718][T14506] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 933.978861][T14506] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 933.979006][T14506] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 933.979144][T14506] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 933.979290][T14506] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 933.979472][T14506] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 933.979621][T14506] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.979764][T14506] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 933.979933][T14506] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 933.980089][T14506] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 933.980224][T14506] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 933.980356][T14506] ? copy_msghdr_from_user (net/socket.c:2525) [ 933.980500][T14506] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 933.980668][T14506] ? move_addr_to_kernel (net/socket.c:2511) [ 933.980803][T14506] ? filemap_map_folio_range (mm/filemap.c:3873) [ 933.980961][T14506] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 933.981097][T14506] ___sys_sendmsg (net/socket.c:2641) [ 933.981242][T14506] ? copy_msghdr_from_user (net/socket.c:2628) [ 933.981378][T14506] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 933.981518][T14506] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 933.981656][T14506] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 933.981790][T14506] ? __sys_sendmsg_sock (net/socket.c:2656) [ 933.981931][T14506] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 933.982063][T14506] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.982221][T14506] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 933.982378][T14506] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 933.982541][T14506] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 933.982696][T14506] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 933.982908][T14506] RIP: 0033:0x7fc8fd93bc5e [ 933.983054][T14506] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 933.983560][T14506] RSP: 002b:00007fff454508f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 933.983758][T14506] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc8fd93bc5e [ 933.983993][T14506] RDX: 0000000000000000 RSI: 00007fff454509b0 RDI: 0000000000000005 [ 933.984208][T14506] RBP: 00007fff45450900 R08: 0000000000000000 R09: 0000000000000000 [ 933.984451][T14506] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 933.984674][T14506] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 934.047580][T14510] ------------[ cut here ]------------ | [ 934.047800][T14510] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14510 | [ 934.048103][T14510] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.048967][T14510] Tainted: [W]=WARN [ 934.049116][T14510] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.049329][T14510] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.049536][T14510] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.050675][T14510] RSP: 0018:ffa00000034975d0 EFLAGS: 00010286 [ 934.050972][T14510] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229cff [ 934.051257][T14510] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914e7f8 [ 934.051508][T14510] RBP: 1ff4000000692ebb R08: 1fe2200003229d00 R09: fffa3bfffffb0b24 [ 934.051757][T14510] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e3f4 [ 934.052014][T14510] R13: ff1100001914e3c0 R14: ffffffff931c7940 R15: ff1100001914e740 [ 934.052286][T14510] FS: 00007f738c0a4440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 934.052580][T14510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.052807][T14510] CR2: 000000000044f720 CR3: 000000000c418003 CR4: 0000000000771ef0 [ 934.053072][T14510] PKRU: 55555554 [ 934.053222][T14510] Call Trace: [ 934.053372][T14510] [ 934.053510][T14510] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.053700][T14510] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.053891][T14510] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.054087][T14510] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.054269][T14510] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.054466][T14510] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.054645][T14510] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.054828][T14510] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.055024][T14510] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.055207][T14510] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.055398][T14510] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.055580][T14510] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.055764][T14510] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.055965][T14510] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.056143][T14510] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.056328][T14510] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.056523][T14510] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.056719][T14510] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.056914][T14510] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.057095][T14510] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.057284][T14510] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.057473][T14510] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.057654][T14510] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.057873][T14510] ? move_addr_to_kernel (net/socket.c:2511) [ 934.058069][T14510] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.058250][T14510] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.058441][T14510] ___sys_sendmsg (net/socket.c:2641) [ 934.058642][T14510] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.058829][T14510] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.059029][T14510] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.059215][T14510] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.059405][T14510] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.059592][T14510] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.059774][T14510] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.059970][T14510] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.060156][T14510] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.060336][T14510] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.060529][T14510] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.060759][T14510] RIP: 0033:0x7f738c1fec5e [ 934.060962][T14510] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.061492][T14510] RSP: 002b:00007ffef7facc40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.061740][T14510] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f738c1fec5e [ 934.062002][T14510] RDX: 0000000000000000 RSI: 00007ffef7facd00 RDI: 0000000000000005 [ 934.062248][T14510] RBP: 00007ffef7facc50 R08: 0000000000000000 R09: 0000000000000000 [ 934.062503][T14510] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.062750][T14510] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 934.142053][T14516] ------------[ cut here ]------------ | [ 934.142254][T14516] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14516 | [ 934.142548][T14516] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.143426][T14516] Tainted: [W]=WARN [ 934.143579][T14516] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.143800][T14516] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.144310][T14516] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.144846][T14516] RSP: 0018:ffa00000033c75d0 EFLAGS: 00010286 [ 934.145082][T14516] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229e87 [ 934.145332][T14516] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f438 [ 934.145598][T14516] RBP: 1ff4000000678ebb R08: 1fe2200003229e88 R09: fffa3bfffffb0b24 [ 934.145854][T14516] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e074 [ 934.146114][T14516] R13: ff1100001914e040 R14: ffffffff931c7940 R15: ff1100001914f380 [ 934.146373][T14516] FS: 00007fc3c1b59440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 934.146668][T14516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.146891][T14516] CR2: 000000000044f720 CR3: 00000000183e7004 CR4: 0000000000771ef0 [ 934.147161][T14516] PKRU: 55555554 [ 934.147311][T14516] Call Trace: [ 934.147466][T14516] [ 934.147587][T14516] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.147776][T14516] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.147988][T14516] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.148180][T14516] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.148367][T14516] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.148563][T14516] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.148750][T14516] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.148951][T14516] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.149137][T14516] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.149321][T14516] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.149519][T14516] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.149703][T14516] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.149890][T14516] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.150111][T14516] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.150296][T14516] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.150491][T14516] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.150678][T14516] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.150863][T14516] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.151059][T14516] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.151245][T14516] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.151439][T14516] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.151638][T14516] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.151821][T14516] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.152044][T14516] ? move_addr_to_kernel (net/socket.c:2511) [ 934.152230][T14516] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.152421][T14516] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.152609][T14516] ___sys_sendmsg (net/socket.c:2641) [ 934.152793][T14516] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.152996][T14516] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.153184][T14516] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.153371][T14516] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.153566][T14516] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.153753][T14516] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.153947][T14516] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.154134][T14516] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.154320][T14516] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.154514][T14516] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.154704][T14516] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.154932][T14516] RIP: 0033:0x7fc3c1cb3c5e [ 934.155124][T14516] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.155656][T14516] RSP: 002b:00007fff636ca8d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.155922][T14516] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc3c1cb3c5e [ 934.156184][T14516] RDX: 0000000000000000 RSI: 00007fff636ca990 RDI: 0000000000000005 [ 934.156436][T14516] RBP: 00007fff636ca8e0 R08: 0000000000000000 R09: 0000000000000000 [ 934.156683][T14516] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.156946][T14516] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 934.223160][T14520] ------------[ cut here ]------------ | [ 934.223334][T14520] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14520 | [ 934.223655][T14520] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.224486][T14520] Tainted: [W]=WARN [ 934.224589][T14520] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.224763][T14520] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.224909][T14520] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.225395][T14520] RSP: 0018:ffa00000034a75d0 EFLAGS: 00010286 [ 934.225570][T14520] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c20c7 [ 934.225773][T14520] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610638 [ 934.225979][T14520] RBP: 1ff4000000694ebb R08: 1fe22000034c20c8 R09: fffa3bfffffb0b24 [ 934.226182][T14520] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611c74 [ 934.226378][T14520] R13: ff1100001a611c40 R14: ffffffff931c7940 R15: ff1100001a610580 [ 934.226583][T14520] FS: 00007fa88595b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 934.226816][T14520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.226994][T14520] CR2: 000000000044f720 CR3: 000000000db78003 CR4: 0000000000771ef0 [ 934.227194][T14520] PKRU: 55555554 [ 934.227294][T14520] Call Trace: [ 934.227399][T14520] [ 934.227466][T14520] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.227599][T14520] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.227738][T14520] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.227874][T14520] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.228010][T14520] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.228148][T14520] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.228278][T14520] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.228415][T14520] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.228549][T14520] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.228684][T14520] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.228818][T14520] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.229431][T14520] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.229588][T14520] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.229718][T14520] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.229849][T14520] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.229994][T14520] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.230129][T14520] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.230263][T14520] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.230506][T14520] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.230644][T14520] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.230785][T14520] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.230928][T14520] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.231081][T14520] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.231252][T14520] ? move_addr_to_kernel (net/socket.c:2511) [ 934.231396][T14520] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.231548][T14520] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.231705][T14520] ___sys_sendmsg (net/socket.c:2641) [ 934.231855][T14520] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.232000][T14520] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.232135][T14520] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.232276][T14520] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.232415][T14520] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.232554][T14520] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.232686][T14520] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.232825][T14520] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.232968][T14520] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.233106][T14520] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.233238][T14520] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.233408][T14520] RIP: 0033:0x7fa885ab5c5e [ 934.233550][T14520] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.234050][T14520] RSP: 002b:00007ffc28de8930 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.234251][T14520] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa885ab5c5e [ 934.234537][T14520] RDX: 0000000000000000 RSI: 00007ffc28de89f0 RDI: 0000000000000005 [ 934.234748][T14520] RBP: 00007ffc28de8940 R08: 0000000000000000 R09: 0000000000000000 [ 934.235034][T14520] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.235237][T14520] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 934.322957][T14526] ------------[ cut here ]------------ | [ 934.323165][T14526] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14526 | [ 934.323469][T14526] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.324415][T14526] Tainted: [W]=WARN [ 934.324571][T14526] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.324793][T14526] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.325005][T14526] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.325551][T14526] RSP: 0018:ffa00000034d75d0 EFLAGS: 00010286 [ 934.325777][T14526] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c2057 [ 934.326056][T14526] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6102b8 [ 934.326309][T14526] RBP: 1ff400000069aebb R08: 1fe22000034c2058 R09: fffa3bfffffb0b24 [ 934.326566][T14526] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611e34 [ 934.326857][T14526] R13: ff1100001a611e00 R14: ffffffff931c7940 R15: ff1100001a610200 [ 934.327124][T14526] FS: 00007f7136800440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 934.327419][T14526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.327642][T14526] CR2: 000000000044f720 CR3: 000000000c89d003 CR4: 0000000000771ef0 [ 934.327917][T14526] PKRU: 55555554 [ 934.328070][T14526] Call Trace: [ 934.328221][T14526] [ 934.328342][T14526] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.328538][T14526] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.328734][T14526] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.328961][T14526] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.329146][T14526] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.329338][T14526] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.329531][T14526] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.329719][T14526] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.329917][T14526] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.330116][T14526] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.330306][T14526] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.330511][T14526] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.330705][T14526] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.330907][T14526] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.331107][T14526] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.331312][T14526] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.331503][T14526] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.331692][T14526] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.331882][T14526] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.332083][T14526] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.332277][T14526] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.332515][T14526] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.332718][T14526] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.332946][T14526] ? move_addr_to_kernel (net/socket.c:2511) [ 934.333139][T14526] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.333353][T14526] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.333551][T14526] ___sys_sendmsg (net/socket.c:2641) [ 934.333740][T14526] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.333943][T14526] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.334133][T14526] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.334342][T14526] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.334537][T14526] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.334726][T14526] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.334923][T14526] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.335117][T14526] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.335306][T14526] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.335500][T14526] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.335687][T14526] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.335925][T14526] RIP: 0033:0x7f713695ac5e [ 934.336117][T14526] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.336685][T14526] RSP: 002b:00007ffe44cc5f90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.336946][T14526] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f713695ac5e [ 934.337196][T14526] RDX: 0000000000000000 RSI: 00007ffe44cc6050 RDI: 0000000000000005 [ 934.337494][T14526] RBP: 00007ffe44cc5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 934.337745][T14526] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.338012][T14526] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 934.422323][T14530] ------------[ cut here ]------------ | [ 934.422497][T14530] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14530 | [ 934.422742][T14530] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.424064][T14530] Tainted: [W]=WARN [ 934.424176][T14530] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.424350][T14530] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.424507][T14530] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.424999][T14530] RSP: 0018:ffa00000034e75d0 EFLAGS: 00010286 [ 934.425181][T14530] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c224f [ 934.425395][T14530] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611278 [ 934.425594][T14530] RBP: 1ff400000069cebb R08: 1fe22000034c2250 R09: fffa3bfffffb0b24 [ 934.425793][T14530] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610cb4 [ 934.426002][T14530] R13: ff1100001a610c80 R14: ffffffff931c7940 R15: ff1100001a6111c0 [ 934.426208][T14530] FS: 00007f126e96d440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 934.426450][T14530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.426616][T14530] CR2: 000000000044f720 CR3: 000000000c5b6003 CR4: 0000000000771ef0 [ 934.426815][T14530] PKRU: 55555554 [ 934.426923][T14530] Call Trace: [ 934.427025][T14530] [ 934.427093][T14530] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.427228][T14530] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.427371][T14530] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.427512][T14530] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.427644][T14530] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.427779][T14530] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.427913][T14530] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.428048][T14530] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.428178][T14530] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.428311][T14530] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.428451][T14530] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.428581][T14530] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.428715][T14530] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.428850][T14530] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.428988][T14530] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.429131][T14530] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.429266][T14530] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.429403][T14530] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.429536][T14530] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.429667][T14530] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.429802][T14530] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.429940][T14530] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.430072][T14530] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.430244][T14530] ? move_addr_to_kernel (net/socket.c:2511) [ 934.430376][T14530] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.430513][T14530] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.430655][T14530] ___sys_sendmsg (net/socket.c:2641) [ 934.430786][T14530] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.430936][T14530] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.431070][T14530] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.431214][T14530] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.431353][T14530] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.431497][T14530] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.431651][T14530] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.431790][T14530] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.431957][T14530] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.432100][T14530] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.432241][T14530] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.432424][T14530] RIP: 0033:0x7f126eac7c5e [ 934.432572][T14530] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.433073][T14530] RSP: 002b:00007fff9685a5a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.433280][T14530] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f126eac7c5e [ 934.433484][T14530] RDX: 0000000000000000 RSI: 00007fff9685a660 RDI: 0000000000000005 [ 934.433684][T14530] RBP: 00007fff9685a5b0 R08: 0000000000000000 R09: 0000000000000000 [ 934.433881][T14530] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.434091][T14530] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 934.496907][T14536] ------------[ cut here ]------------ | [ 934.497063][T14536] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14536 | [ 934.497306][T14536] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.498717][T14536] Tainted: [W]=WARN [ 934.498825][T14536] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.499175][T14536] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.499324][T14536] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.499821][T14536] RSP: 0018:ffa00000035575d0 EFLAGS: 00010286 [ 934.500100][T14536] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea04ff [ 934.500317][T14536] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5027f8 [ 934.500528][T14536] RBP: 1ff40000006aaebb R08: 1fe2200001ea0500 R09: fffa3bfffffb0b24 [ 934.500727][T14536] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503034 [ 934.501037][T14536] R13: ff1100000f503000 R14: ffffffff931c7940 R15: ff1100000f502740 [ 934.501239][T14536] FS: 00007f4fbf17b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 934.501481][T14536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.501651][T14536] CR2: 000000000044f720 CR3: 0000000017e53005 CR4: 0000000000771ef0 [ 934.501856][T14536] PKRU: 55555554 [ 934.502062][T14536] Call Trace: [ 934.502162][T14536] [ 934.502235][T14536] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.502369][T14536] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.502514][T14536] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.502655][T14536] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.502792][T14536] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.503025][T14536] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.503161][T14536] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.503293][T14536] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.503439][T14536] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.503579][T14536] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.503721][T14536] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.503858][T14536] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.504097][T14536] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.504235][T14536] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.504373][T14536] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.504518][T14536] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.504659][T14536] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.504807][T14536] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.505039][T14536] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.505183][T14536] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.505319][T14536] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.505463][T14536] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.505596][T14536] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.505760][T14536] ? move_addr_to_kernel (net/socket.c:2511) [ 934.505962][T14536] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.506103][T14536] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.506241][T14536] ___sys_sendmsg (net/socket.c:2641) [ 934.506379][T14536] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.506528][T14536] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.506671][T14536] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.506814][T14536] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.507019][T14536] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.507154][T14536] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.507289][T14536] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.507427][T14536] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.507565][T14536] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.507698][T14536] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.507831][T14536] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.508001][T14536] RIP: 0033:0x7f4fbf2d5c5e [ 934.508142][T14536] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.508629][T14536] RSP: 002b:00007ffcbad5ed60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.508836][T14536] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4fbf2d5c5e [ 934.509036][T14536] RDX: 0000000000000000 RSI: 00007ffcbad5ee20 RDI: 0000000000000005 [ 934.509234][T14536] RBP: 00007ffcbad5ed70 R08: 0000000000000000 R09: 0000000000000000 [ 934.509445][T14536] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.509642][T14536] R13: 0000000069cbe7ed R14: 0000000000000004 R15: 000000000049d620 | [ 934.582453][T14540] ------------[ cut here ]------------ | [ 934.582622][T14540] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14540 | [ 934.582865][T14540] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.583729][T14540] Tainted: [W]=WARN [ 934.583837][T14540] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.584031][T14540] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.584192][T14540] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.584713][T14540] RSP: 0018:ffa00000035175d0 EFLAGS: 00010286 [ 934.584888][T14540] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0687 [ 934.585091][T14540] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503438 [ 934.585289][T14540] RBP: 1ff40000006a2ebb R08: 1fe2200001ea0688 R09: fffa3bfffffb0b24 [ 934.585496][T14540] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503ab4 [ 934.585726][T14540] R13: ff1100000f503a80 R14: ffffffff931c7940 R15: ff1100000f503380 [ 934.585947][T14540] FS: 00007fc3272d5440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 934.586187][T14540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.586381][T14540] CR2: 000000000044f720 CR3: 000000001a6e6003 CR4: 0000000000771ef0 [ 934.586596][T14540] PKRU: 55555554 [ 934.586710][T14540] Call Trace: [ 934.586812][T14540] [ 934.586881][T14540] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.587023][T14540] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.587172][T14540] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.587314][T14540] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.587460][T14540] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.587600][T14540] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.587738][T14540] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.587872][T14540] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.588008][T14540] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.588141][T14540] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.588279][T14540] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.588417][T14540] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.588573][T14540] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.588808][T14540] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.589156][T14540] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.589295][T14540] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.589456][T14540] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.589595][T14540] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.589752][T14540] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.589901][T14540] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.590060][T14540] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.590197][T14540] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.590338][T14540] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.590543][T14540] ? move_addr_to_kernel (net/socket.c:2511) [ 934.590709][T14540] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.590846][T14540] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.590998][T14540] ___sys_sendmsg (net/socket.c:2641) [ 934.591138][T14540] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.591281][T14540] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.591430][T14540] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.591564][T14540] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.591713][T14540] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.591850][T14540] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.591988][T14540] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.592131][T14540] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.592300][T14540] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.592471][T14540] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.592605][T14540] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.592777][T14540] RIP: 0033:0x7fc32742fc5e [ 934.592940][T14540] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.593430][T14540] RSP: 002b:00007ffd54ffbe00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.593680][T14540] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc32742fc5e [ 934.593886][T14540] RDX: 0000000000000000 RSI: 00007ffd54ffbec0 RDI: 0000000000000005 [ 934.594099][T14540] RBP: 00007ffd54ffbe10 R08: 0000000000000000 R09: 0000000000000000 [ 934.594334][T14540] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.594545][T14540] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 934.673988][T14546] ------------[ cut here ]------------ | [ 934.674159][T14546] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14546 | [ 934.674430][T14546] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.675304][T14546] Tainted: [W]=WARN [ 934.675421][T14546] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.675607][T14546] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.675786][T14546] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.676323][T14546] RSP: 0018:ffa00000035475d0 EFLAGS: 00010286 [ 934.676522][T14546] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f19a7 [ 934.676758][T14546] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cd38 [ 934.676997][T14546] RBP: 1ff40000006a8ebb R08: 1fe22000036f19a8 R09: fffa3bfffffb0b24 [ 934.677223][T14546] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503734 [ 934.677438][T14546] R13: ff1100000f503700 R14: ffffffff931c7940 R15: ff1100001b78cc80 [ 934.677649][T14546] FS: 00007fc682bd8440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 934.677971][T14546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.678148][T14546] CR2: 000000000044f720 CR3: 000000000db8d001 CR4: 0000000000771ef0 [ 934.678361][T14546] PKRU: 55555554 [ 934.678507][T14546] Call Trace: [ 934.678613][T14546] [ 934.678685][T14546] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.678825][T14546] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.679001][T14546] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.679146][T14546] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.679288][T14546] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.679435][T14546] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.679577][T14546] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.679722][T14546] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.679869][T14546] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.680026][T14546] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.680166][T14546] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.680317][T14546] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.680571][T14546] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.680710][T14546] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.680866][T14546] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.681008][T14546] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.681150][T14546] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.681295][T14546] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.681443][T14546] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.681578][T14546] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.681720][T14546] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.681860][T14546] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.682000][T14546] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.682172][T14546] ? move_addr_to_kernel (net/socket.c:2511) [ 934.682314][T14546] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.682462][T14546] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.682602][T14546] ___sys_sendmsg (net/socket.c:2641) [ 934.682741][T14546] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.682885][T14546] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.683029][T14546] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.683171][T14546] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.683310][T14546] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.683463][T14546] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.683607][T14546] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.683748][T14546] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.683902][T14546] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.684045][T14546] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.684185][T14546] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.684351][T14546] RIP: 0033:0x7fc682d32c5e [ 934.684505][T14546] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.685015][T14546] RSP: 002b:00007ffcbe8e6020 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.685228][T14546] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc682d32c5e [ 934.685437][T14546] RDX: 0000000000000000 RSI: 00007ffcbe8e60e0 RDI: 0000000000000005 [ 934.685651][T14546] RBP: 00007ffcbe8e6030 R08: 0000000000000000 R09: 0000000000000000 [ 934.685854][T14546] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.686062][T14546] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 934.765504][T14550] ------------[ cut here ]------------ | [ 934.765717][T14550] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14550 | [ 934.766240][T14550] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.767147][T14550] Tainted: [W]=WARN [ 934.767302][T14550] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.767544][T14550] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.767744][T14550] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.768311][T14550] RSP: 0018:ffa00000035575d0 EFLAGS: 00010286 [ 934.768547][T14550] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b67 [ 934.768803][T14550] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 934.769069][T14550] RBP: 1ff40000006aaebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b24 [ 934.769319][T14550] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d574 [ 934.769585][T14550] R13: ff1100001b78d540 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 934.769839][T14550] FS: 00007ff3b84e4440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 934.770144][T14550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.770368][T14550] CR2: 000000000044f720 CR3: 000000001073e006 CR4: 0000000000771ef0 [ 934.770646][T14550] PKRU: 55555554 [ 934.770801][T14550] Call Trace: [ 934.770969][T14550] [ 934.771090][T14550] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.771276][T14550] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.771480][T14550] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.771696][T14550] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.771886][T14550] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.772090][T14550] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.772275][T14550] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.772471][T14550] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.772660][T14550] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.772848][T14550] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.773055][T14550] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.773251][T14550] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.773450][T14550] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.773640][T14550] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.773825][T14550] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.774026][T14550] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.774213][T14550] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.774408][T14550] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.774599][T14550] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.774787][T14550] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.774993][T14550] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.775181][T14550] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.775367][T14550] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.775596][T14550] ? move_addr_to_kernel (net/socket.c:2511) [ 934.775785][T14550] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.775981][T14550] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.776173][T14550] ___sys_sendmsg (net/socket.c:2641) [ 934.776362][T14550] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.776563][T14550] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.776765][T14550] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.776984][T14550] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.777192][T14550] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.777415][T14550] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.777623][T14550] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.777837][T14550] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.778076][T14550] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.778291][T14550] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.778504][T14550] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.778727][T14550] RIP: 0033:0x7ff3b863ec5e [ 934.778956][T14550] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.779556][T14550] RSP: 002b:00007ffc04d51030 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.779938][T14550] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff3b863ec5e [ 934.780217][T14550] RDX: 0000000000000000 RSI: 00007ffc04d510f0 RDI: 0000000000000005 [ 934.780499][T14550] RBP: 00007ffc04d51040 R08: 0000000000000000 R09: 0000000000000000 [ 934.780868][T14550] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.781162][T14550] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 934.846655][T14556] ------------[ cut here ]------------ | [ 934.846820][T14556] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14556 | [ 934.847272][T14556] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.848085][T14556] Tainted: [W]=WARN [ 934.848188][T14556] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.848357][T14556] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.848510][T14556] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.849001][T14556] RSP: 0018:ffa00000035275d0 EFLAGS: 00010286 [ 934.849178][T14556] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f18ff [ 934.849378][T14556] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c7f8 [ 934.849585][T14556] RBP: 1ff40000006a4ebb R08: 1fe22000036f1900 R09: fffa3bfffffb0b24 [ 934.849787][T14556] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d1f4 [ 934.850006][T14556] R13: ff1100001b78d1c0 R14: ffffffff931c7940 R15: ff1100001b78c740 [ 934.850214][T14556] FS: 00007f759df92440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 934.850461][T14556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.850642][T14556] CR2: 000000000044f720 CR3: 000000001c442004 CR4: 0000000000771ef0 [ 934.850845][T14556] PKRU: 55555554 [ 934.850952][T14556] Call Trace: [ 934.851052][T14556] [ 934.851121][T14556] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.851254][T14556] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.851400][T14556] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.851543][T14556] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.851683][T14556] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.851819][T14556] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.851959][T14556] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.852096][T14556] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.852236][T14556] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.852370][T14556] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.852512][T14556] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.852646][T14556] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.852782][T14556] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.852922][T14556] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.853069][T14556] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.853200][T14556] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.853335][T14556] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.853476][T14556] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.853613][T14556] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.853756][T14556] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.853901][T14556] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.854040][T14556] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.854181][T14556] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.854345][T14556] ? move_addr_to_kernel (net/socket.c:2511) [ 934.854485][T14556] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.854621][T14556] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.854756][T14556] ___sys_sendmsg (net/socket.c:2641) [ 934.854890][T14556] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.855035][T14556] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.855171][T14556] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.855313][T14556] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.855453][T14556] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.855591][T14556] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.855726][T14556] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.855862][T14556] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.856005][T14556] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.856138][T14556] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.856273][T14556] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.856459][T14556] RIP: 0033:0x7f759e0ecc5e [ 934.856611][T14556] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.857106][T14556] RSP: 002b:00007fffa129ef60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.857310][T14556] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f759e0ecc5e [ 934.857524][T14556] RDX: 0000000000000000 RSI: 00007fffa129f020 RDI: 0000000000000005 [ 934.857726][T14556] RBP: 00007fffa129ef70 R08: 0000000000000000 R09: 0000000000000000 [ 934.857933][T14556] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.858133][T14556] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 934.943033][T14560] ------------[ cut here ]------------ | [ 934.943230][T14560] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14560 | [ 934.943476][T14560] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 934.944879][T14560] Tainted: [W]=WARN [ 934.945039][T14560] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 934.945206][T14560] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 934.945349][T14560] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 934.945825][T14560] RSP: 0018:ffa00000035075d0 EFLAGS: 00010286 [ 934.946052][T14560] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038751df [ 934.946273][T14560] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8ef8 [ 934.946488][T14560] RBP: 1ff40000006a0ebb R08: 1fe22000038751e0 R09: fffa3bfffffb0b24 [ 934.946685][T14560] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8234 [ 934.946888][T14560] R13: ff1100001c3a8200 R14: ffffffff931c7940 R15: ff1100001c3a8e40 [ 934.947166][T14560] FS: 00007f0f70dbe440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 934.947424][T14560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.947592][T14560] CR2: 000000000044f720 CR3: 000000001a4de006 CR4: 0000000000771ef0 [ 934.947808][T14560] PKRU: 55555554 [ 934.947978][T14560] Call Trace: [ 934.948082][T14560] [ 934.948151][T14560] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 934.948283][T14560] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 934.948428][T14560] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 934.948570][T14560] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.948714][T14560] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.948850][T14560] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 934.949033][T14560] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 934.949167][T14560] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 934.949297][T14560] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 934.949445][T14560] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 934.949580][T14560] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 934.949734][T14560] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 934.949870][T14560] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 934.950051][T14560] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 934.950194][T14560] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 934.950328][T14560] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 934.950466][T14560] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.950618][T14560] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 934.950756][T14560] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 934.950950][T14560] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 934.951087][T14560] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 934.951219][T14560] ? copy_msghdr_from_user (net/socket.c:2525) [ 934.951354][T14560] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 934.951524][T14560] ? move_addr_to_kernel (net/socket.c:2511) [ 934.951655][T14560] ? filemap_map_folio_range (mm/filemap.c:3873) [ 934.951787][T14560] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 934.951974][T14560] ___sys_sendmsg (net/socket.c:2641) [ 934.952106][T14560] ? copy_msghdr_from_user (net/socket.c:2628) [ 934.952242][T14560] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 934.952393][T14560] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 934.952538][T14560] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 934.952672][T14560] ? __sys_sendmsg_sock (net/socket.c:2656) [ 934.952809][T14560] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 934.952992][T14560] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.953132][T14560] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 934.953265][T14560] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 934.953436][T14560] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 934.953571][T14560] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 934.953745][T14560] RIP: 0033:0x7f0f70f18c5e [ 934.953888][T14560] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 934.954424][T14560] RSP: 002b:00007ffcd725d1c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 934.954639][T14560] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0f70f18c5e [ 934.954877][T14560] RDX: 0000000000000000 RSI: 00007ffcd725d280 RDI: 0000000000000005 [ 934.955128][T14560] RBP: 00007ffcd725d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.955345][T14560] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 934.955551][T14560] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.020459][T14566] ------------[ cut here ]------------ | [ 935.020635][T14566] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14566 | [ 935.021326][T14566] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.022124][T14566] Tainted: [W]=WARN [ 935.022226][T14566] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.022431][T14566] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.022592][T14566] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.023072][T14566] RSP: 0018:ffa00000035a75d0 EFLAGS: 00010286 [ 935.023255][T14566] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038752bf [ 935.023493][T14566] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a95f8 [ 935.023715][T14566] RBP: 1ff40000006b4ebb R08: 1fe22000038752c0 R09: fffa3bfffffb0b24 [ 935.023941][T14566] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9e34 [ 935.024144][T14566] R13: ff1100001c3a9e00 R14: ffffffff931c7940 R15: ff1100001c3a9540 [ 935.024348][T14566] FS: 00007f2fb9cd1440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 935.024601][T14566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.024775][T14566] CR2: 000000000044f720 CR3: 0000000019d11002 CR4: 0000000000771ef0 [ 935.024996][T14566] PKRU: 55555554 [ 935.025097][T14566] Call Trace: [ 935.025197][T14566] [ 935.025266][T14566] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.025404][T14566] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.025566][T14566] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.025714][T14566] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.025849][T14566] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.025992][T14566] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.026130][T14566] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.026317][T14566] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.026507][T14566] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.026648][T14566] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.026789][T14566] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.026934][T14566] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.027086][T14566] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.027224][T14566] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.027358][T14566] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.027544][T14566] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.027758][T14566] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.027902][T14566] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.028038][T14566] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.028175][T14566] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.028315][T14566] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.028472][T14566] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.028615][T14566] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.028791][T14566] ? move_addr_to_kernel (net/socket.c:2511) [ 935.028936][T14566] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.029098][T14566] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.029244][T14566] ___sys_sendmsg (net/socket.c:2641) [ 935.029425][T14566] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.029567][T14566] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.029705][T14566] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.029840][T14566] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.029978][T14566] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.030114][T14566] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.030248][T14566] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.030391][T14566] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.030527][T14566] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.030660][T14566] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.030793][T14566] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.030986][T14566] RIP: 0033:0x7f2fb9e2bc5e [ 935.031135][T14566] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.031671][T14566] RSP: 002b:00007ffe89a7c420 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.031883][T14566] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2fb9e2bc5e [ 935.032100][T14566] RDX: 0000000000000000 RSI: 00007ffe89a7c4e0 RDI: 0000000000000005 [ 935.032310][T14566] RBP: 00007ffe89a7c430 R08: 0000000000000000 R09: 0000000000000000 [ 935.032527][T14566] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.032737][T14566] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.108160][T14570] ------------[ cut here ]------------ | [ 935.108333][T14570] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14570 | [ 935.108579][T14570] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.109762][T14570] Tainted: [W]=WARN [ 935.109873][T14570] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.110054][T14570] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.110204][T14570] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.110718][T14570] RSP: 0018:ffa00000035475d0 EFLAGS: 00010286 [ 935.110904][T14570] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192ea17 [ 935.111117][T14570] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9750b8 [ 935.111330][T14570] RBP: 1ff40000006a8ebb R08: 1fe220000192ea18 R09: fffa3bfffffb0b24 [ 935.111547][T14570] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975ab4 [ 935.111760][T14570] R13: ff1100000c975a80 R14: ffffffff931c7940 R15: ff1100000c975000 [ 935.111979][T14570] FS: 00007f505d06e440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 935.112230][T14570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.112411][T14570] CR2: 000000000044f720 CR3: 000000001997a006 CR4: 0000000000771ef0 [ 935.112631][T14570] PKRU: 55555554 [ 935.112737][T14570] Call Trace: [ 935.112843][T14570] [ 935.112920][T14570] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.113064][T14570] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.113214][T14570] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.113361][T14570] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.113507][T14570] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.113651][T14570] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.113792][T14570] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.113941][T14570] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.114085][T14570] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.114229][T14570] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.114373][T14570] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.114520][T14570] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.114662][T14570] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.114806][T14570] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.114949][T14570] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.115092][T14570] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.115232][T14570] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.115390][T14570] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.115532][T14570] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.115676][T14570] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.115819][T14570] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.115972][T14570] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.116113][T14570] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.116285][T14570] ? move_addr_to_kernel (net/socket.c:2511) [ 935.116430][T14570] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.116571][T14570] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.116719][T14570] ___sys_sendmsg (net/socket.c:2641) [ 935.116859][T14570] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.117009][T14570] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.117153][T14570] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.117296][T14570] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.117440][T14570] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.117584][T14570] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.117725][T14570] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.117865][T14570] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.118009][T14570] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.118150][T14570] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.118290][T14570] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.118469][T14570] RIP: 0033:0x7f505d1c8c5e [ 935.118617][T14570] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.119141][T14570] RSP: 002b:00007ffeec622d50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.119366][T14570] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f505d1c8c5e [ 935.119582][T14570] RDX: 0000000000000000 RSI: 00007ffeec622e10 RDI: 0000000000000005 [ 935.119787][T14570] RBP: 00007ffeec622d60 R08: 0000000000000000 R09: 0000000000000000 [ 935.120009][T14570] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.120211][T14570] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.188922][T14576] ------------[ cut here ]------------ | [ 935.189101][T14576] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14576 | [ 935.189361][T14576] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.190507][T14576] Tainted: [W]=WARN [ 935.190618][T14576] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.190795][T14576] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.190948][T14576] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.191469][T14576] RSP: 0018:ffa00000035075d0 EFLAGS: 00010286 [ 935.191648][T14576] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e937 [ 935.191856][T14576] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9749b8 [ 935.192079][T14576] RBP: 1ff40000006a0ebb R08: 1fe220000192e938 R09: fffa3bfffffb0b24 [ 935.192299][T14576] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974774 [ 935.192532][T14576] R13: ff1100000c974740 R14: ffffffff931c7940 R15: ff1100000c974900 [ 935.192741][T14576] FS: 00007fd4c6d72440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 935.192987][T14576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.193167][T14576] CR2: 000000000044f720 CR3: 0000000010039001 CR4: 0000000000771ef0 [ 935.193373][T14576] PKRU: 55555554 [ 935.193479][T14576] Call Trace: [ 935.193578][T14576] [ 935.193646][T14576] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.193778][T14576] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.193925][T14576] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.194058][T14576] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.194215][T14576] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.194361][T14576] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.194512][T14576] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.194653][T14576] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.194793][T14576] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.194945][T14576] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.195094][T14576] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.195235][T14576] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.195374][T14576] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.195515][T14576] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.195646][T14576] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.195778][T14576] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.195916][T14576] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.196049][T14576] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.196191][T14576] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.196331][T14576] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.196481][T14576] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.196622][T14576] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.196763][T14576] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.196941][T14576] ? move_addr_to_kernel (net/socket.c:2511) [ 935.197081][T14576] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.197221][T14576] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.197363][T14576] ___sys_sendmsg (net/socket.c:2641) [ 935.197512][T14576] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.197665][T14576] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.197812][T14576] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.197966][T14576] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.198113][T14576] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.198256][T14576] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.198403][T14576] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.198548][T14576] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.198693][T14576] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.198834][T14576] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.198981][T14576] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.199157][T14576] RIP: 0033:0x7fd4c6eccc5e [ 935.199300][T14576] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.199820][T14576] RSP: 002b:00007ffde805ee50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.200055][T14576] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd4c6eccc5e [ 935.200262][T14576] RDX: 0000000000000000 RSI: 00007ffde805ef10 RDI: 0000000000000005 [ 935.200483][T14576] RBP: 00007ffde805ee60 R08: 0000000000000000 R09: 0000000000000000 [ 935.200719][T14576] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.200940][T14576] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.268085][T14580] ------------[ cut here ]------------ | [ 935.268260][T14580] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14580 | [ 935.268518][T14580] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.269910][T14580] Tainted: [W]=WARN [ 935.270025][T14580] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.270205][T14580] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.270349][T14580] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.270912][T14580] RSP: 0018:ffa00000035e75d0 EFLAGS: 00010286 [ 935.271123][T14580] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229da7 [ 935.271346][T14580] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914ed38 [ 935.271573][T14580] RBP: 1ff40000006bcebb R08: 1fe2200003229da8 R09: fffa3bfffffb0b24 [ 935.271785][T14580] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f034 [ 935.272004][T14580] R13: ff1100001914f000 R14: ffffffff931c7940 R15: ff1100001914ec80 [ 935.272225][T14580] FS: 00007f96f12cc440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 935.272481][T14580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.272667][T14580] CR2: 000000000044f720 CR3: 000000001997a004 CR4: 0000000000771ef0 [ 935.272910][T14580] PKRU: 55555554 [ 935.273014][T14580] Call Trace: [ 935.273146][T14580] [ 935.273223][T14580] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.273424][T14580] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.273575][T14580] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.273751][T14580] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.273884][T14580] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.274026][T14580] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.274164][T14580] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.274298][T14580] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.274436][T14580] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.274596][T14580] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.274739][T14580] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.274880][T14580] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.275026][T14580] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.275169][T14580] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.275312][T14580] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.275462][T14580] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.275611][T14580] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.275753][T14580] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.275900][T14580] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.276061][T14580] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.276201][T14580] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.276339][T14580] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.276483][T14580] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.276655][T14580] ? move_addr_to_kernel (net/socket.c:2511) [ 935.276796][T14580] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.276967][T14580] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.277114][T14580] ___sys_sendmsg (net/socket.c:2641) [ 935.277258][T14580] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.277407][T14580] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.277552][T14580] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.277689][T14580] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.277834][T14580] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.277986][T14580] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.278132][T14580] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.278283][T14580] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.278423][T14580] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.278558][T14580] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.278712][T14580] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.278883][T14580] RIP: 0033:0x7f96f1426c5e [ 935.279034][T14580] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.279533][T14580] RSP: 002b:00007ffe233c6730 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.279750][T14580] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f96f1426c5e [ 935.279976][T14580] RDX: 0000000000000000 RSI: 00007ffe233c67f0 RDI: 0000000000000005 [ 935.280185][T14580] RBP: 00007ffe233c6740 R08: 0000000000000000 R09: 0000000000000000 [ 935.280455][T14580] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.280685][T14580] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.341234][T14586] ------------[ cut here ]------------ | [ 935.341425][T14586] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14586 | [ 935.341688][T14586] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.342902][T14586] Tainted: [W]=WARN [ 935.343010][T14586] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.343208][T14586] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.343364][T14586] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.343863][T14586] RSP: 0018:ffa00000036275d0 EFLAGS: 00010286 [ 935.344056][T14586] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c22bf [ 935.344328][T14586] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6115f8 [ 935.344567][T14586] RBP: 1ff40000006c4ebb R08: 1fe22000034c22c0 R09: fffa3bfffffb0b24 [ 935.344794][T14586] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610774 [ 935.345029][T14586] R13: ff1100001a610740 R14: ffffffff931c7940 R15: ff1100001a611540 [ 935.345243][T14586] FS: 00007fd962b6e440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 935.345490][T14586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.345706][T14586] CR2: 000000000044f720 CR3: 000000000da99005 CR4: 0000000000771ef0 [ 935.345940][T14586] PKRU: 55555554 [ 935.346051][T14586] Call Trace: [ 935.346189][T14586] [ 935.346281][T14586] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.346447][T14586] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.346612][T14586] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.346764][T14586] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.346920][T14586] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.347074][T14586] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.347222][T14586] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.347374][T14586] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.347530][T14586] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.347691][T14586] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.347846][T14586] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.347997][T14586] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.348152][T14586] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.348306][T14586] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.348465][T14586] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.348662][T14586] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.348813][T14586] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.348962][T14586] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.349107][T14586] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.349272][T14586] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.349436][T14586] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.349616][T14586] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.349782][T14586] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.349985][T14586] ? move_addr_to_kernel (net/socket.c:2511) [ 935.350134][T14586] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.350274][T14586] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.350419][T14586] ___sys_sendmsg (net/socket.c:2641) [ 935.350558][T14586] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.350718][T14586] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.350883][T14586] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.351036][T14586] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.351182][T14586] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.351326][T14586] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.351474][T14586] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.351620][T14586] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.351765][T14586] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.351926][T14586] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.352077][T14586] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.352263][T14586] RIP: 0033:0x7fd962cc8c5e [ 935.352430][T14586] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.352964][T14586] RSP: 002b:00007ffc7d761fd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.353185][T14586] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd962cc8c5e [ 935.353404][T14586] RDX: 0000000000000000 RSI: 00007ffc7d762090 RDI: 0000000000000005 [ 935.353622][T14586] RBP: 00007ffc7d761fe0 R08: 0000000000000000 R09: 0000000000000000 [ 935.353842][T14586] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.354062][T14586] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.426832][T14590] ------------[ cut here ]------------ | [ 935.427586][T14590] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14590 | [ 935.427871][T14590] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.428971][T14590] Tainted: [W]=WARN [ 935.429076][T14590] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.429251][T14590] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.429401][T14590] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.430093][T14590] RSP: 0018:ffa00000036175d0 EFLAGS: 00010286 [ 935.430276][T14590] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c2057 [ 935.430665][T14590] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6102b8 [ 935.430874][T14590] RBP: 1ff40000006c2ebb R08: 1fe22000034c2058 R09: fffa3bfffffb0b24 [ 935.431124][T14590] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611e34 [ 935.431360][T14590] R13: ff1100001a611e00 R14: ffffffff931c7940 R15: ff1100001a610200 [ 935.431590][T14590] FS: 00007fb3aca92440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 935.431884][T14590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.432070][T14590] CR2: 000000000044f720 CR3: 000000000da99003 CR4: 0000000000771ef0 [ 935.432308][T14590] PKRU: 55555554 [ 935.432439][T14590] Call Trace: [ 935.432554][T14590] [ 935.432628][T14590] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.432773][T14590] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.432933][T14590] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.433103][T14590] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.433239][T14590] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.433378][T14590] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.433524][T14590] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.433663][T14590] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.433801][T14590] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.433945][T14590] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.434083][T14590] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.434233][T14590] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.434376][T14590] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.434538][T14590] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.434684][T14590] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.434827][T14590] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.434970][T14590] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.435107][T14590] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.435252][T14590] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.435401][T14590] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.435546][T14590] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.435684][T14590] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.435821][T14590] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.436018][T14590] ? move_addr_to_kernel (net/socket.c:2511) [ 935.436170][T14590] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.436325][T14590] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.436478][T14590] ___sys_sendmsg (net/socket.c:2641) [ 935.436630][T14590] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.436791][T14590] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.436943][T14590] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.437178][T14590] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.437313][T14590] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.437459][T14590] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.437597][T14590] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.437731][T14590] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.437878][T14590] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.438025][T14590] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.438168][T14590] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.438361][T14590] RIP: 0033:0x7fb3acbecc5e [ 935.438537][T14590] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.439057][T14590] RSP: 002b:00007ffdbfb85610 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.439271][T14590] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb3acbecc5e [ 935.439488][T14590] RDX: 0000000000000000 RSI: 00007ffdbfb856d0 RDI: 0000000000000005 [ 935.439699][T14590] RBP: 00007ffdbfb85620 R08: 0000000000000000 R09: 0000000000000000 [ 935.439921][T14590] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.440137][T14590] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.513352][T14596] ------------[ cut here ]------------ | [ 935.513559][T14596] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14596 | [ 935.513821][T14596] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.514887][T14596] Tainted: [W]=WARN [ 935.514998][T14596] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.515172][T14596] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.515319][T14596] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.515827][T14596] RSP: 0018:ffa00000036675d0 EFLAGS: 00010286 [ 935.516010][T14596] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea064f [ 935.516220][T14596] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503278 [ 935.516452][T14596] RBP: 1ff40000006ccebb R08: 1fe2200001ea0650 R09: fffa3bfffffb0b24 [ 935.516657][T14596] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6105b4 [ 935.516868][T14596] R13: ff1100001a610580 R14: ffffffff931c7940 R15: ff1100000f5031c0 [ 935.517084][T14596] FS: 00007effcbd34440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 935.517334][T14596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.517523][T14596] CR2: 000000000044f720 CR3: 000000001940d003 CR4: 0000000000771ef0 [ 935.517735][T14596] PKRU: 55555554 [ 935.517843][T14596] Call Trace: [ 935.517959][T14596] [ 935.518046][T14596] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.518224][T14596] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.518377][T14596] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.518527][T14596] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.518672][T14596] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.518821][T14596] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.518967][T14596] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.519112][T14596] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.519254][T14596] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.519399][T14596] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.519543][T14596] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.519682][T14596] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.519830][T14596] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.519978][T14596] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.520129][T14596] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.520276][T14596] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.520424][T14596] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.520560][T14596] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.520698][T14596] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.520839][T14596] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.520990][T14596] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.521160][T14596] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.521311][T14596] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.521484][T14596] ? move_addr_to_kernel (net/socket.c:2511) [ 935.521621][T14596] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.521757][T14596] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.521910][T14596] ___sys_sendmsg (net/socket.c:2641) [ 935.522046][T14596] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.522191][T14596] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.522332][T14596] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.522477][T14596] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.522613][T14596] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.522750][T14596] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.522888][T14596] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.523030][T14596] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.523165][T14596] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.523302][T14596] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.523448][T14596] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.523623][T14596] RIP: 0033:0x7effcbe8ec5e [ 935.523767][T14596] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.524263][T14596] RSP: 002b:00007ffdde8ed660 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.524499][T14596] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007effcbe8ec5e [ 935.524712][T14596] RDX: 0000000000000000 RSI: 00007ffdde8ed720 RDI: 0000000000000005 [ 935.524931][T14596] RBP: 00007ffdde8ed670 R08: 0000000000000000 R09: 0000000000000000 [ 935.525138][T14596] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.525378][T14596] R13: 0000000069cbe7ee R14: 0000000000000004 R15: 000000000049d620 | [ 935.597995][T14600] ------------[ cut here ]------------ | [ 935.598229][T14600] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14600 | [ 935.598610][T14600] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.599826][T14600] Tainted: [W]=WARN [ 935.599993][T14600] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.600216][T14600] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.600417][T14600] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.600964][T14600] RSP: 0018:ffa00000036675d0 EFLAGS: 00010286 [ 935.601203][T14600] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0767 [ 935.601474][T14600] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503b38 [ 935.601723][T14600] RBP: 1ff40000006ccebb R08: 1fe2200001ea0768 R09: fffa3bfffffb0b24 [ 935.601985][T14600] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502e74 [ 935.602243][T14600] R13: ff1100000f502e40 R14: ffffffff931c7940 R15: ff1100000f503a80 [ 935.602497][T14600] FS: 00007fc293cb3440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 935.602825][T14600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.603065][T14600] CR2: 000000000044f720 CR3: 000000000c909005 CR4: 0000000000771ef0 [ 935.603317][T14600] PKRU: 55555554 [ 935.603475][T14600] Call Trace: [ 935.603625][T14600] [ 935.603742][T14600] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.603946][T14600] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.604142][T14600] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.604328][T14600] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.604527][T14600] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.604731][T14600] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.604927][T14600] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.605114][T14600] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.605299][T14600] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.605492][T14600] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.605677][T14600] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.605858][T14600] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.606054][T14600] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.606249][T14600] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.606436][T14600] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.606622][T14600] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.606807][T14600] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.607014][T14600] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.607210][T14600] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.607404][T14600] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.607602][T14600] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.607788][T14600] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.607998][T14600] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.608218][T14600] ? move_addr_to_kernel (net/socket.c:2511) [ 935.608411][T14600] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.608602][T14600] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.608791][T14600] ___sys_sendmsg (net/socket.c:2641) [ 935.609008][T14600] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.609203][T14600] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.609405][T14600] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.609599][T14600] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.609789][T14600] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.609997][T14600] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.610187][T14600] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.610394][T14600] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.610593][T14600] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.610782][T14600] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.610984][T14600] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.611213][T14600] RIP: 0033:0x7fc293e0dc5e [ 935.611420][T14600] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.611995][T14600] RSP: 002b:00007ffe25d822e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.612264][T14600] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc293e0dc5e [ 935.612532][T14600] RDX: 0000000000000000 RSI: 00007ffe25d823a0 RDI: 0000000000000005 [ 935.612791][T14600] RBP: 00007ffe25d822f0 R08: 0000000000000000 R09: 0000000000000000 [ 935.613067][T14600] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.613332][T14600] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 935.688278][T14606] ------------[ cut here ]------------ | [ 935.688452][T14606] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14606 | [ 935.688692][T14606] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.689853][T14606] Tainted: [W]=WARN [ 935.689966][T14606] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.690143][T14606] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.690289][T14606] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.690829][T14606] RSP: 0018:ffa00000035975d0 EFLAGS: 00010286 [ 935.691014][T14606] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea04c7 [ 935.691223][T14606] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502638 [ 935.691430][T14606] RBP: 1ff40000006b2ebb R08: 1fe2200001ea04c8 R09: fffa3bfffffb0b24 [ 935.691630][T14606] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502774 [ 935.691848][T14606] R13: ff1100000f502740 R14: ffffffff931c7940 R15: ff1100000f502580 [ 935.692074][T14606] FS: 00007f6829031440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 935.692314][T14606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.692491][T14606] CR2: 000000000044f720 CR3: 00000000102a8004 CR4: 0000000000771ef0 [ 935.692697][T14606] PKRU: 55555554 [ 935.692799][T14606] Call Trace: [ 935.692907][T14606] [ 935.692977][T14606] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.693115][T14606] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.693259][T14606] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.693412][T14606] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.693570][T14606] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.693711][T14606] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.693846][T14606] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.693997][T14606] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.694131][T14606] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.694265][T14606] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.694416][T14606] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.694554][T14606] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.694701][T14606] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.694842][T14606] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.694986][T14606] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.695125][T14606] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.695285][T14606] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.695432][T14606] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.695575][T14606] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.695713][T14606] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.695852][T14606] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.695999][T14606] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.696144][T14606] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.696349][T14606] ? move_addr_to_kernel (net/socket.c:2511) [ 935.696495][T14606] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.696639][T14606] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.696781][T14606] ___sys_sendmsg (net/socket.c:2641) [ 935.696925][T14606] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.697106][T14606] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.697241][T14606] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.697375][T14606] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.697513][T14606] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.697647][T14606] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.697781][T14606] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.697922][T14606] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.698065][T14606] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.698202][T14606] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.698342][T14606] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.698527][T14606] RIP: 0033:0x7f682918bc5e [ 935.698667][T14606] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.699148][T14606] RSP: 002b:00007ffee9abc5a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.699350][T14606] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f682918bc5e [ 935.699561][T14606] RDX: 0000000000000000 RSI: 00007ffee9abc660 RDI: 0000000000000005 [ 935.699763][T14606] RBP: 00007ffee9abc5b0 R08: 0000000000000000 R09: 0000000000000000 [ 935.699967][T14606] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.700167][T14606] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 935.773745][T14610] ------------[ cut here ]------------ | [ 935.773944][T14610] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14610 | [ 935.774210][T14610] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.775071][T14610] Tainted: [W]=WARN [ 935.775183][T14610] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.775365][T14610] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.775560][T14610] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.776113][T14610] RSP: 0018:ffa00000035c75d0 EFLAGS: 00010286 [ 935.776301][T14610] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000372596f [ 935.776536][T14610] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92cb78 [ 935.776772][T14610] RBP: 1ff40000006b8ebb R08: 1fe2200003725970 R09: fffa3bfffffb0b24 [ 935.777010][T14610] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92c934 [ 935.777249][T14610] R13: ff1100001b92c900 R14: ffffffff931c7940 R15: ff1100001b92cac0 [ 935.777480][T14610] FS: 00007f8a916e2440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 935.777748][T14610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.777943][T14610] CR2: 000000000044f720 CR3: 000000001a6e6006 CR4: 0000000000771ef0 [ 935.778168][T14610] PKRU: 55555554 [ 935.778280][T14610] Call Trace: [ 935.778397][T14610] [ 935.778495][T14610] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.778643][T14610] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.778794][T14610] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.778955][T14610] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.779121][T14610] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.779267][T14610] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.779421][T14610] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.779560][T14610] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.779694][T14610] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.779828][T14610] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.780034][T14610] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.780171][T14610] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.780407][T14610] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.780540][T14610] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.780674][T14610] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.780817][T14610] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.781019][T14610] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.781186][T14610] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.781319][T14610] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.781461][T14610] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.781602][T14610] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.781763][T14610] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.781957][T14610] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.782127][T14610] ? move_addr_to_kernel (net/socket.c:2511) [ 935.782263][T14610] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.782407][T14610] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.782555][T14610] ___sys_sendmsg (net/socket.c:2641) [ 935.782693][T14610] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.782840][T14610] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.783033][T14610] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.783174][T14610] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.783311][T14610] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.783463][T14610] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.783647][T14610] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.783792][T14610] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.784002][T14610] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.784144][T14610] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.784278][T14610] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.784467][T14610] RIP: 0033:0x7f8a9183cc5e [ 935.784613][T14610] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.785185][T14610] RSP: 002b:00007fff643778b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.785406][T14610] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8a9183cc5e [ 935.785614][T14610] RDX: 0000000000000000 RSI: 00007fff64377970 RDI: 0000000000000005 [ 935.785831][T14610] RBP: 00007fff643778c0 R08: 0000000000000000 R09: 0000000000000000 [ 935.786112][T14610] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.786366][T14610] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 935.861728][T14616] ------------[ cut here ]------------ | [ 935.861921][T14616] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14616 | [ 935.862182][T14616] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.863013][T14616] Tainted: [W]=WARN [ 935.863121][T14616] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.863303][T14616] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.863461][T14616] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.863991][T14616] RSP: 0018:ffa00000036a75d0 EFLAGS: 00010286 [ 935.864186][T14616] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725a17 [ 935.864423][T14616] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d0b8 [ 935.864671][T14616] RBP: 1ff40000006d4ebb R08: 1fe2200003725a18 R09: fffa3bfffffb0b24 [ 935.864883][T14616] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92ce74 [ 935.865114][T14616] R13: ff1100001b92ce40 R14: ffffffff931c7940 R15: ff1100001b92d000 [ 935.865334][T14616] FS: 00007f2d2f57d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 935.865596][T14616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.865782][T14616] CR2: 000000000044f720 CR3: 0000000010a77003 CR4: 0000000000771ef0 [ 935.866083][T14616] PKRU: 55555554 [ 935.866187][T14616] Call Trace: [ 935.866325][T14616] [ 935.866412][T14616] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.866554][T14616] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.866710][T14616] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.866965][T14616] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.867104][T14616] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.867242][T14616] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.867381][T14616] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.867589][T14616] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.867730][T14616] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.867871][T14616] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.868020][T14616] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.868167][T14616] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.868317][T14616] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.868467][T14616] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.868608][T14616] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.868754][T14616] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.868907][T14616] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.869058][T14616] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.869200][T14616] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.869349][T14616] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.869504][T14616] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.869650][T14616] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.869805][T14616] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.869993][T14616] ? move_addr_to_kernel (net/socket.c:2511) [ 935.870131][T14616] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.870302][T14616] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.870459][T14616] ___sys_sendmsg (net/socket.c:2641) [ 935.870600][T14616] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.870751][T14616] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.870907][T14616] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.871047][T14616] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.871188][T14616] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.871328][T14616] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.871483][T14616] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.871635][T14616] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.871780][T14616] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.871931][T14616] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.872075][T14616] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.872255][T14616] RIP: 0033:0x7f2d2f6d7c5e [ 935.872427][T14616] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.872957][T14616] RSP: 002b:00007ffe10c614a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.873180][T14616] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2d2f6d7c5e [ 935.873407][T14616] RDX: 0000000000000000 RSI: 00007ffe10c61560 RDI: 0000000000000005 [ 935.873628][T14616] RBP: 00007ffe10c614b0 R08: 0000000000000000 R09: 0000000000000000 [ 935.873842][T14616] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.874083][T14616] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 935.952517][T14620] ------------[ cut here ]------------ | [ 935.952704][T14620] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14620 | [ 935.952977][T14620] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 935.953833][T14620] Tainted: [W]=WARN [ 935.953947][T14620] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 935.954126][T14620] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 935.954274][T14620] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 935.954780][T14620] RSP: 0018:ffa00000035375d0 EFLAGS: 00010286 [ 935.954967][T14620] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f19df [ 935.955173][T14620] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cef8 [ 935.955389][T14620] RBP: 1ff40000006a6ebb R08: 1fe22000036f19e0 R09: fffa3bfffffb0b24 [ 935.955615][T14620] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78de34 [ 935.955828][T14620] R13: ff1100001b78de00 R14: ffffffff931c7940 R15: ff1100001b78ce40 [ 935.956046][T14620] FS: 00007f5d9e1d0440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 935.956286][T14620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.956480][T14620] CR2: 000000000044f720 CR3: 000000001b10b001 CR4: 0000000000771ef0 [ 935.956695][T14620] PKRU: 55555554 [ 935.956801][T14620] Call Trace: [ 935.956911][T14620] [ 935.956982][T14620] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 935.957121][T14620] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 935.957266][T14620] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 935.957409][T14620] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.957548][T14620] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.957687][T14620] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 935.957828][T14620] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 935.958061][T14620] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 935.958203][T14620] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 935.958345][T14620] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 935.958494][T14620] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 935.958630][T14620] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 935.958772][T14620] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 935.958969][T14620] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 935.959104][T14620] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 935.959240][T14620] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 935.959395][T14620] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.959546][T14620] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 935.959691][T14620] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 935.959832][T14620] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 935.960035][T14620] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 935.960177][T14620] ? copy_msghdr_from_user (net/socket.c:2525) [ 935.960314][T14620] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 935.960491][T14620] ? move_addr_to_kernel (net/socket.c:2511) [ 935.960628][T14620] ? filemap_map_folio_range (mm/filemap.c:3873) [ 935.960767][T14620] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 935.960957][T14620] ___sys_sendmsg (net/socket.c:2641) [ 935.961093][T14620] ? copy_msghdr_from_user (net/socket.c:2628) [ 935.961232][T14620] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 935.961370][T14620] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 935.961514][T14620] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 935.961649][T14620] ? __sys_sendmsg_sock (net/socket.c:2656) [ 935.961790][T14620] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 935.961980][T14620] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.962115][T14620] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 935.962251][T14620] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 935.962389][T14620] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 935.962531][T14620] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 935.962696][T14620] RIP: 0033:0x7f5d9e32ac5e [ 935.962839][T14620] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 935.963374][T14620] RSP: 002b:00007ffc63bbb500 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 935.963584][T14620] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5d9e32ac5e [ 935.963783][T14620] RDX: 0000000000000000 RSI: 00007ffc63bbb5c0 RDI: 0000000000000005 [ 935.964039][T14620] RBP: 00007ffc63bbb510 R08: 0000000000000000 R09: 0000000000000000 [ 935.964239][T14620] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 935.964446][T14620] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 936.040876][T14626] ------------[ cut here ]------------ | [ 936.041948][T14626] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14626 | [ 936.042192][T14626] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.043039][T14626] Tainted: [W]=WARN [ 936.043143][T14626] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.043319][T14626] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.043467][T14626] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.044046][T14626] RSP: 0018:ffa00000035975d0 EFLAGS: 00010286 [ 936.044224][T14626] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f18c7 [ 936.044432][T14626] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c638 [ 936.044636][T14626] RBP: 1ff40000006b2ebb R08: 1fe22000036f18c8 R09: fffa3bfffffb0b24 [ 936.044847][T14626] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78c234 [ 936.045125][T14626] R13: ff1100001b78c200 R14: ffffffff931c7940 R15: ff1100001b78c580 [ 936.045332][T14626] FS: 00007f6d6708f440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 936.045581][T14626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.045760][T14626] CR2: 000000000044f720 CR3: 00000000100bd001 CR4: 0000000000771ef0 [ 936.046022][T14626] PKRU: 55555554 [ 936.046131][T14626] Call Trace: [ 936.046237][T14626] [ 936.046311][T14626] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.046459][T14626] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.046610][T14626] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.046752][T14626] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.046902][T14626] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.047049][T14626] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.047193][T14626] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.047334][T14626] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.047481][T14626] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.047623][T14626] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.047767][T14626] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.047910][T14626] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.048053][T14626] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.048194][T14626] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.048335][T14626] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.048484][T14626] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.048626][T14626] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.048771][T14626] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.048915][T14626] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.049069][T14626] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.049220][T14626] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.049361][T14626] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.049505][T14626] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.049677][T14626] ? move_addr_to_kernel (net/socket.c:2511) [ 936.049810][T14626] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.049951][T14626] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.050089][T14626] ___sys_sendmsg (net/socket.c:2641) [ 936.050234][T14626] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.050379][T14626] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.050528][T14626] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.050669][T14626] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.050810][T14626] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.050959][T14626] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.051115][T14626] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.051251][T14626] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.051390][T14626] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.051526][T14626] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.051662][T14626] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.051829][T14626] RIP: 0033:0x7f6d671e9c5e [ 936.051979][T14626] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.052468][T14626] RSP: 002b:00007ffe63ecd510 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.052674][T14626] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6d671e9c5e [ 936.052878][T14626] RDX: 0000000000000000 RSI: 00007ffe63ecd5d0 RDI: 0000000000000005 [ 936.053097][T14626] RBP: 00007ffe63ecd520 R08: 0000000000000000 R09: 0000000000000000 [ 936.053295][T14626] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.053501][T14626] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 936.127820][T14630] ------------[ cut here ]------------ | [ 936.128033][T14630] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14630 | [ 936.128328][T14630] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.129204][T14630] Tainted: [W]=WARN [ 936.129317][T14630] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.129509][T14630] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.129665][T14630] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.130217][T14630] RSP: 0018:ffa00000036875d0 EFLAGS: 00010286 [ 936.130415][T14630] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387516f [ 936.130642][T14630] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8b78 [ 936.130868][T14630] RBP: 1ff40000006d0ebb R08: 1fe2200003875170 R09: fffa3bfffffb0b24 [ 936.131546][T14630] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8074 [ 936.131773][T14630] R13: ff1100001c3a8040 R14: ffffffff931c7940 R15: ff1100001c3a8ac0 [ 936.132005][T14630] FS: 00007f1e04bf2440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 936.132258][T14630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.132471][T14630] CR2: 000000000044f720 CR3: 0000000017e56005 CR4: 0000000000771ef0 [ 936.132689][T14630] PKRU: 55555554 [ 936.132800][T14630] Call Trace: [ 936.132914][T14630] [ 936.132992][T14630] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.133133][T14630] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.133300][T14630] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.133451][T14630] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.133590][T14630] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.133730][T14630] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.133875][T14630] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.134350][T14630] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.134513][T14630] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.134660][T14630] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.134806][T14630] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.135208][T14630] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.135350][T14630] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.135494][T14630] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.135635][T14630] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.135774][T14630] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.135919][T14630] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.136059][T14630] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.136286][T14630] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.136434][T14630] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.136581][T14630] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.136760][T14630] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.136902][T14630] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.137068][T14630] ? move_addr_to_kernel (net/socket.c:2511) [ 936.137203][T14630] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.137350][T14630] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.137516][T14630] ___sys_sendmsg (net/socket.c:2641) [ 936.137651][T14630] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.137792][T14630] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.137945][T14630] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.138082][T14630] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.138216][T14630] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.138365][T14630] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.138512][T14630] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.138651][T14630] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.138793][T14630] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.138939][T14630] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.139081][T14630] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.139257][T14630] RIP: 0033:0x7f1e04d4cc5e [ 936.139415][T14630] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.139924][T14630] RSP: 002b:00007fff3c5b1930 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.140144][T14630] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1e04d4cc5e [ 936.140364][T14630] RDX: 0000000000000000 RSI: 00007fff3c5b19f0 RDI: 0000000000000005 [ 936.140593][T14630] RBP: 00007fff3c5b1940 R08: 0000000000000000 R09: 0000000000000000 [ 936.140815][T14630] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.141031][T14630] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 936.210321][T14636] ------------[ cut here ]------------ | [ 936.210544][T14636] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14636 | [ 936.210853][T14636] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.211821][T14636] Tainted: [W]=WARN [ 936.212007][T14636] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.212247][T14636] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.212491][T14636] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.213080][T14636] RSP: 0018:ffa00000035c75d0 EFLAGS: 00010286 [ 936.213313][T14636] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387508f [ 936.213608][T14636] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8478 [ 936.213873][T14636] RBP: 1ff40000006b8ebb R08: 1fe2200003875090 R09: fffa3bfffffb0b24 [ 936.214143][T14636] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9c74 [ 936.214407][T14636] R13: ff1100001c3a9c40 R14: ffffffff931c7940 R15: ff1100001c3a83c0 [ 936.214681][T14636] FS: 00007f0ce410d440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 936.215032][T14636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.215275][T14636] CR2: 000000000044f720 CR3: 000000001a6e6002 CR4: 0000000000771ef0 [ 936.215550][T14636] PKRU: 55555554 [ 936.215724][T14636] Call Trace: [ 936.215886][T14636] [ 936.216018][T14636] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.216204][T14636] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.216411][T14636] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.216600][T14636] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.216785][T14636] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.216982][T14636] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.217167][T14636] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.217355][T14636] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.217557][T14636] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.217742][T14636] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.217947][T14636] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.218132][T14636] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.218319][T14636] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.218512][T14636] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.218695][T14636] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.218914][T14636] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.219106][T14636] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.219303][T14636] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.219511][T14636] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.219705][T14636] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.219912][T14636] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.220103][T14636] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.220307][T14636] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.220532][T14636] ? move_addr_to_kernel (net/socket.c:2511) [ 936.220720][T14636] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.220920][T14636] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.221110][T14636] ___sys_sendmsg (net/socket.c:2641) [ 936.221297][T14636] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.221496][T14636] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.221700][T14636] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.221909][T14636] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.222093][T14636] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.222282][T14636] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.222473][T14636] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.222660][T14636] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.222851][T14636] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.223051][T14636] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.223236][T14636] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.223473][T14636] RIP: 0033:0x7f0ce4267c5e [ 936.223664][T14636] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.224218][T14636] RSP: 002b:00007ffdc15e9850 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.224490][T14636] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0ce4267c5e [ 936.224758][T14636] RDX: 0000000000000000 RSI: 00007ffdc15e9910 RDI: 0000000000000005 [ 936.225044][T14636] RBP: 00007ffdc15e9860 R08: 0000000000000000 R09: 0000000000000000 [ 936.225305][T14636] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.225568][T14636] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 936.291336][T14640] ------------[ cut here ]------------ | [ 936.291584][T14640] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14640 | [ 936.291925][T14640] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.292869][T14640] Tainted: [W]=WARN [ 936.293044][T14640] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.293304][T14640] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.293546][T14640] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.294226][T14640] RSP: 0018:ffa00000036875d0 EFLAGS: 00010286 [ 936.294535][T14640] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e96f [ 936.294856][T14640] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974b78 [ 936.295181][T14640] RBP: 1ff40000006d0ebb R08: 1fe220000192e970 R09: fffa3bfffffb0b24 [ 936.295510][T14640] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c9745b4 [ 936.295791][T14640] R13: ff1100000c974580 R14: ffffffff931c7940 R15: ff1100000c974ac0 [ 936.296119][T14640] FS: 00007fd2dc10b440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 936.296475][T14640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.296709][T14640] CR2: 000000000044f720 CR3: 000000001a6e6006 CR4: 0000000000771ef0 [ 936.296982][T14640] PKRU: 55555554 [ 936.297164][T14640] Call Trace: [ 936.297359][T14640] [ 936.297524][T14640] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.297748][T14640] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.297959][T14640] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.298179][T14640] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.298424][T14640] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.298652][T14640] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.298870][T14640] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.299081][T14640] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.299306][T14640] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.299550][T14640] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.299776][T14640] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.299990][T14640] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.300191][T14640] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.300433][T14640] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.300678][T14640] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.300921][T14640] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.301120][T14640] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.301309][T14640] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.301542][T14640] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.301781][T14640] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.302028][T14640] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.302235][T14640] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.302436][T14640] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.302688][T14640] ? move_addr_to_kernel (net/socket.c:2511) [ 936.302875][T14640] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.303075][T14640] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.303266][T14640] ___sys_sendmsg (net/socket.c:2641) [ 936.303461][T14640] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.303651][T14640] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.303845][T14640] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.304046][T14640] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.304247][T14640] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.304447][T14640] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.304634][T14640] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.304821][T14640] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.305019][T14640] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.305242][T14640] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.305501][T14640] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.305746][T14640] RIP: 0033:0x7fd2dc265c5e [ 936.305980][T14640] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.306540][T14640] RSP: 002b:00007ffdd6c40c20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.306797][T14640] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd2dc265c5e [ 936.307062][T14640] RDX: 0000000000000000 RSI: 00007ffdd6c40ce0 RDI: 0000000000000005 [ 936.307312][T14640] RBP: 00007ffdd6c40c30 R08: 0000000000000000 R09: 0000000000000000 [ 936.307566][T14640] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.307818][T14640] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 936.397649][T14646] ------------[ cut here ]------------ | [ 936.397844][T14646] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14646 | [ 936.398167][T14646] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.399156][T14646] Tainted: [W]=WARN [ 936.399395][T14646] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.399686][T14646] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.399999][T14646] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.400674][T14646] RSP: 0018:ffa00000036b75d0 EFLAGS: 00010286 [ 936.400994][T14646] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eb9f [ 936.401326][T14646] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975cf8 [ 936.401722][T14646] RBP: 1ff40000006d6ebb R08: 1fe220000192eba0 R09: fffa3bfffffb0b24 [ 936.402008][T14646] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975034 [ 936.402279][T14646] R13: ff1100000c975000 R14: ffffffff931c7940 R15: ff1100000c975c40 [ 936.402558][T14646] FS: 00007fdb717c6440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 936.402860][T14646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.403099][T14646] CR2: 000000000044f720 CR3: 0000000010534006 CR4: 0000000000771ef0 [ 936.403366][T14646] PKRU: 55555554 [ 936.403540][T14646] Call Trace: [ 936.403692][T14646] [ 936.403810][T14646] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.404016][T14646] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.404216][T14646] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.404419][T14646] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.404612][T14646] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.404814][T14646] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.405018][T14646] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.405218][T14646] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.405424][T14646] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.405627][T14646] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.405822][T14646] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.406028][T14646] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.406228][T14646] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.406427][T14646] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.406611][T14646] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.406803][T14646] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.407011][T14646] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.407207][T14646] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.407407][T14646] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.407597][T14646] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.407784][T14646] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.407981][T14646] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.408171][T14646] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.408393][T14646] ? move_addr_to_kernel (net/socket.c:2511) [ 936.408582][T14646] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.408776][T14646] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.408994][T14646] ___sys_sendmsg (net/socket.c:2641) [ 936.409182][T14646] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.409375][T14646] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.409579][T14646] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.409768][T14646] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.409966][T14646] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.410154][T14646] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.410339][T14646] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.410535][T14646] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.410719][T14646] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.410916][T14646] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.411101][T14646] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.411317][T14646] RIP: 0033:0x7fdb71920c5e [ 936.411521][T14646] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.412058][T14646] RSP: 002b:00007ffcc52623e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.412351][T14646] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fdb71920c5e [ 936.412617][T14646] RDX: 0000000000000000 RSI: 00007ffcc52624a0 RDI: 0000000000000005 [ 936.412869][T14646] RBP: 00007ffcc52623f0 R08: 0000000000000000 R09: 0000000000000000 [ 936.413130][T14646] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.413377][T14646] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 936.479126][T14650] ------------[ cut here ]------------ | [ 936.479281][T14650] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14650 | [ 936.479522][T14650] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.480647][T14650] Tainted: [W]=WARN [ 936.480749][T14650] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.480930][T14650] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.481100][T14650] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.481633][T14650] RSP: 0018:ffa00000037075d0 EFLAGS: 00010286 [ 936.481807][T14650] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229d6f [ 936.482033][T14650] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914eb78 [ 936.482293][T14650] RBP: 1ff40000006e0ebb R08: 1fe2200003229d70 R09: fffa3bfffffb0b24 [ 936.482506][T14650] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e934 [ 936.482711][T14650] R13: ff1100001914e900 R14: ffffffff931c7940 R15: ff1100001914eac0 [ 936.482929][T14650] FS: 00007f39437f8440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 936.483164][T14650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.483330][T14650] CR2: 000000000044f720 CR3: 0000000019274002 CR4: 0000000000771ef0 [ 936.483538][T14650] PKRU: 55555554 [ 936.483640][T14650] Call Trace: [ 936.483739][T14650] [ 936.483808][T14650] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.483952][T14650] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.484094][T14650] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.484230][T14650] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.484363][T14650] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.484519][T14650] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.484651][T14650] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.484785][T14650] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.484925][T14650] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.485060][T14650] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.485198][T14650] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.485329][T14650] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.485467][T14650] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.485602][T14650] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.485736][T14650] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.485871][T14650] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.486007][T14650] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.486142][T14650] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.486277][T14650] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.486416][T14650] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.486553][T14650] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.486689][T14650] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.486821][T14650] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.486995][T14650] ? move_addr_to_kernel (net/socket.c:2511) [ 936.487129][T14650] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.487261][T14650] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.487400][T14650] ___sys_sendmsg (net/socket.c:2641) [ 936.487534][T14650] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.487672][T14650] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.487809][T14650] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.487951][T14650] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.488086][T14650] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.488222][T14650] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.488353][T14650] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.488491][T14650] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.488624][T14650] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.488756][T14650] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.488909][T14650] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.489081][T14650] RIP: 0033:0x7f3943952c5e [ 936.489220][T14650] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.489699][T14650] RSP: 002b:00007ffeeba05220 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.489906][T14650] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f3943952c5e [ 936.490107][T14650] RDX: 0000000000000000 RSI: 00007ffeeba052e0 RDI: 0000000000000005 [ 936.490307][T14650] RBP: 00007ffeeba05230 R08: 0000000000000000 R09: 0000000000000000 [ 936.490511][T14650] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.490710][T14650] R13: 0000000069cbe7ef R14: 0000000000000004 R15: 000000000049d620 | [ 936.556963][T14656] ------------[ cut here ]------------ | [ 936.557122][T14656] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14656 | [ 936.557394][T14656] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.558961][T14656] Tainted: [W]=WARN [ 936.559096][T14656] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.559291][T14656] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.559480][T14656] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.560036][T14656] RSP: 0018:ffa00000036e75d0 EFLAGS: 00010286 [ 936.560215][T14656] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229ddf [ 936.560462][T14656] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914eef8 [ 936.560695][T14656] RBP: 1ff40000006dcebb R08: 1fe2200003229de0 R09: fffa3bfffffb0b24 [ 936.560914][T14656] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f3b4 [ 936.561125][T14656] R13: ff1100001914f380 R14: ffffffff931c7940 R15: ff1100001914ee40 [ 936.561341][T14656] FS: 00007fedac8f4440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 936.561599][T14656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.561782][T14656] CR2: 000000000044f720 CR3: 0000000010b67002 CR4: 0000000000771ef0 [ 936.562008][T14656] PKRU: 55555554 [ 936.562118][T14656] Call Trace: [ 936.562236][T14656] [ 936.562312][T14656] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.562461][T14656] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.562629][T14656] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.562781][T14656] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.562923][T14656] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.563079][T14656] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.563233][T14656] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.563370][T14656] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.563512][T14656] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.563655][T14656] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.563835][T14656] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.563987][T14656] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.564132][T14656] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.564272][T14656] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.564419][T14656] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.564553][T14656] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.564700][T14656] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.564838][T14656] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.564977][T14656] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.565112][T14656] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.565253][T14656] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.565403][T14656] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.565545][T14656] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.565723][T14656] ? move_addr_to_kernel (net/socket.c:2511) [ 936.565859][T14656] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.565998][T14656] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.566142][T14656] ___sys_sendmsg (net/socket.c:2641) [ 936.566279][T14656] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.566430][T14656] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.566572][T14656] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.566712][T14656] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.566851][T14656] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.567001][T14656] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.567150][T14656] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.567284][T14656] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.567431][T14656] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.567579][T14656] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.567719][T14656] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.567890][T14656] RIP: 0033:0x7fedaca4ec5e [ 936.568039][T14656] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.568549][T14656] RSP: 002b:00007ffd3afa3d90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.568768][T14656] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fedaca4ec5e [ 936.568984][T14656] RDX: 0000000000000000 RSI: 00007ffd3afa3e50 RDI: 0000000000000005 [ 936.569182][T14656] RBP: 00007ffd3afa3da0 R08: 0000000000000000 R09: 0000000000000000 [ 936.569389][T14656] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.569608][T14656] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 936.640581][T14660] ------------[ cut here ]------------ | [ 936.640752][T14660] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14660 | [ 936.641074][T14660] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.641842][T14660] Tainted: [W]=WARN [ 936.642008][T14660] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.642175][T14660] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.642318][T14660] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.643075][T14660] RSP: 0018:ffa00000037775d0 EFLAGS: 00010286 [ 936.643266][T14660] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c23d7 [ 936.643497][T14660] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611eb8 [ 936.643736][T14660] RBP: 1ff40000006eeebb R08: 1fe22000034c23d8 R09: fffa3bfffffb0b24 [ 936.644006][T14660] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611c74 [ 936.644242][T14660] R13: ff1100001a611c40 R14: ffffffff931c7940 R15: ff1100001a611e00 [ 936.644494][T14660] FS: 00007fc7d8491440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 936.644776][T14660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.644978][T14660] CR2: 000000000044f720 CR3: 000000000c52a004 CR4: 0000000000771ef0 [ 936.645214][T14660] PKRU: 55555554 [ 936.645319][T14660] Call Trace: [ 936.645425][T14660] [ 936.645500][T14660] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.645654][T14660] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.645823][T14660] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.645993][T14660] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.646159][T14660] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.646304][T14660] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.646443][T14660] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.646595][T14660] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.646745][T14660] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.646902][T14660] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.647071][T14660] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.647234][T14660] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.647404][T14660] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.647545][T14660] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.647679][T14660] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.647827][T14660] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.647975][T14660] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.648119][T14660] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.648262][T14660] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.648414][T14660] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.648557][T14660] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.648697][T14660] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.648835][T14660] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.649013][T14660] ? move_addr_to_kernel (net/socket.c:2511) [ 936.649155][T14660] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.649295][T14660] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.649449][T14660] ___sys_sendmsg (net/socket.c:2641) [ 936.649588][T14660] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.649732][T14660] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.649873][T14660] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.650016][T14660] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.650155][T14660] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.650299][T14660] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.650472][T14660] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.650612][T14660] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.650751][T14660] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.650898][T14660] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.651038][T14660] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.651211][T14660] RIP: 0033:0x7fc7d85ebc5e [ 936.651364][T14660] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.651872][T14660] RSP: 002b:00007ffec8159f00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.652085][T14660] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc7d85ebc5e [ 936.652296][T14660] RDX: 0000000000000000 RSI: 00007ffec8159fc0 RDI: 0000000000000005 [ 936.652512][T14660] RBP: 00007ffec8159f10 R08: 0000000000000000 R09: 0000000000000000 [ 936.652720][T14660] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.652933][T14660] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 936.725226][T14666] ------------[ cut here ]------------ | [ 936.725449][T14666] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14666 | [ 936.725738][T14666] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.726620][T14666] Tainted: [W]=WARN [ 936.726772][T14666] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.727004][T14666] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.727197][T14666] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.727732][T14666] RSP: 0018:ffa00000037575d0 EFLAGS: 00010286 [ 936.727972][T14666] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c232f [ 936.728221][T14666] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611978 [ 936.728480][T14666] RBP: 1ff40000006eaebb R08: 1fe22000034c2330 R09: fffa3bfffffb0b24 [ 936.728731][T14666] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611034 [ 936.728993][T14666] R13: ff1100001a611000 R14: ffffffff931c7940 R15: ff1100001a6118c0 [ 936.729246][T14666] FS: 00007fb467f6c440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 936.729535][T14666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.729754][T14666] CR2: 000000000044f720 CR3: 0000000010541006 CR4: 0000000000771ef0 [ 936.730015][T14666] PKRU: 55555554 [ 936.730165][T14666] Call Trace: [ 936.730317][T14666] [ 936.730446][T14666] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.730644][T14666] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.730842][T14666] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.731043][T14666] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.731226][T14666] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.731431][T14666] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.731634][T14666] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.731821][T14666] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.732019][T14666] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.732205][T14666] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.732398][T14666] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.732582][T14666] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.732767][T14666] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.732970][T14666] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.733158][T14666] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.733352][T14666] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.733570][T14666] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.733773][T14666] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.733992][T14666] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.734187][T14666] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.734389][T14666] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.734579][T14666] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.734764][T14666] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.735022][T14666] ? move_addr_to_kernel (net/socket.c:2511) [ 936.735275][T14666] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.735515][T14666] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.735769][T14666] ___sys_sendmsg (net/socket.c:2641) [ 936.735971][T14666] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.736179][T14666] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.736368][T14666] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.736595][T14666] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.736808][T14666] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.737025][T14666] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.737219][T14666] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.737454][T14666] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.737681][T14666] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.737930][T14666] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.738149][T14666] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.738390][T14666] RIP: 0033:0x7fb4680c6c5e [ 936.738610][T14666] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.739183][T14666] RSP: 002b:00007ffda7793a00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.739453][T14666] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb4680c6c5e [ 936.739705][T14666] RDX: 0000000000000000 RSI: 00007ffda7793ac0 RDI: 0000000000000005 [ 936.739980][T14666] RBP: 00007ffda7793a10 R08: 0000000000000000 R09: 0000000000000000 [ 936.740242][T14666] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.740501][T14666] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 936.823435][T14670] ------------[ cut here ]------------ | [ 936.823603][T14670] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14670 | [ 936.823870][T14670] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.825244][T14670] Tainted: [W]=WARN [ 936.825346][T14670] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.825521][T14670] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.825663][T14670] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.826167][T14670] RSP: 0018:ffa00000037875d0 EFLAGS: 00010286 [ 936.826356][T14670] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea04ff [ 936.826559][T14670] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5027f8 [ 936.826757][T14670] RBP: 1ff40000006f0ebb R08: 1fe2200001ea0500 R09: fffa3bfffffb0b24 [ 936.826962][T14670] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503734 [ 936.827160][T14670] R13: ff1100000f503700 R14: ffffffff931c7940 R15: ff1100000f502740 [ 936.827388][T14670] FS: 00007f3d65480440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 936.827654][T14670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.827833][T14670] CR2: 000000000044f720 CR3: 000000000c52a006 CR4: 0000000000771ef0 [ 936.828054][T14670] PKRU: 55555554 [ 936.828158][T14670] Call Trace: [ 936.828261][T14670] [ 936.828332][T14670] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.828477][T14670] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.828624][T14670] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.828763][T14670] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.828904][T14670] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.829045][T14670] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.829180][T14670] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.829319][T14670] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.829462][T14670] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.829599][T14670] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.829741][T14670] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.829881][T14670] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.830031][T14670] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.830171][T14670] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.830309][T14670] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.830454][T14670] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.830594][T14670] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.830728][T14670] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.830862][T14670] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.830999][T14670] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.831133][T14670] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.831285][T14670] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.831429][T14670] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.831601][T14670] ? move_addr_to_kernel (net/socket.c:2511) [ 936.831743][T14670] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.831883][T14670] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.832030][T14670] ___sys_sendmsg (net/socket.c:2641) [ 936.832168][T14670] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.832310][T14670] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.832469][T14670] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.832604][T14670] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.832736][T14670] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.832885][T14670] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.833029][T14670] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.833169][T14670] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.833308][T14670] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.833457][T14670] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.833598][T14670] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.833770][T14670] RIP: 0033:0x7f3d655dac5e [ 936.833922][T14670] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.834421][T14670] RSP: 002b:00007ffd8573ad60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.834646][T14670] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f3d655dac5e [ 936.834857][T14670] RDX: 0000000000000000 RSI: 00007ffd8573ae20 RDI: 0000000000000005 [ 936.835068][T14670] RBP: 00007ffd8573ad70 R08: 0000000000000000 R09: 0000000000000000 [ 936.835267][T14670] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.835498][T14670] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 936.905179][T14676] ------------[ cut here ]------------ | [ 936.905401][T14676] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14676 | [ 936.905683][T14676] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.907221][T14676] Tainted: [W]=WARN [ 936.907463][T14676] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.907769][T14676] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.907992][T14676] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.908546][T14676] RSP: 0018:ffa00000035c75d0 EFLAGS: 00010286 [ 936.908776][T14676] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea05df [ 936.909049][T14676] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502ef8 [ 936.909336][T14676] RBP: 1ff40000006b8ebb R08: 1fe2200001ea05e0 R09: fffa3bfffffb0b24 [ 936.909590][T14676] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5033b4 [ 936.909879][T14676] R13: ff1100000f503380 R14: ffffffff931c7940 R15: ff1100000f502e40 [ 936.910164][T14676] FS: 00007fafdc203440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 936.910465][T14676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.910718][T14676] CR2: 000000000044f720 CR3: 000000000c7b1003 CR4: 0000000000771ef0 [ 936.911022][T14676] PKRU: 55555554 [ 936.911189][T14676] Call Trace: [ 936.911341][T14676] [ 936.911515][T14676] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.911713][T14676] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.911932][T14676] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.912139][T14676] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.912361][T14676] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.912577][T14676] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.912798][T14676] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.913032][T14676] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.913250][T14676] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.913463][T14676] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.913677][T14676] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.913863][T14676] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.914063][T14676] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.914248][T14676] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.914449][T14676] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.914649][T14676] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.914842][T14676] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.915042][T14676] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.915230][T14676] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.915422][T14676] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.915625][T14676] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.915822][T14676] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.916017][T14676] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.916238][T14676] ? move_addr_to_kernel (net/socket.c:2511) [ 936.916432][T14676] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.916615][T14676] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.916801][T14676] ___sys_sendmsg (net/socket.c:2641) [ 936.916998][T14676] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.917426][T14676] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.917614][T14676] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.917812][T14676] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.918025][T14676] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.918225][T14676] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.918420][T14676] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.918604][T14676] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.918789][T14676] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.918998][T14676] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.919203][T14676] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.919435][T14676] RIP: 0033:0x7fafdc35dc5e [ 936.919627][T14676] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.920154][T14676] RSP: 002b:00007fff60ea9ca0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.920418][T14676] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fafdc35dc5e [ 936.920667][T14676] RDX: 0000000000000000 RSI: 00007fff60ea9d60 RDI: 0000000000000005 [ 936.920932][T14676] RBP: 00007fff60ea9cb0 R08: 0000000000000000 R09: 0000000000000000 [ 936.921192][T14676] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 936.921473][T14676] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 936.985371][T14680] ------------[ cut here ]------------ | [ 936.985585][T14680] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14680 | [ 936.985875][T14680] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 936.986782][T14680] Tainted: [W]=WARN [ 936.986948][T14680] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 936.987192][T14680] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 936.987399][T14680] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 936.987961][T14680] RSP: 0018:ffa00000037275d0 EFLAGS: 00010286 [ 936.988185][T14680] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea064f [ 936.988447][T14680] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503278 [ 936.988713][T14680] RBP: 1ff40000006e4ebb R08: 1fe2200001ea0650 R09: fffa3bfffffb0b24 [ 936.989002][T14680] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502cb4 [ 936.989256][T14680] R13: ff1100000f502c80 R14: ffffffff931c7940 R15: ff1100000f5031c0 [ 936.989522][T14680] FS: 00007f611ddcf440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 936.989815][T14680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.990050][T14680] CR2: 000000000044f720 CR3: 000000000cb82006 CR4: 0000000000771ef0 [ 936.990306][T14680] PKRU: 55555554 [ 936.990464][T14680] Call Trace: [ 936.990619][T14680] [ 936.990739][T14680] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 936.990939][T14680] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 936.991138][T14680] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 936.991327][T14680] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.991540][T14680] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.991723][T14680] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 936.991918][T14680] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 936.992114][T14680] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 936.992296][T14680] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 936.992490][T14680] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 936.992674][T14680] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 936.992855][T14680] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 936.993047][T14680] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 936.993229][T14680] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 936.993415][T14680] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 936.993599][T14680] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 936.993791][T14680] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.993988][T14680] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 936.994172][T14680] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 936.994353][T14680] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 936.994549][T14680] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 936.994732][T14680] ? copy_msghdr_from_user (net/socket.c:2525) [ 936.994927][T14680] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 936.995141][T14680] ? move_addr_to_kernel (net/socket.c:2511) [ 936.995324][T14680] ? filemap_map_folio_range (mm/filemap.c:3873) [ 936.995513][T14680] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 936.995698][T14680] ___sys_sendmsg (net/socket.c:2641) [ 936.995878][T14680] ? copy_msghdr_from_user (net/socket.c:2628) [ 936.996076][T14680] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 936.996264][T14680] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 936.996458][T14680] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 936.996645][T14680] ? __sys_sendmsg_sock (net/socket.c:2656) [ 936.996830][T14680] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 936.997027][T14680] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.997247][T14680] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 936.997464][T14680] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 936.997685][T14680] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 936.997876][T14680] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 936.998101][T14680] RIP: 0033:0x7f611df29c5e [ 936.998292][T14680] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 936.998829][T14680] RSP: 002b:00007ffe371442e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.999094][T14680] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f611df29c5e [ 936.999339][T14680] RDX: 0000000000000000 RSI: 00007ffe371443a0 RDI: 0000000000000005 [ 936.999597][T14680] RBP: 00007ffe371442f0 R08: 0000000000000000 R09: 0000000000000000 [ 936.999874][T14680] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.000139][T14680] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 937.090846][T14686] ------------[ cut here ]------------ | [ 937.091366][T14686] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14686 | [ 937.091626][T14686] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.092448][T14686] Tainted: [W]=WARN [ 937.092556][T14686] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.092747][T14686] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.092908][T14686] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.093431][T14686] RSP: 0018:ffa00000037975d0 EFLAGS: 00010286 [ 937.093610][T14686] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f18ff [ 937.093825][T14686] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c7f8 [ 937.094047][T14686] RBP: 1ff40000006f2ebb R08: 1fe22000036f1900 R09: fffa3bfffffb0b24 [ 937.094257][T14686] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78caf4 [ 937.094475][T14686] R13: ff1100001b78cac0 R14: ffffffff931c7940 R15: ff1100001b78c740 [ 937.094694][T14686] FS: 00007f74bb887440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 937.094961][T14686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.095144][T14686] CR2: 000000000044f720 CR3: 000000001c454002 CR4: 0000000000771ef0 [ 937.095353][T14686] PKRU: 55555554 [ 937.095464][T14686] Call Trace: [ 937.095569][T14686] [ 937.095640][T14686] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.095782][T14686] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.095939][T14686] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.096082][T14686] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.096220][T14686] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.096363][T14686] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.096505][T14686] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.096643][T14686] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.096781][T14686] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.096928][T14686] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.097072][T14686] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.097210][T14686] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.097351][T14686] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.097496][T14686] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.097631][T14686] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.097769][T14686] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.097908][T14686] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.098044][T14686] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.098180][T14686] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.098312][T14686] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.098463][T14686] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.098600][T14686] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.098734][T14686] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.098907][T14686] ? move_addr_to_kernel (net/socket.c:2511) [ 937.099041][T14686] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.099173][T14686] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.099307][T14686] ___sys_sendmsg (net/socket.c:2641) [ 937.099446][T14686] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.099584][T14686] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.099719][T14686] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.099853][T14686] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.099992][T14686] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.100128][T14686] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.100261][T14686] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.100399][T14686] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.100532][T14686] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.100663][T14686] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.100794][T14686] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.100969][T14686] RIP: 0033:0x7f74bb9e1c5e [ 937.101116][T14686] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.101620][T14686] RSP: 002b:00007ffd3f2cf5c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.101825][T14686] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f74bb9e1c5e [ 937.102033][T14686] RDX: 0000000000000000 RSI: 00007ffd3f2cf680 RDI: 0000000000000005 [ 937.102230][T14686] RBP: 00007ffd3f2cf5d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.102433][T14686] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.102632][T14686] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 937.172739][T14690] ------------[ cut here ]------------ | [ 937.172933][T14690] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14690 | [ 937.173180][T14690] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.173987][T14690] Tainted: [W]=WARN [ 937.174094][T14690] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.174263][T14690] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.174416][T14690] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.174902][T14690] RSP: 0018:ffa00000035c75d0 EFLAGS: 00010286 [ 937.175097][T14690] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1abf [ 937.175296][T14690] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d5f8 [ 937.175501][T14690] RBP: 1ff40000006b8ebb R08: 1fe22000036f1ac0 R09: fffa3bfffffb0b24 [ 937.175696][T14690] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78dab4 [ 937.175909][T14690] R13: ff1100001b78da80 R14: ffffffff931c7940 R15: ff1100001b78d540 [ 937.176117][T14690] FS: 00007fabb3cf3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 937.176388][T14690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.176568][T14690] CR2: 000000000044f720 CR3: 000000000cb7a006 CR4: 0000000000771ef0 [ 937.176778][T14690] PKRU: 55555554 [ 937.176880][T14690] Call Trace: [ 937.176991][T14690] [ 937.177058][T14690] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.177196][T14690] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.177342][T14690] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.177487][T14690] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.177635][T14690] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.177781][T14690] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.177924][T14690] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.178072][T14690] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.178218][T14690] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.178366][T14690] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.178512][T14690] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.178645][T14690] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.178781][T14690] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.178922][T14690] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.179058][T14690] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.179191][T14690] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.179324][T14690] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.179463][T14690] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.179595][T14690] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.179749][T14690] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.179898][T14690] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.180041][T14690] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.180178][T14690] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.180352][T14690] ? move_addr_to_kernel (net/socket.c:2511) [ 937.180504][T14690] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.180647][T14690] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.180793][T14690] ___sys_sendmsg (net/socket.c:2641) [ 937.181408][T14690] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.181553][T14690] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.181694][T14690] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.181835][T14690] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.182034][T14690] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.182172][T14690] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.182304][T14690] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.182442][T14690] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.182573][T14690] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.182704][T14690] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.182835][T14690] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.183076][T14690] RIP: 0033:0x7fabb3e4dc5e [ 937.183227][T14690] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.183728][T14690] RSP: 002b:00007ffdebc4b970 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.184008][T14690] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fabb3e4dc5e [ 937.184218][T14690] RDX: 0000000000000000 RSI: 00007ffdebc4ba30 RDI: 0000000000000005 [ 937.184429][T14690] RBP: 00007ffdebc4b980 R08: 0000000000000000 R09: 0000000000000000 [ 937.184638][T14690] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.184843][T14690] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 937.288888][T14696] ------------[ cut here ]------------ | [ 937.289069][T14696] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14696 | [ 937.289318][T14696] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.290147][T14696] Tainted: [W]=WARN [ 937.290250][T14696] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.290424][T14696] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.290568][T14696] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.291046][T14696] RSP: 0018:ffa00000037d75d0 EFLAGS: 00010286 [ 937.291216][T14696] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725bd7 [ 937.291419][T14696] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92deb8 [ 937.291619][T14696] RBP: 1ff40000006faebb R08: 1fe2200003725bd8 R09: fffa3bfffffb0b24 [ 937.291824][T14696] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d734 [ 937.292048][T14696] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b92de00 [ 937.292261][T14696] FS: 00007f2dfdea0440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 937.292503][T14696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.292676][T14696] CR2: 000000000044f720 CR3: 000000001a847001 CR4: 0000000000771ef0 [ 937.292875][T14696] PKRU: 55555554 [ 937.292981][T14696] Call Trace: [ 937.293083][T14696] [ 937.293153][T14696] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.293288][T14696] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.293433][T14696] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.293567][T14696] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.293700][T14696] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.293836][T14696] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.293972][T14696] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.294107][T14696] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.294244][T14696] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.294376][T14696] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.294517][T14696] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.294650][T14696] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.294784][T14696] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.294922][T14696] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.295055][T14696] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.295190][T14696] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.295328][T14696] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.295468][T14696] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.295605][T14696] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.295740][T14696] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.295877][T14696] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.296018][T14696] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.296156][T14696] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.296321][T14696] ? move_addr_to_kernel (net/socket.c:2511) [ 937.296463][T14696] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.296596][T14696] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.296734][T14696] ___sys_sendmsg (net/socket.c:2641) [ 937.296866][T14696] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.297008][T14696] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.297143][T14696] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.297279][T14696] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.297420][T14696] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.297557][T14696] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.297691][T14696] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.297826][T14696] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.297983][T14696] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.298126][T14696] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.298262][T14696] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.298430][T14696] RIP: 0033:0x7f2dfdffac5e [ 937.298569][T14696] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.299058][T14696] RSP: 002b:00007fff0b857e40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.299281][T14696] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2dfdffac5e [ 937.299483][T14696] RDX: 0000000000000000 RSI: 00007fff0b857f00 RDI: 0000000000000005 [ 937.299682][T14696] RBP: 00007fff0b857e50 R08: 0000000000000000 R09: 0000000000000000 [ 937.299885][T14696] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.300096][T14696] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 937.377714][T14700] ------------[ cut here ]------------ | [ 937.377888][T14700] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14700 | [ 937.378139][T14700] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.378930][T14700] Tainted: [W]=WARN [ 937.379043][T14700] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.379211][T14700] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.379354][T14700] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.379841][T14700] RSP: 0018:ffa00000038175d0 EFLAGS: 00010286 [ 937.380022][T14700] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000037258ff [ 937.380222][T14700] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c7f8 [ 937.380427][T14700] RBP: 1ff4000000702ebb R08: 1fe2200003725900 R09: fffa3bfffffb0b24 [ 937.380625][T14700] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92caf4 [ 937.380827][T14700] R13: ff1100001b92cac0 R14: ffffffff931c7940 R15: ff1100001b92c740 [ 937.381036][T14700] FS: 00007f95e93ef440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 937.381272][T14700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.381449][T14700] CR2: 000000000044f720 CR3: 000000001a847006 CR4: 0000000000771ef0 [ 937.381668][T14700] PKRU: 55555554 [ 937.381771][T14700] Call Trace: [ 937.381903][T14700] [ 937.381979][T14700] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.382121][T14700] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.382271][T14700] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.382419][T14700] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.382560][T14700] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.382703][T14700] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.382840][T14700] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.382987][T14700] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.383127][T14700] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.383265][T14700] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.383412][T14700] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.383549][T14700] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.383690][T14700] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.383829][T14700] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.383976][T14700] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.384116][T14700] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.384256][T14700] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.384401][T14700] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.384545][T14700] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.384685][T14700] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.384830][T14700] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.385295][T14700] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.385450][T14700] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.385626][T14700] ? move_addr_to_kernel (net/socket.c:2511) [ 937.385765][T14700] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.385913][T14700] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.386054][T14700] ___sys_sendmsg (net/socket.c:2641) [ 937.386192][T14700] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.386340][T14700] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.386489][T14700] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.386635][T14700] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.386775][T14700] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.386924][T14700] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.387068][T14700] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.387212][T14700] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.387352][T14700] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.387506][T14700] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.387648][T14700] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.387826][T14700] RIP: 0033:0x7f95e9549c5e [ 937.387984][T14700] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.388500][T14700] RSP: 002b:00007ffd31ddb580 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.388720][T14700] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f95e9549c5e [ 937.388935][T14700] RDX: 0000000000000000 RSI: 00007ffd31ddb640 RDI: 0000000000000005 [ 937.389148][T14700] RBP: 00007ffd31ddb590 R08: 0000000000000000 R09: 0000000000000000 [ 937.389358][T14700] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.389577][T14700] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 937.471550][T14706] ------------[ cut here ]------------ | [ 937.471728][T14706] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14706 | [ 937.471980][T14706] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.472785][T14706] Tainted: [W]=WARN [ 937.472900][T14706] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.473082][T14706] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.473238][T14706] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.473749][T14706] RSP: 0018:ffa00000036e75d0 EFLAGS: 00010286 [ 937.473935][T14706] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725857 [ 937.474139][T14706] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c2b8 [ 937.474344][T14706] RBP: 1ff40000006dcebb R08: 1fe2200003725858 R09: fffa3bfffffb0b24 [ 937.474552][T14706] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92c3f4 [ 937.474755][T14706] R13: ff1100001b92c3c0 R14: ffffffff931c7940 R15: ff1100001b92c200 [ 937.474970][T14706] FS: 00007f6c4903d440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 937.475210][T14706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.475378][T14706] CR2: 000000000044f720 CR3: 0000000010b61004 CR4: 0000000000771ef0 [ 937.475583][T14706] PKRU: 55555554 [ 937.475683][T14706] Call Trace: [ 937.475781][T14706] [ 937.475849][T14706] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.475991][T14706] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.476133][T14706] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.476271][T14706] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.476420][T14706] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.476557][T14706] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.476689][T14706] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.476823][T14706] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.477367][T14706] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.477513][T14706] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.477654][T14706] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.477789][T14706] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.477932][T14706] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.478066][T14706] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.478197][T14706] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.478332][T14706] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.478470][T14706] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.478608][T14706] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.478747][T14706] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.478884][T14706] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.479035][T14706] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.479170][T14706] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.479304][T14706] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.479493][T14706] ? move_addr_to_kernel (net/socket.c:2511) [ 937.479640][T14706] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.479787][T14706] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.479933][T14706] ___sys_sendmsg (net/socket.c:2641) [ 937.480077][T14706] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.480217][T14706] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.480357][T14706] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.480499][T14706] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.480635][T14706] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.480772][T14706] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.480914][T14706] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.481051][T14706] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.481187][T14706] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.481324][T14706] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.481465][T14706] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.481634][T14706] RIP: 0033:0x7f6c49197c5e [ 937.481785][T14706] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.482282][T14706] RSP: 002b:00007ffc3b648320 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.482492][T14706] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6c49197c5e [ 937.482694][T14706] RDX: 0000000000000000 RSI: 00007ffc3b6483e0 RDI: 0000000000000005 [ 937.482945][T14706] RBP: 00007ffc3b648330 R08: 0000000000000000 R09: 0000000000000000 [ 937.483156][T14706] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.483366][T14706] R13: 0000000069cbe7f0 R14: 0000000000000004 R15: 000000000049d620 | [ 937.558284][T14710] ------------[ cut here ]------------ | [ 937.558468][T14710] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14710 | [ 937.558709][T14710] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.559855][T14710] Tainted: [W]=WARN [ 937.559963][T14710] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.560136][T14710] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.560285][T14710] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.560775][T14710] RSP: 0018:ffa00000038375d0 EFLAGS: 00010286 [ 937.560971][T14710] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038751df [ 937.561175][T14710] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8ef8 [ 937.561394][T14710] RBP: 1ff4000000706ebb R08: 1fe22000038751e0 R09: fffa3bfffffb0b24 [ 937.561618][T14710] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a83f4 [ 937.561821][T14710] R13: ff1100001c3a83c0 R14: ffffffff931c7940 R15: ff1100001c3a8e40 [ 937.562034][T14710] FS: 00007f6aac48c440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 937.562354][T14710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.562556][T14710] CR2: 000000000044f720 CR3: 000000000f63a006 CR4: 0000000000771ef0 [ 937.562773][T14710] PKRU: 55555554 [ 937.562884][T14710] Call Trace: [ 937.562998][T14710] [ 937.563071][T14710] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.563213][T14710] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.563366][T14710] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.563514][T14710] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.563661][T14710] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.563811][T14710] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.563955][T14710] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.564095][T14710] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.564239][T14710] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.564386][T14710] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.564536][T14710] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.564675][T14710] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.564816][T14710] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.564969][T14710] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.565112][T14710] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.565256][T14710] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.565402][T14710] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.565550][T14710] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.565693][T14710] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.565833][T14710] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.565985][T14710] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.566127][T14710] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.566270][T14710] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.566448][T14710] ? move_addr_to_kernel (net/socket.c:2511) [ 937.566588][T14710] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.566729][T14710] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.566876][T14710] ___sys_sendmsg (net/socket.c:2641) [ 937.567022][T14710] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.567173][T14710] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.567315][T14710] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.567465][T14710] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.567607][T14710] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.567755][T14710] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.567904][T14710] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.568045][T14710] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.568187][T14710] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.568328][T14710] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.568475][T14710] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.568649][T14710] RIP: 0033:0x7f6aac5e6c5e [ 937.568908][T14710] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.569397][T14710] RSP: 002b:00007fff71b226c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.569690][T14710] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6aac5e6c5e [ 937.569900][T14710] RDX: 0000000000000000 RSI: 00007fff71b22780 RDI: 0000000000000005 [ 937.570186][T14710] RBP: 00007fff71b226d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.570391][T14710] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.570600][T14710] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 937.678307][T14716] ------------[ cut here ]------------ | [ 937.678544][T14716] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14716 | [ 937.678843][T14716] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.679764][T14716] Tainted: [W]=WARN [ 937.679935][T14716] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.680160][T14716] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.680362][T14716] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.680963][T14716] RSP: 0018:ffa00000038675d0 EFLAGS: 00010286 [ 937.681213][T14716] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038752bf [ 937.681501][T14716] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a95f8 [ 937.681761][T14716] RBP: 1ff400000070cebb R08: 1fe22000038752c0 R09: fffa3bfffffb0b24 [ 937.682034][T14716] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a91f4 [ 937.682293][T14716] R13: ff1100001c3a91c0 R14: ffffffff931c7940 R15: ff1100001c3a9540 [ 937.682569][T14716] FS: 00007f60067ad440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 937.682870][T14716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.683114][T14716] CR2: 000000000044f720 CR3: 0000000019c67005 CR4: 0000000000771ef0 [ 937.683375][T14716] PKRU: 55555554 [ 937.683539][T14716] Call Trace: [ 937.683696][T14716] [ 937.683819][T14716] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.684020][T14716] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.684222][T14716] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.684423][T14716] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.684616][T14716] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.684816][T14716] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.685039][T14716] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.685242][T14716] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.685449][T14716] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.685648][T14716] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.685859][T14716] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.686073][T14716] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.686269][T14716] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.686467][T14716] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.686656][T14716] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.686850][T14716] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.687055][T14716] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.687249][T14716] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.687451][T14716] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.687646][T14716] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.687842][T14716] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.688049][T14716] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.688241][T14716] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.688474][T14716] ? move_addr_to_kernel (net/socket.c:2511) [ 937.688670][T14716] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.688861][T14716] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.689072][T14716] ___sys_sendmsg (net/socket.c:2641) [ 937.689279][T14716] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.689498][T14716] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.689706][T14716] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.689927][T14716] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.690129][T14716] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.690335][T14716] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.690553][T14716] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.690747][T14716] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.690950][T14716] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.691152][T14716] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.691360][T14716] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.691625][T14716] RIP: 0033:0x7f6006907c5e [ 937.691849][T14716] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.692474][T14716] RSP: 002b:00007fff954d5800 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.692774][T14716] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6006907c5e [ 937.693070][T14716] RDX: 0000000000000000 RSI: 00007fff954d58c0 RDI: 0000000000000005 [ 937.693337][T14716] RBP: 00007fff954d5810 R08: 0000000000000000 R09: 0000000000000000 [ 937.693607][T14716] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.693866][T14716] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 937.762911][T14720] ------------[ cut here ]------------ | [ 937.763119][T14720] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14720 | [ 937.763416][T14720] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.764325][T14720] Tainted: [W]=WARN [ 937.764493][T14720] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.764727][T14720] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.764941][T14720] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.765484][T14720] RSP: 0018:ffa00000038475d0 EFLAGS: 00010286 [ 937.765712][T14720] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192ea87 [ 937.765980][T14720] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975438 [ 937.766234][T14720] RBP: 1ff4000000708ebb R08: 1fe220000192ea88 R09: fffa3bfffffb0b24 [ 937.766516][T14720] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975574 [ 937.766774][T14720] R13: ff1100000c975540 R14: ffffffff931c7940 R15: ff1100000c975380 [ 937.767051][T14720] FS: 00007fd48b5f7440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 937.767342][T14720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.767569][T14720] CR2: 000000000044f720 CR3: 0000000010a23005 CR4: 0000000000771ef0 [ 937.767825][T14720] PKRU: 55555554 [ 937.767990][T14720] Call Trace: [ 937.768145][T14720] [ 937.768269][T14720] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.768463][T14720] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.768661][T14720] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.768851][T14720] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.769056][T14720] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.769253][T14720] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.769453][T14720] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.769650][T14720] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.769845][T14720] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.770046][T14720] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.770238][T14720] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.770429][T14720] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.770620][T14720] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.770822][T14720] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.771021][T14720] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.771214][T14720] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.771408][T14720] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.771599][T14720] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.771789][T14720] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.771996][T14720] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.772188][T14720] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.772372][T14720] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.772568][T14720] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.772793][T14720] ? move_addr_to_kernel (net/socket.c:2511) [ 937.772995][T14720] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.773183][T14720] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.773374][T14720] ___sys_sendmsg (net/socket.c:2641) [ 937.773572][T14720] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.773763][T14720] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.773982][T14720] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.774187][T14720] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.774391][T14720] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.774585][T14720] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.774774][T14720] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.774978][T14720] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.775251][T14720] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.775452][T14720] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.775644][T14720] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.775871][T14720] RIP: 0033:0x7fd48b751c5e [ 937.776167][T14720] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.776723][T14720] RSP: 002b:00007ffe217b7500 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.777087][T14720] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd48b751c5e [ 937.777339][T14720] RDX: 0000000000000000 RSI: 00007ffe217b75c0 RDI: 0000000000000005 [ 937.777684][T14720] RBP: 00007ffe217b7510 R08: 0000000000000000 R09: 0000000000000000 [ 937.777965][T14720] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.778223][T14720] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 937.842246][T14726] ------------[ cut here ]------------ | [ 937.842478][T14726] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14726 | [ 937.842808][T14726] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.844039][T14726] Tainted: [W]=WARN [ 937.844200][T14726] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.844435][T14726] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.844647][T14726] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.845212][T14726] RSP: 0018:ffa00000037275d0 EFLAGS: 00010286 [ 937.845453][T14726] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e937 [ 937.845724][T14726] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9749b8 [ 937.846008][T14726] RBP: 1ff40000006e4ebb R08: 1fe220000192e938 R09: fffa3bfffffb0b24 [ 937.846304][T14726] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974074 [ 937.846586][T14726] R13: ff1100000c974040 R14: ffffffff931c7940 R15: ff1100000c974900 [ 937.846885][T14726] FS: 00007f8e7792f440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 937.847435][T14726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.847661][T14726] CR2: 000000000044f720 CR3: 000000001aa84002 CR4: 0000000000771ef0 [ 937.847936][T14726] PKRU: 55555554 [ 937.848108][T14726] Call Trace: [ 937.848278][T14726] [ 937.848419][T14726] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.848610][T14726] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.848808][T14726] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.849052][T14726] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.849274][T14726] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.849482][T14726] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.849675][T14726] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.849888][T14726] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.850091][T14726] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.850289][T14726] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.850509][T14726] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.850710][T14726] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.850925][T14726] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.851118][T14726] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.851308][T14726] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.851512][T14726] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.851715][T14726] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.851935][T14726] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.852144][T14726] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.852352][T14726] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.852564][T14726] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.852766][T14726] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.852976][T14726] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.853210][T14726] ? move_addr_to_kernel (net/socket.c:2511) [ 937.853409][T14726] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.853594][T14726] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.853783][T14726] ___sys_sendmsg (net/socket.c:2641) [ 937.853981][T14726] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.854171][T14726] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.854363][T14726] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.854577][T14726] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.854776][T14726] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.854990][T14726] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.855184][T14726] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.855393][T14726] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.855596][T14726] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.855788][T14726] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.855992][T14726] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.856210][T14726] RIP: 0033:0x7f8e77a89c5e [ 937.856425][T14726] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.856983][T14726] RSP: 002b:00007ffe3349da20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.857255][T14726] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8e77a89c5e [ 937.857564][T14726] RDX: 0000000000000000 RSI: 00007ffe3349dae0 RDI: 0000000000000005 [ 937.857841][T14726] RBP: 00007ffe3349da30 R08: 0000000000000000 R09: 0000000000000000 [ 937.858127][T14726] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.858403][T14726] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 937.937582][T14730] ------------[ cut here ]------------ | [ 937.937788][T14730] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14730 | [ 937.938049][T14730] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 937.938874][T14730] Tainted: [W]=WARN [ 937.938990][T14730] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 937.939174][T14730] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 937.939333][T14730] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 937.939860][T14730] RSP: 0018:ffa00000038375d0 EFLAGS: 00010286 [ 937.940477][T14730] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229ebf [ 937.940707][T14730] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f5f8 [ 937.940937][T14730] RBP: 1ff4000000706ebb R08: 1fe2200003229ec0 R09: fffa3bfffffb0b24 [ 937.941151][T14730] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f734 [ 937.941371][T14730] R13: ff1100001914f700 R14: ffffffff931c7940 R15: ff1100001914f540 [ 937.941601][T14730] FS: 00007f07662fe440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 937.941859][T14730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.942044][T14730] CR2: 000000000044f720 CR3: 000000001cf6b005 CR4: 0000000000771ef0 [ 937.942268][T14730] PKRU: 55555554 [ 937.942376][T14730] Call Trace: [ 937.942492][T14730] [ 937.942566][T14730] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 937.942710][T14730] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 937.942860][T14730] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 937.943008][T14730] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.943149][T14730] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.943294][T14730] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 937.943439][T14730] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 937.943581][T14730] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 937.943719][T14730] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 937.943859][T14730] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 937.944024][T14730] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 937.944162][T14730] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 937.944304][T14730] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 937.944449][T14730] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 937.944588][T14730] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 937.944736][T14730] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 937.944877][T14730] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.945026][T14730] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 937.945165][T14730] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 937.945305][T14730] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 937.945458][T14730] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 937.945597][T14730] ? copy_msghdr_from_user (net/socket.c:2525) [ 937.945736][T14730] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 937.945911][T14730] ? move_addr_to_kernel (net/socket.c:2511) [ 937.946051][T14730] ? filemap_map_folio_range (mm/filemap.c:3873) [ 937.946192][T14730] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 937.946333][T14730] ___sys_sendmsg (net/socket.c:2641) [ 937.946481][T14730] ? copy_msghdr_from_user (net/socket.c:2628) [ 937.946639][T14730] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 937.946789][T14730] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 937.946944][T14730] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 937.947091][T14730] ? __sys_sendmsg_sock (net/socket.c:2656) [ 937.947238][T14730] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 937.947379][T14730] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.947573][T14730] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 937.947731][T14730] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 937.947869][T14730] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 937.948031][T14730] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 937.948225][T14730] RIP: 0033:0x7f0766458c5e [ 937.948388][T14730] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 937.948953][T14730] RSP: 002b:00007ffc52edda30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.949168][T14730] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0766458c5e [ 937.949405][T14730] RDX: 0000000000000000 RSI: 00007ffc52eddaf0 RDI: 0000000000000005 [ 937.949622][T14730] RBP: 00007ffc52edda40 R08: 0000000000000000 R09: 0000000000000000 [ 937.949839][T14730] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 937.950073][T14730] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 938.043671][T14736] ------------[ cut here ]------------ | [ 938.043850][T14736] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14736 | [ 938.044104][T14736] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.044906][T14736] Tainted: [W]=WARN [ 938.045014][T14736] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.045186][T14736] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.045331][T14736] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.045832][T14736] RSP: 0018:ffa00000036e75d0 EFLAGS: 00010286 [ 938.046080][T14736] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229e17 [ 938.046286][T14736] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f0b8 [ 938.046495][T14736] RBP: 1ff40000006dcebb R08: 1fe2200003229e18 R09: fffa3bfffffb0b24 [ 938.046697][T14736] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914ecb4 [ 938.046982][T14736] R13: ff1100001914ec80 R14: ffffffff931c7940 R15: ff1100001914f000 [ 938.047185][T14736] FS: 00007f00630f9440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 938.047429][T14736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.047598][T14736] CR2: 000000000044f720 CR3: 000000001a86a004 CR4: 0000000000771ef0 [ 938.047799][T14736] PKRU: 55555554 [ 938.047979][T14736] Call Trace: [ 938.048081][T14736] [ 938.048150][T14736] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.048285][T14736] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.048432][T14736] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.048566][T14736] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.048699][T14736] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.048835][T14736] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.049036][T14736] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.049204][T14736] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.049343][T14736] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.049481][T14736] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.049619][T14736] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.049753][T14736] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.049888][T14736] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.050059][T14736] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.050192][T14736] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.050326][T14736] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.050464][T14736] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.050596][T14736] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.050732][T14736] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.050874][T14736] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.051021][T14736] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.051158][T14736] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.051295][T14736] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.051465][T14736] ? move_addr_to_kernel (net/socket.c:2511) [ 938.051599][T14736] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.051734][T14736] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.051873][T14736] ___sys_sendmsg (net/socket.c:2641) [ 938.052008][T14736] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.052153][T14736] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.052301][T14736] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.052449][T14736] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.052585][T14736] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.052720][T14736] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.052858][T14736] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.053000][T14736] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.053143][T14736] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.053283][T14736] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.053425][T14736] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.053592][T14736] RIP: 0033:0x7f0063253c5e [ 938.053743][T14736] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.054244][T14736] RSP: 002b:00007ffc9eaa7f00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.054453][T14736] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0063253c5e [ 938.054690][T14736] RDX: 0000000000000000 RSI: 00007ffc9eaa7fc0 RDI: 0000000000000005 [ 938.054934][T14736] RBP: 00007ffc9eaa7f10 R08: 0000000000000000 R09: 0000000000000000 [ 938.055135][T14736] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.055341][T14736] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 938.133131][T14740] ------------[ cut here ]------------ | [ 938.133378][T14740] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14740 | [ 938.133741][T14740] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.134847][T14740] Tainted: [W]=WARN [ 938.135041][T14740] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.135319][T14740] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.135553][T14740] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.136179][T14740] RSP: 0018:ffa00000038775d0 EFLAGS: 00010286 [ 938.136451][T14740] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c201f [ 938.136736][T14740] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6100f8 [ 938.137007][T14740] RBP: 1ff400000070eebb R08: 1fe22000034c2020 R09: fffa3bfffffb0b24 [ 938.137259][T14740] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6113b4 [ 938.137518][T14740] R13: ff1100001a611380 R14: ffffffff931c7940 R15: ff1100001a610040 [ 938.137775][T14740] FS: 00007ffad25b4440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 938.138113][T14740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.138338][T14740] CR2: 000000000044f720 CR3: 000000001acf7003 CR4: 0000000000771ef0 [ 938.138600][T14740] PKRU: 55555554 [ 938.138765][T14740] Call Trace: [ 938.138946][T14740] [ 938.139082][T14740] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.139270][T14740] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.139487][T14740] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.139675][T14740] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.139863][T14740] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.140061][T14740] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.140280][T14740] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.140476][T14740] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.140664][T14740] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.140851][T14740] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.141082][T14740] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.141284][T14740] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.141497][T14740] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.141696][T14740] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.141888][T14740] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.142092][T14740] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.142276][T14740] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.142468][T14740] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.142668][T14740] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.142869][T14740] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.143078][T14740] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.143263][T14740] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.143455][T14740] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.143670][T14740] ? move_addr_to_kernel (net/socket.c:2511) [ 938.143859][T14740] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.144054][T14740] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.144255][T14740] ___sys_sendmsg (net/socket.c:2641) [ 938.144452][T14740] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.144644][T14740] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.144836][T14740] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.145039][T14740] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.145226][T14740] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.145421][T14740] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.145607][T14740] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.145793][T14740] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.145991][T14740] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.146175][T14740] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.146362][T14740] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.146587][T14740] RIP: 0033:0x7ffad270ec5e [ 938.146777][T14740] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.147313][T14740] RSP: 002b:00007fffefdecbc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.147576][T14740] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ffad270ec5e [ 938.147824][T14740] RDX: 0000000000000000 RSI: 00007fffefdecc80 RDI: 0000000000000005 [ 938.148098][T14740] RBP: 00007fffefdecbd0 R08: 0000000000000000 R09: 0000000000000000 [ 938.148361][T14740] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.148632][T14740] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 938.226121][T14746] ------------[ cut here ]------------ | [ 938.226300][T14746] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14746 | [ 938.226673][T14746] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.227640][T14746] Tainted: [W]=WARN [ 938.227767][T14746] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.227942][T14746] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.228089][T14746] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.228581][T14746] RSP: 0018:ffa00000038475d0 EFLAGS: 00010286 [ 938.228754][T14746] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c216f [ 938.229011][T14746] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610b78 [ 938.229256][T14746] RBP: 1ff4000000708ebb R08: 1fe22000034c2170 R09: fffa3bfffffb0b24 [ 938.229502][T14746] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610934 [ 938.229727][T14746] R13: ff1100001a610900 R14: ffffffff931c7940 R15: ff1100001a610ac0 [ 938.229986][T14746] FS: 00007f32acb54440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 938.230296][T14746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.230485][T14746] CR2: 000000000044f720 CR3: 000000001a86d004 CR4: 0000000000771ef0 [ 938.230714][T14746] PKRU: 55555554 [ 938.230847][T14746] Call Trace: [ 938.230962][T14746] [ 938.231036][T14746] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.231187][T14746] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.231358][T14746] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.231523][T14746] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.231691][T14746] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.231841][T14746] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.232005][T14746] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.232146][T14746] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.232304][T14746] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.232462][T14746] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.232637][T14746] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.232809][T14746] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.232991][T14746] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.233177][T14746] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.233320][T14746] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.233481][T14746] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.233627][T14746] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.233772][T14746] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.233925][T14746] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.234065][T14746] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.234213][T14746] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.234362][T14746] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.234512][T14746] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.234686][T14746] ? move_addr_to_kernel (net/socket.c:2511) [ 938.234833][T14746] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.234982][T14746] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.235132][T14746] ___sys_sendmsg (net/socket.c:2641) [ 938.235272][T14746] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.235421][T14746] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.235569][T14746] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.235716][T14746] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.235857][T14746] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.236007][T14746] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.236153][T14746] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.236288][T14746] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.236430][T14746] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.236570][T14746] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.236709][T14746] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.236881][T14746] RIP: 0033:0x7f32accaec5e [ 938.237037][T14746] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.237560][T14746] RSP: 002b:00007fffb9185ab0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.237780][T14746] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f32accaec5e [ 938.237995][T14746] RDX: 0000000000000000 RSI: 00007fffb9185b70 RDI: 0000000000000005 [ 938.238250][T14746] RBP: 00007fffb9185ac0 R08: 0000000000000000 R09: 0000000000000000 [ 938.238493][T14746] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.238726][T14746] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 938.310724][T14750] ------------[ cut here ]------------ | [ 938.310930][T14750] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14750 | [ 938.311175][T14750] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.312016][T14750] Tainted: [W]=WARN [ 938.312123][T14750] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.312304][T14750] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.312468][T14750] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.312982][T14750] RSP: 0018:ffa00000038975d0 EFLAGS: 00010286 [ 938.313171][T14750] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0537 [ 938.313424][T14750] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5029b8 [ 938.313639][T14750] RBP: 1ff4000000712ebb R08: 1fe2200001ea0538 R09: fffa3bfffffb0b24 [ 938.313849][T14750] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5023f4 [ 938.314064][T14750] R13: ff1100000f5023c0 R14: ffffffff931c7940 R15: ff1100000f502900 [ 938.314278][T14750] FS: 00007ff4ae654440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 938.314535][T14750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.314712][T14750] CR2: 000000000044f720 CR3: 000000001a18a006 CR4: 0000000000771ef0 [ 938.314930][T14750] PKRU: 55555554 [ 938.315039][T14750] Call Trace: [ 938.315148][T14750] [ 938.315232][T14750] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.315375][T14750] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.315547][T14750] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.315703][T14750] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.315851][T14750] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.316029][T14750] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.316178][T14750] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.316332][T14750] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.316479][T14750] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.316610][T14750] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.316774][T14750] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.316942][T14750] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.317109][T14750] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.317267][T14750] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.317411][T14750] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.317552][T14750] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.317713][T14750] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.317877][T14750] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.318034][T14750] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.318185][T14750] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.318325][T14750] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.318466][T14750] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.318600][T14750] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.318788][T14750] ? move_addr_to_kernel (net/socket.c:2511) [ 938.318934][T14750] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.319103][T14750] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.319273][T14750] ___sys_sendmsg (net/socket.c:2641) [ 938.319422][T14750] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.319587][T14750] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.319728][T14750] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.319865][T14750] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.320007][T14750] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.320163][T14750] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.320328][T14750] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.320500][T14750] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.320640][T14750] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.320798][T14750] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.320965][T14750] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.321154][T14750] RIP: 0033:0x7ff4ae7aec5e [ 938.321495][T14750] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.322017][T14750] RSP: 002b:00007fffe6de2fa0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.322314][T14750] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff4ae7aec5e [ 938.322520][T14750] RDX: 0000000000000000 RSI: 00007fffe6de3060 RDI: 0000000000000005 [ 938.322735][T14750] RBP: 00007fffe6de2fb0 R08: 0000000000000000 R09: 0000000000000000 [ 938.322950][T14750] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.323164][T14750] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 938.406647][T14756] ------------[ cut here ]------------ | [ 938.406825][T14756] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14756 | [ 938.407688][T14756] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.408656][T14756] Tainted: [W]=WARN [ 938.408759][T14756] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.409039][T14756] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.409185][T14756] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.409666][T14756] RSP: 0018:ffa00000038a75d0 EFLAGS: 00010286 [ 938.409837][T14756] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea079f [ 938.410146][T14756] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503cf8 [ 938.410353][T14756] RBP: 1ff4000000714ebb R08: 1fe2200001ea07a0 R09: fffa3bfffffb0b24 [ 938.410576][T14756] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502234 [ 938.410778][T14756] R13: ff1100000f502200 R14: ffffffff931c7940 R15: ff1100000f503c40 [ 938.411088][T14756] FS: 00007f32fe930440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 938.411328][T14756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.411507][T14756] CR2: 000000000044f720 CR3: 000000001acf4005 CR4: 0000000000771ef0 [ 938.411712][T14756] PKRU: 55555554 [ 938.411814][T14756] Call Trace: [ 938.412014][T14756] [ 938.412085][T14756] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.412219][T14756] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.412363][T14756] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.412504][T14756] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.412640][T14756] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.412789][T14756] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.413038][T14756] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.413176][T14756] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.413309][T14756] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.413467][T14756] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.413606][T14756] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.413740][T14756] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.413879][T14756] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.414087][T14756] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.414227][T14756] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.414394][T14756] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.414538][T14756] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.414679][T14756] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.414823][T14756] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.415049][T14756] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.415193][T14756] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.415335][T14756] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.415483][T14756] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.415654][T14756] ? move_addr_to_kernel (net/socket.c:2511) [ 938.415795][T14756] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.416034][T14756] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.416177][T14756] ___sys_sendmsg (net/socket.c:2641) [ 938.416318][T14756] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.416490][T14756] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.416634][T14756] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.416779][T14756] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.416988][T14756] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.417137][T14756] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.417290][T14756] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.417448][T14756] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.417597][T14756] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.417743][T14756] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.417892][T14756] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.418115][T14756] RIP: 0033:0x7f32fea8ac5e [ 938.418265][T14756] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.418792][T14756] RSP: 002b:00007fff1367b750 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.419014][T14756] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f32fea8ac5e [ 938.419227][T14756] RDX: 0000000000000000 RSI: 00007fff1367b810 RDI: 0000000000000005 [ 938.419440][T14756] RBP: 00007fff1367b760 R08: 0000000000000000 R09: 0000000000000000 [ 938.419654][T14756] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.419864][T14756] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 938.495253][T14760] ------------[ cut here ]------------ | [ 938.495455][T14760] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/14760 | [ 938.495703][T14760] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.496513][T14760] Tainted: [W]=WARN [ 938.496621][T14760] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.496793][T14760] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.496942][T14760] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.497453][T14760] RSP: 0018:ffa00000038a75d0 EFLAGS: 00010286 [ 938.497634][T14760] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b67 [ 938.497846][T14760] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 938.498068][T14760] RBP: 1ff4000000714ebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b24 [ 938.498288][T14760] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78ccb4 [ 938.498502][T14760] R13: ff1100001b78cc80 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 938.498708][T14760] FS: 00007fa2d95cf440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 938.498959][T14760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.499126][T14760] CR2: 000000000044f720 CR3: 000000001c57f006 CR4: 0000000000771ef0 [ 938.499333][T14760] PKRU: 55555554 [ 938.499443][T14760] Call Trace: [ 938.499545][T14760] [ 938.499614][T14760] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.499753][T14760] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.499913][T14760] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.500056][T14760] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.500197][T14760] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.500332][T14760] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.500494][T14760] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.500637][T14760] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.500776][T14760] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.500915][T14760] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.501050][T14760] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.501182][T14760] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.501314][T14760] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.501452][T14760] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.501589][T14760] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.501727][T14760] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.501867][T14760] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.502006][T14760] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.502146][T14760] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.502284][T14760] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.502423][T14760] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.502556][T14760] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.502688][T14760] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.502858][T14760] ? move_addr_to_kernel (net/socket.c:2511) [ 938.503000][T14760] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.503133][T14760] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.503269][T14760] ___sys_sendmsg (net/socket.c:2641) [ 938.503413][T14760] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.503558][T14760] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.503703][T14760] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.503840][T14760] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.503981][T14760] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.504127][T14760] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.504267][T14760] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.504403][T14760] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.504540][T14760] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.504674][T14760] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.504811][T14760] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.504997][T14760] RIP: 0033:0x7fa2d9729c5e [ 938.505153][T14760] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.505663][T14760] RSP: 002b:00007ffd806c9890 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.505872][T14760] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa2d9729c5e [ 938.506102][T14760] RDX: 0000000000000000 RSI: 00007ffd806c9950 RDI: 0000000000000005 [ 938.506307][T14760] RBP: 00007ffd806c98a0 R08: 0000000000000000 R09: 0000000000000000 [ 938.506515][T14760] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.506718][T14760] R13: 0000000069cbe7f1 R14: 0000000000000004 R15: 000000000049d620 | [ 938.584250][T14766] ------------[ cut here ]------------ | [ 938.584488][T14766] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14766 | [ 938.584797][T14766] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.585752][T14766] Tainted: [W]=WARN [ 938.585955][T14766] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.586183][T14766] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.586400][T14766] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.587076][T14766] RSP: 0018:ffa00000038c75d0 EFLAGS: 00010286 [ 938.587406][T14766] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f19df [ 938.587779][T14766] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cef8 [ 938.588140][T14766] RBP: 1ff4000000718ebb R08: 1fe22000036f19e0 R09: fffa3bfffffb0b24 [ 938.588509][T14766] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d3b4 [ 938.588869][T14766] R13: ff1100001b78d380 R14: ffffffff931c7940 R15: ff1100001b78ce40 [ 938.589230][T14766] FS: 00007eff3eb65440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 938.589632][T14766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.589867][T14766] CR2: 000000000044f720 CR3: 0000000019c61005 CR4: 0000000000771ef0 [ 938.590150][T14766] PKRU: 55555554 [ 938.590342][T14766] Call Trace: [ 938.590505][T14766] [ 938.590634][T14766] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.590829][T14766] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.591063][T14766] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.591397][T14766] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.591596][T14766] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.591811][T14766] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.592029][T14766] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.592230][T14766] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.592432][T14766] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.592654][T14766] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.592853][T14766] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.593056][T14766] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.593256][T14766] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.593489][T14766] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.593699][T14766] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.593912][T14766] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.594121][T14766] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.594335][T14766] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.594542][T14766] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.594743][T14766] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.594964][T14766] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.595174][T14766] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.595388][T14766] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.595626][T14766] ? move_addr_to_kernel (net/socket.c:2511) [ 938.595834][T14766] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.596049][T14766] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.596258][T14766] ___sys_sendmsg (net/socket.c:2641) [ 938.596471][T14766] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.596714][T14766] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.596940][T14766] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.597154][T14766] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.597355][T14766] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.597584][T14766] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.597780][T14766] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.597993][T14766] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.598179][T14766] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.598368][T14766] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.598587][T14766] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.598837][T14766] RIP: 0033:0x7eff3ecbfc5e [ 938.599058][T14766] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.599603][T14766] RSP: 002b:00007ffcb51db1a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.599856][T14766] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007eff3ecbfc5e [ 938.600113][T14766] RDX: 0000000000000000 RSI: 00007ffcb51db260 RDI: 0000000000000005 [ 938.600365][T14766] RBP: 00007ffcb51db1b0 R08: 0000000000000000 R09: 0000000000000000 [ 938.600636][T14766] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.600884][T14766] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 938.676679][T14770] ------------[ cut here ]------------ | [ 938.676850][T14770] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14770 | [ 938.677140][T14770] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.677949][T14770] Tainted: [W]=WARN [ 938.678051][T14770] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.678220][T14770] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.678367][T14770] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.678879][T14770] RSP: 0018:ffa00000039075d0 EFLAGS: 00010286 [ 938.679066][T14770] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000372581f [ 938.679266][T14770] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c0f8 [ 938.679475][T14770] RBP: 1ff4000000720ebb R08: 1fe2200003725820 R09: fffa3bfffffb0b24 [ 938.679674][T14770] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78c3f4 [ 938.679882][T14770] R13: ff1100001b78c3c0 R14: ffffffff931c7940 R15: ff1100001b92c040 [ 938.680099][T14770] FS: 00007f20ecc17440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 938.680335][T14770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.680512][T14770] CR2: 000000000044f720 CR3: 0000000019de0004 CR4: 0000000000771ef0 [ 938.680720][T14770] PKRU: 55555554 [ 938.680826][T14770] Call Trace: [ 938.681022][T14770] [ 938.681092][T14770] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.681227][T14770] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.681369][T14770] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.681507][T14770] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.681641][T14770] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.681777][T14770] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.681987][T14770] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.682123][T14770] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.682264][T14770] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.682412][T14770] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.682554][T14770] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.682698][T14770] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.682838][T14770] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.683022][T14770] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.683153][T14770] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.683286][T14770] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.683426][T14770] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.683560][T14770] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.683696][T14770] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.683830][T14770] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.684025][T14770] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.684164][T14770] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.684317][T14770] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.684494][T14770] ? move_addr_to_kernel (net/socket.c:2511) [ 938.684635][T14770] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.684771][T14770] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.684954][T14770] ___sys_sendmsg (net/socket.c:2641) [ 938.685098][T14770] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.685267][T14770] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.685409][T14770] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.685544][T14770] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.685682][T14770] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.685820][T14770] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.686005][T14770] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.686140][T14770] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.686281][T14770] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.686465][T14770] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.686605][T14770] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.686774][T14770] RIP: 0033:0x7f20ecd71c5e [ 938.686972][T14770] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.687509][T14770] RSP: 002b:00007ffe4da23a80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.687735][T14770] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f20ecd71c5e [ 938.687996][T14770] RDX: 0000000000000000 RSI: 00007ffe4da23b40 RDI: 0000000000000005 [ 938.688198][T14770] RBP: 00007ffe4da23a90 R08: 0000000000000000 R09: 0000000000000000 [ 938.688402][T14770] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.688610][T14770] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 938.772761][T14776] ------------[ cut here ]------------ | [ 938.772982][T14776] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14776 | [ 938.773271][T14776] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.774152][T14776] Tainted: [W]=WARN [ 938.774318][T14776] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.774555][T14776] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.774752][T14776] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.775291][T14776] RSP: 0018:ffa00000038d75d0 EFLAGS: 00010286 [ 938.775527][T14776] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000037258c7 [ 938.775780][T14776] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c638 [ 938.776045][T14776] RBP: 1ff400000071aebb R08: 1fe22000037258c8 R09: fffa3bfffffb0b24 [ 938.776302][T14776] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92c234 [ 938.776561][T14776] R13: ff1100001b92c200 R14: ffffffff931c7940 R15: ff1100001b92c580 [ 938.776815][T14776] FS: 00007f2b52eeb440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 938.777116][T14776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.777340][T14776] CR2: 000000000044f720 CR3: 000000000f554001 CR4: 0000000000771ef0 [ 938.777600][T14776] PKRU: 55555554 [ 938.777765][T14776] Call Trace: [ 938.777934][T14776] [ 938.778053][T14776] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.778238][T14776] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.778448][T14776] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.778642][T14776] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.778836][T14776] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.779045][T14776] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.779230][T14776] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.779435][T14776] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.779626][T14776] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.779814][T14776] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.780025][T14776] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.780227][T14776] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.780426][T14776] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.780619][T14776] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.780802][T14776] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.781006][T14776] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.781192][T14776] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.781390][T14776] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.781581][T14776] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.781767][T14776] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.781968][T14776] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.782154][T14776] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.782339][T14776] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.782563][T14776] ? move_addr_to_kernel (net/socket.c:2511) [ 938.782748][T14776] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.782943][T14776] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.783132][T14776] ___sys_sendmsg (net/socket.c:2641) [ 938.783317][T14776] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.783518][T14776] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.783708][T14776] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.783911][T14776] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.784102][T14776] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.784291][T14776] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.784488][T14776] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.784676][T14776] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.784864][T14776] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.785062][T14776] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.785249][T14776] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.785487][T14776] RIP: 0033:0x7f2b53045c5e [ 938.785678][T14776] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.786216][T14776] RSP: 002b:00007ffd7754c0c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.786481][T14776] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2b53045c5e [ 938.786734][T14776] RDX: 0000000000000000 RSI: 00007ffd7754c180 RDI: 0000000000000005 [ 938.787000][T14776] RBP: 00007ffd7754c0d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.787251][T14776] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.787512][T14776] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 938.849616][T14780] ------------[ cut here ]------------ | [ 938.849777][T14780] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14780 | [ 938.850029][T14780] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.850826][T14780] Tainted: [W]=WARN [ 938.850938][T14780] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.851110][T14780] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.851251][T14780] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.851734][T14780] RSP: 0018:ffa00000038975d0 EFLAGS: 00010286 [ 938.851910][T14780] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725bd7 [ 938.852111][T14780] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92deb8 [ 938.852309][T14780] RBP: 1ff4000000712ebb R08: 1fe2200003725bd8 R09: fffa3bfffffb0b24 [ 938.852514][T14780] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92dc74 [ 938.852712][T14780] R13: ff1100001b92dc40 R14: ffffffff931c7940 R15: ff1100001b92de00 [ 938.853440][T14780] FS: 00007f884a893440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 938.853710][T14780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.853887][T14780] CR2: 000000000044f720 CR3: 000000001082a003 CR4: 0000000000771ef0 [ 938.854100][T14780] PKRU: 55555554 [ 938.854203][T14780] Call Trace: [ 938.854306][T14780] [ 938.854375][T14780] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.854519][T14780] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.854660][T14780] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.854801][T14780] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.854942][T14780] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.855083][T14780] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.855222][T14780] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.855359][T14780] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.855500][T14780] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.855634][T14780] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.855771][T14780] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.855908][T14780] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.856044][T14780] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.856178][T14780] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.856315][T14780] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.856453][T14780] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.856591][T14780] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.856727][T14780] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.856862][T14780] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.857003][T14780] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.857147][T14780] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.857288][T14780] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.857427][T14780] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.857601][T14780] ? move_addr_to_kernel (net/socket.c:2511) [ 938.857745][T14780] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.857881][T14780] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.858028][T14780] ___sys_sendmsg (net/socket.c:2641) [ 938.858182][T14780] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.858331][T14780] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.858480][T14780] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.858616][T14780] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.858750][T14780] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.858889][T14780] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.859029][T14780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.859164][T14780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.859303][T14780] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.859453][T14780] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.859601][T14780] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.859782][T14780] RIP: 0033:0x7f884a9edc5e [ 938.859937][T14780] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.860430][T14780] RSP: 002b:00007fff768234b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.860641][T14780] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f884a9edc5e [ 938.860855][T14780] RDX: 0000000000000000 RSI: 00007fff76823570 RDI: 0000000000000005 [ 938.861067][T14780] RBP: 00007fff768234c0 R08: 0000000000000000 R09: 0000000000000000 [ 938.861281][T14780] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.861487][T14780] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 938.933782][T14786] ------------[ cut here ]------------ | [ 938.934518][T14786] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14786 | [ 938.934768][T14786] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 938.935617][T14786] Tainted: [W]=WARN [ 938.935726][T14786] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 938.935907][T14786] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 938.936062][T14786] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 938.936562][T14786] RSP: 0018:ffa00000039275d0 EFLAGS: 00010286 [ 938.936756][T14786] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038753d7 [ 938.936977][T14786] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9eb8 [ 938.937182][T14786] RBP: 1ff4000000724ebb R08: 1fe22000038753d8 R09: fffa3bfffffb0b24 [ 938.937390][T14786] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a85b4 [ 938.937592][T14786] R13: ff1100001c3a8580 R14: ffffffff931c7940 R15: ff1100001c3a9e00 [ 938.937816][T14786] FS: 00007fcfeb6a2440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 938.938076][T14786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.938248][T14786] CR2: 000000000044f720 CR3: 0000000019269003 CR4: 0000000000771ef0 [ 938.938460][T14786] PKRU: 55555554 [ 938.938565][T14786] Call Trace: [ 938.938668][T14786] [ 938.938736][T14786] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 938.938877][T14786] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 938.939041][T14786] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 938.939178][T14786] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.939313][T14786] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.939459][T14786] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 938.939599][T14786] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 938.939736][T14786] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 938.939870][T14786] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 938.940012][T14786] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 938.940157][T14786] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 938.940304][T14786] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 938.940462][T14786] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 938.940603][T14786] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 938.940738][T14786] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 938.940880][T14786] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 938.941022][T14786] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.941173][T14786] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 938.941309][T14786] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 938.941464][T14786] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 938.941600][T14786] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 938.941752][T14786] ? copy_msghdr_from_user (net/socket.c:2525) [ 938.941918][T14786] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 938.942242][T14786] ? move_addr_to_kernel (net/socket.c:2511) [ 938.942383][T14786] ? filemap_map_folio_range (mm/filemap.c:3873) [ 938.942526][T14786] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 938.942665][T14786] ___sys_sendmsg (net/socket.c:2641) [ 938.942813][T14786] ? copy_msghdr_from_user (net/socket.c:2628) [ 938.942967][T14786] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 938.943203][T14786] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 938.943358][T14786] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 938.943524][T14786] ? __sys_sendmsg_sock (net/socket.c:2656) [ 938.943688][T14786] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 938.943832][T14786] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.943974][T14786] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 938.944115][T14786] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 938.944248][T14786] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 938.944389][T14786] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 938.944557][T14786] RIP: 0033:0x7fcfeb7fcc5e [ 938.944706][T14786] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 938.945233][T14786] RSP: 002b:00007fff26ee58b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 938.945473][T14786] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcfeb7fcc5e [ 938.945699][T14786] RDX: 0000000000000000 RSI: 00007fff26ee5970 RDI: 0000000000000005 [ 938.945909][T14786] RBP: 00007fff26ee58c0 R08: 0000000000000000 R09: 0000000000000000 [ 938.946128][T14786] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 938.946346][T14786] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 939.018774][T14790] ------------[ cut here ]------------ | [ 939.018957][T14790] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14790 | [ 939.019206][T14790] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.020020][T14790] Tainted: [W]=WARN [ 939.020122][T14790] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.020319][T14790] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.020475][T14790] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.020974][T14790] RSP: 0018:ffa00000038975d0 EFLAGS: 00010286 [ 939.021152][T14790] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038751a7 [ 939.021355][T14790] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8d38 [ 939.021563][T14790] RBP: 1ff4000000712ebb R08: 1fe22000038751a8 R09: fffa3bfffffb0b24 [ 939.021769][T14790] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a93b4 [ 939.021973][T14790] R13: ff1100001c3a9380 R14: ffffffff931c7940 R15: ff1100001c3a8c80 [ 939.022183][T14790] FS: 00007fc6c96d0440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 939.022432][T14790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.022602][T14790] CR2: 000000000044f720 CR3: 000000001a6bf002 CR4: 0000000000771ef0 [ 939.022817][T14790] PKRU: 55555554 [ 939.022934][T14790] Call Trace: [ 939.023036][T14790] [ 939.023105][T14790] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.023240][T14790] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.023388][T14790] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.023541][T14790] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.023673][T14790] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.023812][T14790] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.023955][T14790] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.024091][T14790] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.024231][T14790] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.024397][T14790] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.024535][T14790] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.024673][T14790] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.024810][T14790] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.024988][T14790] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.025123][T14790] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.025258][T14790] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.025398][T14790] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.025534][T14790] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.025671][T14790] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.025806][T14790] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.025950][T14790] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.026085][T14790] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.026216][T14790] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.026397][T14790] ? move_addr_to_kernel (net/socket.c:2511) [ 939.026534][T14790] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.026677][T14790] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.026822][T14790] ___sys_sendmsg (net/socket.c:2641) [ 939.026965][T14790] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.027107][T14790] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.027246][T14790] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.027391][T14790] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.027526][T14790] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.027676][T14790] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.027821][T14790] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.027967][T14790] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.028125][T14790] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.028273][T14790] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.028421][T14790] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.028757][T14790] RIP: 0033:0x7fc6c982ac5e [ 939.028905][T14790] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.029411][T14790] RSP: 002b:00007ffdd37b5fc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.029640][T14790] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc6c982ac5e [ 939.029859][T14790] RDX: 0000000000000000 RSI: 00007ffdd37b6080 RDI: 0000000000000005 [ 939.030070][T14790] RBP: 00007ffdd37b5fd0 R08: 0000000000000000 R09: 0000000000000000 [ 939.030280][T14790] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.030486][T14790] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 939.113131][T14796] ------------[ cut here ]------------ | [ 939.113342][T14796] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14796 | [ 939.113701][T14796] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.114625][T14796] Tainted: [W]=WARN [ 939.114783][T14796] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.115600][T14796] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.115801][T14796] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.116367][T14796] RSP: 0018:ffa00000039175d0 EFLAGS: 00010286 [ 939.116614][T14796] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e857 [ 939.116881][T14796] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9742b8 [ 939.117164][T14796] RBP: 1ff4000000722ebb R08: 1fe220000192e858 R09: fffa3bfffffb0b24 [ 939.117432][T14796] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9734 [ 939.117711][T14796] R13: ff1100001c3a9700 R14: ffffffff931c7940 R15: ff1100000c974200 [ 939.117996][T14796] FS: 00007f5e90126440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 939.118292][T14796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.118549][T14796] CR2: 000000000044f720 CR3: 000000001cc51006 CR4: 0000000000771ef0 [ 939.118813][T14796] PKRU: 55555554 [ 939.118990][T14796] Call Trace: [ 939.119144][T14796] [ 939.119263][T14796] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.119458][T14796] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.119654][T14796] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.119841][T14796] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.120040][T14796] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.120248][T14796] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.120459][T14796] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.120659][T14796] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.120865][T14796] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.121073][T14796] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.121262][T14796] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.121461][T14796] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.121652][T14796] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.121838][T14796] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.122034][T14796] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.122221][T14796] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.122413][T14796] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.122602][T14796] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.122787][T14796] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.122988][T14796] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.123180][T14796] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.123367][T14796] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.123561][T14796] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.123778][T14796] ? move_addr_to_kernel (net/socket.c:2511) [ 939.123980][T14796] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.124168][T14796] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.124376][T14796] ___sys_sendmsg (net/socket.c:2641) [ 939.124583][T14796] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.124781][T14796] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.124989][T14796] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.125186][T14796] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.125372][T14796] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.125585][T14796] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.125772][T14796] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.125973][T14796] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.126162][T14796] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.126347][T14796] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.126575][T14796] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.126813][T14796] RIP: 0033:0x7f5e90280c5e [ 939.127029][T14796] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.127594][T14796] RSP: 002b:00007ffe03c96820 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.127863][T14796] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5e90280c5e [ 939.128126][T14796] RDX: 0000000000000000 RSI: 00007ffe03c968e0 RDI: 0000000000000005 [ 939.128391][T14796] RBP: 00007ffe03c96830 R08: 0000000000000000 R09: 0000000000000000 [ 939.128646][T14796] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.128909][T14796] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 939.187436][T14800] ------------[ cut here ]------------ | [ 939.187595][T14800] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14800 | [ 939.187832][T14800] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.188607][T14800] Tainted: [W]=WARN [ 939.188710][T14800] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.188884][T14800] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.189044][T14800] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.189537][T14800] RSP: 0018:ffa00000039175d0 EFLAGS: 00010286 [ 939.189707][T14800] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e9a7 [ 939.189916][T14800] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974d38 [ 939.190132][T14800] RBP: 1ff4000000722ebb R08: 1fe220000192e9a8 R09: fffa3bfffffb0b24 [ 939.190350][T14800] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974e74 [ 939.190554][T14800] R13: ff1100000c974e40 R14: ffffffff931c7940 R15: ff1100000c974c80 [ 939.190756][T14800] FS: 00007f20b8294440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 939.191007][T14800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.191175][T14800] CR2: 000000000044f720 CR3: 000000000bf24004 CR4: 0000000000771ef0 [ 939.191381][T14800] PKRU: 55555554 [ 939.191484][T14800] Call Trace: [ 939.191585][T14800] [ 939.191656][T14800] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.191792][T14800] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.191943][T14800] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.192079][T14800] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.192214][T14800] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.192351][T14800] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.192491][T14800] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.192625][T14800] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.192760][T14800] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.192901][T14800] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.193040][T14800] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.193186][T14800] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.193325][T14800] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.193471][T14800] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.193611][T14800] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.193757][T14800] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.193900][T14800] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.194035][T14800] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.194168][T14800] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.194301][T14800] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.194444][T14800] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.194579][T14800] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.194714][T14800] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.194880][T14800] ? move_addr_to_kernel (net/socket.c:2511) [ 939.195020][T14800] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.195158][T14800] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.195304][T14800] ___sys_sendmsg (net/socket.c:2641) [ 939.195444][T14800] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.195679][T14800] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.195822][T14800] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.195968][T14800] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.196102][T14800] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.196327][T14800] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.196482][T14800] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.196618][T14800] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.196753][T14800] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.196975][T14800] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.197112][T14800] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.197279][T14800] RIP: 0033:0x7f20b83eec5e [ 939.197429][T14800] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.198009][T14800] RSP: 002b:00007ffe465ce8d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.198294][T14800] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f20b83eec5e [ 939.198509][T14800] RDX: 0000000000000000 RSI: 00007ffe465ce990 RDI: 0000000000000005 [ 939.198710][T14800] RBP: 00007ffe465ce8e0 R08: 0000000000000000 R09: 0000000000000000 [ 939.199003][T14800] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.199207][T14800] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 939.288411][T14806] ------------[ cut here ]------------ | [ 939.288575][T14806] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14806 | [ 939.288811][T14806] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.289593][T14806] Tainted: [W]=WARN [ 939.289711][T14806] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.289886][T14806] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.290047][T14806] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.290530][T14806] RSP: 0018:ffa00000038a75d0 EFLAGS: 00010286 [ 939.290703][T14806] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192ea17 [ 939.290920][T14806] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9750b8 [ 939.291138][T14806] RBP: 1ff4000000714ebb R08: 1fe220000192ea18 R09: fffa3bfffffb0b24 [ 939.291353][T14806] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975c74 [ 939.291562][T14806] R13: ff1100000c975c40 R14: ffffffff931c7940 R15: ff1100000c975000 [ 939.291766][T14806] FS: 00007f1ec12bd440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 939.292007][T14806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.292177][T14806] CR2: 000000000044f720 CR3: 000000001997f003 CR4: 0000000000771ef0 [ 939.292387][T14806] PKRU: 55555554 [ 939.292502][T14806] Call Trace: [ 939.292604][T14806] [ 939.292673][T14806] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.292808][T14806] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.292954][T14806] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.293088][T14806] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.293221][T14806] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.293359][T14806] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.293494][T14806] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.293629][T14806] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.293763][T14806] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.293902][T14806] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.294038][T14806] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.294170][T14806] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.294305][T14806] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.294446][T14806] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.294576][T14806] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.294709][T14806] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.294842][T14806] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.295590][T14806] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.295725][T14806] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.295861][T14806] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.296010][T14806] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.296143][T14806] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.296275][T14806] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.296447][T14806] ? move_addr_to_kernel (net/socket.c:2511) [ 939.296582][T14806] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.296715][T14806] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.296850][T14806] ___sys_sendmsg (net/socket.c:2641) [ 939.296989][T14806] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.297137][T14806] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.297274][T14806] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.297415][T14806] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.297547][T14806] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.297689][T14806] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.297821][T14806] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.297960][T14806] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.298103][T14806] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.298233][T14806] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.298365][T14806] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.298608][T14806] RIP: 0033:0x7f1ec1417c5e [ 939.298756][T14806] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.299244][T14806] RSP: 002b:00007ffd7f5498f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.299693][T14806] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1ec1417c5e [ 939.299898][T14806] RDX: 0000000000000000 RSI: 00007ffd7f5499b0 RDI: 0000000000000005 [ 939.300107][T14806] RBP: 00007ffd7f549900 R08: 0000000000000000 R09: 0000000000000000 [ 939.300316][T14806] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.300537][T14806] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 939.388363][T14810] ------------[ cut here ]------------ | [ 939.388566][T14810] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/14810 | [ 939.388814][T14810] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.389628][T14810] Tainted: [W]=WARN [ 939.389733][T14810] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.389911][T14810] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.390056][T14810] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.390587][T14810] RSP: 0018:ffa00000039475d0 EFLAGS: 00010286 [ 939.390774][T14810] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229f2f [ 939.391056][T14810] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f978 [ 939.391268][T14810] RBP: 1ff4000000728ebb R08: 1fe2200003229f30 R09: fffa3bfffffb0b24 [ 939.391488][T14810] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f034 [ 939.391701][T14810] R13: ff1100001914f000 R14: ffffffff931c7940 R15: ff1100001914f8c0 [ 939.391988][T14810] FS: 00007fac0b5d0440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 939.392287][T14810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.392478][T14810] CR2: 000000000044f720 CR3: 000000000d868005 CR4: 0000000000771ef0 [ 939.392695][T14810] PKRU: 55555554 [ 939.392799][T14810] Call Trace: [ 939.392970][T14810] [ 939.393040][T14810] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.393184][T14810] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.393329][T14810] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.393478][T14810] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.393619][T14810] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.393784][T14810] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.394006][T14810] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.394159][T14810] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.394303][T14810] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.394449][T14810] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.394593][T14810] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.394741][T14810] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.394880][T14810] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.395079][T14810] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.395216][T14810] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.395356][T14810] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.395501][T14810] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.395638][T14810] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.395779][T14810] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.396005][T14810] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.396144][T14810] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.396288][T14810] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.396449][T14810] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.396621][T14810] ? move_addr_to_kernel (net/socket.c:2511) [ 939.396761][T14810] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.396959][T14810] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.397123][T14810] ___sys_sendmsg (net/socket.c:2641) [ 939.397257][T14810] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.397409][T14810] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.397550][T14810] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.397691][T14810] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.397858][T14810] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.398034][T14810] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.398167][T14810] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.398307][T14810] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.398459][T14810] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.398595][T14810] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.398730][T14810] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.398905][T14810] RIP: 0033:0x7fac0b72ac5e [ 939.399048][T14810] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.399578][T14810] RSP: 002b:00007ffdfda2ad80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.399789][T14810] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fac0b72ac5e [ 939.400008][T14810] RDX: 0000000000000000 RSI: 00007ffdfda2ae40 RDI: 0000000000000005 [ 939.400217][T14810] RBP: 00007ffdfda2ad90 R08: 0000000000000000 R09: 0000000000000000 [ 939.400433][T14810] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.400639][T14810] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 939.467929][T14816] ------------[ cut here ]------------ | [ 939.468103][T14816] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14816 | [ 939.468348][T14816] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.469168][T14816] Tainted: [W]=WARN [ 939.469276][T14816] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.469453][T14816] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.469596][T14816] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.470230][T14816] RSP: 0018:ffa00000039975d0 EFLAGS: 00010286 [ 939.470416][T14816] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229fd7 [ 939.470635][T14816] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914feb8 [ 939.470845][T14816] RBP: 1ff4000000732ebb R08: 1fe2200003229fd8 R09: fffa3bfffffb0b24 [ 939.471067][T14816] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914fc74 [ 939.471310][T14816] R13: ff1100001914fc40 R14: ffffffff931c7940 R15: ff1100001914fe00 [ 939.471527][T14816] FS: 00007fe50dd1c440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 939.471763][T14816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.471948][T14816] CR2: 000000000044f720 CR3: 000000001b97a004 CR4: 0000000000771ef0 [ 939.472161][T14816] PKRU: 55555554 [ 939.472271][T14816] Call Trace: [ 939.472381][T14816] [ 939.472458][T14816] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.472604][T14816] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.473167][T14816] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.473316][T14816] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.473468][T14816] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.473610][T14816] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.473748][T14816] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.473908][T14816] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.474046][T14816] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.474189][T14816] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.474335][T14816] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.474485][T14816] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.474631][T14816] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.474769][T14816] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.474917][T14816] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.475065][T14816] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.475201][T14816] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.475345][T14816] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.475494][T14816] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.475638][T14816] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.475780][T14816] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.475926][T14816] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.476072][T14816] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.476246][T14816] ? move_addr_to_kernel (net/socket.c:2511) [ 939.476395][T14816] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.476539][T14816] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.476680][T14816] ___sys_sendmsg (net/socket.c:2641) [ 939.476815][T14816] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.476963][T14816] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.477108][T14816] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.477248][T14816] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.477387][T14816] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.477526][T14816] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.477665][T14816] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.477800][T14816] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.477940][T14816] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.478074][T14816] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.478211][T14816] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.478382][T14816] RIP: 0033:0x7fe50de76c5e [ 939.478529][T14816] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.479030][T14816] RSP: 002b:00007ffce069dda0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.479239][T14816] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe50de76c5e [ 939.479457][T14816] RDX: 0000000000000000 RSI: 00007ffce069de60 RDI: 0000000000000005 [ 939.479660][T14816] RBP: 00007ffce069ddb0 R08: 0000000000000000 R09: 0000000000000000 [ 939.479862][T14816] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.480071][T14816] R13: 0000000069cbe7f2 R14: 0000000000000004 R15: 000000000049d620 | [ 939.541382][T14820] ------------[ cut here ]------------ | [ 939.541602][T14820] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14820 | [ 939.541924][T14820] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.542811][T14820] Tainted: [W]=WARN [ 939.542978][T14820] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.543208][T14820] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.543416][T14820] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.543990][T14820] RSP: 0018:ffa00000039c75d0 EFLAGS: 00010286 [ 939.544226][T14820] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c22f7 [ 939.544495][T14820] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6117b8 [ 939.544778][T14820] RBP: 1ff4000000738ebb R08: 1fe22000034c22f8 R09: fffa3bfffffb0b24 [ 939.545048][T14820] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611034 [ 939.545327][T14820] R13: ff1100001a611000 R14: ffffffff931c7940 R15: ff1100001a611700 [ 939.545611][T14820] FS: 00007f3862071440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 939.545925][T14820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.546146][T14820] CR2: 000000000044f720 CR3: 000000001073a002 CR4: 0000000000771ef0 [ 939.546408][T14820] PKRU: 55555554 [ 939.546566][T14820] Call Trace: [ 939.546744][T14820] [ 939.546871][T14820] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.547084][T14820] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.547297][T14820] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.547497][T14820] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.547684][T14820] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.547881][T14820] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.548079][T14820] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.548266][T14820] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.548462][T14820] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.548647][T14820] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.548836][T14820] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.549033][T14820] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.549221][T14820] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.549413][T14820] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.549596][T14820] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.549787][T14820] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.549982][T14820] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.550168][T14820] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.550354][T14820] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.550549][T14820] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.550736][T14820] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.550934][T14820] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.551118][T14820] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.551335][T14820] ? move_addr_to_kernel (net/socket.c:2511) [ 939.551530][T14820] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.551713][T14820] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.551912][T14820] ___sys_sendmsg (net/socket.c:2641) [ 939.552098][T14820] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.552286][T14820] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.552499][T14820] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.552701][T14820] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.552888][T14820] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.553090][T14820] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.553273][T14820] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.553465][T14820] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.553653][T14820] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.553837][T14820] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.554036][T14820] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.554277][T14820] RIP: 0033:0x7f38621cbc5e [ 939.554492][T14820] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.555059][T14820] RSP: 002b:00007ffc86b197f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.555329][T14820] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f38621cbc5e [ 939.555608][T14820] RDX: 0000000000000000 RSI: 00007ffc86b198b0 RDI: 0000000000000005 [ 939.555865][T14820] RBP: 00007ffc86b19800 R08: 0000000000000000 R09: 0000000000000000 [ 939.556132][T14820] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.556392][T14820] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 939.635647][T14826] ------------[ cut here ]------------ | [ 939.635811][T14826] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/14826 | [ 939.636432][T14826] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.637205][T14826] Tainted: [W]=WARN [ 939.637305][T14826] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.637479][T14826] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.637620][T14826] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.638101][T14826] RSP: 0018:ffa00000039a75d0 EFLAGS: 00010286 [ 939.638268][T14826] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c201f [ 939.638470][T14826] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6100f8 [ 939.638668][T14826] RBP: 1ff4000000734ebb R08: 1fe22000034c2020 R09: fffa3bfffffb0b24 [ 939.638866][T14826] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6113b4 [ 939.639070][T14826] R13: ff1100001a611380 R14: ffffffff931c7940 R15: ff1100001a610040 [ 939.639271][T14826] FS: 00007f8f1638e440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 939.639513][T14826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.639681][T14826] CR2: 000000000044f720 CR3: 0000000018354004 CR4: 0000000000771ef0 [ 939.639882][T14826] PKRU: 55555554 [ 939.639989][T14826] Call Trace: [ 939.640089][T14826] [ 939.640156][T14826] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.640305][T14826] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.640454][T14826] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.640590][T14826] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.640727][T14826] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.640869][T14826] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.641005][T14826] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.641144][T14826] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.641279][T14826] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.641418][T14826] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.641558][T14826] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.641691][T14826] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.641825][T14826] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.641972][T14826] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.642107][T14826] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.642244][T14826] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.642384][T14826] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.642521][T14826] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.642656][T14826] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.642799][T14826] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.642941][T14826] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.643078][T14826] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.643221][T14826] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.643409][T14826] ? move_addr_to_kernel (net/socket.c:2511) [ 939.643557][T14826] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.643693][T14826] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.643835][T14826] ___sys_sendmsg (net/socket.c:2641) [ 939.643972][T14826] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.644114][T14826] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.644252][T14826] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.644394][T14826] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.644529][T14826] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.644687][T14826] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.644821][T14826] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.644982][T14826] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.645116][T14826] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.645249][T14826] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.645384][T14826] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.645549][T14826] RIP: 0033:0x7f8f164e8c5e [ 939.645691][T14826] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.646177][T14826] RSP: 002b:00007ffd5d9816f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.646385][T14826] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8f164e8c5e [ 939.646603][T14826] RDX: 0000000000000000 RSI: 00007ffd5d9817b0 RDI: 0000000000000005 [ 939.646818][T14826] RBP: 00007ffd5d981700 R08: 0000000000000000 R09: 0000000000000000 [ 939.647030][T14826] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.647230][T14826] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 939.729889][T14830] ------------[ cut here ]------------ | [ 939.730126][T14830] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14830 | [ 939.730433][T14830] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.731350][T14830] Tainted: [W]=WARN [ 939.731538][T14830] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.731764][T14830] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.732004][T14830] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.732588][T14830] RSP: 0018:ffa00000038775d0 EFLAGS: 00010286 [ 939.732824][T14830] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea06bf [ 939.733598][T14830] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5035f8 [ 939.733915][T14830] RBP: 1ff400000070eebb R08: 1fe2200001ea06c0 R09: fffa3bfffffb0b24 [ 939.734185][T14830] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503034 [ 939.734492][T14830] R13: ff1100000f503000 R14: ffffffff931c7940 R15: ff1100000f503540 [ 939.734773][T14830] FS: 00007f1e491a7440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 939.735097][T14830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.735333][T14830] CR2: 000000000044f720 CR3: 000000001c05a006 CR4: 0000000000771ef0 [ 939.735607][T14830] PKRU: 55555554 [ 939.735775][T14830] Call Trace: [ 939.735955][T14830] [ 939.736080][T14830] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.736287][T14830] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.736514][T14830] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.736716][T14830] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.736931][T14830] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.737137][T14830] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.737339][T14830] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.737540][T14830] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.737729][T14830] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.737936][T14830] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.738137][T14830] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.738349][T14830] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.738564][T14830] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.738759][T14830] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.738981][T14830] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.739185][T14830] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.739386][T14830] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.739586][T14830] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.739794][T14830] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.740006][T14830] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.740201][T14830] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.740412][T14830] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.740606][T14830] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.740836][T14830] ? move_addr_to_kernel (net/socket.c:2511) [ 939.741057][T14830] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.741248][T14830] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.741475][T14830] ___sys_sendmsg (net/socket.c:2641) [ 939.741671][T14830] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.741875][T14830] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.742086][T14830] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.742294][T14830] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.742520][T14830] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.742724][T14830] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.742933][T14830] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.743137][T14830] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.743352][T14830] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.743583][T14830] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.743790][T14830] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.744051][T14830] RIP: 0033:0x7f1e49301c5e [ 939.744268][T14830] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.744842][T14830] RSP: 002b:00007ffeffe4cca0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.745134][T14830] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1e49301c5e [ 939.745404][T14830] RDX: 0000000000000000 RSI: 00007ffeffe4cd60 RDI: 0000000000000005 [ 939.745665][T14830] RBP: 00007ffeffe4ccb0 R08: 0000000000000000 R09: 0000000000000000 [ 939.745933][T14830] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.746205][T14830] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 939.820363][T14836] ------------[ cut here ]------------ | [ 939.820761][T14836] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14836 | [ 939.821009][T14836] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.821804][T14836] Tainted: [W]=WARN [ 939.821913][T14836] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.822086][T14836] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.822274][T14836] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.822807][T14836] RSP: 0018:ffa0000003a275d0 EFLAGS: 00010286 [ 939.823420][T14836] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0457 [ 939.823657][T14836] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 939.823907][T14836] RBP: 1ff4000000744ebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b24 [ 939.824132][T14836] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5038f4 [ 939.824362][T14836] R13: ff1100000f5038c0 R14: ffffffff931c7940 R15: ff1100000f502200 [ 939.824580][T14836] FS: 00007f170ea30440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 939.824854][T14836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.825035][T14836] CR2: 000000000044f720 CR3: 00000000191f2005 CR4: 0000000000771ef0 [ 939.825241][T14836] PKRU: 55555554 [ 939.825342][T14836] Call Trace: [ 939.825454][T14836] [ 939.825523][T14836] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.825658][T14836] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.825808][T14836] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.825954][T14836] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.826086][T14836] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.826247][T14836] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.826395][T14836] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.826577][T14836] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.826718][T14836] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.826876][T14836] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.827034][T14836] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.827194][T14836] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.827359][T14836] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.827502][T14836] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.827657][T14836] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.827808][T14836] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.827967][T14836] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.828129][T14836] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.828273][T14836] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.828435][T14836] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.828590][T14836] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.828737][T14836] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.828880][T14836] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.829057][T14836] ? move_addr_to_kernel (net/socket.c:2511) [ 939.829193][T14836] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.829330][T14836] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.829475][T14836] ___sys_sendmsg (net/socket.c:2641) [ 939.829617][T14836] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.829841][T14836] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.829995][T14836] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.830136][T14836] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.830270][T14836] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.830492][T14836] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.830652][T14836] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.830789][T14836] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.830930][T14836] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.831144][T14836] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.831281][T14836] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.831604][T14836] RIP: 0033:0x7f170eb8ac5e [ 939.831747][T14836] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.832333][T14836] RSP: 002b:00007ffc86bf56b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.832648][T14836] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f170eb8ac5e [ 939.832852][T14836] RDX: 0000000000000000 RSI: 00007ffc86bf5770 RDI: 0000000000000005 [ 939.833071][T14836] RBP: 00007ffc86bf56c0 R08: 0000000000000000 R09: 0000000000000000 [ 939.833374][T14836] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.833652][T14836] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 939.915741][T14840] ------------[ cut here ]------------ | [ 939.916159][T14840] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14840 | [ 939.916470][T14840] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 939.917394][T14840] Tainted: [W]=WARN [ 939.917551][T14840] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 939.917785][T14840] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 939.918009][T14840] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 939.918549][T14840] RSP: 0018:ffa00000038775d0 EFLAGS: 00010286 [ 939.918779][T14840] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1a4f [ 939.919047][T14840] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d278 [ 939.919304][T14840] RBP: 1ff400000070eebb R08: 1fe22000036f1a50 R09: fffa3bfffffb0b24 [ 939.919562][T14840] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78caf4 [ 939.919816][T14840] R13: ff1100001b78cac0 R14: ffffffff931c7940 R15: ff1100001b78d1c0 [ 939.920084][T14840] FS: 00007f91967a3440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 939.920396][T14840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.920625][T14840] CR2: 000000000044f720 CR3: 00000000106e2006 CR4: 0000000000771ef0 [ 939.920881][T14840] PKRU: 55555554 [ 939.921049][T14840] Call Trace: [ 939.921204][T14840] [ 939.921327][T14840] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 939.921525][T14840] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 939.921729][T14840] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 939.921936][T14840] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.922123][T14840] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.922315][T14840] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 939.922516][T14840] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 939.922711][T14840] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 939.922914][T14840] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 939.923107][T14840] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 939.923301][T14840] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 939.923495][T14840] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 939.923695][T14840] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 939.923886][T14840] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 939.924088][T14840] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 939.924278][T14840] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 939.924479][T14840] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.924673][T14840] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 939.924863][T14840] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 939.925063][T14840] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 939.925257][T14840] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 939.925454][T14840] ? copy_msghdr_from_user (net/socket.c:2525) [ 939.925646][T14840] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 939.925884][T14840] ? move_addr_to_kernel (net/socket.c:2511) [ 939.926103][T14840] ? filemap_map_folio_range (mm/filemap.c:3873) [ 939.926302][T14840] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 939.926516][T14840] ___sys_sendmsg (net/socket.c:2641) [ 939.926715][T14840] ? copy_msghdr_from_user (net/socket.c:2628) [ 939.926931][T14840] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 939.927131][T14840] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 939.927332][T14840] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 939.927529][T14840] ? __sys_sendmsg_sock (net/socket.c:2656) [ 939.927722][T14840] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 939.927924][T14840] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.928122][T14840] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 939.928323][T14840] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 939.928526][T14840] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 939.928732][T14840] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 939.928972][T14840] RIP: 0033:0x7f91968fdc5e [ 939.929184][T14840] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 939.929761][T14840] RSP: 002b:00007fff56eacef0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 939.930048][T14840] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f91968fdc5e [ 939.930319][T14840] RDX: 0000000000000000 RSI: 00007fff56eacfb0 RDI: 0000000000000005 [ 939.930619][T14840] RBP: 00007fff56eacf00 R08: 0000000000000000 R09: 0000000000000000 [ 939.930884][T14840] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 939.931148][T14840] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 940.016069][T14846] ------------[ cut here ]------------ | [ 940.016280][T14846] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14846 | [ 940.016580][T14846] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.017460][T14846] Tainted: [W]=WARN [ 940.017613][T14846] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.017831][T14846] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.018039][T14846] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.018583][T14846] RSP: 0018:ffa0000003a675d0 EFLAGS: 00010286 [ 940.018806][T14846] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b9f [ 940.019072][T14846] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78dcf8 [ 940.019333][T14846] RBP: 1ff400000074cebb R08: 1fe22000036f1ba0 R09: fffa3bfffffb0b24 [ 940.019604][T14846] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d034 [ 940.019871][T14846] R13: ff1100001b78d000 R14: ffffffff931c7940 R15: ff1100001b78dc40 [ 940.020166][T14846] FS: 00007f9d6892e440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 940.020485][T14846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.020722][T14846] CR2: 000000000044f720 CR3: 000000001bffa006 CR4: 0000000000771ef0 [ 940.021003][T14846] PKRU: 55555554 [ 940.021171][T14846] Call Trace: [ 940.021324][T14846] [ 940.021464][T14846] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.021670][T14846] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.021885][T14846] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.022093][T14846] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.022281][T14846] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.022489][T14846] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.022674][T14846] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.022863][T14846] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.023070][T14846] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.023257][T14846] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.023455][T14846] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.023639][T14846] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.023828][T14846] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.024048][T14846] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.024244][T14846] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.024451][T14846] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.024658][T14846] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.024863][T14846] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.025082][T14846] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.025282][T14846] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.025488][T14846] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.025689][T14846] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.025887][T14846] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.026131][T14846] ? move_addr_to_kernel (net/socket.c:2511) [ 940.026329][T14846] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.026533][T14846] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.026720][T14846] ___sys_sendmsg (net/socket.c:2641) [ 940.026925][T14846] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.027129][T14846] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.027331][T14846] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.027542][T14846] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.027731][T14846] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.027934][T14846] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.028127][T14846] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.028316][T14846] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.028515][T14846] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.028704][T14846] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.028906][T14846] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.029123][T14846] RIP: 0033:0x7f9d68a88c5e [ 940.029322][T14846] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.029924][T14846] RSP: 002b:00007fff686f6380 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.030195][T14846] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9d68a88c5e [ 940.030468][T14846] RDX: 0000000000000000 RSI: 00007fff686f6440 RDI: 0000000000000005 [ 940.030756][T14846] RBP: 00007fff686f6390 R08: 0000000000000000 R09: 0000000000000000 [ 940.031043][T14846] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.031316][T14846] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 940.107655][T14850] ------------[ cut here ]------------ | [ 940.107848][T14850] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14850 | [ 940.108116][T14850] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.108965][T14850] Tainted: [W]=WARN [ 940.109077][T14850] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.109263][T14850] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.109431][T14850] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.109974][T14850] RSP: 0018:ffa00000039f75d0 EFLAGS: 00010286 [ 940.110168][T14850] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725af7 [ 940.110395][T14850] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d7b8 [ 940.110613][T14850] RBP: 1ff400000073eebb R08: 1fe2200003725af8 R09: fffa3bfffffb0b24 [ 940.110837][T14850] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92d8f4 [ 940.111067][T14850] R13: ff1100001b92d8c0 R14: ffffffff931c7940 R15: ff1100001b92d700 [ 940.111283][T14850] FS: 00007f262bd23440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 940.111546][T14850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.111734][T14850] CR2: 000000000044f720 CR3: 000000001a73d001 CR4: 0000000000771ef0 [ 940.111964][T14850] PKRU: 55555554 [ 940.112071][T14850] Call Trace: [ 940.112183][T14850] [ 940.112254][T14850] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.112416][T14850] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.112582][T14850] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.112739][T14850] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.112880][T14850] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.113030][T14850] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.113175][T14850] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.113321][T14850] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.113479][T14850] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.113626][T14850] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.113776][T14850] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.113936][T14850] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.114092][T14850] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.114249][T14850] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.114396][T14850] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.114540][T14850] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.114684][T14850] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.114835][T14850] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.114991][T14850] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.115137][T14850] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.115287][T14850] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.115435][T14850] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.115580][T14850] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.115767][T14850] ? move_addr_to_kernel (net/socket.c:2511) [ 940.115915][T14850] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.116062][T14850] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.116206][T14850] ___sys_sendmsg (net/socket.c:2641) [ 940.116353][T14850] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.116506][T14850] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.116668][T14850] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.116813][T14850] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.116967][T14850] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.117114][T14850] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.117264][T14850] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.117425][T14850] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.117572][T14850] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.117716][T14850] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.117863][T14850] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.118061][T14850] RIP: 0033:0x7f262be7dc5e [ 940.118214][T14850] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.118739][T14850] RSP: 002b:00007ffe24e327c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.118971][T14850] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f262be7dc5e [ 940.119188][T14850] RDX: 0000000000000000 RSI: 00007ffe24e32880 RDI: 0000000000000005 [ 940.119411][T14850] RBP: 00007ffe24e327d0 R08: 0000000000000000 R09: 0000000000000000 [ 940.119628][T14850] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.119838][T14850] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 940.229674][T14856] ------------[ cut here ]------------ | [ 940.229867][T14856] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14856 | [ 940.230134][T14856] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.230955][T14856] Tainted: [W]=WARN [ 940.231061][T14856] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.231235][T14856] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.231392][T14856] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.231900][T14856] RSP: 0018:ffa0000003ab75d0 EFLAGS: 00010286 [ 940.232106][T14856] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725a4f [ 940.232343][T14856] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d278 [ 940.232577][T14856] RBP: 1ff4000000756ebb R08: 1fe2200003725a50 R09: fffa3bfffffb0b24 [ 940.232835][T14856] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92d3b4 [ 940.233069][T14856] R13: ff1100001b92d380 R14: ffffffff931c7940 R15: ff1100001b92d1c0 [ 940.233289][T14856] FS: 00007f3315ece440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 940.233584][T14856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.233784][T14856] CR2: 000000000044f720 CR3: 00000000197af003 CR4: 0000000000771ef0 [ 940.234021][T14856] PKRU: 55555554 [ 940.234135][T14856] Call Trace: [ 940.234246][T14856] [ 940.234321][T14856] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.234475][T14856] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.234630][T14856] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.234780][T14856] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.234932][T14856] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.235114][T14856] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.235318][T14856] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.235541][T14856] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.235747][T14856] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.235930][T14856] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.236077][T14856] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.236219][T14856] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.236361][T14856] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.236524][T14856] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.236670][T14856] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.236816][T14856] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.236965][T14856] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.237111][T14856] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.237252][T14856] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.237403][T14856] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.237556][T14856] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.237699][T14856] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.237841][T14856] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.238026][T14856] ? move_addr_to_kernel (net/socket.c:2511) [ 940.238168][T14856] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.238309][T14856] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.238460][T14856] ___sys_sendmsg (net/socket.c:2641) [ 940.238611][T14856] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.238758][T14856] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.238906][T14856] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.239048][T14856] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.239200][T14856] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.239348][T14856] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.239498][T14856] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.239645][T14856] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.239791][T14856] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.239944][T14856] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.240089][T14856] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.240269][T14856] RIP: 0033:0x7f3316028c5e [ 940.240426][T14856] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.241046][T14856] RSP: 002b:00007ffc1a3fecd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.241277][T14856] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f3316028c5e [ 940.241495][T14856] RDX: 0000000000000000 RSI: 00007ffc1a3fed90 RDI: 0000000000000005 [ 940.241733][T14856] RBP: 00007ffc1a3fece0 R08: 0000000000000000 R09: 0000000000000000 [ 940.241972][T14856] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.242192][T14856] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 940.308864][T14860] ------------[ cut here ]------------ | [ 940.309053][T14860] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14860 | [ 940.309299][T14860] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.310118][T14860] Tainted: [W]=WARN [ 940.310230][T14860] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.310407][T14860] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.310554][T14860] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.311046][T14860] RSP: 0018:ffa0000003aa75d0 EFLAGS: 00010286 [ 940.311223][T14860] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003875287 [ 940.311431][T14860] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9438 [ 940.311629][T14860] RBP: 1ff4000000754ebb R08: 1fe2200003875288 R09: fffa3bfffffb0b24 [ 940.311830][T14860] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9ab4 [ 940.312043][T14860] R13: ff1100001c3a9a80 R14: ffffffff931c7940 R15: ff1100001c3a9380 [ 940.312255][T14860] FS: 00007fd0c937d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 940.312514][T14860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.312690][T14860] CR2: 000000000044f720 CR3: 0000000017e56001 CR4: 0000000000771ef0 [ 940.312901][T14860] PKRU: 55555554 [ 940.313002][T14860] Call Trace: [ 940.313109][T14860] [ 940.313179][T14860] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.313324][T14860] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.313476][T14860] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.313618][T14860] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.313752][T14860] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.313907][T14860] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.314047][T14860] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.314187][T14860] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.314325][T14860] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.314464][T14860] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.314602][T14860] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.314742][T14860] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.314884][T14860] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.315520][T14860] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.315671][T14860] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.315823][T14860] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.315975][T14860] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.316117][T14860] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.316258][T14860] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.316400][T14860] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.316543][T14860] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.316688][T14860] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.316829][T14860] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.317009][T14860] ? move_addr_to_kernel (net/socket.c:2511) [ 940.317148][T14860] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.317283][T14860] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.317427][T14860] ___sys_sendmsg (net/socket.c:2641) [ 940.317561][T14860] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.317699][T14860] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.317835][T14860] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.317978][T14860] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.318114][T14860] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.318250][T14860] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.318387][T14860] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.318521][T14860] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.318654][T14860] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.318786][T14860] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.318926][T14860] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.319092][T14860] RIP: 0033:0x7fd0c94d7c5e [ 940.319240][T14860] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.319750][T14860] RSP: 002b:00007ffc191b54e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.319970][T14860] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd0c94d7c5e [ 940.320180][T14860] RDX: 0000000000000000 RSI: 00007ffc191b55a0 RDI: 0000000000000005 [ 940.320394][T14860] RBP: 00007ffc191b54f0 R08: 0000000000000000 R09: 0000000000000000 [ 940.320604][T14860] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.320813][T14860] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 940.395183][T14866] ------------[ cut here ]------------ | [ 940.395405][T14866] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14866 | [ 940.395693][T14866] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.396593][T14866] Tainted: [W]=WARN [ 940.396752][T14866] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.396982][T14866] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.397175][T14866] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.397731][T14866] RSP: 0018:ffa0000003a075d0 EFLAGS: 00010286 [ 940.397968][T14866] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387532f [ 940.398217][T14866] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9978 [ 940.398479][T14866] RBP: 1ff4000000740ebb R08: 1fe2200003875330 R09: fffa3bfffffb0b24 [ 940.398730][T14866] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8774 [ 940.399491][T14866] R13: ff1100001c3a8740 R14: ffffffff931c7940 R15: ff1100001c3a98c0 [ 940.399743][T14866] FS: 00007f7b04646440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 940.400051][T14866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.400273][T14866] CR2: 000000000044f720 CR3: 000000001c046001 CR4: 0000000000771ef0 [ 940.400532][T14866] PKRU: 55555554 [ 940.400684][T14866] Call Trace: [ 940.400834][T14866] [ 940.400965][T14866] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.401173][T14866] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.401397][T14866] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.401599][T14866] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.401791][T14866] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.402000][T14866] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.402189][T14866] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.402391][T14866] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.402587][T14866] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.402779][T14866] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.402985][T14866] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.403179][T14866] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.403372][T14866] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.403576][T14866] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.403763][T14866] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.403970][T14866] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.404192][T14866] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.404414][T14866] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.404631][T14866] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.404844][T14866] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.405069][T14866] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.405275][T14866] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.405495][T14866] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.405735][T14866] ? move_addr_to_kernel (net/socket.c:2511) [ 940.405954][T14866] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.406170][T14866] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.406391][T14866] ___sys_sendmsg (net/socket.c:2641) [ 940.406598][T14866] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.406809][T14866] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.407040][T14866] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.407248][T14866] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.407461][T14866] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.407673][T14866] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.407884][T14866] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.408114][T14866] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.408325][T14866] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.408539][T14866] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.408760][T14866] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.409003][T14866] RIP: 0033:0x7f7b047a0c5e [ 940.409203][T14866] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.409764][T14866] RSP: 002b:00007ffd75ead590 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.410050][T14866] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7b047a0c5e [ 940.410302][T14866] RDX: 0000000000000000 RSI: 00007ffd75ead650 RDI: 0000000000000005 [ 940.410567][T14866] RBP: 00007ffd75ead5a0 R08: 0000000000000000 R09: 0000000000000000 [ 940.410816][T14866] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.411078][T14866] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 940.488339][T14870] ------------[ cut here ]------------ | [ 940.488570][T14870] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14870 | [ 940.488871][T14870] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.489799][T14870] Tainted: [W]=WARN [ 940.490469][T14870] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.490700][T14870] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.490916][T14870] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.491476][T14870] RSP: 0018:ffa0000003a475d0 EFLAGS: 00010286 [ 940.491747][T14870] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eb9f [ 940.492012][T14870] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975cf8 [ 940.492283][T14870] RBP: 1ff4000000748ebb R08: 1fe220000192eba0 R09: fffa3bfffffb0b24 [ 940.492563][T14870] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975e34 [ 940.492815][T14870] R13: ff1100000c975e00 R14: ffffffff931c7940 R15: ff1100000c975c40 [ 940.493092][T14870] FS: 00007f7c48754440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 940.493402][T14870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.493664][T14870] CR2: 000000000044f720 CR3: 0000000017c1c003 CR4: 0000000000771ef0 [ 940.493962][T14870] PKRU: 55555554 [ 940.494121][T14870] Call Trace: [ 940.494281][T14870] [ 940.494408][T14870] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.494601][T14870] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.494796][T14870] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.495004][T14870] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.495196][T14870] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.495402][T14870] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.495589][T14870] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.495803][T14870] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.496009][T14870] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.496210][T14870] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.496418][T14870] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.496618][T14870] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.496813][T14870] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.497027][T14870] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.497229][T14870] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.497441][T14870] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.497644][T14870] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.497840][T14870] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.498081][T14870] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.498271][T14870] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.498470][T14870] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.498658][T14870] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.498843][T14870] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.499074][T14870] ? move_addr_to_kernel (net/socket.c:2511) [ 940.499263][T14870] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.499459][T14870] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.499651][T14870] ___sys_sendmsg (net/socket.c:2641) [ 940.499836][T14870] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.500048][T14870] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.500240][T14870] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.500446][T14870] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.500638][T14870] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.500830][T14870] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.501031][T14870] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.501218][T14870] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.501413][T14870] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.501603][T14870] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.501791][T14870] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.502031][T14870] RIP: 0033:0x7f7c488aec5e [ 940.502250][T14870] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.502867][T14870] RSP: 002b:00007ffc7d80cfa0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.503158][T14870] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7c488aec5e [ 940.503421][T14870] RDX: 0000000000000000 RSI: 00007ffc7d80d060 RDI: 0000000000000005 [ 940.503690][T14870] RBP: 00007ffc7d80cfb0 R08: 0000000000000000 R09: 0000000000000000 [ 940.503950][T14870] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.504215][T14870] R13: 0000000069cbe7f3 R14: 0000000000000004 R15: 000000000049d620 | [ 940.592449][T14876] ------------[ cut here ]------------ | [ 940.592653][T14876] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14876 | [ 940.592957][T14876] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.593842][T14876] Tainted: [W]=WARN [ 940.593975][T14876] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.594180][T14876] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.594339][T14876] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.594890][T14876] RSP: 0018:ffa0000003b375d0 EFLAGS: 00010286 [ 940.595081][T14876] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e9a7 [ 940.595327][T14876] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974d38 [ 940.595771][T14876] RBP: 1ff4000000766ebb R08: 1fe220000192e9a8 R09: fffa3bfffffb0b24 [ 940.595993][T14876] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974e74 [ 940.596212][T14876] R13: ff1100000c974e40 R14: ffffffff931c7940 R15: ff1100000c974c80 [ 940.596444][T14876] FS: 00007fcb6d711440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 940.596694][T14876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.596989][T14876] CR2: 000000000044f720 CR3: 000000001d1ba001 CR4: 0000000000771ef0 [ 940.597210][T14876] PKRU: 55555554 [ 940.597325][T14876] Call Trace: [ 940.597443][T14876] [ 940.597517][T14876] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.597666][T14876] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.597925][T14876] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.598076][T14876] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.598221][T14876] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.598402][T14876] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.598541][T14876] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.598702][T14876] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.598856][T14876] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.599154][T14876] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.599295][T14876] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.599444][T14876] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.599579][T14876] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.599714][T14876] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.599851][T14876] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.600075][T14876] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.600214][T14876] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.600356][T14876] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.600512][T14876] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.600657][T14876] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.600802][T14876] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.601043][T14876] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.601180][T14876] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.601363][T14876] ? move_addr_to_kernel (net/socket.c:2511) [ 940.601518][T14876] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.601653][T14876] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.601797][T14876] ___sys_sendmsg (net/socket.c:2641) [ 940.601976][T14876] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.602116][T14876] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.602257][T14876] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.602403][T14876] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.602539][T14876] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.602694][T14876] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.602835][T14876] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.602984][T14876] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.603132][T14876] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.603278][T14876] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.603428][T14876] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.603630][T14876] RIP: 0033:0x7fcb6d86bc5e [ 940.603812][T14876] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.604325][T14876] RSP: 002b:00007ffe641063d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.604549][T14876] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcb6d86bc5e [ 940.604762][T14876] RDX: 0000000000000000 RSI: 00007ffe64106490 RDI: 0000000000000005 [ 940.604983][T14876] RBP: 00007ffe641063e0 R08: 0000000000000000 R09: 0000000000000000 [ 940.605201][T14876] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.605456][T14876] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 940.682786][T14880] ------------[ cut here ]------------ | [ 940.683511][T14880] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14880 | [ 940.683770][T14880] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.684696][T14880] Tainted: [W]=WARN [ 940.684809][T14880] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.685092][T14880] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.685239][T14880] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.685734][T14880] RSP: 0018:ffa0000003ae75d0 EFLAGS: 00010286 [ 940.686015][T14880] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229fd7 [ 940.686234][T14880] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914feb8 [ 940.686450][T14880] RBP: 1ff400000075cebb R08: 1fe2200003229fd8 R09: fffa3bfffffb0b24 [ 940.686657][T14880] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914fc74 [ 940.686861][T14880] R13: ff1100001914fc40 R14: ffffffff931c7940 R15: ff1100001914fe00 [ 940.687182][T14880] FS: 00007f2c846a4440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 940.687438][T14880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.687616][T14880] CR2: 000000000044f720 CR3: 000000001d1ba005 CR4: 0000000000771ef0 [ 940.687820][T14880] PKRU: 55555554 [ 940.688005][T14880] Call Trace: [ 940.688107][T14880] [ 940.688178][T14880] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.688321][T14880] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.688472][T14880] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.688621][T14880] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.688762][T14880] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.688983][T14880] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.689122][T14880] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.689265][T14880] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.689410][T14880] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.689548][T14880] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.689701][T14880] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.689835][T14880] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.690052][T14880] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.690196][T14880] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.690346][T14880] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.690497][T14880] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.690635][T14880] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.690772][T14880] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.690987][T14880] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.691126][T14880] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.691266][T14880] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.691408][T14880] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.691545][T14880] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.691714][T14880] ? move_addr_to_kernel (net/socket.c:2511) [ 940.691851][T14880] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.692059][T14880] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.692198][T14880] ___sys_sendmsg (net/socket.c:2641) [ 940.692333][T14880] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.692478][T14880] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.692617][T14880] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.692754][T14880] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.692967][T14880] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.693105][T14880] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.693241][T14880] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.693403][T14880] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.693542][T14880] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.693689][T14880] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.693827][T14880] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.694046][T14880] RIP: 0033:0x7f2c847fec5e [ 940.694192][T14880] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.694699][T14880] RSP: 002b:00007ffd68b1d3c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.694918][T14880] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2c847fec5e [ 940.695127][T14880] RDX: 0000000000000000 RSI: 00007ffd68b1d480 RDI: 0000000000000005 [ 940.695337][T14880] RBP: 00007ffd68b1d3d0 R08: 0000000000000000 R09: 0000000000000000 [ 940.695547][T14880] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.695754][T14880] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 940.765559][T14886] ------------[ cut here ]------------ | [ 940.765727][T14886] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14886 | [ 940.765980][T14886] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.766802][T14886] Tainted: [W]=WARN [ 940.766916][T14886] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.767089][T14886] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.767242][T14886] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.767744][T14886] RSP: 0018:ffa0000003b275d0 EFLAGS: 00010286 [ 940.768390][T14886] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229f67 [ 940.768606][T14886] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914fb38 [ 940.768811][T14886] RBP: 1ff4000000764ebb R08: 1fe2200003229f68 R09: fffa3bfffffb0b24 [ 940.769019][T14886] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f3b4 [ 940.769225][T14886] R13: ff1100001914f380 R14: ffffffff931c7940 R15: ff1100001914fa80 [ 940.769440][T14886] FS: 00007fd0a4407440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 940.769687][T14886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.769863][T14886] CR2: 000000000044f720 CR3: 000000000d7c0004 CR4: 0000000000771ef0 [ 940.770071][T14886] PKRU: 55555554 [ 940.770175][T14886] Call Trace: [ 940.770277][T14886] [ 940.770352][T14886] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.770501][T14886] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.770654][T14886] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.770794][T14886] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.770938][T14886] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.771082][T14886] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.771221][T14886] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.771359][T14886] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.771509][T14886] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.771643][T14886] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.771784][T14886] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.771932][T14886] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.772068][T14886] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.772202][T14886] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.772338][T14886] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.772479][T14886] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.772631][T14886] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.772765][T14886] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.772908][T14886] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.773043][T14886] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.773182][T14886] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.773322][T14886] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.773461][T14886] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.773632][T14886] ? move_addr_to_kernel (net/socket.c:2511) [ 940.773770][T14886] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.773920][T14886] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.774062][T14886] ___sys_sendmsg (net/socket.c:2641) [ 940.774203][T14886] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.774351][T14886] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.774502][T14886] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.774650][T14886] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.774787][T14886] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.774936][T14886] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.775071][T14886] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.775205][T14886] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.775348][T14886] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.775499][T14886] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.775635][T14886] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.775820][T14886] RIP: 0033:0x7fd0a4561c5e [ 940.775974][T14886] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.776487][T14886] RSP: 002b:00007fff85c0e9a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.776700][T14886] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd0a4561c5e [ 940.776906][T14886] RDX: 0000000000000000 RSI: 00007fff85c0ea60 RDI: 0000000000000005 [ 940.777116][T14886] RBP: 00007fff85c0e9b0 R08: 0000000000000000 R09: 0000000000000000 [ 940.777333][T14886] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.777550][T14886] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 940.843765][T14890] ------------[ cut here ]------------ | [ 940.843948][T14890] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14890 | [ 940.844329][T14890] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.845201][T14890] Tainted: [W]=WARN [ 940.845311][T14890] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.845530][T14890] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.845685][T14890] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.846217][T14890] RSP: 0018:ffa0000003b375d0 EFLAGS: 00010286 [ 940.846426][T14890] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c2287 [ 940.846633][T14890] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611438 [ 940.846837][T14890] RBP: 1ff4000000766ebb R08: 1fe22000034c2288 R09: fffa3bfffffb0b24 [ 940.847069][T14890] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6103f4 [ 940.847306][T14890] R13: ff1100001a6103c0 R14: ffffffff931c7940 R15: ff1100001a611380 [ 940.847537][T14890] FS: 00007fc57c710440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 940.847792][T14890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.847978][T14890] CR2: 000000000044f720 CR3: 0000000019268005 CR4: 0000000000771ef0 [ 940.848184][T14890] PKRU: 55555554 [ 940.848286][T14890] Call Trace: [ 940.848399][T14890] [ 940.848470][T14890] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.848606][T14890] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.848948][T14890] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.849084][T14890] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.849230][T14890] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.849371][T14890] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.849522][T14890] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.849685][T14890] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.849832][T14890] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.849981][T14890] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.850128][T14890] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.850273][T14890] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.850425][T14890] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.850562][T14890] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.850727][T14890] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.850944][T14890] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.851084][T14890] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.851221][T14890] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.851399][T14890] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.851550][T14890] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.851734][T14890] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.851883][T14890] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.852044][T14890] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.852225][T14890] ? move_addr_to_kernel (net/socket.c:2511) [ 940.852392][T14890] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.852543][T14890] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.852690][T14890] ___sys_sendmsg (net/socket.c:2641) [ 940.852830][T14890] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.852989][T14890] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.853134][T14890] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.853280][T14890] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.853430][T14890] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.853584][T14890] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.853728][T14890] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.853867][T14890] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.854012][T14890] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.854157][T14890] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.854303][T14890] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.854486][T14890] RIP: 0033:0x7fc57c86ac5e [ 940.854643][T14890] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.855197][T14890] RSP: 002b:00007ffcf1f170c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.855415][T14890] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc57c86ac5e [ 940.855627][T14890] RDX: 0000000000000000 RSI: 00007ffcf1f17180 RDI: 0000000000000005 [ 940.855838][T14890] RBP: 00007ffcf1f170d0 R08: 0000000000000000 R09: 0000000000000000 [ 940.856150][T14890] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.856369][T14890] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 940.941779][T14896] ------------[ cut here ]------------ | [ 940.941985][T14896] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14896 | [ 940.942242][T14896] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 940.943110][T14896] Tainted: [W]=WARN [ 940.943224][T14896] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 940.943412][T14896] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 940.943570][T14896] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 940.944104][T14896] RSP: 0018:ffa0000003b875d0 EFLAGS: 00010286 [ 940.944294][T14896] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c20ff [ 940.944513][T14896] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6107f8 [ 940.944737][T14896] RBP: 1ff4000000770ebb R08: 1fe22000034c2100 R09: fffa3bfffffb0b24 [ 940.944960][T14896] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611574 [ 940.945179][T14896] R13: ff1100001a611540 R14: ffffffff931c7940 R15: ff1100001a610740 [ 940.945399][T14896] FS: 00007ff431d93440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 940.945656][T14896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.945846][T14896] CR2: 000000000044f720 CR3: 000000001cde7002 CR4: 0000000000771ef0 [ 940.946085][T14896] PKRU: 55555554 [ 940.946202][T14896] Call Trace: [ 940.946321][T14896] [ 940.946409][T14896] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 940.946562][T14896] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 940.946742][T14896] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 940.946903][T14896] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.947039][T14896] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.947179][T14896] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 940.947314][T14896] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 940.947459][T14896] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 940.947604][T14896] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 940.947761][T14896] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 940.948414][T14896] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 940.948588][T14896] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 940.948736][T14896] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 940.948886][T14896] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 940.949037][T14896] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 940.949188][T14896] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 940.949342][T14896] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.949504][T14896] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 940.949661][T14896] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 940.949819][T14896] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 940.949981][T14896] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 940.950127][T14896] ? copy_msghdr_from_user (net/socket.c:2525) [ 940.950274][T14896] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 940.950477][T14896] ? move_addr_to_kernel (net/socket.c:2511) [ 940.950635][T14896] ? filemap_map_folio_range (mm/filemap.c:3873) [ 940.950789][T14896] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 940.950947][T14896] ___sys_sendmsg (net/socket.c:2641) [ 940.951108][T14896] ? copy_msghdr_from_user (net/socket.c:2628) [ 940.951273][T14896] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 940.951426][T14896] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 940.951584][T14896] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 940.951738][T14896] ? __sys_sendmsg_sock (net/socket.c:2656) [ 940.951900][T14896] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 940.952048][T14896] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.952201][T14896] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 940.952350][T14896] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 940.952508][T14896] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 940.952664][T14896] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 940.952850][T14896] RIP: 0033:0x7ff431eedc5e [ 940.953020][T14896] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 940.953575][T14896] RSP: 002b:00007ffefce174c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 940.953798][T14896] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff431eedc5e [ 940.954013][T14896] RDX: 0000000000000000 RSI: 00007ffefce17580 RDI: 0000000000000005 [ 940.954227][T14896] RBP: 00007ffefce174d0 R08: 0000000000000000 R09: 0000000000000000 [ 940.954442][T14896] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 940.954659][T14896] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 941.035974][T14900] ------------[ cut here ]------------ | [ 941.036197][T14900] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14900 | [ 941.036523][T14900] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.037480][T14900] Tainted: [W]=WARN [ 941.037635][T14900] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.037854][T14900] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.038067][T14900] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.038631][T14900] RSP: 0018:ffa0000003a575d0 EFLAGS: 00010286 [ 941.038869][T14900] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c21df [ 941.039148][T14900] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610ef8 [ 941.039422][T14900] RBP: 1ff400000074aebb R08: 1fe22000034c21e0 R09: fffa3bfffffb0b24 [ 941.039689][T14900] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610934 [ 941.039966][T14900] R13: ff1100001a610900 R14: ffffffff931c7940 R15: ff1100001a610e40 [ 941.040219][T14900] FS: 00007fcfae2ab440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 941.040518][T14900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.040742][T14900] CR2: 000000000044f720 CR3: 000000001b0a9003 CR4: 0000000000771ef0 [ 941.041007][T14900] PKRU: 55555554 [ 941.041160][T14900] Call Trace: [ 941.041311][T14900] [ 941.041440][T14900] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.041628][T14900] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.041824][T14900] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.042027][T14900] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.042211][T14900] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.042416][T14900] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.042614][T14900] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.042803][T14900] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.043004][T14900] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.043190][T14900] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.043388][T14900] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.043573][T14900] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.043764][T14900] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.043962][T14900] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.044144][T14900] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.044331][T14900] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.044524][T14900] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.044728][T14900] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.044939][T14900] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.045139][T14900] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.045340][T14900] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.045528][T14900] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.045711][T14900] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.045938][T14900] ? move_addr_to_kernel (net/socket.c:2511) [ 941.046124][T14900] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.046325][T14900] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.046522][T14900] ___sys_sendmsg (net/socket.c:2641) [ 941.046710][T14900] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.046921][T14900] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.047112][T14900] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.047310][T14900] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.047527][T14900] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.047721][T14900] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.047925][T14900] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.048124][T14900] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.048326][T14900] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.048531][T14900] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.048721][T14900] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.048952][T14900] RIP: 0033:0x7fcfae405c5e [ 941.049152][T14900] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.049705][T14900] RSP: 002b:00007ffde44f0510 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.049980][T14900] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcfae405c5e [ 941.050238][T14900] RDX: 0000000000000000 RSI: 00007ffde44f05d0 RDI: 0000000000000005 [ 941.050507][T14900] RBP: 00007ffde44f0520 R08: 0000000000000000 R09: 0000000000000000 [ 941.050769][T14900] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.051050][T14900] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 941.131993][T14906] ------------[ cut here ]------------ | [ 941.132156][T14906] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14906 | [ 941.132411][T14906] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.133209][T14906] Tainted: [W]=WARN [ 941.133328][T14906] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.133517][T14906] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.133661][T14906] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.134167][T14906] RSP: 0018:ffa0000003a475d0 EFLAGS: 00010286 [ 941.134378][T14906] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea041f [ 941.134595][T14906] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5020f8 [ 941.134801][T14906] RBP: 1ff4000000748ebb R08: 1fe2200001ea0420 R09: fffa3bfffffb0b24 [ 941.135028][T14906] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5031f4 [ 941.135235][T14906] R13: ff1100000f5031c0 R14: ffffffff931c7940 R15: ff1100000f502040 [ 941.135456][T14906] FS: 00007f762ebd7440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 941.135707][T14906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.135891][T14906] CR2: 000000000044f720 CR3: 000000001a147006 CR4: 0000000000771ef0 [ 941.136131][T14906] PKRU: 55555554 [ 941.136239][T14906] Call Trace: [ 941.136348][T14906] [ 941.136426][T14906] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.136567][T14906] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.136720][T14906] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.136864][T14906] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.137014][T14906] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.137162][T14906] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.137303][T14906] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.137452][T14906] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.137590][T14906] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.137730][T14906] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.137873][T14906] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.138015][T14906] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.138154][T14906] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.138301][T14906] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.138444][T14906] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.138593][T14906] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.138737][T14906] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.138884][T14906] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.139031][T14906] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.139171][T14906] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.139312][T14906] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.139450][T14906] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.139584][T14906] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.139750][T14906] ? move_addr_to_kernel (net/socket.c:2511) [ 941.139885][T14906] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.140028][T14906] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.140166][T14906] ___sys_sendmsg (net/socket.c:2641) [ 941.140338][T14906] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.140496][T14906] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.140641][T14906] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.140792][T14906] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.140943][T14906] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.141083][T14906] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.141231][T14906] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.141385][T14906] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.141541][T14906] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.141686][T14906] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.141822][T14906] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.142001][T14906] RIP: 0033:0x7f762ed31c5e [ 941.142149][T14906] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.142688][T14906] RSP: 002b:00007ffe045eac60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.142901][T14906] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f762ed31c5e [ 941.143110][T14906] RDX: 0000000000000000 RSI: 00007ffe045ead20 RDI: 0000000000000005 [ 941.143321][T14906] RBP: 00007ffe045eac70 R08: 0000000000000000 R09: 0000000000000000 [ 941.143540][T14906] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.143750][T14906] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 941.213613][T14910] ------------[ cut here ]------------ | [ 941.213794][T14910] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14910 | [ 941.214040][T14910] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.214936][T14910] Tainted: [W]=WARN [ 941.215042][T14910] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.215211][T14910] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.215357][T14910] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.215847][T14910] RSP: 0018:ffa0000003be75d0 EFLAGS: 00010286 [ 941.216031][T14910] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea04c7 [ 941.216238][T14910] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502638 [ 941.216468][T14910] RBP: 1ff400000077cebb R08: 1fe2200001ea04c8 R09: fffa3bfffffb0b24 [ 941.216708][T14910] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502e74 [ 941.216952][T14910] R13: ff1100000f502e40 R14: ffffffff931c7940 R15: ff1100000f502580 [ 941.217155][T14910] FS: 00007f8c20966440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 941.217405][T14910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.217577][T14910] CR2: 000000000044f720 CR3: 000000001a147005 CR4: 0000000000771ef0 [ 941.217802][T14910] PKRU: 55555554 [ 941.217921][T14910] Call Trace: [ 941.218026][T14910] [ 941.218102][T14910] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.218250][T14910] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.218409][T14910] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.218571][T14910] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.218705][T14910] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.218842][T14910] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.218984][T14910] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.219131][T14910] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.219270][T14910] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.219420][T14910] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.219565][T14910] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.219706][T14910] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.219847][T14910] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.220527][T14910] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.220671][T14910] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.220814][T14910] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.221043][T14910] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.221225][T14910] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.221368][T14910] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.221511][T14910] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.221655][T14910] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.221796][T14910] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.221964][T14910] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.222135][T14910] ? move_addr_to_kernel (net/socket.c:2511) [ 941.222273][T14910] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.222419][T14910] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.222561][T14910] ___sys_sendmsg (net/socket.c:2641) [ 941.222697][T14910] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.222850][T14910] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.222992][T14910] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.223132][T14910] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.223269][T14910] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.223411][T14910] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.223546][T14910] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.223680][T14910] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.223815][T14910] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.223955][T14910] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.224089][T14910] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.224254][T14910] RIP: 0033:0x7f8c20ac0c5e [ 941.224432][T14910] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.224945][T14910] RSP: 002b:00007ffe7e03f360 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.225162][T14910] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8c20ac0c5e [ 941.225383][T14910] RDX: 0000000000000000 RSI: 00007ffe7e03f420 RDI: 0000000000000005 [ 941.225597][T14910] RBP: 00007ffe7e03f370 R08: 0000000000000000 R09: 0000000000000000 [ 941.225809][T14910] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.226028][T14910] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 941.298186][T14916] ------------[ cut here ]------------ | [ 941.298386][T14916] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14916 | [ 941.298642][T14916] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.299487][T14916] Tainted: [W]=WARN [ 941.299606][T14916] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.299779][T14916] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.299946][T14916] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.300451][T14916] RSP: 0018:ffa0000003b075d0 EFLAGS: 00010286 [ 941.300631][T14916] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f181f [ 941.300842][T14916] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c0f8 [ 941.301056][T14916] RBP: 1ff4000000760ebb R08: 1fe22000036f1820 R09: fffa3bfffffb0b24 [ 941.301263][T14916] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502774 [ 941.301476][T14916] R13: ff1100000f502740 R14: ffffffff931c7940 R15: ff1100001b78c040 [ 941.301685][T14916] FS: 00007f71b5244440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 941.301938][T14916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.302114][T14916] CR2: 000000000044f720 CR3: 0000000018000001 CR4: 0000000000771ef0 [ 941.302323][T14916] PKRU: 55555554 [ 941.302480][T14916] Call Trace: [ 941.302584][T14916] [ 941.302656][T14916] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.302801][T14916] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.302953][T14916] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.303096][T14916] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.303236][T14916] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.303381][T14916] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.303519][T14916] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.303658][T14916] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.303796][T14916] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.303941][T14916] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.304082][T14916] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.304220][T14916] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.304360][T14916] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.304512][T14916] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.304648][T14916] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.304787][T14916] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.304932][T14916] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.305075][T14916] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.305223][T14916] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.305358][T14916] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.305530][T14916] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.305694][T14916] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.305832][T14916] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.306010][T14916] ? move_addr_to_kernel (net/socket.c:2511) [ 941.306153][T14916] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.306292][T14916] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.306433][T14916] ___sys_sendmsg (net/socket.c:2641) [ 941.306570][T14916] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.306709][T14916] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.306846][T14916] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.306988][T14916] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.307125][T14916] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.307271][T14916] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.307418][T14916] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.307552][T14916] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.307686][T14916] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.307818][T14916] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.307960][T14916] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.308127][T14916] RIP: 0033:0x7f71b539ec5e [ 941.308270][T14916] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.308757][T14916] RSP: 002b:00007ffd91ddbb20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.308967][T14916] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f71b539ec5e [ 941.309169][T14916] RDX: 0000000000000000 RSI: 00007ffd91ddbbe0 RDI: 0000000000000005 [ 941.309367][T14916] RBP: 00007ffd91ddbb30 R08: 0000000000000000 R09: 0000000000000000 [ 941.309576][T14916] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.309777][T14916] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 941.381985][T14920] ------------[ cut here ]------------ | [ 941.382169][T14920] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14920 | [ 941.382435][T14920] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.383215][T14920] Tainted: [W]=WARN [ 941.383321][T14920] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.383505][T14920] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.383673][T14920] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.384185][T14920] RSP: 0018:ffa0000003b075d0 EFLAGS: 00010286 [ 941.384372][T14920] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f18ff [ 941.384586][T14920] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c7f8 [ 941.384785][T14920] RBP: 1ff4000000760ebb R08: 1fe22000036f1900 R09: fffa3bfffffb0b24 [ 941.384992][T14920] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d1f4 [ 941.385193][T14920] R13: ff1100001b78d1c0 R14: ffffffff931c7940 R15: ff1100001b78c740 [ 941.385399][T14920] FS: 00007f8763fb5440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 941.385637][T14920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.385807][T14920] CR2: 000000000044f720 CR3: 0000000019be6004 CR4: 0000000000771ef0 [ 941.386039][T14920] PKRU: 55555554 [ 941.386151][T14920] Call Trace: [ 941.386279][T14920] [ 941.386354][T14920] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.386503][T14920] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.386650][T14920] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.386786][T14920] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.387000][T14920] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.387144][T14920] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.387284][T14920] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.387428][T14920] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.387561][T14920] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.387696][T14920] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.387832][T14920] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.388038][T14920] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.388182][T14920] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.388315][T14920] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.388458][T14920] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.388594][T14920] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.388728][T14920] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.388886][T14920] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.389098][T14920] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.389232][T14920] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.389367][T14920] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.389511][T14920] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.389651][T14920] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.389866][T14920] ? move_addr_to_kernel (net/socket.c:2511) [ 941.390063][T14920] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.390195][T14920] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.390331][T14920] ___sys_sendmsg (net/socket.c:2641) [ 941.390474][T14920] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.390620][T14920] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.390769][T14920] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.391004][T14920] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.391140][T14920] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.391278][T14920] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.391430][T14920] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.391574][T14920] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.392031][T14920] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.392167][T14920] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.392301][T14920] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.392485][T14920] RIP: 0033:0x7f876410fc5e [ 941.392630][T14920] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.393123][T14920] RSP: 002b:00007ffdfa6f58f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.393326][T14920] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f876410fc5e [ 941.393534][T14920] RDX: 0000000000000000 RSI: 00007ffdfa6f59b0 RDI: 0000000000000005 [ 941.393735][T14920] RBP: 00007ffdfa6f5900 R08: 0000000000000000 R09: 0000000000000000 [ 941.393940][T14920] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.394141][T14920] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 941.452447][T14926] ------------[ cut here ]------------ | [ 941.452620][T14926] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14926 | [ 941.452905][T14926] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.453891][T14926] Tainted: [W]=WARN [ 941.454005][T14926] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.454181][T14926] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.454361][T14926] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.454843][T14926] RSP: 0018:ffa0000003c475d0 EFLAGS: 00010286 [ 941.455400][T14926] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1a87 [ 941.455644][T14926] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d438 [ 941.455898][T14926] RBP: 1ff4000000788ebb R08: 1fe22000036f1a88 R09: fffa3bfffffb0b24 [ 941.456110][T14926] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78ce74 [ 941.456339][T14926] R13: ff1100001b78ce40 R14: ffffffff931c7940 R15: ff1100001b78d380 [ 941.456576][T14926] FS: 00007f3536810440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 941.456846][T14926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.457043][T14926] CR2: 000000000044f720 CR3: 000000001c57c002 CR4: 0000000000771ef0 [ 941.457247][T14926] PKRU: 55555554 [ 941.457349][T14926] Call Trace: [ 941.457459][T14926] [ 941.457544][T14926] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.457694][T14926] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.457835][T14926] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.457976][T14926] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.458110][T14926] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.458244][T14926] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.458374][T14926] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.458510][T14926] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.458640][T14926] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.458781][T14926] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.458926][T14926] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.459061][T14926] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.459196][T14926] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.459337][T14926] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.459478][T14926] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.459613][T14926] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.459752][T14926] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.459887][T14926] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.460035][T14926] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.460169][T14926] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.460302][T14926] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.460436][T14926] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.460570][T14926] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.460734][T14926] ? move_addr_to_kernel (net/socket.c:2511) [ 941.460868][T14926] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.461008][T14926] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.461142][T14926] ___sys_sendmsg (net/socket.c:2641) [ 941.461276][T14926] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.461422][T14926] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.461560][T14926] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.461707][T14926] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.461857][T14926] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.462005][T14926] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.462157][T14926] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.462325][T14926] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.462466][T14926] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.462604][T14926] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.462752][T14926] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.462938][T14926] RIP: 0033:0x7f353696ac5e [ 941.463083][T14926] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.463580][T14926] RSP: 002b:00007ffd75a9a340 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.463787][T14926] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f353696ac5e [ 941.464003][T14926] RDX: 0000000000000000 RSI: 00007ffd75a9a400 RDI: 0000000000000005 [ 941.464214][T14926] RBP: 00007ffd75a9a350 R08: 0000000000000000 R09: 0000000000000000 [ 941.464425][T14926] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.464634][T14926] R13: 0000000069cbe7f4 R14: 0000000000000004 R15: 000000000049d620 | [ 941.539336][T14930] ------------[ cut here ]------------ | [ 941.539564][T14930] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14930 | [ 941.539870][T14930] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.540768][T14930] Tainted: [W]=WARN [ 941.541120][T14930] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.541342][T14930] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.541547][T14930] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.542108][T14930] RSP: 0018:ffa0000003ba75d0 EFLAGS: 00010286 [ 941.542350][T14930] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725a4f [ 941.542627][T14930] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d278 [ 941.542911][T14930] RBP: 1ff4000000774ebb R08: 1fe2200003725a50 R09: fffa3bfffffb0b24 [ 941.543159][T14930] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92d3b4 [ 941.543416][T14930] R13: ff1100001b92d380 R14: ffffffff931c7940 R15: ff1100001b92d1c0 [ 941.543666][T14930] FS: 00007f0771135440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 941.543967][T14930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.544188][T14930] CR2: 000000000044f720 CR3: 000000001d3ef001 CR4: 0000000000771ef0 [ 941.544462][T14930] PKRU: 55555554 [ 941.544619][T14930] Call Trace: [ 941.544773][T14930] [ 941.544908][T14930] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.545101][T14930] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.545293][T14930] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.545499][T14930] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.545685][T14930] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.545874][T14930] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.546079][T14930] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.546276][T14930] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.546481][T14930] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.546676][T14930] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.546872][T14930] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.547079][T14930] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.547276][T14930] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.547487][T14930] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.547674][T14930] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.547869][T14930] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.548076][T14930] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.548270][T14930] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.548471][T14930] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.548657][T14930] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.548850][T14930] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.549058][T14930] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.549253][T14930] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.549491][T14930] ? move_addr_to_kernel (net/socket.c:2511) [ 941.549693][T14930] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.549890][T14930] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.550109][T14930] ___sys_sendmsg (net/socket.c:2641) [ 941.550308][T14930] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.550510][T14930] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.550709][T14930] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.550923][T14930] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.551120][T14930] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.551311][T14930] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.551509][T14930] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.551710][T14930] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.551921][T14930] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.552120][T14930] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.552307][T14930] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.552545][T14930] RIP: 0033:0x7f077128fc5e [ 941.552747][T14930] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.553295][T14930] RSP: 002b:00007ffd063cf900 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.553561][T14930] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f077128fc5e [ 941.553812][T14930] RDX: 0000000000000000 RSI: 00007ffd063cf9c0 RDI: 0000000000000005 [ 941.554074][T14930] RBP: 00007ffd063cf910 R08: 0000000000000000 R09: 0000000000000000 [ 941.554325][T14930] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.554578][T14930] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 941.629393][T14936] ------------[ cut here ]------------ | [ 941.629600][T14936] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14936 | [ 941.629885][T14936] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.630768][T14936] Tainted: [W]=WARN [ 941.631368][T14936] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.631660][T14936] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.631863][T14936] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.632414][T14936] RSP: 0018:ffa0000003c775d0 EFLAGS: 00010286 [ 941.632637][T14936] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725af7 [ 941.632887][T14936] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d7b8 [ 941.633149][T14936] RBP: 1ff400000078eebb R08: 1fe2200003725af8 R09: fffa3bfffffb0b24 [ 941.633435][T14936] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92d8f4 [ 941.633737][T14936] R13: ff1100001b92d8c0 R14: ffffffff931c7940 R15: ff1100001b92d700 [ 941.634020][T14936] FS: 00007f32e9976440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 941.634427][T14936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.634696][T14936] CR2: 000000000044f720 CR3: 000000001d076005 CR4: 0000000000771ef0 [ 941.635017][T14936] PKRU: 55555554 [ 941.635209][T14936] Call Trace: [ 941.635392][T14936] [ 941.635533][T14936] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.635754][T14936] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.635969][T14936] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.636156][T14936] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.636341][T14936] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.636534][T14936] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.636717][T14936] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.636921][T14936] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.637118][T14936] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.637303][T14936] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.637498][T14936] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.637685][T14936] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.637872][T14936] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.638078][T14936] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.638264][T14936] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.638459][T14936] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.638649][T14936] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.638836][T14936] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.639035][T14936] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.639221][T14936] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.639413][T14936] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.639597][T14936] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.639781][T14936] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.640031][T14936] ? move_addr_to_kernel (net/socket.c:2511) [ 941.640218][T14936] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.640406][T14936] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.640594][T14936] ___sys_sendmsg (net/socket.c:2641) [ 941.640778][T14936] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.640980][T14936] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.641166][T14936] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.641358][T14936] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.641552][T14936] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.641739][T14936] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.641938][T14936] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.642123][T14936] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.642309][T14936] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.642502][T14936] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.642696][T14936] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.642927][T14936] RIP: 0033:0x7f32e9ad0c5e [ 941.643126][T14936] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.643669][T14936] RSP: 002b:00007ffd41abc200 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.643944][T14936] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f32e9ad0c5e [ 941.644202][T14936] RDX: 0000000000000000 RSI: 00007ffd41abc2c0 RDI: 0000000000000005 [ 941.644470][T14936] RBP: 00007ffd41abc210 R08: 0000000000000000 R09: 0000000000000000 [ 941.644722][T14936] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.644989][T14936] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 941.719494][T14940] ------------[ cut here ]------------ | [ 941.719690][T14940] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14940 | [ 941.720256][T14940] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.721102][T14940] Tainted: [W]=WARN [ 941.721216][T14940] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.721389][T14940] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.721553][T14940] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.722056][T14940] RSP: 0018:ffa0000003a475d0 EFLAGS: 00010286 [ 941.722231][T14940] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387508f [ 941.722439][T14940] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8478 [ 941.722654][T14940] RBP: 1ff4000000748ebb R08: 1fe2200003875090 R09: fffa3bfffffb0b24 [ 941.722868][T14940] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8234 [ 941.723080][T14940] R13: ff1100001c3a8200 R14: ffffffff931c7940 R15: ff1100001c3a83c0 [ 941.723296][T14940] FS: 00007fee10360440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 941.723551][T14940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.723736][T14940] CR2: 000000000044f720 CR3: 000000001009b006 CR4: 0000000000771ef0 [ 941.723955][T14940] PKRU: 55555554 [ 941.724059][T14940] Call Trace: [ 941.724162][T14940] [ 941.724234][T14940] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.724380][T14940] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.724530][T14940] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.724666][T14940] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.724804][T14940] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.724942][T14940] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.725077][T14940] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.725217][T14940] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.725348][T14940] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.725494][T14940] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.725644][T14940] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.725778][T14940] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.725924][T14940] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.726089][T14940] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.726244][T14940] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.726412][T14940] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.726559][T14940] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.726716][T14940] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.726883][T14940] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.727044][T14940] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.727181][T14940] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.727323][T14940] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.727504][T14940] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.727672][T14940] ? move_addr_to_kernel (net/socket.c:2511) [ 941.727803][T14940] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.727944][T14940] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.728093][T14940] ___sys_sendmsg (net/socket.c:2641) [ 941.728234][T14940] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.728370][T14940] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.728524][T14940] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.728664][T14940] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.728800][T14940] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.728943][T14940] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.729084][T14940] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.729221][T14940] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.729362][T14940] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.729500][T14940] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.729639][T14940] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.729823][T14940] RIP: 0033:0x7fee104bac5e [ 941.729977][T14940] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.730489][T14940] RSP: 002b:00007fff51d8b6f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.730715][T14940] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fee104bac5e [ 941.730942][T14940] RDX: 0000000000000000 RSI: 00007fff51d8b7b0 RDI: 0000000000000005 [ 941.731166][T14940] RBP: 00007fff51d8b700 R08: 0000000000000000 R09: 0000000000000000 [ 941.731370][T14940] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.731579][T14940] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 941.808197][T14946] ------------[ cut here ]------------ | [ 941.808430][T14946] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14946 | [ 941.808733][T14946] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.809645][T14946] Tainted: [W]=WARN [ 941.809810][T14946] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.810083][T14946] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.810281][T14946] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.810928][T14946] RSP: 0018:ffa0000003c375d0 EFLAGS: 00010286 [ 941.811183][T14946] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000387532f [ 941.811444][T14946] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9978 [ 941.811725][T14946] RBP: 1ff4000000786ebb R08: 1fe2200003875330 R09: fffa3bfffffb0b24 [ 941.811995][T14946] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8774 [ 941.812251][T14946] R13: ff1100001c3a8740 R14: ffffffff931c7940 R15: ff1100001c3a98c0 [ 941.812517][T14946] FS: 00007fd259fdc440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 941.812806][T14946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.813049][T14946] CR2: 000000000044f720 CR3: 0000000019d08002 CR4: 0000000000771ef0 [ 941.813309][T14946] PKRU: 55555554 [ 941.813469][T14946] Call Trace: [ 941.813624][T14946] [ 941.813754][T14946] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.813949][T14946] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.814150][T14946] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.814336][T14946] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.814532][T14946] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.814721][T14946] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.814916][T14946] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.815102][T14946] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.815286][T14946] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.815477][T14946] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.815668][T14946] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.815848][T14946] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.816046][T14946] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.816232][T14946] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.816422][T14946] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.816609][T14946] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.816794][T14946] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.817000][T14946] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.817192][T14946] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.817390][T14946] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.817589][T14946] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.817774][T14946] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.817981][T14946] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.818217][T14946] ? move_addr_to_kernel (net/socket.c:2511) [ 941.818415][T14946] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.818600][T14946] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.818788][T14946] ___sys_sendmsg (net/socket.c:2641) [ 941.818983][T14946] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.819173][T14946] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.819361][T14946] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.819557][T14946] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.819744][T14946] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.819947][T14946] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.820131][T14946] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.820320][T14946] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.820515][T14946] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.820711][T14946] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.820912][T14946] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.821129][T14946] RIP: 0033:0x7fd25a136c5e [ 941.821327][T14946] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.821869][T14946] RSP: 002b:00007fff4460cf50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.822143][T14946] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd25a136c5e [ 941.822412][T14946] RDX: 0000000000000000 RSI: 00007fff4460d010 RDI: 0000000000000005 [ 941.822672][T14946] RBP: 00007fff4460cf60 R08: 0000000000000000 R09: 0000000000000000 [ 941.822938][T14946] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.823194][T14946] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 941.905559][T14950] ------------[ cut here ]------------ | [ 941.905824][T14950] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14950 | [ 941.906437][T14950] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.907342][T14950] Tainted: [W]=WARN [ 941.907498][T14950] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.907718][T14950] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.907934][T14950] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 941.908466][T14950] RSP: 0018:ffa0000003c375d0 EFLAGS: 00010286 [ 941.908690][T14950] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eaf7 [ 941.908952][T14950] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 941.909202][T14950] RBP: 1ff4000000786ebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b24 [ 941.909459][T14950] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974934 [ 941.909711][T14950] R13: ff1100000c974900 R14: ffffffff931c7940 R15: ff1100000c975700 [ 941.909979][T14950] FS: 00007fd8ff131440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 941.910282][T14950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 941.910512][T14950] CR2: 000000000044f720 CR3: 00000000171f9004 CR4: 0000000000771ef0 [ 941.910778][T14950] PKRU: 55555554 [ 941.910949][T14950] Call Trace: [ 941.911105][T14950] [ 941.911225][T14950] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 941.911417][T14950] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 941.911622][T14950] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 941.911817][T14950] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.912018][T14950] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.912207][T14950] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 941.912397][T14950] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 941.912583][T14950] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 941.912770][T14950] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 941.912970][T14950] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 941.913165][T14950] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 941.913352][T14950] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 941.913550][T14950] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 941.913737][T14950] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 941.913945][T14950] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 941.914134][T14950] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 941.914332][T14950] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.914539][T14950] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 941.914735][T14950] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 941.914945][T14950] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 941.915145][T14950] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 941.915339][T14950] ? copy_msghdr_from_user (net/socket.c:2525) [ 941.915535][T14950] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 941.915762][T14950] ? move_addr_to_kernel (net/socket.c:2511) [ 941.915973][T14950] ? filemap_map_folio_range (mm/filemap.c:3873) [ 941.916161][T14950] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 941.916354][T14950] ___sys_sendmsg (net/socket.c:2641) [ 941.916555][T14950] ? copy_msghdr_from_user (net/socket.c:2628) [ 941.916752][T14950] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 941.916964][T14950] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 941.917158][T14950] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 941.917352][T14950] ? __sys_sendmsg_sock (net/socket.c:2656) [ 941.917558][T14950] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 941.917766][T14950] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.917984][T14950] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 941.918178][T14950] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 941.918387][T14950] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 941.918591][T14950] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 941.918824][T14950] RIP: 0033:0x7fd8ff28bc5e [ 941.919045][T14950] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 941.919609][T14950] RSP: 002b:00007ffd0e241610 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 941.919882][T14950] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd8ff28bc5e [ 941.920154][T14950] RDX: 0000000000000000 RSI: 00007ffd0e2416d0 RDI: 0000000000000005 [ 941.920424][T14950] RBP: 00007ffd0e241620 R08: 0000000000000000 R09: 0000000000000000 [ 941.920683][T14950] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 941.920954][T14950] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 941.997705][T14956] ------------[ cut here ]------------ | [ 941.998198][T14956] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14956 | [ 941.998469][T14956] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 941.999354][T14956] Tainted: [W]=WARN [ 941.999467][T14956] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 941.999668][T14956] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 941.999823][T14956] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.000403][T14956] RSP: 0018:ffa0000003cc75d0 EFLAGS: 00010286 [ 942.000587][T14956] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eb9f [ 942.000792][T14956] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975cf8 [ 942.001010][T14956] RBP: 1ff4000000798ebb R08: 1fe220000192eba0 R09: fffa3bfffffb0b24 [ 942.001219][T14956] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975e34 [ 942.001445][T14956] R13: ff1100000c975e00 R14: ffffffff931c7940 R15: ff1100000c975c40 [ 942.001675][T14956] FS: 00007f2eb6258440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 942.001949][T14956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.002150][T14956] CR2: 000000000044f720 CR3: 0000000019ee0001 CR4: 0000000000771ef0 [ 942.002361][T14956] PKRU: 55555554 [ 942.002472][T14956] Call Trace: [ 942.002581][T14956] [ 942.002666][T14956] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.002821][T14956] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.003002][T14956] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.003171][T14956] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.003319][T14956] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.003487][T14956] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.003627][T14956] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.003771][T14956] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.003946][T14956] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.004098][T14956] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.004266][T14956] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.004436][T14956] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.004583][T14956] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.004752][T14956] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.004903][T14956] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.005048][T14956] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.005214][T14956] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.005357][T14956] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.005504][T14956] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.005645][T14956] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.005799][T14956] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.005949][T14956] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.006090][T14956] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.006264][T14956] ? move_addr_to_kernel (net/socket.c:2511) [ 942.006423][T14956] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.006578][T14956] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.006720][T14956] ___sys_sendmsg (net/socket.c:2641) [ 942.006861][T14956] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.007015][T14956] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.007158][T14956] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.007300][T14956] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.007450][T14956] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.007597][T14956] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.007736][T14956] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.007880][T14956] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.008034][T14956] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.008175][T14956] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.008321][T14956] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.008497][T14956] RIP: 0033:0x7f2eb63b2c5e [ 942.008647][T14956] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.009172][T14956] RSP: 002b:00007ffce3194850 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.009391][T14956] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2eb63b2c5e [ 942.009602][T14956] RDX: 0000000000000000 RSI: 00007ffce3194910 RDI: 0000000000000005 [ 942.009813][T14956] RBP: 00007ffce3194860 R08: 0000000000000000 R09: 0000000000000000 [ 942.010028][T14956] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.010245][T14956] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 942.086097][T14960] ------------[ cut here ]------------ | [ 942.086366][T14960] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/14960 | [ 942.086663][T14960] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.087491][T14960] Tainted: [W]=WARN [ 942.087600][T14960] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.087776][T14960] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.087933][T14960] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.088426][T14960] RSP: 0018:ffa0000003c275d0 EFLAGS: 00010286 [ 942.088605][T14960] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229d6f [ 942.088835][T14960] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914eb78 [ 942.089061][T14960] RBP: 1ff4000000784ebb R08: 1fe2200003229d70 R09: fffa3bfffffb0b24 [ 942.089273][T14960] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e234 [ 942.089509][T14960] R13: ff1100001914e200 R14: ffffffff931c7940 R15: ff1100001914eac0 [ 942.089736][T14960] FS: 00007f79bd5b1440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 942.089999][T14960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.090185][T14960] CR2: 000000000044f720 CR3: 000000001d136006 CR4: 0000000000771ef0 [ 942.090391][T14960] PKRU: 55555554 [ 942.090499][T14960] Call Trace: [ 942.090601][T14960] [ 942.090671][T14960] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.090809][T14960] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.090962][T14960] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.091106][T14960] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.091247][T14960] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.091394][T14960] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.091531][T14960] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.091667][T14960] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.091803][T14960] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.091947][T14960] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.092084][T14960] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.092217][T14960] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.092351][T14960] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.092500][T14960] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.092633][T14960] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.092768][T14960] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.092908][T14960] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.093049][T14960] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.093191][T14960] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.093326][T14960] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.093501][T14960] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.093641][T14960] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.093781][T14960] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.094011][T14960] ? move_addr_to_kernel (net/socket.c:2511) [ 942.094150][T14960] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.094290][T14960] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.094437][T14960] ___sys_sendmsg (net/socket.c:2641) [ 942.094578][T14960] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.094722][T14960] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.094867][T14960] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.095070][T14960] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.095231][T14960] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.095387][T14960] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.095533][T14960] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.095668][T14960] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.095805][T14960] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.095959][T14960] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.096097][T14960] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.096281][T14960] RIP: 0033:0x7f79bd70bc5e [ 942.096436][T14960] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.096945][T14960] RSP: 002b:00007ffe62579f10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.097160][T14960] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f79bd70bc5e [ 942.097369][T14960] RDX: 0000000000000000 RSI: 00007ffe62579fd0 RDI: 0000000000000005 [ 942.097585][T14960] RBP: 00007ffe62579f20 R08: 0000000000000000 R09: 0000000000000000 [ 942.097793][T14960] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.098011][T14960] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 942.187129][T14966] ------------[ cut here ]------------ | [ 942.187307][T14966] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14966 | [ 942.187575][T14966] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.188403][T14966] Tainted: [W]=WARN [ 942.188508][T14966] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.188691][T14966] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.188845][T14966] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.189361][T14966] RSP: 0018:ffa0000003c275d0 EFLAGS: 00010286 [ 942.189567][T14966] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229ef7 [ 942.189781][T14966] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f7b8 [ 942.190000][T14966] RBP: 1ff4000000784ebb R08: 1fe2200003229ef8 R09: fffa3bfffffb0b24 [ 942.190229][T14966] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f1f4 [ 942.190436][T14966] R13: ff1100001914f1c0 R14: ffffffff931c7940 R15: ff1100001914f700 [ 942.190652][T14966] FS: 00007f0e0fb32440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 942.190891][T14966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.191093][T14966] CR2: 000000000044f720 CR3: 000000001cfad005 CR4: 0000000000771ef0 [ 942.191298][T14966] PKRU: 55555554 [ 942.191409][T14966] Call Trace: [ 942.191512][T14966] [ 942.191583][T14966] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.191720][T14966] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.191883][T14966] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.192030][T14966] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.192168][T14966] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.192311][T14966] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.192459][T14966] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.192605][T14966] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.192740][T14966] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.192890][T14966] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.193034][T14966] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.193172][T14966] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.193313][T14966] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.193468][T14966] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.193606][T14966] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.193747][T14966] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.193886][T14966] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.194057][T14966] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.194194][T14966] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.194329][T14966] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.194483][T14966] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.194625][T14966] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.194764][T14966] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.195415][T14966] ? move_addr_to_kernel (net/socket.c:2511) [ 942.195561][T14966] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.195698][T14966] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.195836][T14966] ___sys_sendmsg (net/socket.c:2641) [ 942.195975][T14966] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.196130][T14966] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.196273][T14966] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.196418][T14966] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.196559][T14966] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.196701][T14966] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.196839][T14966] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.196987][T14966] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.197126][T14966] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.197265][T14966] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.197411][T14966] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.197587][T14966] RIP: 0033:0x7f0e0fc8cc5e [ 942.197751][T14966] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.198254][T14966] RSP: 002b:00007ffef5efb390 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.198527][T14966] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0e0fc8cc5e [ 942.198748][T14966] RDX: 0000000000000000 RSI: 00007ffef5efb450 RDI: 0000000000000005 [ 942.198964][T14966] RBP: 00007ffef5efb3a0 R08: 0000000000000000 R09: 0000000000000000 [ 942.199174][T14966] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.199394][T14966] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 942.267262][T14970] ------------[ cut here ]------------ | [ 942.267507][T14970] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14970 | [ 942.267870][T14970] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.269127][T14970] Tainted: [W]=WARN [ 942.269288][T14970] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.269584][T14970] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.269806][T14970] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.270564][T14970] RSP: 0018:ffa0000003ce75d0 EFLAGS: 00010286 [ 942.270828][T14970] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c20ff [ 942.271146][T14970] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6107f8 [ 942.271461][T14970] RBP: 1ff400000079cebb R08: 1fe22000034c2100 R09: fffa3bfffffb0b24 [ 942.271773][T14970] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611574 [ 942.272108][T14970] R13: ff1100001a611540 R14: ffffffff931c7940 R15: ff1100001a610740 [ 942.272438][T14970] FS: 00007f543647f440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 942.272850][T14970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.273968][T14970] CR2: 000000000044f720 CR3: 000000001a294001 CR4: 0000000000771ef0 [ 942.274315][T14970] PKRU: 55555554 [ 942.274507][T14970] Call Trace: [ 942.274703][T14970] [ 942.274824][T14970] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.275069][T14970] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.275295][T14970] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.275531][T14970] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.275773][T14970] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.276015][T14970] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.276227][T14970] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.276480][T14970] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.276718][T14970] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.276963][T14970] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.277181][T14970] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.277424][T14970] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.277670][T14970] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.277889][T14970] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.278104][T14970] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.278311][T14970] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.278531][T14970] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.278742][T14970] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.278960][T14970] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.279169][T14970] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.279386][T14970] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.279595][T14970] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.279801][T14970] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.280062][T14970] ? move_addr_to_kernel (net/socket.c:2511) [ 942.280271][T14970] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.280483][T14970] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.280694][T14970] ___sys_sendmsg (net/socket.c:2641) [ 942.280943][T14970] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.281181][T14970] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.281401][T14970] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.281615][T14970] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.281825][T14970] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.282054][T14970] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.282266][T14970] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.282476][T14970] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.282687][T14970] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.282891][T14970] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.283104][T14970] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.283356][T14970] RIP: 0033:0x7f54365d9c5e [ 942.283578][T14970] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.284346][T14970] RSP: 002b:00007ffea21d4b60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.284671][T14970] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f54365d9c5e [ 942.285004][T14970] RDX: 0000000000000000 RSI: 00007ffea21d4c20 RDI: 0000000000000005 [ 942.285321][T14970] RBP: 00007ffea21d4b70 R08: 0000000000000000 R09: 0000000000000000 [ 942.285643][T14970] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.285956][T14970] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 942.369050][T14976] ------------[ cut here ]------------ | [ 942.369219][T14976] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14976 | [ 942.369488][T14976] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.370382][T14976] Tainted: [W]=WARN [ 942.370489][T14976] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.370670][T14976] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.370818][T14976] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.371448][T14976] RSP: 0018:ffa0000003c675d0 EFLAGS: 00010286 [ 942.371623][T14976] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c23d7 [ 942.371826][T14976] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611eb8 [ 942.372037][T14976] RBP: 1ff400000078cebb R08: 1fe22000034c23d8 R09: fffa3bfffffb0b24 [ 942.372239][T14976] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6105b4 [ 942.372446][T14976] R13: ff1100001a610580 R14: ffffffff931c7940 R15: ff1100001a611e00 [ 942.372655][T14976] FS: 00007fd4bddfc440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 942.372898][T14976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.373076][T14976] CR2: 000000000044f720 CR3: 000000001c985005 CR4: 0000000000771ef0 [ 942.373277][T14976] PKRU: 55555554 [ 942.373383][T14976] Call Trace: [ 942.373485][T14976] [ 942.373557][T14976] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.373691][T14976] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.373837][T14976] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.373975][T14976] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.374108][T14976] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.374245][T14976] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.374381][T14976] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.374518][T14976] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.374676][T14976] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.374816][T14976] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.374968][T14976] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.375109][T14976] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.375250][T14976] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.375392][T14976] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.375535][T14976] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.375681][T14976] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.375827][T14976] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.375974][T14976] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.376115][T14976] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.376256][T14976] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.376404][T14976] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.376555][T14976] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.376692][T14976] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.376868][T14976] ? move_addr_to_kernel (net/socket.c:2511) [ 942.377019][T14976] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.377153][T14976] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.377289][T14976] ___sys_sendmsg (net/socket.c:2641) [ 942.377427][T14976] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.377648][T14976] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.377784][T14976] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.377930][T14976] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.378069][T14976] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.378286][T14976] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.378432][T14976] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.378572][T14976] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.378717][T14976] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.378937][T14976] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.379071][T14976] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.379275][T14976] RIP: 0033:0x7fd4bdf56c5e [ 942.379432][T14976] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.380032][T14976] RSP: 002b:00007ffc564427a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.380331][T14976] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd4bdf56c5e [ 942.380554][T14976] RDX: 0000000000000000 RSI: 00007ffc56442860 RDI: 0000000000000005 [ 942.380764][T14976] RBP: 00007ffc564427b0 R08: 0000000000000000 R09: 0000000000000000 [ 942.381063][T14976] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.381277][T14976] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 942.453136][T14980] ------------[ cut here ]------------ | [ 942.453361][T14980] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14980 | [ 942.453679][T14980] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.454623][T14980] Tainted: [W]=WARN [ 942.454795][T14980] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.455044][T14980] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.455262][T14980] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.455844][T14980] RSP: 0018:ffa0000003cb75d0 EFLAGS: 00010286 [ 942.456105][T14980] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea05df [ 942.456383][T14980] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502ef8 [ 942.456661][T14980] RBP: 1ff4000000796ebb R08: 1fe2200001ea05e0 R09: fffa3bfffffb0b24 [ 942.456950][T14980] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503734 [ 942.457224][T14980] R13: ff1100000f503700 R14: ffffffff931c7940 R15: ff1100000f502e40 [ 942.457553][T14980] FS: 00007f5f6f5d2440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 942.457886][T14980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.458155][T14980] CR2: 000000000044f720 CR3: 000000001c985003 CR4: 0000000000771ef0 [ 942.458443][T14980] PKRU: 55555554 [ 942.458616][T14980] Call Trace: [ 942.458789][T14980] [ 942.458943][T14980] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.459153][T14980] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.459369][T14980] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.459579][T14980] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.459783][T14980] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.460007][T14980] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.460211][T14980] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.460425][T14980] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.460632][T14980] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.460850][T14980] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.461162][T14980] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.461369][T14980] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.461612][T14980] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.461849][T14980] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.462176][T14980] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.462424][T14980] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.462655][T14980] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.462876][T14980] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.463228][T14980] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.463465][T14980] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.463680][T14980] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.463916][T14980] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.464144][T14980] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.464517][T14980] ? move_addr_to_kernel (net/socket.c:2511) [ 942.464723][T14980] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.464938][T14980] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.465238][T14980] ___sys_sendmsg (net/socket.c:2641) [ 942.465452][T14980] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.465660][T14980] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.465865][T14980] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.466168][T14980] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.466359][T14980] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.466564][T14980] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.466789][T14980] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.467105][T14980] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.467311][T14980] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.467533][T14980] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.467744][T14980] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.468003][T14980] RIP: 0033:0x7f5f6f72cc5e [ 942.468214][T14980] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.468875][T14980] RSP: 002b:00007fff96b9b5b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.469176][T14980] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5f6f72cc5e [ 942.469451][T14980] RDX: 0000000000000000 RSI: 00007fff96b9b670 RDI: 0000000000000005 [ 942.469809][T14980] RBP: 00007fff96b9b5c0 R08: 0000000000000000 R09: 0000000000000000 [ 942.470104][T14980] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.470468][T14980] R13: 0000000069cbe7f5 R14: 0000000000000004 R15: 000000000049d620 | [ 942.563801][T14986] ------------[ cut here ]------------ | [ 942.564242][T14986] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/14986 | [ 942.564558][T14986] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.565479][T14986] Tainted: [W]=WARN [ 942.565635][T14986] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.565860][T14986] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.566070][T14986] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.566617][T14986] RSP: 0018:ffa0000003d275d0 EFLAGS: 00010286 [ 942.566859][T14986] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0767 [ 942.567140][T14986] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503b38 [ 942.567395][T14986] RBP: 1ff40000007a4ebb R08: 1fe2200001ea0768 R09: fffa3bfffffb0b24 [ 942.567650][T14986] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5033b4 [ 942.567933][T14986] R13: ff1100000f503380 R14: ffffffff931c7940 R15: ff1100000f503a80 [ 942.568213][T14986] FS: 00007fc06ecf8440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 942.568516][T14986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.568760][T14986] CR2: 000000000044f720 CR3: 000000001c0e6005 CR4: 0000000000771ef0 [ 942.569045][T14986] PKRU: 55555554 [ 942.569202][T14986] Call Trace: [ 942.569365][T14986] [ 942.569496][T14986] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.569687][T14986] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.569912][T14986] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.570105][T14986] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.570299][T14986] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.570508][T14986] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.570710][T14986] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.570926][T14986] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.571121][T14986] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.571322][T14986] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.571525][T14986] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.571716][T14986] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.571927][T14986] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.572136][T14986] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.572334][T14986] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.572543][T14986] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.572748][T14986] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.572959][T14986] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.573158][T14986] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.573389][T14986] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.573606][T14986] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.573807][T14986] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.574013][T14986] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.574250][T14986] ? move_addr_to_kernel (net/socket.c:2511) [ 942.574506][T14986] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.574690][T14986] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.574907][T14986] ___sys_sendmsg (net/socket.c:2641) [ 942.575099][T14986] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.575297][T14986] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.575517][T14986] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.575718][T14986] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.575918][T14986] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.576131][T14986] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.576335][T14986] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.576531][T14986] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.576719][T14986] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.576932][T14986] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.577141][T14986] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.577372][T14986] RIP: 0033:0x7fc06ee52c5e [ 942.577580][T14986] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.578146][T14986] RSP: 002b:00007ffc2c375780 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.578428][T14986] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc06ee52c5e [ 942.578702][T14986] RDX: 0000000000000000 RSI: 00007ffc2c375840 RDI: 0000000000000005 [ 942.578976][T14986] RBP: 00007ffc2c375790 R08: 0000000000000000 R09: 0000000000000000 [ 942.579248][T14986] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.579514][T14986] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 942.652629][T14990] ------------[ cut here ]------------ | [ 942.652795][T14990] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/14990 | [ 942.653040][T14990] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.653804][T14990] Tainted: [W]=WARN [ 942.654166][T14990] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.654351][T14990] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.654498][T14990] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.655016][T14990] RSP: 0018:ffa0000003d075d0 EFLAGS: 00010286 [ 942.655198][T14990] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f188f [ 942.655410][T14990] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c478 [ 942.655621][T14990] RBP: 1ff40000007a0ebb R08: 1fe22000036f1890 R09: fffa3bfffffb0b24 [ 942.655832][T14990] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502cb4 [ 942.656053][T14990] R13: ff1100000f502c80 R14: ffffffff931c7940 R15: ff1100001b78c3c0 [ 942.656258][T14990] FS: 00007f2b2870b440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 942.656504][T14990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.656671][T14990] CR2: 000000000044f720 CR3: 00000000196af006 CR4: 0000000000771ef0 [ 942.656878][T14990] PKRU: 55555554 [ 942.656983][T14990] Call Trace: [ 942.657083][T14990] [ 942.657151][T14990] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.657290][T14990] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.657449][T14990] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.657596][T14990] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.657728][T14990] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.657863][T14990] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.658007][T14990] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.658141][T14990] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.658271][T14990] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.658409][T14990] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.658543][T14990] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.658678][T14990] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.658815][T14990] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.658958][T14990] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.659091][T14990] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.659227][T14990] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.659360][T14990] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.659505][T14990] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.659640][T14990] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.659773][T14990] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.659923][T14990] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.660070][T14990] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.660203][T14990] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.660368][T14990] ? move_addr_to_kernel (net/socket.c:2511) [ 942.660514][T14990] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.660648][T14990] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.660819][T14990] ___sys_sendmsg (net/socket.c:2641) [ 942.660971][T14990] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.661135][T14990] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.661304][T14990] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.661448][T14990] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.661592][T14990] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.661740][T14990] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.661883][T14990] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.662029][T14990] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.662165][T14990] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.662298][T14990] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.662438][T14990] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.662609][T14990] RIP: 0033:0x7f2b28865c5e [ 942.662756][T14990] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.663243][T14990] RSP: 002b:00007fff9c641010 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.663476][T14990] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2b28865c5e [ 942.663735][T14990] RDX: 0000000000000000 RSI: 00007fff9c6410d0 RDI: 0000000000000005 [ 942.663967][T14990] RBP: 00007fff9c641020 R08: 0000000000000000 R09: 0000000000000000 [ 942.664181][T14990] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.664409][T14990] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 942.737006][T14996] ------------[ cut here ]------------ | [ 942.737184][T14996] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/14996 | [ 942.737485][T14996] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.738715][T14996] Tainted: [W]=WARN [ 942.738822][T14996] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.739015][T14996] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.739160][T14996] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.739698][T14996] RSP: 0018:ffa0000003cb75d0 EFLAGS: 00010286 [ 942.739910][T14996] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f19df [ 942.740132][T14996] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cef8 [ 942.740330][T14996] RBP: 1ff4000000796ebb R08: 1fe22000036f19e0 R09: fffa3bfffffb0b24 [ 942.740533][T14996] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78de34 [ 942.740742][T14996] R13: ff1100001b78de00 R14: ffffffff931c7940 R15: ff1100001b78ce40 [ 942.740960][T14996] FS: 00007f3f445eb440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 942.741194][T14996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.741360][T14996] CR2: 000000000044f720 CR3: 000000001b3f5002 CR4: 0000000000771ef0 [ 942.741570][T14996] PKRU: 55555554 [ 942.741670][T14996] Call Trace: [ 942.741785][T14996] [ 942.741869][T14996] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.742009][T14996] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.742150][T14996] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.742284][T14996] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.742452][T14996] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.742603][T14996] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.742765][T14996] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.742923][T14996] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.743082][T14996] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.743219][T14996] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.743356][T14996] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.743492][T14996] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.743640][T14996] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.743781][T14996] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.743918][T14996] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.744051][T14996] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.744185][T14996] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.744319][T14996] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.744460][T14996] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.744593][T14996] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.744728][T14996] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.744862][T14996] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.745001][T14996] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.745165][T14996] ? move_addr_to_kernel (net/socket.c:2511) [ 942.745299][T14996] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 942.745436][T14996] ___sys_sendmsg (net/socket.c:2641) [ 942.745570][T14996] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 3) kernel/locking/spinlock.c:194 (discriminator 3)) [ 942.745747][T14996] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.745890][T14996] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 942.746027][T14996] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.746176][T14996] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.746309][T14996] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.746452][T14996] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.746585][T14996] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.746721][T14996] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.746857][T14996] ? irq_exit_rcu (kernel/softirq.c:741 (discriminator 37)) [ 942.747003][T14996] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.747167][T14996] RIP: 0033:0x7f3f44745c5e [ 942.747308][T14996] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.747807][T14996] RSP: 002b:00007fff6a29a280 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.748072][T14996] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f3f44745c5e [ 942.748283][T14996] RDX: 0000000000000000 RSI: 00007fff6a29a340 RDI: 0000000000000005 [ 942.748491][T14996] RBP: 00007fff6a29a290 R08: 0000000000000000 R09: 0000000000000000 [ 942.748690][T14996] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.748889][T14996] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 942.817535][T15000] ------------[ cut here ]------------ | [ 942.817695][T15000] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15000 | [ 942.818199][T15000] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.818989][T15000] Tainted: [W]=WARN [ 942.819100][T15000] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.819275][T15000] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.819466][T15000] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.819958][T15000] RSP: 0018:ffa0000003d175d0 EFLAGS: 00010286 [ 942.820135][T15000] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725b9f [ 942.820336][T15000] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92dcf8 [ 942.820547][T15000] RBP: 1ff40000007a2ebb R08: 1fe2200003725ba0 R09: fffa3bfffffb0b24 [ 942.820753][T15000] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78c074 [ 942.820969][T15000] R13: ff1100001b78c040 R14: ffffffff931c7940 R15: ff1100001b92dc40 [ 942.821171][T15000] FS: 00007f117916c440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 942.821411][T15000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.821580][T15000] CR2: 000000000044f720 CR3: 000000001b3f5004 CR4: 0000000000771ef0 [ 942.821782][T15000] PKRU: 55555554 [ 942.821886][T15000] Call Trace: [ 942.821991][T15000] [ 942.822066][T15000] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.822205][T15000] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.822344][T15000] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.822487][T15000] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.822617][T15000] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.822751][T15000] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.822891][T15000] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.823032][T15000] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.823169][T15000] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.823305][T15000] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.823447][T15000] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.823583][T15000] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.823716][T15000] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.823861][T15000] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.824004][T15000] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.824137][T15000] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.824268][T15000] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.824441][T15000] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.824627][T15000] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.824782][T15000] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.824932][T15000] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.825094][T15000] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.825227][T15000] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.825437][T15000] ? move_addr_to_kernel (net/socket.c:2511) [ 942.825575][T15000] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.825714][T15000] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.825850][T15000] ___sys_sendmsg (net/socket.c:2641) [ 942.825998][T15000] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.826140][T15000] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.826275][T15000] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.826414][T15000] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.826547][T15000] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.826689][T15000] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.826821][T15000] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.826964][T15000] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.827104][T15000] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.827254][T15000] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.827417][T15000] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.827591][T15000] RIP: 0033:0x7f11792c6c5e [ 942.827732][T15000] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.828216][T15000] RSP: 002b:00007ffebbe17120 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.828425][T15000] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f11792c6c5e [ 942.828625][T15000] RDX: 0000000000000000 RSI: 00007ffebbe171e0 RDI: 0000000000000005 [ 942.828828][T15000] RBP: 00007ffebbe17130 R08: 0000000000000000 R09: 0000000000000000 [ 942.829030][T15000] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.829226][T15000] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 942.922456][T15006] ------------[ cut here ]------------ | [ 942.922645][T15006] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15006 | [ 942.923194][T15006] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 942.924040][T15006] Tainted: [W]=WARN [ 942.924150][T15006] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 942.924327][T15006] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 942.924482][T15006] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 942.924988][T15006] RSP: 0018:ffa0000003cf75d0 EFLAGS: 00010286 [ 942.925179][T15006] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725b2f [ 942.925437][T15006] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d978 [ 942.925645][T15006] RBP: 1ff400000079eebb R08: 1fe2200003725b30 R09: fffa3bfffffb0b24 [ 942.925851][T15006] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92dab4 [ 942.926065][T15006] R13: ff1100001b92da80 R14: ffffffff931c7940 R15: ff1100001b92d8c0 [ 942.926281][T15006] FS: 00007ff4d26cd440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 942.926554][T15006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.926731][T15006] CR2: 000000000044f720 CR3: 00000000105aa002 CR4: 0000000000771ef0 [ 942.926951][T15006] PKRU: 55555554 [ 942.927063][T15006] Call Trace: [ 942.927168][T15006] [ 942.927242][T15006] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 942.927394][T15006] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 942.927545][T15006] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 942.927689][T15006] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.927837][T15006] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.927993][T15006] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 942.928136][T15006] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 942.928284][T15006] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 942.928431][T15006] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 942.928582][T15006] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 942.928728][T15006] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 942.928889][T15006] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 942.929037][T15006] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 942.929182][T15006] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 942.929326][T15006] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 942.929474][T15006] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 942.929619][T15006] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.929757][T15006] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 942.929903][T15006] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 942.930039][T15006] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 942.930180][T15006] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 942.930576][T15006] ? copy_msghdr_from_user (net/socket.c:2525) [ 942.930714][T15006] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 942.930884][T15006] ? move_addr_to_kernel (net/socket.c:2511) [ 942.931027][T15006] ? filemap_map_folio_range (mm/filemap.c:3873) [ 942.931162][T15006] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 942.931301][T15006] ___sys_sendmsg (net/socket.c:2641) [ 942.931459][T15006] ? copy_msghdr_from_user (net/socket.c:2628) [ 942.931600][T15006] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 942.931743][T15006] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 942.931887][T15006] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 942.932030][T15006] ? __sys_sendmsg_sock (net/socket.c:2656) [ 942.932197][T15006] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 942.932339][T15006] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.932488][T15006] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 942.932628][T15006] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 942.932764][T15006] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 942.932908][T15006] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 942.933078][T15006] RIP: 0033:0x7ff4d2827c5e [ 942.933222][T15006] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 942.933945][T15006] RSP: 002b:00007ffd6e9b45c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 942.934169][T15006] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff4d2827c5e [ 942.934386][T15006] RDX: 0000000000000000 RSI: 00007ffd6e9b4680 RDI: 0000000000000005 [ 942.934606][T15006] RBP: 00007ffd6e9b45d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.934806][T15006] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 942.935020][T15006] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 943.005838][T15010] ------------[ cut here ]------------ | [ 943.006035][T15010] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15010 | [ 943.006281][T15010] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.007128][T15010] Tainted: [W]=WARN [ 943.007231][T15010] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.007407][T15010] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.007553][T15010] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.008051][T15010] RSP: 0018:ffa0000003cb75d0 EFLAGS: 00010286 [ 943.008226][T15010] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000372588f [ 943.008436][T15010] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c478 [ 943.008643][T15010] RBP: 1ff4000000796ebb R08: 1fe2200003725890 R09: fffa3bfffffb0b24 [ 943.008852][T15010] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92c5b4 [ 943.009063][T15010] R13: ff1100001b92c580 R14: ffffffff931c7940 R15: ff1100001b92c3c0 [ 943.009292][T15010] FS: 00007f56f32ef440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 943.009551][T15010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.009742][T15010] CR2: 000000000044f720 CR3: 000000001c1e8002 CR4: 0000000000771ef0 [ 943.009965][T15010] PKRU: 55555554 [ 943.010083][T15010] Call Trace: [ 943.010184][T15010] [ 943.010253][T15010] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.010398][T15010] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.010544][T15010] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.010678][T15010] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.010810][T15010] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.010956][T15010] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.011094][T15010] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.011228][T15010] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.011370][T15010] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.011510][T15010] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.011654][T15010] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.011792][T15010] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.011938][T15010] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.012087][T15010] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.012231][T15010] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.012372][T15010] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.012518][T15010] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.012664][T15010] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.012820][T15010] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.012972][T15010] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.013114][T15010] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.013249][T15010] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.013387][T15010] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.013554][T15010] ? move_addr_to_kernel (net/socket.c:2511) [ 943.013691][T15010] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.013830][T15010] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.013975][T15010] ___sys_sendmsg (net/socket.c:2641) [ 943.014121][T15010] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.014267][T15010] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.014434][T15010] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.014580][T15010] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.014717][T15010] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.014864][T15010] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.015075][T15010] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.015219][T15010] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.015361][T15010] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.015512][T15010] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.015667][T15010] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.015841][T15010] RIP: 0033:0x7f56f3449c5e [ 943.016041][T15010] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.016544][T15010] RSP: 002b:00007fff49280580 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.016764][T15010] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f56f3449c5e [ 943.017028][T15010] RDX: 0000000000000000 RSI: 00007fff49280640 RDI: 0000000000000005 [ 943.017268][T15010] RBP: 00007fff49280590 R08: 0000000000000000 R09: 0000000000000000 [ 943.017511][T15010] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.017713][T15010] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 943.097407][T15016] ------------[ cut here ]------------ | [ 943.097641][T15016] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15016 | [ 943.097971][T15016] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.099270][T15016] Tainted: [W]=WARN [ 943.099451][T15016] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.099693][T15016] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.099916][T15016] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.100492][T15016] RSP: 0018:ffa0000003d475d0 EFLAGS: 00010286 [ 943.100737][T15016] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038750ff [ 943.101006][T15016] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a87f8 [ 943.101256][T15016] RBP: 1ff40000007a8ebb R08: 1fe2200003875100 R09: fffa3bfffffb0b24 [ 943.101516][T15016] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9034 [ 943.101771][T15016] R13: ff1100001c3a9000 R14: ffffffff931c7940 R15: ff1100001c3a8740 [ 943.102052][T15016] FS: 00007effb9ea7440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 943.102359][T15016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.102597][T15016] CR2: 000000000044f720 CR3: 0000000010534004 CR4: 0000000000771ef0 [ 943.102862][T15016] PKRU: 55555554 [ 943.103031][T15016] Call Trace: [ 943.103191][T15016] [ 943.103326][T15016] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.103523][T15016] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.103721][T15016] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.103922][T15016] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.104112][T15016] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.104302][T15016] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.104494][T15016] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.104683][T15016] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.104870][T15016] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.105082][T15016] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.105274][T15016] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.105470][T15016] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.105659][T15016] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.105867][T15016] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.106065][T15016] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.106281][T15016] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.106489][T15016] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.106690][T15016] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.106887][T15016] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.107089][T15016] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.107279][T15016] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.107473][T15016] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.107666][T15016] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.107882][T15016] ? move_addr_to_kernel (net/socket.c:2511) [ 943.108091][T15016] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.108291][T15016] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.108491][T15016] ___sys_sendmsg (net/socket.c:2641) [ 943.108677][T15016] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.108866][T15016] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.109087][T15016] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.109283][T15016] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.109490][T15016] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.109681][T15016] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.109870][T15016] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.110075][T15016] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.110278][T15016] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.110473][T15016] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.110660][T15016] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.110886][T15016] RIP: 0033:0x7effba001c5e [ 943.111095][T15016] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.111743][T15016] RSP: 002b:00007fffb9bef4b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.112051][T15016] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007effba001c5e [ 943.112328][T15016] RDX: 0000000000000000 RSI: 00007fffb9bef570 RDI: 0000000000000005 [ 943.112627][T15016] RBP: 00007fffb9bef4c0 R08: 0000000000000000 R09: 0000000000000000 [ 943.112884][T15016] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.113147][T15016] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 943.186325][T15020] ------------[ cut here ]------------ | [ 943.186518][T15020] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15020 | [ 943.186762][T15020] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.188094][T15020] Tainted: [W]=WARN [ 943.188200][T15020] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.188380][T15020] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.188523][T15020] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.189032][T15020] RSP: 0018:ffa0000003d475d0 EFLAGS: 00010286 [ 943.189208][T15020] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038753d7 [ 943.189418][T15020] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9eb8 [ 943.189619][T15020] RBP: 1ff40000007a8ebb R08: 1fe22000038753d8 R09: fffa3bfffffb0b24 [ 943.189847][T15020] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a85b4 [ 943.190057][T15020] R13: ff1100001c3a8580 R14: ffffffff931c7940 R15: ff1100001c3a9e00 [ 943.190264][T15020] FS: 00007f0b044a1440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 943.190507][T15020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.190679][T15020] CR2: 000000000044f720 CR3: 000000001c8ae001 CR4: 0000000000771ef0 [ 943.190920][T15020] PKRU: 55555554 [ 943.191022][T15020] Call Trace: [ 943.191146][T15020] [ 943.191218][T15020] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.191358][T15020] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.191515][T15020] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.191654][T15020] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.191795][T15020] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.191950][T15020] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.192086][T15020] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.192235][T15020] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.192380][T15020] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.192518][T15020] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.192663][T15020] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.192800][T15020] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.192942][T15020] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.193082][T15020] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.193236][T15020] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.193402][T15020] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.193540][T15020] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.193678][T15020] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.193821][T15020] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.193971][T15020] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.194109][T15020] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.194256][T15020] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.194404][T15020] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.194575][T15020] ? move_addr_to_kernel (net/socket.c:2511) [ 943.194719][T15020] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.194861][T15020] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.195004][T15020] ___sys_sendmsg (net/socket.c:2641) [ 943.195148][T15020] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.195295][T15020] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.195439][T15020] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.195575][T15020] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.195711][T15020] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.195857][T15020] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.196010][T15020] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.196148][T15020] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.196285][T15020] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.196423][T15020] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.196642][T15020] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.196809][T15020] RIP: 0033:0x7f0b045fbc5e [ 943.196957][T15020] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.197537][T15020] RSP: 002b:00007fff44b91750 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.197781][T15020] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0b045fbc5e [ 943.198070][T15020] RDX: 0000000000000000 RSI: 00007fff44b91810 RDI: 0000000000000005 [ 943.198270][T15020] RBP: 00007fff44b91760 R08: 0000000000000000 R09: 0000000000000000 [ 943.198566][T15020] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.198775][T15020] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 943.294596][T15026] ------------[ cut here ]------------ | [ 943.294784][T15026] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15026 | [ 943.295953][T15026] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.296792][T15026] Tainted: [W]=WARN [ 943.297018][T15026] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.297200][T15026] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.297349][T15026] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.297854][T15026] RSP: 0018:ffa0000003d675d0 EFLAGS: 00010286 [ 943.298123][T15026] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038751a7 [ 943.298335][T15026] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8d38 [ 943.298556][T15026] RBP: 1ff40000007acebb R08: 1fe22000038751a8 R09: fffa3bfffffb0b24 [ 943.298763][T15026] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9ab4 [ 943.299067][T15026] R13: ff1100001c3a9a80 R14: ffffffff931c7940 R15: ff1100001c3a8c80 [ 943.299281][T15026] FS: 00007fc4f9a43440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 943.299543][T15026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.299714][T15026] CR2: 000000000044f720 CR3: 0000000017293002 CR4: 0000000000771ef0 [ 943.300034][T15026] PKRU: 55555554 [ 943.300149][T15026] Call Trace: [ 943.300258][T15026] [ 943.300337][T15026] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.300505][T15026] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.300683][T15026] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.300834][T15026] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.301078][T15026] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.301231][T15026] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.301382][T15026] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.301531][T15026] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.301676][T15026] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.301822][T15026] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.302037][T15026] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.302182][T15026] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.302330][T15026] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.302483][T15026] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.302628][T15026] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.302779][T15026] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.302999][T15026] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.303148][T15026] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.303291][T15026] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.303445][T15026] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.303589][T15026] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.303743][T15026] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.303970][T15026] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.304145][T15026] ? move_addr_to_kernel (net/socket.c:2511) [ 943.304287][T15026] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.304439][T15026] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.304601][T15026] ___sys_sendmsg (net/socket.c:2641) [ 943.304745][T15026] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.304890][T15026] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.305041][T15026] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.305183][T15026] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.305327][T15026] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.305473][T15026] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.305616][T15026] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.305755][T15026] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.305900][T15026] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.306062][T15026] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.306208][T15026] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.306381][T15026] RIP: 0033:0x7fc4f9b9dc5e [ 943.306526][T15026] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.307188][T15026] RSP: 002b:00007fff69c44250 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.307407][T15026] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc4f9b9dc5e [ 943.307614][T15026] RDX: 0000000000000000 RSI: 00007fff69c44310 RDI: 0000000000000005 [ 943.307971][T15026] RBP: 00007fff69c44260 R08: 0000000000000000 R09: 0000000000000000 [ 943.308181][T15026] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.308395][T15026] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 943.390114][T15030] ------------[ cut here ]------------ | [ 943.390301][T15030] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15030 | [ 943.390560][T15030] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.391422][T15030] Tainted: [W]=WARN [ 943.391530][T15030] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.391709][T15030] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.391858][T15030] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.392379][T15030] RSP: 0018:ffa0000003dc75d0 EFLAGS: 00010286 [ 943.392562][T15030] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192ea4f [ 943.392773][T15030] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975278 [ 943.392984][T15030] RBP: 1ff40000007b8ebb R08: 1fe220000192ea50 R09: fffa3bfffffb0b24 [ 943.393186][T15030] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974234 [ 943.393435][T15030] R13: ff1100000c974200 R14: ffffffff931c7940 R15: ff1100000c9751c0 [ 943.393685][T15030] FS: 00007fedb53e0440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 943.393979][T15030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.394183][T15030] CR2: 000000000044f720 CR3: 000000001ab52001 CR4: 0000000000771ef0 [ 943.394448][T15030] PKRU: 55555554 [ 943.394551][T15030] Call Trace: [ 943.394676][T15030] [ 943.394751][T15030] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.394906][T15030] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.395074][T15030] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.395234][T15030] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.395410][T15030] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.395555][T15030] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.395689][T15030] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.395829][T15030] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.396031][T15030] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.396243][T15030] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.396408][T15030] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.396568][T15030] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.396711][T15030] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.396851][T15030] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.397050][T15030] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.397200][T15030] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.397340][T15030] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.397488][T15030] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.397657][T15030] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.397800][T15030] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.398002][T15030] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.398136][T15030] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.398272][T15030] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.398489][T15030] ? move_addr_to_kernel (net/socket.c:2511) [ 943.398624][T15030] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.398781][T15030] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.398980][T15030] ___sys_sendmsg (net/socket.c:2641) [ 943.399120][T15030] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.399271][T15030] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.399419][T15030] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.399562][T15030] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.399705][T15030] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.399849][T15030] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.400064][T15030] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.400206][T15030] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.400348][T15030] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.400497][T15030] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.400640][T15030] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.400821][T15030] RIP: 0033:0x7fedb553ac5e [ 943.401051][T15030] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.401567][T15030] RSP: 002b:00007fff7cd07dc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.401784][T15030] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fedb553ac5e [ 943.402080][T15030] RDX: 0000000000000000 RSI: 00007fff7cd07e80 RDI: 0000000000000005 [ 943.402297][T15030] RBP: 00007fff7cd07dd0 R08: 0000000000000000 R09: 0000000000000000 [ 943.402518][T15030] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.402733][T15030] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 943.488924][T15036] ------------[ cut here ]------------ | [ 943.489103][T15036] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15036 | [ 943.489381][T15036] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.490191][T15036] Tainted: [W]=WARN [ 943.490307][T15036] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.490495][T15036] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.490649][T15036] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.491218][T15036] RSP: 0018:ffa0000003de75d0 EFLAGS: 00010286 [ 943.491409][T15036] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192ea17 [ 943.491613][T15036] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9750b8 [ 943.491818][T15036] RBP: 1ff40000007bcebb R08: 1fe220000192ea18 R09: fffa3bfffffb0b24 [ 943.492026][T15036] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974e74 [ 943.492238][T15036] R13: ff1100000c974e40 R14: ffffffff931c7940 R15: ff1100000c975000 [ 943.492451][T15036] FS: 00007f12997a3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 943.492691][T15036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.492864][T15036] CR2: 000000000044f720 CR3: 000000001a295004 CR4: 0000000000771ef0 [ 943.493079][T15036] PKRU: 55555554 [ 943.493185][T15036] Call Trace: [ 943.493291][T15036] [ 943.493366][T15036] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.493508][T15036] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.493659][T15036] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.493795][T15036] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.493957][T15036] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.494103][T15036] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.494245][T15036] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.494386][T15036] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.494520][T15036] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.494657][T15036] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.494796][T15036] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.494938][T15036] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.495078][T15036] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.495219][T15036] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.495354][T15036] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.495499][T15036] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.495635][T15036] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.495771][T15036] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.495910][T15036] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.496048][T15036] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.496191][T15036] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.496328][T15036] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.496497][T15036] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.496673][T15036] ? move_addr_to_kernel (net/socket.c:2511) [ 943.496808][T15036] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.496946][T15036] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.497085][T15036] ___sys_sendmsg (net/socket.c:2641) [ 943.497220][T15036] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.497370][T15036] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.497511][T15036] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.497648][T15036] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.497783][T15036] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.497926][T15036] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.498062][T15036] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.498205][T15036] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.498349][T15036] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.498489][T15036] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.498623][T15036] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.498792][T15036] RIP: 0033:0x7f12998fdc5e [ 943.498950][T15036] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.499439][T15036] RSP: 002b:00007ffd3beb5fa0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.499658][T15036] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f12998fdc5e [ 943.499868][T15036] RDX: 0000000000000000 RSI: 00007ffd3beb6060 RDI: 0000000000000005 [ 943.500083][T15036] RBP: 00007ffd3beb5fb0 R08: 0000000000000000 R09: 0000000000000000 [ 943.500293][T15036] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.500501][T15036] R13: 0000000069cbe7f6 R14: 0000000000000004 R15: 000000000049d620 | [ 943.569197][T15040] ------------[ cut here ]------------ | [ 943.569370][T15040] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15040 | [ 943.569632][T15040] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.570434][T15040] Tainted: [W]=WARN [ 943.570539][T15040] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.570712][T15040] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.570860][T15040] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.571388][T15040] RSP: 0018:ffa0000003dc75d0 EFLAGS: 00010286 [ 943.571565][T15040] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229d37 [ 943.571770][T15040] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914e9b8 [ 943.571980][T15040] RBP: 1ff40000007b8ebb R08: 1fe2200003229d38 R09: fffa3bfffffb0b24 [ 943.572194][T15040] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e3f4 [ 943.572415][T15040] R13: ff1100001914e3c0 R14: ffffffff931c7940 R15: ff1100001914e900 [ 943.572633][T15040] FS: 00007f7e1754e440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 943.572901][T15040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.573079][T15040] CR2: 000000000044f720 CR3: 000000001d28c004 CR4: 0000000000771ef0 [ 943.573300][T15040] PKRU: 55555554 [ 943.573415][T15040] Call Trace: [ 943.573522][T15040] [ 943.573593][T15040] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.573752][T15040] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.573915][T15040] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.574056][T15040] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.574190][T15040] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.574342][T15040] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.574491][T15040] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.574642][T15040] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.574783][T15040] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.574929][T15040] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.575067][T15040] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.575210][T15040] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.575349][T15040] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.575496][T15040] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.575638][T15040] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.575783][T15040] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.575982][T15040] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.576130][T15040] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.576276][T15040] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.576438][T15040] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.576585][T15040] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.576733][T15040] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.576874][T15040] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.577130][T15040] ? move_addr_to_kernel (net/socket.c:2511) [ 943.577276][T15040] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.577428][T15040] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.577574][T15040] ___sys_sendmsg (net/socket.c:2641) [ 943.577714][T15040] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.577859][T15040] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.578074][T15040] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.578220][T15040] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.578358][T15040] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.578511][T15040] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.578647][T15040] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.578788][T15040] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.578989][T15040] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.579133][T15040] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.579272][T15040] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.579445][T15040] RIP: 0033:0x7f7e176a8c5e [ 943.579593][T15040] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.580153][T15040] RSP: 002b:00007ffdbd92b260 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.580359][T15040] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7e176a8c5e [ 943.580576][T15040] RDX: 0000000000000000 RSI: 00007ffdbd92b320 RDI: 0000000000000005 [ 943.580794][T15040] RBP: 00007ffdbd92b270 R08: 0000000000000000 R09: 0000000000000000 [ 943.581075][T15040] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.581279][T15040] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 943.657877][T15046] ------------[ cut here ]------------ | [ 943.658070][T15046] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15046 | [ 943.658316][T15046] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.659169][T15046] Tainted: [W]=WARN [ 943.659297][T15046] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.659512][T15046] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.659662][T15046] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.660178][T15046] RSP: 0018:ffa0000003df75d0 EFLAGS: 00010286 [ 943.660393][T15046] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229cff [ 943.660609][T15046] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914e7f8 [ 943.660838][T15046] RBP: 1ff40000007beebb R08: 1fe2200003229d00 R09: fffa3bfffffb0b24 [ 943.661063][T15046] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914eaf4 [ 943.661272][T15046] R13: ff1100001914eac0 R14: ffffffff931c7940 R15: ff1100001914e740 [ 943.661491][T15046] FS: 00007fbaa6b1f440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 943.661750][T15046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.662484][T15046] CR2: 000000000044f720 CR3: 00000000171f9006 CR4: 0000000000771ef0 [ 943.662716][T15046] PKRU: 55555554 [ 943.662828][T15046] Call Trace: [ 943.662945][T15046] [ 943.663020][T15046] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.663158][T15046] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.663301][T15046] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.663447][T15046] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.663604][T15046] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.663747][T15046] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.663883][T15046] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.664033][T15046] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.664171][T15046] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.664307][T15046] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.664458][T15046] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.664652][T15046] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.664797][T15046] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.664995][T15046] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.665132][T15046] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.665276][T15046] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.665517][T15046] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.665663][T15046] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.665822][T15046] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.666021][T15046] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.666161][T15046] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.666298][T15046] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.666442][T15046] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.666608][T15046] ? move_addr_to_kernel (net/socket.c:2511) [ 943.666781][T15046] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.666979][T15046] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.667117][T15046] ___sys_sendmsg (net/socket.c:2641) [ 943.667251][T15046] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.667396][T15046] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.667539][T15046] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.667704][T15046] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.667845][T15046] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.668076][T15046] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.668226][T15046] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.668393][T15046] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.668549][T15046] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.668687][T15046] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.668830][T15046] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.669083][T15046] RIP: 0033:0x7fbaa6c79c5e [ 943.669248][T15046] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.670267][T15046] RSP: 002b:00007fff0403fd30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.670484][T15046] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbaa6c79c5e [ 943.670729][T15046] RDX: 0000000000000000 RSI: 00007fff0403fdf0 RDI: 0000000000000005 [ 943.670950][T15046] RBP: 00007fff0403fd40 R08: 0000000000000000 R09: 0000000000000000 [ 943.671149][T15046] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.671349][T15046] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 943.746881][T15050] ------------[ cut here ]------------ | [ 943.747118][T15050] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15050 | [ 943.747438][T15050] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.748584][T15050] Tainted: [W]=WARN [ 943.748738][T15050] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.748999][T15050] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.749195][T15050] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.749740][T15050] RSP: 0018:ffa0000003e375d0 EFLAGS: 00010286 [ 943.749981][T15050] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c2057 [ 943.750235][T15050] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6102b8 [ 943.750521][T15050] RBP: 1ff40000007c6ebb R08: 1fe22000034c2058 R09: fffa3bfffffb0b24 [ 943.750787][T15050] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6118f4 [ 943.751066][T15050] R13: ff1100001a6118c0 R14: ffffffff931c7940 R15: ff1100001a610200 [ 943.751349][T15050] FS: 00007f1379c0d440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 943.751656][T15050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.751907][T15050] CR2: 000000000044f720 CR3: 00000000171f9004 CR4: 0000000000771ef0 [ 943.752172][T15050] PKRU: 55555554 [ 943.752333][T15050] Call Trace: [ 943.752494][T15050] [ 943.752616][T15050] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.752808][T15050] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.753028][T15050] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.753229][T15050] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.753426][T15050] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.753626][T15050] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.753822][T15050] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.754034][T15050] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.754219][T15050] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.754560][T15050] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.754750][T15050] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.754948][T15050] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.755140][T15050] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.755334][T15050] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.755526][T15050] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.755719][T15050] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.755930][T15050] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.756121][T15050] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.756308][T15050] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.756525][T15050] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.756724][T15050] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.756936][T15050] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.757137][T15050] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.757400][T15050] ? move_addr_to_kernel (net/socket.c:2511) [ 943.757596][T15050] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.757794][T15050] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.758011][T15050] ___sys_sendmsg (net/socket.c:2641) [ 943.758203][T15050] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.758412][T15050] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.758606][T15050] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.758810][T15050] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.759043][T15050] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.759250][T15050] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.759451][T15050] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.759655][T15050] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.759847][T15050] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.760073][T15050] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.760272][T15050] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.760516][T15050] RIP: 0033:0x7f1379d67c5e [ 943.760721][T15050] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.761286][T15050] RSP: 002b:00007ffdea375540 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.761564][T15050] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1379d67c5e [ 943.761821][T15050] RDX: 0000000000000000 RSI: 00007ffdea375600 RDI: 0000000000000005 [ 943.762098][T15050] RBP: 00007ffdea375550 R08: 0000000000000000 R09: 0000000000000000 [ 943.762349][T15050] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.762637][T15050] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 943.838114][T15056] ------------[ cut here ]------------ | [ 943.838285][T15056] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15056 | [ 943.838556][T15056] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.839358][T15056] Tainted: [W]=WARN [ 943.839474][T15056] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.839647][T15056] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.839789][T15056] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.840289][T15056] RSP: 0018:ffa0000003d075d0 EFLAGS: 00010286 [ 943.840465][T15056] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c23d7 [ 943.840671][T15056] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611eb8 [ 943.840878][T15056] RBP: 1ff40000007a0ebb R08: 1fe22000034c23d8 R09: fffa3bfffffb0b24 [ 943.841096][T15056] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6105b4 [ 943.841300][T15056] R13: ff1100001a610580 R14: ffffffff931c7940 R15: ff1100001a611e00 [ 943.841510][T15056] FS: 00007f1a3e58b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 943.841751][T15056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.841939][T15056] CR2: 000000000044f720 CR3: 000000001ab52005 CR4: 0000000000771ef0 [ 943.842150][T15056] PKRU: 55555554 [ 943.842255][T15056] Call Trace: [ 943.842360][T15056] [ 943.842436][T15056] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.842570][T15056] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.842712][T15056] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.842852][T15056] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.842993][T15056] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.843134][T15056] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.843270][T15056] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.843410][T15056] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.843547][T15056] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.843683][T15056] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.843823][T15056] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.843969][T15056] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.844107][T15056] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.844242][T15056] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.844380][T15056] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.844517][T15056] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.844667][T15056] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.844802][T15056] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.844942][T15056] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.845079][T15056] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.845217][T15056] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.845351][T15056] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.845490][T15056] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.845655][T15056] ? move_addr_to_kernel (net/socket.c:2511) [ 943.845790][T15056] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.845933][T15056] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.846071][T15056] ___sys_sendmsg (net/socket.c:2641) [ 943.846206][T15056] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.846344][T15056] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.846488][T15056] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.846632][T15056] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.846767][T15056] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.846908][T15056] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.847044][T15056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.847179][T15056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.847315][T15056] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.847451][T15056] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.847595][T15056] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.847765][T15056] RIP: 0033:0x7f1a3e6e5c5e [ 943.847922][T15056] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.848423][T15056] RSP: 002b:00007ffc70e8de60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.848629][T15056] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1a3e6e5c5e [ 943.848829][T15056] RDX: 0000000000000000 RSI: 00007ffc70e8df20 RDI: 0000000000000005 [ 943.849035][T15056] RBP: 00007ffc70e8de70 R08: 0000000000000000 R09: 0000000000000000 [ 943.849233][T15056] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.849458][T15056] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 943.920182][T15060] ------------[ cut here ]------------ | [ 943.920402][T15060] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15060 | [ 943.920696][T15060] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 943.921588][T15060] Tainted: [W]=WARN [ 943.921746][T15060] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 943.921982][T15060] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 943.922178][T15060] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 943.922720][T15060] RSP: 0018:ffa0000003e475d0 EFLAGS: 00010286 [ 943.923565][T15060] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea072f [ 943.923872][T15060] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503978 [ 943.924193][T15060] RBP: 1ff40000007c8ebb R08: 1fe2200001ea0730 R09: fffa3bfffffb0b24 [ 943.924508][T15060] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503c74 [ 943.924836][T15060] R13: ff1100000f503c40 R14: ffffffff931c7940 R15: ff1100000f5038c0 [ 943.925108][T15060] FS: 00007f4d42619440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 943.925408][T15060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.925639][T15060] CR2: 000000000044f720 CR3: 000000001cc56005 CR4: 0000000000771ef0 [ 943.925912][T15060] PKRU: 55555554 [ 943.926066][T15060] Call Trace: [ 943.926220][T15060] [ 943.926342][T15060] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 943.926547][T15060] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 943.926758][T15060] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 943.926962][T15060] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.927151][T15060] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.927344][T15060] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 943.927543][T15060] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 943.927734][T15060] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 943.927944][T15060] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 943.928140][T15060] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 943.928332][T15060] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 943.928526][T15060] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 943.928718][T15060] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 943.928922][T15060] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 943.929109][T15060] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 943.929301][T15060] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 943.929498][T15060] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.929690][T15060] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 943.929883][T15060] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 943.930086][T15060] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 943.930276][T15060] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 943.930475][T15060] ? copy_msghdr_from_user (net/socket.c:2525) [ 943.930667][T15060] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 943.930912][T15060] ? move_addr_to_kernel (net/socket.c:2511) [ 943.931103][T15060] ? filemap_map_folio_range (mm/filemap.c:3873) [ 943.931291][T15060] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 943.931496][T15060] ___sys_sendmsg (net/socket.c:2641) [ 943.931684][T15060] ? copy_msghdr_from_user (net/socket.c:2628) [ 943.931913][T15060] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 943.932108][T15060] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 943.932306][T15060] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 943.932509][T15060] ? __sys_sendmsg_sock (net/socket.c:2656) [ 943.932713][T15060] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 943.932928][T15060] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.933125][T15060] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 943.933325][T15060] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 943.933523][T15060] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 943.933722][T15060] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 943.933955][T15060] RIP: 0033:0x7f4d42773c5e [ 943.934151][T15060] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 943.934689][T15060] RSP: 002b:00007ffd42ecad20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 943.934963][T15060] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4d42773c5e [ 943.935224][T15060] RDX: 0000000000000000 RSI: 00007ffd42ecade0 RDI: 0000000000000005 [ 943.935494][T15060] RBP: 00007ffd42ecad30 R08: 0000000000000000 R09: 0000000000000000 [ 943.935747][T15060] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 943.936013][T15060] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 944.011826][T15066] ------------[ cut here ]------------ | [ 944.012401][T15066] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15066 | [ 944.012719][T15066] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.013719][T15066] Tainted: [W]=WARN [ 944.013907][T15066] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.014135][T15066] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.014348][T15066] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.014971][T15066] RSP: 0018:ffa0000003e475d0 EFLAGS: 00010286 [ 944.015213][T15066] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0617 [ 944.015486][T15066] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5030b8 [ 944.015756][T15066] RBP: 1ff40000007c8ebb R08: 1fe2200001ea0618 R09: fffa3bfffffb0b24 [ 944.016065][T15066] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503e34 [ 944.016345][T15066] R13: ff1100000f503e00 R14: ffffffff931c7940 R15: ff1100000f503000 [ 944.016637][T15066] FS: 00007f5bf9cfa440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 944.016977][T15066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.017205][T15066] CR2: 000000000044f720 CR3: 0000000017292002 CR4: 0000000000771ef0 [ 944.017481][T15066] PKRU: 55555554 [ 944.017688][T15066] Call Trace: [ 944.017852][T15066] [ 944.017987][T15066] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.018179][T15066] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.018388][T15066] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.018588][T15066] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.018776][T15066] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.018984][T15066] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.019174][T15066] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.019365][T15066] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.019571][T15066] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.019764][T15066] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.019969][T15066] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.020159][T15066] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.020354][T15066] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.020554][T15066] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.020744][T15066] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.020948][T15066] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.021152][T15066] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.021364][T15066] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.021612][T15066] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.021814][T15066] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.022043][T15066] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.022273][T15066] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.022597][T15066] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.022825][T15066] ? move_addr_to_kernel (net/socket.c:2511) [ 944.023070][T15066] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.023312][T15066] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.023534][T15066] ___sys_sendmsg (net/socket.c:2641) [ 944.023725][T15066] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.023972][T15066] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.024197][T15066] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.024433][T15066] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.024622][T15066] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.024820][T15066] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.025029][T15066] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.025243][T15066] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.025450][T15066] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.025640][T15066] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.025832][T15066] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.026066][T15066] RIP: 0033:0x7f5bf9e54c5e [ 944.026301][T15066] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.026854][T15066] RSP: 002b:00007fff0806cab0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.027140][T15066] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5bf9e54c5e [ 944.027401][T15066] RDX: 0000000000000000 RSI: 00007fff0806cb70 RDI: 0000000000000005 [ 944.027676][T15066] RBP: 00007fff0806cac0 R08: 0000000000000000 R09: 0000000000000000 [ 944.027972][T15066] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.028227][T15066] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 944.097721][T15070] ------------[ cut here ]------------ | [ 944.097904][T15070] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15070 | [ 944.098142][T15070] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.099035][T15070] Tainted: [W]=WARN [ 944.099141][T15070] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.099314][T15070] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.099481][T15070] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.100045][T15070] RSP: 0018:ffa0000003e475d0 EFLAGS: 00010286 [ 944.100257][T15070] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b9f [ 944.100485][T15070] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78dcf8 [ 944.100698][T15070] RBP: 1ff40000007c8ebb R08: 1fe22000036f1ba0 R09: fffa3bfffffb0b24 [ 944.100961][T15070] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d034 [ 944.101176][T15070] R13: ff1100001b78d000 R14: ffffffff931c7940 R15: ff1100001b78dc40 [ 944.101401][T15070] FS: 00007f7c05dcc440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 944.101663][T15070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.101850][T15070] CR2: 000000000044f720 CR3: 00000000108a5005 CR4: 0000000000771ef0 [ 944.102111][T15070] PKRU: 55555554 [ 944.102217][T15070] Call Trace: [ 944.102323][T15070] [ 944.102423][T15070] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.102561][T15070] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.102706][T15070] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.102847][T15070] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.103031][T15070] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.103202][T15070] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.103336][T15070] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.103476][T15070] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.103625][T15070] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.103765][T15070] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.103910][T15070] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.104047][T15070] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.104181][T15070] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.104323][T15070] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.104464][T15070] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.104604][T15070] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.104744][T15070] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.104899][T15070] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.105036][T15070] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.105174][T15070] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.105310][T15070] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.105452][T15070] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.105588][T15070] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.105756][T15070] ? move_addr_to_kernel (net/socket.c:2511) [ 944.105898][T15070] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.106034][T15070] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.106183][T15070] ___sys_sendmsg (net/socket.c:2641) [ 944.106320][T15070] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.106464][T15070] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.106602][T15070] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.106738][T15070] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.106877][T15070] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.107022][T15070] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.107158][T15070] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.107293][T15070] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.107459][T15070] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.107608][T15070] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.107748][T15070] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.107941][T15070] RIP: 0033:0x7f7c05f26c5e [ 944.108088][T15070] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.108579][T15070] RSP: 002b:00007ffc6889e680 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.108812][T15070] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7c05f26c5e [ 944.109022][T15070] RDX: 0000000000000000 RSI: 00007ffc6889e740 RDI: 0000000000000005 [ 944.109261][T15070] RBP: 00007ffc6889e690 R08: 0000000000000000 R09: 0000000000000000 [ 944.109481][T15070] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.109711][T15070] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 944.190611][T15076] ------------[ cut here ]------------ | [ 944.190820][T15076] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15076 | [ 944.191508][T15076] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.192394][T15076] Tainted: [W]=WARN [ 944.192548][T15076] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.192768][T15076] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.192977][T15076] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.193516][T15076] RSP: 0018:ffa0000003e775d0 EFLAGS: 00010286 [ 944.193740][T15076] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f19a7 [ 944.194005][T15076] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cd38 [ 944.194255][T15076] RBP: 1ff40000007ceebb R08: 1fe22000036f19a8 R09: fffa3bfffffb0b24 [ 944.194515][T15076] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78dab4 [ 944.194767][T15076] R13: ff1100001b78da80 R14: ffffffff931c7940 R15: ff1100001b78cc80 [ 944.195039][T15076] FS: 00007fca29d3d440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 944.195335][T15076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.195564][T15076] CR2: 000000000044f720 CR3: 000000001b51c004 CR4: 0000000000771ef0 [ 944.195833][T15076] PKRU: 55555554 [ 944.196002][T15076] Call Trace: [ 944.196155][T15076] [ 944.196276][T15076] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.196474][T15076] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.196674][T15076] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.196873][T15076] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.197074][T15076] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.197265][T15076] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.197456][T15076] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.197652][T15076] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.197839][T15076] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.198040][T15076] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.198230][T15076] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.198422][T15076] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.198613][T15076] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.198802][T15076] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.198999][T15076] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.199189][T15076] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.199386][T15076] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.199575][T15076] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.199766][T15076] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.199964][T15076] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.200163][T15076] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.200350][T15076] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.200541][T15076] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.200759][T15076] ? move_addr_to_kernel (net/socket.c:2511) [ 944.200963][T15076] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.201157][T15076] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.201351][T15076] ___sys_sendmsg (net/socket.c:2641) [ 944.201555][T15076] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.201755][T15076] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.201975][T15076] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.202166][T15076] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.202353][T15076] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.202550][T15076] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.202737][T15076] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.202938][T15076] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.203127][T15076] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.203320][T15076] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.203515][T15076] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.203746][T15076] RIP: 0033:0x7fca29e97c5e [ 944.203951][T15076] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.204505][T15076] RSP: 002b:00007ffd82fb9040 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.204760][T15076] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fca29e97c5e [ 944.205040][T15076] RDX: 0000000000000000 RSI: 00007ffd82fb9100 RDI: 0000000000000005 [ 944.205309][T15076] RBP: 00007ffd82fb9050 R08: 0000000000000000 R09: 0000000000000000 [ 944.205573][T15076] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.205826][T15076] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 944.269847][T15080] ------------[ cut here ]------------ | [ 944.270052][T15080] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15080 | [ 944.270336][T15080] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.271223][T15080] Tainted: [W]=WARN [ 944.271383][T15080] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.271602][T15080] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.271798][T15080] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.272362][T15080] RSP: 0018:ffa0000003e775d0 EFLAGS: 00010286 [ 944.272601][T15080] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725857 [ 944.272856][T15080] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c2b8 [ 944.273117][T15080] RBP: 1ff40000007ceebb R08: 1fe2200003725858 R09: fffa3bfffffb0b24 [ 944.273380][T15080] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92d8f4 [ 944.273632][T15080] R13: ff1100001b92d8c0 R14: ffffffff931c7940 R15: ff1100001b92c200 [ 944.273887][T15080] FS: 00007fb8c8651440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 944.274188][T15080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.274418][T15080] CR2: 000000000044f720 CR3: 000000000d490001 CR4: 0000000000771ef0 [ 944.274673][T15080] PKRU: 55555554 [ 944.274825][T15080] Call Trace: [ 944.274986][T15080] [ 944.275107][T15080] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.275292][T15080] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.275497][T15080] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.275685][T15080] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.275871][T15080] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.276093][T15080] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.276292][T15080] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.276498][T15080] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.276686][T15080] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.276885][T15080] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.277102][T15080] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.277296][T15080] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.277507][T15080] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.277701][T15080] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.277888][T15080] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.278097][T15080] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.278292][T15080] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.278488][T15080] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.278690][T15080] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.278889][T15080] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.279093][T15080] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.279296][T15080] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.279489][T15080] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.279706][T15080] ? move_addr_to_kernel (net/socket.c:2511) [ 944.279909][T15080] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.280095][T15080] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.280286][T15080] ___sys_sendmsg (net/socket.c:2641) [ 944.280481][T15080] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.280673][T15080] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.280863][T15080] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.281068][T15080] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.281263][T15080] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.281458][T15080] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.281646][T15080] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.281832][T15080] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.282048][T15080] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.282234][T15080] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.282426][T15080] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.282643][T15080] RIP: 0033:0x7fb8c87abc5e [ 944.282853][T15080] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.283412][T15080] RSP: 002b:00007fff6efc16c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.283680][T15080] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb8c87abc5e [ 944.283967][T15080] RDX: 0000000000000000 RSI: 00007fff6efc1780 RDI: 0000000000000005 [ 944.284219][T15080] RBP: 00007fff6efc16d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.284493][T15080] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.284763][T15080] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 944.359545][T15086] ------------[ cut here ]------------ | [ 944.359843][T15086] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15086 | [ 944.360090][T15086] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.360969][T15086] Tainted: [W]=WARN [ 944.361075][T15086] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.361249][T15086] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.361400][T15086] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.361961][T15086] RSP: 0018:ffa0000003eb75d0 EFLAGS: 00010286 [ 944.362148][T15086] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725937 [ 944.362364][T15086] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c9b8 [ 944.362587][T15086] RBP: 1ff40000007d6ebb R08: 1fe2200003725938 R09: fffa3bfffffb0b24 [ 944.362791][T15086] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92c774 [ 944.363046][T15086] R13: ff1100001b92c740 R14: ffffffff931c7940 R15: ff1100001b92c900 [ 944.363257][T15086] FS: 00007f8fdac49440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 944.363508][T15086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.363711][T15086] CR2: 000000000044f720 CR3: 000000001c56d002 CR4: 0000000000771ef0 [ 944.363934][T15086] PKRU: 55555554 [ 944.364040][T15086] Call Trace: [ 944.364149][T15086] [ 944.364217][T15086] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.364360][T15086] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.364516][T15086] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.364734][T15086] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.364878][T15086] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.365022][T15086] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.365160][T15086] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.365392][T15086] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.365528][T15086] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.365666][T15086] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.365829][T15086] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.365976][T15086] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.366135][T15086] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.366273][T15086] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.366417][T15086] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.366565][T15086] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.366701][T15086] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.366858][T15086] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.367013][T15086] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.367148][T15086] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.367299][T15086] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.367448][T15086] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.367604][T15086] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.367773][T15086] ? move_addr_to_kernel (net/socket.c:2511) [ 944.367918][T15086] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.368070][T15086] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.368207][T15086] ___sys_sendmsg (net/socket.c:2641) [ 944.368340][T15086] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.368496][T15086] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.368636][T15086] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.368784][T15086] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.368937][T15086] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.369080][T15086] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.369236][T15086] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.369389][T15086] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.369531][T15086] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.369665][T15086] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.369830][T15086] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.370024][T15086] RIP: 0033:0x7f8fdada3c5e [ 944.370174][T15086] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.370709][T15086] RSP: 002b:00007ffe29d0ccc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.370927][T15086] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8fdada3c5e [ 944.371143][T15086] RDX: 0000000000000000 RSI: 00007ffe29d0cd80 RDI: 0000000000000005 [ 944.371350][T15086] RBP: 00007ffe29d0ccd0 R08: 0000000000000000 R09: 0000000000000000 [ 944.371565][T15086] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.371779][T15086] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 944.450888][T15090] ------------[ cut here ]------------ | [ 944.451078][T15090] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15090 | [ 944.451344][T15090] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.452143][T15090] Tainted: [W]=WARN [ 944.452248][T15090] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.452451][T15090] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.452594][T15090] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.453556][T15090] RSP: 0018:ffa0000003ea75d0 EFLAGS: 00010286 [ 944.453758][T15090] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038751a7 [ 944.453984][T15090] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8d38 [ 944.454195][T15090] RBP: 1ff40000007d4ebb R08: 1fe22000038751a8 R09: fffa3bfffffb0b24 [ 944.454415][T15090] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9ab4 [ 944.454630][T15090] R13: ff1100001c3a9a80 R14: ffffffff931c7940 R15: ff1100001c3a8c80 [ 944.454833][T15090] FS: 00007fe156243440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 944.455084][T15090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.455259][T15090] CR2: 000000000044f720 CR3: 0000000019c61005 CR4: 0000000000771ef0 [ 944.455468][T15090] PKRU: 55555554 [ 944.455581][T15090] Call Trace: [ 944.455685][T15090] [ 944.455759][T15090] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.455899][T15090] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.456045][T15090] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.456180][T15090] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.456338][T15090] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.456492][T15090] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.456645][T15090] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.456782][T15090] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.456926][T15090] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.457065][T15090] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.457202][T15090] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.457337][T15090] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.457481][T15090] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.457619][T15090] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.457771][T15090] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.457924][T15090] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.458067][T15090] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.458203][T15090] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.458350][T15090] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.458508][T15090] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.458642][T15090] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.458789][T15090] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.458931][T15090] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.459102][T15090] ? move_addr_to_kernel (net/socket.c:2511) [ 944.459258][T15090] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.459403][T15090] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.459540][T15090] ___sys_sendmsg (net/socket.c:2641) [ 944.459676][T15090] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.459815][T15090] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.459957][T15090] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.460123][T15090] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.460296][T15090] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.460449][T15090] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.460589][T15090] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.460731][T15090] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.460881][T15090] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.461031][T15090] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.461166][T15090] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.461334][T15090] RIP: 0033:0x7fe15639dc5e [ 944.461492][T15090] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.461997][T15090] RSP: 002b:00007ffec3e214b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.462200][T15090] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe15639dc5e [ 944.462422][T15090] RDX: 0000000000000000 RSI: 00007ffec3e21570 RDI: 0000000000000005 [ 944.462621][T15090] RBP: 00007ffec3e214c0 R08: 0000000000000000 R09: 0000000000000000 [ 944.462839][T15090] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.463055][T15090] R13: 0000000069cbe7f7 R14: 0000000000000004 R15: 000000000049d620 | [ 944.547301][T15096] ------------[ cut here ]------------ | [ 944.547530][T15096] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15096 | [ 944.547854][T15096] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.549233][T15096] Tainted: [W]=WARN [ 944.549401][T15096] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.549602][T15096] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.549753][T15096] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.550259][T15096] RSP: 0018:ffa0000003e775d0 EFLAGS: 00010286 [ 944.550473][T15096] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038750ff [ 944.550690][T15096] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a87f8 [ 944.550907][T15096] RBP: 1ff40000007ceebb R08: 1fe2200003875100 R09: fffa3bfffffb0b24 [ 944.551118][T15096] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9034 [ 944.551334][T15096] R13: ff1100001c3a9000 R14: ffffffff931c7940 R15: ff1100001c3a8740 [ 944.551560][T15096] FS: 00007fb32f11a440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 944.551809][T15096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.551995][T15096] CR2: 000000000044f720 CR3: 0000000019ee4005 CR4: 0000000000771ef0 [ 944.552213][T15096] PKRU: 55555554 [ 944.552319][T15096] Call Trace: [ 944.552428][T15096] [ 944.552500][T15096] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.552644][T15096] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.552807][T15096] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.552961][T15096] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.553109][T15096] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.553260][T15096] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.553406][T15096] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.553556][T15096] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.553713][T15096] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.553866][T15096] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.554038][T15096] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.554174][T15096] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.554340][T15096] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.554493][T15096] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.554626][T15096] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.554760][T15096] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.554911][T15096] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.555056][T15096] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.555201][T15096] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.555380][T15096] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.555530][T15096] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.555674][T15096] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.555821][T15096] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.556006][T15096] ? move_addr_to_kernel (net/socket.c:2511) [ 944.556159][T15096] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.556319][T15096] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.556478][T15096] ___sys_sendmsg (net/socket.c:2641) [ 944.556625][T15096] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.556777][T15096] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.556936][T15096] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.557084][T15096] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.557236][T15096] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.557391][T15096] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.557527][T15096] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.557664][T15096] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.557820][T15096] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.557962][T15096] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.558098][T15096] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.558267][T15096] RIP: 0033:0x7fb32f274c5e [ 944.558437][T15096] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.558945][T15096] RSP: 002b:00007fff123510a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.559187][T15096] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb32f274c5e [ 944.559407][T15096] RDX: 0000000000000000 RSI: 00007fff12351160 RDI: 0000000000000005 [ 944.559622][T15096] RBP: 00007fff123510b0 R08: 0000000000000000 R09: 0000000000000000 [ 944.559843][T15096] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.560057][T15096] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 944.636572][T15100] ------------[ cut here ]------------ | [ 944.636743][T15100] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15100 | [ 944.637007][T15100] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.637791][T15100] Tainted: [W]=WARN [ 944.637908][T15100] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.638075][T15100] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.638223][T15100] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.638723][T15100] RSP: 0018:ffa0000003f075d0 EFLAGS: 00010286 [ 944.638905][T15100] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038752f7 [ 944.639107][T15100] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a97b8 [ 944.639318][T15100] RBP: 1ff40000007e0ebb R08: 1fe22000038752f8 R09: fffa3bfffffb0b24 [ 944.639530][T15100] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8074 [ 944.639753][T15100] R13: ff1100001c3a8040 R14: ffffffff931c7940 R15: ff1100001c3a9700 [ 944.639972][T15100] FS: 00007f6d135ea440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 944.640213][T15100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.640397][T15100] CR2: 000000000044f720 CR3: 000000001c972001 CR4: 0000000000771ef0 [ 944.640602][T15100] PKRU: 55555554 [ 944.640705][T15100] Call Trace: [ 944.640808][T15100] [ 944.640877][T15100] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.641020][T15100] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.641169][T15100] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.641305][T15100] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.641453][T15100] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.641594][T15100] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.641733][T15100] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.641873][T15100] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.642029][T15100] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.642166][T15100] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.642314][T15100] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.642461][T15100] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.642597][T15100] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.642739][T15100] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.642874][T15100] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.643024][T15100] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.643166][T15100] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.643308][T15100] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.643451][T15100] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.643587][T15100] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.643727][T15100] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.643865][T15100] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.644004][T15100] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.644180][T15100] ? move_addr_to_kernel (net/socket.c:2511) [ 944.644315][T15100] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.644458][T15100] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.644595][T15100] ___sys_sendmsg (net/socket.c:2641) [ 944.644729][T15100] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.644870][T15100] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.645009][T15100] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.645144][T15100] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.645278][T15100] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.645418][T15100] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.645555][T15100] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.645695][T15100] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.645841][T15100] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.645985][T15100] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.646124][T15100] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.646296][T15100] RIP: 0033:0x7f6d13744c5e [ 944.646449][T15100] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.647009][T15100] RSP: 002b:00007ffe63c60480 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.647219][T15100] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6d13744c5e [ 944.647433][T15100] RDX: 0000000000000000 RSI: 00007ffe63c60540 RDI: 0000000000000005 [ 944.647642][T15100] RBP: 00007ffe63c60490 R08: 0000000000000000 R09: 0000000000000000 [ 944.647850][T15100] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.648113][T15100] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 944.726614][T15106] ------------[ cut here ]------------ | [ 944.726781][T15106] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15106 | [ 944.727035][T15106] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.727863][T15106] Tainted: [W]=WARN [ 944.727976][T15106] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.728155][T15106] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.728306][T15106] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.728815][T15106] RSP: 0018:ffa0000003ee75d0 EFLAGS: 00010286 [ 944.729003][T15106] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192ea17 [ 944.729219][T15106] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9750b8 [ 944.729435][T15106] RBP: 1ff40000007dcebb R08: 1fe220000192ea18 R09: fffa3bfffffb0b24 [ 944.729636][T15106] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974e74 [ 944.729845][T15106] R13: ff1100000c974e40 R14: ffffffff931c7940 R15: ff1100000c975000 [ 944.730072][T15106] FS: 00007f7d7464f440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 944.730318][T15106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.730494][T15106] CR2: 000000000044f720 CR3: 0000000019bf8003 CR4: 0000000000771ef0 [ 944.730698][T15106] PKRU: 55555554 [ 944.730801][T15106] Call Trace: [ 944.730907][T15106] [ 944.730977][T15106] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.731121][T15106] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.731265][T15106] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.731412][T15106] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.731552][T15106] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.731704][T15106] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.731837][T15106] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.732169][T15106] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.732310][T15106] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.732448][T15106] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.732590][T15106] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.732725][T15106] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.732861][T15106] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.733000][T15106] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.733134][T15106] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.733273][T15106] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.733425][T15106] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.733560][T15106] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.733694][T15106] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.733831][T15106] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.733973][T15106] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.734106][T15106] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.734244][T15106] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.734418][T15106] ? move_addr_to_kernel (net/socket.c:2511) [ 944.734564][T15106] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.734711][T15106] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.734852][T15106] ___sys_sendmsg (net/socket.c:2641) [ 944.735004][T15106] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.735170][T15106] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.735322][T15106] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.735470][T15106] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.735604][T15106] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.735740][T15106] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.735878][T15106] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.736022][T15106] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.736170][T15106] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.736312][T15106] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.736457][T15106] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.736629][T15106] RIP: 0033:0x7f7d747a9c5e [ 944.736777][T15106] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.737281][T15106] RSP: 002b:00007ffc7a5a7920 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.737515][T15106] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7d747a9c5e [ 944.737739][T15106] RDX: 0000000000000000 RSI: 00007ffc7a5a79e0 RDI: 0000000000000005 [ 944.737943][T15106] RBP: 00007ffc7a5a7930 R08: 0000000000000000 R09: 0000000000000000 [ 944.738156][T15106] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.738364][T15106] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 944.819706][T15110] ------------[ cut here ]------------ | [ 944.819979][T15110] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15110 | [ 944.820283][T15110] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.821229][T15110] Tainted: [W]=WARN [ 944.821429][T15110] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.821658][T15110] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.821856][T15110] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.822432][T15110] RSP: 0018:ffa0000003e975d0 EFLAGS: 00010286 [ 944.822658][T15110] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e8ff [ 944.822932][T15110] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9747f8 [ 944.823199][T15110] RBP: 1ff40000007d2ebb R08: 1fe220000192e900 R09: fffa3bfffffb0b24 [ 944.823464][T15110] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c9743f4 [ 944.823734][T15110] R13: ff1100000c9743c0 R14: ffffffff931c7940 R15: ff1100000c974740 [ 944.824012][T15110] FS: 00007fcbfa465440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 944.824337][T15110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.824570][T15110] CR2: 000000000044f720 CR3: 000000001b0ac002 CR4: 0000000000771ef0 [ 944.824852][T15110] PKRU: 55555554 [ 944.825024][T15110] Call Trace: [ 944.825181][T15110] [ 944.825305][T15110] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.825521][T15110] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.825729][T15110] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.825951][T15110] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.826138][T15110] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.826328][T15110] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.826536][T15110] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.826726][T15110] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.826933][T15110] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.827121][T15110] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.827318][T15110] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.827512][T15110] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.827713][T15110] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.827933][T15110] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.828125][T15110] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.828326][T15110] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.828526][T15110] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.828725][T15110] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.828935][T15110] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.829130][T15110] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.829326][T15110] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.829612][T15110] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.829833][T15110] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.830086][T15110] ? move_addr_to_kernel (net/socket.c:2511) [ 944.830303][T15110] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.830508][T15110] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.830705][T15110] ___sys_sendmsg (net/socket.c:2641) [ 944.830911][T15110] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.831138][T15110] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.831336][T15110] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.831559][T15110] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.831754][T15110] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.831970][T15110] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.832164][T15110] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.832357][T15110] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.832571][T15110] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.832773][T15110] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.832999][T15110] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.833283][T15110] RIP: 0033:0x7fcbfa5bfc5e [ 944.833530][T15110] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.834131][T15110] RSP: 002b:00007ffcf91bf020 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.834453][T15110] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcbfa5bfc5e [ 944.834775][T15110] RDX: 0000000000000000 RSI: 00007ffcf91bf0e0 RDI: 0000000000000005 [ 944.835060][T15110] RBP: 00007ffcf91bf030 R08: 0000000000000000 R09: 0000000000000000 [ 944.835358][T15110] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.835645][T15110] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 944.924416][T15116] ------------[ cut here ]------------ | [ 944.924650][T15116] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15116 | [ 944.925295][T15116] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 944.926245][T15116] Tainted: [W]=WARN [ 944.926406][T15116] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 944.926637][T15116] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 944.926840][T15116] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 944.927443][T15116] RSP: 0018:ffa0000003ee75d0 EFLAGS: 00010286 [ 944.927697][T15116] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229e87 [ 944.927984][T15116] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f438 [ 944.928254][T15116] RBP: 1ff40000007dcebb R08: 1fe2200003229e88 R09: fffa3bfffffb0b24 [ 944.928525][T15116] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f034 [ 944.928790][T15116] R13: ff1100001914f000 R14: ffffffff931c7940 R15: ff1100001914f380 [ 944.929078][T15116] FS: 00007f76af86d440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 944.929394][T15116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.929626][T15116] CR2: 000000000044f720 CR3: 000000001c972005 CR4: 0000000000771ef0 [ 944.929890][T15116] PKRU: 55555554 [ 944.930067][T15116] Call Trace: [ 944.930221][T15116] [ 944.930343][T15116] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 944.930541][T15116] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 944.930740][T15116] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 944.930964][T15116] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.931156][T15116] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.931351][T15116] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 944.931551][T15116] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 944.931745][T15116] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 944.931967][T15116] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 944.932170][T15116] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 944.932383][T15116] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 944.932585][T15116] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 944.932781][T15116] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 944.932987][T15116] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 944.933180][T15116] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 944.933391][T15116] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 944.933612][T15116] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.933829][T15116] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 944.934058][T15116] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 944.934270][T15116] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 944.934493][T15116] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 944.934693][T15116] ? copy_msghdr_from_user (net/socket.c:2525) [ 944.934906][T15116] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 944.935142][T15116] ? move_addr_to_kernel (net/socket.c:2511) [ 944.935360][T15116] ? filemap_map_folio_range (mm/filemap.c:3873) [ 944.935561][T15116] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 944.935756][T15116] ___sys_sendmsg (net/socket.c:2641) [ 944.935963][T15116] ? copy_msghdr_from_user (net/socket.c:2628) [ 944.936161][T15116] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 944.936360][T15116] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 944.936562][T15116] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 944.936757][T15116] ? __sys_sendmsg_sock (net/socket.c:2656) [ 944.936966][T15116] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 944.937158][T15116] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.937352][T15116] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 944.937558][T15116] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 944.937751][T15116] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 944.937962][T15116] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 944.938198][T15116] RIP: 0033:0x7f76af9c7c5e [ 944.938419][T15116] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 944.939010][T15116] RSP: 002b:00007ffd67f314b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 944.939279][T15116] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f76af9c7c5e [ 944.939561][T15116] RDX: 0000000000000000 RSI: 00007ffd67f31570 RDI: 0000000000000005 [ 944.939837][T15116] RBP: 00007ffd67f314c0 R08: 0000000000000000 R09: 0000000000000000 [ 944.940113][T15116] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 944.940398][T15116] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 945.021082][T15120] ------------[ cut here ]------------ | [ 945.021309][T15120] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15120 | [ 945.021624][T15120] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.022584][T15120] Tainted: [W]=WARN [ 945.022744][T15120] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.022997][T15120] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.023212][T15120] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.023795][T15120] RSP: 0018:ffa0000003ea75d0 EFLAGS: 00010286 [ 945.024034][T15120] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229ddf [ 945.024285][T15120] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914eef8 [ 945.024557][T15120] RBP: 1ff40000007d4ebb R08: 1fe2200003229de0 R09: fffa3bfffffb0b24 [ 945.024814][T15120] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914fe34 [ 945.025077][T15120] R13: ff1100001914fe00 R14: ffffffff931c7940 R15: ff1100001914ee40 [ 945.025348][T15120] FS: 00007fe6a6ab6440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 945.025657][T15120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.025877][T15120] CR2: 000000000044f720 CR3: 000000001b28b004 CR4: 0000000000771ef0 [ 945.026148][T15120] PKRU: 55555554 [ 945.026306][T15120] Call Trace: [ 945.026470][T15120] [ 945.026592][T15120] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.026779][T15120] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.026989][T15120] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.027185][T15120] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.027380][T15120] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.027570][T15120] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.027754][T15120] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.027959][T15120] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.028155][T15120] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.028342][T15120] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.028537][T15120] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.028722][T15120] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.028923][T15120] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.029117][T15120] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.029303][T15120] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.029525][T15120] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.029734][T15120] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.029947][T15120] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.030143][T15120] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.030337][T15120] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.030536][T15120] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.030719][T15120] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.030918][T15120] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.031135][T15120] ? move_addr_to_kernel (net/socket.c:2511) [ 945.031322][T15120] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.031516][T15120] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.031705][T15120] ___sys_sendmsg (net/socket.c:2641) [ 945.031914][T15120] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.032114][T15120] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.032312][T15120] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.032509][T15120] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.032711][T15120] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.032928][T15120] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.033116][T15120] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.033310][T15120] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.033504][T15120] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.033690][T15120] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.033881][T15120] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.034109][T15120] RIP: 0033:0x7fe6a6c10c5e [ 945.034305][T15120] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.034840][T15120] RSP: 002b:00007ffddf9b5030 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.035108][T15120] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe6a6c10c5e [ 945.035382][T15120] RDX: 0000000000000000 RSI: 00007ffddf9b50f0 RDI: 0000000000000005 [ 945.035641][T15120] RBP: 00007ffddf9b5040 R08: 0000000000000000 R09: 0000000000000000 [ 945.035916][T15120] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.036175][T15120] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 945.105203][T15126] ------------[ cut here ]------------ | [ 945.105414][T15126] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15126 | [ 945.105767][T15126] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.106712][T15126] Tainted: [W]=WARN [ 945.106866][T15126] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.107100][T15126] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.107304][T15126] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.107889][T15126] RSP: 0018:ffa0000003ec75d0 EFLAGS: 00010286 [ 945.108143][T15126] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229ebf [ 945.108418][T15126] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f5f8 [ 945.108714][T15126] RBP: 1ff40000007d8ebb R08: 1fe2200003229ec0 R09: fffa3bfffffb0b24 [ 945.109003][T15126] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f1f4 [ 945.109273][T15126] R13: ff1100001914f1c0 R14: ffffffff931c7940 R15: ff1100001914f540 [ 945.109561][T15126] FS: 00007f38b6388440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 945.109874][T15126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.110115][T15126] CR2: 000000000044f720 CR3: 000000001add8005 CR4: 0000000000771ef0 [ 945.110387][T15126] PKRU: 55555554 [ 945.110548][T15126] Call Trace: [ 945.110703][T15126] [ 945.110825][T15126] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.111032][T15126] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.111231][T15126] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.111441][T15126] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.111652][T15126] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.111848][T15126] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.112050][T15126] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.112242][T15126] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.112448][T15126] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.112646][T15126] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.112839][T15126] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.113040][T15126] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.113236][T15126] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.113427][T15126] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.113610][T15126] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.113799][T15126] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.114005][T15126] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.114195][T15126] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.114389][T15126] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.114585][T15126] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.114781][T15126] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.114989][T15126] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.115182][T15126] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.115423][T15126] ? move_addr_to_kernel (net/socket.c:2511) [ 945.115620][T15126] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.115816][T15126] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.116035][T15126] ___sys_sendmsg (net/socket.c:2641) [ 945.116231][T15126] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.116447][T15126] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.116647][T15126] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.116840][T15126] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.117044][T15126] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.117234][T15126] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.117430][T15126] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.117624][T15126] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.117812][T15126] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.118013][T15126] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.118208][T15126] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.118434][T15126] RIP: 0033:0x7f38b64e2c5e [ 945.118628][T15126] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.119171][T15126] RSP: 002b:00007fffaabd5ce0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.119440][T15126] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f38b64e2c5e [ 945.119704][T15126] RDX: 0000000000000000 RSI: 00007fffaabd5da0 RDI: 0000000000000005 [ 945.119969][T15126] RBP: 00007fffaabd5cf0 R08: 0000000000000000 R09: 0000000000000000 [ 945.120219][T15126] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.120481][T15126] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 945.196469][T15130] ------------[ cut here ]------------ | [ 945.196653][T15130] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15130 | [ 945.196933][T15130] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.197822][T15130] Tainted: [W]=WARN [ 945.197937][T15130] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.198122][T15130] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.198275][T15130] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.198807][T15130] RSP: 0018:ffa0000003f675d0 EFLAGS: 00010286 [ 945.199007][T15130] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c2217 [ 945.199219][T15130] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6110b8 [ 945.199436][T15130] RBP: 1ff40000007ecebb R08: 1fe22000034c2218 R09: fffa3bfffffb0b24 [ 945.199658][T15130] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611734 [ 945.199875][T15130] R13: ff1100001a611700 R14: ffffffff931c7940 R15: ff1100001a611000 [ 945.200124][T15130] FS: 00007f63acca1440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 945.200366][T15130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.200560][T15130] CR2: 000000000044f720 CR3: 000000000dafc004 CR4: 0000000000771ef0 [ 945.200784][T15130] PKRU: 55555554 [ 945.200887][T15130] Call Trace: [ 945.201000][T15130] [ 945.201069][T15130] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.201212][T15130] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.201357][T15130] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.201562][T15130] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.201744][T15130] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.201983][T15130] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.202120][T15130] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.202273][T15130] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.202423][T15130] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.202566][T15130] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.202711][T15130] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.202851][T15130] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.203054][T15130] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.203201][T15130] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.203369][T15130] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.203516][T15130] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.203707][T15130] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.203850][T15130] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.204061][T15130] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.204210][T15130] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.204359][T15130] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.204585][T15130] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.204724][T15130] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.204950][T15130] ? move_addr_to_kernel (net/socket.c:2511) [ 945.205088][T15130] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.205241][T15130] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.205385][T15130] ___sys_sendmsg (net/socket.c:2641) [ 945.205527][T15130] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.205671][T15130] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.205814][T15130] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.206024][T15130] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.206174][T15130] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.206318][T15130] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.206461][T15130] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.206606][T15130] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.206742][T15130] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.206888][T15130] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.207087][T15130] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.207283][T15130] RIP: 0033:0x7f63acdfbc5e [ 945.207437][T15130] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.208010][T15130] RSP: 002b:00007ffc55c0cbd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.208230][T15130] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f63acdfbc5e [ 945.208463][T15130] RDX: 0000000000000000 RSI: 00007ffc55c0cc90 RDI: 0000000000000005 [ 945.208685][T15130] RBP: 00007ffc55c0cbe0 R08: 0000000000000000 R09: 0000000000000000 [ 945.208905][T15130] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.209145][T15130] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 945.280329][T15136] ------------[ cut here ]------------ | [ 945.280513][T15136] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15136 | [ 945.280775][T15136] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.281665][T15136] Tainted: [W]=WARN [ 945.281769][T15136] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.281953][T15136] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.282097][T15136] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.282622][T15136] RSP: 0018:ffa0000003ea75d0 EFLAGS: 00010286 [ 945.282825][T15136] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c201f [ 945.283043][T15136] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6100f8 [ 945.283272][T15136] RBP: 1ff40000007d4ebb R08: 1fe22000034c2020 R09: fffa3bfffffb0b24 [ 945.283528][T15136] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a6111f4 [ 945.283744][T15136] R13: ff1100001a6111c0 R14: ffffffff931c7940 R15: ff1100001a610040 [ 945.283957][T15136] FS: 00007fb197604440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 945.284226][T15136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.284409][T15136] CR2: 000000000044f720 CR3: 000000001d147003 CR4: 0000000000771ef0 [ 945.284629][T15136] PKRU: 55555554 [ 945.284737][T15136] Call Trace: [ 945.284840][T15136] [ 945.284920][T15136] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.285058][T15136] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.285200][T15136] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.285339][T15136] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.285485][T15136] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.285627][T15136] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.285769][T15136] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.286022][T15136] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.286187][T15136] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.286339][T15136] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.286503][T15136] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.286673][T15136] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.286816][T15136] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.287034][T15136] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.287175][T15136] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.287312][T15136] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.287469][T15136] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.287604][T15136] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.287740][T15136] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.287877][T15136] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.288091][T15136] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.288228][T15136] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.288367][T15136] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.288772][T15136] ? move_addr_to_kernel (net/socket.c:2511) [ 945.288983][T15136] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.289119][T15136] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.289261][T15136] ___sys_sendmsg (net/socket.c:2641) [ 945.289412][T15136] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.289576][T15136] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.289716][T15136] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.289854][T15136] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.290066][T15136] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.290212][T15136] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.290351][T15136] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.290491][T15136] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.290624][T15136] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.290755][T15136] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.290974][T15136] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.291159][T15136] RIP: 0033:0x7fb19775ec5e [ 945.291319][T15136] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.291815][T15136] RSP: 002b:00007ffe54183f10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.292122][T15136] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb19775ec5e [ 945.292327][T15136] RDX: 0000000000000000 RSI: 00007ffe54183fd0 RDI: 0000000000000005 [ 945.292543][T15136] RBP: 00007ffe54183f20 R08: 0000000000000000 R09: 0000000000000000 [ 945.292747][T15136] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.293027][T15136] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 945.360169][T15140] ------------[ cut here ]------------ | [ 945.360334][T15140] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15140 | [ 945.360621][T15140] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.361877][T15140] Tainted: [W]=WARN [ 945.361991][T15140] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.362160][T15140] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.362303][T15140] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.362806][T15140] RSP: 0018:ffa0000003f875d0 EFLAGS: 00010286 [ 945.362988][T15140] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0537 [ 945.363199][T15140] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5029b8 [ 945.363439][T15140] RBP: 1ff40000007f0ebb R08: 1fe2200001ea0538 R09: fffa3bfffffb0b24 [ 945.363642][T15140] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5023f4 [ 945.363853][T15140] R13: ff1100000f5023c0 R14: ffffffff931c7940 R15: ff1100000f502900 [ 945.364068][T15140] FS: 00007f5ca25dc440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 945.364312][T15140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.364488][T15140] CR2: 000000000044f720 CR3: 000000001d147005 CR4: 0000000000771ef0 [ 945.364696][T15140] PKRU: 55555554 [ 945.364799][T15140] Call Trace: [ 945.364908][T15140] [ 945.364984][T15140] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.365127][T15140] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.365274][T15140] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.365428][T15140] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.365561][T15140] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.365698][T15140] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.365832][T15140] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.366502][T15140] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.366638][T15140] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.366779][T15140] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.366923][T15140] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.367056][T15140] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.367200][T15140] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.367341][T15140] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.367479][T15140] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.367619][T15140] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.367755][T15140] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.367915][T15140] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.368078][T15140] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.368218][T15140] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.368354][T15140] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.368494][T15140] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.368628][T15140] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.368796][T15140] ? move_addr_to_kernel (net/socket.c:2511) [ 945.368946][T15140] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.369092][T15140] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.369236][T15140] ___sys_sendmsg (net/socket.c:2641) [ 945.369375][T15140] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.369514][T15140] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.369654][T15140] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.369789][T15140] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.369930][T15140] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.370069][T15140] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.370205][T15140] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.370340][T15140] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.370480][T15140] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.370614][T15140] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.370748][T15140] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.370920][T15140] RIP: 0033:0x7f5ca2736c5e [ 945.371063][T15140] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.371554][T15140] RSP: 002b:00007ffcce392f70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.371759][T15140] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5ca2736c5e [ 945.371974][T15140] RDX: 0000000000000000 RSI: 00007ffcce393030 RDI: 0000000000000005 [ 945.372176][T15140] RBP: 00007ffcce392f80 R08: 0000000000000000 R09: 0000000000000000 [ 945.372386][T15140] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.372591][T15140] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 945.453458][T15146] ------------[ cut here ]------------ | [ 945.453675][T15146] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15146 | [ 945.454791][T15146] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.455984][T15146] Tainted: [W]=WARN [ 945.456219][T15146] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.456533][T15146] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.456815][T15146] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.457457][T15146] RSP: 0018:ffa0000003f975d0 EFLAGS: 00010286 [ 945.457745][T15146] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea05a7 [ 945.458079][T15146] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502d38 [ 945.458336][T15146] RBP: 1ff40000007f2ebb R08: 1fe2200001ea05a8 R09: fffa3bfffffb0b24 [ 945.458597][T15146] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502074 [ 945.458859][T15146] R13: ff1100000f502040 R14: ffffffff931c7940 R15: ff1100000f502c80 [ 945.459138][T15146] FS: 00007f1255e3a440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 945.459453][T15146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.459686][T15146] CR2: 000000000044f720 CR3: 000000001958a003 CR4: 0000000000771ef0 [ 945.459963][T15146] PKRU: 55555554 [ 945.460120][T15146] Call Trace: [ 945.460273][T15146] [ 945.460403][T15146] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.460588][T15146] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.460784][T15146] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.460984][T15146] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.461180][T15146] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.461380][T15146] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.461568][T15146] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.461768][T15146] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.461980][T15146] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.462178][T15146] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.462383][T15146] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.462579][T15146] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.462784][T15146] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.462987][T15146] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.463184][T15146] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.463393][T15146] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.463581][T15146] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.463769][T15146] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.463969][T15146] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.464159][T15146] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.464347][T15146] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.464543][T15146] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.464729][T15146] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.464960][T15146] ? move_addr_to_kernel (net/socket.c:2511) [ 945.465148][T15146] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.465423][T15146] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.465616][T15146] ___sys_sendmsg (net/socket.c:2641) [ 945.465803][T15146] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.466096][T15146] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.466289][T15146] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.466487][T15146] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.466705][T15146] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.466927][T15146] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.467127][T15146] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.467332][T15146] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.467536][T15146] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.467731][T15146] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.468024][T15146] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.468254][T15146] RIP: 0033:0x7f1255f94c5e [ 945.468468][T15146] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.469132][T15146] RSP: 002b:00007fffbb462d50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.469488][T15146] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1255f94c5e [ 945.469807][T15146] RDX: 0000000000000000 RSI: 00007fffbb462e10 RDI: 0000000000000005 [ 945.470090][T15146] RBP: 00007fffbb462d60 R08: 0000000000000000 R09: 0000000000000000 [ 945.470444][T15146] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.470713][T15146] R13: 0000000069cbe7f8 R14: 0000000000000004 R15: 000000000049d620 | [ 945.547144][T15150] ------------[ cut here ]------------ | [ 945.547358][T15150] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15150 | [ 945.547677][T15150] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.548567][T15150] Tainted: [W]=WARN [ 945.548752][T15150] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.549027][T15150] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.549253][T15150] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.549831][T15150] RSP: 0018:ffa0000003ea75d0 EFLAGS: 00010286 [ 945.550099][T15150] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b67 [ 945.550400][T15150] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 945.550706][T15150] RBP: 1ff40000007d4ebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b24 [ 945.551010][T15150] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d574 [ 945.551270][T15150] R13: ff1100001b78d540 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 945.551578][T15150] FS: 00007fd87cc8a440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 945.551936][T15150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.552179][T15150] CR2: 000000000044f720 CR3: 000000001958a006 CR4: 0000000000771ef0 [ 945.552496][T15150] PKRU: 55555554 [ 945.552650][T15150] Call Trace: [ 945.552811][T15150] [ 945.552946][T15150] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.553134][T15150] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.553332][T15150] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.553539][T15150] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.553744][T15150] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.553951][T15150] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.554140][T15150] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.554332][T15150] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.554526][T15150] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.554714][T15150] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.554918][T15150] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.555102][T15150] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.555309][T15150] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.555522][T15150] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.555718][T15150] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.555928][T15150] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.556126][T15150] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.556314][T15150] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.556513][T15150] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.556711][T15150] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.556915][T15150] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.557120][T15150] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.557360][T15150] ? move_addr_to_kernel (net/socket.c:2511) [ 945.557580][T15150] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.557783][T15150] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.558023][T15150] ___sys_sendmsg (net/socket.c:2641) [ 945.558230][T15150] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.558449][T15150] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.558664][T15150] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.558870][T15150] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.559093][T15150] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.559309][T15150] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.559530][T15150] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.559744][T15150] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.559963][T15150] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.560170][T15150] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.560364][T15150] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.560615][T15150] RIP: 0033:0x7fd87cde4c5e [ 945.560843][T15150] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.561491][T15150] RSP: 002b:00007fff784d0010 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.561821][T15150] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd87cde4c5e [ 945.562154][T15150] RDX: 0000000000000000 RSI: 00007fff784d00d0 RDI: 0000000000000005 [ 945.562474][T15150] RBP: 00007fff784d0020 R08: 0000000000000000 R09: 0000000000000000 [ 945.562773][T15150] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.563060][T15150] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 945.644207][T15156] ------------[ cut here ]------------ | [ 945.644386][T15156] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15156 | [ 945.644626][T15156] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.645598][T15156] Tainted: [W]=WARN [ 945.645741][T15156] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.645935][T15156] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.646088][T15156] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.646717][T15156] RSP: 0018:ffa0000003ef75d0 EFLAGS: 00010286 [ 945.646901][T15156] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1a17 [ 945.647134][T15156] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d0b8 [ 945.647447][T15156] RBP: 1ff40000007deebb R08: 1fe22000036f1a18 R09: fffa3bfffffb0b24 [ 945.647668][T15156] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d734 [ 945.647880][T15156] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78d000 [ 945.648632][T15156] FS: 00007f9c24ba2440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 945.648989][T15156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.649161][T15156] CR2: 000000000044f720 CR3: 000000001b16c003 CR4: 0000000000771ef0 [ 945.649377][T15156] PKRU: 55555554 [ 945.649540][T15156] Call Trace: [ 945.649641][T15156] [ 945.649711][T15156] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.649846][T15156] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.650008][T15156] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.650151][T15156] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.650290][T15156] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.650432][T15156] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.650570][T15156] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.650709][T15156] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.650851][T15156] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.650992][T15156] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.651144][T15156] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.651277][T15156] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.651418][T15156] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.651575][T15156] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.651716][T15156] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.651855][T15156] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.652003][T15156] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.652140][T15156] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.652278][T15156] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.652422][T15156] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.652560][T15156] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.652696][T15156] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.652834][T15156] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.653006][T15156] ? move_addr_to_kernel (net/socket.c:2511) [ 945.653144][T15156] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.653281][T15156] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.653420][T15156] ___sys_sendmsg (net/socket.c:2641) [ 945.653554][T15156] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.653693][T15156] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.653828][T15156] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.653974][T15156] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.654108][T15156] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.654252][T15156] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.654395][T15156] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.654529][T15156] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.654663][T15156] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.654810][T15156] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.654948][T15156] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.655113][T15156] RIP: 0033:0x7f9c24cfcc5e [ 945.655255][T15156] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.655819][T15156] RSP: 002b:00007ffc7ca4e490 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.656044][T15156] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9c24cfcc5e [ 945.656252][T15156] RDX: 0000000000000000 RSI: 00007ffc7ca4e550 RDI: 0000000000000005 [ 945.656459][T15156] RBP: 00007ffc7ca4e4a0 R08: 0000000000000000 R09: 0000000000000000 [ 945.656657][T15156] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.656874][T15156] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 945.740257][T15160] ------------[ cut here ]------------ | [ 945.740491][T15160] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15160 | [ 945.740822][T15160] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.741768][T15160] Tainted: [W]=WARN [ 945.741939][T15160] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.742165][T15160] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.742369][T15160] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.743174][T15160] RSP: 0018:ffa0000003f875d0 EFLAGS: 00010286 [ 945.743438][T15160] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000372581f [ 945.743691][T15160] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c0f8 [ 945.743948][T15160] RBP: 1ff40000007f0ebb R08: 1fe2200003725820 R09: fffa3bfffffb0b24 [ 945.744254][T15160] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92c5b4 [ 945.744560][T15160] R13: ff1100001b92c580 R14: ffffffff931c7940 R15: ff1100001b92c040 [ 945.744825][T15160] FS: 00007f059957f440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 945.745126][T15160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.745459][T15160] CR2: 000000000044f720 CR3: 000000001c0e2004 CR4: 0000000000771ef0 [ 945.745728][T15160] PKRU: 55555554 [ 945.745882][T15160] Call Trace: [ 945.746046][T15160] [ 945.746166][T15160] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.746378][T15160] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.746607][T15160] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.746821][T15160] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.747047][T15160] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.747255][T15160] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.747459][T15160] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.747673][T15160] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.747912][T15160] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.748124][T15160] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.748320][T15160] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.748531][T15160] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.748718][T15160] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.748919][T15160] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.749103][T15160] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.749291][T15160] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.749487][T15160] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.749697][T15160] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.749886][T15160] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.750086][T15160] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.750285][T15160] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.750487][T15160] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.750680][T15160] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.750915][T15160] ? move_addr_to_kernel (net/socket.c:2511) [ 945.751110][T15160] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.751300][T15160] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.751505][T15160] ___sys_sendmsg (net/socket.c:2641) [ 945.751698][T15160] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.751907][T15160] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.752103][T15160] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.752299][T15160] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.752497][T15160] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.752699][T15160] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.752894][T15160] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.753109][T15160] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.753301][T15160] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.753501][T15160] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.753703][T15160] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.753949][T15160] RIP: 0033:0x7f05996d9c5e [ 945.754164][T15160] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.754724][T15160] RSP: 002b:00007ffffd9f4b00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.755000][T15160] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f05996d9c5e [ 945.755263][T15160] RDX: 0000000000000000 RSI: 00007ffffd9f4bc0 RDI: 0000000000000005 [ 945.755550][T15160] RBP: 00007ffffd9f4b10 R08: 0000000000000000 R09: 0000000000000000 [ 945.755798][T15160] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.756064][T15160] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 945.838886][T15166] ------------[ cut here ]------------ | [ 945.839082][T15166] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15166 | [ 945.839336][T15166] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.840185][T15166] Tainted: [W]=WARN [ 945.840295][T15166] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.840477][T15166] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.840624][T15166] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.841741][T15166] RSP: 0018:ffa0000003fe75d0 EFLAGS: 00010286 [ 945.841930][T15166] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725a4f [ 945.842140][T15166] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d278 [ 945.842366][T15166] RBP: 1ff40000007fcebb R08: 1fe2200003725a50 R09: fffa3bfffffb0b24 [ 945.842588][T15166] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92d3b4 [ 945.842800][T15166] R13: ff1100001b92d380 R14: ffffffff931c7940 R15: ff1100001b92d1c0 [ 945.843013][T15166] FS: 00007f497b597440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 945.843258][T15166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.843447][T15166] CR2: 000000000044f720 CR3: 000000001c0e2006 CR4: 0000000000771ef0 [ 945.843667][T15166] PKRU: 55555554 [ 945.843774][T15166] Call Trace: [ 945.843880][T15166] [ 945.843959][T15166] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.844101][T15166] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.844251][T15166] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.844400][T15166] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.844535][T15166] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.844672][T15166] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.844806][T15166] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.844942][T15166] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.845074][T15166] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.845213][T15166] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.845375][T15166] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.845526][T15166] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.845674][T15166] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.845818][T15166] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.845971][T15166] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.846115][T15166] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.846263][T15166] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.846407][T15166] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.846544][T15166] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.846682][T15166] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.846821][T15166] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.846973][T15166] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.847111][T15166] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.847290][T15166] ? move_addr_to_kernel (net/socket.c:2511) [ 945.847434][T15166] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.847568][T15166] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.847704][T15166] ___sys_sendmsg (net/socket.c:2641) [ 945.847841][T15166] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.847982][T15166] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.848119][T15166] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.848255][T15166] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.848395][T15166] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.848533][T15166] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.848666][T15166] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.848800][T15166] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.848939][T15166] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.849075][T15166] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.849220][T15166] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.849394][T15166] RIP: 0033:0x7f497b6f1c5e [ 945.849552][T15166] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.850043][T15166] RSP: 002b:00007fff2a222500 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.850253][T15166] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f497b6f1c5e [ 945.850463][T15166] RDX: 0000000000000000 RSI: 00007fff2a2225c0 RDI: 0000000000000005 [ 945.850665][T15166] RBP: 00007fff2a222510 R08: 0000000000000000 R09: 0000000000000000 [ 945.850866][T15166] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.851072][T15166] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 945.913454][T15170] ------------[ cut here ]------------ | [ 945.913623][T15170] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15170 | [ 945.913865][T15170] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 945.914698][T15170] Tainted: [W]=WARN [ 945.914808][T15170] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 945.914990][T15170] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 945.915144][T15170] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 945.915662][T15170] RSP: 0018:ffa0000003ff75d0 EFLAGS: 00010286 [ 945.915841][T15170] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003875137 [ 945.916067][T15170] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a89b8 [ 945.916281][T15170] RBP: 1ff40000007feebb R08: 1fe2200003875138 R09: fffa3bfffffb0b24 [ 945.916498][T15170] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9574 [ 945.916710][T15170] R13: ff1100001c3a9540 R14: ffffffff931c7940 R15: ff1100001c3a8900 [ 945.916931][T15170] FS: 00007f4e0ee84440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 945.917180][T15170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.917362][T15170] CR2: 000000000044f720 CR3: 000000000dba8003 CR4: 0000000000771ef0 [ 945.917582][T15170] PKRU: 55555554 [ 945.917698][T15170] Call Trace: [ 945.917801][T15170] [ 945.917884][T15170] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 945.918028][T15170] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 945.918171][T15170] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 945.918312][T15170] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.918462][T15170] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.918614][T15170] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 945.918751][T15170] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 945.918904][T15170] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 945.919044][T15170] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 945.919180][T15170] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 945.919328][T15170] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 945.919471][T15170] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 945.919611][T15170] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 945.919750][T15170] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 945.919882][T15170] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 945.920026][T15170] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 945.920161][T15170] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.920298][T15170] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 945.920438][T15170] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 945.920576][T15170] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 945.920714][T15170] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 945.920854][T15170] ? copy_msghdr_from_user (net/socket.c:2525) [ 945.921002][T15170] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 945.921180][T15170] ? move_addr_to_kernel (net/socket.c:2511) [ 945.921332][T15170] ? filemap_map_folio_range (mm/filemap.c:3873) [ 945.921482][T15170] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 945.921630][T15170] ___sys_sendmsg (net/socket.c:2641) [ 945.921773][T15170] ? copy_msghdr_from_user (net/socket.c:2628) [ 945.921930][T15170] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 945.922069][T15170] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 945.922206][T15170] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 945.922347][T15170] ? __sys_sendmsg_sock (net/socket.c:2656) [ 945.922498][T15170] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 945.922635][T15170] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.922772][T15170] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 945.922911][T15170] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 945.923044][T15170] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 945.923185][T15170] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 945.923350][T15170] RIP: 0033:0x7f4e0efdec5e [ 945.923502][T15170] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 945.923991][T15170] RSP: 002b:00007ffd06abedf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 945.924206][T15170] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4e0efdec5e [ 945.924417][T15170] RDX: 0000000000000000 RSI: 00007ffd06abeeb0 RDI: 0000000000000005 [ 945.924620][T15170] RBP: 00007ffd06abee00 R08: 0000000000000000 R09: 0000000000000000 [ 945.924838][T15170] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 945.925060][T15170] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 946.003093][T15176] ------------[ cut here ]------------ | [ 946.003265][T15176] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15176 | [ 946.003561][T15176] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.004417][T15176] Tainted: [W]=WARN [ 946.004531][T15176] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.004717][T15176] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.004879][T15176] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.005568][T15176] RSP: 0018:ffa0000003fe75d0 EFLAGS: 00010286 [ 946.005765][T15176] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038750c7 [ 946.005982][T15176] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8638 [ 946.006194][T15176] RBP: 1ff40000007fcebb R08: 1fe22000038750c8 R09: fffa3bfffffb0b24 [ 946.006422][T15176] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9e34 [ 946.006635][T15176] R13: ff1100001c3a9e00 R14: ffffffff931c7940 R15: ff1100001c3a8580 [ 946.006864][T15176] FS: 00007f65a8d44440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 946.007317][T15176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.007503][T15176] CR2: 000000000044f720 CR3: 000000001cfe3001 CR4: 0000000000771ef0 [ 946.007715][T15176] PKRU: 55555554 [ 946.007837][T15176] Call Trace: [ 946.007958][T15176] [ 946.008053][T15176] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.008202][T15176] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.008346][T15176] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.008485][T15176] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.008618][T15176] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.008757][T15176] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.009401][T15176] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.009546][T15176] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.009687][T15176] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.009822][T15176] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.009969][T15176] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.010104][T15176] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.010239][T15176] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.010385][T15176] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.010588][T15176] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.010729][T15176] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.010886][T15176] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.011038][T15176] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.011177][T15176] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.011318][T15176] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.011466][T15176] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.011612][T15176] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.011744][T15176] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.011918][T15176] ? move_addr_to_kernel (net/socket.c:2511) [ 946.012162][T15176] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.012319][T15176] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.012463][T15176] ___sys_sendmsg (net/socket.c:2641) [ 946.012604][T15176] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.012749][T15176] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.012905][T15176] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.013052][T15176] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.013191][T15176] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.013333][T15176] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.013478][T15176] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.013618][T15176] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.013759][T15176] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.013911][T15176] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.014057][T15176] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.014234][T15176] RIP: 0033:0x7f65a8e9ec5e [ 946.014385][T15176] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.014902][T15176] RSP: 002b:00007ffcc9ea86d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.015117][T15176] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f65a8e9ec5e [ 946.015329][T15176] RDX: 0000000000000000 RSI: 00007ffcc9ea8790 RDI: 0000000000000005 [ 946.015551][T15176] RBP: 00007ffcc9ea86e0 R08: 0000000000000000 R09: 0000000000000000 [ 946.015757][T15176] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.016178][T15176] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 946.097623][T15180] ------------[ cut here ]------------ | [ 946.098268][T15180] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15180 | [ 946.098520][T15180] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.099393][T15180] Tainted: [W]=WARN [ 946.099501][T15180] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.099672][T15180] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.099821][T15180] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.100409][T15180] RSP: 0018:ffa0000003fe75d0 EFLAGS: 00010286 [ 946.100592][T15180] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e88f [ 946.100800][T15180] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974478 [ 946.101073][T15180] RBP: 1ff40000007fcebb R08: 1fe220000192e890 R09: fffa3bfffffb0b24 [ 946.101296][T15180] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974074 [ 946.101558][T15180] R13: ff1100000c974040 R14: ffffffff931c7940 R15: ff1100000c9743c0 [ 946.101775][T15180] FS: 00007fefafbe0440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 946.102037][T15180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.102219][T15180] CR2: 000000000044f720 CR3: 000000001b6df004 CR4: 0000000000771ef0 [ 946.102436][T15180] PKRU: 55555554 [ 946.102544][T15180] Call Trace: [ 946.102667][T15180] [ 946.102744][T15180] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.102886][T15180] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.103042][T15180] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.103182][T15180] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.103331][T15180] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.103475][T15180] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.103608][T15180] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.103742][T15180] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.103882][T15180] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.104023][T15180] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.104182][T15180] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.104322][T15180] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.104493][T15180] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.104671][T15180] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.104811][T15180] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.104959][T15180] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.105232][T15180] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.105610][T15180] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.105752][T15180] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.105914][T15180] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.106138][T15180] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.106303][T15180] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.106505][T15180] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.106689][T15180] ? move_addr_to_kernel (net/socket.c:2511) [ 946.106839][T15180] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.106995][T15180] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.107140][T15180] ___sys_sendmsg (net/socket.c:2641) [ 946.107286][T15180] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.107437][T15180] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.107574][T15180] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.107717][T15180] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.107871][T15180] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.108098][T15180] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.108231][T15180] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.108409][T15180] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.108551][T15180] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.108691][T15180] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.108849][T15180] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.109022][T15180] RIP: 0033:0x7fefafd3ac5e [ 946.109172][T15180] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.109762][T15180] RSP: 002b:00007ffca07e1550 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.109993][T15180] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fefafd3ac5e [ 946.110239][T15180] RDX: 0000000000000000 RSI: 00007ffca07e1610 RDI: 0000000000000005 [ 946.110464][T15180] RBP: 00007ffca07e1560 R08: 0000000000000000 R09: 0000000000000000 [ 946.110725][T15180] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.111012][T15180] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 946.185119][T15186] ------------[ cut here ]------------ | [ 946.185336][T15186] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15186 | [ 946.185653][T15186] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.186598][T15186] Tainted: [W]=WARN [ 946.186757][T15186] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.187320][T15186] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.187525][T15186] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.188098][T15186] RSP: 0018:ffa00000040375d0 EFLAGS: 00010286 [ 946.188334][T15186] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192e8c7 [ 946.188596][T15186] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974638 [ 946.188847][T15186] RBP: 1ff4000000806ebb R08: 1fe220000192e8c8 R09: fffa3bfffffb0b24 [ 946.189115][T15186] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975ab4 [ 946.189366][T15186] R13: ff1100000c975a80 R14: ffffffff931c7940 R15: ff1100000c974580 [ 946.189633][T15186] FS: 00007f98a382a440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 946.189958][T15186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.190214][T15186] CR2: 000000000044f720 CR3: 000000000900a006 CR4: 0000000000771ef0 [ 946.190513][T15186] PKRU: 55555554 [ 946.190682][T15186] Call Trace: [ 946.190837][T15186] [ 946.190973][T15186] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.191184][T15186] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.191409][T15186] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.191609][T15186] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.191797][T15186] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.192008][T15186] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.192197][T15186] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.192397][T15186] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.192591][T15186] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.192782][T15186] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.192986][T15186] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.193176][T15186] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.193379][T15186] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.193576][T15186] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.193765][T15186] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.193971][T15186] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.194163][T15186] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.194357][T15186] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.194558][T15186] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.194751][T15186] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.194963][T15186] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.195172][T15186] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.195426][T15186] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.195667][T15186] ? move_addr_to_kernel (net/socket.c:2511) [ 946.195866][T15186] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.196066][T15186] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.196256][T15186] ___sys_sendmsg (net/socket.c:2641) [ 946.196461][T15186] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.196660][T15186] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.196858][T15186] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.197057][T15186] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.197245][T15186] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.197442][T15186] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.197626][T15186] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.197812][T15186] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.198014][T15186] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.198200][T15186] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.198393][T15186] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.198611][T15186] RIP: 0033:0x7f98a3984c5e [ 946.198802][T15186] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.199361][T15186] RSP: 002b:00007fff81060ce0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.199621][T15186] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f98a3984c5e [ 946.199872][T15186] RDX: 0000000000000000 RSI: 00007fff81060da0 RDI: 0000000000000005 [ 946.200135][T15186] RBP: 00007fff81060cf0 R08: 0000000000000000 R09: 0000000000000000 [ 946.200394][T15186] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.200645][T15186] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 946.292642][T15190] ------------[ cut here ]------------ | [ 946.292817][T15190] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15190 | [ 946.293071][T15190] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.293874][T15190] Tainted: [W]=WARN [ 946.293990][T15190] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.294168][T15190] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.294316][T15190] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.294849][T15190] RSP: 0018:ffa00000040075d0 EFLAGS: 00010286 [ 946.295030][T15190] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229ef7 [ 946.295245][T15190] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914f7b8 [ 946.295459][T15190] RBP: 1ff4000000800ebb R08: 1fe2200003229ef8 R09: fffa3bfffffb0b24 [ 946.295659][T15190] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f574 [ 946.295865][T15190] R13: ff1100001914f540 R14: ffffffff931c7940 R15: ff1100001914f700 [ 946.296078][T15190] FS: 00007f0681cff440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 946.296333][T15190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.296508][T15190] CR2: 000000000044f720 CR3: 000000001c9b8002 CR4: 0000000000771ef0 [ 946.296709][T15190] PKRU: 55555554 [ 946.296813][T15190] Call Trace: [ 946.296919][T15190] [ 946.296998][T15190] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.297143][T15190] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.297293][T15190] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.297439][T15190] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.297581][T15190] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.297725][T15190] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.297864][T15190] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.298010][T15190] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.298152][T15190] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.298293][T15190] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.298440][T15190] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.298590][T15190] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.298729][T15190] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.298866][T15190] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.299014][T15190] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.299155][T15190] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.299297][T15190] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.299443][T15190] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.299589][T15190] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.299729][T15190] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.299874][T15190] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.300029][T15190] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.300178][T15190] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.300361][T15190] ? move_addr_to_kernel (net/socket.c:2511) [ 946.300511][T15190] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.300646][T15190] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.300783][T15190] ___sys_sendmsg (net/socket.c:2641) [ 946.300925][T15190] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.301064][T15190] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.301201][T15190] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.301345][T15190] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.301490][T15190] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.301639][T15190] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.301775][T15190] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.301929][T15190] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.302076][T15190] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.302208][T15190] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.302341][T15190] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.302509][T15190] RIP: 0033:0x7f0681e59c5e [ 946.302649][T15190] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.303134][T15190] RSP: 002b:00007ffffd6ea930 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.303340][T15190] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0681e59c5e [ 946.303545][T15190] RDX: 0000000000000000 RSI: 00007ffffd6ea9f0 RDI: 0000000000000005 [ 946.303748][T15190] RBP: 00007ffffd6ea940 R08: 0000000000000000 R09: 0000000000000000 [ 946.303955][T15190] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.304156][T15190] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 946.364064][T15196] ------------[ cut here ]------------ | [ 946.364270][T15196] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15196 | [ 946.364568][T15196] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.365511][T15196] Tainted: [W]=WARN [ 946.365664][T15196] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.366318][T15196] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.366533][T15196] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.367133][T15196] RSP: 0018:ffa00000040675d0 EFLAGS: 00010286 [ 946.367357][T15196] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229f9f [ 946.367613][T15196] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914fcf8 [ 946.367867][T15196] RBP: 1ff400000080cebb R08: 1fe2200003229fa0 R09: fffa3bfffffb0b24 [ 946.368135][T15196] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914ee74 [ 946.368411][T15196] R13: ff1100001914ee40 R14: ffffffff931c7940 R15: ff1100001914fc40 [ 946.368696][T15196] FS: 00007fc3b42e6440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 946.369061][T15196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.369293][T15196] CR2: 000000000044f720 CR3: 000000001b7f2004 CR4: 0000000000771ef0 [ 946.369559][T15196] PKRU: 55555554 [ 946.369714][T15196] Call Trace: [ 946.369869][T15196] [ 946.370005][T15196] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.370195][T15196] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.370406][T15196] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.370603][T15196] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.370811][T15196] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.371031][T15196] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.371234][T15196] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.371451][T15196] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.371642][T15196] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.371841][T15196] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.372066][T15196] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.372268][T15196] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.372480][T15196] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.372683][T15196] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.372880][T15196] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.373107][T15196] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.373310][T15196] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.373516][T15196] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.373707][T15196] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.373915][T15196] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.374114][T15196] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.374318][T15196] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.374527][T15196] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.374750][T15196] ? move_addr_to_kernel (net/socket.c:2511) [ 946.374953][T15196] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.375146][T15196] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.375339][T15196] ___sys_sendmsg (net/socket.c:2641) [ 946.375536][T15196] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.375732][T15196] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.375936][T15196] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.376131][T15196] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.376321][T15196] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.376584][T15196] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.376770][T15196] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.376970][T15196] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.377166][T15196] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.377364][T15196] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.377574][T15196] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.377801][T15196] RIP: 0033:0x7fc3b4440c5e [ 946.378016][T15196] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.378584][T15196] RSP: 002b:00007ffc8e0bdcf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.378856][T15196] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc3b4440c5e [ 946.379142][T15196] RDX: 0000000000000000 RSI: 00007ffc8e0bddb0 RDI: 0000000000000005 [ 946.379405][T15196] RBP: 00007ffc8e0bdd00 R08: 0000000000000000 R09: 0000000000000000 [ 946.379665][T15196] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.379935][T15196] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 946.462943][T15200] ------------[ cut here ]------------ | [ 946.463119][T15200] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15200 | [ 946.463392][T15200] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.464183][T15200] Tainted: [W]=WARN [ 946.464285][T15200] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.464474][T15200] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.464627][T15200] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.465222][T15200] RSP: 0018:ffa00000040775d0 EFLAGS: 00010286 [ 946.465407][T15200] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c208f [ 946.465619][T15200] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610478 [ 946.465836][T15200] RBP: 1ff400000080eebb R08: 1fe22000034c2090 R09: fffa3bfffffb0b24 [ 946.466110][T15200] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914f3b4 [ 946.466317][T15200] R13: ff1100001914f380 R14: ffffffff931c7940 R15: ff1100001a6103c0 [ 946.466552][T15200] FS: 00007f2a8422c440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 946.466799][T15200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.467039][T15200] CR2: 000000000044f720 CR3: 000000001d056003 CR4: 0000000000771ef0 [ 946.467255][T15200] PKRU: 55555554 [ 946.467360][T15200] Call Trace: [ 946.467478][T15200] [ 946.467550][T15200] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.467697][T15200] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.467840][T15200] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.468079][T15200] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.468218][T15200] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.468366][T15200] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.468533][T15200] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.468685][T15200] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.468819][T15200] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.469014][T15200] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.469151][T15200] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.469321][T15200] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.469497][T15200] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.469633][T15200] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.469774][T15200] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.470011][T15200] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.470167][T15200] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.470328][T15200] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.470482][T15200] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.470626][T15200] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.470775][T15200] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.470931][T15200] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.471073][T15200] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.471255][T15200] ? move_addr_to_kernel (net/socket.c:2511) [ 946.471405][T15200] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.471554][T15200] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.471695][T15200] ___sys_sendmsg (net/socket.c:2641) [ 946.471837][T15200] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.471994][T15200] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.472139][T15200] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.472286][T15200] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.472435][T15200] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.472588][T15200] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.472736][T15200] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.472887][T15200] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.473055][T15200] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.473211][T15200] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.473356][T15200] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.473540][T15200] RIP: 0033:0x7f2a84386c5e [ 946.473721][T15200] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.474245][T15200] RSP: 002b:00007ffc6d27d7d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.474481][T15200] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2a84386c5e [ 946.474708][T15200] RDX: 0000000000000000 RSI: 00007ffc6d27d890 RDI: 0000000000000005 [ 946.474941][T15200] RBP: 00007ffc6d27d7e0 R08: 0000000000000000 R09: 0000000000000000 [ 946.475163][T15200] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.475392][T15200] R13: 0000000069cbe7f9 R14: 0000000000000004 R15: 000000000049d620 | [ 946.564414][T15206] ------------[ cut here ]------------ | [ 946.564611][T15206] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15206 | [ 946.564871][T15206] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.565821][T15206] Tainted: [W]=WARN [ 946.565938][T15206] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.566335][T15206] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.566484][T15206] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.567043][T15206] RSP: 0018:ffa0000003fe75d0 EFLAGS: 00010286 [ 946.567258][T15206] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c2287 [ 946.567569][T15206] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611438 [ 946.567792][T15206] RBP: 1ff40000007fcebb R08: 1fe22000034c2288 R09: fffa3bfffffb0b24 [ 946.568024][T15206] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610074 [ 946.568230][T15206] R13: ff1100001a610040 R14: ffffffff931c7940 R15: ff1100001a611380 [ 946.568449][T15206] FS: 00007fba5a651440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 946.568690][T15206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.568867][T15206] CR2: 000000000044f720 CR3: 0000000010b76002 CR4: 0000000000771ef0 [ 946.569076][T15206] PKRU: 55555554 [ 946.569223][T15206] Call Trace: [ 946.569330][T15206] [ 946.569407][T15206] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.569543][T15206] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.569687][T15206] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.569821][T15206] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.569965][T15206] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.570104][T15206] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.570238][T15206] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.570378][T15206] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.570513][T15206] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.570826][T15206] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.571032][T15206] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.571169][T15206] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.571304][T15206] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.571446][T15206] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.571578][T15206] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.571712][T15206] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.571845][T15206] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.572042][T15206] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.572176][T15206] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.572311][T15206] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.572455][T15206] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.572588][T15206] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.572723][T15206] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.572982][T15206] ? move_addr_to_kernel (net/socket.c:2511) [ 946.573140][T15206] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.573295][T15206] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.573453][T15206] ___sys_sendmsg (net/socket.c:2641) [ 946.573604][T15206] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.573747][T15206] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.573885][T15206] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.574106][T15206] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.574260][T15206] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.574429][T15206] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.574592][T15206] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.574732][T15206] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.574871][T15206] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.575070][T15206] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.575204][T15206] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.575375][T15206] RIP: 0033:0x7fba5a7abc5e [ 946.575528][T15206] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.576135][T15206] RSP: 002b:00007ffe4faea800 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.576353][T15206] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fba5a7abc5e [ 946.576567][T15206] RDX: 0000000000000000 RSI: 00007ffe4faea8c0 RDI: 0000000000000005 [ 946.576776][T15206] RBP: 00007ffe4faea810 R08: 0000000000000000 R09: 0000000000000000 [ 946.577047][T15206] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.577255][T15206] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 946.636628][T15210] ------------[ cut here ]------------ | [ 946.636807][T15210] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15210 | [ 946.637422][T15210] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.638240][T15210] Tainted: [W]=WARN [ 946.638345][T15210] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.638524][T15210] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.638672][T15210] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.639174][T15210] RSP: 0018:ffa00000040575d0 EFLAGS: 00010286 [ 946.639354][T15210] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c21df [ 946.639566][T15210] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610ef8 [ 946.639773][T15210] RBP: 1ff400000080aebb R08: 1fe22000034c21e0 R09: fffa3bfffffb0b24 [ 946.639989][T15210] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610cb4 [ 946.640189][T15210] R13: ff1100001a610c80 R14: ffffffff931c7940 R15: ff1100001a610e40 [ 946.640390][T15210] FS: 00007ff4830a7440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 946.640625][T15210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.640795][T15210] CR2: 000000000044f720 CR3: 000000001a20a005 CR4: 0000000000771ef0 [ 946.641008][T15210] PKRU: 55555554 [ 946.641113][T15210] Call Trace: [ 946.641217][T15210] [ 946.641289][T15210] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.641436][T15210] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.641583][T15210] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.641723][T15210] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.641861][T15210] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.642012][T15210] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.642151][T15210] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.642291][T15210] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.642435][T15210] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.642578][T15210] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.642720][T15210] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.642865][T15210] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.643010][T15210] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.643150][T15210] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.643293][T15210] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.643445][T15210] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.643594][T15210] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.643740][T15210] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.643891][T15210] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.644040][T15210] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.644181][T15210] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.644330][T15210] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.644475][T15210] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.644645][T15210] ? move_addr_to_kernel (net/socket.c:2511) [ 946.644789][T15210] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.644937][T15210] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.645079][T15210] ___sys_sendmsg (net/socket.c:2641) [ 946.645218][T15210] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.645360][T15210] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.645505][T15210] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.645646][T15210] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.645783][T15210] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.645930][T15210] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.646069][T15210] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.646211][T15210] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.646352][T15210] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.646496][T15210] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.646634][T15210] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.646806][T15210] RIP: 0033:0x7ff483201c5e [ 946.646958][T15210] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.647459][T15210] RSP: 002b:00007ffec12972a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.647677][T15210] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff483201c5e [ 946.647887][T15210] RDX: 0000000000000000 RSI: 00007ffec1297360 RDI: 0000000000000005 [ 946.648112][T15210] RBP: 00007ffec12972b0 R08: 0000000000000000 R09: 0000000000000000 [ 946.648324][T15210] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.648531][T15210] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 946.727912][T15216] ------------[ cut here ]------------ | [ 946.728104][T15216] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15216 | [ 946.728358][T15216] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.729212][T15216] Tainted: [W]=WARN [ 946.729323][T15216] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.729527][T15216] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.729675][T15216] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.730194][T15216] RSP: 0018:ffa00000040475d0 EFLAGS: 00010286 [ 946.730379][T15216] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea079f [ 946.730636][T15216] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503cf8 [ 946.730846][T15216] RBP: 1ff4000000808ebb R08: 1fe2200001ea07a0 R09: fffa3bfffffb0b24 [ 946.731060][T15216] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5038f4 [ 946.731313][T15216] R13: ff1100000f5038c0 R14: ffffffff931c7940 R15: ff1100000f503c40 [ 946.731527][T15216] FS: 00007fc3235b5440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 946.731779][T15216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.732010][T15216] CR2: 000000000044f720 CR3: 000000001bc79002 CR4: 0000000000771ef0 [ 946.732233][T15216] PKRU: 55555554 [ 946.732343][T15216] Call Trace: [ 946.732462][T15216] [ 946.732531][T15216] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.732669][T15216] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.732826][T15216] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.732986][T15216] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.733119][T15216] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.733265][T15216] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.733409][T15216] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.733564][T15216] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.733714][T15216] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.733858][T15216] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.734016][T15216] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.734165][T15216] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.734306][T15216] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.734448][T15216] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.734588][T15216] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.734727][T15216] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.734880][T15216] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.735601][T15216] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.735749][T15216] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.735890][T15216] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.736037][T15216] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.736169][T15216] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.736308][T15216] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.736485][T15216] ? move_addr_to_kernel (net/socket.c:2511) [ 946.736627][T15216] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.736768][T15216] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.736911][T15216] ___sys_sendmsg (net/socket.c:2641) [ 946.737046][T15216] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.737184][T15216] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.737319][T15216] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.737459][T15216] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.737591][T15216] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.737726][T15216] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.737869][T15216] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.738013][T15216] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.738173][T15216] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.738322][T15216] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.738462][T15216] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.738639][T15216] RIP: 0033:0x7fc32370fc5e [ 946.738791][T15216] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.739305][T15216] RSP: 002b:00007ffd5bbae530 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.739527][T15216] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc32370fc5e [ 946.739743][T15216] RDX: 0000000000000000 RSI: 00007ffd5bbae5f0 RDI: 0000000000000005 [ 946.739966][T15216] RBP: 00007ffd5bbae540 R08: 0000000000000000 R09: 0000000000000000 [ 946.740178][T15216] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.740388][T15216] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 946.818197][T15220] ------------[ cut here ]------------ | [ 946.818385][T15220] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15220 | [ 946.818657][T15220] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.819828][T15220] Tainted: [W]=WARN [ 946.819966][T15220] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.820166][T15220] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.820351][T15220] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.820874][T15220] RSP: 0018:ffa00000040875d0 EFLAGS: 00010286 [ 946.821086][T15220] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea06f7 [ 946.821342][T15220] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5037b8 [ 946.821577][T15220] RBP: 1ff4000000810ebb R08: 1fe2200001ea06f8 R09: fffa3bfffffb0b24 [ 946.821784][T15220] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f5025b4 [ 946.822016][T15220] R13: ff1100000f502580 R14: ffffffff931c7940 R15: ff1100000f503700 [ 946.822271][T15220] FS: 00007eff50da0440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 946.822558][T15220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.822732][T15220] CR2: 000000000044f720 CR3: 000000001c52d004 CR4: 0000000000771ef0 [ 946.822985][T15220] PKRU: 55555554 [ 946.823106][T15220] Call Trace: [ 946.823231][T15220] [ 946.823303][T15220] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.823462][T15220] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.823615][T15220] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.823777][T15220] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.823921][T15220] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.824058][T15220] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.824192][T15220] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.824327][T15220] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.824468][T15220] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.824633][T15220] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.824806][T15220] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.824947][T15220] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.825084][T15220] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.825245][T15220] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.825390][T15220] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.825525][T15220] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.825674][T15220] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.825810][T15220] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.825948][T15220] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.826082][T15220] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.826219][T15220] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.826354][T15220] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.826507][T15220] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.826687][T15220] ? move_addr_to_kernel (net/socket.c:2511) [ 946.826822][T15220] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.826963][T15220] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.827098][T15220] ___sys_sendmsg (net/socket.c:2641) [ 946.827232][T15220] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.827374][T15220] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.827511][T15220] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.827659][T15220] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.827807][T15220] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.827952][T15220] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.828085][T15220] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.828218][T15220] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.828357][T15220] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.828495][T15220] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.828643][T15220] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.828809][T15220] RIP: 0033:0x7eff50efac5e [ 946.828966][T15220] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.829491][T15220] RSP: 002b:00007ffd347a7570 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.829691][T15220] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007eff50efac5e [ 946.829899][T15220] RDX: 0000000000000000 RSI: 00007ffd347a7630 RDI: 0000000000000005 [ 946.830115][T15220] RBP: 00007ffd347a7580 R08: 0000000000000000 R09: 0000000000000000 [ 946.830318][T15220] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.830524][T15220] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 946.907526][T15226] ------------[ cut here ]------------ | [ 946.907722][T15226] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15226 | [ 946.908599][T15226] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.909516][T15226] Tainted: [W]=WARN [ 946.909630][T15226] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.909817][T15226] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.910052][T15226] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.910564][T15226] RSP: 0018:ffa00000040e75d0 EFLAGS: 00010286 [ 946.910749][T15226] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f181f [ 946.910962][T15226] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c0f8 [ 946.911185][T15226] RBP: 1ff400000081cebb R08: 1fe22000036f1820 R09: fffa3bfffffb0b24 [ 946.911421][T15226] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f502774 [ 946.911625][T15226] R13: ff1100000f502740 R14: ffffffff931c7940 R15: ff1100001b78c040 [ 946.911830][T15226] FS: 00007f06f11ce440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 946.912083][T15226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 946.912253][T15226] CR2: 000000000044f720 CR3: 000000000c52d002 CR4: 0000000000771ef0 [ 946.912507][T15226] PKRU: 55555554 [ 946.912616][T15226] Call Trace: [ 946.912721][T15226] [ 946.912792][T15226] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 946.912939][T15226] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 946.913095][T15226] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 946.913236][T15226] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.913386][T15226] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.913531][T15226] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 946.913671][T15226] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 946.913812][T15226] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 946.913965][T15226] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 946.914122][T15226] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 946.914265][T15226] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 946.914424][T15226] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 946.914570][T15226] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 946.914703][T15226] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 946.914839][T15226] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 946.914982][T15226] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 946.915119][T15226] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.915253][T15226] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 946.915402][T15226] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 946.915542][T15226] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 946.915684][T15226] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 946.915830][T15226] ? copy_msghdr_from_user (net/socket.c:2525) [ 946.915972][T15226] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 946.916140][T15226] ? move_addr_to_kernel (net/socket.c:2511) [ 946.916278][T15226] ? filemap_map_folio_range (mm/filemap.c:3873) [ 946.916423][T15226] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 946.916573][T15226] ___sys_sendmsg (net/socket.c:2641) [ 946.916726][T15226] ? copy_msghdr_from_user (net/socket.c:2628) [ 946.916865][T15226] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 946.917006][T15226] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 946.917146][T15226] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 946.917287][T15226] ? __sys_sendmsg_sock (net/socket.c:2656) [ 946.917430][T15226] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 946.917571][T15226] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.917710][T15226] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 946.917847][T15226] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 946.918005][T15226] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 946.918151][T15226] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 946.918342][T15226] RIP: 0033:0x7f06f1328c5e [ 946.918506][T15226] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 946.919048][T15226] RSP: 002b:00007fff68f754b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 946.919252][T15226] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f06f1328c5e [ 946.919467][T15226] RDX: 0000000000000000 RSI: 00007fff68f75570 RDI: 0000000000000005 [ 946.919680][T15226] RBP: 00007fff68f754c0 R08: 0000000000000000 R09: 0000000000000000 [ 946.919883][T15226] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 946.920094][T15226] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 946.996905][T15230] ------------[ cut here ]------------ | [ 946.997078][T15230] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15230 | [ 946.997329][T15230] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 946.998123][T15230] Tainted: [W]=WARN [ 946.998224][T15230] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 946.998402][T15230] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 946.998544][T15230] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 946.999025][T15230] RSP: 0018:ffa00000040975d0 EFLAGS: 00010286 [ 946.999212][T15230] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1af7 [ 946.999415][T15230] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d7b8 [ 946.999612][T15230] RBP: 1ff4000000812ebb R08: 1fe22000036f1af8 R09: fffa3bfffffb0b24 [ 946.999810][T15230] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78dc74 [ 947.000013][T15230] R13: ff1100001b78dc40 R14: ffffffff931c7940 R15: ff1100001b78d700 [ 947.000216][T15230] FS: 00007fe214e03440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 947.000455][T15230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.000623][T15230] CR2: 000000000044f720 CR3: 000000000c52d005 CR4: 0000000000771ef0 [ 947.000821][T15230] PKRU: 55555554 [ 947.000930][T15230] Call Trace: [ 947.001029][T15230] [ 947.001096][T15230] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.001227][T15230] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.001371][T15230] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.001507][T15230] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.001637][T15230] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.001772][T15230] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.002336][T15230] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.002479][T15230] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.002615][T15230] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.002748][T15230] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.002884][T15230] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.003021][T15230] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.003156][T15230] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.003290][T15230] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.003426][T15230] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.003576][T15230] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.003708][T15230] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.003845][T15230] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.003986][T15230] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.004117][T15230] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.004278][T15230] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.004419][T15230] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.004573][T15230] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.004735][T15230] ? move_addr_to_kernel (net/socket.c:2511) [ 947.004885][T15230] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.005025][T15230] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.005159][T15230] ___sys_sendmsg (net/socket.c:2641) [ 947.005290][T15230] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.005429][T15230] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.005563][T15230] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.005700][T15230] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.005833][T15230] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.005977][T15230] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.006113][T15230] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.006244][T15230] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.006386][T15230] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.006518][T15230] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.006666][T15230] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.006831][T15230] RIP: 0033:0x7fe214f5dc5e [ 947.006975][T15230] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.007458][T15230] RSP: 002b:00007ffcd8d410a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.007664][T15230] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe214f5dc5e [ 947.007865][T15230] RDX: 0000000000000000 RSI: 00007ffcd8d41160 RDI: 0000000000000005 [ 947.008068][T15230] RBP: 00007ffcd8d410b0 R08: 0000000000000000 R09: 0000000000000000 [ 947.008266][T15230] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.008472][T15230] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 947.078885][T15236] ------------[ cut here ]------------ | [ 947.079053][T15236] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15236 | [ 947.079305][T15236] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.080525][T15236] Tainted: [W]=WARN [ 947.080631][T15236] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.080804][T15236] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.080989][T15236] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.081486][T15236] RSP: 0018:ffa00000041075d0 EFLAGS: 00010286 [ 947.081669][T15236] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1abf [ 947.081873][T15236] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d5f8 [ 947.082077][T15236] RBP: 1ff4000000820ebb R08: 1fe22000036f1ac0 R09: fffa3bfffffb0b24 [ 947.082281][T15236] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78ccb4 [ 947.082498][T15236] R13: ff1100001b78cc80 R14: ffffffff931c7940 R15: ff1100001b78d540 [ 947.082708][T15236] FS: 00007effd28df440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 947.082951][T15236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.083147][T15236] CR2: 000000000044f720 CR3: 000000001b6d9003 CR4: 0000000000771ef0 [ 947.083371][T15236] PKRU: 55555554 [ 947.083480][T15236] Call Trace: [ 947.083583][T15236] [ 947.083651][T15236] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.083785][T15236] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.083944][T15236] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.084079][T15236] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.084212][T15236] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.084347][T15236] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.084485][T15236] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.084618][T15236] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.084751][T15236] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.084884][T15236] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.085027][T15236] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.085171][T15236] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.085308][T15236] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.085447][T15236] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.085579][T15236] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.085718][T15236] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.085851][T15236] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.085996][T15236] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.086130][T15236] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.086265][T15236] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.086423][T15236] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.086562][T15236] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.086696][T15236] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.086861][T15236] ? move_addr_to_kernel (net/socket.c:2511) [ 947.087010][T15236] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.087151][T15236] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.087299][T15236] ___sys_sendmsg (net/socket.c:2641) [ 947.087439][T15236] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.087586][T15236] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.087732][T15236] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.087868][T15236] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.088011][T15236] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.088153][T15236] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.088295][T15236] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.088443][T15236] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.088581][T15236] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.088712][T15236] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.088848][T15236] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.089016][T15236] RIP: 0033:0x7effd2a39c5e [ 947.089157][T15236] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.089650][T15236] RSP: 002b:00007ffee2712720 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.089858][T15236] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007effd2a39c5e [ 947.090074][T15236] RDX: 0000000000000000 RSI: 00007ffee27127e0 RDI: 0000000000000005 [ 947.090282][T15236] RBP: 00007ffee2712730 R08: 0000000000000000 R09: 0000000000000000 [ 947.090500][T15236] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.090702][T15236] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 947.169666][T15240] ------------[ cut here ]------------ | [ 947.169847][T15240] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15240 | [ 947.170102][T15240] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.170889][T15240] Tainted: [W]=WARN [ 947.170997][T15240] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.171162][T15240] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.171300][T15240] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.171819][T15240] RSP: 0018:ffa00000041175d0 EFLAGS: 00010286 [ 947.171999][T15240] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000372581f [ 947.172203][T15240] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c0f8 [ 947.172403][T15240] RBP: 1ff4000000822ebb R08: 1fe2200003725820 R09: fffa3bfffffb0b24 [ 947.172600][T15240] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92c5b4 [ 947.172798][T15240] R13: ff1100001b92c580 R14: ffffffff931c7940 R15: ff1100001b92c040 [ 947.173099][T15240] FS: 00007fb117a54440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 947.173335][T15240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.173516][T15240] CR2: 000000000044f720 CR3: 000000001c3f3002 CR4: 0000000000771ef0 [ 947.173716][T15240] PKRU: 55555554 [ 947.173816][T15240] Call Trace: [ 947.174000][T15240] [ 947.174069][T15240] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.174201][T15240] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.174342][T15240] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.174481][T15240] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.174614][T15240] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.174749][T15240] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.174882][T15240] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.175075][T15240] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.175207][T15240] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.175340][T15240] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.175482][T15240] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.175613][T15240] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.175748][T15240] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.175883][T15240] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.176593][T15240] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.176728][T15240] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.176863][T15240] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.177064][T15240] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.177196][T15240] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.177329][T15240] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.177468][T15240] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.177601][T15240] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.177735][T15240] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.177961][T15240] ? move_addr_to_kernel (net/socket.c:2511) [ 947.178095][T15240] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.178226][T15240] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.178366][T15240] ___sys_sendmsg (net/socket.c:2641) [ 947.178501][T15240] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.178637][T15240] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.178770][T15240] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.178921][T15240] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.179059][T15240] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.179195][T15240] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.179328][T15240] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.179533][T15240] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.179751][T15240] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.179883][T15240] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.180045][T15240] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.180226][T15240] RIP: 0033:0x7fb117baec5e [ 947.180382][T15240] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.180930][T15240] RSP: 002b:00007ffd63948b60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.181142][T15240] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb117baec5e [ 947.181354][T15240] RDX: 0000000000000000 RSI: 00007ffd63948c20 RDI: 0000000000000005 [ 947.181560][T15240] RBP: 00007ffd63948b70 R08: 0000000000000000 R09: 0000000000000000 [ 947.181774][T15240] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.181984][T15240] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 947.251683][T15246] ------------[ cut here ]------------ | [ 947.251869][T15246] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15246 | [ 947.252143][T15246] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.253056][T15246] Tainted: [W]=WARN [ 947.253163][T15246] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.253374][T15246] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.253545][T15246] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.254041][T15246] RSP: 0018:ffa00000040c75d0 EFLAGS: 00010286 [ 947.254229][T15246] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725b9f [ 947.254446][T15246] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92dcf8 [ 947.254645][T15246] RBP: 1ff4000000818ebb R08: 1fe2200003725ba0 R09: fffa3bfffffb0b24 [ 947.254845][T15246] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92de34 [ 947.255050][T15246] R13: ff1100001b92de00 R14: ffffffff931c7940 R15: ff1100001b92dc40 [ 947.255270][T15246] FS: 00007fe7623f4440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 947.255534][T15246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.255712][T15246] CR2: 000000000044f720 CR3: 000000001a32f001 CR4: 0000000000771ef0 [ 947.255923][T15246] PKRU: 55555554 [ 947.256039][T15246] Call Trace: [ 947.256144][T15246] [ 947.256217][T15246] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.256358][T15246] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.256517][T15246] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.256662][T15246] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.256809][T15246] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.256955][T15246] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.257111][T15246] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.257253][T15246] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.257454][T15246] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.257589][T15246] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.257748][T15246] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.257886][T15246] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.258042][T15246] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.258216][T15246] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.258352][T15246] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.258508][T15246] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.258645][T15246] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.258778][T15246] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.258919][T15246] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.259053][T15246] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.259189][T15246] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.259322][T15246] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.259466][T15246] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.259630][T15246] ? move_addr_to_kernel (net/socket.c:2511) [ 947.259763][T15246] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.259990][T15246] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.260127][T15246] ___sys_sendmsg (net/socket.c:2641) [ 947.260271][T15246] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.260416][T15246] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.260555][T15246] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.260691][T15246] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.260824][T15246] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.261030][T15246] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.261164][T15246] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.261297][T15246] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.261500][T15246] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.261633][T15246] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.261768][T15246] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.261985][T15246] RIP: 0033:0x7fe76254ec5e [ 947.262126][T15246] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.262611][T15246] RSP: 002b:00007ffcca760370 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.262811][T15246] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe76254ec5e [ 947.263062][T15246] RDX: 0000000000000000 RSI: 00007ffcca760430 RDI: 0000000000000005 [ 947.263263][T15246] RBP: 00007ffcca760380 R08: 0000000000000000 R09: 0000000000000000 [ 947.263473][T15246] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.263674][T15246] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 947.344779][T15250] ------------[ cut here ]------------ | [ 947.345179][T15250] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15250 | [ 947.345489][T15250] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.346311][T15250] Tainted: [W]=WARN [ 947.346428][T15250] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.346630][T15250] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.346787][T15250] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.347302][T15250] RSP: 0018:ffa00000040a75d0 EFLAGS: 00010286 [ 947.347492][T15250] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038750c7 [ 947.347696][T15250] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8638 [ 947.347910][T15250] RBP: 1ff4000000814ebb R08: 1fe22000038750c8 R09: fffa3bfffffb0b24 [ 947.348119][T15250] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a9e34 [ 947.348341][T15250] R13: ff1100001c3a9e00 R14: ffffffff931c7940 R15: ff1100001c3a8580 [ 947.348566][T15250] FS: 00007ff2a0421440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 947.348820][T15250] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.349002][T15250] CR2: 000000000044f720 CR3: 000000001c042001 CR4: 0000000000771ef0 [ 947.349215][T15250] PKRU: 55555554 [ 947.349321][T15250] Call Trace: [ 947.349436][T15250] [ 947.349509][T15250] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.349651][T15250] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.349809][T15250] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.349958][T15250] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.350103][T15250] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.350247][T15250] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.350396][T15250] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.350546][T15250] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.350685][T15250] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.350858][T15250] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.351014][T15250] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.351158][T15250] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.351336][T15250] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.351506][T15250] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.351660][T15250] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.351814][T15250] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.351978][T15250] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.352125][T15250] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.352310][T15250] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.352470][T15250] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.352614][T15250] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.352755][T15250] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.352905][T15250] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.353079][T15250] ? move_addr_to_kernel (net/socket.c:2511) [ 947.353223][T15250] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.353373][T15250] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.353525][T15250] ___sys_sendmsg (net/socket.c:2641) [ 947.353668][T15250] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.353823][T15250] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.353979][T15250] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.354121][T15250] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.354260][T15250] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.354416][T15250] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.354563][T15250] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.354706][T15250] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.354847][T15250] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.355005][T15250] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.355146][T15250] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.355337][T15250] RIP: 0033:0x7ff2a057bc5e [ 947.355511][T15250] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.356093][T15250] RSP: 002b:00007ffcd9c58670 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.356323][T15250] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff2a057bc5e [ 947.356584][T15250] RDX: 0000000000000000 RSI: 00007ffcd9c58730 RDI: 0000000000000005 [ 947.356817][T15250] RBP: 00007ffcd9c58680 R08: 0000000000000000 R09: 0000000000000000 [ 947.357053][T15250] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.357291][T15250] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 947.429054][T15256] ------------[ cut here ]------------ | [ 947.429249][T15256] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15256 | [ 947.429513][T15256] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.430777][T15256] Tainted: [W]=WARN [ 947.430886][T15256] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.431071][T15256] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.431223][T15256] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.431748][T15256] RSP: 0018:ffa00000041575d0 EFLAGS: 00010286 [ 947.431956][T15256] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000038751df [ 947.432283][T15256] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8ef8 [ 947.432510][T15256] RBP: 1ff400000082aebb R08: 1fe22000038751e0 R09: fffa3bfffffb0b24 [ 947.432730][T15256] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001c3a8234 [ 947.432958][T15256] R13: ff1100001c3a8200 R14: ffffffff931c7940 R15: ff1100001c3a8e40 [ 947.433162][T15256] FS: 00007f8cdb216440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 947.433408][T15256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.433596][T15256] CR2: 000000000044f720 CR3: 000000001c042005 CR4: 0000000000771ef0 [ 947.433805][T15256] PKRU: 55555554 [ 947.433912][T15256] Call Trace: [ 947.434018][T15256] [ 947.434090][T15256] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.434225][T15256] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.434387][T15256] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.434529][T15256] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.434663][T15256] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.434805][T15256] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.435020][T15256] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.435175][T15256] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.435309][T15256] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.435448][T15256] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.435585][T15256] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.435716][T15256] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.435850][T15256] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.436052][T15256] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.436191][T15256] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.436336][T15256] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.436481][T15256] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.436625][T15256] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.436768][T15256] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.436956][T15256] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.437108][T15256] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.437254][T15256] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.437398][T15256] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.437569][T15256] ? move_addr_to_kernel (net/socket.c:2511) [ 947.437707][T15256] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.437843][T15256] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.438044][T15256] ___sys_sendmsg (net/socket.c:2641) [ 947.438179][T15256] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.438318][T15256] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.438465][T15256] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.438601][T15256] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.438744][T15256] ? fpregs_restore_userregs (./arch/x86/include/asm/bitops.h:75 ./include/asm-generic/bitops/instrumented-atomic.h:42 ./include/linux/thread_info.h:109 arch/x86/kernel/fpu/context.h:79) [ 947.438880][T15256] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.439066][T15256] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.439201][T15256] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.439336][T15256] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.439481][T15256] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.439657][T15256] RIP: 0033:0x7f8cdb370c5e [ 947.439800][T15256] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.440343][T15256] RSP: 002b:00007ffdfe820fd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.440557][T15256] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8cdb370c5e [ 947.440760][T15256] RDX: 0000000000000000 RSI: 00007ffdfe821090 RDI: 0000000000000005 [ 947.441017][T15256] RBP: 00007ffdfe820fe0 R08: 0000000000000000 R09: 0000000000000000 [ 947.441228][T15256] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.441444][T15256] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 947.511884][T15260] ------------[ cut here ]------------ | [ 947.512116][T15260] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15260 | [ 947.512415][T15260] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.513379][T15260] Tainted: [W]=WARN [ 947.513531][T15260] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.513795][T15260] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.514032][T15260] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.514595][T15260] RSP: 0018:ffa00000040575d0 EFLAGS: 00010286 [ 947.514873][T15260] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eb2f [ 947.515199][T15260] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975978 [ 947.515474][T15260] RBP: 1ff400000080aebb R08: 1fe220000192eb30 R09: fffa3bfffffb0b24 [ 947.515738][T15260] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c975e34 [ 947.516001][T15260] R13: ff1100000c975e00 R14: ffffffff931c7940 R15: ff1100000c9758c0 [ 947.516272][T15260] FS: 00007f9aa7549440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 947.516584][T15260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.516808][T15260] CR2: 000000000044f720 CR3: 000000000d954005 CR4: 0000000000771ef0 [ 947.517089][T15260] PKRU: 55555554 [ 947.517248][T15260] Call Trace: [ 947.517410][T15260] [ 947.517539][T15260] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.517730][T15260] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.517946][T15260] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.518137][T15260] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.518321][T15260] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.518519][T15260] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.518703][T15260] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.518891][T15260] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.519107][T15260] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.519292][T15260] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.519486][T15260] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.519669][T15260] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.519856][T15260] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.520063][T15260] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.520246][T15260] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.520451][T15260] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.520651][T15260] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.520847][T15260] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.521055][T15260] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.521244][T15260] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.521450][T15260] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.521637][T15260] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.521829][T15260] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.522067][T15260] ? move_addr_to_kernel (net/socket.c:2511) [ 947.522252][T15260] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.522461][T15260] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.522654][T15260] ___sys_sendmsg (net/socket.c:2641) [ 947.522838][T15260] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.523051][T15260] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.523240][T15260] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.523436][T15260] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.523637][T15260] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.523844][T15260] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.524058][T15260] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.524258][T15260] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.524486][T15260] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.524705][T15260] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.524923][T15260] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.525164][T15260] RIP: 0033:0x7f9aa76a3c5e [ 947.525379][T15260] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.525946][T15260] RSP: 002b:00007fffee51d480 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.526215][T15260] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9aa76a3c5e [ 947.526471][T15260] RDX: 0000000000000000 RSI: 00007fffee51d540 RDI: 0000000000000005 [ 947.526741][T15260] RBP: 00007fffee51d490 R08: 0000000000000000 R09: 0000000000000000 [ 947.527014][T15260] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.527267][T15260] R13: 0000000069cbe7fa R14: 0000000000000004 R15: 000000000049d620 | [ 947.585544][T15266] ------------[ cut here ]------------ | [ 947.585721][T15266] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15266 | [ 947.585975][T15266] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.586752][T15266] Tainted: [W]=WARN [ 947.586854][T15266] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.587034][T15266] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.587180][T15266] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.587791][T15266] RSP: 0018:ffa00000041a75d0 EFLAGS: 00010286 [ 947.587987][T15266] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe220000192eb67 [ 947.588200][T15266] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975b38 [ 947.588403][T15266] RBP: 1ff4000000834ebb R08: 1fe220000192eb68 R09: fffa3bfffffb0b24 [ 947.588605][T15266] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000c974af4 [ 947.588807][T15266] R13: ff1100000c974ac0 R14: ffffffff931c7940 R15: ff1100000c975a80 [ 947.590097][T15266] FS: 00007f2f08ed8440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 947.590341][T15266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.590530][T15266] CR2: 000000000044f720 CR3: 0000000019a72001 CR4: 0000000000771ef0 [ 947.590740][T15266] PKRU: 55555554 [ 947.590855][T15266] Call Trace: [ 947.591027][T15266] [ 947.591102][T15266] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.591239][T15266] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.591393][T15266] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.591540][T15266] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.591676][T15266] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.591813][T15266] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.592025][T15266] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.592161][T15266] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.592342][T15266] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.592500][T15266] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.592644][T15266] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.592783][T15266] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.593006][T15266] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.593140][T15266] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.593271][T15266] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.593431][T15266] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.593567][T15266] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.593701][T15266] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.593834][T15266] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.594051][T15266] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.594189][T15266] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.594337][T15266] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.594490][T15266] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.594662][T15266] ? move_addr_to_kernel (net/socket.c:2511) [ 947.594795][T15266] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.594963][T15266] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.595098][T15266] ___sys_sendmsg (net/socket.c:2641) [ 947.595239][T15266] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.595395][T15266] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.595538][T15266] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.595681][T15266] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.595815][T15266] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.595964][T15266] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.596095][T15266] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.596243][T15266] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.596398][T15266] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.596539][T15266] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.596678][T15266] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.596851][T15266] RIP: 0033:0x7f2f09032c5e [ 947.597004][T15266] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.597519][T15266] RSP: 002b:00007fff60d73ea0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.597735][T15266] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2f09032c5e [ 947.597969][T15266] RDX: 0000000000000000 RSI: 00007fff60d73f60 RDI: 0000000000000005 [ 947.598181][T15266] RBP: 00007fff60d73eb0 R08: 0000000000000000 R09: 0000000000000000 [ 947.598404][T15266] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.598625][T15266] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 947.683440][T15270] ------------[ cut here ]------------ | [ 947.683610][T15270] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15270 | [ 947.683933][T15270] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.684759][T15270] Tainted: [W]=WARN [ 947.684868][T15270] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.685053][T15270] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.685203][T15270] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.685740][T15270] RSP: 0018:ffa00000041975d0 EFLAGS: 00010286 [ 947.685929][T15270] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229cff [ 947.686143][T15270] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914e7f8 [ 947.686361][T15270] RBP: 1ff4000000832ebb R08: 1fe2200003229d00 R09: fffa3bfffffb0b24 [ 947.686568][T15270] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914eaf4 [ 947.686767][T15270] R13: ff1100001914eac0 R14: ffffffff931c7940 R15: ff1100001914e740 [ 947.686979][T15270] FS: 00007f2eb837c440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 947.687214][T15270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.687395][T15270] CR2: 000000000044f720 CR3: 0000000019a72005 CR4: 0000000000771ef0 [ 947.687600][T15270] PKRU: 55555554 [ 947.687703][T15270] Call Trace: [ 947.687804][T15270] [ 947.687874][T15270] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.688295][T15270] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.688445][T15270] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.688588][T15270] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.688723][T15270] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.688861][T15270] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.689009][T15270] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.689151][T15270] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.689291][T15270] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.689430][T15270] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.689565][T15270] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.689722][T15270] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.689865][T15270] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.690503][T15270] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.690639][T15270] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.690775][T15270] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.690937][T15270] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.691074][T15270] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.691210][T15270] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.691346][T15270] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.691494][T15270] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.691632][T15270] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.691768][T15270] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.691943][T15270] ? move_addr_to_kernel (net/socket.c:2511) [ 947.692082][T15270] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.692231][T15270] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.692377][T15270] ___sys_sendmsg (net/socket.c:2641) [ 947.692518][T15270] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.692660][T15270] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.692795][T15270] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.692942][T15270] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.693076][T15270] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.693211][T15270] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.693347][T15270] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.693513][T15270] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.693717][T15270] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.693854][T15270] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.694011][T15270] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.694183][T15270] RIP: 0033:0x7f2eb84d6c5e [ 947.694326][T15270] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.694838][T15270] RSP: 002b:00007ffd98d12f60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.695053][T15270] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2eb84d6c5e [ 947.695272][T15270] RDX: 0000000000000000 RSI: 00007ffd98d13020 RDI: 0000000000000005 [ 947.695481][T15270] RBP: 00007ffd98d12f70 R08: 0000000000000000 R09: 0000000000000000 [ 947.695683][T15270] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.695885][T15270] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 947.774170][T15276] ------------[ cut here ]------------ | [ 947.774405][T15276] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15276 | [ 947.774701][T15276] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.775584][T15276] Tainted: [W]=WARN [ 947.775748][T15276] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.775981][T15276] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.776184][T15276] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.776734][T15276] RSP: 0018:ffa00000040875d0 EFLAGS: 00010286 [ 947.776983][T15276] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003229d37 [ 947.777234][T15276] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001914e9b8 [ 947.777509][T15276] RBP: 1ff4000000810ebb R08: 1fe2200003229d38 R09: fffa3bfffffb0b24 [ 947.777771][T15276] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001914e3f4 [ 947.778063][T15276] R13: ff1100001914e3c0 R14: ffffffff931c7940 R15: ff1100001914e900 [ 947.778334][T15276] FS: 00007f42372be440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 947.778705][T15276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.778942][T15276] CR2: 000000000044f720 CR3: 000000001cfe7004 CR4: 0000000000771ef0 [ 947.779207][T15276] PKRU: 55555554 [ 947.779386][T15276] Call Trace: [ 947.779558][T15276] [ 947.779689][T15276] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.779871][T15276] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.780093][T15276] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.780308][T15276] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.780515][T15276] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.780718][T15276] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.780918][T15276] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.781118][T15276] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.781312][T15276] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.781513][T15276] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.781702][T15276] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.781912][T15276] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.782102][T15276] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.782289][T15276] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.782480][T15276] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.782669][T15276] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.782854][T15276] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.783051][T15276] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.783240][T15276] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.783457][T15276] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.783650][T15276] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.783836][T15276] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.784043][T15276] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.784269][T15276] ? move_addr_to_kernel (net/socket.c:2511) [ 947.784473][T15276] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.784672][T15276] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.784872][T15276] ___sys_sendmsg (net/socket.c:2641) [ 947.785088][T15276] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.785290][T15276] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.785495][T15276] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.785699][T15276] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.785914][T15276] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.786116][T15276] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.786312][T15276] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.786569][T15276] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.786808][T15276] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.787025][T15276] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.787230][T15276] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.787509][T15276] RIP: 0033:0x7f4237418c5e [ 947.787746][T15276] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.788393][T15276] RSP: 002b:00007ffc165f36a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.788698][T15276] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4237418c5e [ 947.788982][T15276] RDX: 0000000000000000 RSI: 00007ffc165f3760 RDI: 0000000000000005 [ 947.789253][T15276] RBP: 00007ffc165f36b0 R08: 0000000000000000 R09: 0000000000000000 [ 947.789522][T15276] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.789789][T15276] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 947.872406][T15280] ------------[ cut here ]------------ | [ 947.872611][T15280] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15280 | [ 947.873310][T15280] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.874169][T15280] Tainted: [W]=WARN [ 947.874275][T15280] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.874477][T15280] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.874642][T15280] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.875157][T15280] RSP: 0018:ffa00000041475d0 EFLAGS: 00010286 [ 947.875326][T15280] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c201f [ 947.875529][T15280] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6100f8 [ 947.875753][T15280] RBP: 1ff4000000828ebb R08: 1fe22000034c2020 R09: fffa3bfffffb0b24 [ 947.876006][T15280] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a611ab4 [ 947.876231][T15280] R13: ff1100001a611a80 R14: ffffffff931c7940 R15: ff1100001a610040 [ 947.876447][T15280] FS: 00007ffbd0042440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 947.876693][T15280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.876886][T15280] CR2: 000000000044f720 CR3: 0000000019112003 CR4: 0000000000771ef0 [ 947.877108][T15280] PKRU: 55555554 [ 947.877212][T15280] Call Trace: [ 947.877312][T15280] [ 947.877385][T15280] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.877517][T15280] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.877660][T15280] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.877792][T15280] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.877930][T15280] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.878065][T15280] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.878201][T15280] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.878339][T15280] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.878482][T15280] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.878619][T15280] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.878756][T15280] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.878892][T15280] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.879032][T15280] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.879197][T15280] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.879350][T15280] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.879512][T15280] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.879649][T15280] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.879783][T15280] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.879947][T15280] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.880106][T15280] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.880260][T15280] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.880417][T15280] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.880553][T15280] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.880723][T15280] ? move_addr_to_kernel (net/socket.c:2511) [ 947.880881][T15280] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.881048][T15280] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.881213][T15280] ___sys_sendmsg (net/socket.c:2641) [ 947.881371][T15280] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.881512][T15280] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.881651][T15280] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.881824][T15280] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.882003][T15280] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.882166][T15280] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.882334][T15280] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.882488][T15280] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.882635][T15280] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.882791][T15280] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.882946][T15280] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.883118][T15280] RIP: 0033:0x7ffbd019cc5e [ 947.883261][T15280] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.883741][T15280] RSP: 002b:00007ffcc502ae00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.883951][T15280] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ffbd019cc5e [ 947.884154][T15280] RDX: 0000000000000000 RSI: 00007ffcc502aec0 RDI: 0000000000000005 [ 947.884356][T15280] RBP: 00007ffcc502ae10 R08: 0000000000000000 R09: 0000000000000000 [ 947.884558][T15280] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.884759][T15280] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 947.966716][T15286] ------------[ cut here ]------------ | [ 947.966946][T15286] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15286 | [ 947.967212][T15286] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 947.968177][T15286] Tainted: [W]=WARN [ 947.968287][T15286] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 947.968463][T15286] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 947.968611][T15286] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 947.969130][T15286] RSP: 0018:ffa00000040575d0 EFLAGS: 00010286 [ 947.969312][T15286] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000034c22bf [ 947.969532][T15286] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6115f8 [ 947.969757][T15286] RBP: 1ff400000080aebb R08: 1fe22000034c22c0 R09: fffa3bfffffb0b24 [ 947.969971][T15286] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001a610774 [ 947.970184][T15286] R13: ff1100001a610740 R14: ffffffff931c7940 R15: ff1100001a611540 [ 947.970408][T15286] FS: 00007f194723f440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 947.970656][T15286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.970840][T15286] CR2: 000000000044f720 CR3: 000000000d931001 CR4: 0000000000771ef0 [ 947.971066][T15286] PKRU: 55555554 [ 947.971177][T15286] Call Trace: [ 947.971285][T15286] [ 947.971373][T15286] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 947.971517][T15286] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 947.971670][T15286] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 947.971821][T15286] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.972028][T15286] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.972173][T15286] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 947.972312][T15286] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 947.972460][T15286] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 947.972664][T15286] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 947.972799][T15286] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 947.972989][T15286] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 947.973121][T15286] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 947.973253][T15286] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 947.973391][T15286] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 947.973524][T15286] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 947.973660][T15286] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 947.973795][T15286] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.973941][T15286] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 947.974074][T15286] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 947.974207][T15286] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 947.974341][T15286] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 947.974484][T15286] ? copy_msghdr_from_user (net/socket.c:2525) [ 947.974616][T15286] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 947.974781][T15286] ? move_addr_to_kernel (net/socket.c:2511) [ 947.974920][T15286] ? filemap_map_folio_range (mm/filemap.c:3873) [ 947.975051][T15286] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 947.975186][T15286] ___sys_sendmsg (net/socket.c:2641) [ 947.975318][T15286] ? copy_msghdr_from_user (net/socket.c:2628) [ 947.975465][T15286] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 947.975602][T15286] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 947.975739][T15286] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 947.975875][T15286] ? __sys_sendmsg_sock (net/socket.c:2656) [ 947.976017][T15286] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 947.976148][T15286] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.976280][T15286] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 947.976425][T15286] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 947.976556][T15286] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 947.976688][T15286] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 947.976884][T15286] RIP: 0033:0x7f1947399c5e [ 947.977079][T15286] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 947.977598][T15286] RSP: 002b:00007ffc17214260 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 947.977810][T15286] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1947399c5e [ 947.978022][T15286] RDX: 0000000000000000 RSI: 00007ffc17214320 RDI: 0000000000000005 [ 947.978230][T15286] RBP: 00007ffc17214270 R08: 0000000000000000 R09: 0000000000000000 [ 947.978451][T15286] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 947.978661][T15286] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 948.062798][T15290] ------------[ cut here ]------------ | [ 948.063422][T15290] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15290 | [ 948.063707][T15290] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.064538][T15290] Tainted: [W]=WARN [ 948.064642][T15290] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.064812][T15290] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.064975][T15290] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.065499][T15290] RSP: 0018:ffa00000041c75d0 EFLAGS: 00010286 [ 948.065673][T15290] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0687 [ 948.065875][T15290] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503438 [ 948.066096][T15290] RBP: 1ff4000000838ebb R08: 1fe2200001ea0688 R09: fffa3bfffffb0b24 [ 948.066297][T15290] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503ab4 [ 948.066505][T15290] R13: ff1100000f503a80 R14: ffffffff931c7940 R15: ff1100000f503380 [ 948.066706][T15290] FS: 00007f9d10782440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 948.066948][T15290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.067116][T15290] CR2: 000000000044f720 CR3: 00000000172d7003 CR4: 0000000000771ef0 [ 948.067322][T15290] PKRU: 55555554 [ 948.067434][T15290] Call Trace: [ 948.067533][T15290] [ 948.067601][T15290] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.067737][T15290] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.067879][T15290] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.068022][T15290] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.068163][T15290] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.068299][T15290] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.068435][T15290] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.068567][T15290] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.068708][T15290] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.068851][T15290] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.069005][T15290] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.069143][T15290] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.069291][T15290] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.069434][T15290] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.069570][T15290] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.069709][T15290] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.069846][T15290] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.070001][T15290] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.070144][T15290] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.070284][T15290] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.070427][T15290] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.070569][T15290] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.070708][T15290] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.070878][T15290] ? move_addr_to_kernel (net/socket.c:2511) [ 948.071022][T15290] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.071162][T15290] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.071304][T15290] ___sys_sendmsg (net/socket.c:2641) [ 948.071461][T15290] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.071605][T15290] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.071748][T15290] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.071886][T15290] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.072027][T15290] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.072171][T15290] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.072305][T15290] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.072450][T15290] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.072586][T15290] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.072719][T15290] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.072852][T15290] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.073030][T15290] RIP: 0033:0x7f9d108dcc5e [ 948.073171][T15290] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.073725][T15290] RSP: 002b:00007ffcb5834a10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.073943][T15290] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9d108dcc5e [ 948.074152][T15290] RDX: 0000000000000000 RSI: 00007ffcb5834ad0 RDI: 0000000000000005 [ 948.074355][T15290] RBP: 00007ffcb5834a20 R08: 0000000000000000 R09: 0000000000000000 [ 948.074560][T15290] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.074767][T15290] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 948.155034][T15296] ------------[ cut here ]------------ | [ 948.155217][T15296] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15296 | [ 948.155487][T15296] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.156282][T15296] Tainted: [W]=WARN [ 948.156388][T15296] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.156557][T15296] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.156706][T15296] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.157475][T15296] RSP: 0018:ffa00000042475d0 EFLAGS: 00010286 [ 948.157660][T15296] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200001ea0617 [ 948.157869][T15296] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5030b8 [ 948.158074][T15296] RBP: 1ff4000000848ebb R08: 1fe2200001ea0618 R09: fffa3bfffffb0b24 [ 948.158296][T15296] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503e34 [ 948.158508][T15296] R13: ff1100000f503e00 R14: ffffffff931c7940 R15: ff1100000f503000 [ 948.158712][T15296] FS: 00007f5edd21b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 948.158972][T15296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.159149][T15296] CR2: 000000000044f720 CR3: 000000001a202004 CR4: 0000000000771ef0 [ 948.159367][T15296] PKRU: 55555554 [ 948.159475][T15296] Call Trace: [ 948.159575][T15296] [ 948.159644][T15296] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.159783][T15296] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.159935][T15296] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.160070][T15296] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.160202][T15296] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.160337][T15296] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.160477][T15296] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.160610][T15296] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.160750][T15296] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.160891][T15296] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.161034][T15296] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.161175][T15296] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.161308][T15296] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.161454][T15296] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.161593][T15296] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.161730][T15296] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.161869][T15296] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.162013][T15296] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.162153][T15296] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.162293][T15296] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.162435][T15296] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.162577][T15296] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.162716][T15296] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.162886][T15296] ? move_addr_to_kernel (net/socket.c:2511) [ 948.163031][T15296] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.163168][T15296] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.163307][T15296] ___sys_sendmsg (net/socket.c:2641) [ 948.163448][T15296] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.163587][T15296] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.163727][T15296] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.163865][T15296] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.164021][T15296] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.164168][T15296] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.164302][T15296] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.164446][T15296] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.164596][T15296] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.164743][T15296] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.164884][T15296] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.165067][T15296] RIP: 0033:0x7f5edd375c5e [ 948.165217][T15296] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.165715][T15296] RSP: 002b:00007ffc4f271b40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.165928][T15296] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5edd375c5e [ 948.166142][T15296] RDX: 0000000000000000 RSI: 00007ffc4f271c00 RDI: 0000000000000005 [ 948.166347][T15296] RBP: 00007ffc4f271b50 R08: 0000000000000000 R09: 0000000000000000 [ 948.166550][T15296] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.166748][T15296] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 948.244713][T15300] ------------[ cut here ]------------ | [ 948.245541][T15300] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15300 | [ 948.245861][T15300] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.246752][T15300] Tainted: [W]=WARN [ 948.246921][T15300] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.247147][T15300] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.247346][T15300] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.247890][T15300] RSP: 0018:ffa00000042775d0 EFLAGS: 00010286 [ 948.248130][T15300] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1a17 [ 948.248395][T15300] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d0b8 [ 948.248644][T15300] RBP: 1ff400000084eebb R08: 1fe22000036f1a18 R09: fffa3bfffffb0b24 [ 948.248920][T15300] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100000f503c74 [ 948.249170][T15300] R13: ff1100000f503c40 R14: ffffffff931c7940 R15: ff1100001b78d000 [ 948.249456][T15300] FS: 00007fe373f8c440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 948.249763][T15300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.250014][T15300] CR2: 000000000044f720 CR3: 000000001011b002 CR4: 0000000000771ef0 [ 948.250282][T15300] PKRU: 55555554 [ 948.250449][T15300] Call Trace: [ 948.250617][T15300] [ 948.250747][T15300] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.250948][T15300] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.251155][T15300] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.251346][T15300] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.251547][T15300] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.251736][T15300] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.251931][T15300] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.252117][T15300] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.252302][T15300] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.252492][T15300] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.252681][T15300] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.252864][T15300] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.253066][T15300] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.253252][T15300] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.253441][T15300] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.253643][T15300] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.253844][T15300] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.254051][T15300] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.254241][T15300] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.254441][T15300] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.254640][T15300] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.254834][T15300] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.255032][T15300] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.255247][T15300] ? move_addr_to_kernel (net/socket.c:2511) [ 948.255456][T15300] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.255639][T15300] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.255827][T15300] ___sys_sendmsg (net/socket.c:2641) [ 948.256026][T15300] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.256216][T15300] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.256413][T15300] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.256603][T15300] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.256790][T15300] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.257006][T15300] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.257191][T15300] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.257397][T15300] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.257594][T15300] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.257793][T15300] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.258004][T15300] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.258235][T15300] RIP: 0033:0x7fe3740e6c5e [ 948.258447][T15300] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.259002][T15300] RSP: 002b:00007ffc62f8ec50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.259269][T15300] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe3740e6c5e [ 948.259532][T15300] RDX: 0000000000000000 RSI: 00007ffc62f8ed10 RDI: 0000000000000005 [ 948.259797][T15300] RBP: 00007ffc62f8ec60 R08: 0000000000000000 R09: 0000000000000000 [ 948.260067][T15300] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.260335][T15300] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 948.334431][T15306] ------------[ cut here ]------------ | [ 948.334597][T15306] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15306 | [ 948.334835][T15306] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.335647][T15306] Tainted: [W]=WARN [ 948.335763][T15306] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.335946][T15306] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.336103][T15306] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.337039][T15306] RSP: 0018:ffa00000042275d0 EFLAGS: 00010286 [ 948.337241][T15306] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1b67 [ 948.337448][T15306] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 948.337652][T15306] RBP: 1ff4000000844ebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b24 [ 948.337854][T15306] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78d734 [ 948.338059][T15306] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 948.338262][T15306] FS: 00007fbf392a5440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 948.338504][T15306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.338684][T15306] CR2: 000000000044f720 CR3: 0000000019be4001 CR4: 0000000000771ef0 [ 948.338889][T15306] PKRU: 55555554 [ 948.338997][T15306] Call Trace: [ 948.339111][T15306] [ 948.339180][T15306] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.339314][T15306] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.339465][T15306] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.339615][T15306] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.339759][T15306] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.339912][T15306] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.340050][T15306] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.340190][T15306] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.340329][T15306] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.340471][T15306] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.340624][T15306] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.340764][T15306] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.340908][T15306] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.341050][T15306] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.341183][T15306] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.341316][T15306] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.341455][T15306] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.341589][T15306] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.341724][T15306] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.341859][T15306] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.342447][T15306] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.342584][T15306] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.342716][T15306] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.342878][T15306] ? move_addr_to_kernel (net/socket.c:2511) [ 948.343018][T15306] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.343161][T15306] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.343297][T15306] ___sys_sendmsg (net/socket.c:2641) [ 948.343446][T15306] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.343582][T15306] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.343728][T15306] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.343863][T15306] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.344001][T15306] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.344136][T15306] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.344268][T15306] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.344409][T15306] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.344561][T15306] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.344712][T15306] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.344852][T15306] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.345027][T15306] RIP: 0033:0x7fbf393ffc5e [ 948.345169][T15306] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.345671][T15306] RSP: 002b:00007ffd253b1ce0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.345889][T15306] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbf393ffc5e [ 948.346097][T15306] RDX: 0000000000000000 RSI: 00007ffd253b1da0 RDI: 0000000000000005 [ 948.346305][T15306] RBP: 00007ffd253b1cf0 R08: 0000000000000000 R09: 0000000000000000 [ 948.346516][T15306] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.346719][T15306] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 948.422026][T15310] ------------[ cut here ]------------ | [ 948.422200][T15310] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15310 | [ 948.422442][T15310] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.423820][T15310] Tainted: [W]=WARN [ 948.423955][T15310] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.424129][T15310] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.424274][T15310] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.424754][T15310] RSP: 0018:ffa00000041c75d0 EFLAGS: 00010286 [ 948.424933][T15310] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000036f1a87 [ 948.425129][T15310] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d438 [ 948.425330][T15310] RBP: 1ff4000000838ebb R08: 1fe22000036f1a88 R09: fffa3bfffffb0b24 [ 948.425539][T15310] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b78de34 [ 948.425740][T15310] R13: ff1100001b78de00 R14: ffffffff931c7940 R15: ff1100001b78d380 [ 948.425950][T15310] FS: 00007f951504c440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 948.426198][T15310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.426379][T15310] CR2: 000000000044f720 CR3: 000000001c3fc004 CR4: 0000000000771ef0 [ 948.426581][T15310] PKRU: 55555554 [ 948.426682][T15310] Call Trace: [ 948.426781][T15310] [ 948.426850][T15310] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.426988][T15310] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.427143][T15310] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.427275][T15310] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.427415][T15310] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.427555][T15310] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.427687][T15310] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.427822][T15310] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.428034][T15310] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.428166][T15310] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.428298][T15310] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.428446][T15310] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.428579][T15310] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.428711][T15310] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.428845][T15310] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.429048][T15310] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.429184][T15310] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.429318][T15310] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.429457][T15310] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.429597][T15310] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.429731][T15310] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.429868][T15310] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.430062][T15310] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.430226][T15310] ? move_addr_to_kernel (net/socket.c:2511) [ 948.430365][T15310] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.430504][T15310] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.430638][T15310] ___sys_sendmsg (net/socket.c:2641) [ 948.430772][T15310] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.430998][T15310] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.431135][T15310] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.431270][T15310] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.431408][T15310] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.431546][T15310] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.431682][T15310] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.431817][T15310] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.431968][T15310] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.432105][T15310] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.432245][T15310] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.432417][T15310] RIP: 0033:0x7f95151a6c5e [ 948.432561][T15310] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.433063][T15310] RSP: 002b:00007ffe43574d60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.433266][T15310] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f95151a6c5e [ 948.433472][T15310] RDX: 0000000000000000 RSI: 00007ffe43574e20 RDI: 0000000000000005 [ 948.433672][T15310] RBP: 00007ffe43574d70 R08: 0000000000000000 R09: 0000000000000000 [ 948.433874][T15310] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.434080][T15310] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 948.519024][T15316] ------------[ cut here ]------------ | [ 948.519194][T15316] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15316 | [ 948.519465][T15316] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.520442][T15316] Tainted: [W]=WARN [ 948.520549][T15316] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.520718][T15316] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.520860][T15316] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.521352][T15316] RSP: 0018:ffa00000042b75d0 EFLAGS: 00010286 [ 948.521551][T15316] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe22000037258ff [ 948.521758][T15316] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c7f8 [ 948.521964][T15316] RBP: 1ff4000000856ebb R08: 1fe2200003725900 R09: fffa3bfffffb0b24 [ 948.522187][T15316] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92ccb4 [ 948.522407][T15316] R13: ff1100001b92cc80 R14: ffffffff931c7940 R15: ff1100001b92c740 [ 948.522610][T15316] FS: 00007f35c14d8440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 948.522850][T15316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.523100][T15316] CR2: 000000000044f720 CR3: 000000001a6c0001 CR4: 0000000000771ef0 [ 948.523306][T15316] PKRU: 55555554 [ 948.523418][T15316] Call Trace: [ 948.523521][T15316] [ 948.523590][T15316] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.523727][T15316] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.523876][T15316] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.524025][T15316] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.524163][T15316] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.524307][T15316] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.524449][T15316] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.524594][T15316] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.524731][T15316] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.524871][T15316] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.525011][T15316] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.525148][T15316] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.525286][T15316] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.525422][T15316] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.525570][T15316] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.525710][T15316] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.525846][T15316] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.525988][T15316] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.526127][T15316] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.526260][T15316] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.526406][T15316] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.526546][T15316] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.526690][T15316] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.526857][T15316] ? move_addr_to_kernel (net/socket.c:2511) [ 948.527001][T15316] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.527142][T15316] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.527281][T15316] ___sys_sendmsg (net/socket.c:2641) [ 948.527430][T15316] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.527574][T15316] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.527710][T15316] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.527850][T15316] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.527991][T15316] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.528136][T15316] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.528269][T15316] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.528407][T15316] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.528543][T15316] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.528678][T15316] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.528811][T15316] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.528980][T15316] RIP: 0033:0x7f35c1632c5e [ 948.529120][T15316] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.529626][T15316] RSP: 002b:00007ffe4888b7c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.529829][T15316] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f35c1632c5e [ 948.530038][T15316] RDX: 0000000000000000 RSI: 00007ffe4888b880 RDI: 0000000000000005 [ 948.530240][T15316] RBP: 00007ffe4888b7d0 R08: 0000000000000000 R09: 0000000000000000 [ 948.530455][T15316] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.530652][T15316] R13: 0000000069cbe7fb R14: 0000000000000004 R15: 000000000049d620 | [ 948.591411][T15320] ------------[ cut here ]------------ | [ 948.591581][T15320] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15320 | [ 948.591824][T15320] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.592601][T15320] Tainted: [W]=WARN [ 948.592704][T15320] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.592880][T15320] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.593032][T15320] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.593520][T15320] RSP: 0018:ffa00000042a75d0 EFLAGS: 00010286 [ 948.593701][T15320] RAX: 00000000ffffffa6 RBX: ff11000005e29c00 RCX: 1fe2200003725af7 [ 948.593907][T15320] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d7b8 [ 948.594115][T15320] RBP: 1ff4000000854ebb R08: 1fe2200003725af8 R09: fffa3bfffffb0b24 [ 948.594317][T15320] R10: fffa3bfffffb0b25 R11: 0000000000000001 R12: ff1100001b92dab4 [ 948.594536][T15320] R13: ff1100001b92da80 R14: ffffffff931c7940 R15: ff1100001b92d700 [ 948.594743][T15320] FS: 00007f8972a92440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 948.595001][T15320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.595175][T15320] CR2: 000000000044f720 CR3: 000000001c3fc006 CR4: 0000000000771ef0 [ 948.595394][T15320] PKRU: 55555554 [ 948.595496][T15320] Call Trace: [ 948.595604][T15320] [ 948.595678][T15320] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.595822][T15320] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.595978][T15320] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.596113][T15320] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.596252][T15320] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.596419][T15320] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.596561][T15320] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.596693][T15320] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.596846][T15320] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.596997][T15320] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.597135][T15320] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.597266][T15320] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.597409][T15320] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.597542][T15320] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.597674][T15320] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.597808][T15320] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.597953][T15320] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.598088][T15320] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.598222][T15320] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.598367][T15320] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.598507][T15320] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.598643][T15320] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.598777][T15320] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.599018][T15320] ? move_addr_to_kernel (net/socket.c:2511) [ 948.599152][T15320] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.599283][T15320] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.599432][T15320] ___sys_sendmsg (net/socket.c:2641) [ 948.599565][T15320] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.599701][T15320] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.599841][T15320] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.600070][T15320] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.600209][T15320] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.600351][T15320] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.600495][T15320] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.600632][T15320] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.600773][T15320] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.600977][T15320] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.601113][T15320] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.601288][T15320] RIP: 0033:0x7f8972becc5e [ 948.601443][T15320] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.602024][T15320] RSP: 002b:00007ffe3fc37620 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.602227][T15320] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8972becc5e [ 948.602438][T15320] RDX: 0000000000000000 RSI: 00007ffe3fc376e0 RDI: 0000000000000005 [ 948.602644][T15320] RBP: 00007ffe3fc37630 R08: 0000000000000000 R09: 0000000000000000 [ 948.602851][T15320] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.603079][T15320] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 948.815186][T15345] ------------[ cut here ]------------ | [ 948.815414][T15345] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15345 | [ 948.815705][T15345] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.816830][T15345] Tainted: [W]=WARN [ 948.817144][T15345] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.817388][T15345] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.817592][T15345] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.818144][T15345] RSP: 0018:ffa00000042275d0 EFLAGS: 00010286 [ 948.818396][T15345] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725857 [ 948.818661][T15345] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c2b8 [ 948.818943][T15345] RBP: 1ff4000000844ebb R08: 1fe2200003725858 R09: fffa3bfffffb0b37 [ 948.819212][T15345] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d8f4 [ 948.819496][T15345] R13: ff1100001b92d8c0 R14: ffffffff931c7940 R15: ff1100001b92c200 [ 948.819763][T15345] FS: 00007f092558f440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 948.820092][T15345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.820313][T15345] CR2: 000000000044f720 CR3: 0000000009137002 CR4: 0000000000771ef0 [ 948.820573][T15345] PKRU: 55555554 [ 948.820723][T15345] Call Trace: [ 948.820872][T15345] [ 948.821004][T15345] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.821190][T15345] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.821399][T15345] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.821589][T15345] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.821771][T15345] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.821981][T15345] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.822178][T15345] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.822365][T15345] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.822567][T15345] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.822749][T15345] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.822948][T15345] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.823144][T15345] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.823343][T15345] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.823538][T15345] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.823727][T15345] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.823927][T15345] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.824111][T15345] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.824307][T15345] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.824518][T15345] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.824702][T15345] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.824910][T15345] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.825119][T15345] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.825308][T15345] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.825548][T15345] ? move_addr_to_kernel (net/socket.c:2511) [ 948.825733][T15345] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.825934][T15345] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.826123][T15345] ___sys_sendmsg (net/socket.c:2641) [ 948.826307][T15345] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.826513][T15345] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.826701][T15345] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.826912][T15345] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.827097][T15345] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.827339][T15345] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.827543][T15345] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.827740][T15345] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.827945][T15345] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.828132][T15345] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.828319][T15345] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.828559][T15345] RIP: 0033:0x7f09256e9c5e [ 948.828783][T15345] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.829361][T15345] RSP: 002b:00007ffe6365ab00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.829633][T15345] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f09256e9c5e [ 948.829884][T15345] RDX: 0000000000000000 RSI: 00007ffe6365abc0 RDI: 0000000000000005 [ 948.830144][T15345] RBP: 00007ffe6365ab10 R08: 0000000000000000 R09: 0000000000000000 [ 948.830400][T15345] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.830656][T15345] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 948.900098][T15349] ------------[ cut here ]------------ | [ 948.900284][T15349] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15349 | [ 948.900536][T15349] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.901545][T15349] Tainted: [W]=WARN [ 948.901654][T15349] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.901836][T15349] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.901991][T15349] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 948.902488][T15349] RSP: 0018:ffa00000043075d0 EFLAGS: 00010286 [ 948.902666][T15349] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192ea87 [ 948.902874][T15349] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975438 [ 948.903086][T15349] RBP: 1ff4000000860ebb R08: 1fe220000192ea88 R09: fffa3bfffffb0b37 [ 948.903283][T15349] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8cb4 [ 948.903488][T15349] R13: ff1100001c3a8c80 R14: ffffffff931c7940 R15: ff1100000c975380 [ 948.903704][T15349] FS: 00007f17c5bff440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 948.903947][T15349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.904111][T15349] CR2: 000000000044f720 CR3: 000000000d857005 CR4: 0000000000771ef0 [ 948.904309][T15349] PKRU: 55555554 [ 948.904418][T15349] Call Trace: [ 948.904521][T15349] [ 948.904588][T15349] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 948.904729][T15349] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 948.904877][T15349] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 948.905022][T15349] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.905154][T15349] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.905286][T15349] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 948.905427][T15349] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 948.905581][T15349] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 948.905718][T15349] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 948.905856][T15349] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 948.906006][T15349] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 948.906142][T15349] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 948.906279][T15349] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 948.906419][T15349] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 948.906551][T15349] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 948.906686][T15349] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 948.906824][T15349] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.906974][T15349] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 948.907112][T15349] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 948.907250][T15349] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 948.907402][T15349] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 948.907546][T15349] ? copy_msghdr_from_user (net/socket.c:2525) [ 948.907682][T15349] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 948.907850][T15349] ? move_addr_to_kernel (net/socket.c:2511) [ 948.907991][T15349] ? filemap_map_folio_range (mm/filemap.c:3873) [ 948.908128][T15349] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 948.908264][T15349] ___sys_sendmsg (net/socket.c:2641) [ 948.908403][T15349] ? copy_msghdr_from_user (net/socket.c:2628) [ 948.908541][T15349] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 948.908680][T15349] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 948.908814][T15349] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 948.908958][T15349] ? __sys_sendmsg_sock (net/socket.c:2656) [ 948.909097][T15349] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 948.909231][T15349] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.909366][T15349] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 948.909538][T15349] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 948.909684][T15349] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 948.909824][T15349] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 948.910004][T15349] RIP: 0033:0x7f17c5d59c5e [ 948.910194][T15349] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 948.910693][T15349] RSP: 002b:00007ffc07d9ce70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 948.910905][T15349] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f17c5d59c5e [ 948.911113][T15349] RDX: 0000000000000000 RSI: 00007ffc07d9cf30 RDI: 0000000000000005 [ 948.911314][T15349] RBP: 00007ffc07d9ce80 R08: 0000000000000000 R09: 0000000000000000 [ 948.911521][T15349] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 948.911725][T15349] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 948.997386][T15355] ------------[ cut here ]------------ | [ 948.997600][T15355] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15355 | [ 948.997909][T15355] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 948.998820][T15355] Tainted: [W]=WARN [ 948.999007][T15355] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 948.999253][T15355] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 948.999475][T15355] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.000042][T15355] RSP: 0018:ffa00000043375d0 EFLAGS: 00010286 [ 949.000275][T15355] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eaf7 [ 949.000556][T15355] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 949.000822][T15355] RBP: 1ff4000000866ebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b37 [ 949.001099][T15355] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9758f4 [ 949.001362][T15355] R13: ff1100000c9758c0 R14: ffffffff931c7940 R15: ff1100000c975700 [ 949.001621][T15355] FS: 00007f6d7f5a0440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 949.001931][T15355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.002156][T15355] CR2: 000000000044f720 CR3: 000000001987e005 CR4: 0000000000771ef0 [ 949.002423][T15355] PKRU: 55555554 [ 949.002576][T15355] Call Trace: [ 949.002746][T15355] [ 949.002868][T15355] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.003080][T15355] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.003287][T15355] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.003483][T15355] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.003667][T15355] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.003859][T15355] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.004051][T15355] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.004236][T15355] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.004426][T15355] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.004610][T15355] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.004796][T15355] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.004989][T15355] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.005175][T15355] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.005360][T15355] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.005547][T15355] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.005733][T15355] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.005929][T15355] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.006116][T15355] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.006303][T15355] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.006496][T15355] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.006697][T15355] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.006908][T15355] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.007092][T15355] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.007307][T15355] ? move_addr_to_kernel (net/socket.c:2511) [ 949.007504][T15355] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.007690][T15355] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.007878][T15355] ___sys_sendmsg (net/socket.c:2641) [ 949.008076][T15355] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.008280][T15355] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.008499][T15355] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.008703][T15355] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.008907][T15355] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.009096][T15355] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.009280][T15355] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.009477][T15355] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.009664][T15355] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.009849][T15355] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.010049][T15355] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.010267][T15355] RIP: 0033:0x7f6d7f6fac5e [ 949.010466][T15355] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.011003][T15355] RSP: 002b:00007fff5dcef4b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.011254][T15355] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6d7f6fac5e [ 949.011514][T15355] RDX: 0000000000000000 RSI: 00007fff5dcef570 RDI: 0000000000000005 [ 949.011762][T15355] RBP: 00007fff5dcef4c0 R08: 0000000000000000 R09: 0000000000000000 [ 949.012022][T15355] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.012270][T15355] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 949.082686][T15359] ------------[ cut here ]------------ | [ 949.082863][T15359] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15359 | [ 949.083101][T15359] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.083880][T15359] Tainted: [W]=WARN [ 949.083987][T15359] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.084161][T15359] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.084303][T15359] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.084794][T15359] RSP: 0018:ffa00000042175d0 EFLAGS: 00010286 [ 949.084993][T15359] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e937 [ 949.085194][T15359] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9749b8 [ 949.085408][T15359] RBP: 1ff4000000842ebb R08: 1fe220000192e938 R09: fffa3bfffffb0b37 [ 949.085624][T15359] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c974cb4 [ 949.085820][T15359] R13: ff1100000c974c80 R14: ffffffff931c7940 R15: ff1100000c974900 [ 949.086028][T15359] FS: 00007f509bc1d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 949.086280][T15359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.086464][T15359] CR2: 000000000044f720 CR3: 0000000009135002 CR4: 0000000000771ef0 [ 949.086673][T15359] PKRU: 55555554 [ 949.086776][T15359] Call Trace: [ 949.086883][T15359] [ 949.086966][T15359] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.087102][T15359] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.087250][T15359] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.087402][T15359] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.087544][T15359] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.087685][T15359] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.087822][T15359] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.088268][T15359] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.088430][T15359] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.088572][T15359] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.088710][T15359] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.088844][T15359] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.088995][T15359] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.089132][T15359] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.089295][T15359] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.089532][T15359] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.089672][T15359] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.089816][T15359] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.089965][T15359] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.090099][T15359] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.090237][T15359] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.090385][T15359] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.090521][T15359] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.090717][T15359] ? move_addr_to_kernel (net/socket.c:2511) [ 949.090859][T15359] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.090997][T15359] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.091142][T15359] ___sys_sendmsg (net/socket.c:2641) [ 949.091277][T15359] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.091427][T15359] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.091577][T15359] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.091718][T15359] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.091851][T15359] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.091995][T15359] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.092132][T15359] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.092284][T15359] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.092425][T15359] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.092565][T15359] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.092720][T15359] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.092884][T15359] RIP: 0033:0x7f509bd77c5e [ 949.093035][T15359] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.093549][T15359] RSP: 002b:00007ffe56224d30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.093748][T15359] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f509bd77c5e [ 949.093962][T15359] RDX: 0000000000000000 RSI: 00007ffe56224df0 RDI: 0000000000000005 [ 949.094163][T15359] RBP: 00007ffe56224d40 R08: 0000000000000000 R09: 0000000000000000 [ 949.094366][T15359] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.094572][T15359] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 949.172351][T15365] ------------[ cut here ]------------ | [ 949.172556][T15365] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15365 | [ 949.172787][T15365] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.173740][T15365] Tainted: [W]=WARN [ 949.173861][T15365] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.174061][T15365] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.174224][T15365] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.174718][T15365] RSP: 0018:ffa00000043575d0 EFLAGS: 00010286 [ 949.174891][T15365] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c22f7 [ 949.175101][T15365] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6117b8 [ 949.175335][T15365] RBP: 1ff400000086aebb R08: 1fe22000034c22f8 R09: fffa3bfffffb0b37 [ 949.175548][T15365] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a6111f4 [ 949.175757][T15365] R13: ff1100001a6111c0 R14: ffffffff931c7940 R15: ff1100001a611700 [ 949.175970][T15365] FS: 00007f671cb90440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 949.176231][T15365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.176407][T15365] CR2: 000000000044f720 CR3: 000000001ad04002 CR4: 0000000000771ef0 [ 949.176610][T15365] PKRU: 55555554 [ 949.176711][T15365] Call Trace: [ 949.176816][T15365] [ 949.176886][T15365] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.177027][T15365] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.177178][T15365] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.177315][T15365] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.177485][T15365] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.177639][T15365] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.177775][T15365] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.177913][T15365] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.178052][T15365] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.178195][T15365] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.178347][T15365] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.178488][T15365] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.178628][T15365] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.178760][T15365] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.178891][T15365] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.179030][T15365] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.179164][T15365] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.179297][T15365] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.179450][T15365] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.179711][T15365] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.179847][T15365] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.179986][T15365] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.180122][T15365] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.180288][T15365] ? move_addr_to_kernel (net/socket.c:2511) [ 949.180429][T15365] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.180564][T15365] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.180701][T15365] ___sys_sendmsg (net/socket.c:2641) [ 949.180838][T15365] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.180998][T15365] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.181139][T15365] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.181284][T15365] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.181446][T15365] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.181589][T15365] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.181723][T15365] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.181858][T15365] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.182005][T15365] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.182140][T15365] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.182273][T15365] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.182466][T15365] RIP: 0033:0x7f671cceac5e [ 949.182610][T15365] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.183089][T15365] RSP: 002b:00007fffd03c07a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.183292][T15365] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f671cceac5e [ 949.183497][T15365] RDX: 0000000000000000 RSI: 00007fffd03c0860 RDI: 0000000000000005 [ 949.183696][T15365] RBP: 00007fffd03c07b0 R08: 0000000000000000 R09: 0000000000000000 [ 949.183902][T15365] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.184101][T15365] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 949.259167][T15369] ------------[ cut here ]------------ | [ 949.259393][T15369] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15369 | [ 949.259683][T15369] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.261126][T15369] Tainted: [W]=WARN [ 949.261228][T15369] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.261405][T15369] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.261558][T15369] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.262055][T15369] RSP: 0018:ffa00000043875d0 EFLAGS: 00010286 [ 949.262226][T15369] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c2137 [ 949.262430][T15369] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6109b8 [ 949.262630][T15369] RBP: 1ff4000000870ebb R08: 1fe22000034c2138 R09: fffa3bfffffb0b37 [ 949.262830][T15369] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a610cb4 [ 949.263034][T15369] R13: ff1100001a610c80 R14: ffffffff931c7940 R15: ff1100001a610900 [ 949.263235][T15369] FS: 00007f8f87b0c440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 949.263476][T15369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.263647][T15369] CR2: 000000000044f720 CR3: 000000001d0b6001 CR4: 0000000000771ef0 [ 949.263845][T15369] PKRU: 55555554 [ 949.263951][T15369] Call Trace: [ 949.264050][T15369] [ 949.264118][T15369] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.264248][T15369] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.264396][T15369] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.264532][T15369] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.264664][T15369] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.264802][T15369] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.264939][T15369] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.265074][T15369] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.265205][T15369] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.265340][T15369] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.265496][T15369] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.265629][T15369] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.265766][T15369] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.265906][T15369] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.266062][T15369] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.266224][T15369] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.266411][T15369] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.266589][T15369] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.266728][T15369] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.266865][T15369] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.267010][T15369] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.267143][T15369] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.267276][T15369] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.267460][T15369] ? move_addr_to_kernel (net/socket.c:2511) [ 949.267595][T15369] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.267727][T15369] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.267865][T15369] ___sys_sendmsg (net/socket.c:2641) [ 949.268008][T15369] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.268143][T15369] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.268278][T15369] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.268424][T15369] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.268558][T15369] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.268696][T15369] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.268831][T15369] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.268969][T15369] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.269104][T15369] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.269239][T15369] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.269376][T15369] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.269618][T15369] RIP: 0033:0x7f8f87c66c5e [ 949.269782][T15369] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.270439][T15369] RSP: 002b:00007ffd186d0620 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.270729][T15369] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8f87c66c5e [ 949.271005][T15369] RDX: 0000000000000000 RSI: 00007ffd186d06e0 RDI: 0000000000000005 [ 949.271282][T15369] RBP: 00007ffd186d0630 R08: 0000000000000000 R09: 0000000000000000 [ 949.271570][T15369] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.271856][T15369] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 949.347297][T15375] ------------[ cut here ]------------ | [ 949.347475][T15375] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15375 | [ 949.347717][T15375] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.348554][T15375] Tainted: [W]=WARN [ 949.348664][T15375] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.348846][T15375] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.349018][T15375] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.349550][T15375] RSP: 0018:ffa00000043675d0 EFLAGS: 00010286 [ 949.349740][T15375] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0457 [ 949.349966][T15375] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 949.350195][T15375] RBP: 1ff400000086cebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b37 [ 949.350427][T15375] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503c74 [ 949.350647][T15375] R13: ff1100000f503c40 R14: ffffffff931c7940 R15: ff1100000f502200 [ 949.350868][T15375] FS: 00007f5de3c22440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 949.351130][T15375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.351312][T15375] CR2: 000000000044f720 CR3: 000000001c0c2004 CR4: 0000000000771ef0 [ 949.351553][T15375] PKRU: 55555554 [ 949.351667][T15375] Call Trace: [ 949.351773][T15375] [ 949.351847][T15375] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.351996][T15375] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.352156][T15375] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.352307][T15375] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.352461][T15375] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.352605][T15375] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.352745][T15375] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.352885][T15375] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.353036][T15375] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.353181][T15375] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.353329][T15375] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.353471][T15375] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.353615][T15375] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.353762][T15375] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.353908][T15375] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.354061][T15375] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.354205][T15375] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.354345][T15375] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.354491][T15375] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.354638][T15375] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.354784][T15375] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.354934][T15375] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.355075][T15375] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.355248][T15375] ? move_addr_to_kernel (net/socket.c:2511) [ 949.355394][T15375] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.355535][T15375] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.355677][T15375] ___sys_sendmsg (net/socket.c:2641) [ 949.355817][T15375] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.355968][T15375] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.356113][T15375] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.356257][T15375] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.356402][T15375] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.356546][T15375] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.356686][T15375] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.356838][T15375] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.356982][T15375] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.357124][T15375] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.357261][T15375] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.357437][T15375] RIP: 0033:0x7f5de3d7cc5e [ 949.357577][T15375] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.358055][T15375] RSP: 002b:00007ffe0817f200 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.358258][T15375] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5de3d7cc5e [ 949.358463][T15375] RDX: 0000000000000000 RSI: 00007ffe0817f2c0 RDI: 0000000000000005 [ 949.358663][T15375] RBP: 00007ffe0817f210 R08: 0000000000000000 R09: 0000000000000000 [ 949.358862][T15375] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.359069][T15375] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 949.433010][T15379] ------------[ cut here ]------------ | [ 949.433194][T15379] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15379 | [ 949.433433][T15379] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.434839][T15379] Tainted: [W]=WARN [ 949.434950][T15379] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.435125][T15379] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.435272][T15379] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.435762][T15379] RSP: 0018:ffa00000042275d0 EFLAGS: 00010286 [ 949.435937][T15379] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea04ff [ 949.436145][T15379] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5027f8 [ 949.436353][T15379] RBP: 1ff4000000844ebb R08: 1fe2200001ea0500 R09: fffa3bfffffb0b37 [ 949.436561][T15379] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f5033b4 [ 949.436764][T15379] R13: ff1100000f503380 R14: ffffffff931c7940 R15: ff1100000f502740 [ 949.436986][T15379] FS: 00007f043d6e2440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 949.437230][T15379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.437405][T15379] CR2: 000000000044f720 CR3: 000000001c0c2006 CR4: 0000000000771ef0 [ 949.437607][T15379] PKRU: 55555554 [ 949.437707][T15379] Call Trace: [ 949.437813][T15379] [ 949.437882][T15379] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.438041][T15379] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.438188][T15379] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.438325][T15379] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.438462][T15379] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.438598][T15379] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.438731][T15379] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.438867][T15379] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.439004][T15379] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.439155][T15379] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.439293][T15379] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.439428][T15379] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.439568][T15379] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.439701][T15379] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.439833][T15379] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.439976][T15379] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.440115][T15379] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.440248][T15379] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.440380][T15379] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.440519][T15379] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.440658][T15379] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.440790][T15379] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.440932][T15379] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.441099][T15379] ? move_addr_to_kernel (net/socket.c:2511) [ 949.441241][T15379] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.441372][T15379] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.441515][T15379] ___sys_sendmsg (net/socket.c:2641) [ 949.441648][T15379] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.441784][T15379] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.441929][T15379] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.442064][T15379] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.442201][T15379] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.442338][T15379] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.442475][T15379] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.442615][T15379] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.442761][T15379] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.442902][T15379] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.443042][T15379] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.443213][T15379] RIP: 0033:0x7f043d83cc5e [ 949.443370][T15379] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.443881][T15379] RSP: 002b:00007ffe08dc7ae0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.444092][T15379] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f043d83cc5e [ 949.444294][T15379] RDX: 0000000000000000 RSI: 00007ffe08dc7ba0 RDI: 0000000000000005 [ 949.444508][T15379] RBP: 00007ffe08dc7af0 R08: 0000000000000000 R09: 0000000000000000 [ 949.444711][T15379] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.444917][T15379] R13: 0000000069cbe7fc R14: 0000000000000004 R15: 000000000049d620 | [ 949.536006][T15385] ------------[ cut here ]------------ | [ 949.536234][T15385] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15385 | [ 949.536552][T15385] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.537504][T15385] Tainted: [W]=WARN [ 949.537670][T15385] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.537929][T15385] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.538144][T15385] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.538717][T15385] RSP: 0018:ffa00000043975d0 EFLAGS: 00010286 [ 949.538952][T15385] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1a87 [ 949.539220][T15385] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d438 [ 949.539497][T15385] RBP: 1ff4000000872ebb R08: 1fe22000036f1a88 R09: fffa3bfffffb0b37 [ 949.539754][T15385] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78de34 [ 949.540032][T15385] R13: ff1100001b78de00 R14: ffffffff931c7940 R15: ff1100001b78d380 [ 949.540294][T15385] FS: 00007fb7b1499440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 949.540603][T15385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.540830][T15385] CR2: 000000000044f720 CR3: 00000000180ed002 CR4: 0000000000771ef0 [ 949.541096][T15385] PKRU: 55555554 [ 949.541245][T15385] Call Trace: [ 949.541402][T15385] [ 949.541525][T15385] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.541719][T15385] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.541939][T15385] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.542135][T15385] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.542328][T15385] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.542557][T15385] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.542754][T15385] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.542969][T15385] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.543173][T15385] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.543368][T15385] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.543588][T15385] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.543787][T15385] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.544003][T15385] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.544205][T15385] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.544395][T15385] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.544594][T15385] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.544790][T15385] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.545002][T15385] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.545202][T15385] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.545403][T15385] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.545605][T15385] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.545805][T15385] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.546018][T15385] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.546262][T15385] ? move_addr_to_kernel (net/socket.c:2511) [ 949.546470][T15385] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.546663][T15385] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.546871][T15385] ___sys_sendmsg (net/socket.c:2641) [ 949.547080][T15385] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.547268][T15385] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.547470][T15385] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.547668][T15385] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.547865][T15385] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.548074][T15385] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.548264][T15385] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.548471][T15385] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.548663][T15385] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.548858][T15385] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.549072][T15385] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.549293][T15385] RIP: 0033:0x7fb7b15f3c5e [ 949.549515][T15385] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.550076][T15385] RSP: 002b:00007ffd4845b720 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.550366][T15385] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb7b15f3c5e [ 949.550659][T15385] RDX: 0000000000000000 RSI: 00007ffd4845b7e0 RDI: 0000000000000005 [ 949.550988][T15385] RBP: 00007ffd4845b730 R08: 0000000000000000 R09: 0000000000000000 [ 949.551265][T15385] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.551540][T15385] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 949.626046][T15389] ------------[ cut here ]------------ | [ 949.626258][T15389] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15389 | [ 949.626576][T15389] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.627490][T15389] Tainted: [W]=WARN [ 949.627642][T15389] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.627860][T15389] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.628076][T15389] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.628629][T15389] RSP: 0018:ffa00000043e75d0 EFLAGS: 00010286 [ 949.628861][T15389] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1b67 [ 949.629130][T15389] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 949.629393][T15389] RBP: 1ff400000087cebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b37 [ 949.629651][T15389] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d734 [ 949.629921][T15389] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 949.630185][T15389] FS: 00007faa21c8e440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 949.630491][T15389] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.630718][T15389] CR2: 000000000044f720 CR3: 000000001c908006 CR4: 0000000000771ef0 [ 949.630983][T15389] PKRU: 55555554 [ 949.631190][T15389] Call Trace: [ 949.631408][T15389] [ 949.631565][T15389] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.631777][T15389] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.631999][T15389] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.632195][T15389] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.632420][T15389] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.632614][T15389] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.632801][T15389] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.633006][T15389] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.633195][T15389] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.633392][T15389] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.633584][T15389] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.633771][T15389] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.633975][T15389] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.634163][T15389] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.634344][T15389] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.634538][T15389] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.634724][T15389] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.634922][T15389] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.635110][T15389] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.635305][T15389] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.635506][T15389] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.635691][T15389] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.635874][T15389] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.636102][T15389] ? move_addr_to_kernel (net/socket.c:2511) [ 949.636290][T15389] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.636482][T15389] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.636672][T15389] ___sys_sendmsg (net/socket.c:2641) [ 949.636857][T15389] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.637058][T15389] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.637254][T15389] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.637488][T15389] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.637705][T15389] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.637912][T15389] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.638102][T15389] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.638288][T15389] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.638503][T15389] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.638717][T15389] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.638939][T15389] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.639177][T15389] RIP: 0033:0x7faa21de8c5e [ 949.639371][T15389] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.639981][T15389] RSP: 002b:00007ffc25795190 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.640243][T15389] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007faa21de8c5e [ 949.640534][T15389] RDX: 0000000000000000 RSI: 00007ffc25795250 RDI: 0000000000000005 [ 949.640791][T15389] RBP: 00007ffc257951a0 R08: 0000000000000000 R09: 0000000000000000 [ 949.641060][T15389] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.641313][T15389] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 949.708313][T15395] ------------[ cut here ]------------ | [ 949.708511][T15395] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15395 | [ 949.708754][T15395] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.709542][T15395] Tainted: [W]=WARN [ 949.709644][T15395] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.709814][T15395] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.709966][T15395] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.710446][T15395] RSP: 0018:ffa00000043d75d0 EFLAGS: 00010286 [ 949.710619][T15395] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725af7 [ 949.710817][T15395] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d7b8 [ 949.711023][T15395] RBP: 1ff400000087aebb R08: 1fe2200003725af8 R09: fffa3bfffffb0b37 [ 949.711229][T15395] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92dab4 [ 949.711437][T15395] R13: ff1100001b92da80 R14: ffffffff931c7940 R15: ff1100001b92d700 [ 949.711638][T15395] FS: 00007ffa4f127440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 949.711890][T15395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.712087][T15395] CR2: 000000000044f720 CR3: 00000000183be005 CR4: 0000000000771ef0 [ 949.712294][T15395] PKRU: 55555554 [ 949.712422][T15395] Call Trace: [ 949.712527][T15395] [ 949.712621][T15395] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.712786][T15395] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.712961][T15395] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.713126][T15395] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.713288][T15395] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.713462][T15395] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.713635][T15395] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.713794][T15395] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.714412][T15395] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.714567][T15395] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.714702][T15395] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.714833][T15395] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.714975][T15395] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.715113][T15395] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.715243][T15395] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.715378][T15395] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.715515][T15395] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.715651][T15395] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.715786][T15395] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.715926][T15395] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.716062][T15395] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.716199][T15395] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.716329][T15395] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.716495][T15395] ? move_addr_to_kernel (net/socket.c:2511) [ 949.716630][T15395] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.716761][T15395] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.716900][T15395] ___sys_sendmsg (net/socket.c:2641) [ 949.717032][T15395] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.717170][T15395] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.717305][T15395] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.717442][T15395] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.717574][T15395] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.717708][T15395] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.717840][T15395] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.717979][T15395] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.718115][T15395] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.718247][T15395] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.718379][T15395] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.718546][T15395] RIP: 0033:0x7ffa4f281c5e [ 949.718687][T15395] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.719173][T15395] RSP: 002b:00007ffdade60010 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.719380][T15395] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ffa4f281c5e [ 949.719590][T15395] RDX: 0000000000000000 RSI: 00007ffdade600d0 RDI: 0000000000000005 [ 949.719787][T15395] RBP: 00007ffdade60020 R08: 0000000000000000 R09: 0000000000000000 [ 949.719997][T15395] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.720200][T15395] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 949.798171][T15399] ------------[ cut here ]------------ | [ 949.798344][T15399] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15399 | [ 949.798604][T15399] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.799483][T15399] Tainted: [W]=WARN [ 949.799592][T15399] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.799777][T15399] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.799999][T15399] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.800532][T15399] RSP: 0018:ffa00000042075d0 EFLAGS: 00010286 [ 949.800714][T15399] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725857 [ 949.800974][T15399] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c2b8 [ 949.801179][T15399] RBP: 1ff4000000840ebb R08: 1fe2200003725858 R09: fffa3bfffffb0b37 [ 949.801378][T15399] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d8f4 [ 949.801591][T15399] R13: ff1100001b92d8c0 R14: ffffffff931c7940 R15: ff1100001b92c200 [ 949.801791][T15399] FS: 00007f2b498f8440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 949.802085][T15399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.802253][T15399] CR2: 000000000044f720 CR3: 000000001aefb001 CR4: 0000000000771ef0 [ 949.802460][T15399] PKRU: 55555554 [ 949.802561][T15399] Call Trace: [ 949.802663][T15399] [ 949.802732][T15399] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.802868][T15399] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.803042][T15399] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.803178][T15399] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.803310][T15399] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.803451][T15399] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.803589][T15399] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.803724][T15399] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.803862][T15399] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.803998][T15399] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.804136][T15399] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.804266][T15399] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.804402][T15399] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.804541][T15399] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.804674][T15399] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.804805][T15399] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.804941][T15399] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.805073][T15399] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.805209][T15399] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.805341][T15399] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.805486][T15399] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.805621][T15399] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.805753][T15399] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.805922][T15399] ? move_addr_to_kernel (net/socket.c:2511) [ 949.806060][T15399] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.806193][T15399] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.806340][T15399] ___sys_sendmsg (net/socket.c:2641) [ 949.806483][T15399] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.806636][T15399] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.806779][T15399] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.806928][T15399] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.807074][T15399] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.807213][T15399] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.807350][T15399] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.807490][T15399] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.807625][T15399] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.807762][T15399] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.807906][T15399] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.808074][T15399] RIP: 0033:0x7f2b49a52c5e [ 949.808219][T15399] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.808716][T15399] RSP: 002b:00007ffffc510b20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.808932][T15399] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2b49a52c5e [ 949.809137][T15399] RDX: 0000000000000000 RSI: 00007ffffc510be0 RDI: 0000000000000005 [ 949.809348][T15399] RBP: 00007ffffc510b30 R08: 0000000000000000 R09: 0000000000000000 [ 949.809556][T15399] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.809763][T15399] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 949.882111][T15405] ------------[ cut here ]------------ | [ 949.882345][T15405] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15405 | [ 949.882675][T15405] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.883746][T15405] Tainted: [W]=WARN [ 949.883912][T15405] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.884147][T15405] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.884366][T15405] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.884946][T15405] RSP: 0018:ffa00000044475d0 EFLAGS: 00010286 [ 949.885188][T15405] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003875137 [ 949.885464][T15405] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a89b8 [ 949.885735][T15405] RBP: 1ff4000000888ebb R08: 1fe2200003875138 R09: fffa3bfffffb0b37 [ 949.886014][T15405] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8cb4 [ 949.886279][T15405] R13: ff1100001c3a8c80 R14: ffffffff931c7940 R15: ff1100001c3a8900 [ 949.886557][T15405] FS: 00007f637c9e5440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 949.886863][T15405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.887107][T15405] CR2: 000000000044f720 CR3: 0000000019ced004 CR4: 0000000000771ef0 [ 949.887369][T15405] PKRU: 55555554 [ 949.887546][T15405] Call Trace: [ 949.887698][T15405] [ 949.887817][T15405] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.888026][T15405] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.888368][T15405] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.888576][T15405] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.888769][T15405] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.888999][T15405] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.889199][T15405] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.889407][T15405] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.889614][T15405] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.889815][T15405] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.890021][T15405] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.890208][T15405] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.890413][T15405] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.890616][T15405] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.890808][T15405] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.891024][T15405] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.891220][T15405] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.891426][T15405] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.891616][T15405] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.891816][T15405] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.892018][T15405] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.892205][T15405] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.892400][T15405] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.892627][T15405] ? move_addr_to_kernel (net/socket.c:2511) [ 949.892815][T15405] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.893016][T15405] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.893210][T15405] ___sys_sendmsg (net/socket.c:2641) [ 949.893412][T15405] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.893616][T15405] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.893817][T15405] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.894026][T15405] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.894220][T15405] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.894423][T15405] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.894619][T15405] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.894813][T15405] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.895020][T15405] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.895216][T15405] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.895423][T15405] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.895640][T15405] RIP: 0033:0x7f637cb3fc5e [ 949.895839][T15405] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.896403][T15405] RSP: 002b:00007fff2e696ff0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.896665][T15405] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f637cb3fc5e [ 949.896948][T15405] RDX: 0000000000000000 RSI: 00007fff2e6970b0 RDI: 0000000000000005 [ 949.897196][T15405] RBP: 00007fff2e697000 R08: 0000000000000000 R09: 0000000000000000 [ 949.897469][T15405] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.897717][T15405] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 949.964052][T15409] ------------[ cut here ]------------ | [ 949.964222][T15409] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15409 | [ 949.964494][T15409] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 949.965368][T15409] Tainted: [W]=WARN [ 949.965476][T15409] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 949.965660][T15409] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 949.966027][T15409] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 949.966568][T15409] RSP: 0018:ffa00000043d75d0 EFLAGS: 00010286 [ 949.966872][T15409] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b082bf [ 949.967158][T15409] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8415f8 [ 949.967369][T15409] RBP: 1ff400000087aebb R08: 1fe2200001b082c0 R09: fffa3bfffffb0b37 [ 949.967582][T15409] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8413b4 [ 949.967799][T15409] R13: ff1100000d841380 R14: ffffffff931c7940 R15: ff1100000d841540 [ 949.968089][T15409] FS: 00007fbaf5c02440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 949.968339][T15409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.968528][T15409] CR2: 000000000044f720 CR3: 000000001b7f2001 CR4: 0000000000771ef0 [ 949.968741][T15409] PKRU: 55555554 [ 949.968843][T15409] Call Trace: [ 949.968947][T15409] [ 949.969018][T15409] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 949.969152][T15409] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 949.969306][T15409] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 949.969447][T15409] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.969599][T15409] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.969737][T15409] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 949.969871][T15409] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 949.970010][T15409] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 949.970143][T15409] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 949.970277][T15409] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 949.970419][T15409] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 949.970553][T15409] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 949.970688][T15409] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 949.970825][T15409] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 949.970964][T15409] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 949.971099][T15409] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 949.971245][T15409] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.971382][T15409] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 949.971522][T15409] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 949.971667][T15409] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 949.971802][T15409] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 949.971939][T15409] ? copy_msghdr_from_user (net/socket.c:2525) [ 949.972075][T15409] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 949.972244][T15409] ? move_addr_to_kernel (net/socket.c:2511) [ 949.972408][T15409] ? filemap_map_folio_range (mm/filemap.c:3873) [ 949.972543][T15409] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 949.972680][T15409] ___sys_sendmsg (net/socket.c:2641) [ 949.972813][T15409] ? copy_msghdr_from_user (net/socket.c:2628) [ 949.972953][T15409] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 949.973089][T15409] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 949.973225][T15409] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 949.973360][T15409] ? __sys_sendmsg_sock (net/socket.c:2656) [ 949.973500][T15409] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 949.973633][T15409] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.973767][T15409] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 949.973908][T15409] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 949.974051][T15409] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 949.974183][T15409] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 949.974347][T15409] RIP: 0033:0x7fbaf5d5cc5e [ 949.974494][T15409] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 949.975008][T15409] RSP: 002b:00007ffce7953340 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 949.975213][T15409] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbaf5d5cc5e [ 949.975419][T15409] RDX: 0000000000000000 RSI: 00007ffce7953400 RDI: 0000000000000005 [ 949.975618][T15409] RBP: 00007ffce7953350 R08: 0000000000000000 R09: 0000000000000000 [ 949.975834][T15409] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 949.976038][T15409] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 950.050154][T15415] ------------[ cut here ]------------ | [ 950.050363][T15415] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15415 | [ 950.050620][T15415] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.051504][T15415] Tainted: [W]=WARN [ 950.051607][T15415] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.051784][T15415] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.051939][T15415] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.052460][T15415] RSP: 0018:ffa00000044375d0 EFLAGS: 00010286 [ 950.052645][T15415] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b08367 [ 950.052859][T15415] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841b38 [ 950.053436][T15415] RBP: 1ff4000000886ebb R08: 1fe2200001b08368 R09: fffa3bfffffb0b37 [ 950.053640][T15415] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8418f4 [ 950.053839][T15415] R13: ff1100000d8418c0 R14: ffffffff931c7940 R15: ff1100000d841a80 [ 950.054044][T15415] FS: 00007ff21a9ce440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 950.054279][T15415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.054460][T15415] CR2: 000000000044f720 CR3: 000000000bddd001 CR4: 0000000000771ef0 [ 950.054665][T15415] PKRU: 55555554 [ 950.054769][T15415] Call Trace: [ 950.054873][T15415] [ 950.054951][T15415] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.055087][T15415] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.055233][T15415] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.055366][T15415] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.055503][T15415] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.055647][T15415] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.055784][T15415] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.055932][T15415] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.056069][T15415] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.056211][T15415] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.056348][T15415] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.056493][T15415] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.056636][T15415] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.056778][T15415] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.056925][T15415] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.057069][T15415] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.057205][T15415] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.057340][T15415] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.057480][T15415] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.057625][T15415] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.057781][T15415] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.057925][T15415] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.058078][T15415] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.058239][T15415] ? move_addr_to_kernel (net/socket.c:2511) [ 950.058379][T15415] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.058522][T15415] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.058662][T15415] ___sys_sendmsg (net/socket.c:2641) [ 950.058801][T15415] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.058947][T15415] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.059090][T15415] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.059230][T15415] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.059370][T15415] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.059519][T15415] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.059660][T15415] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.059798][T15415] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.059942][T15415] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.060080][T15415] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.060217][T15415] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.060394][T15415] RIP: 0033:0x7ff21ab28c5e [ 950.060542][T15415] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.061040][T15415] RSP: 002b:00007ffdc29f6b40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.061248][T15415] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff21ab28c5e [ 950.061458][T15415] RDX: 0000000000000000 RSI: 00007ffdc29f6c00 RDI: 0000000000000005 [ 950.061671][T15415] RBP: 00007ffdc29f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 950.061880][T15415] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.062098][T15415] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 950.134640][T15419] ------------[ cut here ]------------ | [ 950.134816][T15419] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15419 | [ 950.135602][T15419] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.136432][T15419] Tainted: [W]=WARN [ 950.136532][T15419] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.136697][T15419] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.136838][T15419] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.137319][T15419] RSP: 0018:ffa00000044575d0 EFLAGS: 00010286 [ 950.137518][T15419] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387516f [ 950.137722][T15419] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8b78 [ 950.137930][T15419] RBP: 1ff400000088aebb R08: 1fe2200003875170 R09: fffa3bfffffb0b37 [ 950.138149][T15419] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9c74 [ 950.138349][T15419] R13: ff1100001c3a9c40 R14: ffffffff931c7940 R15: ff1100001c3a8ac0 [ 950.138566][T15419] FS: 00007f14e0bf2440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 950.138829][T15419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.139012][T15419] CR2: 000000000044f720 CR3: 0000000019cfd003 CR4: 0000000000771ef0 [ 950.139218][T15419] PKRU: 55555554 [ 950.139318][T15419] Call Trace: [ 950.139421][T15419] [ 950.139488][T15419] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.139619][T15419] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.139759][T15419] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.139907][T15419] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.140056][T15419] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.140198][T15419] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.140331][T15419] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.140484][T15419] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.140626][T15419] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.140765][T15419] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.140932][T15419] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.141075][T15419] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.141211][T15419] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.141345][T15419] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.141480][T15419] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.141615][T15419] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.141757][T15419] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.141892][T15419] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.142045][T15419] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.142183][T15419] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.142319][T15419] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.142455][T15419] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.142587][T15419] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.142749][T15419] ? move_addr_to_kernel (net/socket.c:2511) [ 950.142884][T15419] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.143020][T15419] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.143156][T15419] ___sys_sendmsg (net/socket.c:2641) [ 950.143286][T15419] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.143437][T15419] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.143573][T15419] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.143709][T15419] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.143841][T15419] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.143979][T15419] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.144114][T15419] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.144247][T15419] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.144379][T15419] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.144517][T15419] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.144650][T15419] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.144814][T15419] RIP: 0033:0x7f14e0d4cc5e [ 950.144960][T15419] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.145443][T15419] RSP: 002b:00007ffd0b6d71f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.145642][T15419] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f14e0d4cc5e [ 950.145839][T15419] RDX: 0000000000000000 RSI: 00007ffd0b6d72b0 RDI: 0000000000000005 [ 950.146057][T15419] RBP: 00007ffd0b6d7200 R08: 0000000000000000 R09: 0000000000000000 [ 950.146269][T15419] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.146470][T15419] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 950.210068][T15425] ------------[ cut here ]------------ | [ 950.210275][T15425] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15425 | [ 950.210574][T15425] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.212111][T15425] Tainted: [W]=WARN [ 950.212257][T15425] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.212490][T15425] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.212688][T15425] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.213242][T15425] RSP: 0018:ffa00000044875d0 EFLAGS: 00010286 [ 950.213498][T15425] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e857 [ 950.213760][T15425] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9742b8 [ 950.214060][T15425] RBP: 1ff4000000890ebb R08: 1fe220000192e858 R09: fffa3bfffffb0b37 [ 950.214331][T15425] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9574 [ 950.214597][T15425] R13: ff1100001c3a9540 R14: ffffffff931c7940 R15: ff1100000c974200 [ 950.214888][T15425] FS: 00007f566825f440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 950.215212][T15425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.215442][T15425] CR2: 000000000044f720 CR3: 000000001bd69003 CR4: 0000000000771ef0 [ 950.215695][T15425] PKRU: 55555554 [ 950.215847][T15425] Call Trace: [ 950.216009][T15425] [ 950.216128][T15425] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.216316][T15425] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.216539][T15425] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.216736][T15425] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.216939][T15425] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.217132][T15425] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.217321][T15425] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.217649][T15425] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.217883][T15425] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.218089][T15425] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.218302][T15425] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.218512][T15425] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.218718][T15425] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.218935][T15425] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.219136][T15425] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.219340][T15425] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.219558][T15425] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.219754][T15425] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.219959][T15425] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.220153][T15425] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.220359][T15425] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.220560][T15425] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.220758][T15425] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.221004][T15425] ? move_addr_to_kernel (net/socket.c:2511) [ 950.221204][T15425] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.221410][T15425] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.221604][T15425] ___sys_sendmsg (net/socket.c:2641) [ 950.221796][T15425] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.222005][T15425] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.222200][T15425] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.222404][T15425] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.222607][T15425] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.222810][T15425] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.223075][T15425] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.223336][T15425] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.223608][T15425] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.223856][T15425] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.224068][T15425] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.224304][T15425] RIP: 0033:0x7f56683b9c5e [ 950.224511][T15425] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.225199][T15425] RSP: 002b:00007fffeabe9700 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.225525][T15425] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f56683b9c5e [ 950.225789][T15425] RDX: 0000000000000000 RSI: 00007fffeabe97c0 RDI: 0000000000000005 [ 950.226172][T15425] RBP: 00007fffeabe9710 R08: 0000000000000000 R09: 0000000000000000 [ 950.226469][T15425] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.226723][T15425] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 950.311735][T15429] ------------[ cut here ]------------ | [ 950.311922][T15429] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15429 | [ 950.312154][T15429] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.312942][T15429] Tainted: [W]=WARN [ 950.313042][T15429] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.313207][T15429] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.313350][T15429] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.313835][T15429] RSP: 0018:ffa00000044775d0 EFLAGS: 00010286 [ 950.314011][T15429] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eaf7 [ 950.314207][T15429] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 950.314408][T15429] RBP: 1ff400000088eebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b37 [ 950.314612][T15429] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9758f4 [ 950.314810][T15429] R13: ff1100000c9758c0 R14: ffffffff931c7940 R15: ff1100000c975700 [ 950.315019][T15429] FS: 00007f34b95c3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 950.315255][T15429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.315436][T15429] CR2: 000000000044f720 CR3: 000000000bdd3004 CR4: 0000000000771ef0 [ 950.315635][T15429] PKRU: 55555554 [ 950.315735][T15429] Call Trace: [ 950.315839][T15429] [ 950.315911][T15429] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.316047][T15429] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.316188][T15429] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.316342][T15429] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.316481][T15429] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.316617][T15429] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.316749][T15429] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.316883][T15429] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.317021][T15429] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.317154][T15429] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.317307][T15429] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.317448][T15429] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.317585][T15429] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.317718][T15429] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.317849][T15429] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.317992][T15429] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.318131][T15429] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.318266][T15429] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.318414][T15429] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.318552][T15429] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.318690][T15429] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.318879][T15429] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.319511][T15429] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.319696][T15429] ? move_addr_to_kernel (net/socket.c:2511) [ 950.319829][T15429] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.320015][T15429] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.320152][T15429] ___sys_sendmsg (net/socket.c:2641) [ 950.320285][T15429] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.320429][T15429] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.320565][T15429] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.320730][T15429] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.320865][T15429] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.321061][T15429] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.321199][T15429] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.321333][T15429] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.321478][T15429] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.321609][T15429] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.321743][T15429] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.321980][T15429] RIP: 0033:0x7f34b971dc5e [ 950.322125][T15429] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.322606][T15429] RSP: 002b:00007ffc7ec95a40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.322803][T15429] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f34b971dc5e [ 950.323052][T15429] RDX: 0000000000000000 RSI: 00007ffc7ec95b00 RDI: 0000000000000005 [ 950.323273][T15429] RBP: 00007ffc7ec95a50 R08: 0000000000000000 R09: 0000000000000000 [ 950.323482][T15429] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.323686][T15429] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 950.401580][T15435] ------------[ cut here ]------------ | [ 950.401764][T15435] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15435 | [ 950.402007][T15435] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.402795][T15435] Tainted: [W]=WARN [ 950.402905][T15435] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.403072][T15435] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.403214][T15435] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.403712][T15435] RSP: 0018:ffa00000043d75d0 EFLAGS: 00010286 [ 950.403919][T15435] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c21df [ 950.404122][T15435] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610ef8 [ 950.404347][T15435] RBP: 1ff400000087aebb R08: 1fe22000034c21e0 R09: fffa3bfffffb0b37 [ 950.404590][T15435] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a610934 [ 950.404790][T15435] R13: ff1100001a610900 R14: ffffffff931c7940 R15: ff1100001a610e40 [ 950.405028][T15435] FS: 00007f189f0ee440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 950.405302][T15435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.405492][T15435] CR2: 000000000044f720 CR3: 000000001730f006 CR4: 0000000000771ef0 [ 950.405732][T15435] PKRU: 55555554 [ 950.405838][T15435] Call Trace: [ 950.405943][T15435] [ 950.406011][T15435] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.406144][T15435] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.406287][T15435] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.406426][T15435] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.406577][T15435] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.406715][T15435] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.406855][T15435] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.407005][T15435] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.407140][T15435] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.407278][T15435] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.407422][T15435] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.407559][T15435] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.407702][T15435] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.407852][T15435] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.407993][T15435] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.408131][T15435] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.408268][T15435] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.408411][T15435] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.408550][T15435] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.408686][T15435] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.408841][T15435] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.408991][T15435] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.409125][T15435] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.409298][T15435] ? move_addr_to_kernel (net/socket.c:2511) [ 950.409442][T15435] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.409575][T15435] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.409711][T15435] ___sys_sendmsg (net/socket.c:2641) [ 950.409863][T15435] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.410007][T15435] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.410155][T15435] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.410304][T15435] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.410447][T15435] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.410587][T15435] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.410725][T15435] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.410862][T15435] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.411001][T15435] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.411133][T15435] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.411266][T15435] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.411456][T15435] RIP: 0033:0x7f189f248c5e [ 950.411607][T15435] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.412121][T15435] RSP: 002b:00007ffe54153d20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.412327][T15435] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f189f248c5e [ 950.412541][T15435] RDX: 0000000000000000 RSI: 00007ffe54153de0 RDI: 0000000000000005 [ 950.412753][T15435] RBP: 00007ffe54153d30 R08: 0000000000000000 R09: 0000000000000000 [ 950.412963][T15435] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.413212][T15435] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 950.496282][T15439] ------------[ cut here ]------------ | [ 950.496525][T15439] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15439 | [ 950.496827][T15439] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.497711][T15439] Tainted: [W]=WARN [ 950.497864][T15439] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.498490][T15439] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.498711][T15439] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.499262][T15439] RSP: 0018:ffa00000044075d0 EFLAGS: 00010286 [ 950.499496][T15439] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c22f7 [ 950.499754][T15439] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6117b8 [ 950.500014][T15439] RBP: 1ff4000000880ebb R08: 1fe22000034c22f8 R09: fffa3bfffffb0b37 [ 950.500264][T15439] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a6111f4 [ 950.500520][T15439] R13: ff1100001a6111c0 R14: ffffffff931c7940 R15: ff1100001a611700 [ 950.500772][T15439] FS: 00007fed44de1440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 950.501077][T15439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.501305][T15439] CR2: 000000000044f720 CR3: 000000001c5d7002 CR4: 0000000000771ef0 [ 950.501564][T15439] PKRU: 55555554 [ 950.501718][T15439] Call Trace: [ 950.501869][T15439] [ 950.502001][T15439] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.502187][T15439] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.502380][T15439] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.502573][T15439] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.502756][T15439] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.502952][T15439] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.503133][T15439] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.503319][T15439] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.503513][T15439] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.503698][T15439] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.503885][T15439] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.504081][T15439] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.504283][T15439] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.504523][T15439] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.504764][T15439] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.505001][T15439] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.505190][T15439] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.505378][T15439] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.505574][T15439] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.505759][T15439] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.505960][T15439] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.506148][T15439] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.506341][T15439] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.506567][T15439] ? move_addr_to_kernel (net/socket.c:2511) [ 950.506755][T15439] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.506988][T15439] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.507178][T15439] ___sys_sendmsg (net/socket.c:2641) [ 950.507365][T15439] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.507596][T15439] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.507825][T15439] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.508030][T15439] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.508217][T15439] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.508411][T15439] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.508598][T15439] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.508784][T15439] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.508984][T15439] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.509175][T15439] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.509364][T15439] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.509593][T15439] RIP: 0033:0x7fed44f3bc5e [ 950.509789][T15439] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.510360][T15439] RSP: 002b:00007ffdc854ad60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.510658][T15439] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fed44f3bc5e [ 950.510945][T15439] RDX: 0000000000000000 RSI: 00007ffdc854ae20 RDI: 0000000000000005 [ 950.511253][T15439] RBP: 00007ffdc854ad70 R08: 0000000000000000 R09: 0000000000000000 [ 950.511568][T15439] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.511867][T15439] R13: 0000000069cbe7fd R14: 0000000000000004 R15: 000000000049d620 | [ 950.595875][T15445] ------------[ cut here ]------------ | [ 950.596057][T15445] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15445 | [ 950.596311][T15445] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.597799][T15445] Tainted: [W]=WARN [ 950.597930][T15445] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.598106][T15445] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.598255][T15445] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.598756][T15445] RSP: 0018:ffa00000044e75d0 EFLAGS: 00010286 [ 950.598941][T15445] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea04ff [ 950.599151][T15445] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5027f8 [ 950.599359][T15445] RBP: 1ff400000089cebb R08: 1fe2200001ea0500 R09: fffa3bfffffb0b37 [ 950.599571][T15445] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f5033b4 [ 950.599777][T15445] R13: ff1100000f503380 R14: ffffffff931c7940 R15: ff1100000f502740 [ 950.599995][T15445] FS: 00007f5ffcc03440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 950.600240][T15445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.600421][T15445] CR2: 000000000044f720 CR3: 0000000010115003 CR4: 0000000000771ef0 [ 950.600635][T15445] PKRU: 55555554 [ 950.600741][T15445] Call Trace: [ 950.600848][T15445] [ 950.600925][T15445] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.601067][T15445] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.601217][T15445] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.601358][T15445] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.601502][T15445] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.601646][T15445] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.601786][T15445] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.601932][T15445] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.602072][T15445] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.602213][T15445] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.602357][T15445] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.602501][T15445] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.602645][T15445] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.602787][T15445] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.602931][T15445] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.603072][T15445] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.603214][T15445] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.603355][T15445] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.603500][T15445] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.603643][T15445] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.603799][T15445] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.603953][T15445] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.604106][T15445] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.604284][T15445] ? move_addr_to_kernel (net/socket.c:2511) [ 950.604437][T15445] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.604578][T15445] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.604721][T15445] ___sys_sendmsg (net/socket.c:2641) [ 950.604861][T15445] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.605014][T15445] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.605159][T15445] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.605302][T15445] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.605446][T15445] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.605590][T15445] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.605730][T15445] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.605870][T15445] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.606018][T15445] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.606159][T15445] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.606299][T15445] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.606477][T15445] RIP: 0033:0x7f5ffcd5dc5e [ 950.606625][T15445] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.607130][T15445] RSP: 002b:00007ffd302d0410 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.607342][T15445] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5ffcd5dc5e [ 950.607553][T15445] RDX: 0000000000000000 RSI: 00007ffd302d04d0 RDI: 0000000000000005 [ 950.607761][T15445] RBP: 00007ffd302d0420 R08: 0000000000000000 R09: 0000000000000000 [ 950.607976][T15445] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.608186][T15445] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 950.702118][T15449] ------------[ cut here ]------------ | [ 950.702349][T15449] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15449 | [ 950.702738][T15449] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.703882][T15449] Tainted: [W]=WARN [ 950.704058][T15449] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.704292][T15449] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.704512][T15449] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.705088][T15449] RSP: 0018:ffa00000044e75d0 EFLAGS: 00010286 [ 950.705320][T15449] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0457 [ 950.705579][T15449] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 950.705843][T15449] RBP: 1ff400000089cebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b37 [ 950.706125][T15449] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503c74 [ 950.706405][T15449] R13: ff1100000f503c40 R14: ffffffff931c7940 R15: ff1100000f502200 [ 950.706676][T15449] FS: 00007f7f9d2f7440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 950.707005][T15449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.707249][T15449] CR2: 000000000044f720 CR3: 000000001c3fd005 CR4: 0000000000771ef0 [ 950.707547][T15449] PKRU: 55555554 [ 950.707710][T15449] Call Trace: [ 950.707880][T15449] [ 950.708059][T15449] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.708266][T15449] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.708493][T15449] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.708694][T15449] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.708910][T15449] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.709122][T15449] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.709317][T15449] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.709525][T15449] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.709733][T15449] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.709958][T15449] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.710187][T15449] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.710393][T15449] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.710601][T15449] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.710800][T15449] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.711007][T15449] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.711208][T15449] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.711409][T15449] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.711617][T15449] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.711807][T15449] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.712024][T15449] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.712229][T15449] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.712440][T15449] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.712629][T15449] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.712875][T15449] ? move_addr_to_kernel (net/socket.c:2511) [ 950.713095][T15449] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.713288][T15449] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.713492][T15449] ___sys_sendmsg (net/socket.c:2641) [ 950.713684][T15449] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.713912][T15449] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.714114][T15449] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.714317][T15449] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.714527][T15449] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.714721][T15449] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.714928][T15449] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.715120][T15449] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.715311][T15449] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.715516][T15449] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.715717][T15449] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.715960][T15449] RIP: 0033:0x7f7f9d451c5e [ 950.716171][T15449] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.716755][T15449] RSP: 002b:00007ffc0ec6ec70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.717052][T15449] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7f9d451c5e [ 950.717329][T15449] RDX: 0000000000000000 RSI: 00007ffc0ec6ed30 RDI: 0000000000000005 [ 950.717594][T15449] RBP: 00007ffc0ec6ec80 R08: 0000000000000000 R09: 0000000000000000 [ 950.717854][T15449] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.718128][T15449] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 950.797389][T15455] ------------[ cut here ]------------ | [ 950.797621][T15455] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15455 | [ 950.798183][T15455] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.799105][T15455] Tainted: [W]=WARN [ 950.799262][T15455] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.799505][T15455] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.799701][T15455] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.800256][T15455] RSP: 0018:ffa00000044675d0 EFLAGS: 00010286 [ 950.800490][T15455] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1b67 [ 950.800741][T15455] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 950.801006][T15455] RBP: 1ff400000088cebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b37 [ 950.801253][T15455] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d734 [ 950.801515][T15455] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 950.801768][T15455] FS: 00007fd036d80440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 950.802074][T15455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.802295][T15455] CR2: 000000000044f720 CR3: 000000001c52d005 CR4: 0000000000771ef0 [ 950.802564][T15455] PKRU: 55555554 [ 950.802717][T15455] Call Trace: [ 950.802869][T15455] [ 950.803016][T15455] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.803202][T15455] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.803406][T15455] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.803597][T15455] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.803787][T15455] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.803984][T15455] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.804188][T15455] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.804390][T15455] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.804602][T15455] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.804795][T15455] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.805009][T15455] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.805208][T15455] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.805410][T15455] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.805606][T15455] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.805797][T15455] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.806004][T15455] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.806194][T15455] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.806387][T15455] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.806588][T15455] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.806784][T15455] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.807001][T15455] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.807206][T15455] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.807407][T15455] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.807635][T15455] ? move_addr_to_kernel (net/socket.c:2511) [ 950.807827][T15455] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.808035][T15455] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.808238][T15455] ___sys_sendmsg (net/socket.c:2641) [ 950.808437][T15455] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.808637][T15455] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.808843][T15455] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.809052][T15455] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.809244][T15455] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.809448][T15455] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.809640][T15455] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.809833][T15455] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.810039][T15455] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.810242][T15455] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.810442][T15455] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.810667][T15455] RIP: 0033:0x7fd036edac5e [ 950.810867][T15455] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.811438][T15455] RSP: 002b:00007ffe151097f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.811716][T15455] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd036edac5e [ 950.812005][T15455] RDX: 0000000000000000 RSI: 00007ffe151098b0 RDI: 0000000000000005 [ 950.812282][T15455] RBP: 00007ffe15109800 R08: 0000000000000000 R09: 0000000000000000 [ 950.812554][T15455] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.812814][T15455] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 950.900452][T15459] ------------[ cut here ]------------ | [ 950.900661][T15459] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15459 | [ 950.900967][T15459] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.901861][T15459] Tainted: [W]=WARN [ 950.902375][T15459] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.902609][T15459] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.902815][T15459] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.903349][T15459] RSP: 0018:ffa00000045375d0 EFLAGS: 00010286 [ 950.903590][T15459] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1a87 [ 950.903838][T15459] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d438 [ 950.904100][T15459] RBP: 1ff40000008a6ebb R08: 1fe22000036f1a88 R09: fffa3bfffffb0b37 [ 950.904347][T15459] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78de34 [ 950.904610][T15459] R13: ff1100001b78de00 R14: ffffffff931c7940 R15: ff1100001b78d380 [ 950.904873][T15459] FS: 00007f55d66d6440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 950.905189][T15459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.905414][T15459] CR2: 000000000044f720 CR3: 000000001aefa001 CR4: 0000000000771ef0 [ 950.905663][T15459] PKRU: 55555554 [ 950.905823][T15459] Call Trace: [ 950.905985][T15459] [ 950.906109][T15459] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.906303][T15459] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.906519][T15459] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.906709][T15459] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.906908][T15459] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.907098][T15459] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.907282][T15459] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.907478][T15459] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.907664][T15459] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.907850][T15459] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.908054][T15459] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.908245][T15459] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.908448][T15459] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.908643][T15459] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.908828][T15459] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.909035][T15459] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.909220][T15459] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.909418][T15459] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.909610][T15459] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.909798][T15459] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.909999][T15459] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.910184][T15459] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.910371][T15459] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.910593][T15459] ? move_addr_to_kernel (net/socket.c:2511) [ 950.910781][T15459] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.910979][T15459] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.911189][T15459] ___sys_sendmsg (net/socket.c:2641) [ 950.911384][T15459] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.911590][T15459] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.911785][T15459] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.911999][T15459] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.912198][T15459] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.912394][T15459] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.912595][T15459] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.912788][T15459] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.912995][T15459] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.913189][T15459] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.913380][T15459] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.913614][T15459] RIP: 0033:0x7f55d6830c5e [ 950.913814][T15459] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.914383][T15459] RSP: 002b:00007ffe8d0ff460 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.914666][T15459] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f55d6830c5e [ 950.914942][T15459] RDX: 0000000000000000 RSI: 00007ffe8d0ff520 RDI: 0000000000000005 [ 950.915209][T15459] RBP: 00007ffe8d0ff470 R08: 0000000000000000 R09: 0000000000000000 [ 950.915483][T15459] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.915761][T15459] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 950.982310][T15465] ------------[ cut here ]------------ | [ 950.982492][T15465] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15465 | [ 950.982746][T15465] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 950.983623][T15465] Tainted: [W]=WARN [ 950.983725][T15465] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 950.983968][T15465] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 950.984127][T15465] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 950.984633][T15465] RSP: 0018:ffa00000045175d0 EFLAGS: 00010286 [ 950.984817][T15465] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725857 [ 950.985096][T15465] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c2b8 [ 950.985311][T15465] RBP: 1ff40000008a2ebb R08: 1fe2200003725858 R09: fffa3bfffffb0b37 [ 950.985538][T15465] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d8f4 [ 950.985751][T15465] R13: ff1100001b92d8c0 R14: ffffffff931c7940 R15: ff1100001b92c200 [ 950.986054][T15465] FS: 00007efe85aaa440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 950.986288][T15465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.986478][T15465] CR2: 000000000044f720 CR3: 0000000008fb1002 CR4: 0000000000771ef0 [ 950.986685][T15465] PKRU: 55555554 [ 950.986788][T15465] Call Trace: [ 950.986984][T15465] [ 950.987054][T15465] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 950.987187][T15465] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 950.987327][T15465] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 950.987469][T15465] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.987601][T15465] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.987735][T15465] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 950.987866][T15465] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 950.988075][T15465] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 950.988208][T15465] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 950.988345][T15465] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 950.988489][T15465] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 950.988627][T15465] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 950.988760][T15465] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 950.988968][T15465] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 950.989106][T15465] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 950.989240][T15465] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 950.989371][T15465] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.989512][T15465] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 950.989649][T15465] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 950.989786][T15465] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 950.989926][T15465] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 950.990064][T15465] ? copy_msghdr_from_user (net/socket.c:2525) [ 950.990196][T15465] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 950.990357][T15465] ? move_addr_to_kernel (net/socket.c:2511) [ 950.990496][T15465] ? filemap_map_folio_range (mm/filemap.c:3873) [ 950.990629][T15465] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 950.990764][T15465] ___sys_sendmsg (net/socket.c:2641) [ 950.990906][T15465] ? copy_msghdr_from_user (net/socket.c:2628) [ 950.991043][T15465] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 950.991179][T15465] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 950.991313][T15465] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 950.991449][T15465] ? __sys_sendmsg_sock (net/socket.c:2656) [ 950.991583][T15465] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 950.991715][T15465] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.991848][T15465] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 950.991993][T15465] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 950.992131][T15465] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 950.992281][T15465] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 950.992458][T15465] RIP: 0033:0x7efe85c04c5e [ 950.992608][T15465] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 950.993124][T15465] RSP: 002b:00007ffc73802ed0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.993338][T15465] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007efe85c04c5e [ 950.993547][T15465] RDX: 0000000000000000 RSI: 00007ffc73802f90 RDI: 0000000000000005 [ 950.993745][T15465] RBP: 00007ffc73802ee0 R08: 0000000000000000 R09: 0000000000000000 [ 950.993955][T15465] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 950.994152][T15465] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 951.074218][T15469] ------------[ cut here ]------------ | [ 951.074405][T15469] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15469 | [ 951.074656][T15469] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.075508][T15469] Tainted: [W]=WARN [ 951.075633][T15469] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.075807][T15469] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.075967][T15469] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.076516][T15469] RSP: 0018:ffa00000045475d0 EFLAGS: 00010286 [ 951.076695][T15469] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b67 [ 951.076910][T15469] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92db38 [ 951.077121][T15469] RBP: 1ff40000008a8ebb R08: 1fe2200003725b68 R09: fffa3bfffffb0b37 [ 951.077331][T15469] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c934 [ 951.077574][T15469] R13: ff1100001b92c900 R14: ffffffff931c7940 R15: ff1100001b92da80 [ 951.077812][T15469] FS: 00007f054c9f1440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 951.078089][T15469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.078267][T15469] CR2: 000000000044f720 CR3: 000000001a059004 CR4: 0000000000771ef0 [ 951.078502][T15469] PKRU: 55555554 [ 951.078615][T15469] Call Trace: [ 951.078731][T15469] [ 951.078801][T15469] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.078948][T15469] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.079107][T15469] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.079245][T15469] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.079395][T15469] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.079549][T15469] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.079690][T15469] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.079834][T15469] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.079979][T15469] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.080122][T15469] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.080268][T15469] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.080417][T15469] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.080561][T15469] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.080703][T15469] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.080846][T15469] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.081002][T15469] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.081148][T15469] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.081297][T15469] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.081448][T15469] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.081596][T15469] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.081745][T15469] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.081892][T15469] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.082059][T15469] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.082252][T15469] ? move_addr_to_kernel (net/socket.c:2511) [ 951.082395][T15469] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.082592][T15469] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.082742][T15469] ___sys_sendmsg (net/socket.c:2641) [ 951.082879][T15469] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.083034][T15469] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.083173][T15469] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.083329][T15469] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.083494][T15469] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.083644][T15469] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.083798][T15469] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.083951][T15469] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.084097][T15469] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.084240][T15469] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.084411][T15469] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.084586][T15469] RIP: 0033:0x7f054cb4bc5e [ 951.084734][T15469] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.085255][T15469] RSP: 002b:00007ffdc971b3c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.085479][T15469] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f054cb4bc5e [ 951.085693][T15469] RDX: 0000000000000000 RSI: 00007ffdc971b480 RDI: 0000000000000005 [ 951.085910][T15469] RBP: 00007ffdc971b3d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.086123][T15469] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.086337][T15469] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 951.154986][T15475] ------------[ cut here ]------------ | [ 951.155207][T15475] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15475 | [ 951.155544][T15475] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.156459][T15475] Tainted: [W]=WARN [ 951.156614][T15475] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.156837][T15475] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.157045][T15475] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.157677][T15475] RSP: 0018:ffa00000044775d0 EFLAGS: 00010286 [ 951.158486][T15475] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192ea87 [ 951.158779][T15475] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975438 [ 951.159070][T15475] RBP: 1ff400000088eebb R08: 1fe220000192ea88 R09: fffa3bfffffb0b37 [ 951.159378][T15475] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975e34 [ 951.159718][T15475] R13: ff1100000c975e00 R14: ffffffff931c7940 R15: ff1100000c975380 [ 951.160024][T15475] FS: 00007faf7ed18440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 951.160325][T15475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.160581][T15475] CR2: 000000000044f720 CR3: 000000001b7f0004 CR4: 0000000000771ef0 [ 951.160857][T15475] PKRU: 55555554 [ 951.161023][T15475] Call Trace: [ 951.161193][T15475] [ 951.161324][T15475] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.161554][T15475] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.161788][T15475] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.162010][T15475] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.162234][T15475] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.162442][T15475] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.162637][T15475] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.162843][T15475] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.163063][T15475] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.163257][T15475] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.163480][T15475] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.163688][T15475] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.163910][T15475] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.164129][T15475] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.164327][T15475] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.164540][T15475] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.164734][T15475] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.164952][T15475] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.165154][T15475] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.165352][T15475] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.165562][T15475] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.165764][T15475] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.165967][T15475] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.166208][T15475] ? move_addr_to_kernel (net/socket.c:2511) [ 951.166398][T15475] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.166612][T15475] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.166816][T15475] ___sys_sendmsg (net/socket.c:2641) [ 951.167028][T15475] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.167229][T15475] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.167439][T15475] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.167641][T15475] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.167841][T15475] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.168054][T15475] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.168255][T15475] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.168469][T15475] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.168676][T15475] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.168881][T15475] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.169086][T15475] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.169321][T15475] RIP: 0033:0x7faf7ee72c5e [ 951.169532][T15475] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.170081][T15475] RSP: 002b:00007ffdb2a16700 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.170345][T15475] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007faf7ee72c5e [ 951.170632][T15475] RDX: 0000000000000000 RSI: 00007ffdb2a167c0 RDI: 0000000000000005 [ 951.170887][T15475] RBP: 00007ffdb2a16710 R08: 0000000000000000 R09: 0000000000000000 [ 951.171166][T15475] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.171435][T15475] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 951.257562][T15479] ------------[ cut here ]------------ | [ 951.257781][T15479] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15479 | [ 951.258107][T15479] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.259071][T15479] Tainted: [W]=WARN [ 951.259227][T15479] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.259455][T15479] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.259655][T15479] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.260223][T15479] RSP: 0018:ffa00000045675d0 EFLAGS: 00010286 [ 951.260456][T15479] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b080c7 [ 951.260724][T15479] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d840638 [ 951.261025][T15479] RBP: 1ff40000008acebb R08: 1fe2200001b080c8 R09: fffa3bfffffb0b37 [ 951.261292][T15479] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840774 [ 951.261578][T15479] R13: ff1100000d840740 R14: ffffffff931c7940 R15: ff1100000d840580 [ 951.261867][T15479] FS: 00007f9ac5970440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 951.262203][T15479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.262456][T15479] CR2: 000000000044f720 CR3: 000000000c694006 CR4: 0000000000771ef0 [ 951.262725][T15479] PKRU: 55555554 [ 951.262886][T15479] Call Trace: [ 951.263059][T15479] [ 951.263185][T15479] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.263380][T15479] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.263594][T15479] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.263795][T15479] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.264006][T15479] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.264205][T15479] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.264398][T15479] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.264622][T15479] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.264829][T15479] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.265044][T15479] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.265246][T15479] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.265455][T15479] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.265661][T15479] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.265883][T15479] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.266102][T15479] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.266312][T15479] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.266519][T15479] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.266717][T15479] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.266926][T15479] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.267123][T15479] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.267341][T15479] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.267545][T15479] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.267735][T15479] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.267982][T15479] ? move_addr_to_kernel (net/socket.c:2511) [ 951.268188][T15479] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.268382][T15479] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.268593][T15479] ___sys_sendmsg (net/socket.c:2641) [ 951.268789][T15479] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.269006][T15479] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.269244][T15479] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.269462][T15479] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.269674][T15479] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.269884][T15479] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.270099][T15479] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.270319][T15479] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.270521][T15479] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.270725][T15479] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.270937][T15479] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.271161][T15479] RIP: 0033:0x7f9ac5acac5e [ 951.271358][T15479] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.271915][T15479] RSP: 002b:00007fff03fa8af0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.272194][T15479] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9ac5acac5e [ 951.272482][T15479] RDX: 0000000000000000 RSI: 00007fff03fa8bb0 RDI: 0000000000000005 [ 951.272748][T15479] RBP: 00007fff03fa8b00 R08: 0000000000000000 R09: 0000000000000000 [ 951.273041][T15479] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.273308][T15479] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 951.339313][T15485] ------------[ cut here ]------------ | [ 951.339503][T15485] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15485 | [ 951.339767][T15485] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.340587][T15485] Tainted: [W]=WARN [ 951.340690][T15485] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.340881][T15485] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.341040][T15485] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.341587][T15485] RSP: 0018:ffa00000044675d0 EFLAGS: 00010286 [ 951.341770][T15485] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0801f [ 951.341992][T15485] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8400f8 [ 951.342235][T15485] RBP: 1ff400000088cebb R08: 1fe2200001b08020 R09: fffa3bfffffb0b37 [ 951.342462][T15485] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840234 [ 951.342683][T15485] R13: ff1100000d840200 R14: ffffffff931c7940 R15: ff1100000d840040 [ 951.342909][T15485] FS: 00007fe30b969440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 951.343220][T15485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.343411][T15485] CR2: 000000000044f720 CR3: 000000001b7f0001 CR4: 0000000000771ef0 [ 951.343635][T15485] PKRU: 55555554 [ 951.343742][T15485] Call Trace: [ 951.343854][T15485] [ 951.343955][T15485] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.344116][T15485] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.344284][T15485] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.344439][T15485] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.344642][T15485] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.344792][T15485] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.344939][T15485] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.345088][T15485] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.345229][T15485] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.345372][T15485] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.345526][T15485] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.345668][T15485] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.345805][T15485] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.345960][T15485] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.346142][T15485] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.346287][T15485] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.346445][T15485] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.346595][T15485] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.346751][T15485] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.346900][T15485] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.347046][T15485] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.347194][T15485] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.347337][T15485] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.347522][T15485] ? move_addr_to_kernel (net/socket.c:2511) [ 951.347669][T15485] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.347832][T15485] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.348016][T15485] ___sys_sendmsg (net/socket.c:2641) [ 951.348153][T15485] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.348297][T15485] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.348442][T15485] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.348600][T15485] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.348741][T15485] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.349053][T15485] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.349196][T15485] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.349345][T15485] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.349494][T15485] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.349628][T15485] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.349765][T15485] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.350101][T15485] RIP: 0033:0x7fe30bac3c5e [ 951.350266][T15485] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.350804][T15485] RSP: 002b:00007ffee92d0ad0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.351079][T15485] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe30bac3c5e [ 951.351279][T15485] RDX: 0000000000000000 RSI: 00007ffee92d0b90 RDI: 0000000000000005 [ 951.351522][T15485] RBP: 00007ffee92d0ae0 R08: 0000000000000000 R09: 0000000000000000 [ 951.351754][T15485] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.352045][T15485] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 951.412320][T15489] ------------[ cut here ]------------ | [ 951.412516][T15489] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15489 | [ 951.412807][T15489] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.413951][T15489] Tainted: [W]=WARN [ 951.414052][T15489] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.414227][T15489] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.414368][T15489] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.414859][T15489] RSP: 0018:ffa00000045975d0 EFLAGS: 00010286 [ 951.415046][T15489] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387532f [ 951.415286][T15489] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9978 [ 951.415491][T15489] RBP: 1ff40000008b2ebb R08: 1fe2200003875330 R09: fffa3bfffffb0b37 [ 951.415704][T15489] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8774 [ 951.415911][T15489] R13: ff1100001c3a8740 R14: ffffffff931c7940 R15: ff1100001c3a98c0 [ 951.416112][T15489] FS: 00007f2c66cf9440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 951.416371][T15489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.416551][T15489] CR2: 000000000044f720 CR3: 000000000ca62003 CR4: 0000000000771ef0 [ 951.416756][T15489] PKRU: 55555554 [ 951.416859][T15489] Call Trace: [ 951.416969][T15489] [ 951.417039][T15489] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.417182][T15489] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.417330][T15489] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.417467][T15489] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.417599][T15489] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.417736][T15489] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.417868][T15489] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.418008][T15489] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.418143][T15489] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.418286][T15489] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.418426][T15489] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.418558][T15489] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.418700][T15489] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.418834][T15489] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.418974][T15489] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.419107][T15489] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.419241][T15489] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.419375][T15489] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.419532][T15489] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.419667][T15489] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.419801][T15489] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.419939][T15489] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.420074][T15489] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.420236][T15489] ? move_addr_to_kernel (net/socket.c:2511) [ 951.420369][T15489] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.420506][T15489] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.420641][T15489] ___sys_sendmsg (net/socket.c:2641) [ 951.420773][T15489] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.420914][T15489] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.421053][T15489] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.421189][T15489] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.421321][T15489] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.421464][T15489] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.421599][T15489] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.421733][T15489] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.421908][T15489] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.422041][T15489] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.422177][T15489] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.422358][T15489] RIP: 0033:0x7f2c66e53c5e [ 951.422527][T15489] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.423042][T15489] RSP: 002b:00007fff324977f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.423328][T15489] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2c66e53c5e [ 951.423534][T15489] RDX: 0000000000000000 RSI: 00007fff324978b0 RDI: 0000000000000005 [ 951.423735][T15489] RBP: 00007fff32497800 R08: 0000000000000000 R09: 0000000000000000 [ 951.424022][T15489] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.424221][T15489] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 951.517150][T15495] ------------[ cut here ]------------ | [ 951.517393][T15495] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15495 | [ 951.517706][T15495] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.519229][T15495] Tainted: [W]=WARN [ 951.519379][T15495] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.519619][T15495] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.519831][T15495] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.520414][T15495] RSP: 0018:ffa00000044e75d0 EFLAGS: 00010286 [ 951.520646][T15495] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003875137 [ 951.520931][T15495] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a89b8 [ 951.521207][T15495] RBP: 1ff400000089cebb R08: 1fe2200003875138 R09: fffa3bfffffb0b37 [ 951.521473][T15495] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8cb4 [ 951.521744][T15495] R13: ff1100001c3a8c80 R14: ffffffff931c7940 R15: ff1100001c3a8900 [ 951.522025][T15495] FS: 00007f36bc130440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 951.522320][T15495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.522560][T15495] CR2: 000000000044f720 CR3: 0000000019ad1001 CR4: 0000000000771ef0 [ 951.522840][T15495] PKRU: 55555554 [ 951.523012][T15495] Call Trace: [ 951.523163][T15495] [ 951.523283][T15495] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.523476][T15495] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.523680][T15495] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.523867][T15495] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.524077][T15495] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.524276][T15495] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.524469][T15495] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.524663][T15495] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.524850][T15495] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.525057][T15495] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.525280][T15495] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.525487][T15495] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.525681][T15495] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.525870][T15495] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.526070][T15495] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.526267][T15495] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.526489][T15495] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.526689][T15495] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.526889][T15495] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.527091][T15495] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.527293][T15495] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.527487][T15495] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.527672][T15495] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.527913][T15495] ? move_addr_to_kernel (net/socket.c:2511) [ 951.528115][T15495] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.528312][T15495] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.528544][T15495] ___sys_sendmsg (net/socket.c:2641) [ 951.528733][T15495] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.528954][T15495] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.529149][T15495] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.529339][T15495] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.529544][T15495] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.529747][T15495] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.529955][T15495] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.530169][T15495] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.530360][T15495] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.530555][T15495] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.530750][T15495] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.530986][T15495] RIP: 0033:0x7f36bc28ac5e [ 951.531181][T15495] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.531747][T15495] RSP: 002b:00007fffffccdcd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.532035][T15495] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f36bc28ac5e [ 951.532289][T15495] RDX: 0000000000000000 RSI: 00007fffffccdd90 RDI: 0000000000000005 [ 951.532566][T15495] RBP: 00007fffffccdce0 R08: 0000000000000000 R09: 0000000000000000 [ 951.532845][T15495] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.533130][T15495] R13: 0000000069cbe7fe R14: 0000000000000004 R15: 000000000049d620 | [ 951.605090][T15499] ------------[ cut here ]------------ | [ 951.605332][T15499] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15499 | [ 951.605773][T15499] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.607110][T15499] Tainted: [W]=WARN [ 951.607264][T15499] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.607491][T15499] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.607685][T15499] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.608249][T15499] RSP: 0018:ffa00000045875d0 EFLAGS: 00010286 [ 951.608484][T15499] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eabf [ 951.608737][T15499] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9755f8 [ 951.609000][T15499] RBP: 1ff40000008b0ebb R08: 1fe220000192eac0 R09: fffa3bfffffb0b37 [ 951.609289][T15499] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975c74 [ 951.609561][T15499] R13: ff1100000c975c40 R14: ffffffff931c7940 R15: ff1100000c975540 [ 951.609835][T15499] FS: 00007f137cabd440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 951.610163][T15499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.610411][T15499] CR2: 000000000044f720 CR3: 000000000bdd7004 CR4: 0000000000771ef0 [ 951.610678][T15499] PKRU: 55555554 [ 951.610844][T15499] Call Trace: [ 951.611022][T15499] [ 951.611174][T15499] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.611374][T15499] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.611580][T15499] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.611770][T15499] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.611981][T15499] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.612184][T15499] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.612383][T15499] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.612581][T15499] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.612769][T15499] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.612980][T15499] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.613170][T15499] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.613356][T15499] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.613570][T15499] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.613763][T15499] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.613959][T15499] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.614174][T15499] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.614390][T15499] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.614645][T15499] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.614874][T15499] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.615085][T15499] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.615278][T15499] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.615487][T15499] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.615714][T15499] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.615983][T15499] ? move_addr_to_kernel (net/socket.c:2511) [ 951.616188][T15499] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.616398][T15499] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.616629][T15499] ___sys_sendmsg (net/socket.c:2641) [ 951.616841][T15499] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.617126][T15499] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.617338][T15499] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.617552][T15499] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.617776][T15499] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.617992][T15499] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.618199][T15499] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.618411][T15499] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.618608][T15499] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.618798][T15499] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.619014][T15499] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.619256][T15499] RIP: 0033:0x7f137cc17c5e [ 951.619459][T15499] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.620027][T15499] RSP: 002b:00007ffe1d3f9fb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.620296][T15499] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f137cc17c5e [ 951.620564][T15499] RDX: 0000000000000000 RSI: 00007ffe1d3fa070 RDI: 0000000000000005 [ 951.620828][T15499] RBP: 00007ffe1d3f9fc0 R08: 0000000000000000 R09: 0000000000000000 [ 951.621108][T15499] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.621369][T15499] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 951.694782][T15505] ------------[ cut here ]------------ | [ 951.694963][T15505] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15505 | [ 951.695201][T15505] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.695993][T15505] Tainted: [W]=WARN [ 951.696095][T15505] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.696263][T15505] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.696403][T15505] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.696887][T15505] RSP: 0018:ffa00000044e75d0 EFLAGS: 00010286 [ 951.697064][T15505] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c208f [ 951.697261][T15505] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a610478 [ 951.697468][T15505] RBP: 1ff400000089cebb R08: 1fe22000034c2090 R09: fffa3bfffffb0b37 [ 951.697667][T15505] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c974234 [ 951.697865][T15505] R13: ff1100000c974200 R14: ffffffff931c7940 R15: ff1100001a6103c0 [ 951.698072][T15505] FS: 00007f6cb79e8440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 951.698308][T15505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.698482][T15505] CR2: 000000000044f720 CR3: 0000000017302004 CR4: 0000000000771ef0 [ 951.698713][T15505] PKRU: 55555554 [ 951.698843][T15505] Call Trace: [ 951.699028][T15505] [ 951.699101][T15505] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.699242][T15505] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.699392][T15505] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.699545][T15505] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.699678][T15505] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.699815][T15505] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.700012][T15505] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.700148][T15505] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.700280][T15505] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.700417][T15505] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.700555][T15505] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.700688][T15505] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.700825][T15505] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.701031][T15505] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.701163][T15505] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.701299][T15505] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.701438][T15505] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.701574][T15505] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.701709][T15505] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.701841][T15505] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.702150][T15505] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.702294][T15505] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.702443][T15505] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.702615][T15505] ? move_addr_to_kernel (net/socket.c:2511) [ 951.702760][T15505] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.702998][T15505] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.703139][T15505] ___sys_sendmsg (net/socket.c:2641) [ 951.703278][T15505] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.703423][T15505] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.703559][T15505] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.703705][T15505] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.703846][T15505] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.704086][T15505] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.704232][T15505] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.704377][T15505] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.704521][T15505] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.704670][T15505] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.704816][T15505] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.705079][T15505] RIP: 0033:0x7f6cb7b42c5e [ 951.705230][T15505] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.705715][T15505] RSP: 002b:00007ffc5d248550 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.706016][T15505] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6cb7b42c5e [ 951.706228][T15505] RDX: 0000000000000000 RSI: 00007ffc5d248610 RDI: 0000000000000005 [ 951.706440][T15505] RBP: 00007ffc5d248560 R08: 0000000000000000 R09: 0000000000000000 [ 951.706674][T15505] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.706879][T15505] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 951.783508][T15509] ------------[ cut here ]------------ | [ 951.783668][T15509] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15509 | [ 951.783906][T15509] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.784664][T15509] Tainted: [W]=WARN [ 951.784768][T15509] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.784941][T15509] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.785086][T15509] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.785662][T15509] RSP: 0018:ffa00000045975d0 EFLAGS: 00010286 [ 951.785863][T15509] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c2287 [ 951.786082][T15509] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611438 [ 951.786293][T15509] RBP: 1ff40000008b2ebb R08: 1fe22000034c2288 R09: fffa3bfffffb0b37 [ 951.786508][T15509] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a611574 [ 951.786721][T15509] R13: ff1100001a611540 R14: ffffffff931c7940 R15: ff1100001a611380 [ 951.786944][T15509] FS: 00007fa16cde3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 951.787201][T15509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.787378][T15509] CR2: 000000000044f720 CR3: 0000000017302003 CR4: 0000000000771ef0 [ 951.787597][T15509] PKRU: 55555554 [ 951.787705][T15509] Call Trace: [ 951.787813][T15509] [ 951.787908][T15509] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.788041][T15509] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.788183][T15509] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.788320][T15509] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.788471][T15509] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.788624][T15509] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.788769][T15509] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.788912][T15509] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.789055][T15509] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.789205][T15509] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.789344][T15509] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.789482][T15509] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.789621][T15509] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.789755][T15509] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.789925][T15509] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.790062][T15509] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.790200][T15509] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.790338][T15509] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.790479][T15509] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.790614][T15509] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.790750][T15509] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.790885][T15509] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.791030][T15509] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.791195][T15509] ? move_addr_to_kernel (net/socket.c:2511) [ 951.791328][T15509] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.791465][T15509] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.791607][T15509] ___sys_sendmsg (net/socket.c:2641) [ 951.791743][T15509] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.791883][T15509] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.792032][T15509] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.792174][T15509] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.792314][T15509] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.792469][T15509] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.792608][T15509] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.792742][T15509] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.792882][T15509] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.793023][T15509] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.793162][T15509] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.793329][T15509] RIP: 0033:0x7fa16cf3dc5e [ 951.793480][T15509] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.793964][T15509] RSP: 002b:00007ffe3e057130 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.794167][T15509] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa16cf3dc5e [ 951.794397][T15509] RDX: 0000000000000000 RSI: 00007ffe3e0571f0 RDI: 0000000000000005 [ 951.794618][T15509] RBP: 00007ffe3e057140 R08: 0000000000000000 R09: 0000000000000000 [ 951.794826][T15509] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.795040][T15509] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 951.872720][T15515] ------------[ cut here ]------------ | [ 951.872958][T15515] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15515 | [ 951.873267][T15515] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.874245][T15515] Tainted: [W]=WARN [ 951.874492][T15515] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.874792][T15515] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.875115][T15515] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.875833][T15515] RSP: 0018:ffa00000045675d0 EFLAGS: 00010286 [ 951.876165][T15515] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea072f [ 951.876459][T15515] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503978 [ 951.876705][T15515] RBP: 1ff40000008acebb R08: 1fe2200001ea0730 R09: fffa3bfffffb0b37 [ 951.876971][T15515] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a610cb4 [ 951.877220][T15515] R13: ff1100001a610c80 R14: ffffffff931c7940 R15: ff1100000f5038c0 [ 951.877499][T15515] FS: 00007f160a96e440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 951.877808][T15515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.878059][T15515] CR2: 000000000044f720 CR3: 000000000a896002 CR4: 0000000000771ef0 [ 951.878323][T15515] PKRU: 55555554 [ 951.878488][T15515] Call Trace: [ 951.878650][T15515] [ 951.878773][T15515] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.878973][T15515] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.879174][T15515] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.879366][T15515] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.879562][T15515] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.879750][T15515] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.879947][T15515] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.880137][T15515] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.880325][T15515] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.880522][T15515] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.880717][T15515] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.880926][T15515] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.881124][T15515] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.881318][T15515] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.881516][T15515] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.881711][T15515] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.881921][T15515] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.882113][T15515] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.882311][T15515] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.882523][T15515] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.882721][T15515] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.882937][T15515] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.883132][T15515] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.883358][T15515] ? move_addr_to_kernel (net/socket.c:2511) [ 951.883571][T15515] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.883774][T15515] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.883995][T15515] ___sys_sendmsg (net/socket.c:2641) [ 951.884201][T15515] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.884425][T15515] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.884638][T15515] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.884852][T15515] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.885068][T15515] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.885281][T15515] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.885497][T15515] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.885689][T15515] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.885888][T15515] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.886104][T15515] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.886332][T15515] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.886605][T15515] RIP: 0033:0x7f160aac8c5e [ 951.886860][T15515] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.887443][T15515] RSP: 002b:00007ffe6bc01990 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.887706][T15515] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f160aac8c5e [ 951.887989][T15515] RDX: 0000000000000000 RSI: 00007ffe6bc01a50 RDI: 0000000000000005 [ 951.888263][T15515] RBP: 00007ffe6bc019a0 R08: 0000000000000000 R09: 0000000000000000 [ 951.888538][T15515] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.888798][T15515] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 951.956518][T15519] ------------[ cut here ]------------ | [ 951.956687][T15519] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15519 | [ 951.956941][T15519] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 951.957758][T15519] Tainted: [W]=WARN [ 951.957864][T15519] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 951.958048][T15519] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 951.958196][T15519] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 951.958696][T15519] RSP: 0018:ffa00000045c75d0 EFLAGS: 00010286 [ 951.958876][T15519] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea07d7 [ 951.959102][T15519] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503eb8 [ 951.959331][T15519] RBP: 1ff40000008b8ebb R08: 1fe2200001ea07d8 R09: fffa3bfffffb0b37 [ 951.959545][T15519] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502af4 [ 951.959753][T15519] R13: ff1100000f502ac0 R14: ffffffff931c7940 R15: ff1100000f503e00 [ 951.959975][T15519] FS: 00007ff56527c440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 951.960227][T15519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.960414][T15519] CR2: 000000000044f720 CR3: 00000000108d5002 CR4: 0000000000771ef0 [ 951.960628][T15519] PKRU: 55555554 [ 951.960737][T15519] Call Trace: [ 951.960842][T15519] [ 951.960921][T15519] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 951.961068][T15519] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 951.961217][T15519] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 951.961366][T15519] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.961515][T15519] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.961656][T15519] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 951.961801][T15519] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 951.961943][T15519] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 951.962089][T15519] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 951.962229][T15519] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 951.962371][T15519] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 951.962515][T15519] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 951.962656][T15519] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 951.962799][T15519] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 951.962941][T15519] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 951.963082][T15519] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 951.963221][T15519] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.963362][T15519] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 951.963507][T15519] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 951.963647][T15519] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 951.963791][T15519] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 951.963936][T15519] ? copy_msghdr_from_user (net/socket.c:2525) [ 951.964082][T15519] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 951.964256][T15519] ? move_addr_to_kernel (net/socket.c:2511) [ 951.964399][T15519] ? filemap_map_folio_range (mm/filemap.c:3873) [ 951.964545][T15519] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 951.964685][T15519] ___sys_sendmsg (net/socket.c:2641) [ 951.964826][T15519] ? copy_msghdr_from_user (net/socket.c:2628) [ 951.964976][T15519] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 951.965120][T15519] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 951.965265][T15519] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 951.965405][T15519] ? __sys_sendmsg_sock (net/socket.c:2656) [ 951.965552][T15519] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 951.965694][T15519] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.965838][T15519] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 951.966056][T15519] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 951.966199][T15519] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 951.966341][T15519] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 951.966525][T15519] RIP: 0033:0x7ff5653d6c5e [ 951.966677][T15519] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 951.967241][T15519] RSP: 002b:00007ffdb86eac00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 951.967604][T15519] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff5653d6c5e [ 951.967819][T15519] RDX: 0000000000000000 RSI: 00007ffdb86eacc0 RDI: 0000000000000005 [ 951.968095][T15519] RBP: 00007ffdb86eac10 R08: 0000000000000000 R09: 0000000000000000 [ 951.968315][T15519] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 951.968526][T15519] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 952.045161][T15525] ------------[ cut here ]------------ | [ 952.045373][T15525] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15525 | [ 952.045688][T15525] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.047128][T15525] Tainted: [W]=WARN [ 952.047288][T15525] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.047522][T15525] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.047723][T15525] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.048275][T15525] RSP: 0018:ffa00000044e75d0 EFLAGS: 00010286 [ 952.048525][T15525] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1bd7 [ 952.048778][T15525] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78deb8 [ 952.049040][T15525] RBP: 1ff400000089cebb R08: 1fe22000036f1bd8 R09: fffa3bfffffb0b37 [ 952.049292][T15525] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503574 [ 952.049549][T15525] R13: ff1100000f503540 R14: ffffffff931c7940 R15: ff1100001b78de00 [ 952.049801][T15525] FS: 00007f34df737440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 952.050115][T15525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.050342][T15525] CR2: 000000000044f720 CR3: 0000000017302003 CR4: 0000000000771ef0 [ 952.050626][T15525] PKRU: 55555554 [ 952.050799][T15525] Call Trace: [ 952.050974][T15525] [ 952.051095][T15525] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.051294][T15525] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.051506][T15525] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.051693][T15525] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.051875][T15525] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.052074][T15525] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.052256][T15525] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.052451][T15525] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.052647][T15525] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.052844][T15525] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.053061][T15525] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.053245][T15525] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.053441][T15525] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.053635][T15525] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.053819][T15525] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.054021][T15525] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.054211][T15525] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.054397][T15525] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.054590][T15525] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.054775][T15525] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.054976][T15525] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.055174][T15525] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.055358][T15525] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.055579][T15525] ? move_addr_to_kernel (net/socket.c:2511) [ 952.055768][T15525] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.055965][T15525] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.056152][T15525] ___sys_sendmsg (net/socket.c:2641) [ 952.056344][T15525] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.056542][T15525] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.056740][T15525] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.056949][T15525] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.057148][T15525] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.057340][T15525] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.057558][T15525] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.057766][T15525] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.057977][T15525] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.058175][T15525] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.058361][T15525] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.058594][T15525] RIP: 0033:0x7f34df891c5e [ 952.058798][T15525] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.059343][T15525] RSP: 002b:00007ffcd3986150 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.059613][T15525] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f34df891c5e [ 952.059879][T15525] RDX: 0000000000000000 RSI: 00007ffcd3986210 RDI: 0000000000000005 [ 952.060141][T15525] RBP: 00007ffcd3986160 R08: 0000000000000000 R09: 0000000000000000 [ 952.060396][T15525] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.060661][T15525] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 952.123658][T15529] ------------[ cut here ]------------ | [ 952.123824][T15529] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15529 | [ 952.124641][T15529] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.125417][T15529] Tainted: [W]=WARN [ 952.125519][T15529] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.125688][T15529] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.125829][T15529] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.126323][T15529] RSP: 0018:ffa00000045e75d0 EFLAGS: 00010286 [ 952.126494][T15529] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1abf [ 952.126690][T15529] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d5f8 [ 952.126891][T15529] RBP: 1ff40000008bcebb R08: 1fe22000036f1ac0 R09: fffa3bfffffb0b37 [ 952.127097][T15529] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78c3f4 [ 952.127299][T15529] R13: ff1100001b78c3c0 R14: ffffffff931c7940 R15: ff1100001b78d540 [ 952.127510][T15529] FS: 00007f6519ec2440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 952.127781][T15529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.127960][T15529] CR2: 000000000044f720 CR3: 000000001a7f8002 CR4: 0000000000771ef0 [ 952.128174][T15529] PKRU: 55555554 [ 952.128283][T15529] Call Trace: [ 952.128381][T15529] [ 952.128454][T15529] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.128591][T15529] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.128741][T15529] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.128880][T15529] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.129015][T15529] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.129150][T15529] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.129279][T15529] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.129421][T15529] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.129566][T15529] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.129702][T15529] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.129845][T15529] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.129987][T15529] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.130125][T15529] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.130265][T15529] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.130402][T15529] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.130540][T15529] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.130679][T15529] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.130816][T15529] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.130960][T15529] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.131098][T15529] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.131242][T15529] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.131378][T15529] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.131528][T15529] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.131711][T15529] ? move_addr_to_kernel (net/socket.c:2511) [ 952.131848][T15529] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.131985][T15529] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.132131][T15529] ___sys_sendmsg (net/socket.c:2641) [ 952.132271][T15529] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.132417][T15529] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.132568][T15529] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.132703][T15529] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.132833][T15529] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.133004][T15529] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.133143][T15529] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.133281][T15529] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.133433][T15529] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.133570][T15529] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.133712][T15529] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.133883][T15529] RIP: 0033:0x7f651a01cc5e [ 952.134033][T15529] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.134532][T15529] RSP: 002b:00007ffdc3251d80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.134744][T15529] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f651a01cc5e [ 952.134956][T15529] RDX: 0000000000000000 RSI: 00007ffdc3251e40 RDI: 0000000000000005 [ 952.135166][T15529] RBP: 00007ffdc3251d90 R08: 0000000000000000 R09: 0000000000000000 [ 952.135380][T15529] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.135585][T15529] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 952.218641][T15535] ------------[ cut here ]------------ | [ 952.218826][T15535] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15535 | [ 952.219792][T15535] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.220610][T15535] Tainted: [W]=WARN [ 952.220741][T15535] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.220921][T15535] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.221067][T15535] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.221577][T15535] RSP: 0018:ffa00000045e75d0 EFLAGS: 00010286 [ 952.223552][T15535] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725af7 [ 952.223758][T15535] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d7b8 [ 952.223964][T15535] RBP: 1ff40000008bcebb R08: 1fe2200003725af8 R09: fffa3bfffffb0b37 [ 952.224170][T15535] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d034 [ 952.224369][T15535] R13: ff1100001b78d000 R14: ffffffff931c7940 R15: ff1100001b92d700 [ 952.224578][T15535] FS: 00007fb48b458440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 952.224811][T15535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.224985][T15535] CR2: 000000000044f720 CR3: 000000001b95e005 CR4: 0000000000771ef0 [ 952.225186][T15535] PKRU: 55555554 [ 952.225287][T15535] Call Trace: [ 952.225388][T15535] [ 952.225462][T15535] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.225594][T15535] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.225737][T15535] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.225934][T15535] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.226073][T15535] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.226238][T15535] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.226403][T15535] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.226563][T15535] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.226704][T15535] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.226849][T15535] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.226998][T15535] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.227133][T15535] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.227268][T15535] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.227416][T15535] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.227549][T15535] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.227690][T15535] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.227824][T15535] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.227964][T15535] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.228117][T15535] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.228254][T15535] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.228402][T15535] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.228552][T15535] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.228692][T15535] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.228858][T15535] ? move_addr_to_kernel (net/socket.c:2511) [ 952.229049][T15535] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.229204][T15535] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.229340][T15535] ___sys_sendmsg (net/socket.c:2641) [ 952.229488][T15535] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.229633][T15535] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.229781][T15535] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.229953][T15535] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.230139][T15535] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.230323][T15535] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.230482][T15535] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.230640][T15535] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.230775][T15535] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.230922][T15535] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.231086][T15535] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.231257][T15535] RIP: 0033:0x7fb48b5b2c5e [ 952.231401][T15535] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.231916][T15535] RSP: 002b:00007ffd445ce040 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.232124][T15535] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb48b5b2c5e [ 952.232327][T15535] RDX: 0000000000000000 RSI: 00007ffd445ce100 RDI: 0000000000000005 [ 952.232532][T15535] RBP: 00007ffd445ce050 R08: 0000000000000000 R09: 0000000000000000 [ 952.232736][T15535] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.232938][T15535] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 952.297595][T15539] ------------[ cut here ]------------ | [ 952.297771][T15539] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15539 | [ 952.298688][T15539] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.299588][T15539] Tainted: [W]=WARN [ 952.299693][T15539] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.299867][T15539] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.300122][T15539] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.300631][T15539] RSP: 0018:ffa00000045675d0 EFLAGS: 00010286 [ 952.300811][T15539] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000037258c7 [ 952.301139][T15539] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c638 [ 952.301342][T15539] RBP: 1ff40000008acebb R08: 1fe22000037258c8 R09: fffa3bfffffb0b37 [ 952.301562][T15539] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c074 [ 952.301773][T15539] R13: ff1100001b92c040 R14: ffffffff931c7940 R15: ff1100001b92c580 [ 952.302091][T15539] FS: 00007f57affa3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 952.302338][T15539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.302523][T15539] CR2: 000000000044f720 CR3: 000000001ad90004 CR4: 0000000000771ef0 [ 952.302738][T15539] PKRU: 55555554 [ 952.302844][T15539] Call Trace: [ 952.303044][T15539] [ 952.303117][T15539] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.303263][T15539] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.303415][T15539] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.303558][T15539] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.303699][T15539] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.303842][T15539] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.304064][T15539] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.304203][T15539] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.304343][T15539] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.304494][T15539] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.304640][T15539] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.304780][T15539] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.304993][T15539] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.305133][T15539] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.305271][T15539] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.305417][T15539] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.305590][T15539] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.305742][T15539] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.305881][T15539] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.306105][T15539] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.306260][T15539] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.306402][T15539] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.306542][T15539] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.306713][T15539] ? move_addr_to_kernel (net/socket.c:2511) [ 952.306855][T15539] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.307065][T15539] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.307212][T15539] ___sys_sendmsg (net/socket.c:2641) [ 952.307350][T15539] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.307493][T15539] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.307638][T15539] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.307775][T15539] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.307986][T15539] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.308127][T15539] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.308263][T15539] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.308396][T15539] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.308536][T15539] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.308666][T15539] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.308804][T15539] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.308986][T15539] RIP: 0033:0x7f57b00fdc5e [ 952.309126][T15539] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.309601][T15539] RSP: 002b:00007ffc8ff18be0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.309807][T15539] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f57b00fdc5e [ 952.310009][T15539] RDX: 0000000000000000 RSI: 00007ffc8ff18ca0 RDI: 0000000000000005 [ 952.310207][T15539] RBP: 00007ffc8ff18bf0 R08: 0000000000000000 R09: 0000000000000000 [ 952.310431][T15539] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.310631][T15539] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 952.385290][T15545] ------------[ cut here ]------------ | [ 952.385474][T15545] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15545 | [ 952.385730][T15545] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.386945][T15545] Tainted: [W]=WARN [ 952.387053][T15545] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.387230][T15545] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.387396][T15545] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.387929][T15545] RSP: 0018:ffa00000046175d0 EFLAGS: 00010286 [ 952.388117][T15545] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725bd7 [ 952.388321][T15545] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92deb8 [ 952.388540][T15545] RBP: 1ff40000008c2ebb R08: 1fe2200003725bd8 R09: fffa3bfffffb0b37 [ 952.388749][T15545] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92dc74 [ 952.388964][T15545] R13: ff1100001b92dc40 R14: ffffffff931c7940 R15: ff1100001b92de00 [ 952.389182][T15545] FS: 00007f94e7a05440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 952.389430][T15545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.389609][T15545] CR2: 000000000044f720 CR3: 000000001cf98004 CR4: 0000000000771ef0 [ 952.389813][T15545] PKRU: 55555554 [ 952.389924][T15545] Call Trace: [ 952.390026][T15545] [ 952.390097][T15545] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.390273][T15545] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.390439][T15545] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.390582][T15545] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.390715][T15545] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.390851][T15545] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.390995][T15545] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.391133][T15545] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.391276][T15545] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.391407][T15545] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.391553][T15545] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.391697][T15545] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.391834][T15545] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.391979][T15545] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.392124][T15545] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.392257][T15545] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.392392][T15545] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.392541][T15545] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.392678][T15545] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.392812][T15545] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.392958][T15545] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.393091][T15545] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.393229][T15545] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.393424][T15545] ? move_addr_to_kernel (net/socket.c:2511) [ 952.393572][T15545] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.393727][T15545] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.393882][T15545] ___sys_sendmsg (net/socket.c:2641) [ 952.394035][T15545] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.394181][T15545] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.394329][T15545] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.394479][T15545] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.394625][T15545] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.394767][T15545] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.394908][T15545] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.395049][T15545] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.395196][T15545] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.395355][T15545] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.395510][T15545] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.395697][T15545] RIP: 0033:0x7f94e7b5fc5e [ 952.395859][T15545] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.396386][T15545] RSP: 002b:00007ffcc2969d20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.396607][T15545] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f94e7b5fc5e [ 952.396839][T15545] RDX: 0000000000000000 RSI: 00007ffcc2969de0 RDI: 0000000000000005 [ 952.397065][T15545] RBP: 00007ffcc2969d30 R08: 0000000000000000 R09: 0000000000000000 [ 952.397279][T15545] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.397504][T15545] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 952.492582][T15549] ------------[ cut here ]------------ | [ 952.492822][T15549] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15549 | [ 952.493203][T15549] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.494382][T15549] Tainted: [W]=WARN [ 952.494541][T15549] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.494798][T15549] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.495020][T15549] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.495649][T15549] RSP: 0018:ffa00000046475d0 EFLAGS: 00010286 [ 952.495821][T15549] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b08287 [ 952.496030][T15549] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841438 [ 952.496230][T15549] RBP: 1ff40000008c8ebb R08: 1fe2200001b08288 R09: fffa3bfffffb0b37 [ 952.496450][T15549] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d841574 [ 952.496666][T15549] R13: ff1100000d841540 R14: ffffffff931c7940 R15: ff1100000d841380 [ 952.496878][T15549] FS: 00007fc12be2f440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 952.497131][T15549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.497309][T15549] CR2: 000000000044f720 CR3: 00000000108dd004 CR4: 0000000000771ef0 [ 952.497513][T15549] PKRU: 55555554 [ 952.497622][T15549] Call Trace: [ 952.497727][T15549] [ 952.497800][T15549] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.497943][T15549] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.498085][T15549] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.498218][T15549] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.498352][T15549] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.498492][T15549] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.498627][T15549] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.498761][T15549] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.498901][T15549] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.499041][T15549] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.499177][T15549] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.499310][T15549] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.499447][T15549] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.499581][T15549] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.499712][T15549] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.499845][T15549] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.499983][T15549] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.500117][T15549] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.500250][T15549] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.500382][T15549] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.500524][T15549] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.500655][T15549] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.500788][T15549] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.500957][T15549] ? move_addr_to_kernel (net/socket.c:2511) [ 952.501092][T15549] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.501227][T15549] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.501362][T15549] ___sys_sendmsg (net/socket.c:2641) [ 952.501500][T15549] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.501638][T15549] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.501772][T15549] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.501909][T15549] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.502042][T15549] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.502180][T15549] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.502314][T15549] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.502452][T15549] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.502586][T15549] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.502719][T15549] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.502853][T15549] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.503025][T15549] RIP: 0033:0x7fc12bf89c5e [ 952.503167][T15549] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.503676][T15549] RSP: 002b:00007ffc0f686e70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.503890][T15549] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc12bf89c5e [ 952.504115][T15549] RDX: 0000000000000000 RSI: 00007ffc0f686f30 RDI: 0000000000000005 [ 952.504324][T15549] RBP: 00007ffc0f686e80 R08: 0000000000000000 R09: 0000000000000000 [ 952.504540][T15549] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.504753][T15549] R13: 0000000069cbe7ff R14: 0000000000000004 R15: 000000000049d620 | [ 952.587448][T15555] ------------[ cut here ]------------ | [ 952.587617][T15555] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15555 | [ 952.587855][T15555] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.588634][T15555] Tainted: [W]=WARN [ 952.588735][T15555] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.588919][T15555] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.589060][T15555] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.589538][T15555] RSP: 0018:ffa00000046675d0 EFLAGS: 00010286 [ 952.589708][T15555] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0832f [ 952.589912][T15555] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841978 [ 952.590108][T15555] RBP: 1ff40000008ccebb R08: 1fe2200001b08330 R09: fffa3bfffffb0b37 [ 952.590305][T15555] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d841ab4 [ 952.590507][T15555] R13: ff1100000d841a80 R14: ffffffff931c7940 R15: ff1100000d8418c0 [ 952.590711][T15555] FS: 00007faab62a1440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 952.590956][T15555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.591125][T15555] CR2: 000000000044f720 CR3: 000000001be2b006 CR4: 0000000000771ef0 [ 952.591322][T15555] PKRU: 55555554 [ 952.591423][T15555] Call Trace: [ 952.591524][T15555] [ 952.591592][T15555] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.591724][T15555] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.591868][T15555] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.592007][T15555] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.592142][T15555] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.592296][T15555] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.592431][T15555] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.592563][T15555] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.592704][T15555] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.592835][T15555] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.592980][T15555] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.593117][T15555] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.593250][T15555] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.593384][T15555] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.593519][T15555] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.593651][T15555] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.593783][T15555] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.593930][T15555] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.594067][T15555] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.594202][T15555] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.594336][T15555] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.594473][T15555] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.594610][T15555] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.594781][T15555] ? move_addr_to_kernel (net/socket.c:2511) [ 952.594928][T15555] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.595067][T15555] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.595212][T15555] ___sys_sendmsg (net/socket.c:2641) [ 952.595347][T15555] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.595504][T15555] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.595647][T15555] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.595783][T15555] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.595921][T15555] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.596056][T15555] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.596195][T15555] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.596340][T15555] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.596478][T15555] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.596615][T15555] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.596749][T15555] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.596919][T15555] RIP: 0033:0x7faab63fbc5e [ 952.597069][T15555] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.597548][T15555] RSP: 002b:00007ffd9bb278e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.597760][T15555] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007faab63fbc5e [ 952.597964][T15555] RDX: 0000000000000000 RSI: 00007ffd9bb279a0 RDI: 0000000000000005 [ 952.598160][T15555] RBP: 00007ffd9bb278f0 R08: 0000000000000000 R09: 0000000000000000 [ 952.598367][T15555] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.598565][T15555] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 952.672173][T15559] ------------[ cut here ]------------ | [ 952.672425][T15559] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15559 | [ 952.672754][T15559] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.673720][T15559] Tainted: [W]=WARN [ 952.673909][T15559] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.674142][T15559] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.674357][T15559] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.675009][T15559] RSP: 0018:ffa00000046875d0 EFLAGS: 00010286 [ 952.675328][T15559] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038751df [ 952.675659][T15559] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8ef8 [ 952.676016][T15559] RBP: 1ff40000008d0ebb R08: 1fe22000038751e0 R09: fffa3bfffffb0b37 [ 952.676361][T15559] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a83f4 [ 952.676745][T15559] R13: ff1100001c3a83c0 R14: ffffffff931c7940 R15: ff1100001c3a8e40 [ 952.677086][T15559] FS: 00007f000f35b440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 952.677454][T15559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.677724][T15559] CR2: 000000000044f720 CR3: 000000001d2ea006 CR4: 0000000000771ef0 [ 952.678008][T15559] PKRU: 55555554 [ 952.678160][T15559] Call Trace: [ 952.678342][T15559] [ 952.678468][T15559] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.678673][T15559] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.678891][T15559] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.679113][T15559] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.679309][T15559] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.679523][T15559] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.679718][T15559] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.679936][T15559] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.680134][T15559] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.680333][T15559] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.680572][T15559] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.680764][T15559] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.680976][T15559] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.681181][T15559] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.681383][T15559] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.681585][T15559] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.681787][T15559] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.682014][T15559] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.682207][T15559] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.682400][T15559] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.682606][T15559] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.682798][T15559] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.683002][T15559] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.683259][T15559] ? move_addr_to_kernel (net/socket.c:2511) [ 952.683489][T15559] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.683682][T15559] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.683886][T15559] ___sys_sendmsg (net/socket.c:2641) [ 952.684092][T15559] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.684287][T15559] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.684492][T15559] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.684691][T15559] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.684884][T15559] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.685091][T15559] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.685282][T15559] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.685479][T15559] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.685670][T15559] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.685858][T15559] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.686057][T15559] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.686282][T15559] RIP: 0033:0x7f000f4b5c5e [ 952.686521][T15559] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.687210][T15559] RSP: 002b:00007ffc92d75730 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.687496][T15559] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f000f4b5c5e [ 952.687766][T15559] RDX: 0000000000000000 RSI: 00007ffc92d757f0 RDI: 0000000000000005 [ 952.688082][T15559] RBP: 00007ffc92d75740 R08: 0000000000000000 R09: 0000000000000000 [ 952.688376][T15559] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.688678][T15559] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 952.760750][T15565] ------------[ cut here ]------------ | [ 952.760936][T15565] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15565 | [ 952.761182][T15565] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.762031][T15565] Tainted: [W]=WARN [ 952.762138][T15565] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.762325][T15565] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.762509][T15565] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.763008][T15565] RSP: 0018:ffa00000046175d0 EFLAGS: 00010286 [ 952.763191][T15565] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387524f [ 952.763431][T15565] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9278 [ 952.763653][T15565] RBP: 1ff40000008c2ebb R08: 1fe2200003875250 R09: fffa3bfffffb0b37 [ 952.763865][T15565] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9c74 [ 952.764074][T15565] R13: ff1100001c3a9c40 R14: ffffffff931c7940 R15: ff1100001c3a91c0 [ 952.764274][T15565] FS: 00007f66b74d2440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 952.764518][T15565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.764686][T15565] CR2: 000000000044f720 CR3: 000000001c52d001 CR4: 0000000000771ef0 [ 952.764908][T15565] PKRU: 55555554 [ 952.765009][T15565] Call Trace: [ 952.765114][T15565] [ 952.765182][T15565] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.765323][T15565] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.765500][T15565] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.765667][T15565] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.765832][T15565] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.766091][T15565] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.766258][T15565] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.766398][T15565] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.766540][T15565] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.766671][T15565] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.766839][T15565] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.767044][T15565] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.767214][T15565] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.767372][T15565] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.767528][T15565] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.767672][T15565] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.767809][T15565] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.768001][T15565] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.768134][T15565] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.768272][T15565] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.768457][T15565] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.768626][T15565] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.768781][T15565] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.769046][T15565] ? move_addr_to_kernel (net/socket.c:2511) [ 952.769181][T15565] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.769313][T15565] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.769454][T15565] ___sys_sendmsg (net/socket.c:2641) [ 952.769600][T15565] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.769738][T15565] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.769881][T15565] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.770088][T15565] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.770221][T15565] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.770379][T15565] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.770527][T15565] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.770659][T15565] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.770793][T15565] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.771016][T15565] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.771162][T15565] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.771336][T15565] RIP: 0033:0x7f66b762cc5e [ 952.771491][T15565] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.772034][T15565] RSP: 002b:00007fff4b749c40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.772234][T15565] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f66b762cc5e [ 952.772451][T15565] RDX: 0000000000000000 RSI: 00007fff4b749d00 RDI: 0000000000000005 [ 952.772648][T15565] RBP: 00007fff4b749c50 R08: 0000000000000000 R09: 0000000000000000 [ 952.772861][T15565] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.773072][T15565] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 952.855700][T15569] ------------[ cut here ]------------ | [ 952.855929][T15569] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15569 | [ 952.856217][T15569] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.857099][T15569] Tainted: [W]=WARN [ 952.857252][T15569] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.857481][T15569] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.857675][T15569] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.858213][T15569] RSP: 0018:ffa00000046c75d0 EFLAGS: 00010286 [ 952.858446][T15569] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e937 [ 952.858699][T15569] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9749b8 [ 952.858961][T15569] RBP: 1ff40000008d8ebb R08: 1fe220000192e938 R09: fffa3bfffffb0b37 [ 952.859211][T15569] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c974cb4 [ 952.859464][T15569] R13: ff1100000c974c80 R14: ffffffff931c7940 R15: ff1100000c974900 [ 952.859719][T15569] FS: 00007fdad8b1f440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 952.860015][T15569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.860233][T15569] CR2: 000000000044f720 CR3: 000000000c696006 CR4: 0000000000771ef0 [ 952.860493][T15569] PKRU: 55555554 [ 952.860644][T15569] Call Trace: [ 952.860795][T15569] [ 952.860927][T15569] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.861114][T15569] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.861310][T15569] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.861501][T15569] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.861686][T15569] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.861875][T15569] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.862075][T15569] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.862262][T15569] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.862457][T15569] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.862643][T15569] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.862871][T15569] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.863085][T15569] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.863296][T15569] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.863498][T15569] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.863702][T15569] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.863924][T15569] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.864143][T15569] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.864355][T15569] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.864580][T15569] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.864767][T15569] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.864971][T15569] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.865158][T15569] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.865381][T15569] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.865639][T15569] ? move_addr_to_kernel (net/socket.c:2511) [ 952.865833][T15569] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.866032][T15569] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.866220][T15569] ___sys_sendmsg (net/socket.c:2641) [ 952.866404][T15569] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.866610][T15569] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.866808][T15569] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.867019][T15569] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.867218][T15569] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.867406][T15569] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.867599][T15569] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.867789][T15569] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.867988][T15569] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.868181][T15569] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.868376][T15569] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.868604][T15569] RIP: 0033:0x7fdad8c79c5e [ 952.868797][T15569] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.869434][T15569] RSP: 002b:00007ffca5f48900 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.869746][T15569] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fdad8c79c5e [ 952.870050][T15569] RDX: 0000000000000000 RSI: 00007ffca5f489c0 RDI: 0000000000000005 [ 952.870307][T15569] RBP: 00007ffca5f48910 R08: 0000000000000000 R09: 0000000000000000 [ 952.870590][T15569] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.870878][T15569] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 952.945958][T15575] ------------[ cut here ]------------ | [ 952.946119][T15575] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15575 | [ 952.946364][T15575] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 952.947168][T15575] Tainted: [W]=WARN [ 952.947271][T15575] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 952.947455][T15575] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 952.947601][T15575] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 952.948112][T15575] RSP: 0018:ffa00000047175d0 EFLAGS: 00010286 [ 952.948282][T15575] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c224f [ 952.948495][T15575] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611278 [ 952.948695][T15575] RBP: 1ff40000008e2ebb R08: 1fe22000034c2250 R09: fffa3bfffffb0b37 [ 952.948900][T15575] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975734 [ 952.949105][T15575] R13: ff1100000c975700 R14: ffffffff931c7940 R15: ff1100001a6111c0 [ 952.949308][T15575] FS: 00007f601b2ae440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 952.949551][T15575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.949721][T15575] CR2: 000000000044f720 CR3: 000000001cd19005 CR4: 0000000000771ef0 [ 952.949941][T15575] PKRU: 55555554 [ 952.950042][T15575] Call Trace: [ 952.950144][T15575] [ 952.950214][T15575] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 952.950352][T15575] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 952.950505][T15575] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 952.950639][T15575] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.950771][T15575] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.950923][T15575] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 952.951056][T15575] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 952.951193][T15575] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 952.951334][T15575] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 952.951479][T15575] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 952.951616][T15575] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 952.951747][T15575] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 952.951888][T15575] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 952.952032][T15575] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 952.952170][T15575] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 952.952307][T15575] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 952.952449][T15575] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.952585][T15575] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 952.952724][T15575] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 952.952858][T15575] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 952.953002][T15575] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 952.953140][T15575] ? copy_msghdr_from_user (net/socket.c:2525) [ 952.953273][T15575] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 952.953449][T15575] ? move_addr_to_kernel (net/socket.c:2511) [ 952.953594][T15575] ? filemap_map_folio_range (mm/filemap.c:3873) [ 952.953735][T15575] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 952.953878][T15575] ___sys_sendmsg (net/socket.c:2641) [ 952.954022][T15575] ? copy_msghdr_from_user (net/socket.c:2628) [ 952.954161][T15575] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 952.954301][T15575] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 952.954448][T15575] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 952.954582][T15575] ? __sys_sendmsg_sock (net/socket.c:2656) [ 952.954732][T15575] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 952.954877][T15575] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.955019][T15575] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 952.955159][T15575] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 952.955292][T15575] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 952.955431][T15575] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 952.955597][T15575] RIP: 0033:0x7f601b408c5e [ 952.955737][T15575] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 952.956222][T15575] RSP: 002b:00007ffffcbc2070 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 952.956427][T15575] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f601b408c5e [ 952.956709][T15575] RDX: 0000000000000000 RSI: 00007ffffcbc2130 RDI: 0000000000000005 [ 952.956967][T15575] RBP: 00007ffffcbc2080 R08: 0000000000000000 R09: 0000000000000000 [ 952.957244][T15575] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 952.957518][T15575] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 953.018767][T15579] ------------[ cut here ]------------ | [ 953.019107][T15579] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15579 | [ 953.019387][T15579] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.020266][T15579] Tainted: [W]=WARN [ 953.020426][T15579] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.020645][T15579] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.020837][T15579] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.021373][T15579] RSP: 0018:ffa00000046375d0 EFLAGS: 00010286 [ 953.021602][T15579] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c2137 [ 953.021852][T15579] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6109b8 [ 953.022115][T15579] RBP: 1ff40000008c6ebb R08: 1fe22000034c2138 R09: fffa3bfffffb0b37 [ 953.022366][T15579] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a610e74 [ 953.022628][T15579] R13: ff1100001a610e40 R14: ffffffff931c7940 R15: ff1100001a610900 [ 953.022880][T15579] FS: 00007f6a818cf440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 953.023178][T15579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.023396][T15579] CR2: 000000000044f720 CR3: 000000001b6d8001 CR4: 0000000000771ef0 [ 953.023654][T15579] PKRU: 55555554 [ 953.023806][T15579] Call Trace: [ 953.023971][T15579] [ 953.024089][T15579] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.024276][T15579] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.024473][T15579] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.024658][T15579] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.024839][T15579] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.025036][T15579] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.025220][T15579] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.025405][T15579] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.025596][T15579] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.025784][T15579] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.025983][T15579] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.026163][T15579] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.026346][T15579] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.026533][T15579] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.026713][T15579] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.026910][T15579] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.027097][T15579] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.027283][T15579] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.027478][T15579] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.027665][T15579] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.027853][T15579] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.028049][T15579] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.028229][T15579] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.028448][T15579] ? move_addr_to_kernel (net/socket.c:2511) [ 953.028637][T15579] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.028819][T15579] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.029018][T15579] ___sys_sendmsg (net/socket.c:2641) [ 953.029201][T15579] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.029388][T15579] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.029583][T15579] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.029769][T15579] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.029970][T15579] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.030156][T15579] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.030341][T15579] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.030530][T15579] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.030717][T15579] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.030911][T15579] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.031095][T15579] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.031308][T15579] RIP: 0033:0x7f6a81a29c5e [ 953.031504][T15579] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.032043][T15579] RSP: 002b:00007ffc1bbe3940 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.032296][T15579] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6a81a29c5e [ 953.032556][T15579] RDX: 0000000000000000 RSI: 00007ffc1bbe3a00 RDI: 0000000000000005 [ 953.032806][T15579] RBP: 00007ffc1bbe3950 R08: 0000000000000000 R09: 0000000000000000 [ 953.033069][T15579] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.033318][T15579] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 953.107697][T15585] ------------[ cut here ]------------ | [ 953.107861][T15585] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15585 | [ 953.108836][T15585] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.109728][T15585] Tainted: [W]=WARN [ 953.109834][T15585] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.110125][T15585] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.110267][T15585] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.110751][T15585] RSP: 0018:ffa00000046175d0 EFLAGS: 00010286 [ 953.111527][T15585] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0617 [ 953.111740][T15585] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5030b8 [ 953.112052][T15585] RBP: 1ff40000008c2ebb R08: 1fe2200001ea0618 R09: fffa3bfffffb0b37 [ 953.112328][T15585] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a611734 [ 953.112618][T15585] R13: ff1100001a611700 R14: ffffffff931c7940 R15: ff1100000f503000 [ 953.112830][T15585] FS: 00007f16027c3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 953.113186][T15585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.113361][T15585] CR2: 000000000044f720 CR3: 00000000195ca002 CR4: 0000000000771ef0 [ 953.113586][T15585] PKRU: 55555554 [ 953.113700][T15585] Call Trace: [ 953.113806][T15585] [ 953.113877][T15585] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.114106][T15585] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.114253][T15585] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.114402][T15585] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.114541][T15585] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.114685][T15585] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.114816][T15585] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.115033][T15585] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.115173][T15585] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.115388][T15585] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.115545][T15585] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.115693][T15585] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.115827][T15585] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.116035][T15585] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.116187][T15585] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.116318][T15585] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.116463][T15585] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.116616][T15585] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.116748][T15585] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.116887][T15585] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.117101][T15585] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.117234][T15585] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.117456][T15585] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.117619][T15585] ? move_addr_to_kernel (net/socket.c:2511) [ 953.117753][T15585] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.117885][T15585] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.118113][T15585] ___sys_sendmsg (net/socket.c:2641) [ 953.118245][T15585] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.118381][T15585] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.118520][T15585] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.118655][T15585] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.118882][T15585] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.119024][T15585] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.119169][T15585] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.119315][T15585] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.119457][T15585] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.119596][T15585] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.119729][T15585] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.119920][T15585] RIP: 0033:0x7f160291dc5e [ 953.120065][T15585] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.120551][T15585] RSP: 002b:00007ffd5b2aeca0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.120756][T15585] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f160291dc5e [ 953.120979][T15585] RDX: 0000000000000000 RSI: 00007ffd5b2aed60 RDI: 0000000000000005 [ 953.121195][T15585] RBP: 00007ffd5b2aecb0 R08: 0000000000000000 R09: 0000000000000000 [ 953.121396][T15585] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.121600][T15585] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 953.184246][T15589] ------------[ cut here ]------------ | [ 953.184422][T15589] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15589 | [ 953.184744][T15589] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.185542][T15589] Tainted: [W]=WARN [ 953.185647][T15589] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.185816][T15589] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.185966][T15589] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.186555][T15589] RSP: 0018:ffa00000046875d0 EFLAGS: 00010286 [ 953.186726][T15589] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea04ff [ 953.186933][T15589] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5027f8 [ 953.187163][T15589] RBP: 1ff40000008d0ebb R08: 1fe2200001ea0500 R09: fffa3bfffffb0b37 [ 953.187361][T15589] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503734 [ 953.187608][T15589] R13: ff1100000f503700 R14: ffffffff931c7940 R15: ff1100000f502740 [ 953.187823][T15589] FS: 00007f9cdc4c9440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 953.188075][T15589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.188244][T15589] CR2: 000000000044f720 CR3: 00000000195ca001 CR4: 0000000000771ef0 [ 953.188453][T15589] PKRU: 55555554 [ 953.188553][T15589] Call Trace: [ 953.188652][T15589] [ 953.188741][T15589] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.188878][T15589] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.189118][T15589] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.189254][T15589] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.189398][T15589] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.189541][T15589] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.189680][T15589] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.189814][T15589] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.190412][T15589] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.190554][T15589] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.190697][T15589] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.190834][T15589] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.191036][T15589] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.191273][T15589] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.191404][T15589] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.191543][T15589] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.191694][T15589] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.191834][T15589] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.192042][T15589] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.192213][T15589] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.192356][T15589] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.192513][T15589] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.192677][T15589] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.192857][T15589] ? move_addr_to_kernel (net/socket.c:2511) [ 953.193075][T15589] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.193215][T15589] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.193387][T15589] ___sys_sendmsg (net/socket.c:2641) [ 953.193531][T15589] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.193681][T15589] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.193822][T15589] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.194133][T15589] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.194282][T15589] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.194421][T15589] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.194561][T15589] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.194722][T15589] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.194868][T15589] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.195090][T15589] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.195231][T15589] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.195414][T15589] RIP: 0033:0x7f9cdc623c5e [ 953.195572][T15589] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.196247][T15589] RSP: 002b:00007ffc98279500 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.196461][T15589] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9cdc623c5e [ 953.196673][T15589] RDX: 0000000000000000 RSI: 00007ffc982795c0 RDI: 0000000000000005 [ 953.197007][T15589] RBP: 00007ffc98279510 R08: 0000000000000000 R09: 0000000000000000 [ 953.197237][T15589] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.197496][T15589] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 953.271814][T15595] ------------[ cut here ]------------ | [ 953.272205][T15595] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15595 | [ 953.272438][T15595] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.273210][T15595] Tainted: [W]=WARN [ 953.273311][T15595] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.273487][T15595] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.273629][T15595] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.274126][T15595] RSP: 0018:ffa00000046175d0 EFLAGS: 00010286 [ 953.274300][T15595] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0457 [ 953.274519][T15595] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 953.274727][T15595] RBP: 1ff40000008c2ebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b37 [ 953.274971][T15595] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503ab4 [ 953.275185][T15595] R13: ff1100000f503a80 R14: ffffffff931c7940 R15: ff1100000f502200 [ 953.275398][T15595] FS: 00007f90bcc57440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 953.275642][T15595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.275818][T15595] CR2: 000000000044f720 CR3: 000000001ac88001 CR4: 0000000000771ef0 [ 953.276027][T15595] PKRU: 55555554 [ 953.276130][T15595] Call Trace: [ 953.276230][T15595] [ 953.276302][T15595] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.276439][T15595] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.276582][T15595] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.276727][T15595] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.276874][T15595] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.277014][T15595] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.277144][T15595] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.277278][T15595] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.277408][T15595] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.277548][T15595] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.277685][T15595] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.277819][T15595] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.277960][T15595] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.278094][T15595] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.278224][T15595] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.278356][T15595] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.278505][T15595] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.278638][T15595] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.278773][T15595] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.278909][T15595] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.279044][T15595] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.279175][T15595] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.279307][T15595] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.279474][T15595] ? move_addr_to_kernel (net/socket.c:2511) [ 953.279617][T15595] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.279752][T15595] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.279892][T15595] ___sys_sendmsg (net/socket.c:2641) [ 953.280030][T15595] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.280166][T15595] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.280301][T15595] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.280441][T15595] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.280584][T15595] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.280729][T15595] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.280860][T15595] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.281000][T15595] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.281133][T15595] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.281266][T15595] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.281398][T15595] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.281565][T15595] RIP: 0033:0x7f90bcdb1c5e [ 953.281705][T15595] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.282196][T15595] RSP: 002b:00007fff27bf8860 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.282395][T15595] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f90bcdb1c5e [ 953.282597][T15595] RDX: 0000000000000000 RSI: 00007fff27bf8920 RDI: 0000000000000005 [ 953.282801][T15595] RBP: 00007fff27bf8870 R08: 0000000000000000 R09: 0000000000000000 [ 953.283005][T15595] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.283203][T15595] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 953.365201][T15599] ------------[ cut here ]------------ | [ 953.365362][T15599] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15599 | [ 953.365596][T15599] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.366368][T15599] Tainted: [W]=WARN [ 953.366481][T15599] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.366662][T15599] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.366805][T15599] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.367288][T15599] RSP: 0018:ffa00000047675d0 EFLAGS: 00010286 [ 953.367463][T15599] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f19df [ 953.367659][T15599] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cef8 [ 953.367861][T15599] RBP: 1ff40000008ecebb R08: 1fe22000036f19e0 R09: fffa3bfffffb0b37 [ 953.368068][T15599] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d034 [ 953.368285][T15599] R13: ff1100001b78d000 R14: ffffffff931c7940 R15: ff1100001b78ce40 [ 953.368493][T15599] FS: 00007fe013de9440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 953.368736][T15599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.368919][T15599] CR2: 000000000044f720 CR3: 000000001bcd7006 CR4: 0000000000771ef0 [ 953.369129][T15599] PKRU: 55555554 [ 953.369227][T15599] Call Trace: [ 953.369326][T15599] [ 953.369393][T15599] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.369530][T15599] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.369668][T15599] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.369800][T15599] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.369940][T15599] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.370074][T15599] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.370206][T15599] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.370338][T15599] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.370479][T15599] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.370612][T15599] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.370746][T15599] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.370876][T15599] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.371020][T15599] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.371153][T15599] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.371287][T15599] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.371425][T15599] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.371559][T15599] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.371695][T15599] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.371828][T15599] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.371971][T15599] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.372104][T15599] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.372234][T15599] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.372366][T15599] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.372532][T15599] ? move_addr_to_kernel (net/socket.c:2511) [ 953.372663][T15599] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.372794][T15599] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.372933][T15599] ___sys_sendmsg (net/socket.c:2641) [ 953.373063][T15599] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.373200][T15599] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.373335][T15599] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.373474][T15599] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.373605][T15599] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.373752][T15599] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.373883][T15599] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.374022][T15599] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.374153][T15599] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.374283][T15599] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.374415][T15599] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.374582][T15599] RIP: 0033:0x7fe013f43c5e [ 953.374722][T15599] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.375206][T15599] RSP: 002b:00007fffd8567b30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.375405][T15599] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe013f43c5e [ 953.375606][T15599] RDX: 0000000000000000 RSI: 00007fffd8567bf0 RDI: 0000000000000005 [ 953.375804][T15599] RBP: 00007fffd8567b40 R08: 0000000000000000 R09: 0000000000000000 [ 953.376046][T15599] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.376247][T15599] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 953.446620][T15605] ------------[ cut here ]------------ | [ 953.446827][T15605] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15605 | [ 953.447145][T15605] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.448160][T15605] Tainted: [W]=WARN [ 953.448312][T15605] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.448541][T15605] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.448735][T15605] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.449326][T15605] RSP: 0018:ffa00000047975d0 EFLAGS: 00010286 [ 953.449579][T15605] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f19a7 [ 953.449865][T15605] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cd38 [ 953.450144][T15605] RBP: 1ff40000008f2ebb R08: 1fe22000036f19a8 R09: fffa3bfffffb0b37 [ 953.450403][T15605] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d734 [ 953.450673][T15605] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78cc80 [ 953.450950][T15605] FS: 00007f50a94a1440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 953.451249][T15605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.451521][T15605] CR2: 000000000044f720 CR3: 000000000c90f001 CR4: 0000000000771ef0 [ 953.451790][T15605] PKRU: 55555554 [ 953.451966][T15605] Call Trace: [ 953.452123][T15605] [ 953.452242][T15605] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.452438][T15605] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.452646][T15605] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.452831][T15605] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.453043][T15605] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.453236][T15605] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.453418][T15605] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.453616][T15605] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.453803][T15605] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.454013][T15605] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.454214][T15605] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.454412][T15605] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.454620][T15605] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.454808][T15605] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.455097][T15605] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.455342][T15605] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.455596][T15605] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.455835][T15605] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.456093][T15605] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.456335][T15605] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.456609][T15605] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.456882][T15605] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.457139][T15605] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.457440][T15605] ? move_addr_to_kernel (net/socket.c:2511) [ 953.457632][T15605] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.457829][T15605] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.458044][T15605] ___sys_sendmsg (net/socket.c:2641) [ 953.458229][T15605] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.458434][T15605] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.458622][T15605] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.458809][T15605] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.459013][T15605] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.459210][T15605] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.459409][T15605] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.459603][T15605] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.459788][T15605] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.460005][T15605] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.460192][T15605] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.460405][T15605] RIP: 0033:0x7f50a95fbc5e [ 953.460605][T15605] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.461146][T15605] RSP: 002b:00007ffec5d141a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.461397][T15605] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f50a95fbc5e [ 953.461653][T15605] RDX: 0000000000000000 RSI: 00007ffec5d14260 RDI: 0000000000000005 [ 953.461928][T15605] RBP: 00007ffec5d141b0 R08: 0000000000000000 R09: 0000000000000000 [ 953.462192][T15605] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.462498][T15605] R13: 0000000069cbe800 R14: 0000000000000004 R15: 000000000049d620 | [ 953.533855][T15609] ------------[ cut here ]------------ | [ 953.534028][T15609] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15609 | [ 953.534265][T15609] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.535061][T15609] Tainted: [W]=WARN [ 953.535164][T15609] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.535329][T15609] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.535476][T15609] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.536189][T15609] RSP: 0018:ffa00000047475d0 EFLAGS: 00010286 [ 953.536360][T15609] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725857 [ 953.536591][T15609] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c2b8 [ 953.536814][T15609] RBP: 1ff40000008e8ebb R08: 1fe2200003725858 R09: fffa3bfffffb0b37 [ 953.537094][T15609] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92ccb4 [ 953.537300][T15609] R13: ff1100001b92cc80 R14: ffffffff931c7940 R15: ff1100001b92c200 [ 953.537513][T15609] FS: 00007fbbccf2a440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 953.537755][T15609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.538015][T15609] CR2: 000000000044f720 CR3: 0000000018022001 CR4: 0000000000771ef0 [ 953.538241][T15609] PKRU: 55555554 [ 953.538341][T15609] Call Trace: [ 953.538445][T15609] [ 953.538515][T15609] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.538648][T15609] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.538976][T15609] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.539112][T15609] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.539250][T15609] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.539391][T15609] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.539528][T15609] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.539663][T15609] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.539793][T15609] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.539996][T15609] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.540135][T15609] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.540267][T15609] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.540432][T15609] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.540569][T15609] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.540703][T15609] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.540837][T15609] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.540976][T15609] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.541110][T15609] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.541243][T15609] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.541377][T15609] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.541518][T15609] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.541663][T15609] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.541805][T15609] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.541978][T15609] ? move_addr_to_kernel (net/socket.c:2511) [ 953.542115][T15609] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.542249][T15609] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.542390][T15609] ___sys_sendmsg (net/socket.c:2641) [ 953.542543][T15609] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.542685][T15609] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.542822][T15609] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.542963][T15609] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.543104][T15609] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.543242][T15609] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.543382][T15609] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.543808][T15609] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.543945][T15609] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.544077][T15609] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.544210][T15609] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.544398][T15609] RIP: 0033:0x7fbbcd084c5e [ 953.544595][T15609] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.545093][T15609] RSP: 002b:00007ffe452cb4e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.545297][T15609] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbbcd084c5e [ 953.545526][T15609] RDX: 0000000000000000 RSI: 00007ffe452cb5a0 RDI: 0000000000000005 [ 953.545773][T15609] RBP: 00007ffe452cb4f0 R08: 0000000000000000 R09: 0000000000000000 [ 953.545984][T15609] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.546188][T15609] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 953.612802][T15615] ------------[ cut here ]------------ | [ 953.613384][T15615] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15615 | [ 953.613624][T15615] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.614391][T15615] Tainted: [W]=WARN [ 953.614496][T15615] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.614666][T15615] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.614809][T15615] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.615292][T15615] RSP: 0018:ffa00000047675d0 EFLAGS: 00010286 [ 953.615467][T15615] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b67 [ 953.615669][T15615] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92db38 [ 953.615872][T15615] RBP: 1ff40000008ecebb R08: 1fe2200003725b68 R09: fffa3bfffffb0b37 [ 953.616074][T15615] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92caf4 [ 953.616271][T15615] R13: ff1100001b92cac0 R14: ffffffff931c7940 R15: ff1100001b92da80 [ 953.616475][T15615] FS: 00007fd07078f440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 953.616705][T15615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.616872][T15615] CR2: 000000000044f720 CR3: 000000001a20d004 CR4: 0000000000771ef0 [ 953.617075][T15615] PKRU: 55555554 [ 953.617175][T15615] Call Trace: [ 953.617276][T15615] [ 953.617344][T15615] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.617491][T15615] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.617632][T15615] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.617771][T15615] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.617911][T15615] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.618047][T15615] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.618181][T15615] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.618312][T15615] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.618449][T15615] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.618579][T15615] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.618723][T15615] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.618854][T15615] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.618997][T15615] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.619131][T15615] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.619262][T15615] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.619394][T15615] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.619529][T15615] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.619661][T15615] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.619793][T15615] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.619931][T15615] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.620065][T15615] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.620199][T15615] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.620331][T15615] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.620499][T15615] ? move_addr_to_kernel (net/socket.c:2511) [ 953.620633][T15615] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.620764][T15615] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.620903][T15615] ___sys_sendmsg (net/socket.c:2641) [ 953.621057][T15615] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.621195][T15615] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.621331][T15615] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.621469][T15615] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.621603][T15615] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.621737][T15615] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.621869][T15615] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.622004][T15615] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.622137][T15615] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.622267][T15615] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.622402][T15615] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.622569][T15615] RIP: 0033:0x7fd0708e9c5e [ 953.622709][T15615] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.623196][T15615] RSP: 002b:00007fffd3b61400 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.623398][T15615] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd0708e9c5e [ 953.623603][T15615] RDX: 0000000000000000 RSI: 00007fffd3b614c0 RDI: 0000000000000005 [ 953.623803][T15615] RBP: 00007fffd3b61410 R08: 0000000000000000 R09: 0000000000000000 [ 953.624008][T15615] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.624204][T15615] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 953.686277][T15619] ------------[ cut here ]------------ | [ 953.686438][T15619] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15619 | [ 953.686685][T15619] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.687474][T15619] Tainted: [W]=WARN [ 953.687580][T15619] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.687748][T15619] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.687907][T15619] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.688417][T15619] RSP: 0018:ffa00000046e75d0 EFLAGS: 00010286 [ 953.688595][T15619] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0816f [ 953.688794][T15619] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d840b78 [ 953.688999][T15619] RBP: 1ff40000008dcebb R08: 1fe2200001b08170 R09: fffa3bfffffb0b37 [ 953.689212][T15619] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840cb4 [ 953.689417][T15619] R13: ff1100000d840c80 R14: ffffffff931c7940 R15: ff1100000d840ac0 [ 953.689623][T15619] FS: 00007fd21e50e440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 953.689859][T15619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.690034][T15619] CR2: 000000000044f720 CR3: 000000001b7af006 CR4: 0000000000771ef0 [ 953.690237][T15619] PKRU: 55555554 [ 953.690337][T15619] Call Trace: [ 953.690441][T15619] [ 953.690508][T15619] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.690642][T15619] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.690785][T15619] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.690927][T15619] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.691060][T15619] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.691221][T15619] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.691359][T15619] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.691495][T15619] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.691633][T15619] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.691767][T15619] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.691910][T15619] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.692045][T15619] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.692183][T15619] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.692319][T15619] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.692454][T15619] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.692588][T15619] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.692721][T15619] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.692859][T15619] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.693003][T15619] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.693140][T15619] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.693277][T15619] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.693410][T15619] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.693547][T15619] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.693710][T15619] ? move_addr_to_kernel (net/socket.c:2511) [ 953.693842][T15619] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.693985][T15619] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.694123][T15619] ___sys_sendmsg (net/socket.c:2641) [ 953.694255][T15619] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.694404][T15619] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.694543][T15619] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.694677][T15619] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.694891][T15619] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.695032][T15619] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.695164][T15619] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.695294][T15619] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.695512][T15619] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.695642][T15619] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.695826][T15619] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.696114][T15619] RIP: 0033:0x7fd21e668c5e [ 953.696253][T15619] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.696816][T15619] RSP: 002b:00007ffcb4a4fb90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.697023][T15619] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd21e668c5e [ 953.697220][T15619] RDX: 0000000000000000 RSI: 00007ffcb4a4fc50 RDI: 0000000000000005 [ 953.697510][T15619] RBP: 00007ffcb4a4fba0 R08: 0000000000000000 R09: 0000000000000000 [ 953.697709][T15619] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.697909][T15619] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 953.776594][T15625] ------------[ cut here ]------------ | [ 953.776807][T15625] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15625 | [ 953.777464][T15625] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.778370][T15625] Tainted: [W]=WARN [ 953.778533][T15625] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.778757][T15625] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.778971][T15625] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.779502][T15625] RSP: 0018:ffa00000047975d0 EFLAGS: 00010286 [ 953.779724][T15625] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b08057 [ 953.779978][T15625] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8402b8 [ 953.780224][T15625] RBP: 1ff40000008f2ebb R08: 1fe2200001b08058 R09: fffa3bfffffb0b37 [ 953.780473][T15625] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840074 [ 953.780722][T15625] R13: ff1100000d840040 R14: ffffffff931c7940 R15: ff1100000d840200 [ 953.780982][T15625] FS: 00007fa717c22440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 953.781267][T15625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.781498][T15625] CR2: 000000000044f720 CR3: 000000001bcd1005 CR4: 0000000000771ef0 [ 953.781773][T15625] PKRU: 55555554 [ 953.781941][T15625] Call Trace: [ 953.782107][T15625] [ 953.782227][T15625] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.782410][T15625] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.782627][T15625] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.782824][T15625] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.783019][T15625] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.783217][T15625] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.783413][T15625] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.783618][T15625] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.783814][T15625] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.784029][T15625] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.784229][T15625] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.784433][T15625] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.784662][T15625] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.784865][T15625] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.785072][T15625] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.785274][T15625] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.785468][T15625] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.785654][T15625] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.785843][T15625] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.786048][T15625] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.786251][T15625] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.786448][T15625] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.786636][T15625] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.786868][T15625] ? move_addr_to_kernel (net/socket.c:2511) [ 953.787072][T15625] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.787265][T15625] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.787478][T15625] ___sys_sendmsg (net/socket.c:2641) [ 953.787674][T15625] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.787872][T15625] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.788074][T15625] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.788263][T15625] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.788457][T15625] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.788651][T15625] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.788840][T15625] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.789038][T15625] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.789223][T15625] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.789418][T15625] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.789620][T15625] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.789837][T15625] RIP: 0033:0x7fa717d7cc5e [ 953.790061][T15625] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.790646][T15625] RSP: 002b:00007ffe77ee62a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.790932][T15625] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa717d7cc5e [ 953.791195][T15625] RDX: 0000000000000000 RSI: 00007ffe77ee6360 RDI: 0000000000000005 [ 953.791492][T15625] RBP: 00007ffe77ee62b0 R08: 0000000000000000 R09: 0000000000000000 [ 953.791761][T15625] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.792039][T15625] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 953.871951][T15629] ------------[ cut here ]------------ | [ 953.872151][T15629] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15629 | [ 953.872440][T15629] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.873808][T15629] Tainted: [W]=WARN [ 953.873996][T15629] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.874213][T15629] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.874404][T15629] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.874959][T15629] RSP: 0018:ffa00000047c75d0 EFLAGS: 00010286 [ 953.875182][T15629] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003875287 [ 953.875438][T15629] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9438 [ 953.875704][T15629] RBP: 1ff40000008f8ebb R08: 1fe2200003875288 R09: fffa3bfffffb0b37 [ 953.875971][T15629] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9734 [ 953.876224][T15629] R13: ff1100001c3a9700 R14: ffffffff931c7940 R15: ff1100001c3a9380 [ 953.876489][T15629] FS: 00007f474e906440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 953.876784][T15629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.877048][T15629] CR2: 000000000044f720 CR3: 0000000019878005 CR4: 0000000000771ef0 [ 953.877312][T15629] PKRU: 55555554 [ 953.877474][T15629] Call Trace: [ 953.877625][T15629] [ 953.877744][T15629] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.877941][T15629] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.878136][T15629] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.878346][T15629] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.878539][T15629] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.878726][T15629] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.878961][T15629] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.879150][T15629] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.879336][T15629] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.879529][T15629] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.879739][T15629] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.879934][T15629] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.880122][T15629] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.880328][T15629] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.880522][T15629] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.880721][T15629] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.880928][T15629] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.881139][T15629] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.881333][T15629] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.881539][T15629] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.881752][T15629] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.881954][T15629] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.882156][T15629] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.882384][T15629] ? move_addr_to_kernel (net/socket.c:2511) [ 953.882578][T15629] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.882788][T15629] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.882985][T15629] ___sys_sendmsg (net/socket.c:2641) [ 953.883201][T15629] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.883403][T15629] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.883611][T15629] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.883800][T15629] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.884011][T15629] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.884208][T15629] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.884403][T15629] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.884607][T15629] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.884814][T15629] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.885020][T15629] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.885216][T15629] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.885456][T15629] RIP: 0033:0x7f474ea60c5e [ 953.885651][T15629] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.886203][T15629] RSP: 002b:00007ffc2ffb2de0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.886458][T15629] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f474ea60c5e [ 953.886714][T15629] RDX: 0000000000000000 RSI: 00007ffc2ffb2ea0 RDI: 0000000000000005 [ 953.886982][T15629] RBP: 00007ffc2ffb2df0 R08: 0000000000000000 R09: 0000000000000000 [ 953.887244][T15629] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.887508][T15629] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 953.956750][T15635] ------------[ cut here ]------------ | [ 953.956931][T15635] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15635 | [ 953.957164][T15635] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 953.957942][T15635] Tainted: [W]=WARN [ 953.958046][T15635] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 953.958217][T15635] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 953.958358][T15635] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 953.958837][T15635] RSP: 0018:ffa00000047375d0 EFLAGS: 00010286 [ 953.959469][T15635] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038750ff [ 953.959668][T15635] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a87f8 [ 953.959866][T15635] RBP: 1ff40000008e6ebb R08: 1fe2200003875100 R09: fffa3bfffffb0b37 [ 953.960072][T15635] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a98f4 [ 953.960269][T15635] R13: ff1100001c3a98c0 R14: ffffffff931c7940 R15: ff1100001c3a8740 [ 953.960473][T15635] FS: 00007f07046ac440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 953.960706][T15635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.960875][T15635] CR2: 000000000044f720 CR3: 000000001be31004 CR4: 0000000000771ef0 [ 953.961079][T15635] PKRU: 55555554 [ 953.961179][T15635] Call Trace: [ 953.961278][T15635] [ 953.961345][T15635] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 953.961480][T15635] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 953.961621][T15635] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 953.961754][T15635] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.961889][T15635] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.962027][T15635] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 953.962158][T15635] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 953.962289][T15635] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 953.962420][T15635] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 953.962556][T15635] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 953.962703][T15635] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 953.962834][T15635] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 953.962973][T15635] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 953.963107][T15635] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 953.963236][T15635] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 953.963368][T15635] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 953.963503][T15635] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.963640][T15635] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 953.963773][T15635] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 953.963911][T15635] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 953.964046][T15635] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 953.964175][T15635] ? copy_msghdr_from_user (net/socket.c:2525) [ 953.964306][T15635] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 953.964472][T15635] ? move_addr_to_kernel (net/socket.c:2511) [ 953.964605][T15635] ? filemap_map_folio_range (mm/filemap.c:3873) [ 953.964737][T15635] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 953.964873][T15635] ___sys_sendmsg (net/socket.c:2641) [ 953.965007][T15635] ? copy_msghdr_from_user (net/socket.c:2628) [ 953.965143][T15635] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 953.965278][T15635] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 953.965410][T15635] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 953.965546][T15635] ? __sys_sendmsg_sock (net/socket.c:2656) [ 953.965681][T15635] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 953.965814][T15635] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.965950][T15635] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 953.966083][T15635] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 953.966215][T15635] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 953.966354][T15635] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 953.966526][T15635] RIP: 0033:0x7f0704806c5e [ 953.966667][T15635] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 953.967143][T15635] RSP: 002b:00007ffc59d2a800 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 953.967343][T15635] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0704806c5e [ 953.967544][T15635] RDX: 0000000000000000 RSI: 00007ffc59d2a8c0 RDI: 0000000000000005 [ 953.967748][T15635] RBP: 00007ffc59d2a810 R08: 0000000000000000 R09: 0000000000000000 [ 953.967956][T15635] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 953.968152][T15635] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 954.037456][T15639] ------------[ cut here ]------------ | [ 954.037629][T15639] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15639 | [ 954.038366][T15639] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.039205][T15639] Tainted: [W]=WARN [ 954.039317][T15639] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.039501][T15639] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.039660][T15639] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.040163][T15639] RSP: 0018:ffa00000048175d0 EFLAGS: 00010286 [ 954.040335][T15639] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e857 [ 954.040544][T15639] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9742b8 [ 954.040766][T15639] RBP: 1ff4000000902ebb R08: 1fe220000192e858 R09: fffa3bfffffb0b37 [ 954.040985][T15639] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9751f4 [ 954.041201][T15639] R13: ff1100000c9751c0 R14: ffffffff931c7940 R15: ff1100000c974200 [ 954.041417][T15639] FS: 00007fbd3b6a6440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 954.041684][T15639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.041868][T15639] CR2: 000000000044f720 CR3: 000000001814f004 CR4: 0000000000771ef0 [ 954.042088][T15639] PKRU: 55555554 [ 954.042195][T15639] Call Trace: [ 954.042309][T15639] [ 954.042381][T15639] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.042529][T15639] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.042685][T15639] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.042825][T15639] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.042967][T15639] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.043104][T15639] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.043235][T15639] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.043370][T15639] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.043509][T15639] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.043644][T15639] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.043782][T15639] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.043924][T15639] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.044059][T15639] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.044194][T15639] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.044328][T15639] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.044468][T15639] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.044604][T15639] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.044745][T15639] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.044879][T15639] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.045023][T15639] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.045168][T15639] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.045302][T15639] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.045442][T15639] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.045615][T15639] ? move_addr_to_kernel (net/socket.c:2511) [ 954.045751][T15639] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.045887][T15639] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.046030][T15639] ___sys_sendmsg (net/socket.c:2641) [ 954.046166][T15639] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.046316][T15639] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.046468][T15639] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.046611][T15639] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.046746][T15639] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.046890][T15639] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.047037][T15639] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.047177][T15639] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.047319][T15639] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.047463][T15639] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.047621][T15639] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.047809][T15639] RIP: 0033:0x7fbd3b800c5e [ 954.047961][T15639] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.048478][T15639] RSP: 002b:00007ffc64fad210 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.048688][T15639] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbd3b800c5e [ 954.048891][T15639] RDX: 0000000000000000 RSI: 00007ffc64fad2d0 RDI: 0000000000000005 [ 954.049132][T15639] RBP: 00007ffc64fad220 R08: 0000000000000000 R09: 0000000000000000 [ 954.049373][T15639] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.049646][T15639] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 954.125373][T15645] ------------[ cut here ]------------ | [ 954.125543][T15645] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15645 | [ 954.125803][T15645] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.126871][T15645] Tainted: [W]=WARN [ 954.126986][T15645] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.127173][T15645] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.127323][T15645] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.127857][T15645] RSP: 0018:ffa00000048775d0 EFLAGS: 00010286 [ 954.128047][T15645] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e9a7 [ 954.128267][T15645] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974d38 [ 954.128489][T15645] RBP: 1ff400000090eebb R08: 1fe220000192e9a8 R09: fffa3bfffffb0b37 [ 954.128690][T15645] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975734 [ 954.128907][T15645] R13: ff1100000c975700 R14: ffffffff931c7940 R15: ff1100000c974c80 [ 954.129121][T15645] FS: 00007ff58cf1a440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 954.129373][T15645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.129571][T15645] CR2: 000000000044f720 CR3: 0000000019928005 CR4: 0000000000771ef0 [ 954.129798][T15645] PKRU: 55555554 [ 954.129917][T15645] Call Trace: [ 954.130030][T15645] [ 954.130123][T15645] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.130288][T15645] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.130446][T15645] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.130588][T15645] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.130723][T15645] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.130862][T15645] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.131083][T15645] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.131244][T15645] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.131436][T15645] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.131576][T15645] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.131714][T15645] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.131859][T15645] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.132008][T15645] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.132145][T15645] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.132279][T15645] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.132418][T15645] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.132559][T15645] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.132696][T15645] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.132833][T15645] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.132998][T15645] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.133148][T15645] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.133289][T15645] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.133437][T15645] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.133614][T15645] ? move_addr_to_kernel (net/socket.c:2511) [ 954.133754][T15645] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.133891][T15645] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.134034][T15645] ___sys_sendmsg (net/socket.c:2641) [ 954.134170][T15645] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.134315][T15645] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.134464][T15645] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.134602][T15645] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.134738][T15645] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.134879][T15645] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.135022][T15645] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.135179][T15645] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.135320][T15645] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.135472][T15645] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.135611][T15645] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.135777][T15645] RIP: 0033:0x7ff58d074c5e [ 954.135929][T15645] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.136464][T15645] RSP: 002b:00007fff7e542390 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.136673][T15645] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff58d074c5e [ 954.136878][T15645] RDX: 0000000000000000 RSI: 00007fff7e542450 RDI: 0000000000000005 [ 954.137090][T15645] RBP: 00007fff7e5423a0 R08: 0000000000000000 R09: 0000000000000000 [ 954.137295][T15645] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.137505][T15645] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 954.230277][T15649] ------------[ cut here ]------------ | [ 954.230496][T15649] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15649 | [ 954.230748][T15649] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.231965][T15649] Tainted: [W]=WARN [ 954.232069][T15649] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.232257][T15649] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.232402][T15649] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.232883][T15649] RSP: 0018:ffa00000047c75d0 EFLAGS: 00010286 [ 954.233064][T15649] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0457 [ 954.233260][T15649] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 954.233475][T15649] RBP: 1ff40000008f8ebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b37 [ 954.233674][T15649] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503ab4 [ 954.233886][T15649] R13: ff1100000f503a80 R14: ffffffff931c7940 R15: ff1100000f502200 [ 954.234145][T15649] FS: 00007f2797093440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 954.234388][T15649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.234566][T15649] CR2: 000000000044f720 CR3: 000000000f63a001 CR4: 0000000000771ef0 [ 954.234776][T15649] PKRU: 55555554 [ 954.234880][T15649] Call Trace: [ 954.234985][T15649] [ 954.235055][T15649] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.235200][T15649] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.235347][T15649] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.235493][T15649] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.235629][T15649] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.235778][T15649] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.235927][T15649] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.236069][T15649] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.236211][T15649] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.236355][T15649] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.236510][T15649] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.236653][T15649] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.236797][T15649] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.236951][T15649] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.237097][T15649] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.237239][T15649] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.237381][T15649] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.237562][T15649] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.237707][T15649] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.237851][T15649] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.238000][T15649] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.238145][T15649] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.238286][T15649] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.238464][T15649] ? move_addr_to_kernel (net/socket.c:2511) [ 954.238606][T15649] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.238752][T15649] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.238909][T15649] ___sys_sendmsg (net/socket.c:2641) [ 954.239057][T15649] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.239204][T15649] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.239349][T15649] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.239497][T15649] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.239642][T15649] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.239785][T15649] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.239934][T15649] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.240076][T15649] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.240218][T15649] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.240362][T15649] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.240506][T15649] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.240677][T15649] RIP: 0033:0x7f27971edc5e [ 954.240829][T15649] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.241336][T15649] RSP: 002b:00007ffd70ff3e70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.241555][T15649] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f27971edc5e [ 954.241769][T15649] RDX: 0000000000000000 RSI: 00007ffd70ff3f30 RDI: 0000000000000005 [ 954.241994][T15649] RBP: 00007ffd70ff3e80 R08: 0000000000000000 R09: 0000000000000000 [ 954.242206][T15649] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.242418][T15649] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 954.318501][T15655] ------------[ cut here ]------------ | [ 954.318722][T15655] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15655 | [ 954.319373][T15655] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.320283][T15655] Tainted: [W]=WARN [ 954.320440][T15655] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.320659][T15655] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.320853][T15655] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.321391][T15655] RSP: 0018:ffa00000048475d0 EFLAGS: 00010286 [ 954.321626][T15655] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea05df [ 954.321907][T15655] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502ef8 [ 954.322225][T15655] RBP: 1ff4000000908ebb R08: 1fe2200001ea05e0 R09: fffa3bfffffb0b37 [ 954.322504][T15655] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f5025b4 [ 954.322769][T15655] R13: ff1100000f502580 R14: ffffffff931c7940 R15: ff1100000f502e40 [ 954.323049][T15655] FS: 00007fe519525440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 954.323347][T15655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.323590][T15655] CR2: 000000000044f720 CR3: 000000001d2eb002 CR4: 0000000000771ef0 [ 954.323843][T15655] PKRU: 55555554 [ 954.324017][T15655] Call Trace: [ 954.324168][T15655] [ 954.324287][T15655] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.324484][T15655] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.324690][T15655] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.324878][T15655] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.325077][T15655] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.325293][T15655] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.325516][T15655] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.325755][T15655] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.325977][T15655] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.326197][T15655] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.326419][T15655] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.326637][T15655] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.326841][T15655] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.327046][T15655] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.327236][T15655] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.327423][T15655] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.327628][T15655] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.327839][T15655] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.328044][T15655] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.328255][T15655] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.328470][T15655] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.328656][T15655] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.328864][T15655] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.329117][T15655] ? move_addr_to_kernel (net/socket.c:2511) [ 954.329322][T15655] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.329552][T15655] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.329750][T15655] ___sys_sendmsg (net/socket.c:2641) [ 954.329949][T15655] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.330144][T15655] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.330336][T15655] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.330540][T15655] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.330731][T15655] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.330935][T15655] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.331129][T15655] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.331318][T15655] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.331517][T15655] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.331707][T15655] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.331911][T15655] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.332146][T15655] RIP: 0033:0x7fe51967fc5e [ 954.332356][T15655] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.332934][T15655] RSP: 002b:00007fff7f439db0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.333197][T15655] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe51967fc5e [ 954.333460][T15655] RDX: 0000000000000000 RSI: 00007fff7f439e70 RDI: 0000000000000005 [ 954.333739][T15655] RBP: 00007fff7f439dc0 R08: 0000000000000000 R09: 0000000000000000 [ 954.334036][T15655] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.334316][T15655] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 954.401546][T15659] ------------[ cut here ]------------ | [ 954.401753][T15659] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15659 | [ 954.402038][T15659] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.402910][T15659] Tainted: [W]=WARN [ 954.403017][T15659] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.403192][T15659] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.403337][T15659] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.403848][T15659] RSP: 0018:ffa00000048475d0 EFLAGS: 00010286 [ 954.404040][T15659] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1b9f [ 954.404255][T15659] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78dcf8 [ 954.404484][T15659] RBP: 1ff4000000908ebb R08: 1fe22000036f1ba0 R09: fffa3bfffffb0b37 [ 954.404695][T15659] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78ce74 [ 954.404910][T15659] R13: ff1100001b78ce40 R14: ffffffff931c7940 R15: ff1100001b78dc40 [ 954.405124][T15659] FS: 00007fd7f53b8440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 954.405384][T15659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.405566][T15659] CR2: 000000000044f720 CR3: 000000001d147005 CR4: 0000000000771ef0 [ 954.405770][T15659] PKRU: 55555554 [ 954.405873][T15659] Call Trace: [ 954.405986][T15659] [ 954.406056][T15659] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.406192][T15659] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.406334][T15659] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.406481][T15659] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.406615][T15659] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.406752][T15659] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.406885][T15659] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.407033][T15659] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.407172][T15659] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.407309][T15659] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.407459][T15659] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.407592][T15659] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.407748][T15659] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.407934][T15659] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.408085][T15659] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.408246][T15659] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.408409][T15659] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.408560][T15659] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.408700][T15659] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.408838][T15659] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.408979][T15659] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.409114][T15659] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.409257][T15659] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.409445][T15659] ? move_addr_to_kernel (net/socket.c:2511) [ 954.409578][T15659] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.409709][T15659] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.409841][T15659] ___sys_sendmsg (net/socket.c:2641) [ 954.409978][T15659] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.410117][T15659] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.410254][T15659] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.410396][T15659] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.410542][T15659] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.410689][T15659] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.410828][T15659] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.410989][T15659] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.411142][T15659] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.411293][T15659] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.411458][T15659] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.411653][T15659] RIP: 0033:0x7fd7f5512c5e [ 954.411827][T15659] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.412333][T15659] RSP: 002b:00007ffc22447b90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.412554][T15659] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd7f5512c5e [ 954.412759][T15659] RDX: 0000000000000000 RSI: 00007ffc22447c50 RDI: 0000000000000005 [ 954.412973][T15659] RBP: 00007ffc22447ba0 R08: 0000000000000000 R09: 0000000000000000 [ 954.413183][T15659] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.413395][T15659] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 954.493772][T15665] ------------[ cut here ]------------ | [ 954.493950][T15665] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15665 | [ 954.494190][T15665] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.494992][T15665] Tainted: [W]=WARN [ 954.495092][T15665] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.495259][T15665] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.495400][T15665] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.495904][T15665] RSP: 0018:ffa00000048a75d0 EFLAGS: 00010286 [ 954.496077][T15665] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000189788f [ 954.496276][T15665] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bc478 [ 954.496476][T15665] RBP: 1ff4000000914ebb R08: 1fe2200001897890 R09: fffa3bfffffb0b37 [ 954.496673][T15665] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bc234 [ 954.496870][T15665] R13: ff1100000c4bc200 R14: ffffffff931c7940 R15: ff1100000c4bc3c0 [ 954.497294][T15665] FS: 00007f34afa19440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 954.497538][T15665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.497707][T15665] CR2: 000000000044f720 CR3: 000000001d065001 CR4: 0000000000771ef0 [ 954.497928][T15665] PKRU: 55555554 [ 954.498039][T15665] Call Trace: [ 954.498145][T15665] [ 954.498216][T15665] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.498353][T15665] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.498506][T15665] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.498647][T15665] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.498783][T15665] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.498930][T15665] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.499068][T15665] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.499212][T15665] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.499364][T15665] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.499522][T15665] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.499662][T15665] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.499793][T15665] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.499934][T15665] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.500068][T15665] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.500199][T15665] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.500331][T15665] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.500470][T15665] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.500603][T15665] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.500738][T15665] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.500874][T15665] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.501013][T15665] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.501147][T15665] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.501290][T15665] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.501460][T15665] ? move_addr_to_kernel (net/socket.c:2511) [ 954.501603][T15665] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.501748][T15665] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.501904][T15665] ___sys_sendmsg (net/socket.c:2641) [ 954.502059][T15665] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.502204][T15665] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.502352][T15665] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.502497][T15665] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.502646][T15665] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.502786][T15665] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.502932][T15665] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.503070][T15665] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.503203][T15665] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.503336][T15665] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.503473][T15665] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.503638][T15665] RIP: 0033:0x7f34afb73c5e [ 954.503778][T15665] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.504257][T15665] RSP: 002b:00007ffdedd6a8f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.504467][T15665] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f34afb73c5e [ 954.504666][T15665] RDX: 0000000000000000 RSI: 00007ffdedd6a9b0 RDI: 0000000000000005 [ 954.504863][T15665] RBP: 00007ffdedd6a900 R08: 0000000000000000 R09: 0000000000000000 [ 954.505083][T15665] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.505281][T15665] R13: 0000000069cbe801 R14: 0000000000000004 R15: 000000000049d620 | [ 954.579787][T15669] ------------[ cut here ]------------ | [ 954.579998][T15669] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15669 | [ 954.580259][T15669] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.581107][T15669] Tainted: [W]=WARN [ 954.581217][T15669] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.581394][T15669] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.581547][T15669] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.582174][T15669] RSP: 0018:ffa00000048775d0 EFLAGS: 00010286 [ 954.582352][T15669] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897b9f [ 954.582570][T15669] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bdcf8 [ 954.582784][T15669] RBP: 1ff400000090eebb R08: 1fe2200001897ba0 R09: fffa3bfffffb0b37 [ 954.583017][T15669] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bdab4 [ 954.583234][T15669] R13: ff1100000c4bda80 R14: ffffffff931c7940 R15: ff1100000c4bdc40 [ 954.583455][T15669] FS: 00007f211c6c3440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 954.583691][T15669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.583878][T15669] CR2: 000000000044f720 CR3: 000000001d06f002 CR4: 0000000000771ef0 [ 954.584102][T15669] PKRU: 55555554 [ 954.584232][T15669] Call Trace: [ 954.584355][T15669] [ 954.584444][T15669] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.584578][T15669] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.584721][T15669] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.584858][T15669] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.585022][T15669] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.585167][T15669] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.585309][T15669] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.585446][T15669] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.585603][T15669] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.585757][T15669] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.585907][T15669] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.586042][T15669] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.586196][T15669] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.586343][T15669] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.586484][T15669] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.586615][T15669] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.586749][T15669] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.586881][T15669] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.587023][T15669] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.587160][T15669] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.587307][T15669] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.587450][T15669] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.587586][T15669] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.587762][T15669] ? move_addr_to_kernel (net/socket.c:2511) [ 954.587911][T15669] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.588054][T15669] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.588194][T15669] ___sys_sendmsg (net/socket.c:2641) [ 954.588329][T15669] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.588475][T15669] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.588612][T15669] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.588753][T15669] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.588901][T15669] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.589051][T15669] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.589191][T15669] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.589337][T15669] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.589495][T15669] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.589632][T15669] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.589767][T15669] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.589938][T15669] RIP: 0033:0x7f211c81dc5e [ 954.590079][T15669] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.590596][T15669] RSP: 002b:00007ffd1b6a4db0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.590891][T15669] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f211c81dc5e [ 954.591226][T15669] RDX: 0000000000000000 RSI: 00007ffd1b6a4e70 RDI: 0000000000000005 [ 954.591522][T15669] RBP: 00007ffd1b6a4dc0 R08: 0000000000000000 R09: 0000000000000000 [ 954.591730][T15669] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.591966][T15669] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 954.682699][T15675] ------------[ cut here ]------------ | [ 954.682878][T15675] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15675 | [ 954.683178][T15675] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.684007][T15675] Tainted: [W]=WARN [ 954.684117][T15675] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.684286][T15675] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.684436][T15675] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.684949][T15675] RSP: 0018:ffa00000048675d0 EFLAGS: 00010286 [ 954.685123][T15675] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f19a7 [ 954.685329][T15675] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cd38 [ 954.685555][T15675] RBP: 1ff400000090cebb R08: 1fe22000036f19a8 R09: fffa3bfffffb0b37 [ 954.685772][T15675] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d734 [ 954.685983][T15675] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78cc80 [ 954.686190][T15675] FS: 00007fd9448dc440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 954.686469][T15675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.686713][T15675] CR2: 000000000044f720 CR3: 000000001c0cf001 CR4: 0000000000771ef0 [ 954.686931][T15675] PKRU: 55555554 [ 954.687049][T15675] Call Trace: [ 954.687162][T15675] [ 954.687254][T15675] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.687403][T15675] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.687564][T15675] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.687721][T15675] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.687871][T15675] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.688455][T15675] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.688603][T15675] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.688748][T15675] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.688887][T15675] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.689027][T15675] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.689168][T15675] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.689300][T15675] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.689446][T15675] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.689585][T15675] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.689718][T15675] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.689862][T15675] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.690010][T15675] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.690143][T15675] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.690453][T15675] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.690588][T15675] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.690731][T15675] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.690865][T15675] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.691012][T15675] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.691208][T15675] ? move_addr_to_kernel (net/socket.c:2511) [ 954.691352][T15675] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.691501][T15675] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.691661][T15675] ___sys_sendmsg (net/socket.c:2641) [ 954.691794][T15675] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.691938][T15675] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.692088][T15675] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.692230][T15675] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.692365][T15675] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.692511][T15675] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.692651][T15675] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.692789][T15675] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.692934][T15675] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.693067][T15675] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.693204][T15675] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.693389][T15675] RIP: 0033:0x7fd944a36c5e [ 954.693544][T15675] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.694040][T15675] RSP: 002b:00007fff29878320 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.694245][T15675] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd944a36c5e [ 954.694448][T15675] RDX: 0000000000000000 RSI: 00007fff298783e0 RDI: 0000000000000005 [ 954.694652][T15675] RBP: 00007fff29878330 R08: 0000000000000000 R09: 0000000000000000 [ 954.694858][T15675] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.695067][T15675] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 954.779807][T15679] ------------[ cut here ]------------ | [ 954.780003][T15679] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15679 | [ 954.780246][T15679] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.781075][T15679] Tainted: [W]=WARN [ 954.781178][T15679] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.781352][T15679] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.781506][T15679] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.781998][T15679] RSP: 0018:ffa00000048a75d0 EFLAGS: 00010286 [ 954.782176][T15679] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725a17 [ 954.782380][T15679] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d0b8 [ 954.782583][T15679] RBP: 1ff4000000914ebb R08: 1fe2200003725a18 R09: fffa3bfffffb0b37 [ 954.782785][T15679] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c774 [ 954.782992][T15679] R13: ff1100001b92c740 R14: ffffffff931c7940 R15: ff1100001b92d000 [ 954.783195][T15679] FS: 00007f5a19b9b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 954.783438][T15679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.783608][T15679] CR2: 000000000044f720 CR3: 000000001c0cd003 CR4: 0000000000771ef0 [ 954.783814][T15679] PKRU: 55555554 [ 954.783923][T15679] Call Trace: [ 954.784025][T15679] [ 954.784099][T15679] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.784241][T15679] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.784382][T15679] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.784528][T15679] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.784662][T15679] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.784800][T15679] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.784936][T15679] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.785075][T15679] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.785209][T15679] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.785348][T15679] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.785499][T15679] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.785632][T15679] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.785765][T15679] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.785908][T15679] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.786054][T15679] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.786191][T15679] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.786329][T15679] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.786474][T15679] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.786615][T15679] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.786756][T15679] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.786965][T15679] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.787104][T15679] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.787235][T15679] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.787409][T15679] ? move_addr_to_kernel (net/socket.c:2511) [ 954.787548][T15679] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.787683][T15679] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.787817][T15679] ___sys_sendmsg (net/socket.c:2641) [ 954.787993][T15679] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.788134][T15679] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.788273][T15679] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.788414][T15679] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.788553][T15679] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.788689][T15679] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.788822][T15679] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.788960][T15679] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.789095][T15679] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.789229][T15679] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.789364][T15679] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.789532][T15679] RIP: 0033:0x7f5a19cf5c5e [ 954.789677][T15679] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.790164][T15679] RSP: 002b:00007ffcc4c9b1a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.790369][T15679] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5a19cf5c5e [ 954.790585][T15679] RDX: 0000000000000000 RSI: 00007ffcc4c9b260 RDI: 0000000000000005 [ 954.790799][T15679] RBP: 00007ffcc4c9b1b0 R08: 0000000000000000 R09: 0000000000000000 [ 954.791008][T15679] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.791208][T15679] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 954.867429][T15685] ------------[ cut here ]------------ | [ 954.867623][T15685] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15685 | [ 954.867871][T15685] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.868675][T15685] Tainted: [W]=WARN [ 954.868789][T15685] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.868989][T15685] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.869137][T15685] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.869640][T15685] RSP: 0018:ffa00000049275d0 EFLAGS: 00010286 [ 954.869821][T15685] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725a4f [ 954.870050][T15685] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d278 [ 954.870254][T15685] RBP: 1ff4000000924ebb R08: 1fe2200003725a50 R09: fffa3bfffffb0b37 [ 954.870471][T15685] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d3b4 [ 954.870676][T15685] R13: ff1100001b92d380 R14: ffffffff931c7940 R15: ff1100001b92d1c0 [ 954.870890][T15685] FS: 00007f7503e36440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 954.871141][T15685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.871323][T15685] CR2: 000000000044f720 CR3: 00000000109c9002 CR4: 0000000000771ef0 [ 954.871537][T15685] PKRU: 55555554 [ 954.871647][T15685] Call Trace: [ 954.871752][T15685] [ 954.871824][T15685] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.871971][T15685] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.872121][T15685] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.872271][T15685] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.872411][T15685] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.872557][T15685] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.872696][T15685] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.872839][T15685] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.872982][T15685] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.873127][T15685] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.873272][T15685] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.873412][T15685] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.873556][T15685] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.873697][T15685] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.873839][T15685] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.873991][T15685] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.874135][T15685] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.874277][T15685] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.874419][T15685] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.874569][T15685] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.874711][T15685] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.874851][T15685] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.874996][T15685] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.875167][T15685] ? move_addr_to_kernel (net/socket.c:2511) [ 954.875310][T15685] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.875466][T15685] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.875610][T15685] ___sys_sendmsg (net/socket.c:2641) [ 954.875750][T15685] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.875900][T15685] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.876043][T15685] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.876185][T15685] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.876325][T15685] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.876473][T15685] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.876614][T15685] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.876757][T15685] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.876906][T15685] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.877050][T15685] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.877188][T15685] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.877364][T15685] RIP: 0033:0x7f7503f90c5e [ 954.877520][T15685] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.878033][T15685] RSP: 002b:00007ffd626570b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.878248][T15685] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7503f90c5e [ 954.878461][T15685] RDX: 0000000000000000 RSI: 00007ffd62657170 RDI: 0000000000000005 [ 954.878674][T15685] RBP: 00007ffd626570c0 R08: 0000000000000000 R09: 0000000000000000 [ 954.878887][T15685] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.879102][T15685] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 954.953973][T15689] ------------[ cut here ]------------ | [ 954.954169][T15689] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15689 | [ 954.954403][T15689] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 954.955196][T15689] Tainted: [W]=WARN [ 954.955298][T15689] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 954.955479][T15689] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 954.955630][T15689] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 954.956175][T15689] RSP: 0018:ffa00000049075d0 EFLAGS: 00010286 [ 954.956350][T15689] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eb67 [ 954.956563][T15689] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975b38 [ 954.956762][T15689] RBP: 1ff4000000920ebb R08: 1fe220000192eb68 R09: fffa3bfffffb0b37 [ 954.957032][T15689] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9758f4 [ 954.957232][T15689] R13: ff1100000c9758c0 R14: ffffffff931c7940 R15: ff1100000c975a80 [ 954.957483][T15689] FS: 00007f49be9a9440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 954.957734][T15689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.958011][T15689] CR2: 000000000044f720 CR3: 000000001b7af006 CR4: 0000000000771ef0 [ 954.958234][T15689] PKRU: 55555554 [ 954.958334][T15689] Call Trace: [ 954.958449][T15689] [ 954.958526][T15689] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 954.958667][T15689] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 954.958842][T15689] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 954.959046][T15689] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.959190][T15689] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.959323][T15689] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 954.959470][T15689] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 954.959607][T15689] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 954.959744][T15689] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 954.959890][T15689] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 954.960108][T15689] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 954.960245][T15689] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 954.960390][T15689] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 954.960542][T15689] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 954.960673][T15689] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 954.960813][T15689] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 954.961010][T15689] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.961146][T15689] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 954.961289][T15689] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 954.961430][T15689] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 954.961593][T15689] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 954.961729][T15689] ? copy_msghdr_from_user (net/socket.c:2525) [ 954.961868][T15689] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 954.962096][T15689] ? move_addr_to_kernel (net/socket.c:2511) [ 954.962264][T15689] ? filemap_map_folio_range (mm/filemap.c:3873) [ 954.962401][T15689] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 954.962552][T15689] ___sys_sendmsg (net/socket.c:2641) [ 954.962691][T15689] ? copy_msghdr_from_user (net/socket.c:2628) [ 954.962828][T15689] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 954.963038][T15689] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 954.963187][T15689] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 954.963326][T15689] ? __sys_sendmsg_sock (net/socket.c:2656) [ 954.963483][T15689] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 954.963617][T15689] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.963753][T15689] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 954.963912][T15689] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 954.964060][T15689] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 954.964195][T15689] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 954.964359][T15689] RIP: 0033:0x7f49beb03c5e [ 954.964520][T15689] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 954.965035][T15689] RSP: 002b:00007ffda80bc830 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 954.965247][T15689] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f49beb03c5e [ 954.965472][T15689] RDX: 0000000000000000 RSI: 00007ffda80bc8f0 RDI: 0000000000000005 [ 954.965676][T15689] RBP: 00007ffda80bc840 R08: 0000000000000000 R09: 0000000000000000 [ 954.965899][T15689] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 954.966097][T15689] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 955.057287][T15696] ------------[ cut here ]------------ | [ 955.057536][T15696] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15696 | [ 955.057840][T15696] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.058786][T15696] Tainted: [W]=WARN [ 955.059293][T15696] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.059597][T15696] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.059847][T15696] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.060543][T15696] RSP: 0018:ffa00000048b75d0 EFLAGS: 00010286 [ 955.060799][T15696] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eaf7 [ 955.061095][T15696] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 955.061358][T15696] RBP: 1ff4000000916ebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b37 [ 955.061635][T15696] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c974934 [ 955.061916][T15696] R13: ff1100000c974900 R14: ffffffff931c7940 R15: ff1100000c975700 [ 955.062182][T15696] FS: 00007f7fb3895440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 955.062498][T15696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.062737][T15696] CR2: 000000000044f720 CR3: 0000000019d81002 CR4: 0000000000771ef0 [ 955.063041][T15696] PKRU: 55555554 [ 955.063198][T15696] Call Trace: [ 955.063378][T15696] [ 955.063517][T15696] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.063714][T15696] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.063937][T15696] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.064137][T15696] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.064334][T15696] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.064546][T15696] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.064746][T15696] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.064958][T15696] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.065160][T15696] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.065361][T15696] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.065559][T15696] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.065741][T15696] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.065942][T15696] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.066127][T15696] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.066312][T15696] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.066523][T15696] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.066710][T15696] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.066909][T15696] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.067093][T15696] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.067284][T15696] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.067488][T15696] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.067679][T15696] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.067878][T15696] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.068122][T15696] ? move_addr_to_kernel (net/socket.c:2511) [ 955.068310][T15696] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.068503][T15696] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.068694][T15696] ___sys_sendmsg (net/socket.c:2641) [ 955.068878][T15696] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.069096][T15696] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.069286][T15696] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.069488][T15696] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.069674][T15696] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.069862][T15696] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.070084][T15696] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.070291][T15696] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.070524][T15696] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.070721][T15696] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.070990][T15696] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.071228][T15696] RIP: 0033:0x7f7fb39efc5e [ 955.071457][T15696] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.072122][T15696] RSP: 002b:00007fff1227f990 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.072382][T15696] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7fb39efc5e [ 955.072684][T15696] RDX: 0000000000000000 RSI: 00007fff1227fa50 RDI: 0000000000000005 [ 955.072974][T15696] RBP: 00007fff1227f9a0 R08: 0000000000000000 R09: 0000000000000000 [ 955.073254][T15696] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.073544][T15696] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 955.134952][T15700] ------------[ cut here ]------------ | [ 955.135143][T15700] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15700 | [ 955.135408][T15700] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.136245][T15700] Tainted: [W]=WARN [ 955.136360][T15700] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.136555][T15700] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.136709][T15700] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.137330][T15700] RSP: 0018:ffa00000049275d0 EFLAGS: 00010286 [ 955.137605][T15700] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0801f [ 955.137805][T15700] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8400f8 [ 955.138051][T15700] RBP: 1ff4000000924ebb R08: 1fe2200001b08020 R09: fffa3bfffffb0b37 [ 955.138287][T15700] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8405b4 [ 955.138502][T15700] R13: ff1100000d840580 R14: ffffffff931c7940 R15: ff1100000d840040 [ 955.138702][T15700] FS: 00007f48eb656440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 955.138972][T15700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.139152][T15700] CR2: 000000000044f720 CR3: 000000001c9ab003 CR4: 0000000000771ef0 [ 955.139357][T15700] PKRU: 55555554 [ 955.139469][T15700] Call Trace: [ 955.139577][T15700] [ 955.139648][T15700] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.139786][T15700] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.140026][T15700] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.140164][T15700] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.140297][T15700] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.140446][T15700] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.140661][T15700] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.140798][T15700] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.140943][T15700] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.141079][T15700] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.141218][T15700] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.141435][T15700] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.141578][T15700] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.141716][T15700] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.141942][T15700] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.142081][T15700] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.142216][T15700] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.142351][T15700] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.142500][T15700] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.142651][T15700] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.142787][T15700] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.142941][T15700] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.143098][T15700] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.143363][T15700] ? move_addr_to_kernel (net/socket.c:2511) [ 955.143509][T15700] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.143678][T15700] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.143905][T15700] ___sys_sendmsg (net/socket.c:2641) [ 955.144042][T15700] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.144181][T15700] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.144319][T15700] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.144554][T15700] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.144694][T15700] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.144838][T15700] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.145070][T15700] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.145207][T15700] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.145342][T15700] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.145491][T15700] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.145631][T15700] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.145877][T15700] RIP: 0033:0x7f48eb7b0c5e [ 955.146025][T15700] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.146618][T15700] RSP: 002b:00007ffe25658640 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.146826][T15700] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f48eb7b0c5e [ 955.147128][T15700] RDX: 0000000000000000 RSI: 00007ffe25658700 RDI: 0000000000000005 [ 955.147335][T15700] RBP: 00007ffe25658650 R08: 0000000000000000 R09: 0000000000000000 [ 955.147539][T15700] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.147828][T15700] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 955.218134][T15706] ------------[ cut here ]------------ | [ 955.218307][T15706] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15706 | [ 955.218559][T15706] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.219866][T15706] Tainted: [W]=WARN [ 955.220033][T15706] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.220213][T15706] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.220356][T15706] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.220861][T15706] RSP: 0018:ffa00000048e75d0 EFLAGS: 00010286 [ 955.221113][T15706] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b08217 [ 955.221322][T15706] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8410b8 [ 955.221533][T15706] RBP: 1ff400000091cebb R08: 1fe2200001b08218 R09: fffa3bfffffb0b37 [ 955.221744][T15706] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840e74 [ 955.222040][T15706] R13: ff1100000d840e40 R14: ffffffff931c7940 R15: ff1100000d841000 [ 955.222271][T15706] FS: 00007fd363b0b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 955.222546][T15706] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.222724][T15706] CR2: 000000000044f720 CR3: 000000001b7af005 CR4: 0000000000771ef0 [ 955.222991][T15706] PKRU: 55555554 [ 955.223094][T15706] Call Trace: [ 955.223195][T15706] [ 955.223263][T15706] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.223397][T15706] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.223543][T15706] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.223690][T15706] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.223831][T15706] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.224127][T15706] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.224273][T15706] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.224409][T15706] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.224553][T15706] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.224686][T15706] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.224821][T15706] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.225060][T15706] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.225204][T15706] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.225340][T15706] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.225476][T15706] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.225611][T15706] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.225747][T15706] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.225889][T15706] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.226122][T15706] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.226256][T15706] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.226390][T15706] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.226526][T15706] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.226657][T15706] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.226838][T15706] ? move_addr_to_kernel (net/socket.c:2511) [ 955.227065][T15706] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.227197][T15706] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.227334][T15706] ___sys_sendmsg (net/socket.c:2641) [ 955.227484][T15706] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.227624][T15706] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.227765][T15706] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.228002][T15706] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.228136][T15706] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.228280][T15706] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.228414][T15706] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.228573][T15706] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.228718][T15706] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.228867][T15706] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.229114][T15706] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.229280][T15706] RIP: 0033:0x7fd363c65c5e [ 955.229421][T15706] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.230000][T15706] RSP: 002b:00007ffc0e036ea0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.230204][T15706] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd363c65c5e [ 955.230400][T15706] RDX: 0000000000000000 RSI: 00007ffc0e036f60 RDI: 0000000000000005 [ 955.230609][T15706] RBP: 00007ffc0e036eb0 R08: 0000000000000000 R09: 0000000000000000 [ 955.230812][T15706] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.231117][T15706] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 955.299698][T15710] ------------[ cut here ]------------ | [ 955.299865][T15710] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15710 | [ 955.300118][T15710] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.300899][T15710] Tainted: [W]=WARN [ 955.301011][T15710] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.301187][T15710] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.301330][T15710] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.301833][T15710] RSP: 0018:ffa00000048e75d0 EFLAGS: 00010286 [ 955.302021][T15710] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038750c7 [ 955.302247][T15710] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8638 [ 955.302476][T15710] RBP: 1ff400000091cebb R08: 1fe22000038750c8 R09: fffa3bfffffb0b37 [ 955.302687][T15710] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8074 [ 955.302883][T15710] R13: ff1100001c3a8040 R14: ffffffff931c7940 R15: ff1100001c3a8580 [ 955.303110][T15710] FS: 00007f7655b5d440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 955.303349][T15710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.303525][T15710] CR2: 000000000044f720 CR3: 000000001d2e9001 CR4: 0000000000771ef0 [ 955.303726][T15710] PKRU: 55555554 [ 955.303826][T15710] Call Trace: [ 955.303939][T15710] [ 955.304010][T15710] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.304149][T15710] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.304297][T15710] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.304458][T15710] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.304600][T15710] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.304743][T15710] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.304876][T15710] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.305020][T15710] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.305154][T15710] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.305287][T15710] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.305425][T15710] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.305569][T15710] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.305704][T15710] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.305847][T15710] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.305990][T15710] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.306130][T15710] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.306270][T15710] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.306405][T15710] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.306544][T15710] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.306683][T15710] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.306819][T15710] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.306959][T15710] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.307090][T15710] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.307252][T15710] ? move_addr_to_kernel (net/socket.c:2511) [ 955.307384][T15710] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.307522][T15710] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.307661][T15710] ___sys_sendmsg (net/socket.c:2641) [ 955.307799][T15710] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.308016][T15710] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.308152][T15710] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.308302][T15710] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.308434][T15710] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.308576][T15710] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.308706][T15710] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.308839][T15710] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.309055][T15710] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.309196][T15710] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.309336][T15710] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.309512][T15710] RIP: 0033:0x7f7655cb7c5e [ 955.309657][T15710] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.310225][T15710] RSP: 002b:00007ffceb9f6ec0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.310443][T15710] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7655cb7c5e [ 955.310642][T15710] RDX: 0000000000000000 RSI: 00007ffceb9f6f80 RDI: 0000000000000005 [ 955.310841][T15710] RBP: 00007ffceb9f6ed0 R08: 0000000000000000 R09: 0000000000000000 [ 955.311087][T15710] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.311284][T15710] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 955.390765][T15716] ------------[ cut here ]------------ | [ 955.391277][T15716] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15716 | [ 955.391597][T15716] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.392486][T15716] Tainted: [W]=WARN [ 955.392593][T15716] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.392771][T15716] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.392924][T15716] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.393419][T15716] RSP: 0018:ffa00000049075d0 EFLAGS: 00010286 [ 955.393605][T15716] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387539f [ 955.393813][T15716] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9cf8 [ 955.394034][T15716] RBP: 1ff4000000920ebb R08: 1fe22000038753a0 R09: fffa3bfffffb0b37 [ 955.394242][T15716] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a91f4 [ 955.394491][T15716] R13: ff1100001c3a91c0 R14: ffffffff931c7940 R15: ff1100001c3a9c40 [ 955.394710][T15716] FS: 00007f18578e9440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 955.394961][T15716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.395152][T15716] CR2: 000000000044f720 CR3: 000000001ccb6002 CR4: 0000000000771ef0 [ 955.395361][T15716] PKRU: 55555554 [ 955.395473][T15716] Call Trace: [ 955.395585][T15716] [ 955.395657][T15716] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.395798][T15716] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.395977][T15716] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.396118][T15716] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.396264][T15716] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.396404][T15716] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.396548][T15716] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.396700][T15716] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.396844][T15716] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.397016][T15716] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.397178][T15716] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.397340][T15716] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.397557][T15716] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.397703][T15716] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.397873][T15716] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.398040][T15716] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.398186][T15716] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.398334][T15716] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.398497][T15716] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.398643][T15716] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.398795][T15716] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.398939][T15716] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.399078][T15716] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.399256][T15716] ? move_addr_to_kernel (net/socket.c:2511) [ 955.399394][T15716] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.399551][T15716] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.399698][T15716] ___sys_sendmsg (net/socket.c:2641) [ 955.399837][T15716] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.399988][T15716] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.400130][T15716] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.400273][T15716] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.400410][T15716] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.400557][T15716] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.400714][T15716] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.400853][T15716] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.400995][T15716] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.401127][T15716] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.401271][T15716] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.401446][T15716] RIP: 0033:0x7f1857a43c5e [ 955.401592][T15716] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.402103][T15716] RSP: 002b:00007fff12d8c460 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.402316][T15716] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1857a43c5e [ 955.402522][T15716] RDX: 0000000000000000 RSI: 00007fff12d8c520 RDI: 0000000000000005 [ 955.402728][T15716] RBP: 00007fff12d8c470 R08: 0000000000000000 R09: 0000000000000000 [ 955.402940][T15716] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.403145][T15716] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 955.472143][T15720] ------------[ cut here ]------------ | [ 955.472369][T15720] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15720 | [ 955.472757][T15720] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.474428][T15720] Tainted: [W]=WARN [ 955.474594][T15720] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.474830][T15720] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.475054][T15720] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.475623][T15720] RSP: 0018:ffa00000049775d0 EFLAGS: 00010286 [ 955.475856][T15720] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea07d7 [ 955.476147][T15720] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503eb8 [ 955.476428][T15720] RBP: 1ff400000092eebb R08: 1fe2200001ea07d8 R09: fffa3bfffffb0b37 [ 955.476704][T15720] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502af4 [ 955.476985][T15720] R13: ff1100000f502ac0 R14: ffffffff931c7940 R15: ff1100000f503e00 [ 955.477250][T15720] FS: 00007f85513fe440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 955.477566][T15720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.477796][T15720] CR2: 000000000044f720 CR3: 000000001d19f005 CR4: 0000000000771ef0 [ 955.478073][T15720] PKRU: 55555554 [ 955.478226][T15720] Call Trace: [ 955.478377][T15720] [ 955.478519][T15720] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.478717][T15720] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.478935][T15720] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.479141][T15720] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.479325][T15720] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.479536][T15720] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.479736][T15720] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.479949][T15720] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.480147][T15720] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.480339][T15720] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.480547][T15720] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.480729][T15720] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.480984][T15720] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.481189][T15720] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.481382][T15720] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.481589][T15720] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.481783][T15720] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.481989][T15720] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.482188][T15720] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.482385][T15720] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.482594][T15720] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.482802][T15720] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.483019][T15720] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.483269][T15720] ? move_addr_to_kernel (net/socket.c:2511) [ 955.483466][T15720] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.483651][T15720] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.483840][T15720] ___sys_sendmsg (net/socket.c:2641) [ 955.484041][T15720] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.484241][T15720] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.484430][T15720] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.484632][T15720] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.484821][T15720] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.485034][T15720] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.485228][T15720] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.485427][T15720] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.485635][T15720] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.485838][T15720] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.486061][T15720] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.486302][T15720] RIP: 0033:0x7f8551558c5e [ 955.486521][T15720] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.487098][T15720] RSP: 002b:00007ffd9ed50f60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.487372][T15720] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8551558c5e [ 955.487649][T15720] RDX: 0000000000000000 RSI: 00007ffd9ed51020 RDI: 0000000000000005 [ 955.487926][T15720] RBP: 00007ffd9ed50f70 R08: 0000000000000000 R09: 0000000000000000 [ 955.488199][T15720] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.488483][T15720] R13: 0000000069cbe802 R14: 0000000000000004 R15: 000000000049d620 | [ 955.558954][T15726] ------------[ cut here ]------------ | [ 955.559131][T15726] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15726 | [ 955.559371][T15726] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.560291][T15726] Tainted: [W]=WARN [ 955.560402][T15726] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.560596][T15726] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.560758][T15726] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.561364][T15726] RSP: 0018:ffa00000049275d0 EFLAGS: 00010286 [ 955.561566][T15726] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea072f [ 955.561778][T15726] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503978 [ 955.562060][T15726] RBP: 1ff4000000924ebb R08: 1fe2200001ea0730 R09: fffa3bfffffb0b37 [ 955.562329][T15726] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503c74 [ 955.562554][T15726] R13: ff1100000f503c40 R14: ffffffff931c7940 R15: ff1100000f5038c0 [ 955.562767][T15726] FS: 00007f3e7dd3e440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 955.563177][T15726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.563364][T15726] CR2: 000000000044f720 CR3: 000000001b32a006 CR4: 0000000000771ef0 [ 955.563584][T15726] PKRU: 55555554 [ 955.563694][T15726] Call Trace: [ 955.563797][T15726] [ 955.563867][T15726] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.564074][T15726] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.564231][T15726] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.564402][T15726] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.564540][T15726] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.564674][T15726] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.564811][T15726] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.565025][T15726] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.565158][T15726] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.565291][T15726] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.565435][T15726] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.565586][T15726] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.565771][T15726] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.566023][T15726] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.566185][T15726] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.566343][T15726] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.566495][T15726] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.566636][T15726] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.566782][T15726] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.566992][T15726] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.567137][T15726] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.567284][T15726] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.567424][T15726] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.567634][T15726] ? move_addr_to_kernel (net/socket.c:2511) [ 955.567797][T15726] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.567976][T15726] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.568140][T15726] ___sys_sendmsg (net/socket.c:2641) [ 955.568308][T15726] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.568470][T15726] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.568646][T15726] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.568801][T15726] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.568942][T15726] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.569104][T15726] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.569251][T15726] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.569412][T15726] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.569570][T15726] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.569717][T15726] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.569853][T15726] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.570027][T15726] RIP: 0033:0x7f3e7de98c5e [ 955.570169][T15726] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.570669][T15726] RSP: 002b:00007ffe1368f7e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.570875][T15726] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f3e7de98c5e [ 955.571079][T15726] RDX: 0000000000000000 RSI: 00007ffe1368f8a0 RDI: 0000000000000005 [ 955.571285][T15726] RBP: 00007ffe1368f7f0 R08: 0000000000000000 R09: 0000000000000000 [ 955.571565][T15726] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.571775][T15726] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 955.637829][T15730] ------------[ cut here ]------------ | [ 955.638242][T15730] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15730 | [ 955.638573][T15730] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.639627][T15730] Tainted: [W]=WARN [ 955.639857][T15730] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.640194][T15730] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.640438][T15730] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.641029][T15730] RSP: 0018:ffa00000049275d0 EFLAGS: 00010286 [ 955.641270][T15730] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c239f [ 955.641534][T15730] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a611cf8 [ 955.641797][T15730] RBP: 1ff4000000924ebb R08: 1fe22000034c23a0 R09: fffa3bfffffb0b37 [ 955.642180][T15730] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a611e34 [ 955.642430][T15730] R13: ff1100001a611e00 R14: ffffffff931c7940 R15: ff1100001a611c40 [ 955.642690][T15730] FS: 00007f9c2cc08440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 955.643028][T15730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.643286][T15730] CR2: 000000000044f720 CR3: 000000000daf9001 CR4: 0000000000771ef0 [ 955.643569][T15730] PKRU: 55555554 [ 955.643728][T15730] Call Trace: [ 955.643920][T15730] [ 955.644042][T15730] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.644237][T15730] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.644433][T15730] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.644635][T15730] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.644822][T15730] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.645028][T15730] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.645215][T15730] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.645484][T15730] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.645675][T15730] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.645922][T15730] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.646130][T15730] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.646321][T15730] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.646522][T15730] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.646743][T15730] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.646957][T15730] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.647144][T15730] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.647330][T15730] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.647537][T15730] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.647726][T15730] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.647932][T15730] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.648129][T15730] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.648323][T15730] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.648535][T15730] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.648760][T15730] ? move_addr_to_kernel (net/socket.c:2511) [ 955.648962][T15730] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.649151][T15730] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.649336][T15730] ___sys_sendmsg (net/socket.c:2641) [ 955.649524][T15730] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.649711][T15730] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.649913][T15730] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.650098][T15730] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.650285][T15730] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.650494][T15730] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.650684][T15730] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.650879][T15730] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.651088][T15730] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.651306][T15730] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.651552][T15730] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.651776][T15730] RIP: 0033:0x7f9c2cd62c5e [ 955.652038][T15730] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.652633][T15730] RSP: 002b:00007fff5a14a580 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.652927][T15730] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9c2cd62c5e [ 955.653197][T15730] RDX: 0000000000000000 RSI: 00007fff5a14a640 RDI: 0000000000000005 [ 955.653471][T15730] RBP: 00007fff5a14a590 R08: 0000000000000000 R09: 0000000000000000 [ 955.653732][T15730] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.654005][T15730] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 955.728864][T15736] ------------[ cut here ]------------ | [ 955.729093][T15736] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15736 | [ 955.729458][T15736] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.730565][T15736] Tainted: [W]=WARN [ 955.730831][T15736] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.731189][T15736] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.731482][T15736] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.732141][T15736] RSP: 0018:ffa00000049975d0 EFLAGS: 00010286 [ 955.732417][T15736] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000034c2217 [ 955.732690][T15736] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001a6110b8 [ 955.732967][T15736] RBP: 1ff4000000932ebb R08: 1fe22000034c2218 R09: fffa3bfffffb0b37 [ 955.733241][T15736] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001a610234 [ 955.733520][T15736] R13: ff1100001a610200 R14: ffffffff931c7940 R15: ff1100001a611000 [ 955.733794][T15736] FS: 00007ff2c6d81440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 955.734115][T15736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.734353][T15736] CR2: 000000000044f720 CR3: 000000001d06a005 CR4: 0000000000771ef0 [ 955.734627][T15736] PKRU: 55555554 [ 955.734792][T15736] Call Trace: [ 955.734974][T15736] [ 955.735110][T15736] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.735312][T15736] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.735527][T15736] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.735743][T15736] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.735956][T15736] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.736166][T15736] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.736364][T15736] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.736581][T15736] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.736781][T15736] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.736991][T15736] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.737190][T15736] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.737382][T15736] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.737591][T15736] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.737783][T15736] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.737981][T15736] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.738171][T15736] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.738366][T15736] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.738574][T15736] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.738765][T15736] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.738967][T15736] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.739159][T15736] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.739348][T15736] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.739552][T15736] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.739773][T15736] ? move_addr_to_kernel (net/socket.c:2511) [ 955.739981][T15736] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.740169][T15736] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.740362][T15736] ___sys_sendmsg (net/socket.c:2641) [ 955.740568][T15736] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.740763][T15736] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.740970][T15736] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.741164][T15736] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.741354][T15736] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.741571][T15736] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.741762][T15736] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.741967][T15736] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.742161][T15736] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.742349][T15736] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.742555][T15736] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.742798][T15736] RIP: 0033:0x7ff2c6edbc5e [ 955.743012][T15736] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.743590][T15736] RSP: 002b:00007ffea6d22e50 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.743868][T15736] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff2c6edbc5e [ 955.744150][T15736] RDX: 0000000000000000 RSI: 00007ffea6d22f10 RDI: 0000000000000005 [ 955.744417][T15736] RBP: 00007ffea6d22e60 R08: 0000000000000000 R09: 0000000000000000 [ 955.744697][T15736] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.744978][T15736] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 955.824778][T15740] ------------[ cut here ]------------ | [ 955.825040][T15740] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15740 | [ 955.825286][T15740] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.826168][T15740] Tainted: [W]=WARN [ 955.826285][T15740] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.826475][T15740] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.826630][T15740] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.827236][T15740] RSP: 0018:ffa00000049975d0 EFLAGS: 00010286 [ 955.827417][T15740] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f19a7 [ 955.827669][T15740] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cd38 [ 955.827883][T15740] RBP: 1ff4000000932ebb R08: 1fe22000036f19a8 R09: fffa3bfffffb0b37 [ 955.828191][T15740] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d734 [ 955.828400][T15740] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78cc80 [ 955.828636][T15740] FS: 00007f1a033ad440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 955.828953][T15740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.829126][T15740] CR2: 000000000044f720 CR3: 00000000180f7003 CR4: 0000000000771ef0 [ 955.829337][T15740] PKRU: 55555554 [ 955.829442][T15740] Call Trace: [ 955.829573][T15740] [ 955.829653][T15740] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.829803][T15740] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.829963][T15740] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.830137][T15740] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.830303][T15740] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.830459][T15740] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.830637][T15740] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.830790][T15740] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.830971][T15740] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.831114][T15740] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.831260][T15740] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.831432][T15740] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.831582][T15740] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.831723][T15740] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.831865][T15740] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.832013][T15740] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.832168][T15740] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.832306][T15740] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.832455][T15740] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.832602][T15740] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.832741][T15740] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.832888][T15740] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.833032][T15740] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.833210][T15740] ? move_addr_to_kernel (net/socket.c:2511) [ 955.833360][T15740] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.833514][T15740] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.833666][T15740] ___sys_sendmsg (net/socket.c:2641) [ 955.833810][T15740] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.833960][T15740] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.834104][T15740] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.834245][T15740] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.834392][T15740] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.834564][T15740] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.834702][T15740] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.834846][T15740] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.835008][T15740] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.835150][T15740] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.835289][T15740] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.835477][T15740] RIP: 0033:0x7f1a03507c5e [ 955.835626][T15740] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.836134][T15740] RSP: 002b:00007fffa7556ad0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.836350][T15740] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1a03507c5e [ 955.836572][T15740] RDX: 0000000000000000 RSI: 00007fffa7556b90 RDI: 0000000000000005 [ 955.836784][T15740] RBP: 00007fffa7556ae0 R08: 0000000000000000 R09: 0000000000000000 [ 955.837006][T15740] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.837225][T15740] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 955.916812][T15746] ------------[ cut here ]------------ | [ 955.917016][T15746] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15746 | [ 955.917279][T15746] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 955.918152][T15746] Tainted: [W]=WARN [ 955.918284][T15746] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 955.918512][T15746] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 955.918690][T15746] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 955.919266][T15746] RSP: 0018:ffa00000049975d0 EFLAGS: 00010286 [ 955.919502][T15746] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1a87 [ 955.919741][T15746] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d438 [ 955.919959][T15746] RBP: 1ff4000000932ebb R08: 1fe22000036f1a88 R09: fffa3bfffffb0b37 [ 955.920176][T15746] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d574 [ 955.920426][T15746] R13: ff1100001b78d540 R14: ffffffff931c7940 R15: ff1100001b78d380 [ 955.920756][T15746] FS: 00007f90c2bef440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 955.921569][T15746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.921754][T15746] CR2: 000000000044f720 CR3: 000000001814f002 CR4: 0000000000771ef0 [ 955.921983][T15746] PKRU: 55555554 [ 955.922092][T15746] Call Trace: [ 955.922199][T15746] [ 955.922272][T15746] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 955.922415][T15746] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 955.922595][T15746] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 955.922735][T15746] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.922873][T15746] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.923021][T15746] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 955.923159][T15746] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 955.923303][T15746] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 955.923458][T15746] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 955.923599][T15746] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 955.923737][T15746] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 955.923871][T15746] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 955.924012][T15746] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 955.924145][T15746] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 955.924280][T15746] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 955.924432][T15746] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 955.924589][T15746] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.924726][T15746] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 955.924862][T15746] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 955.925005][T15746] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 955.925146][T15746] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 955.925283][T15746] ? copy_msghdr_from_user (net/socket.c:2525) [ 955.925422][T15746] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 955.925607][T15746] ? move_addr_to_kernel (net/socket.c:2511) [ 955.925775][T15746] ? filemap_map_folio_range (mm/filemap.c:3873) [ 955.925919][T15746] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 955.926096][T15746] ___sys_sendmsg (net/socket.c:2641) [ 955.926294][T15746] ? copy_msghdr_from_user (net/socket.c:2628) [ 955.926471][T15746] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 955.926620][T15746] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 955.926780][T15746] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 955.926929][T15746] ? __sys_sendmsg_sock (net/socket.c:2656) [ 955.927083][T15746] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 955.927225][T15746] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.927362][T15746] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 955.927511][T15746] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 955.927657][T15746] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 955.927799][T15746] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 955.927997][T15746] RIP: 0033:0x7f90c2d49c5e [ 955.928144][T15746] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 955.928629][T15746] RSP: 002b:00007ffe89d04f00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 955.928831][T15746] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f90c2d49c5e [ 955.929046][T15746] RDX: 0000000000000000 RSI: 00007ffe89d04fc0 RDI: 0000000000000005 [ 955.929245][T15746] RBP: 00007ffe89d04f10 R08: 0000000000000000 R09: 0000000000000000 [ 955.929451][T15746] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 955.929651][T15746] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 956.009929][T15750] ------------[ cut here ]------------ | [ 956.010146][T15750] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15750 | [ 956.010458][T15750] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.011822][T15750] Tainted: [W]=WARN [ 956.012023][T15750] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.012248][T15750] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.012466][T15750] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.013014][T15750] RSP: 0018:ffa00000049c75d0 EFLAGS: 00010286 [ 956.013249][T15750] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000189788f [ 956.013513][T15750] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bc478 [ 956.013774][T15750] RBP: 1ff4000000938ebb R08: 1fe2200001897890 R09: fffa3bfffffb0b37 [ 956.014054][T15750] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bc234 [ 956.014326][T15750] R13: ff1100000c4bc200 R14: ffffffff931c7940 R15: ff1100000c4bc3c0 [ 956.014601][T15750] FS: 00007f06c9023440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 956.014905][T15750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.015137][T15750] CR2: 000000000044f720 CR3: 000000000d579002 CR4: 0000000000771ef0 [ 956.015406][T15750] PKRU: 55555554 [ 956.015577][T15750] Call Trace: [ 956.015728][T15750] [ 956.015848][T15750] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.016076][T15750] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.016284][T15750] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.016494][T15750] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.016692][T15750] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.016907][T15750] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.017096][T15750] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.017288][T15750] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.017519][T15750] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.017764][T15750] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.017999][T15750] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.018199][T15750] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.018398][T15750] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.018601][T15750] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.018785][T15750] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.018987][T15750] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.019172][T15750] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.019362][T15750] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.019572][T15750] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.019762][T15750] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.019971][T15750] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.020173][T15750] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.020383][T15750] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.020623][T15750] ? move_addr_to_kernel (net/socket.c:2511) [ 956.020846][T15750] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.021059][T15750] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.021277][T15750] ___sys_sendmsg (net/socket.c:2641) [ 956.021493][T15750] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.021697][T15750] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.021917][T15750] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.022123][T15750] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.022313][T15750] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.022513][T15750] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.022704][T15750] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.022912][T15750] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.023100][T15750] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.023290][T15750] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.023485][T15750] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.023703][T15750] RIP: 0033:0x7f06c917dc5e [ 956.023910][T15750] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.024438][T15750] RSP: 002b:00007fff40844450 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.024715][T15750] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f06c917dc5e [ 956.024980][T15750] RDX: 0000000000000000 RSI: 00007fff40844510 RDI: 0000000000000005 [ 956.025244][T15750] RBP: 00007fff40844460 R08: 0000000000000000 R09: 0000000000000000 [ 956.025531][T15750] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.025808][T15750] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 956.115019][T15756] ------------[ cut here ]------------ | [ 956.115243][T15756] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15756 | [ 956.115555][T15756] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.116848][T15756] Tainted: [W]=WARN [ 956.117021][T15756] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.117250][T15756] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.117459][T15756] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.118055][T15756] RSP: 0018:ffa0000004a375d0 EFLAGS: 00010286 [ 956.118307][T15756] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897abf [ 956.118607][T15756] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd5f8 [ 956.118881][T15756] RBP: 1ff4000000946ebb R08: 1fe2200001897ac0 R09: fffa3bfffffb0b37 [ 956.119160][T15756] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd734 [ 956.119439][T15756] R13: ff1100000c4bd700 R14: ffffffff931c7940 R15: ff1100000c4bd540 [ 956.119725][T15756] FS: 00007f16707f5440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 956.120051][T15756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.120306][T15756] CR2: 000000000044f720 CR3: 000000001d147003 CR4: 0000000000771ef0 [ 956.120601][T15756] PKRU: 55555554 [ 956.120764][T15756] Call Trace: [ 956.120935][T15756] [ 956.121066][T15756] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.121269][T15756] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.121474][T15756] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.121695][T15756] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.121922][T15756] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.122123][T15756] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.122314][T15756] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.122521][T15756] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.122716][T15756] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.122922][T15756] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.123126][T15756] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.123314][T15756] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.123688][T15756] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.123877][T15756] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.124085][T15756] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.124279][T15756] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.124487][T15756] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.124679][T15756] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.124871][T15756] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.125074][T15756] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.125277][T15756] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.125474][T15756] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.125683][T15756] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.125932][T15756] ? move_addr_to_kernel (net/socket.c:2511) [ 956.126147][T15756] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.126337][T15756] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.126539][T15756] ___sys_sendmsg (net/socket.c:2641) [ 956.126728][T15756] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.126938][T15756] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.127131][T15756] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.127321][T15756] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.127539][T15756] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.127729][T15756] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.127934][T15756] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.128123][T15756] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.128325][T15756] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.128533][T15756] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.128725][T15756] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.128979][T15756] RIP: 0033:0x7f167094fc5e [ 956.129177][T15756] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.129769][T15756] RSP: 002b:00007fff63d0bf40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.130049][T15756] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f167094fc5e [ 956.130317][T15756] RDX: 0000000000000000 RSI: 00007fff63d0c000 RDI: 0000000000000005 [ 956.130584][T15756] RBP: 00007fff63d0bf50 R08: 0000000000000000 R09: 0000000000000000 [ 956.130837][T15756] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.131104][T15756] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 956.206296][T15760] ------------[ cut here ]------------ | [ 956.206500][T15760] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15760 | [ 956.206745][T15760] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.207580][T15760] Tainted: [W]=WARN [ 956.207692][T15760] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.207869][T15760] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.208602][T15760] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.209155][T15760] RSP: 0018:ffa0000004a775d0 EFLAGS: 00010286 [ 956.209331][T15760] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b2f [ 956.209559][T15760] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d978 [ 956.209791][T15760] RBP: 1ff400000094eebb R08: 1fe2200003725b30 R09: fffa3bfffffb0b37 [ 956.210014][T15760] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92ccb4 [ 956.210262][T15760] R13: ff1100001b92cc80 R14: ffffffff931c7940 R15: ff1100001b92d8c0 [ 956.210483][T15760] FS: 00007f5aaf090440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 956.210730][T15760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.210927][T15760] CR2: 000000000044f720 CR3: 0000000019de5003 CR4: 0000000000771ef0 [ 956.211133][T15760] PKRU: 55555554 [ 956.211252][T15760] Call Trace: [ 956.211358][T15760] [ 956.211427][T15760] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.211584][T15760] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.211738][T15760] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.211881][T15760] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.212035][T15760] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.212187][T15760] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.212329][T15760] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.212483][T15760] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.212639][T15760] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.212773][T15760] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.212914][T15760] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.213060][T15760] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.213193][T15760] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.213332][T15760] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.213612][T15760] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.213769][T15760] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.213914][T15760] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.214048][T15760] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.214184][T15760] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.214319][T15760] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.214503][T15760] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.214644][T15760] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.214787][T15760] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.214972][T15760] ? move_addr_to_kernel (net/socket.c:2511) [ 956.215107][T15760] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.215242][T15760] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.215400][T15760] ___sys_sendmsg (net/socket.c:2641) [ 956.215571][T15760] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.215708][T15760] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.215844][T15760] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.215990][T15760] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.216122][T15760] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.216271][T15760] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.216410][T15760] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.216559][T15760] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.216697][T15760] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.216832][T15760] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.216973][T15760] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.217159][T15760] RIP: 0033:0x7f5aaf1eac5e [ 956.217300][T15760] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.217800][T15760] RSP: 002b:00007ffdcf5ec530 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.218024][T15760] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5aaf1eac5e [ 956.218232][T15760] RDX: 0000000000000000 RSI: 00007ffdcf5ec5f0 RDI: 0000000000000005 [ 956.218437][T15760] RBP: 00007ffdcf5ec540 R08: 0000000000000000 R09: 0000000000000000 [ 956.218644][T15760] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.218878][T15760] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 956.294695][T15766] ------------[ cut here ]------------ | [ 956.294867][T15766] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15766 | [ 956.295481][T15766] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.296313][T15766] Tainted: [W]=WARN [ 956.296420][T15766] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.296608][T15766] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.296761][T15766] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.297270][T15766] RSP: 0018:ffa0000004a475d0 EFLAGS: 00010286 [ 956.297441][T15766] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b9f [ 956.297658][T15766] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92dcf8 [ 956.297876][T15766] RBP: 1ff4000000948ebb R08: 1fe2200003725ba0 R09: fffa3bfffffb0b37 [ 956.298086][T15766] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d734 [ 956.298330][T15766] R13: ff1100001b92d700 R14: ffffffff931c7940 R15: ff1100001b92dc40 [ 956.298563][T15766] FS: 00007ff87e393440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 956.298812][T15766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.299012][T15766] CR2: 000000000044f720 CR3: 00000000196af004 CR4: 0000000000771ef0 [ 956.299240][T15766] PKRU: 55555554 [ 956.299343][T15766] Call Trace: [ 956.299455][T15766] [ 956.299542][T15766] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.299694][T15766] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.299840][T15766] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.299993][T15766] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.300126][T15766] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.300269][T15766] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.300412][T15766] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.300567][T15766] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.300716][T15766] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.300853][T15766] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.301000][T15766] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.301147][T15766] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.301286][T15766] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.301419][T15766] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.301563][T15766] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.301700][T15766] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.301851][T15766] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.301990][T15766] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.302131][T15766] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.302265][T15766] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.302401][T15766] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.302542][T15766] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.302678][T15766] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.302850][T15766] ? move_addr_to_kernel (net/socket.c:2511) [ 956.302989][T15766] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.303122][T15766] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.303261][T15766] ___sys_sendmsg (net/socket.c:2641) [ 956.303400][T15766] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.303603][T15766] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.303746][T15766] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.303900][T15766] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.304053][T15766] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.304195][T15766] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.304332][T15766] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.304486][T15766] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.304620][T15766] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.304763][T15766] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.304945][T15766] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.305126][T15766] RIP: 0033:0x7ff87e4edc5e [ 956.305272][T15766] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.305786][T15766] RSP: 002b:00007ffdc2b11220 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.306013][T15766] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff87e4edc5e [ 956.306239][T15766] RDX: 0000000000000000 RSI: 00007ffdc2b112e0 RDI: 0000000000000005 [ 956.306459][T15766] RBP: 00007ffdc2b11230 R08: 0000000000000000 R09: 0000000000000000 [ 956.306670][T15766] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.306898][T15766] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 956.391854][T15770] ------------[ cut here ]------------ | [ 956.392251][T15770] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15770 | [ 956.392553][T15770] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.393489][T15770] Tainted: [W]=WARN [ 956.393658][T15770] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.393888][T15770] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.394106][T15770] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.394635][T15770] RSP: 0018:ffa0000004a975d0 EFLAGS: 00010286 [ 956.394857][T15770] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192ea87 [ 956.395112][T15770] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975438 [ 956.395364][T15770] RBP: 1ff4000000952ebb R08: 1fe220000192ea88 R09: fffa3bfffffb0b37 [ 956.395619][T15770] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975e34 [ 956.395866][T15770] R13: ff1100000c975e00 R14: ffffffff931c7940 R15: ff1100000c975380 [ 956.396130][T15770] FS: 00007fdff87fb440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 956.396421][T15770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.396645][T15770] CR2: 000000000044f720 CR3: 000000001a40f005 CR4: 0000000000771ef0 [ 956.396917][T15770] PKRU: 55555554 [ 956.397077][T15770] Call Trace: [ 956.397228][T15770] [ 956.397347][T15770] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.397545][T15770] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.397759][T15770] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.397968][T15770] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.398152][T15770] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.398342][T15770] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.398528][T15770] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.398713][T15770] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.398912][T15770] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.399097][T15770] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.399287][T15770] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.399476][T15770] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.399661][T15770] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.399846][T15770] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.400040][T15770] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.400226][T15770] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.400410][T15770] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.400610][T15770] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.400797][T15770] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.401005][T15770] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.401206][T15770] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.401407][T15770] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.401612][T15770] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.401850][T15770] ? move_addr_to_kernel (net/socket.c:2511) [ 956.402075][T15770] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.402274][T15770] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.402477][T15770] ___sys_sendmsg (net/socket.c:2641) [ 956.402675][T15770] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.402877][T15770] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.403094][T15770] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.403302][T15770] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.403505][T15770] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.403702][T15770] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.403889][T15770] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.404099][T15770] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.404305][T15770] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.404507][T15770] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.404706][T15770] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.404944][T15770] RIP: 0033:0x7fdff8955c5e [ 956.405153][T15770] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.405703][T15770] RSP: 002b:00007ffdddbfd5c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.405968][T15770] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fdff8955c5e [ 956.406219][T15770] RDX: 0000000000000000 RSI: 00007ffdddbfd680 RDI: 0000000000000005 [ 956.406486][T15770] RBP: 00007ffdddbfd5d0 R08: 0000000000000000 R09: 0000000000000000 [ 956.406742][T15770] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.407012][T15770] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 956.490669][T15776] ------------[ cut here ]------------ | [ 956.490853][T15776] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15776 | [ 956.492002][T15776] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.492812][T15776] Tainted: [W]=WARN [ 956.493015][T15776] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.493189][T15776] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.493331][T15776] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.494017][T15776] RSP: 0018:ffa0000004ae75d0 EFLAGS: 00010286 [ 956.494203][T15776] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e81f [ 956.494691][T15776] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9740f8 [ 956.495014][T15776] RBP: 1ff400000095cebb R08: 1fe220000192e820 R09: fffa3bfffffb0b37 [ 956.495241][T15776] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9743f4 [ 956.495467][T15776] R13: ff1100000c9743c0 R14: ffffffff931c7940 R15: ff1100000c974040 [ 956.495703][T15776] FS: 00007fd3995f4440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 956.496030][T15776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.496214][T15776] CR2: 000000000044f720 CR3: 000000001c147005 CR4: 0000000000771ef0 [ 956.496424][T15776] PKRU: 55555554 [ 956.496543][T15776] Call Trace: [ 956.496731][T15776] [ 956.496801][T15776] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.497028][T15776] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.497186][T15776] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.497320][T15776] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.497475][T15776] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.497619][T15776] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.497839][T15776] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.498124][T15776] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.498273][T15776] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.498460][T15776] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.498618][T15776] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.498873][T15776] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.499098][T15776] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.499260][T15776] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.499406][T15776] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.499562][T15776] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.499709][T15776] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.500019][T15776] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.500190][T15776] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.500328][T15776] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.500481][T15776] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.500648][T15776] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.500795][T15776] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.501045][T15776] ? move_addr_to_kernel (net/socket.c:2511) [ 956.501185][T15776] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.501324][T15776] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.501485][T15776] ___sys_sendmsg (net/socket.c:2641) [ 956.501632][T15776] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.501798][T15776] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.502023][T15776] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.502168][T15776] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.502485][T15776] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.502637][T15776] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.502771][T15776] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.503015][T15776] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.503179][T15776] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.503318][T15776] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.503547][T15776] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.503733][T15776] RIP: 0033:0x7fd39974ec5e [ 956.503880][T15776] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.504532][T15776] RSP: 002b:00007ffc317695b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.504888][T15776] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd39974ec5e [ 956.505134][T15776] RDX: 0000000000000000 RSI: 00007ffc31769670 RDI: 0000000000000005 [ 956.505343][T15776] RBP: 00007ffc317695c0 R08: 0000000000000000 R09: 0000000000000000 [ 956.505626][T15776] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.506159][T15776] R13: 0000000069cbe803 R14: 0000000000000004 R15: 000000000049d620 | [ 956.570319][T15780] ------------[ cut here ]------------ | [ 956.570508][T15780] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15780 | [ 956.570795][T15780] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.571708][T15780] Tainted: [W]=WARN [ 956.571826][T15780] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.572270][T15780] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.572429][T15780] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.572940][T15780] RSP: 0018:ffa0000004ad75d0 EFLAGS: 00010286 [ 956.573132][T15780] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b082f7 [ 956.573365][T15780] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8417b8 [ 956.573594][T15780] RBP: 1ff400000095aebb R08: 1fe2200001b082f8 R09: fffa3bfffffb0b37 [ 956.573819][T15780] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8418f4 [ 956.574041][T15780] R13: ff1100000d8418c0 R14: ffffffff931c7940 R15: ff1100000d841700 [ 956.574254][T15780] FS: 00007f644e4ad440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 956.574513][T15780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.574696][T15780] CR2: 000000000044f720 CR3: 000000000ea63001 CR4: 0000000000771ef0 [ 956.574916][T15780] PKRU: 55555554 [ 956.575017][T15780] Call Trace: [ 956.575126][T15780] [ 956.575198][T15780] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.575333][T15780] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.575506][T15780] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.575658][T15780] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.575804][T15780] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.575951][T15780] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.576094][T15780] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.576252][T15780] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.576397][T15780] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.576560][T15780] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.576706][T15780] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.576866][T15780] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.577028][T15780] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.577178][T15780] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.577334][T15780] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.577498][T15780] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.577654][T15780] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.577808][T15780] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.577973][T15780] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.578145][T15780] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.578284][T15780] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.578433][T15780] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.578588][T15780] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.578763][T15780] ? move_addr_to_kernel (net/socket.c:2511) [ 956.578932][T15780] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.579088][T15780] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.579236][T15780] ___sys_sendmsg (net/socket.c:2641) [ 956.579370][T15780] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.579521][T15780] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.579663][T15780] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.579806][T15780] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.579953][T15780] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.580105][T15780] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.580257][T15780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.580397][T15780] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.580551][T15780] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.580708][T15780] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.580843][T15780] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.581017][T15780] RIP: 0033:0x7f644e607c5e [ 956.581157][T15780] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.581676][T15780] RSP: 002b:00007fff92f59b20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.581927][T15780] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f644e607c5e [ 956.582192][T15780] RDX: 0000000000000000 RSI: 00007fff92f59be0 RDI: 0000000000000005 [ 956.582477][T15780] RBP: 00007fff92f59b30 R08: 0000000000000000 R09: 0000000000000000 [ 956.582700][T15780] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.582909][T15780] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 956.660532][T15786] ------------[ cut here ]------------ | [ 956.660772][T15786] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15786 | [ 956.661102][T15786] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.662010][T15786] Tainted: [W]=WARN [ 956.662162][T15786] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.662417][T15786] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.662653][T15786] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.663236][T15786] RSP: 0018:ffa0000004a675d0 EFLAGS: 00010286 [ 956.663507][T15786] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0824f [ 956.663788][T15786] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841278 [ 956.664068][T15786] RBP: 1ff400000094cebb R08: 1fe2200001b08250 R09: fffa3bfffffb0b37 [ 956.664327][T15786] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8413b4 [ 956.664587][T15786] R13: ff1100000d841380 R14: ffffffff931c7940 R15: ff1100000d8411c0 [ 956.664845][T15786] FS: 00007fcbcbd06440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 956.665183][T15786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.665428][T15786] CR2: 000000000044f720 CR3: 0000000017ccc004 CR4: 0000000000771ef0 [ 956.665712][T15786] PKRU: 55555554 [ 956.665864][T15786] Call Trace: [ 956.666044][T15786] [ 956.666191][T15786] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.666382][T15786] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.666600][T15786] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.666791][T15786] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.667307][T15786] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.667504][T15786] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.667689][T15786] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.667889][T15786] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.668093][T15786] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.668283][T15786] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.668483][T15786] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.668674][T15786] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.668870][T15786] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.669085][T15786] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.669274][T15786] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.669469][T15786] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.669656][T15786] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.669843][T15786] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.670042][T15786] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.670228][T15786] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.670417][T15786] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.670606][T15786] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.670791][T15786] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.671039][T15786] ? move_addr_to_kernel (net/socket.c:2511) [ 956.671226][T15786] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.671410][T15786] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.671624][T15786] ___sys_sendmsg (net/socket.c:2641) [ 956.671817][T15786] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.672023][T15786] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.672220][T15786] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.672407][T15786] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.672620][T15786] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.672808][T15786] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.673008][T15786] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.673193][T15786] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.673377][T15786] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.673582][T15786] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.673770][T15786] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.674002][T15786] RIP: 0033:0x7fcbcbe60c5e [ 956.674195][T15786] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.674737][T15786] RSP: 002b:00007ffd57bcb390 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.675005][T15786] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcbcbe60c5e [ 956.675256][T15786] RDX: 0000000000000000 RSI: 00007ffd57bcb450 RDI: 0000000000000005 [ 956.675542][T15786] RBP: 00007ffd57bcb3a0 R08: 0000000000000000 R09: 0000000000000000 [ 956.675792][T15786] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.676061][T15786] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 956.757013][T15790] ------------[ cut here ]------------ | [ 956.757200][T15790] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15790 | [ 956.757462][T15790] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.758712][T15790] Tainted: [W]=WARN [ 956.758813][T15790] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.759029][T15790] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.759199][T15790] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.759735][T15790] RSP: 0018:ffa0000004a475d0 EFLAGS: 00010286 [ 956.759923][T15790] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038752f7 [ 956.760160][T15790] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a97b8 [ 956.760375][T15790] RBP: 1ff4000000948ebb R08: 1fe22000038752f8 R09: fffa3bfffffb0b37 [ 956.760598][T15790] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a93b4 [ 956.760817][T15790] R13: ff1100001c3a9380 R14: ffffffff931c7940 R15: ff1100001c3a9700 [ 956.761037][T15790] FS: 00007f29599e5440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 956.761290][T15790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.761477][T15790] CR2: 000000000044f720 CR3: 0000000018317001 CR4: 0000000000771ef0 [ 956.761692][T15790] PKRU: 55555554 [ 956.761800][T15790] Call Trace: [ 956.761910][T15790] [ 956.761986][T15790] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.762136][T15790] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.762289][T15790] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.762435][T15790] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.762593][T15790] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.762746][T15790] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.762900][T15790] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.763040][T15790] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.763187][T15790] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.763326][T15790] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.763476][T15790] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.763620][T15790] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.763759][T15790] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.763906][T15790] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.764043][T15790] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.764186][T15790] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.764333][T15790] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.764479][T15790] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.764618][T15790] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.764760][T15790] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.764909][T15790] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.765053][T15790] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.765193][T15790] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.765366][T15790] ? move_addr_to_kernel (net/socket.c:2511) [ 956.765515][T15790] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.765654][T15790] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.765798][T15790] ___sys_sendmsg (net/socket.c:2641) [ 956.765942][T15790] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.766085][T15790] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.766230][T15790] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.766372][T15790] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.766525][T15790] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.766671][T15790] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.766815][T15790] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.766966][T15790] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.767115][T15790] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.767265][T15790] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.767409][T15790] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.767591][T15790] RIP: 0033:0x7f2959b3fc5e [ 956.767746][T15790] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.768256][T15790] RSP: 002b:00007ffe9f16f1b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.768479][T15790] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2959b3fc5e [ 956.768689][T15790] RDX: 0000000000000000 RSI: 00007ffe9f16f270 RDI: 0000000000000005 [ 956.768906][T15790] RBP: 00007ffe9f16f1c0 R08: 0000000000000000 R09: 0000000000000000 [ 956.769117][T15790] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.769327][T15790] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 956.846144][T15796] ------------[ cut here ]------------ | [ 956.846431][T15796] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15796 | [ 956.846800][T15796] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.847782][T15796] Tainted: [W]=WARN [ 956.847989][T15796] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.848267][T15796] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.848530][T15796] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.849174][T15796] RSP: 0018:ffa0000004ae75d0 EFLAGS: 00010286 [ 956.849463][T15796] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387508f [ 956.849721][T15796] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8478 [ 956.850043][T15796] RBP: 1ff400000095cebb R08: 1fe2200003875090 R09: fffa3bfffffb0b37 [ 956.850357][T15796] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8af4 [ 956.850639][T15796] R13: ff1100001c3a8ac0 R14: ffffffff931c7940 R15: ff1100001c3a83c0 [ 956.850987][T15796] FS: 00007f98e6d7c440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 956.851330][T15796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.851586][T15796] CR2: 000000000044f720 CR3: 000000000d6a4003 CR4: 0000000000771ef0 [ 956.851938][T15796] PKRU: 55555554 [ 956.852126][T15796] Call Trace: [ 956.852301][T15796] [ 956.852439][T15796] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.852654][T15796] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.852913][T15796] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.853136][T15796] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.853363][T15796] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.853608][T15796] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.853838][T15796] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.854060][T15796] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.854271][T15796] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.854465][T15796] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.854652][T15796] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.854833][T15796] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.855046][T15796] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.855258][T15796] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.855439][T15796] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.855637][T15796] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.855823][T15796] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.856025][T15796] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.856210][T15796] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.856394][T15796] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.856591][T15796] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.856776][T15796] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.856980][T15796] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.857195][T15796] ? move_addr_to_kernel (net/socket.c:2511) [ 956.857382][T15796] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.857570][T15796] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.857759][T15796] ___sys_sendmsg (net/socket.c:2641) [ 956.857984][T15796] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.858194][T15796] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.858404][T15796] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.858605][T15796] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.858789][T15796] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.859008][T15796] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.859193][T15796] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.859378][T15796] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.859571][T15796] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.859754][T15796] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.859961][T15796] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.860173][T15796] RIP: 0033:0x7f98e6ed6c5e [ 956.860364][T15796] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.860929][T15796] RSP: 002b:00007ffdc34b57e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.861192][T15796] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f98e6ed6c5e [ 956.861450][T15796] RDX: 0000000000000000 RSI: 00007ffdc34b58a0 RDI: 0000000000000005 [ 956.861729][T15796] RBP: 00007ffdc34b57f0 R08: 0000000000000000 R09: 0000000000000000 [ 956.862002][T15796] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.862277][T15796] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 956.942367][T15800] ------------[ cut here ]------------ | [ 956.942607][T15800] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15800 | [ 956.943159][T15800] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 956.944114][T15800] Tainted: [W]=WARN [ 956.944277][T15800] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 956.944522][T15800] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 956.944729][T15800] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 956.945291][T15800] RSP: 0018:ffa00000049e75d0 EFLAGS: 00010286 [ 956.945531][T15800] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea05df [ 956.945811][T15800] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502ef8 [ 956.946084][T15800] RBP: 1ff400000093cebb R08: 1fe2200001ea05e0 R09: fffa3bfffffb0b37 [ 956.946376][T15800] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503734 [ 956.946643][T15800] R13: ff1100000f503700 R14: ffffffff931c7940 R15: ff1100000f502e40 [ 956.946930][T15800] FS: 00007f404c1f5440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 956.947242][T15800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.947479][T15800] CR2: 000000000044f720 CR3: 0000000018310001 CR4: 0000000000771ef0 [ 956.947759][T15800] PKRU: 55555554 [ 956.947948][T15800] Call Trace: [ 956.948126][T15800] [ 956.948258][T15800] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 956.948480][T15800] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 956.948693][T15800] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 956.948887][T15800] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.949094][T15800] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.949289][T15800] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 956.949495][T15800] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 956.949700][T15800] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 956.949916][T15800] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 956.950146][T15800] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 956.950350][T15800] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 956.950562][T15800] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 956.950775][T15800] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 956.950987][T15800] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 956.951182][T15800] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 956.951384][T15800] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 956.951593][T15800] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.951790][T15800] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 956.951997][T15800] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 956.952187][T15800] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 956.952388][T15800] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 956.952595][T15800] ? copy_msghdr_from_user (net/socket.c:2525) [ 956.952786][T15800] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 956.953039][T15800] ? move_addr_to_kernel (net/socket.c:2511) [ 956.953233][T15800] ? filemap_map_folio_range (mm/filemap.c:3873) [ 956.953418][T15800] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 956.953616][T15800] ___sys_sendmsg (net/socket.c:2641) [ 956.953816][T15800] ? copy_msghdr_from_user (net/socket.c:2628) [ 956.954026][T15800] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 956.954221][T15800] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 956.954425][T15800] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 956.954636][T15800] ? __sys_sendmsg_sock (net/socket.c:2656) [ 956.954851][T15800] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 956.955067][T15800] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.955277][T15800] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 956.955502][T15800] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 956.955693][T15800] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 956.955925][T15800] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 956.956164][T15800] RIP: 0033:0x7f404c34fc5e [ 956.956382][T15800] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 956.956968][T15800] RSP: 002b:00007ffd67e587f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 956.957235][T15800] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f404c34fc5e [ 956.957506][T15800] RDX: 0000000000000000 RSI: 00007ffd67e588b0 RDI: 0000000000000005 [ 956.957757][T15800] RBP: 00007ffd67e58800 R08: 0000000000000000 R09: 0000000000000000 [ 956.958037][T15800] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 956.958312][T15800] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 957.044226][T15806] ------------[ cut here ]------------ | [ 957.044406][T15806] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15806 | [ 957.044664][T15806] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.045507][T15806] Tainted: [W]=WARN [ 957.045623][T15806] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.045806][T15806] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.045992][T15806] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.046491][T15806] RSP: 0018:ffa0000004b175d0 EFLAGS: 00010286 [ 957.046667][T15806] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea05a7 [ 957.046871][T15806] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502d38 [ 957.047094][T15806] RBP: 1ff4000000962ebb R08: 1fe2200001ea05a8 R09: fffa3bfffffb0b37 [ 957.047306][T15806] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502074 [ 957.047514][T15806] R13: ff1100000f502040 R14: ffffffff931c7940 R15: ff1100000f502c80 [ 957.047714][T15806] FS: 00007f7041b75440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 957.047955][T15806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.048128][T15806] CR2: 000000000044f720 CR3: 000000001c579003 CR4: 0000000000771ef0 [ 957.048342][T15806] PKRU: 55555554 [ 957.048441][T15806] Call Trace: [ 957.048574][T15806] [ 957.048644][T15806] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.048778][T15806] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.048925][T15806] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.049058][T15806] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.049190][T15806] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.049327][T15806] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.049467][T15806] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.049607][T15806] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.049738][T15806] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.049871][T15806] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.050009][T15806] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.050139][T15806] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.050277][T15806] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.050410][T15806] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.050552][T15806] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.050690][T15806] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.050822][T15806] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.050969][T15806] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.051111][T15806] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.051252][T15806] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.051394][T15806] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.051567][T15806] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.051704][T15806] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.051876][T15806] ? move_addr_to_kernel (net/socket.c:2511) [ 957.052019][T15806] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.052156][T15806] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.052299][T15806] ___sys_sendmsg (net/socket.c:2641) [ 957.052438][T15806] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.052591][T15806] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.052735][T15806] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.052878][T15806] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.053022][T15806] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.053163][T15806] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.053310][T15806] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.053451][T15806] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.053607][T15806] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.053753][T15806] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.053902][T15806] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.054077][T15806] RIP: 0033:0x7f7041ccfc5e [ 957.054216][T15806] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.054705][T15806] RSP: 002b:00007ffdb2b30fd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.054921][T15806] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7041ccfc5e [ 957.055131][T15806] RDX: 0000000000000000 RSI: 00007ffdb2b31090 RDI: 0000000000000005 [ 957.055335][T15806] RBP: 00007ffdb2b30fe0 R08: 0000000000000000 R09: 0000000000000000 [ 957.055560][T15806] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.055761][T15806] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 957.124993][T15810] ------------[ cut here ]------------ | [ 957.125158][T15810] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15810 | [ 957.125402][T15810] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.126185][T15810] Tainted: [W]=WARN [ 957.126296][T15810] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.126482][T15810] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.126627][T15810] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.127130][T15810] RSP: 0018:ffa0000004b675d0 EFLAGS: 00010286 [ 957.127314][T15810] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1b9f [ 957.127520][T15810] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78dcf8 [ 957.127772][T15810] RBP: 1ff400000096cebb R08: 1fe22000036f1ba0 R09: fffa3bfffffb0b37 [ 957.127973][T15810] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d034 [ 957.128175][T15810] R13: ff1100001b78d000 R14: ffffffff931c7940 R15: ff1100001b78dc40 [ 957.128379][T15810] FS: 00007f537fd16440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 957.128620][T15810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.128789][T15810] CR2: 000000000044f720 CR3: 000000001d0a8006 CR4: 0000000000771ef0 [ 957.128997][T15810] PKRU: 55555554 [ 957.129098][T15810] Call Trace: [ 957.129198][T15810] [ 957.129272][T15810] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.129407][T15810] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.129552][T15810] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.129688][T15810] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.129820][T15810] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.129965][T15810] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.130098][T15810] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.130230][T15810] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.130371][T15810] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.130553][T15810] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.130721][T15810] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.130907][T15810] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.131064][T15810] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.131209][T15810] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.131350][T15810] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.131522][T15810] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.131668][T15810] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.131838][T15810] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.131984][T15810] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.132124][T15810] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.132299][T15810] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.132467][T15810] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.132639][T15810] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.132838][T15810] ? move_addr_to_kernel (net/socket.c:2511) [ 957.133089][T15810] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.133243][T15810] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.133409][T15810] ___sys_sendmsg (net/socket.c:2641) [ 957.133588][T15810] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.133752][T15810] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.133972][T15810] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.134111][T15810] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.134265][T15810] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.134430][T15810] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.134599][T15810] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.134764][T15810] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.134954][T15810] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.135092][T15810] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.135255][T15810] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.135467][T15810] RIP: 0033:0x7f537fe70c5e [ 957.135629][T15810] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.136225][T15810] RSP: 002b:00007ffd7aa401f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.136485][T15810] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f537fe70c5e [ 957.136720][T15810] RDX: 0000000000000000 RSI: 00007ffd7aa402b0 RDI: 0000000000000005 [ 957.136976][T15810] RBP: 00007ffd7aa40200 R08: 0000000000000000 R09: 0000000000000000 [ 957.137217][T15810] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.137446][T15810] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 957.211808][T15816] ------------[ cut here ]------------ | [ 957.211987][T15816] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15816 | [ 957.212253][T15816] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.213161][T15816] Tainted: [W]=WARN [ 957.213272][T15816] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.213452][T15816] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.213606][T15816] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.214145][T15816] RSP: 0018:ffa0000004b775d0 EFLAGS: 00010286 [ 957.214339][T15816] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1abf [ 957.214561][T15816] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d5f8 [ 957.214774][T15816] RBP: 1ff400000096eebb R08: 1fe22000036f1ac0 R09: fffa3bfffffb0b37 [ 957.214990][T15816] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78de34 [ 957.215199][T15816] R13: ff1100001b78de00 R14: ffffffff931c7940 R15: ff1100001b78d540 [ 957.215415][T15816] FS: 00007fc9c4569440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 957.215672][T15816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.215851][T15816] CR2: 000000000044f720 CR3: 000000001037c005 CR4: 0000000000771ef0 [ 957.216069][T15816] PKRU: 55555554 [ 957.216178][T15816] Call Trace: [ 957.216281][T15816] [ 957.216356][T15816] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.216499][T15816] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.216654][T15816] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.216792][T15816] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.216937][T15816] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.217083][T15816] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.217224][T15816] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.217364][T15816] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.217537][T15816] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.217678][T15816] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.217821][T15816] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.217971][T15816] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.218114][T15816] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.218257][T15816] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.218400][T15816] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.218546][T15816] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.218687][T15816] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.218835][T15816] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.218984][T15816] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.219125][T15816] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.219269][T15816] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.219400][T15816] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.219547][T15816] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.219708][T15816] ? move_addr_to_kernel (net/socket.c:2511) [ 957.219839][T15816] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.220063][T15816] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.220205][T15816] ___sys_sendmsg (net/socket.c:2641) [ 957.220345][T15816] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.220493][T15816] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.220636][T15816] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.220781][T15816] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.220984][T15816] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.221128][T15816] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.221266][T15816] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.221416][T15816] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.221562][T15816] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.221704][T15816] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.221844][T15816] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.222096][T15816] RIP: 0033:0x7fc9c46c3c5e [ 957.222245][T15816] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.222730][T15816] RSP: 002b:00007fff239152d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.222984][T15816] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc9c46c3c5e [ 957.223181][T15816] RDX: 0000000000000000 RSI: 00007fff23915390 RDI: 0000000000000005 [ 957.223377][T15816] RBP: 00007fff239152e0 R08: 0000000000000000 R09: 0000000000000000 [ 957.223580][T15816] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.223778][T15816] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 957.295741][T15820] ------------[ cut here ]------------ | [ 957.296193][T15820] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15820 | [ 957.296511][T15820] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.297472][T15820] Tainted: [W]=WARN [ 957.297633][T15820] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.297883][T15820] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.298102][T15820] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.298660][T15820] RSP: 0018:ffa00000049e75d0 EFLAGS: 00010286 [ 957.298888][T15820] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897af7 [ 957.299170][T15820] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd7b8 [ 957.299441][T15820] RBP: 1ff400000093cebb R08: 1fe2200001897af8 R09: fffa3bfffffb0b37 [ 957.299723][T15820] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd3b4 [ 957.300006][T15820] R13: ff1100000c4bd380 R14: ffffffff931c7940 R15: ff1100000c4bd700 [ 957.300291][T15820] FS: 00007f0125574440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 957.300611][T15820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.300839][T15820] CR2: 000000000044f720 CR3: 000000000bef3001 CR4: 0000000000771ef0 [ 957.301128][T15820] PKRU: 55555554 [ 957.301291][T15820] Call Trace: [ 957.301447][T15820] [ 957.301589][T15820] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.301795][T15820] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.302021][T15820] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.302214][T15820] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.302417][T15820] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.302638][T15820] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.302833][T15820] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.303042][T15820] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.303237][T15820] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.303434][T15820] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.303643][T15820] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.303851][T15820] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.304064][T15820] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.304274][T15820] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.304471][T15820] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.304665][T15820] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.304869][T15820] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.305086][T15820] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.305290][T15820] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.305502][T15820] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.305710][T15820] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.305916][T15820] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.306118][T15820] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.306381][T15820] ? move_addr_to_kernel (net/socket.c:2511) [ 957.306604][T15820] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.306809][T15820] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.307027][T15820] ___sys_sendmsg (net/socket.c:2641) [ 957.307228][T15820] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.307432][T15820] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.307648][T15820] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.307855][T15820] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.308066][T15820] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.308275][T15820] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.308501][T15820] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.308730][T15820] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.308953][T15820] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.309148][T15820] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.309359][T15820] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.309626][T15820] RIP: 0033:0x7f01256cec5e [ 957.309859][T15820] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.310482][T15820] RSP: 002b:00007fffd4659ba0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.310905][T15820] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f01256cec5e [ 957.311162][T15820] RDX: 0000000000000000 RSI: 00007fffd4659c60 RDI: 0000000000000005 [ 957.311431][T15820] RBP: 00007fffd4659bb0 R08: 0000000000000000 R09: 0000000000000000 [ 957.311719][T15820] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.312003][T15820] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 957.398658][T15826] ------------[ cut here ]------------ | [ 957.398883][T15826] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15826 | [ 957.399212][T15826] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.400169][T15826] Tainted: [W]=WARN [ 957.400328][T15826] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.400570][T15826] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.400774][T15826] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.401679][T15826] RSP: 0018:ffa0000004bb75d0 EFLAGS: 00010286 [ 957.401914][T15826] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897b9f [ 957.402181][T15826] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bdcf8 [ 957.402504][T15826] RBP: 1ff4000000976ebb R08: 1fe2200001897ba0 R09: fffa3bfffffb0b37 [ 957.402826][T15826] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bc074 [ 957.403106][T15826] R13: ff1100000c4bc040 R14: ffffffff931c7940 R15: ff1100000c4bdc40 [ 957.403379][T15826] FS: 00007f8fa9c1e440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 957.403689][T15826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.403929][T15826] CR2: 000000000044f720 CR3: 0000000017c79006 CR4: 0000000000771ef0 [ 957.404195][T15826] PKRU: 55555554 [ 957.404353][T15826] Call Trace: [ 957.404520][T15826] [ 957.404688][T15826] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.404883][T15826] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.405126][T15826] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.405340][T15826] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.405561][T15826] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.405761][T15826] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.405964][T15826] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.406168][T15826] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.406360][T15826] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.406559][T15826] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.406759][T15826] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.406963][T15826] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.407154][T15826] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.407342][T15826] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.407540][T15826] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.407788][T15826] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.408003][T15826] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.408193][T15826] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.408395][T15826] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.408593][T15826] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.408781][T15826] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.408991][T15826] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.409194][T15826] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.409412][T15826] ? move_addr_to_kernel (net/socket.c:2511) [ 957.409654][T15826] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.409857][T15826] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.410066][T15826] ___sys_sendmsg (net/socket.c:2641) [ 957.410252][T15826] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.410440][T15826] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.410644][T15826] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.410831][T15826] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.411031][T15826] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.411230][T15826] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.411422][T15826] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.411630][T15826] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.411817][T15826] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.412030][T15826] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.412237][T15826] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.412494][T15826] RIP: 0033:0x7f8fa9d78c5e [ 957.412705][T15826] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.413272][T15826] RSP: 002b:00007ffc0aaa2560 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.413589][T15826] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8fa9d78c5e [ 957.413840][T15826] RDX: 0000000000000000 RSI: 00007ffc0aaa2620 RDI: 0000000000000005 [ 957.414105][T15826] RBP: 00007ffc0aaa2570 R08: 0000000000000000 R09: 0000000000000000 [ 957.414398][T15826] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.414679][T15826] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 957.495351][T15830] ------------[ cut here ]------------ | [ 957.495587][T15830] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15830 | [ 957.495884][T15830] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.496858][T15830] Tainted: [W]=WARN [ 957.497117][T15830] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.497427][T15830] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.497751][T15830] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.498432][T15830] RSP: 0018:ffa0000004b375d0 EFLAGS: 00010286 [ 957.498752][T15830] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000037259a7 [ 957.499041][T15830] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92cd38 [ 957.499313][T15830] RBP: 1ff4000000966ebb R08: 1fe22000037259a8 R09: fffa3bfffffb0b37 [ 957.499598][T15830] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c934 [ 957.499876][T15830] R13: ff1100001b92c900 R14: ffffffff931c7940 R15: ff1100001b92cc80 [ 957.500173][T15830] FS: 00007f2cb3353440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 957.500473][T15830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.500712][T15830] CR2: 000000000044f720 CR3: 000000001c0e2004 CR4: 0000000000771ef0 [ 957.501002][T15830] PKRU: 55555554 [ 957.501160][T15830] Call Trace: [ 957.501322][T15830] [ 957.501448][T15830] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.501659][T15830] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.501874][T15830] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.502099][T15830] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.502324][T15830] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.502537][T15830] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.502728][T15830] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.502954][T15830] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.503167][T15830] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.503372][T15830] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.503577][T15830] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.503771][T15830] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.503986][T15830] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.504195][T15830] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.504388][T15830] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.504597][T15830] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.504793][T15830] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.505024][T15830] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.505238][T15830] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.505442][T15830] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.505658][T15830] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.505875][T15830] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.506095][T15830] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.506333][T15830] ? move_addr_to_kernel (net/socket.c:2511) [ 957.506546][T15830] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.506743][T15830] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.506955][T15830] ___sys_sendmsg (net/socket.c:2641) [ 957.507164][T15830] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.507372][T15830] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.507582][T15830] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.507790][T15830] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.508007][T15830] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.508219][T15830] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.508425][T15830] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.508641][T15830] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.508853][T15830] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.509064][T15830] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.509267][T15830] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.509506][T15830] RIP: 0033:0x7f2cb34adc5e [ 957.509714][T15830] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.510302][T15830] RSP: 002b:00007ffcd32791a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.510580][T15830] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2cb34adc5e [ 957.510852][T15830] RDX: 0000000000000000 RSI: 00007ffcd3279260 RDI: 0000000000000005 [ 957.511126][T15830] RBP: 00007ffcd32791b0 R08: 0000000000000000 R09: 0000000000000000 [ 957.511389][T15830] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.511665][T15830] R13: 0000000069cbe804 R14: 0000000000000004 R15: 000000000049d620 | [ 957.596587][T15836] ------------[ cut here ]------------ | [ 957.596753][T15836] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15836 | [ 957.597006][T15836] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.597788][T15836] Tainted: [W]=WARN [ 957.597899][T15836] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.598072][T15836] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.598218][T15836] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.598705][T15836] RSP: 0018:ffa0000004b475d0 EFLAGS: 00010286 [ 957.598880][T15836] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725af7 [ 957.599091][T15836] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d7b8 [ 957.599306][T15836] RBP: 1ff4000000968ebb R08: 1fe2200003725af8 R09: fffa3bfffffb0b37 [ 957.599523][T15836] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92de34 [ 957.599725][T15836] R13: ff1100001b92de00 R14: ffffffff931c7940 R15: ff1100001b92d700 [ 957.599935][T15836] FS: 00007f7ed26ae440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 957.600173][T15836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.600343][T15836] CR2: 000000000044f720 CR3: 0000000010a3b006 CR4: 0000000000771ef0 [ 957.600547][T15836] PKRU: 55555554 [ 957.600651][T15836] Call Trace: [ 957.600754][T15836] [ 957.600824][T15836] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.600965][T15836] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.601111][T15836] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.601248][T15836] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.601393][T15836] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.601538][T15836] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.601673][T15836] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.601808][T15836] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.601945][T15836] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.602084][T15836] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.602222][T15836] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.602358][T15836] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.602500][T15836] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.602638][T15836] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.602772][T15836] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.602917][T15836] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.603052][T15836] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.603190][T15836] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.603325][T15836] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.603465][T15836] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.603603][T15836] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.603736][T15836] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.603869][T15836] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.604040][T15836] ? move_addr_to_kernel (net/socket.c:2511) [ 957.604177][T15836] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.604311][T15836] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.604448][T15836] ___sys_sendmsg (net/socket.c:2641) [ 957.604590][T15836] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.604727][T15836] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.604867][T15836] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.605011][T15836] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.605145][T15836] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.605282][T15836] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.605417][T15836] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.605557][T15836] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.605692][T15836] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.605830][T15836] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.605970][T15836] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.606140][T15836] RIP: 0033:0x7f7ed2808c5e [ 957.606283][T15836] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.606770][T15836] RSP: 002b:00007ffee1d67f00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.606981][T15836] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7ed2808c5e [ 957.607183][T15836] RDX: 0000000000000000 RSI: 00007ffee1d67fc0 RDI: 0000000000000005 [ 957.607382][T15836] RBP: 00007ffee1d67f10 R08: 0000000000000000 R09: 0000000000000000 [ 957.607589][T15836] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.607790][T15836] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 957.688298][T15840] ------------[ cut here ]------------ | [ 957.688480][T15840] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15840 | [ 957.688753][T15840] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.689571][T15840] Tainted: [W]=WARN [ 957.689672][T15840] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.690343][T15840] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.690625][T15840] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.691164][T15840] RSP: 0018:ffa0000004b375d0 EFLAGS: 00010286 [ 957.691356][T15840] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192ebd7 [ 957.691568][T15840] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975eb8 [ 957.691775][T15840] RBP: 1ff4000000966ebb R08: 1fe220000192ebd8 R09: fffa3bfffffb0b37 [ 957.691987][T15840] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975034 [ 957.692214][T15840] R13: ff1100000c975000 R14: ffffffff931c7940 R15: ff1100000c975e00 [ 957.692427][T15840] FS: 00007f1398b61440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 957.692679][T15840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.692848][T15840] CR2: 000000000044f720 CR3: 0000000005014003 CR4: 0000000000771ef0 [ 957.693054][T15840] PKRU: 55555554 [ 957.693163][T15840] Call Trace: [ 957.693262][T15840] [ 957.693331][T15840] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.693990][T15840] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.694160][T15840] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.694299][T15840] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.694428][T15840] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.694577][T15840] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.694712][T15840] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.694860][T15840] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.695010][T15840] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.695146][T15840] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.695309][T15840] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.695443][T15840] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.695603][T15840] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.695738][T15840] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.695868][T15840] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.696005][T15840] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.696143][T15840] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.696275][T15840] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.696409][T15840] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.696550][T15840] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.696686][T15840] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.696822][T15840] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.696970][T15840] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.697158][T15840] ? move_addr_to_kernel (net/socket.c:2511) [ 957.697308][T15840] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.697443][T15840] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.697597][T15840] ___sys_sendmsg (net/socket.c:2641) [ 957.697731][T15840] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.697875][T15840] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.698020][T15840] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.698169][T15840] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.698303][T15840] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.698441][T15840] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.698633][T15840] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.698787][T15840] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.698956][T15840] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.699093][T15840] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.699252][T15840] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.699421][T15840] RIP: 0033:0x7f1398cbbc5e [ 957.699575][T15840] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.700064][T15840] RSP: 002b:00007ffd241945a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.700271][T15840] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1398cbbc5e [ 957.700477][T15840] RDX: 0000000000000000 RSI: 00007ffd24194660 RDI: 0000000000000005 [ 957.700681][T15840] RBP: 00007ffd241945b0 R08: 0000000000000000 R09: 0000000000000000 [ 957.700898][T15840] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.701100][T15840] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 957.783608][T15846] ------------[ cut here ]------------ | [ 957.783840][T15846] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15846 | [ 957.784747][T15846] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.785746][T15846] Tainted: [W]=WARN [ 957.785921][T15846] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.786150][T15846] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.786363][T15846] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.786936][T15846] RSP: 0018:ffa0000004c175d0 EFLAGS: 00010286 [ 957.787164][T15846] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eabf [ 957.787440][T15846] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9755f8 [ 957.787715][T15846] RBP: 1ff4000000982ebb R08: 1fe220000192eac0 R09: fffa3bfffffb0b37 [ 957.787982][T15846] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975c74 [ 957.788244][T15846] R13: ff1100000c975c40 R14: ffffffff931c7940 R15: ff1100000c975540 [ 957.788529][T15846] FS: 00007f2bf69e2440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 957.788834][T15846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.789266][T15846] CR2: 000000000044f720 CR3: 000000000d577003 CR4: 0000000000771ef0 [ 957.789544][T15846] PKRU: 55555554 [ 957.789703][T15846] Call Trace: [ 957.789866][T15846] [ 957.790002][T15846] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.790192][T15846] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.790399][T15846] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.790610][T15846] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.790805][T15846] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.791023][T15846] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.791222][T15846] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.791431][T15846] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.791640][T15846] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.791854][T15846] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.792076][T15846] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.792324][T15846] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.792536][T15846] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.792736][T15846] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.792935][T15846] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.793145][T15846] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.793339][T15846] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.793545][T15846] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.793759][T15846] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.793971][T15846] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.794167][T15846] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.794362][T15846] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.794558][T15846] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.794804][T15846] ? move_addr_to_kernel (net/socket.c:2511) [ 957.795020][T15846] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.795214][T15846] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.795418][T15846] ___sys_sendmsg (net/socket.c:2641) [ 957.795618][T15846] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.795814][T15846] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.796016][T15846] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.796207][T15846] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.796396][T15846] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.796607][T15846] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.796794][T15846] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.797007][T15846] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.797226][T15846] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.797422][T15846] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.797632][T15846] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.797867][T15846] RIP: 0033:0x7f2bf6b3cc5e [ 957.798082][T15846] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.798671][T15846] RSP: 002b:00007ffe9ae185f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.798951][T15846] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2bf6b3cc5e [ 957.799215][T15846] RDX: 0000000000000000 RSI: 00007ffe9ae186b0 RDI: 0000000000000005 [ 957.799493][T15846] RBP: 00007ffe9ae18600 R08: 0000000000000000 R09: 0000000000000000 [ 957.799741][T15846] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.800014][T15846] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 957.866665][T15850] ------------[ cut here ]------------ | [ 957.866825][T15850] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15850 | [ 957.867588][T15850] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.868423][T15850] Tainted: [W]=WARN [ 957.868531][T15850] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.868703][T15850] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.868844][T15850] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.869416][T15850] RSP: 0018:ffa0000004b175d0 EFLAGS: 00010286 [ 957.869654][T15850] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0816f [ 957.869865][T15850] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d840b78 [ 957.870088][T15850] RBP: 1ff4000000962ebb R08: 1fe2200001b08170 R09: fffa3bfffffb0b37 [ 957.870300][T15850] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840cb4 [ 957.870508][T15850] R13: ff1100000d840c80 R14: ffffffff931c7940 R15: ff1100000d840ac0 [ 957.870708][T15850] FS: 00007fb48c466440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 957.870963][T15850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.871127][T15850] CR2: 000000000044f720 CR3: 0000000005014004 CR4: 0000000000771ef0 [ 957.871329][T15850] PKRU: 55555554 [ 957.871433][T15850] Call Trace: [ 957.871541][T15850] [ 957.871609][T15850] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.871751][T15850] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.871899][T15850] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.872038][T15850] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.872168][T15850] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.872305][T15850] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.872444][T15850] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.872588][T15850] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.872717][T15850] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.872851][T15850] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.872991][T15850] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.873121][T15850] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.873253][T15850] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.873409][T15850] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.873550][T15850] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.873683][T15850] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.873815][T15850] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.873955][T15850] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.874089][T15850] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.874221][T15850] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.874358][T15850] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.874498][T15850] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.874633][T15850] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.874796][T15850] ? move_addr_to_kernel (net/socket.c:2511) [ 957.874940][T15850] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.875072][T15850] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.875206][T15850] ___sys_sendmsg (net/socket.c:2641) [ 957.875339][T15850] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.875478][T15850] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.875614][T15850] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.875747][T15850] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.875885][T15850] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.876030][T15850] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.876162][T15850] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.876292][T15850] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.876424][T15850] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.876567][T15850] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.876711][T15850] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.876875][T15850] RIP: 0033:0x7fb48c5c0c5e [ 957.877025][T15850] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.877502][T15850] RSP: 002b:00007ffe66c24930 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.877710][T15850] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb48c5c0c5e [ 957.877926][T15850] RDX: 0000000000000000 RSI: 00007ffe66c249f0 RDI: 0000000000000005 [ 957.878123][T15850] RBP: 00007ffe66c24940 R08: 0000000000000000 R09: 0000000000000000 [ 957.878318][T15850] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.878518][T15850] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 957.942917][T15856] ------------[ cut here ]------------ | [ 957.943079][T15856] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15856 | [ 957.943336][T15856] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 957.944150][T15856] Tainted: [W]=WARN [ 957.944257][T15856] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 957.944426][T15856] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 957.944580][T15856] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 957.945072][T15856] RSP: 0018:ffa0000004b175d0 EFLAGS: 00010286 [ 957.945242][T15856] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b08057 [ 957.945446][T15856] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8402b8 [ 957.945662][T15856] RBP: 1ff4000000962ebb R08: 1fe2200001b08058 R09: fffa3bfffffb0b37 [ 957.945875][T15856] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8405b4 [ 957.946090][T15856] R13: ff1100000d840580 R14: ffffffff931c7940 R15: ff1100000d840200 [ 957.946302][T15856] FS: 00007f099a427440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 957.946545][T15856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.946719][T15856] CR2: 000000000044f720 CR3: 000000001807f004 CR4: 0000000000771ef0 [ 957.946933][T15856] PKRU: 55555554 [ 957.947043][T15856] Call Trace: [ 957.947144][T15856] [ 957.947212][T15856] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 957.947348][T15856] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 957.947497][T15856] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 957.947631][T15856] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.947771][T15856] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.947914][T15856] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 957.948049][T15856] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 957.948188][T15856] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 957.948333][T15856] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 957.948474][T15856] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 957.948608][T15856] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 957.948741][T15856] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 957.948881][T15856] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 957.949026][T15856] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 957.949155][T15856] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 957.949293][T15856] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 957.949431][T15856] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.949576][T15856] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 957.949718][T15856] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 957.949863][T15856] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 957.950013][T15856] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 957.950144][T15856] ? copy_msghdr_from_user (net/socket.c:2525) [ 957.950281][T15856] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 957.950453][T15856] ? move_addr_to_kernel (net/socket.c:2511) [ 957.950607][T15856] ? filemap_map_folio_range (mm/filemap.c:3873) [ 957.950740][T15856] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 957.950883][T15856] ___sys_sendmsg (net/socket.c:2641) [ 957.951020][T15856] ? copy_msghdr_from_user (net/socket.c:2628) [ 957.951155][T15856] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 957.951296][T15856] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 957.951435][T15856] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 957.951579][T15856] ? __sys_sendmsg_sock (net/socket.c:2656) [ 957.951721][T15856] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 957.951864][T15856] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.952014][T15856] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 957.952155][T15856] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 957.952295][T15856] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 957.952433][T15856] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 957.952607][T15856] RIP: 0033:0x7f099a581c5e [ 957.952757][T15856] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 957.953261][T15856] RSP: 002b:00007fff21fda1d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 957.953473][T15856] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f099a581c5e [ 957.953684][T15856] RDX: 0000000000000000 RSI: 00007fff21fda290 RDI: 0000000000000005 [ 957.953890][T15856] RBP: 00007fff21fda1e0 R08: 0000000000000000 R09: 0000000000000000 [ 957.954107][T15856] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 957.954308][T15856] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 958.023101][T15860] ------------[ cut here ]------------ | [ 958.023260][T15860] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15860 | [ 958.023498][T15860] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.024284][T15860] Tainted: [W]=WARN [ 958.024384][T15860] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.024555][T15860] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.024696][T15860] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.025686][T15860] RSP: 0018:ffa0000004c475d0 EFLAGS: 00010286 [ 958.025862][T15860] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003875287 [ 958.026063][T15860] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9438 [ 958.026258][T15860] RBP: 1ff4000000988ebb R08: 1fe2200003875288 R09: fffa3bfffffb0b37 [ 958.026454][T15860] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9034 [ 958.026656][T15860] R13: ff1100001c3a9000 R14: ffffffff931c7940 R15: ff1100001c3a9380 [ 958.026973][T15860] FS: 00007f4cdf059440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 958.027219][T15860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.027396][T15860] CR2: 000000000044f720 CR3: 000000001acfb006 CR4: 0000000000771ef0 [ 958.027597][T15860] PKRU: 55555554 [ 958.027715][T15860] Call Trace: [ 958.027815][T15860] [ 958.027883][T15860] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.028031][T15860] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.028172][T15860] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.028306][T15860] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.028437][T15860] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.028577][T15860] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.028709][T15860] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.028840][T15860] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.028978][T15860] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.029112][T15860] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.029245][T15860] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.029376][T15860] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.029525][T15860] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.029658][T15860] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.029789][T15860] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.029943][T15860] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.030099][T15860] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.030233][T15860] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.030365][T15860] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.030506][T15860] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.030641][T15860] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.030774][T15860] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.031030][T15860] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.031204][T15860] ? move_addr_to_kernel (net/socket.c:2511) [ 958.031347][T15860] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.031489][T15860] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.031622][T15860] ___sys_sendmsg (net/socket.c:2641) [ 958.031753][T15860] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.031904][T15860] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.032040][T15860] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.032174][T15860] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.032306][T15860] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.032441][T15860] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.032579][T15860] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.032719][T15860] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.032854][T15860] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.032991][T15860] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.033150][T15860] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.033316][T15860] RIP: 0033:0x7f4cdf1b3c5e [ 958.033454][T15860] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.033936][T15860] RSP: 002b:00007fffdc82be10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.034137][T15860] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4cdf1b3c5e [ 958.034335][T15860] RDX: 0000000000000000 RSI: 00007fffdc82bed0 RDI: 0000000000000005 [ 958.034535][T15860] RBP: 00007fffdc82be20 R08: 0000000000000000 R09: 0000000000000000 [ 958.034744][T15860] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.034945][T15860] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 958.103790][T15866] ------------[ cut here ]------------ | [ 958.103976][T15866] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15866 | [ 958.104226][T15866] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.105589][T15866] Tainted: [W]=WARN [ 958.105697][T15866] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.105885][T15866] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.106039][T15866] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.106535][T15866] RSP: 0018:ffa0000004c075d0 EFLAGS: 00010286 [ 958.106728][T15866] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387501f [ 958.106945][T15866] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a80f8 [ 958.107161][T15866] RBP: 1ff4000000980ebb R08: 1fe2200003875020 R09: fffa3bfffffb0b37 [ 958.107365][T15866] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a85b4 [ 958.107574][T15866] R13: ff1100001c3a8580 R14: ffffffff931c7940 R15: ff1100001c3a8040 [ 958.107793][T15866] FS: 00007fbd21895440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 958.108041][T15866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.108233][T15866] CR2: 000000000044f720 CR3: 000000001804f006 CR4: 0000000000771ef0 [ 958.108441][T15866] PKRU: 55555554 [ 958.108553][T15866] Call Trace: [ 958.108653][T15866] [ 958.108722][T15866] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.108972][T15866] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.109117][T15866] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.109255][T15866] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.109393][T15866] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.109545][T15866] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.109677][T15866] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.109809][T15866] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.109945][T15866] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.110084][T15866] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.110219][T15866] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.110357][T15866] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.110534][T15866] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.110669][T15866] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.110808][T15866] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.110944][T15866] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.111076][T15866] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.111208][T15866] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.111342][T15866] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.111480][T15866] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.111613][T15866] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.111746][T15866] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.111885][T15866] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.112059][T15866] ? move_addr_to_kernel (net/socket.c:2511) [ 958.112196][T15866] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.112328][T15866] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.112468][T15866] ___sys_sendmsg (net/socket.c:2641) [ 958.112611][T15866] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.112749][T15866] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.112888][T15866] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.113029][T15866] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.113161][T15866] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.113292][T15866] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.113425][T15866] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.113559][T15866] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.113699][T15866] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.113856][T15866] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.113998][T15866] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.114169][T15866] RIP: 0033:0x7fbd219efc5e [ 958.114308][T15866] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.114805][T15866] RSP: 002b:00007ffefc24dc00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.115008][T15866] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbd219efc5e [ 958.115210][T15866] RDX: 0000000000000000 RSI: 00007ffefc24dcc0 RDI: 0000000000000005 [ 958.115405][T15866] RBP: 00007ffefc24dc10 R08: 0000000000000000 R09: 0000000000000000 [ 958.115606][T15866] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.115820][T15866] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 958.188123][T15870] ------------[ cut here ]------------ | [ 958.188293][T15870] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15870 | [ 958.188539][T15870] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.189329][T15870] Tainted: [W]=WARN [ 958.189432][T15870] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.189605][T15870] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.189748][T15870] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.190239][T15870] RSP: 0018:ffa0000004c675d0 EFLAGS: 00010286 [ 958.190419][T15870] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0617 [ 958.190630][T15870] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5030b8 [ 958.190827][T15870] RBP: 1ff400000098cebb R08: 1fe2200001ea0618 R09: fffa3bfffffb0b37 [ 958.191038][T15870] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503574 [ 958.191242][T15870] R13: ff1100000f503540 R14: ffffffff931c7940 R15: ff1100000f503000 [ 958.191439][T15870] FS: 00007fb12ffcd440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 958.191683][T15870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.191857][T15870] CR2: 000000000044f720 CR3: 000000001804f002 CR4: 0000000000771ef0 [ 958.192075][T15870] PKRU: 55555554 [ 958.192190][T15870] Call Trace: [ 958.192307][T15870] [ 958.192377][T15870] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.192523][T15870] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.192671][T15870] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.192802][T15870] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.192941][T15870] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.193079][T15870] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.193209][T15870] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.193340][T15870] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.193474][T15870] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.193608][T15870] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.193744][T15870] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.193875][T15870] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.194095][T15870] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.194228][T15870] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.194358][T15870] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.194538][T15870] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.194673][T15870] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.194808][T15870] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.195002][T15870] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.195135][T15870] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.195293][T15870] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.195433][T15870] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.195580][T15870] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.195753][T15870] ? move_addr_to_kernel (net/socket.c:2511) [ 958.195887][T15870] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.196096][T15870] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.196237][T15870] ___sys_sendmsg (net/socket.c:2641) [ 958.196371][T15870] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.196513][T15870] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.196646][T15870] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.196780][T15870] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.196987][T15870] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.197136][T15870] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.197267][T15870] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.197406][T15870] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.197543][T15870] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.197673][T15870] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.197811][T15870] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.198058][T15870] RIP: 0033:0x7fb130127c5e [ 958.198204][T15870] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.198726][T15870] RSP: 002b:00007ffca624d450 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.199010][T15870] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb130127c5e [ 958.199205][T15870] RDX: 0000000000000000 RSI: 00007ffca624d510 RDI: 0000000000000005 [ 958.199410][T15870] RBP: 00007ffca624d460 R08: 0000000000000000 R09: 0000000000000000 [ 958.199671][T15870] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.199879][T15870] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 958.269976][T15876] ------------[ cut here ]------------ | [ 958.270167][T15876] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15876 | [ 958.270480][T15876] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.271355][T15876] Tainted: [W]=WARN [ 958.271514][T15876] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.271734][T15876] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.271945][T15876] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.272489][T15876] RSP: 0018:ffa0000004c975d0 EFLAGS: 00010286 [ 958.272715][T15876] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0537 [ 958.273063][T15876] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5029b8 [ 958.273382][T15876] RBP: 1ff4000000992ebb R08: 1fe2200001ea0538 R09: fffa3bfffffb0b37 [ 958.273684][T15876] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503c74 [ 958.274011][T15876] R13: ff1100000f503c40 R14: ffffffff931c7940 R15: ff1100000f502900 [ 958.274308][T15876] FS: 00007f3df4dae440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 958.274663][T15876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.274963][T15876] CR2: 000000000044f720 CR3: 000000001a6e6001 CR4: 0000000000771ef0 [ 958.275289][T15876] PKRU: 55555554 [ 958.275576][T15876] Call Trace: [ 958.275817][T15876] [ 958.276017][T15876] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.276205][T15876] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.276411][T15876] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.276620][T15876] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.276816][T15876] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.277025][T15876] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.277225][T15876] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.277416][T15876] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.277617][T15876] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.277813][T15876] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.278027][T15876] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.278209][T15876] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.278393][T15876] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.278583][T15876] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.278769][T15876] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.278970][T15876] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.279154][T15876] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.279337][T15876] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.279531][T15876] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.279721][T15876] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.279918][T15876] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.280112][T15876] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.280314][T15876] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.280543][T15876] ? move_addr_to_kernel (net/socket.c:2511) [ 958.280749][T15876] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.280960][T15876] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.281147][T15876] ___sys_sendmsg (net/socket.c:2641) [ 958.281343][T15876] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.281547][T15876] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.281752][T15876] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.281955][T15876] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.282144][T15876] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.282329][T15876] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.282534][T15876] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.282720][T15876] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.282918][T15876] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.283100][T15876] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.283285][T15876] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.283506][T15876] RIP: 0033:0x7f3df4f08c5e [ 958.283696][T15876] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.284241][T15876] RSP: 002b:00007ffe9374bb80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.284512][T15876] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f3df4f08c5e [ 958.284772][T15876] RDX: 0000000000000000 RSI: 00007ffe9374bc40 RDI: 0000000000000005 [ 958.285041][T15876] RBP: 00007ffe9374bb90 R08: 0000000000000000 R09: 0000000000000000 [ 958.285304][T15876] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.285562][T15876] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 958.360925][T15880] ------------[ cut here ]------------ | [ 958.361102][T15880] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15880 | [ 958.361352][T15880] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.362135][T15880] Tainted: [W]=WARN [ 958.362236][T15880] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.362405][T15880] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.362572][T15880] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.363059][T15880] RSP: 0018:ffa0000004c875d0 EFLAGS: 00010286 [ 958.363231][T15880] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f19a7 [ 958.363432][T15880] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cd38 [ 958.363639][T15880] RBP: 1ff4000000990ebb R08: 1fe22000036f19a8 R09: fffa3bfffffb0b37 [ 958.363849][T15880] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78c074 [ 958.364053][T15880] R13: ff1100001b78c040 R14: ffffffff931c7940 R15: ff1100001b78cc80 [ 958.364249][T15880] FS: 00007f2e7ea29440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 958.364494][T15880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.364671][T15880] CR2: 000000000044f720 CR3: 000000000d57c006 CR4: 0000000000771ef0 [ 958.364876][T15880] PKRU: 55555554 [ 958.365002][T15880] Call Trace: [ 958.365107][T15880] [ 958.365175][T15880] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.365307][T15880] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.365465][T15880] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.365623][T15880] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.365756][T15880] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.366562][T15880] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.366703][T15880] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.366851][T15880] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.367274][T15880] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.367408][T15880] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.367555][T15880] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.367688][T15880] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.367845][T15880] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.367996][T15880] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.368132][T15880] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.368262][T15880] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.368394][T15880] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.368538][T15880] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.368673][T15880] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.368807][T15880] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.368944][T15880] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.369075][T15880] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.369205][T15880] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.369371][T15880] ? move_addr_to_kernel (net/socket.c:2511) [ 958.369518][T15880] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.369652][T15880] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.369787][T15880] ___sys_sendmsg (net/socket.c:2641) [ 958.369940][T15880] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.370081][T15880] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.370215][T15880] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.370350][T15880] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.370485][T15880] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.370621][T15880] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.370752][T15880] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.370883][T15880] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.371019][T15880] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.371156][T15880] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.371298][T15880] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.371477][T15880] RIP: 0033:0x7f2e7eb83c5e [ 958.371623][T15880] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.372123][T15880] RSP: 002b:00007ffd690163b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.372348][T15880] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2e7eb83c5e [ 958.372571][T15880] RDX: 0000000000000000 RSI: 00007ffd69016470 RDI: 0000000000000005 [ 958.372778][T15880] RBP: 00007ffd690163c0 R08: 0000000000000000 R09: 0000000000000000 [ 958.372982][T15880] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.373179][T15880] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 958.445188][T15886] ------------[ cut here ]------------ | [ 958.445387][T15886] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15886 | [ 958.445704][T15886] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.446607][T15886] Tainted: [W]=WARN [ 958.446763][T15886] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.447484][T15886] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.447676][T15886] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.448244][T15886] RSP: 0018:ffa0000004bf75d0 EFLAGS: 00010286 [ 958.448463][T15886] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1a4f [ 958.448726][T15886] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d278 [ 958.448997][T15886] RBP: 1ff400000097eebb R08: 1fe22000036f1a50 R09: fffa3bfffffb0b37 [ 958.449260][T15886] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78c3f4 [ 958.449525][T15886] R13: ff1100001b78c3c0 R14: ffffffff931c7940 R15: ff1100001b78d1c0 [ 958.449789][T15886] FS: 00007fc344b09440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 958.450087][T15886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.450318][T15886] CR2: 000000000044f720 CR3: 0000000018313001 CR4: 0000000000771ef0 [ 958.450592][T15886] PKRU: 55555554 [ 958.450752][T15886] Call Trace: [ 958.450932][T15886] [ 958.451058][T15886] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.451249][T15886] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.451450][T15886] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.451658][T15886] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.451855][T15886] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.452055][T15886] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.452249][T15886] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.452458][T15886] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.452656][T15886] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.452840][T15886] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.453049][T15886] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.453239][T15886] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.453442][T15886] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.453643][T15886] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.453827][T15886] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.454033][T15886] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.454234][T15886] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.454430][T15886] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.454658][T15886] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.454845][T15886] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.455054][T15886] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.455246][T15886] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.455454][T15886] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.455701][T15886] ? move_addr_to_kernel (net/socket.c:2511) [ 958.455905][T15886] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.456107][T15886] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.456308][T15886] ___sys_sendmsg (net/socket.c:2641) [ 958.456513][T15886] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.456715][T15886] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.456927][T15886] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.457124][T15886] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.457318][T15886] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.457545][T15886] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.457745][T15886] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.457948][T15886] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.458132][T15886] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.458396][T15886] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.458600][T15886] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.458815][T15886] RIP: 0033:0x7fc344c63c5e [ 958.459017][T15886] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.459648][T15886] RSP: 002b:00007fffceef2020 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.459996][T15886] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc344c63c5e [ 958.460260][T15886] RDX: 0000000000000000 RSI: 00007fffceef20e0 RDI: 0000000000000005 [ 958.460524][T15886] RBP: 00007fffceef2030 R08: 0000000000000000 R09: 0000000000000000 [ 958.460884][T15886] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.461145][T15886] R13: 0000000069cbe805 R14: 0000000000000004 R15: 000000000049d620 | [ 958.546760][T15890] ------------[ cut here ]------------ | [ 958.547562][T15890] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15890 | [ 958.547803][T15890] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.548625][T15890] Tainted: [W]=WARN [ 958.548728][T15890] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.548916][T15890] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.549071][T15890] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.549593][T15890] RSP: 0018:ffa0000004cd75d0 EFLAGS: 00010286 [ 958.549776][T15890] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000189788f [ 958.549995][T15890] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bc478 [ 958.550200][T15890] RBP: 1ff400000099aebb R08: 1fe2200001897890 R09: fffa3bfffffb0b37 [ 958.550419][T15890] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bc5b4 [ 958.550631][T15890] R13: ff1100000c4bc580 R14: ffffffff931c7940 R15: ff1100000c4bc3c0 [ 958.550830][T15890] FS: 00007f69f452e440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 958.551088][T15890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.551261][T15890] CR2: 000000000044f720 CR3: 000000001c0ca005 CR4: 0000000000771ef0 [ 958.551463][T15890] PKRU: 55555554 [ 958.551576][T15890] Call Trace: [ 958.551681][T15890] [ 958.551754][T15890] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.551904][T15890] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.552057][T15890] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.552191][T15890] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.552324][T15890] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.552458][T15890] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.552603][T15890] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.552737][T15890] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.552880][T15890] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.553024][T15890] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.553169][T15890] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.553300][T15890] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.553432][T15890] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.553589][T15890] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.553722][T15890] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.553860][T15890] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.553997][T15890] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.554140][T15890] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.554274][T15890] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.554406][T15890] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.554560][T15890] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.554701][T15890] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.554842][T15890] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.555026][T15890] ? move_addr_to_kernel (net/socket.c:2511) [ 958.555157][T15890] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.555291][T15890] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.555430][T15890] ___sys_sendmsg (net/socket.c:2641) [ 958.555570][T15890] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.555714][T15890] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.555856][T15890] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.556002][T15890] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.556149][T15890] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.556288][T15890] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.556420][T15890] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.556562][T15890] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.556698][T15890] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.556836][T15890] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.556973][T15890] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.557226][T15890] RIP: 0033:0x7f69f4688c5e [ 958.557394][T15890] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.557969][T15890] RSP: 002b:00007ffd76d218d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.558175][T15890] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f69f4688c5e [ 958.558481][T15890] RDX: 0000000000000000 RSI: 00007ffd76d21990 RDI: 0000000000000005 [ 958.558687][T15890] RBP: 00007ffd76d218e0 R08: 0000000000000000 R09: 0000000000000000 [ 958.558883][T15890] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.559174][T15890] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 958.628017][T15896] ------------[ cut here ]------------ | [ 958.628187][T15896] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15896 | [ 958.628424][T15896] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.629235][T15896] Tainted: [W]=WARN [ 958.629340][T15896] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.629523][T15896] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.629677][T15896] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.630174][T15896] RSP: 0018:ffa0000004ca75d0 EFLAGS: 00010286 [ 958.630348][T15896] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897a4f [ 958.630554][T15896] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd278 [ 958.630753][T15896] RBP: 1ff4000000994ebb R08: 1fe2200001897a50 R09: fffa3bfffffb0b37 [ 958.630961][T15896] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd8f4 [ 958.631161][T15896] R13: ff1100000c4bd8c0 R14: ffffffff931c7940 R15: ff1100000c4bd1c0 [ 958.631358][T15896] FS: 00007f9b7e68d440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 958.631601][T15896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.631817][T15896] CR2: 000000000044f720 CR3: 000000001cfe1004 CR4: 0000000000771ef0 [ 958.632053][T15896] PKRU: 55555554 [ 958.632154][T15896] Call Trace: [ 958.632251][T15896] [ 958.632319][T15896] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.632457][T15896] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.632606][T15896] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.632737][T15896] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.632867][T15896] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.633003][T15896] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.633136][T15896] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.633268][T15896] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.633401][T15896] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.633545][T15896] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.633680][T15896] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.633819][T15896] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.633974][T15896] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.634109][T15896] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.634246][T15896] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.634377][T15896] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.634517][T15896] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.634652][T15896] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.634785][T15896] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.634932][T15896] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.635064][T15896] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.635193][T15896] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.635324][T15896] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.635494][T15896] ? move_addr_to_kernel (net/socket.c:2511) [ 958.635627][T15896] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.635756][T15896] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.635891][T15896] ___sys_sendmsg (net/socket.c:2641) [ 958.636031][T15896] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.636166][T15896] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.636299][T15896] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.636441][T15896] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.636575][T15896] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.636709][T15896] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.636839][T15896] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.637026][T15896] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.637160][T15896] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.637295][T15896] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.637427][T15896] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.637599][T15896] RIP: 0033:0x7f9b7e7e7c5e [ 958.637743][T15896] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.638277][T15896] RSP: 002b:00007ffcd8089af0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.638482][T15896] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9b7e7e7c5e [ 958.638678][T15896] RDX: 0000000000000000 RSI: 00007ffcd8089bb0 RDI: 0000000000000005 [ 958.638872][T15896] RBP: 00007ffcd8089b00 R08: 0000000000000000 R09: 0000000000000000 [ 958.639125][T15896] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.639320][T15896] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 958.719355][T15900] ------------[ cut here ]------------ | [ 958.719516][T15900] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15900 | [ 958.719780][T15900] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.720581][T15900] Tainted: [W]=WARN [ 958.720681][T15900] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.720845][T15900] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.720994][T15900] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.721476][T15900] RSP: 0018:ffa0000004cc75d0 EFLAGS: 00010286 [ 958.721666][T15900] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000372588f [ 958.721877][T15900] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c478 [ 958.722079][T15900] RBP: 1ff4000000998ebb R08: 1fe2200003725890 R09: fffa3bfffffb0b37 [ 958.722279][T15900] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c234 [ 958.722479][T15900] R13: ff1100001b92c200 R14: ffffffff931c7940 R15: ff1100001b92c3c0 [ 958.722689][T15900] FS: 00007fa624138440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 958.722935][T15900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.723118][T15900] CR2: 000000000044f720 CR3: 000000001a056006 CR4: 0000000000771ef0 [ 958.723327][T15900] PKRU: 55555554 [ 958.723438][T15900] Call Trace: [ 958.723546][T15900] [ 958.723613][T15900] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.723748][T15900] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.723900][T15900] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.724036][T15900] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.724169][T15900] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.724305][T15900] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.724440][T15900] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.724576][T15900] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.724706][T15900] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.724861][T15900] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.725612][T15900] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.725753][T15900] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.726054][T15900] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.726199][T15900] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.726331][T15900] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.726478][T15900] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.726619][T15900] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.726752][T15900] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.726993][T15900] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.727131][T15900] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.727278][T15900] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.727408][T15900] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.727556][T15900] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.727724][T15900] ? move_addr_to_kernel (net/socket.c:2511) [ 958.727856][T15900] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.728091][T15900] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.728225][T15900] ___sys_sendmsg (net/socket.c:2641) [ 958.728359][T15900] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.728511][T15900] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.728651][T15900] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.728786][T15900] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.729012][T15900] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.729157][T15900] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.729289][T15900] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.729431][T15900] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.729582][T15900] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.729714][T15900] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.729854][T15900] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.730115][T15900] RIP: 0033:0x7fa624292c5e [ 958.730265][T15900] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.730746][T15900] RSP: 002b:00007ffefff585f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.731045][T15900] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa624292c5e [ 958.731248][T15900] RDX: 0000000000000000 RSI: 00007ffefff586b0 RDI: 0000000000000005 [ 958.731448][T15900] RBP: 00007ffefff58600 R08: 0000000000000000 R09: 0000000000000000 [ 958.731651][T15900] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.731848][T15900] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 958.804976][T15906] ------------[ cut here ]------------ | [ 958.805142][T15906] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15906 | [ 958.805401][T15906] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.806224][T15906] Tainted: [W]=WARN [ 958.806334][T15906] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.806514][T15906] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.806659][T15906] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.807175][T15906] RSP: 0018:ffa0000004ba75d0 EFLAGS: 00010286 [ 958.807361][T15906] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000037259df [ 958.807583][T15906] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92cef8 [ 958.807797][T15906] RBP: 1ff4000000974ebb R08: 1fe22000037259e0 R09: fffa3bfffffb0b37 [ 958.808013][T15906] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c5b4 [ 958.808229][T15906] R13: ff1100001b92c580 R14: ffffffff931c7940 R15: ff1100001b92ce40 [ 958.808441][T15906] FS: 00007f40039eb440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 958.808691][T15906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.808868][T15906] CR2: 000000000044f720 CR3: 0000000018047006 CR4: 0000000000771ef0 [ 958.809096][T15906] PKRU: 55555554 [ 958.809200][T15906] Call Trace: [ 958.809307][T15906] [ 958.809383][T15906] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.809535][T15906] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.809688][T15906] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.809832][T15906] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.810451][T15906] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.810600][T15906] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.810731][T15906] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.810864][T15906] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.811004][T15906] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.811138][T15906] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.811271][T15906] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.811404][T15906] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.811555][T15906] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.811687][T15906] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.811819][T15906] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.811958][T15906] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.812092][T15906] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.812224][T15906] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.812374][T15906] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.812522][T15906] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.812662][T15906] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.812802][T15906] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.812944][T15906] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.813118][T15906] ? move_addr_to_kernel (net/socket.c:2511) [ 958.813257][T15906] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.813397][T15906] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.813543][T15906] ___sys_sendmsg (net/socket.c:2641) [ 958.813680][T15906] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.813825][T15906] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.813965][T15906] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.814099][T15906] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.814230][T15906] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.814373][T15906] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.814516][T15906] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.814661][T15906] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.814802][T15906] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.814943][T15906] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.815075][T15906] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.815239][T15906] RIP: 0033:0x7f4003b45c5e [ 958.815387][T15906] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.816047][T15906] RSP: 002b:00007ffeccdb6810 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.816258][T15906] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4003b45c5e [ 958.816455][T15906] RDX: 0000000000000000 RSI: 00007ffeccdb68d0 RDI: 0000000000000005 [ 958.816691][T15906] RBP: 00007ffeccdb6820 R08: 0000000000000000 R09: 0000000000000000 [ 958.816901][T15906] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.817099][T15906] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 958.893580][T15910] ------------[ cut here ]------------ | [ 958.893762][T15910] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15910 | [ 958.894574][T15910] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.895421][T15910] Tainted: [W]=WARN [ 958.895538][T15910] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.895719][T15910] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.895898][T15910] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.896423][T15910] RSP: 0018:ffa0000004d075d0 EFLAGS: 00010286 [ 958.896601][T15910] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eb67 [ 958.896812][T15910] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c975b38 [ 958.897028][T15910] RBP: 1ff40000009a0ebb R08: 1fe220000192eb68 R09: fffa3bfffffb0b37 [ 958.897232][T15910] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d734 [ 958.897430][T15910] R13: ff1100001b92d700 R14: ffffffff931c7940 R15: ff1100000c975a80 [ 958.897641][T15910] FS: 00007f75a4830440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 958.897882][T15910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.898062][T15910] CR2: 000000000044f720 CR3: 000000001a692004 CR4: 0000000000771ef0 [ 958.898295][T15910] PKRU: 55555554 [ 958.898406][T15910] Call Trace: [ 958.898520][T15910] [ 958.898589][T15910] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.898727][T15910] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.898873][T15910] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.899019][T15910] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.899158][T15910] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.899303][T15910] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.899441][T15910] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.899586][T15910] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.899729][T15910] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.899869][T15910] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.900024][T15910] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.900155][T15910] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.900287][T15910] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.900417][T15910] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.900550][T15910] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.900686][T15910] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.900825][T15910] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.900966][T15910] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.901098][T15910] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.901232][T15910] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.901365][T15910] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.901504][T15910] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.901639][T15910] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.901816][T15910] ? move_addr_to_kernel (net/socket.c:2511) [ 958.901984][T15910] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.902125][T15910] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.902271][T15910] ___sys_sendmsg (net/socket.c:2641) [ 958.902415][T15910] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.902589][T15910] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.902846][T15910] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.903513][T15910] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.903647][T15910] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.903786][T15910] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.903971][T15910] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.904143][T15910] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.904300][T15910] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.904441][T15910] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.904623][T15910] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.904818][T15910] RIP: 0033:0x7f75a498ac5e [ 958.904990][T15910] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.905508][T15910] RSP: 002b:00007ffe830621a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.905723][T15910] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f75a498ac5e [ 958.905937][T15910] RDX: 0000000000000000 RSI: 00007ffe83062260 RDI: 0000000000000005 [ 958.906155][T15910] RBP: 00007ffe830621b0 R08: 0000000000000000 R09: 0000000000000000 [ 958.906359][T15910] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.906580][T15910] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 958.985021][T15916] ------------[ cut here ]------------ | [ 958.985201][T15916] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15916 | [ 958.985447][T15916] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 958.986263][T15916] Tainted: [W]=WARN [ 958.986371][T15916] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 958.986555][T15916] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 958.986706][T15916] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 958.987573][T15916] RSP: 0018:ffa0000004d275d0 EFLAGS: 00010286 [ 958.987746][T15916] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e81f [ 958.987963][T15916] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9740f8 [ 958.988160][T15916] RBP: 1ff40000009a4ebb R08: 1fe220000192e820 R09: fffa3bfffffb0b37 [ 958.988361][T15916] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975574 [ 958.988576][T15916] R13: ff1100000c975540 R14: ffffffff931c7940 R15: ff1100000c974040 [ 958.988778][T15916] FS: 00007fda126de440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 958.989028][T15916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.989208][T15916] CR2: 000000000044f720 CR3: 000000001abf9002 CR4: 0000000000771ef0 [ 958.989418][T15916] PKRU: 55555554 [ 958.989531][T15916] Call Trace: [ 958.989635][T15916] [ 958.989711][T15916] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 958.989852][T15916] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 958.990004][T15916] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 958.990142][T15916] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.990279][T15916] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.990421][T15916] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 958.990565][T15916] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 958.990708][T15916] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 958.990844][T15916] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 958.990988][T15916] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 958.991130][T15916] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 958.991266][T15916] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 958.991405][T15916] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 958.991550][T15916] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 958.991692][T15916] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 958.991832][T15916] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 958.991975][T15916] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.992120][T15916] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 958.992265][T15916] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 958.992405][T15916] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 958.992553][T15916] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 958.992693][T15916] ? copy_msghdr_from_user (net/socket.c:2525) [ 958.992832][T15916] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 958.993008][T15916] ? move_addr_to_kernel (net/socket.c:2511) [ 958.993146][T15916] ? filemap_map_folio_range (mm/filemap.c:3873) [ 958.993288][T15916] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 958.993428][T15916] ___sys_sendmsg (net/socket.c:2641) [ 958.993569][T15916] ? copy_msghdr_from_user (net/socket.c:2628) [ 958.993724][T15916] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 958.993870][T15916] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 958.994022][T15916] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 958.994167][T15916] ? __sys_sendmsg_sock (net/socket.c:2656) [ 958.994309][T15916] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 958.994448][T15916] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.994591][T15916] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 958.994730][T15916] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 958.994868][T15916] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 958.995013][T15916] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 958.995211][T15916] RIP: 0033:0x7fda12838c5e [ 958.995370][T15916] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 958.995901][T15916] RSP: 002b:00007fff210da980 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 958.996116][T15916] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fda12838c5e [ 958.996327][T15916] RDX: 0000000000000000 RSI: 00007fff210daa40 RDI: 0000000000000005 [ 958.996547][T15916] RBP: 00007fff210da990 R08: 0000000000000000 R09: 0000000000000000 [ 958.996762][T15916] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 958.996975][T15916] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 959.056919][T15920] ------------[ cut here ]------------ | [ 959.057091][T15920] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15920 | [ 959.057377][T15920] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.058178][T15920] Tainted: [W]=WARN [ 959.058282][T15920] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.058450][T15920] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.058595][T15920] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.059071][T15920] RSP: 0018:ffa0000004d375d0 EFLAGS: 00010286 [ 959.059242][T15920] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0801f [ 959.059443][T15920] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8400f8 [ 959.059649][T15920] RBP: 1ff40000009a6ebb R08: 1fe2200001b08020 R09: fffa3bfffffb0b37 [ 959.059845][T15920] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840234 [ 959.060049][T15920] R13: ff1100000d840200 R14: ffffffff931c7940 R15: ff1100000d840040 [ 959.060247][T15920] FS: 00007f49d9363440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 959.060486][T15920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.060655][T15920] CR2: 000000000044f720 CR3: 000000000c575001 CR4: 0000000000771ef0 [ 959.060860][T15920] PKRU: 55555554 [ 959.060967][T15920] Call Trace: [ 959.061067][T15920] [ 959.061136][T15920] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.061270][T15920] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.061409][T15920] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.061550][T15920] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.061680][T15920] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.061814][T15920] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.061949][T15920] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.062081][T15920] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.062212][T15920] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.062343][T15920] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.062480][T15920] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.062613][T15920] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.062748][T15920] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.062880][T15920] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.063017][T15920] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.063149][T15920] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.063282][T15920] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.063415][T15920] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.063561][T15920] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.063693][T15920] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.063828][T15920] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.064037][T15920] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.064170][T15920] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.064344][T15920] ? move_addr_to_kernel (net/socket.c:2511) [ 959.064484][T15920] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.064618][T15920] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.064751][T15920] ___sys_sendmsg (net/socket.c:2641) [ 959.064889][T15920] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.065111][T15920] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.065246][T15920] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.065387][T15920] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.065522][T15920] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.065662][T15920] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.065795][T15920] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.065997][T15920] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.066131][T15920] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.066262][T15920] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.066482][T15920] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.066651][T15920] RIP: 0033:0x7f49d94bdc5e [ 959.066792][T15920] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.067429][T15920] RSP: 002b:00007ffe670cc440 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.067658][T15920] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f49d94bdc5e [ 959.067860][T15920] RDX: 0000000000000000 RSI: 00007ffe670cc500 RDI: 0000000000000005 [ 959.068223][T15920] RBP: 00007ffe670cc450 R08: 0000000000000000 R09: 0000000000000000 [ 959.068421][T15920] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.068626][T15920] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 959.154196][T15926] ------------[ cut here ]------------ | [ 959.154379][T15926] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15926 | [ 959.154633][T15926] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.155446][T15926] Tainted: [W]=WARN [ 959.155558][T15926] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.155908][T15926] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.156055][T15926] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.156541][T15926] RSP: 0018:ffa0000004c375d0 EFLAGS: 00010286 [ 959.156727][T15926] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0839f [ 959.156935][T15926] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841cf8 [ 959.157137][T15926] RBP: 1ff4000000986ebb R08: 1fe2200001b083a0 R09: fffa3bfffffb0b37 [ 959.157332][T15926] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d841e34 [ 959.157559][T15926] R13: ff1100000d841e00 R14: ffffffff931c7940 R15: ff1100000d841c40 [ 959.157770][T15926] FS: 00007f101587a440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 959.158030][T15926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.158199][T15926] CR2: 000000000044f720 CR3: 000000000c575004 CR4: 0000000000771ef0 [ 959.158426][T15926] PKRU: 55555554 [ 959.158535][T15926] Call Trace: [ 959.158635][T15926] [ 959.158707][T15926] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.158842][T15926] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.159022][T15926] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.159169][T15926] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.159309][T15926] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.159461][T15926] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.159604][T15926] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.159742][T15926] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.159906][T15926] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.160054][T15926] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.160194][T15926] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.160330][T15926] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.160480][T15926] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.160625][T15926] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.160774][T15926] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.160919][T15926] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.161064][T15926] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.161197][T15926] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.161337][T15926] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.161478][T15926] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.161654][T15926] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.161801][T15926] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.162018][T15926] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.162194][T15926] ? move_addr_to_kernel (net/socket.c:2511) [ 959.162341][T15926] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.162473][T15926] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.162621][T15926] ___sys_sendmsg (net/socket.c:2641) [ 959.162764][T15926] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.162984][T15926] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.163128][T15926] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.163274][T15926] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.163406][T15926] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.163563][T15926] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.163697][T15926] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.163849][T15926] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.164063][T15926] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.164201][T15926] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.164337][T15926] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.164521][T15926] RIP: 0033:0x7f10159d4c5e [ 959.164669][T15926] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.165245][T15926] RSP: 002b:00007ffe060c72a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.165448][T15926] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f10159d4c5e [ 959.165658][T15926] RDX: 0000000000000000 RSI: 00007ffe060c7360 RDI: 0000000000000005 [ 959.165858][T15926] RBP: 00007ffe060c72b0 R08: 0000000000000000 R09: 0000000000000000 [ 959.166128][T15926] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.166347][T15926] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 959.232638][T15930] ------------[ cut here ]------------ | [ 959.232829][T15930] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15930 | [ 959.233093][T15930] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.233922][T15930] Tainted: [W]=WARN [ 959.234025][T15930] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.234348][T15930] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.234499][T15930] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.235000][T15930] RSP: 0018:ffa0000004d075d0 EFLAGS: 00010286 [ 959.235177][T15930] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038752bf [ 959.235405][T15930] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a95f8 [ 959.235623][T15930] RBP: 1ff40000009a0ebb R08: 1fe22000038752c0 R09: fffa3bfffffb0b37 [ 959.235825][T15930] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9c74 [ 959.236038][T15930] R13: ff1100001c3a9c40 R14: ffffffff931c7940 R15: ff1100001c3a9540 [ 959.236284][T15930] FS: 00007fd75f9be440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 959.236549][T15930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.236734][T15930] CR2: 000000000044f720 CR3: 000000000c575001 CR4: 0000000000771ef0 [ 959.236962][T15930] PKRU: 55555554 [ 959.237081][T15930] Call Trace: [ 959.237197][T15930] [ 959.237271][T15930] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.237427][T15930] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.237601][T15930] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.237748][T15930] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.237900][T15930] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.238046][T15930] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.238191][T15930] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.238334][T15930] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.238474][T15930] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.238621][T15930] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.238779][T15930] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.238930][T15930] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.239077][T15930] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.239221][T15930] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.239360][T15930] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.239518][T15930] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.239657][T15930] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.239792][T15930] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.240029][T15930] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.240183][T15930] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.240341][T15930] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.240487][T15930] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.240628][T15930] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.240795][T15930] ? move_addr_to_kernel (net/socket.c:2511) [ 959.241026][T15930] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.241172][T15930] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.241316][T15930] ___sys_sendmsg (net/socket.c:2641) [ 959.241454][T15930] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.241604][T15930] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.241771][T15930] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.241977][T15930] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.242112][T15930] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.242260][T15930] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.242397][T15930] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.242547][T15930] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.242687][T15930] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.242841][T15930] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.243032][T15930] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.243210][T15930] RIP: 0033:0x7fd75fb18c5e [ 959.243386][T15930] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.243888][T15930] RSP: 002b:00007ffda0856720 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.244169][T15930] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd75fb18c5e [ 959.244398][T15930] RDX: 0000000000000000 RSI: 00007ffda08567e0 RDI: 0000000000000005 [ 959.244612][T15930] RBP: 00007ffda0856730 R08: 0000000000000000 R09: 0000000000000000 [ 959.244815][T15930] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.245085][T15930] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 959.340448][T15936] ------------[ cut here ]------------ | [ 959.340677][T15936] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15936 | [ 959.340984][T15936] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.341881][T15936] Tainted: [W]=WARN [ 959.342076][T15936] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.342302][T15936] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.342513][T15936] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.343071][T15936] RSP: 0018:ffa0000004d575d0 EFLAGS: 00010286 [ 959.343295][T15936] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003875367 [ 959.343559][T15936] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9b38 [ 959.343811][T15936] RBP: 1ff40000009aaebb R08: 1fe2200003875368 R09: fffa3bfffffb0b37 [ 959.344078][T15936] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a98f4 [ 959.344331][T15936] R13: ff1100001c3a98c0 R14: ffffffff931c7940 R15: ff1100001c3a9a80 [ 959.344594][T15936] FS: 00007fcda484e440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 959.344886][T15936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.345120][T15936] CR2: 000000000044f720 CR3: 0000000019bc5006 CR4: 0000000000771ef0 [ 959.345374][T15936] PKRU: 55555554 [ 959.345532][T15936] Call Trace: [ 959.345684][T15936] [ 959.345804][T15936] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.346006][T15936] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.346202][T15936] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.346392][T15936] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.346596][T15936] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.346796][T15936] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.347004][T15936] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.347195][T15936] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.347393][T15936] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.347589][T15936] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.347780][T15936] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.347982][T15936] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.348170][T15936] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.348357][T15936] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.348557][T15936] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.348756][T15936] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.348952][T15936] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.349152][T15936] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.349353][T15936] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.349557][T15936] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.349755][T15936] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.349958][T15936] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.350154][T15936] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.350373][T15936] ? move_addr_to_kernel (net/socket.c:2511) [ 959.350569][T15936] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.350764][T15936] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.350978][T15936] ___sys_sendmsg (net/socket.c:2641) [ 959.351170][T15936] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.351369][T15936] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.351575][T15936] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.351787][T15936] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.352011][T15936] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.352222][T15936] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.352421][T15936] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.352625][T15936] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.352832][T15936] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.353049][T15936] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.353257][T15936] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.353503][T15936] RIP: 0033:0x7fcda49a8c5e [ 959.353722][T15936] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.354304][T15936] RSP: 002b:00007ffe1f22c640 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.354580][T15936] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcda49a8c5e [ 959.354835][T15936] RDX: 0000000000000000 RSI: 00007ffe1f22c700 RDI: 0000000000000005 [ 959.355124][T15936] RBP: 00007ffe1f22c650 R08: 0000000000000000 R09: 0000000000000000 [ 959.355384][T15936] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.355644][T15936] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 959.424728][T15940] ------------[ cut here ]------------ | [ 959.425422][T15940] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15940 | [ 959.426077][T15940] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.427185][T15940] Tainted: [W]=WARN [ 959.427449][T15940] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.427780][T15940] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.428109][T15940] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.428732][T15940] RSP: 0018:ffa0000004d275d0 EFLAGS: 00010286 [ 959.429029][T15940] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0537 [ 959.429370][T15940] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5029b8 [ 959.429715][T15940] RBP: 1ff40000009a4ebb R08: 1fe2200001ea0538 R09: fffa3bfffffb0b37 [ 959.430055][T15940] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503c74 [ 959.430422][T15940] R13: ff1100000f503c40 R14: ffffffff931c7940 R15: ff1100000f502900 [ 959.430769][T15940] FS: 00007f8a4a231440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 959.431093][T15940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.431364][T15940] CR2: 000000000044f720 CR3: 0000000019bc5004 CR4: 0000000000771ef0 [ 959.431624][T15940] PKRU: 55555554 [ 959.431786][T15940] Call Trace: [ 959.431970][T15940] [ 959.432091][T15940] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.432284][T15940] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.432526][T15940] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.432748][T15940] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.432950][T15940] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.433163][T15940] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.433388][T15940] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.433595][T15940] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.433781][T15940] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.433982][T15940] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.434168][T15940] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.434350][T15940] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.434547][T15940] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.434733][T15940] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.434936][T15940] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.435135][T15940] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.435325][T15940] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.435530][T15940] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.435729][T15940] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.435928][T15940] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.436115][T15940] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.436314][T15940] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.436509][T15940] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.436724][T15940] ? move_addr_to_kernel (net/socket.c:2511) [ 959.436923][T15940] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.437109][T15940] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.437303][T15940] ___sys_sendmsg (net/socket.c:2641) [ 959.437501][T15940] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.437716][T15940] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.437928][T15940] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.438118][T15940] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.438306][T15940] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.438499][T15940] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.438686][T15940] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.438885][T15940] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.439094][T15940] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.439292][T15940] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.439488][T15940] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.439714][T15940] RIP: 0033:0x7f8a4a38bc5e [ 959.439921][T15940] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.440459][T15940] RSP: 002b:00007ffd91ff8600 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.440739][T15940] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8a4a38bc5e [ 959.441011][T15940] RDX: 0000000000000000 RSI: 00007ffd91ff86c0 RDI: 0000000000000005 [ 959.441272][T15940] RBP: 00007ffd91ff8610 R08: 0000000000000000 R09: 0000000000000000 [ 959.441529][T15940] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.441776][T15940] R13: 0000000069cbe806 R14: 0000000000000004 R15: 000000000049d620 | [ 959.525635][T15946] ------------[ cut here ]------------ | [ 959.525803][T15946] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15946 | [ 959.526753][T15946] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.527664][T15946] Tainted: [W]=WARN [ 959.527774][T15946] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.527981][T15946] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.528133][T15946] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.528659][T15946] RSP: 0018:ffa0000004d475d0 EFLAGS: 00010286 [ 959.528835][T15946] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0617 [ 959.529048][T15946] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5030b8 [ 959.529255][T15946] RBP: 1ff40000009a8ebb R08: 1fe2200001ea0618 R09: fffa3bfffffb0b37 [ 959.529467][T15946] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503574 [ 959.529709][T15946] R13: ff1100000f503540 R14: ffffffff931c7940 R15: ff1100000f503000 [ 959.529922][T15946] FS: 00007f9cd8c60440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 959.530156][T15946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.530326][T15946] CR2: 000000000044f720 CR3: 000000001b5fe003 CR4: 0000000000771ef0 [ 959.530537][T15946] PKRU: 55555554 [ 959.530655][T15946] Call Trace: [ 959.530761][T15946] [ 959.530834][T15946] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.530978][T15946] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.531126][T15946] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.531278][T15946] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.531420][T15946] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.531576][T15946] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.531732][T15946] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.531876][T15946] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.532025][T15946] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.532179][T15946] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.532328][T15946] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.532462][T15946] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.532614][T15946] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.532755][T15946] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.532905][T15946] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.533055][T15946] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.533208][T15946] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.533352][T15946] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.533509][T15946] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.533694][T15946] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.533845][T15946] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.533996][T15946] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.534139][T15946] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.534339][T15946] ? move_addr_to_kernel (net/socket.c:2511) [ 959.534522][T15946] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.534661][T15946] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.534816][T15946] ___sys_sendmsg (net/socket.c:2641) [ 959.534964][T15946] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.535131][T15946] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.535277][T15946] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.535424][T15946] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.535592][T15946] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.535754][T15946] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.535890][T15946] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.536030][T15946] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.536168][T15946] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.536313][T15946] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.536452][T15946] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.536631][T15946] RIP: 0033:0x7f9cd8dbac5e [ 959.536789][T15946] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.537331][T15946] RSP: 002b:00007ffe5ce29130 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.537571][T15946] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9cd8dbac5e [ 959.537779][T15946] RDX: 0000000000000000 RSI: 00007ffe5ce291f0 RDI: 0000000000000005 [ 959.537983][T15946] RBP: 00007ffe5ce29140 R08: 0000000000000000 R09: 0000000000000000 [ 959.538183][T15946] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.538438][T15946] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 959.605051][T15950] ------------[ cut here ]------------ | [ 959.605215][T15950] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15950 | [ 959.605465][T15950] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.606676][T15950] Tainted: [W]=WARN [ 959.606784][T15950] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.606966][T15950] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.607115][T15950] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.607622][T15950] RSP: 0018:ffa0000004d075d0 EFLAGS: 00010286 [ 959.607802][T15950] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1b67 [ 959.608019][T15950] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78db38 [ 959.608228][T15950] RBP: 1ff40000009a0ebb R08: 1fe22000036f1b68 R09: fffa3bfffffb0b37 [ 959.608442][T15950] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78ce74 [ 959.608666][T15950] R13: ff1100001b78ce40 R14: ffffffff931c7940 R15: ff1100001b78da80 [ 959.608877][T15950] FS: 00007f0e4a9b4440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 959.609140][T15950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.609312][T15950] CR2: 000000000044f720 CR3: 000000001b5fe002 CR4: 0000000000771ef0 [ 959.609519][T15950] PKRU: 55555554 [ 959.609632][T15950] Call Trace: [ 959.609737][T15950] [ 959.609810][T15950] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.609962][T15950] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.610108][T15950] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.610243][T15950] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.610388][T15950] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.610541][T15950] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.610676][T15950] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.610815][T15950] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.610955][T15950] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.611089][T15950] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.611224][T15950] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.611365][T15950] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.611527][T15950] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.611669][T15950] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.611807][T15950] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.611958][T15950] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.612095][T15950] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.612229][T15950] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.612364][T15950] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.612504][T15950] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.612641][T15950] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.612774][T15950] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.612911][T15950] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.613088][T15950] ? move_addr_to_kernel (net/socket.c:2511) [ 959.613231][T15950] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.613372][T15950] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.613530][T15950] ___sys_sendmsg (net/socket.c:2641) [ 959.613695][T15950] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.613844][T15950] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.614003][T15950] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.614154][T15950] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.614307][T15950] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.614445][T15950] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.614582][T15950] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.614716][T15950] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.614848][T15950] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.614987][T15950] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.615120][T15950] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.615287][T15950] RIP: 0033:0x7f0e4ab0ec5e [ 959.615428][T15950] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.615929][T15950] RSP: 002b:00007ffe957879c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.616140][T15950] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0e4ab0ec5e [ 959.616339][T15950] RDX: 0000000000000000 RSI: 00007ffe95787a80 RDI: 0000000000000005 [ 959.616547][T15950] RBP: 00007ffe957879d0 R08: 0000000000000000 R09: 0000000000000000 [ 959.616745][T15950] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.616949][T15950] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 959.706350][T15956] ------------[ cut here ]------------ | [ 959.706525][T15956] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15956 | [ 959.706762][T15956] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.707564][T15956] Tainted: [W]=WARN [ 959.707670][T15956] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.707873][T15956] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.708048][T15956] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.708581][T15956] RSP: 0018:ffa0000004db75d0 EFLAGS: 00010286 [ 959.708782][T15956] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1857 [ 959.708991][T15956] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c2b8 [ 959.709197][T15956] RBP: 1ff40000009b6ebb R08: 1fe22000036f1858 R09: fffa3bfffffb0b37 [ 959.709402][T15956] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78c5b4 [ 959.709614][T15956] R13: ff1100001b78c580 R14: ffffffff931c7940 R15: ff1100001b78c200 [ 959.709818][T15956] FS: 00007ff14a598440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 959.710066][T15956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.710238][T15956] CR2: 000000000044f720 CR3: 0000000018070004 CR4: 0000000000771ef0 [ 959.710445][T15956] PKRU: 55555554 [ 959.710558][T15956] Call Trace: [ 959.710719][T15956] [ 959.710793][T15956] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.710949][T15956] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.711110][T15956] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.711302][T15956] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.711435][T15956] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.711614][T15956] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.711774][T15956] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.711915][T15956] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.712049][T15956] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.712184][T15956] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.712327][T15956] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.712466][T15956] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.712608][T15956] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.712748][T15956] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.712884][T15956] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.713022][T15956] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.713160][T15956] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.713301][T15956] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.713435][T15956] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.713582][T15956] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.713720][T15956] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.713856][T15956] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.714003][T15956] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.714175][T15956] ? move_addr_to_kernel (net/socket.c:2511) [ 959.714315][T15956] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.714489][T15956] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.714634][T15956] ___sys_sendmsg (net/socket.c:2641) [ 959.714775][T15956] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.714927][T15956] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.715087][T15956] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.715246][T15956] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.715389][T15956] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.715538][T15956] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.715745][T15956] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.715885][T15956] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.716029][T15956] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.716170][T15956] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.716303][T15956] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.716473][T15956] RIP: 0033:0x7ff14a6f2c5e [ 959.716621][T15956] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.717107][T15956] RSP: 002b:00007ffd17a695f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.717314][T15956] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff14a6f2c5e [ 959.717518][T15956] RDX: 0000000000000000 RSI: 00007ffd17a696b0 RDI: 0000000000000005 [ 959.717718][T15956] RBP: 00007ffd17a69600 R08: 0000000000000000 R09: 0000000000000000 [ 959.717923][T15956] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.718122][T15956] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 959.779366][T15960] ------------[ cut here ]------------ | [ 959.779588][T15960] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15960 | [ 959.779889][T15960] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.780821][T15960] Tainted: [W]=WARN [ 959.781437][T15960] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.781709][T15960] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.781931][T15960] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.782451][T15960] RSP: 0018:ffa0000004dd75d0 EFLAGS: 00010286 [ 959.782696][T15960] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e9df [ 959.782978][T15960] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974ef8 [ 959.783236][T15960] RBP: 1ff40000009baebb R08: 1fe220000192e9e0 R09: fffa3bfffffb0b37 [ 959.783517][T15960] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9751f4 [ 959.783771][T15960] R13: ff1100000c9751c0 R14: ffffffff931c7940 R15: ff1100000c974e40 [ 959.784037][T15960] FS: 00007ff353f06440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 959.784322][T15960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.784552][T15960] CR2: 000000000044f720 CR3: 0000000010593006 CR4: 0000000000771ef0 [ 959.784803][T15960] PKRU: 55555554 [ 959.784965][T15960] Call Trace: [ 959.785116][T15960] [ 959.785234][T15960] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.785416][T15960] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.785651][T15960] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.785884][T15960] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.786119][T15960] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.786347][T15960] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.786574][T15960] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.786778][T15960] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.786980][T15960] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.787167][T15960] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.787360][T15960] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.787549][T15960] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.787744][T15960] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.787942][T15960] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.788122][T15960] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.788310][T15960] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.788499][T15960] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.788688][T15960] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.788872][T15960] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.789068][T15960] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.789256][T15960] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.789445][T15960] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.789640][T15960] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.789861][T15960] ? move_addr_to_kernel (net/socket.c:2511) [ 959.790084][T15960] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.790287][T15960] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.790509][T15960] ___sys_sendmsg (net/socket.c:2641) [ 959.790693][T15960] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.790879][T15960] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.791078][T15960] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.791262][T15960] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.791449][T15960] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.791657][T15960] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.791846][T15960] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.792048][T15960] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.792238][T15960] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.792425][T15960] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.792623][T15960] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.792847][T15960] RIP: 0033:0x7ff354060c5e [ 959.793059][T15960] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.793599][T15960] RSP: 002b:00007ffc43490ba0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.793855][T15960] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff354060c5e [ 959.794123][T15960] RDX: 0000000000000000 RSI: 00007ffc43490c60 RDI: 0000000000000005 [ 959.794378][T15960] RBP: 00007ffc43490bb0 R08: 0000000000000000 R09: 0000000000000000 [ 959.794641][T15960] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.794908][T15960] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 959.880787][T15966] ------------[ cut here ]------------ | [ 959.880967][T15966] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15966 | [ 959.881254][T15966] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.882060][T15966] Tainted: [W]=WARN [ 959.882193][T15966] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.882375][T15966] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.882529][T15966] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.883079][T15966] RSP: 0018:ffa0000004e075d0 EFLAGS: 00010286 [ 959.883279][T15966] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000189796f [ 959.883502][T15966] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bcb78 [ 959.883707][T15966] RBP: 1ff40000009c0ebb R08: 1fe2200001897970 R09: fffa3bfffffb0b37 [ 959.883909][T15966] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bc934 [ 959.884122][T15966] R13: ff1100000c4bc900 R14: ffffffff931c7940 R15: ff1100000c4bcac0 [ 959.884348][T15966] FS: 00007f158b3c4440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 959.884595][T15966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.884771][T15966] CR2: 000000000044f720 CR3: 000000000501b004 CR4: 0000000000771ef0 [ 959.884993][T15966] PKRU: 55555554 [ 959.885097][T15966] Call Trace: [ 959.885204][T15966] [ 959.885272][T15966] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.885406][T15966] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.885569][T15966] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.885709][T15966] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.885851][T15966] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.886001][T15966] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.886142][T15966] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.886287][T15966] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.886432][T15966] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.886576][T15966] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.886723][T15966] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.886859][T15966] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.887012][T15966] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.887150][T15966] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.887295][T15966] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.887436][T15966] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.887591][T15966] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.887739][T15966] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.887885][T15966] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.888040][T15966] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.888181][T15966] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.888324][T15966] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.888462][T15966] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.888641][T15966] ? move_addr_to_kernel (net/socket.c:2511) [ 959.888784][T15966] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.888935][T15966] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.889078][T15966] ___sys_sendmsg (net/socket.c:2641) [ 959.889219][T15966] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.889368][T15966] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.889515][T15966] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.889667][T15966] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.889840][T15966] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.890068][T15966] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.890402][T15966] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.890543][T15966] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.890677][T15966] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.890817][T15966] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.891014][T15966] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.891183][T15966] RIP: 0033:0x7f158b51ec5e [ 959.891325][T15966] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.891820][T15966] RSP: 002b:00007ffc78136000 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.892120][T15966] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f158b51ec5e [ 959.892358][T15966] RDX: 0000000000000000 RSI: 00007ffc781360c0 RDI: 0000000000000005 [ 959.892610][T15966] RBP: 00007ffc78136010 R08: 0000000000000000 R09: 0000000000000000 [ 959.892833][T15966] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.893095][T15966] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 959.971114][T15970] ------------[ cut here ]------------ | [ 959.971285][T15970] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/15970 | [ 959.971587][T15970] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 959.972866][T15970] Tainted: [W]=WARN [ 959.973061][T15970] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 959.973241][T15970] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 959.973389][T15970] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 959.974008][T15970] RSP: 0018:ffa0000004d475d0 EFLAGS: 00010286 [ 959.974180][T15970] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b67 [ 959.974382][T15970] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92db38 [ 959.974590][T15970] RBP: 1ff40000009a8ebb R08: 1fe2200003725b68 R09: fffa3bfffffb0b37 [ 959.974790][T15970] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92caf4 [ 959.975062][T15970] R13: ff1100001b92cac0 R14: ffffffff931c7940 R15: ff1100001b92da80 [ 959.975269][T15970] FS: 00007fb758515440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 959.975519][T15970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.975690][T15970] CR2: 000000000044f720 CR3: 000000001b12a006 CR4: 0000000000771ef0 [ 959.975890][T15970] PKRU: 55555554 [ 959.976079][T15970] Call Trace: [ 959.976178][T15970] [ 959.976244][T15970] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 959.976378][T15970] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 959.976537][T15970] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 959.976672][T15970] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.976806][T15970] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.977009][T15970] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 959.977138][T15970] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 959.977280][T15970] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 959.977412][T15970] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 959.977561][T15970] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 959.977702][T15970] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 959.977833][T15970] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 959.978033][T15970] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 959.978167][T15970] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 959.978315][T15970] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 959.978452][T15970] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 959.978599][T15970] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.978732][T15970] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 959.978866][T15970] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 959.979006][T15970] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 959.979143][T15970] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 959.979275][T15970] ? copy_msghdr_from_user (net/socket.c:2525) [ 959.979411][T15970] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 959.979588][T15970] ? move_addr_to_kernel (net/socket.c:2511) [ 959.979728][T15970] ? filemap_map_folio_range (mm/filemap.c:3873) [ 959.979871][T15970] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 959.980016][T15970] ___sys_sendmsg (net/socket.c:2641) [ 959.980152][T15970] ? copy_msghdr_from_user (net/socket.c:2628) [ 959.980301][T15970] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 959.980438][T15970] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 959.980591][T15970] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 959.980748][T15970] ? __sys_sendmsg_sock (net/socket.c:2656) [ 959.980889][T15970] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 959.981047][T15970] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.981185][T15970] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 959.981325][T15970] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 959.981469][T15970] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 959.981676][T15970] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 959.981856][T15970] RIP: 0033:0x7fb75866fc5e [ 959.982013][T15970] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 959.982520][T15970] RSP: 002b:00007ffd4a4b5050 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 959.982742][T15970] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb75866fc5e [ 959.982985][T15970] RDX: 0000000000000000 RSI: 00007ffd4a4b5110 RDI: 0000000000000005 [ 959.983215][T15970] RBP: 00007ffd4a4b5060 R08: 0000000000000000 R09: 0000000000000000 [ 959.983431][T15970] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 959.983656][T15970] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 960.073783][T15976] ------------[ cut here ]------------ | [ 960.074015][T15976] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/15976 | [ 960.074296][T15976] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.075184][T15976] Tainted: [W]=WARN [ 960.075338][T15976] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.075620][T15976] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.075855][T15976] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.076436][T15976] RSP: 0018:ffa0000004de75d0 EFLAGS: 00010286 [ 960.076689][T15976] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725abf [ 960.076953][T15976] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d5f8 [ 960.077242][T15976] RBP: 1ff40000009bcebb R08: 1fe2200003725ac0 R09: fffa3bfffffb0b37 [ 960.077511][T15976] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d3b4 [ 960.077775][T15976] R13: ff1100001b92d380 R14: ffffffff931c7940 R15: ff1100001b92d540 [ 960.078046][T15976] FS: 00007f541a15a440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 960.078358][T15976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.078622][T15976] CR2: 000000000044f720 CR3: 000000001aaaf005 CR4: 0000000000771ef0 [ 960.078913][T15976] PKRU: 55555554 [ 960.079071][T15976] Call Trace: [ 960.079229][T15976] [ 960.079352][T15976] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.079559][T15976] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.079762][T15976] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.079969][T15976] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.080160][T15976] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.080363][T15976] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.080566][T15976] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.080771][T15976] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.080986][T15976] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.081176][T15976] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.081369][T15976] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.081569][T15976] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.081761][T15976] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.081963][T15976] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.082152][T15976] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.082359][T15976] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.082581][T15976] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.082785][T15976] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.082986][T15976] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.083176][T15976] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.083368][T15976] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.083577][T15976] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.083768][T15976] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.084001][T15976] ? move_addr_to_kernel (net/socket.c:2511) [ 960.084192][T15976] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.084395][T15976] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.084613][T15976] ___sys_sendmsg (net/socket.c:2641) [ 960.084821][T15976] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.085056][T15976] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.085249][T15976] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.085447][T15976] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.085640][T15976] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.085836][T15976] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.086064][T15976] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.086264][T15976] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.086457][T15976] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.086655][T15976] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.086852][T15976] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.087101][T15976] RIP: 0033:0x7f541a2b4c5e [ 960.087312][T15976] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.087905][T15976] RSP: 002b:00007ffe027b6d30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.088177][T15976] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f541a2b4c5e [ 960.088444][T15976] RDX: 0000000000000000 RSI: 00007ffe027b6df0 RDI: 0000000000000005 [ 960.088710][T15976] RBP: 00007ffe027b6d40 R08: 0000000000000000 R09: 0000000000000000 [ 960.088995][T15976] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.089270][T15976] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 960.151448][T15980] ------------[ cut here ]------------ | [ 960.151635][T15980] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/15980 | [ 960.151885][T15980] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.152714][T15980] Tainted: [W]=WARN [ 960.152828][T15980] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.153075][T15980] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.153227][T15980] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.153734][T15980] RSP: 0018:ffa0000004d875d0 EFLAGS: 00010286 [ 960.153968][T15980] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e937 [ 960.154177][T15980] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9749b8 [ 960.154384][T15980] RBP: 1ff40000009b0ebb R08: 1fe220000192e938 R09: fffa3bfffffb0b37 [ 960.154597][T15980] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975734 [ 960.154809][T15980] R13: ff1100000c975700 R14: ffffffff931c7940 R15: ff1100000c974900 [ 960.155037][T15980] FS: 00007f4f2c5f8440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 960.155282][T15980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.155453][T15980] CR2: 000000000044f720 CR3: 000000001be5e005 CR4: 0000000000771ef0 [ 960.155660][T15980] PKRU: 55555554 [ 960.155759][T15980] Call Trace: [ 960.155860][T15980] [ 960.155936][T15980] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.156070][T15980] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.156216][T15980] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.156350][T15980] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.156482][T15980] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.156621][T15980] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.156759][T15980] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.156904][T15980] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.157037][T15980] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.157169][T15980] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.157307][T15980] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.157442][T15980] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.157583][T15980] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.157723][T15980] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.157857][T15980] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.158008][T15980] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.158147][T15980] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.158287][T15980] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.158427][T15980] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.158572][T15980] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.158714][T15980] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.158856][T15980] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.159001][T15980] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.159172][T15980] ? move_addr_to_kernel (net/socket.c:2511) [ 960.159311][T15980] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.159449][T15980] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.159588][T15980] ___sys_sendmsg (net/socket.c:2641) [ 960.159727][T15980] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.159866][T15980] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.160007][T15980] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.160140][T15980] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.160271][T15980] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.160405][T15980] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.160545][T15980] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.160676][T15980] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.160816][T15980] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.160954][T15980] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.161088][T15980] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.161248][T15980] RIP: 0033:0x7f4f2c752c5e [ 960.161387][T15980] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.161875][T15980] RSP: 002b:00007ffd32bf4200 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.162083][T15980] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4f2c752c5e [ 960.162277][T15980] RDX: 0000000000000000 RSI: 00007ffd32bf42c0 RDI: 0000000000000005 [ 960.162472][T15980] RBP: 00007ffd32bf4210 R08: 0000000000000000 R09: 0000000000000000 [ 960.162685][T15980] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.162899][T15980] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 960.251504][T15986] ------------[ cut here ]------------ | [ 960.251670][T15986] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15986 | [ 960.252393][T15986] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.253204][T15986] Tainted: [W]=WARN [ 960.253311][T15986] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.253497][T15986] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.253641][T15986] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.254137][T15986] RSP: 0018:ffa0000004b175d0 EFLAGS: 00010286 [ 960.254313][T15986] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e8ff [ 960.254520][T15986] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9747f8 [ 960.254721][T15986] RBP: 1ff4000000962ebb R08: 1fe220000192e900 R09: fffa3bfffffb0b37 [ 960.254939][T15986] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9745b4 [ 960.255143][T15986] R13: ff1100000c974580 R14: ffffffff931c7940 R15: ff1100000c974740 [ 960.255360][T15986] FS: 00007fd9b3100440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 960.255617][T15986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.255814][T15986] CR2: 000000000044f720 CR3: 000000001be5e002 CR4: 0000000000771ef0 [ 960.256041][T15986] PKRU: 55555554 [ 960.256155][T15986] Call Trace: [ 960.256263][T15986] [ 960.256334][T15986] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.256472][T15986] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.256625][T15986] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.256760][T15986] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.256898][T15986] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.257037][T15986] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.257170][T15986] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.257303][T15986] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.257438][T15986] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.257577][T15986] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.257712][T15986] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.257844][T15986] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.257981][T15986] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.258137][T15986] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.258268][T15986] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.258409][T15986] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.258556][T15986] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.258699][T15986] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.258839][T15986] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.258988][T15986] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.259134][T15986] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.259290][T15986] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.259437][T15986] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.259653][T15986] ? move_addr_to_kernel (net/socket.c:2511) [ 960.259801][T15986] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.259942][T15986] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.260079][T15986] ___sys_sendmsg (net/socket.c:2641) [ 960.260250][T15986] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.260393][T15986] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.260562][T15986] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.260720][T15986] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.260872][T15986] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.261031][T15986] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.261194][T15986] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.261338][T15986] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.261471][T15986] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.261610][T15986] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.261744][T15986] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.261912][T15986] RIP: 0033:0x7fd9b325ac5e [ 960.262054][T15986] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.262573][T15986] RSP: 002b:00007ffe04865d20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.262782][T15986] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd9b325ac5e [ 960.262996][T15986] RDX: 0000000000000000 RSI: 00007ffe04865de0 RDI: 0000000000000005 [ 960.263206][T15986] RBP: 00007ffe04865d30 R08: 0000000000000000 R09: 0000000000000000 [ 960.263427][T15986] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.263645][T15986] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 960.347591][T15990] ------------[ cut here ]------------ | [ 960.347816][T15990] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15990 | [ 960.348092][T15990] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.348948][T15990] Tainted: [W]=WARN [ 960.349060][T15990] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.349241][T15990] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.349394][T15990] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.349921][T15990] RSP: 0018:ffa0000004c375d0 EFLAGS: 00010286 [ 960.350114][T15990] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b082f7 [ 960.350338][T15990] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8417b8 [ 960.350562][T15990] RBP: 1ff4000000986ebb R08: 1fe2200001b082f8 R09: fffa3bfffffb0b37 [ 960.350776][T15990] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8418f4 [ 960.351010][T15990] R13: ff1100000d8418c0 R14: ffffffff931c7940 R15: ff1100000d841700 [ 960.351231][T15990] FS: 00007f2b94cec440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 960.351509][T15990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.351699][T15990] CR2: 000000000044f720 CR3: 000000000c856005 CR4: 0000000000771ef0 [ 960.351921][T15990] PKRU: 55555554 [ 960.352036][T15990] Call Trace: [ 960.352147][T15990] [ 960.352222][T15990] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.352372][T15990] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.352533][T15990] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.352675][T15990] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.352825][T15990] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.352982][T15990] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.353126][T15990] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.353271][T15990] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.353417][T15990] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.353566][T15990] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.353713][T15990] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.353862][T15990] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.354013][T15990] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.354168][T15990] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.354320][T15990] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.354466][T15990] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.354623][T15990] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.354777][T15990] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.354936][T15990] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.355089][T15990] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.355268][T15990] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.355430][T15990] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.355615][T15990] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.355789][T15990] ? move_addr_to_kernel (net/socket.c:2511) [ 960.355938][T15990] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.356075][T15990] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.356249][T15990] ___sys_sendmsg (net/socket.c:2641) [ 960.356382][T15990] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.356536][T15990] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.356675][T15990] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.356813][T15990] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.356960][T15990] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.357101][T15990] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.357265][T15990] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.357425][T15990] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.357626][T15990] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.357767][T15990] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.357915][T15990] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.358100][T15990] RIP: 0033:0x7f2b94e46c5e [ 960.358248][T15990] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.358743][T15990] RSP: 002b:00007ffeba7d57a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.358954][T15990] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2b94e46c5e [ 960.359163][T15990] RDX: 0000000000000000 RSI: 00007ffeba7d5860 RDI: 0000000000000005 [ 960.359391][T15990] RBP: 00007ffeba7d57b0 R08: 0000000000000000 R09: 0000000000000000 [ 960.359599][T15990] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.359817][T15990] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 960.449666][T15996] ------------[ cut here ]------------ | [ 960.449843][T15996] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/15996 | [ 960.450089][T15996] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.450946][T15996] Tainted: [W]=WARN [ 960.451051][T15996] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.451226][T15996] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.451377][T15996] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.451868][T15996] RSP: 0018:ffa0000004e675d0 EFLAGS: 00010286 [ 960.452046][T15996] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0839f [ 960.452287][T15996] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841cf8 [ 960.452497][T15996] RBP: 1ff40000009ccebb R08: 1fe2200001b083a0 R09: fffa3bfffffb0b37 [ 960.452714][T15996] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d841e34 [ 960.452920][T15996] R13: ff1100000d841e00 R14: ffffffff931c7940 R15: ff1100000d841c40 [ 960.453136][T15996] FS: 00007f57960e6440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 960.453378][T15996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.453556][T15996] CR2: 000000000044f720 CR3: 00000000100bd002 CR4: 0000000000771ef0 [ 960.453765][T15996] PKRU: 55555554 [ 960.453867][T15996] Call Trace: [ 960.453976][T15996] [ 960.454046][T15996] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.454188][T15996] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.454335][T15996] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.454477][T15996] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.454616][T15996] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.454775][T15996] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.454947][T15996] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.455095][T15996] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.455244][T15996] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.455392][T15996] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.455545][T15996] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.455688][T15996] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.455832][T15996] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.455981][T15996] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.456121][T15996] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.456259][T15996] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.456423][T15996] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.456567][T15996] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.456707][T15996] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.456855][T15996] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.457384][T15996] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.457552][T15996] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.457692][T15996] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.457865][T15996] ? move_addr_to_kernel (net/socket.c:2511) [ 960.458008][T15996] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.458144][T15996] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.458320][T15996] ___sys_sendmsg (net/socket.c:2641) [ 960.458454][T15996] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.458631][T15996] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.458772][T15996] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.458912][T15996] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.459047][T15996] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.459197][T15996] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.459349][T15996] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.459514][T15996] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.459684][T15996] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.459821][T15996] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.459998][T15996] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.460177][T15996] RIP: 0033:0x7f5796240c5e [ 960.460324][T15996] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.460873][T15996] RSP: 002b:00007ffd9f704290 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.461120][T15996] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5796240c5e [ 960.461356][T15996] RDX: 0000000000000000 RSI: 00007ffd9f704350 RDI: 0000000000000005 [ 960.461595][T15996] RBP: 00007ffd9f7042a0 R08: 0000000000000000 R09: 0000000000000000 [ 960.461815][T15996] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.462043][T15996] R13: 0000000069cbe807 R14: 0000000000000004 R15: 000000000049d620 | [ 960.537289][T16000] ------------[ cut here ]------------ | [ 960.537453][T16000] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16000 | [ 960.537703][T16000] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.538497][T16000] Tainted: [W]=WARN [ 960.538599][T16000] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.538768][T16000] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.538912][T16000] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.539397][T16000] RSP: 0018:ffa0000004df75d0 EFLAGS: 00010286 [ 960.539598][T16000] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038751a7 [ 960.539817][T16000] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8d38 [ 960.540035][T16000] RBP: 1ff40000009beebb R08: 1fe22000038751a8 R09: fffa3bfffffb0b37 [ 960.540246][T16000] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a83f4 [ 960.540466][T16000] R13: ff1100001c3a83c0 R14: ffffffff931c7940 R15: ff1100001c3a8c80 [ 960.540685][T16000] FS: 00007f9080d79440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 960.540937][T16000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.541112][T16000] CR2: 000000000044f720 CR3: 000000001cddc004 CR4: 0000000000771ef0 [ 960.541313][T16000] PKRU: 55555554 [ 960.541414][T16000] Call Trace: [ 960.541521][T16000] [ 960.541591][T16000] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.541727][T16000] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.541874][T16000] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.542372][T16000] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.542518][T16000] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.542660][T16000] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.542798][T16000] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.542938][T16000] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.543078][T16000] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.543210][T16000] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.543349][T16000] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.543479][T16000] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.543619][T16000] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.543758][T16000] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.543890][T16000] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.544028][T16000] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.544165][T16000] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.544299][T16000] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.544433][T16000] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.544575][T16000] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.544708][T16000] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.544843][T16000] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.544980][T16000] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.545144][T16000] ? move_addr_to_kernel (net/socket.c:2511) [ 960.545277][T16000] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.545411][T16000] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.545557][T16000] ___sys_sendmsg (net/socket.c:2641) [ 960.545693][T16000] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.545828][T16000] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.545972][T16000] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.546112][T16000] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.546243][T16000] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.546378][T16000] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.546516][T16000] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.546692][T16000] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.546830][T16000] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.546982][T16000] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.547124][T16000] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.547293][T16000] RIP: 0033:0x7f9080ed3c5e [ 960.547442][T16000] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.547980][T16000] RSP: 002b:00007ffd91ac1250 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.548183][T16000] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9080ed3c5e [ 960.548397][T16000] RDX: 0000000000000000 RSI: 00007ffd91ac1310 RDI: 0000000000000005 [ 960.548625][T16000] RBP: 00007ffd91ac1260 R08: 0000000000000000 R09: 0000000000000000 [ 960.548828][T16000] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.549034][T16000] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 960.618388][T16006] ------------[ cut here ]------------ | [ 960.618557][T16006] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16006 | [ 960.618789][T16006] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.619559][T16006] Tainted: [W]=WARN [ 960.619660][T16006] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.619846][T16006] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.619993][T16006] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.620496][T16006] RSP: 0018:ffa0000004ea75d0 EFLAGS: 00010286 [ 960.620677][T16006] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003875367 [ 960.620880][T16006] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9b38 [ 960.621092][T16006] RBP: 1ff40000009d4ebb R08: 1fe2200003875368 R09: fffa3bfffffb0b37 [ 960.621294][T16006] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a98f4 [ 960.621497][T16006] R13: ff1100001c3a98c0 R14: ffffffff931c7940 R15: ff1100001c3a9a80 [ 960.621698][T16006] FS: 00007ff4dd2f6440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 960.621961][T16006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.622144][T16006] CR2: 000000000044f720 CR3: 000000001cddc004 CR4: 0000000000771ef0 [ 960.622359][T16006] PKRU: 55555554 [ 960.622466][T16006] Call Trace: [ 960.622576][T16006] [ 960.622647][T16006] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.622785][T16006] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.622943][T16006] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.623088][T16006] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.623225][T16006] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.623367][T16006] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.623507][T16006] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.623661][T16006] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.623803][T16006] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.623948][T16006] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.624088][T16006] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.624231][T16006] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.624369][T16006] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.624518][T16006] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.624656][T16006] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.624793][T16006] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.624941][T16006] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.625081][T16006] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.625220][T16006] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.625362][T16006] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.625515][T16006] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.625659][T16006] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.625802][T16006] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.625983][T16006] ? move_addr_to_kernel (net/socket.c:2511) [ 960.626122][T16006] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.626284][T16006] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.626423][T16006] ___sys_sendmsg (net/socket.c:2641) [ 960.626573][T16006] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.626716][T16006] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.626857][T16006] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.627006][T16006] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.627145][T16006] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.627287][T16006] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.627425][T16006] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.627571][T16006] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.627713][T16006] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.627851][T16006] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.628001][T16006] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.628174][T16006] RIP: 0033:0x7ff4dd450c5e [ 960.628327][T16006] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.628836][T16006] RSP: 002b:00007fff5b4add60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.629098][T16006] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff4dd450c5e [ 960.629308][T16006] RDX: 0000000000000000 RSI: 00007fff5b4ade20 RDI: 0000000000000005 [ 960.629519][T16006] RBP: 00007fff5b4add70 R08: 0000000000000000 R09: 0000000000000000 [ 960.629721][T16006] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.629931][T16006] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 960.710340][T16010] ------------[ cut here ]------------ | [ 960.710538][T16010] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16010 | [ 960.710776][T16010] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.711604][T16010] Tainted: [W]=WARN [ 960.711707][T16010] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.711878][T16010] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.712033][T16010] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.712524][T16010] RSP: 0018:ffa0000004de75d0 EFLAGS: 00010286 [ 960.712701][T16010] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0767 [ 960.712903][T16010] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503b38 [ 960.713118][T16010] RBP: 1ff40000009bcebb R08: 1fe2200001ea0768 R09: fffa3bfffffb0b37 [ 960.713324][T16010] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502774 [ 960.713562][T16010] R13: ff1100000f502740 R14: ffffffff931c7940 R15: ff1100000f503a80 [ 960.713776][T16010] FS: 00007f1bb6601440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 960.714026][T16010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.714203][T16010] CR2: 000000000044f720 CR3: 000000000eb83004 CR4: 0000000000771ef0 [ 960.714420][T16010] PKRU: 55555554 [ 960.714536][T16010] Call Trace: [ 960.714642][T16010] [ 960.714714][T16010] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.714854][T16010] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.715003][T16010] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.715137][T16010] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.715280][T16010] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.715413][T16010] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.715550][T16010] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.715681][T16010] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.715812][T16010] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.715952][T16010] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.716088][T16010] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.716227][T16010] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.716360][T16010] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.716495][T16010] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.716640][T16010] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.716772][T16010] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.716911][T16010] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.717044][T16010] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.717177][T16010] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.717308][T16010] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.717454][T16010] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.717602][T16010] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.717738][T16010] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.717910][T16010] ? move_addr_to_kernel (net/socket.c:2511) [ 960.718052][T16010] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.718189][T16010] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.718328][T16010] ___sys_sendmsg (net/socket.c:2641) [ 960.718474][T16010] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.718622][T16010] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.718771][T16010] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.718915][T16010] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.719059][T16010] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.719200][T16010] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.719342][T16010] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.719486][T16010] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.719634][T16010] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.719776][T16010] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.719925][T16010] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.720100][T16010] RIP: 0033:0x7f1bb675bc5e [ 960.720262][T16010] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.720765][T16010] RSP: 002b:00007ffec5cfbd30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.720991][T16010] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1bb675bc5e [ 960.721210][T16010] RDX: 0000000000000000 RSI: 00007ffec5cfbdf0 RDI: 0000000000000005 [ 960.721420][T16010] RBP: 00007ffec5cfbd40 R08: 0000000000000000 R09: 0000000000000000 [ 960.721632][T16010] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.721842][T16010] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 960.806806][T16016] ------------[ cut here ]------------ | [ 960.806984][T16016] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16016 | [ 960.807236][T16016] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.808317][T16016] Tainted: [W]=WARN [ 960.808435][T16016] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.808676][T16016] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.808819][T16016] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.809327][T16016] RSP: 0018:ffa0000004ee75d0 EFLAGS: 00010286 [ 960.809538][T16016] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0617 [ 960.809751][T16016] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5030b8 [ 960.809968][T16016] RBP: 1ff40000009dcebb R08: 1fe2200001ea0618 R09: fffa3bfffffb0b37 [ 960.810174][T16016] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503574 [ 960.810381][T16016] R13: ff1100000f503540 R14: ffffffff931c7940 R15: ff1100000f503000 [ 960.810596][T16016] FS: 00007f8e86159440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 960.810843][T16016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.811026][T16016] CR2: 000000000044f720 CR3: 000000001080a004 CR4: 0000000000771ef0 [ 960.811243][T16016] PKRU: 55555554 [ 960.811348][T16016] Call Trace: [ 960.811453][T16016] [ 960.811532][T16016] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.811670][T16016] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.811819][T16016] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.811964][T16016] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.812105][T16016] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.812252][T16016] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.812394][T16016] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.812545][T16016] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.812688][T16016] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.812830][T16016] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.812983][T16016] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.813128][T16016] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.813276][T16016] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.813423][T16016] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.813570][T16016] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.813712][T16016] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.813869][T16016] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.814019][T16016] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.814162][T16016] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.814300][T16016] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.814444][T16016] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.814601][T16016] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.814746][T16016] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.814936][T16016] ? move_addr_to_kernel (net/socket.c:2511) [ 960.815086][T16016] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.815239][T16016] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.815388][T16016] ___sys_sendmsg (net/socket.c:2641) [ 960.815534][T16016] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.815678][T16016] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.815834][T16016] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.815979][T16016] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.816145][T16016] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.816318][T16016] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.816477][T16016] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.816658][T16016] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.816812][T16016] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.817071][T16016] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.817209][T16016] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.817383][T16016] RIP: 0033:0x7f8e862b3c5e [ 960.817536][T16016] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.818046][T16016] RSP: 002b:00007ffdba320bf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.818258][T16016] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8e862b3c5e [ 960.818465][T16016] RDX: 0000000000000000 RSI: 00007ffdba320cb0 RDI: 0000000000000005 [ 960.818679][T16016] RBP: 00007ffdba320c00 R08: 0000000000000000 R09: 0000000000000000 [ 960.818907][T16016] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.819108][T16016] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 960.904295][T16020] ------------[ cut here ]------------ | [ 960.904470][T16020] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16020 | [ 960.904739][T16020] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.905998][T16020] Tainted: [W]=WARN [ 960.906108][T16020] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.906295][T16020] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.906455][T16020] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 960.906986][T16020] RSP: 0018:ffa0000004ea75d0 EFLAGS: 00010286 [ 960.907179][T16020] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1a4f [ 960.907398][T16020] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d278 [ 960.907619][T16020] RBP: 1ff40000009d4ebb R08: 1fe22000036f1a50 R09: fffa3bfffffb0b37 [ 960.907840][T16020] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d734 [ 960.908066][T16020] R13: ff1100001b78d700 R14: ffffffff931c7940 R15: ff1100001b78d1c0 [ 960.908296][T16020] FS: 00007f4403c2f440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 960.908559][T16020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.908732][T16020] CR2: 000000000044f720 CR3: 0000000008ad3001 CR4: 0000000000771ef0 [ 960.908944][T16020] PKRU: 55555554 [ 960.909050][T16020] Call Trace: [ 960.909162][T16020] [ 960.909233][T16020] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 960.909375][T16020] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 960.909531][T16020] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 960.909676][T16020] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.909812][T16020] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.909957][T16020] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 960.910095][T16020] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 960.910233][T16020] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 960.910382][T16020] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 960.910529][T16020] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 960.910671][T16020] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 960.910811][T16020] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 960.910976][T16020] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 960.911118][T16020] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 960.911257][T16020] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 960.911400][T16020] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 960.911541][T16020] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.911678][T16020] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 960.911816][T16020] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 960.911963][T16020] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 960.912103][T16020] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 960.912239][T16020] ? copy_msghdr_from_user (net/socket.c:2525) [ 960.912377][T16020] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 960.912564][T16020] ? move_addr_to_kernel (net/socket.c:2511) [ 960.912712][T16020] ? filemap_map_folio_range (mm/filemap.c:3873) [ 960.912852][T16020] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 960.913002][T16020] ___sys_sendmsg (net/socket.c:2641) [ 960.913139][T16020] ? copy_msghdr_from_user (net/socket.c:2628) [ 960.913285][T16020] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 960.913426][T16020] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 960.913571][T16020] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 960.913709][T16020] ? __sys_sendmsg_sock (net/socket.c:2656) [ 960.913848][T16020] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 960.914051][T16020] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.914189][T16020] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 960.914323][T16020] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 960.914464][T16020] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 960.914605][T16020] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 960.914774][T16020] RIP: 0033:0x7f4403d89c5e [ 960.914981][T16020] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 960.915489][T16020] RSP: 002b:00007ffcb4790e10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 960.915710][T16020] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4403d89c5e [ 960.915997][T16020] RDX: 0000000000000000 RSI: 00007ffcb4790ed0 RDI: 0000000000000005 [ 960.916202][T16020] RBP: 00007ffcb4790e20 R08: 0000000000000000 R09: 0000000000000000 [ 960.916409][T16020] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 960.916625][T16020] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 960.997955][T16026] ------------[ cut here ]------------ | [ 960.998141][T16026] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16026 | [ 960.998411][T16026] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 960.999274][T16026] Tainted: [W]=WARN [ 960.999385][T16026] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 960.999570][T16026] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 960.999726][T16026] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.000275][T16026] RSP: 0018:ffa0000004f375d0 EFLAGS: 00010286 [ 961.000468][T16026] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f196f [ 961.000693][T16026] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cb78 [ 961.000921][T16026] RBP: 1ff40000009e6ebb R08: 1fe22000036f1970 R09: fffa3bfffffb0b37 [ 961.001136][T16026] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78c774 [ 961.001355][T16026] R13: ff1100001b78c740 R14: ffffffff931c7940 R15: ff1100001b78cac0 [ 961.001578][T16026] FS: 00007f9e85053440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 961.001831][T16026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.002018][T16026] CR2: 000000000044f720 CR3: 000000000c791005 CR4: 0000000000771ef0 [ 961.002243][T16026] PKRU: 55555554 [ 961.002352][T16026] Call Trace: [ 961.002461][T16026] [ 961.002543][T16026] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.002698][T16026] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.002870][T16026] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.003022][T16026] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.003168][T16026] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.003315][T16026] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.003466][T16026] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.003614][T16026] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.003761][T16026] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.003913][T16026] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.004070][T16026] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.004212][T16026] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.004362][T16026] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.004519][T16026] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.004661][T16026] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.004805][T16026] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.004955][T16026] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.005101][T16026] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.005255][T16026] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.005399][T16026] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.005554][T16026] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.005697][T16026] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.005838][T16026] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.006021][T16026] ? move_addr_to_kernel (net/socket.c:2511) [ 961.006171][T16026] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.006319][T16026] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.006468][T16026] ___sys_sendmsg (net/socket.c:2641) [ 961.006618][T16026] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.006766][T16026] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.006916][T16026] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.007063][T16026] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.007218][T16026] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.007371][T16026] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.007527][T16026] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.007675][T16026] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.007821][T16026] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.007970][T16026] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.008114][T16026] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.008299][T16026] RIP: 0033:0x7f9e851adc5e [ 961.008456][T16026] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.008997][T16026] RSP: 002b:00007ffebbbf8b40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.009213][T16026] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9e851adc5e [ 961.009437][T16026] RDX: 0000000000000000 RSI: 00007ffebbbf8c00 RDI: 0000000000000005 [ 961.009666][T16026] RBP: 00007ffebbbf8b50 R08: 0000000000000000 R09: 0000000000000000 [ 961.009887][T16026] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.010109][T16026] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 961.080469][T16030] ------------[ cut here ]------------ | [ 961.080675][T16030] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16030 | [ 961.081350][T16030] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.082171][T16030] Tainted: [W]=WARN [ 961.082273][T16030] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.082441][T16030] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.082601][T16030] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.083110][T16030] RSP: 0018:ffa0000004ea75d0 EFLAGS: 00010286 [ 961.083286][T16030] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897abf [ 961.083510][T16030] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd5f8 [ 961.083711][T16030] RBP: 1ff40000009d4ebb R08: 1fe2200001897ac0 R09: fffa3bfffffb0b37 [ 961.083910][T16030] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bdc74 [ 961.084109][T16030] R13: ff1100000c4bdc40 R14: ffffffff931c7940 R15: ff1100000c4bd540 [ 961.084321][T16030] FS: 00007f718d62d440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 961.084564][T16030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.084731][T16030] CR2: 000000000044f720 CR3: 0000000019de0002 CR4: 0000000000771ef0 [ 961.084952][T16030] PKRU: 55555554 [ 961.085079][T16030] Call Trace: [ 961.085183][T16030] [ 961.085254][T16030] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.085393][T16030] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.085549][T16030] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.085688][T16030] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.085826][T16030] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.085973][T16030] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.086108][T16030] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.086241][T16030] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.086375][T16030] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.086513][T16030] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.086657][T16030] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.086794][T16030] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.086937][T16030] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.087076][T16030] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.087219][T16030] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.087358][T16030] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.087501][T16030] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.087644][T16030] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.087789][T16030] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.087939][T16030] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.088081][T16030] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.088223][T16030] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.088363][T16030] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.088551][T16030] ? move_addr_to_kernel (net/socket.c:2511) [ 961.088702][T16030] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.088937][T16030] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.089078][T16030] ___sys_sendmsg (net/socket.c:2641) [ 961.089221][T16030] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.089365][T16030] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.089594][T16030] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.089742][T16030] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.089884][T16030] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.090033][T16030] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.090254][T16030] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.090393][T16030] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.090548][T16030] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.090687][T16030] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.090827][T16030] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.091004][T16030] RIP: 0033:0x7f718d787c5e [ 961.091150][T16030] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.091739][T16030] RSP: 002b:00007ffe383ddca0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.091953][T16030] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f718d787c5e [ 961.092242][T16030] RDX: 0000000000000000 RSI: 00007ffe383ddd60 RDI: 0000000000000005 [ 961.092457][T16030] RBP: 00007ffe383ddcb0 R08: 0000000000000000 R09: 0000000000000000 [ 961.092754][T16030] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.092971][T16030] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 961.171979][T16036] ------------[ cut here ]------------ | [ 961.172145][T16036] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16036 | [ 961.172380][T16036] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.173185][T16036] Tainted: [W]=WARN [ 961.173289][T16036] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.173458][T16036] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.173632][T16036] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.174121][T16036] RSP: 0018:ffa0000004e575d0 EFLAGS: 00010286 [ 961.174293][T16036] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000189788f [ 961.174506][T16036] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bc478 [ 961.174712][T16036] RBP: 1ff40000009caebb R08: 1fe2200001897890 R09: fffa3bfffffb0b37 [ 961.174919][T16036] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd734 [ 961.175141][T16036] R13: ff1100000c4bd700 R14: ffffffff931c7940 R15: ff1100000c4bc3c0 [ 961.175352][T16036] FS: 00007fd982a52440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.175608][T16036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.175787][T16036] CR2: 000000000044f720 CR3: 000000001c144002 CR4: 0000000000771ef0 [ 961.176003][T16036] PKRU: 55555554 [ 961.176109][T16036] Call Trace: [ 961.176215][T16036] [ 961.176287][T16036] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.176428][T16036] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.176588][T16036] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.176730][T16036] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.176868][T16036] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.177016][T16036] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.177153][T16036] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.177297][T16036] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.177436][T16036] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.177580][T16036] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.177735][T16036] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.177873][T16036] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.178026][T16036] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.178176][T16036] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.178314][T16036] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.178459][T16036] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.178617][T16036] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.178764][T16036] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.178910][T16036] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.179055][T16036] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.179198][T16036] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.179340][T16036] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.179490][T16036] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.179680][T16036] ? move_addr_to_kernel (net/socket.c:2511) [ 961.179826][T16036] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.179971][T16036] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.180114][T16036] ___sys_sendmsg (net/socket.c:2641) [ 961.180254][T16036] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.180400][T16036] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.180552][T16036] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.180698][T16036] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.180841][T16036] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.180986][T16036] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.181127][T16036] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.181268][T16036] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.181411][T16036] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.181568][T16036] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.181707][T16036] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.181881][T16036] RIP: 0033:0x7fd982bacc5e [ 961.182035][T16036] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.182537][T16036] RSP: 002b:00007ffcd0baaee0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.182747][T16036] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd982bacc5e [ 961.182959][T16036] RDX: 0000000000000000 RSI: 00007ffcd0baafa0 RDI: 0000000000000005 [ 961.183170][T16036] RBP: 00007ffcd0baaef0 R08: 0000000000000000 R09: 0000000000000000 [ 961.183380][T16036] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.183596][T16036] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 961.251753][T16040] ------------[ cut here ]------------ | [ 961.252790][T16040] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16040 | [ 961.253134][T16040] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.254035][T16040] Tainted: [W]=WARN [ 961.254150][T16040] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.254328][T16040] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.254480][T16040] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.255051][T16040] RSP: 0018:ffa0000004ea75d0 EFLAGS: 00010286 [ 961.255236][T16040] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000037258ff [ 961.255445][T16040] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c7f8 [ 961.255656][T16040] RBP: 1ff40000009d4ebb R08: 1fe2200003725900 R09: fffa3bfffffb0b37 [ 961.255853][T16040] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c5b4 [ 961.256148][T16040] R13: ff1100001b92c580 R14: ffffffff931c7940 R15: ff1100001b92c740 [ 961.256346][T16040] FS: 00007f0cd5888440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.256586][T16040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.256752][T16040] CR2: 000000000044f720 CR3: 000000001ccb6004 CR4: 0000000000771ef0 [ 961.257022][T16040] PKRU: 55555554 [ 961.257122][T16040] Call Trace: [ 961.257224][T16040] [ 961.257306][T16040] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.257439][T16040] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.257586][T16040] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.257723][T16040] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.257860][T16040] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.258077][T16040] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.258211][T16040] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.258344][T16040] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.258481][T16040] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.258626][T16040] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.258768][T16040] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.258908][T16040] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.259052][T16040] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.259193][T16040] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.259330][T16040] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.259471][T16040] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.259620][T16040] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.259764][T16040] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.259910][T16040] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.260051][T16040] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.260195][T16040] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.260332][T16040] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.260483][T16040] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.260660][T16040] ? move_addr_to_kernel (net/socket.c:2511) [ 961.260800][T16040] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.260939][T16040] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.261075][T16040] ___sys_sendmsg (net/socket.c:2641) [ 961.261205][T16040] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.261339][T16040] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.261474][T16040] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.261612][T16040] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.261743][T16040] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.261903][T16040] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.262035][T16040] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.262165][T16040] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.262298][T16040] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.262429][T16040] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.262566][T16040] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.262727][T16040] RIP: 0033:0x7f0cd59e2c5e [ 961.262871][T16040] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.263371][T16040] RSP: 002b:00007ffd1ea0a4f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.263584][T16040] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0cd59e2c5e [ 961.263791][T16040] RDX: 0000000000000000 RSI: 00007ffd1ea0a5b0 RDI: 0000000000000005 [ 961.264020][T16040] RBP: 00007ffd1ea0a500 R08: 0000000000000000 R09: 0000000000000000 [ 961.264227][T16040] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.264430][T16040] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 961.365182][T16046] ------------[ cut here ]------------ | [ 961.365388][T16046] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16046 | [ 961.365665][T16046] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.366537][T16046] Tainted: [W]=WARN [ 961.366648][T16046] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.366834][T16046] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.366997][T16046] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.367544][T16046] RSP: 0018:ffa0000004e575d0 EFLAGS: 00010286 [ 961.367733][T16046] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725a87 [ 961.367969][T16046] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d438 [ 961.368196][T16046] RBP: 1ff40000009caebb R08: 1fe2200003725a88 R09: fffa3bfffffb0b37 [ 961.368417][T16046] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d034 [ 961.368629][T16046] R13: ff1100001b92d000 R14: ffffffff931c7940 R15: ff1100001b92d380 [ 961.368839][T16046] FS: 00007fcb54519440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.369086][T16046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.369262][T16046] CR2: 000000000044f720 CR3: 000000001a349006 CR4: 0000000000771ef0 [ 961.369469][T16046] PKRU: 55555554 [ 961.369588][T16046] Call Trace: [ 961.369694][T16046] [ 961.369765][T16046] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.369906][T16046] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.370059][T16046] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.370199][T16046] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.370335][T16046] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.370469][T16046] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.370609][T16046] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.370746][T16046] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.370877][T16046] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.371737][T16046] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.371879][T16046] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.372083][T16046] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.372216][T16046] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.372348][T16046] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.372477][T16046] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.372612][T16046] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.372743][T16046] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.372877][T16046] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.373018][T16046] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.373150][T16046] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.373287][T16046] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.373418][T16046] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.373556][T16046] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.373723][T16046] ? move_addr_to_kernel (net/socket.c:2511) [ 961.373871][T16046] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.374018][T16046] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.374158][T16046] ___sys_sendmsg (net/socket.c:2641) [ 961.374296][T16046] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.374444][T16046] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.374588][T16046] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.374723][T16046] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.374854][T16046] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.374998][T16046] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.375130][T16046] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.375261][T16046] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.375395][T16046] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.375535][T16046] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.375667][T16046] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.375834][T16046] RIP: 0033:0x7fcb54673c5e [ 961.375983][T16046] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.376462][T16046] RSP: 002b:00007ffeb002b800 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.376668][T16046] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcb54673c5e [ 961.376866][T16046] RDX: 0000000000000000 RSI: 00007ffeb002b8c0 RDI: 0000000000000005 [ 961.377070][T16046] RBP: 00007ffeb002b810 R08: 0000000000000000 R09: 0000000000000000 [ 961.377266][T16046] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.377465][T16046] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 961.457395][T16050] ------------[ cut here ]------------ | [ 961.457598][T16050] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16050 | [ 961.457879][T16050] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.458884][T16050] Tainted: [W]=WARN [ 961.458993][T16050] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.459165][T16050] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.459308][T16050] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.459819][T16050] RSP: 0018:ffa0000004f875d0 EFLAGS: 00010286 [ 961.459998][T16050] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eaf7 [ 961.460241][T16050] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 961.460452][T16050] RBP: 1ff40000009f0ebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b37 [ 961.460656][T16050] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c974cb4 [ 961.460852][T16050] R13: ff1100000c974c80 R14: ffffffff931c7940 R15: ff1100000c975700 [ 961.461104][T16050] FS: 00007fbe242d0440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.461363][T16050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.461546][T16050] CR2: 000000000044f720 CR3: 0000000010aab003 CR4: 0000000000771ef0 [ 961.461758][T16050] PKRU: 55555554 [ 961.461859][T16050] Call Trace: [ 961.461978][T16050] [ 961.462050][T16050] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.462189][T16050] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.462335][T16050] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.462468][T16050] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.462604][T16050] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.462773][T16050] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.462917][T16050] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.463056][T16050] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.463193][T16050] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.463330][T16050] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.463466][T16050] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.463627][T16050] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.463765][T16050] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.463913][T16050] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.464049][T16050] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.464184][T16050] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.464323][T16050] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.464463][T16050] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.464613][T16050] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.464758][T16050] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.464916][T16050] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.465063][T16050] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.465206][T16050] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.465382][T16050] ? move_addr_to_kernel (net/socket.c:2511) [ 961.465528][T16050] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.465667][T16050] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.465816][T16050] ___sys_sendmsg (net/socket.c:2641) [ 961.465963][T16050] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.466114][T16050] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.466254][T16050] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.466394][T16050] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.466544][T16050] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.466691][T16050] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.466830][T16050] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.466971][T16050] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.467105][T16050] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.467238][T16050] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.467379][T16050] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.467644][T16050] RIP: 0033:0x7fbe2442ac5e [ 961.467790][T16050] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.468275][T16050] RSP: 002b:00007ffcdb527040 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.468510][T16050] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbe2442ac5e [ 961.468722][T16050] RDX: 0000000000000000 RSI: 00007ffcdb527100 RDI: 0000000000000005 [ 961.468924][T16050] RBP: 00007ffcdb527050 R08: 0000000000000000 R09: 0000000000000000 [ 961.469122][T16050] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.469350][T16050] R13: 0000000069cbe808 R14: 0000000000000004 R15: 000000000049d620 | [ 961.555629][T16056] ------------[ cut here ]------------ | [ 961.555807][T16056] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16056 | [ 961.556929][T16056] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.557729][T16056] Tainted: [W]=WARN [ 961.557837][T16056] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.558150][T16056] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.558352][T16056] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.558879][T16056] RSP: 0018:ffa0000004fc75d0 EFLAGS: 00010286 [ 961.559156][T16056] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e8c7 [ 961.559361][T16056] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974638 [ 961.559562][T16056] RBP: 1ff40000009f8ebb R08: 1fe220000192e8c8 R09: fffa3bfffffb0b37 [ 961.559765][T16056] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9743f4 [ 961.560057][T16056] R13: ff1100000c9743c0 R14: ffffffff931c7940 R15: ff1100000c974580 [ 961.560265][T16056] FS: 00007f7a8c354440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.560521][T16056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.560687][T16056] CR2: 000000000044f720 CR3: 000000001c059001 CR4: 0000000000771ef0 [ 961.560887][T16056] PKRU: 55555554 [ 961.561069][T16056] Call Trace: [ 961.561168][T16056] [ 961.561239][T16056] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.561372][T16056] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.561516][T16056] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.561648][T16056] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.561801][T16056] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.562008][T16056] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.562144][T16056] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.562300][T16056] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.562442][T16056] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.562590][T16056] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.562732][T16056] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.562871][T16056] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.563074][T16056] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.563213][T16056] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.563356][T16056] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.563493][T16056] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.563638][T16056] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.563781][T16056] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.564006][T16056] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.564144][T16056] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.564278][T16056] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.564408][T16056] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.564576][T16056] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.564758][T16056] ? move_addr_to_kernel (net/socket.c:2511) [ 961.564928][T16056] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.565068][T16056] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.565209][T16056] ___sys_sendmsg (net/socket.c:2641) [ 961.565352][T16056] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.565502][T16056] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.565646][T16056] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.565788][T16056] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.565937][T16056] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.566080][T16056] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.566217][T16056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.566355][T16056] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.566495][T16056] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.566637][T16056] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.566779][T16056] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.566962][T16056] RIP: 0033:0x7f7a8c4aec5e [ 961.567109][T16056] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.567617][T16056] RSP: 002b:00007ffd6a301910 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.567829][T16056] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f7a8c4aec5e [ 961.568042][T16056] RDX: 0000000000000000 RSI: 00007ffd6a3019d0 RDI: 0000000000000005 [ 961.568250][T16056] RBP: 00007ffd6a301920 R08: 0000000000000000 R09: 0000000000000000 [ 961.568455][T16056] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.568671][T16056] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 961.643465][T16060] ------------[ cut here ]------------ | [ 961.643644][T16060] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16060 | [ 961.643882][T16060] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.645094][T16060] Tainted: [W]=WARN [ 961.645195][T16060] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.645363][T16060] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.645510][T16060] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.645990][T16060] RSP: 0018:ffa0000004ea75d0 EFLAGS: 00010286 [ 961.646163][T16060] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b081a7 [ 961.646378][T16060] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d840d38 [ 961.646586][T16060] RBP: 1ff40000009d4ebb R08: 1fe2200001b081a8 R09: fffa3bfffffb0b37 [ 961.646789][T16060] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840234 [ 961.646997][T16060] R13: ff1100000d840200 R14: ffffffff931c7940 R15: ff1100000d840c80 [ 961.647201][T16060] FS: 00007fabbecd7440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.647441][T16060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.647611][T16060] CR2: 000000000044f720 CR3: 000000000d920004 CR4: 0000000000771ef0 [ 961.647812][T16060] PKRU: 55555554 [ 961.647917][T16060] Call Trace: [ 961.648017][T16060] [ 961.648092][T16060] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.648224][T16060] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.648368][T16060] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.648504][T16060] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.648636][T16060] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.648773][T16060] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.648907][T16060] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.649041][T16060] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.649173][T16060] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.649304][T16060] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.649442][T16060] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.649583][T16060] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.649717][T16060] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.649848][T16060] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.649988][T16060] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.650121][T16060] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.650254][T16060] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.650392][T16060] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.650532][T16060] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.650664][T16060] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.650799][T16060] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.650938][T16060] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.651070][T16060] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.651234][T16060] ? move_addr_to_kernel (net/socket.c:2511) [ 961.651370][T16060] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.651507][T16060] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.651640][T16060] ___sys_sendmsg (net/socket.c:2641) [ 961.651769][T16060] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.651909][T16060] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.652044][T16060] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.652178][T16060] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.652311][T16060] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.652446][T16060] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.652584][T16060] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.652726][T16060] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.652864][T16060] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.653009][T16060] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.653150][T16060] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.653324][T16060] RIP: 0033:0x7fabbee31c5e [ 961.653464][T16060] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.653959][T16060] RSP: 002b:00007ffcaac380d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.654161][T16060] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fabbee31c5e [ 961.654368][T16060] RDX: 0000000000000000 RSI: 00007ffcaac38190 RDI: 0000000000000005 [ 961.654575][T16060] RBP: 00007ffcaac380e0 R08: 0000000000000000 R09: 0000000000000000 [ 961.654779][T16060] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.654996][T16060] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 961.738776][T16066] ------------[ cut here ]------------ | [ 961.738964][T16066] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16066 | [ 961.739212][T16066] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.740036][T16066] Tainted: [W]=WARN [ 961.740137][T16066] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.740305][T16066] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.740445][T16066] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.740947][T16066] RSP: 0018:ffa0000004f275d0 EFLAGS: 00010286 [ 961.741133][T16066] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0824f [ 961.741333][T16066] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841278 [ 961.741536][T16066] RBP: 1ff40000009e4ebb R08: 1fe2200001b08250 R09: fffa3bfffffb0b37 [ 961.741734][T16066] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d841574 [ 961.741945][T16066] R13: ff1100000d841540 R14: ffffffff931c7940 R15: ff1100000d8411c0 [ 961.742148][T16066] FS: 00007f5ddcb9b440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.742395][T16066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.742573][T16066] CR2: 000000000044f720 CR3: 000000001807f002 CR4: 0000000000771ef0 [ 961.742773][T16066] PKRU: 55555554 [ 961.742875][T16066] Call Trace: [ 961.742978][T16066] [ 961.743045][T16066] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.743177][T16066] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.743326][T16066] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.743458][T16066] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.743601][T16066] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.743745][T16066] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.743878][T16066] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.744023][T16066] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.744163][T16066] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.744303][T16066] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.744450][T16066] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.744601][T16066] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.744746][T16066] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.744884][T16066] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.745029][T16066] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.745167][T16066] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.745302][T16066] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.745440][T16066] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.745581][T16066] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.745717][T16066] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.745853][T16066] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.746000][T16066] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.746139][T16066] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.746302][T16066] ? move_addr_to_kernel (net/socket.c:2511) [ 961.746439][T16066] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.746582][T16066] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.746718][T16066] ___sys_sendmsg (net/socket.c:2641) [ 961.746854][T16066] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.747001][T16066] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.747147][T16066] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.747290][T16066] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.747429][T16066] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.747569][T16066] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.747701][T16066] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.747837][T16066] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.747977][T16066] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.748109][T16066] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.748245][T16066] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.748409][T16066] RIP: 0033:0x7f5ddccf5c5e [ 961.748560][T16066] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.749113][T16066] RSP: 002b:00007ffc362fd6a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.749313][T16066] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f5ddccf5c5e [ 961.749517][T16066] RDX: 0000000000000000 RSI: 00007ffc362fd760 RDI: 0000000000000005 [ 961.749720][T16066] RBP: 00007ffc362fd6b0 R08: 0000000000000000 R09: 0000000000000000 [ 961.749987][T16066] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.750193][T16066] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 961.810908][T16070] ------------[ cut here ]------------ | [ 961.811097][T16070] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16070 | [ 961.811366][T16070] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.812183][T16070] Tainted: [W]=WARN [ 961.812283][T16070] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.812463][T16070] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.812614][T16070] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.813704][T16070] RSP: 0018:ffa0000004f675d0 EFLAGS: 00010286 [ 961.813907][T16070] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387532f [ 961.814164][T16070] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9978 [ 961.814385][T16070] RBP: 1ff40000009ecebb R08: 1fe2200003875330 R09: fffa3bfffffb0b37 [ 961.814592][T16070] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a91f4 [ 961.814793][T16070] R13: ff1100001c3a91c0 R14: ffffffff931c7940 R15: ff1100001c3a98c0 [ 961.815011][T16070] FS: 00007fab443be440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 961.815253][T16070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.815435][T16070] CR2: 000000000044f720 CR3: 0000000010aab006 CR4: 0000000000771ef0 [ 961.815645][T16070] PKRU: 55555554 [ 961.815758][T16070] Call Trace: [ 961.815863][T16070] [ 961.815938][T16070] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.816089][T16070] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.816234][T16070] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.816373][T16070] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.816516][T16070] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.816671][T16070] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.816803][T16070] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.816953][T16070] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.817088][T16070] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.817224][T16070] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.817366][T16070] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.817508][T16070] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.817659][T16070] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.817793][T16070] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.817930][T16070] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.818073][T16070] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.818234][T16070] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.818378][T16070] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.818518][T16070] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.818652][T16070] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.818791][T16070] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.818933][T16070] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.819066][T16070] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.819231][T16070] ? move_addr_to_kernel (net/socket.c:2511) [ 961.819371][T16070] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.819648][T16070] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.819784][T16070] ___sys_sendmsg (net/socket.c:2641) [ 961.819923][T16070] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.820060][T16070] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.820198][T16070] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.820351][T16070] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.820481][T16070] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.820674][T16070] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.820808][T16070] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.820950][T16070] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.821083][T16070] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.821215][T16070] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.821350][T16070] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.821518][T16070] RIP: 0033:0x7fab44518c5e [ 961.821661][T16070] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.822292][T16070] RSP: 002b:00007fff415ccf40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.822493][T16070] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fab44518c5e [ 961.822695][T16070] RDX: 0000000000000000 RSI: 00007fff415cd000 RDI: 0000000000000005 [ 961.822906][T16070] RBP: 00007fff415ccf50 R08: 0000000000000000 R09: 0000000000000000 [ 961.823126][T16070] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.823326][T16070] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 961.898916][T16076] ------------[ cut here ]------------ | [ 961.899137][T16076] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16076 | [ 961.899422][T16076] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.900378][T16076] Tainted: [W]=WARN [ 961.900537][T16076] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.900752][T16076] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.900960][T16076] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.901481][T16076] RSP: 0018:ffa0000004ea75d0 EFLAGS: 00010286 [ 961.901733][T16076] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000038751df [ 961.901997][T16076] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8ef8 [ 961.902243][T16076] RBP: 1ff40000009d4ebb R08: 1fe22000038751e0 R09: fffa3bfffffb0b37 [ 961.902485][T16076] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8af4 [ 961.902741][T16076] R13: ff1100001c3a8ac0 R14: ffffffff931c7940 R15: ff1100001c3a8e40 [ 961.903015][T16076] FS: 00007f9abac38440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 961.903302][T16076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.903526][T16076] CR2: 000000000044f720 CR3: 000000000261b006 CR4: 0000000000771ef0 [ 961.903777][T16076] PKRU: 55555554 [ 961.903942][T16076] Call Trace: [ 961.904093][T16076] [ 961.904211][T16076] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.904406][T16076] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 961.904607][T16076] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 961.904804][T16076] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.905001][T16076] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.905194][T16076] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 961.905439][T16076] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 961.905639][T16076] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 961.905823][T16076] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 961.906022][T16076] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 961.906208][T16076] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 961.906388][T16076] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 961.906583][T16076] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 961.906778][T16076] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 961.906973][T16076] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 961.907157][T16076] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 961.907340][T16076] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.907534][T16076] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 961.907718][T16076] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 961.907916][T16076] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 961.908103][T16076] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 961.908286][T16076] ? copy_msghdr_from_user (net/socket.c:2525) [ 961.908480][T16076] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 961.908702][T16076] ? move_addr_to_kernel (net/socket.c:2511) [ 961.908890][T16076] ? filemap_map_folio_range (mm/filemap.c:3873) [ 961.909090][T16076] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 961.909277][T16076] ___sys_sendmsg (net/socket.c:2641) [ 961.909461][T16076] ? copy_msghdr_from_user (net/socket.c:2628) [ 961.909703][T16076] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 961.909910][T16076] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 961.910178][T16076] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 961.910362][T16076] ? __sys_sendmsg_sock (net/socket.c:2656) [ 961.910554][T16076] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 961.910771][T16076] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.911053][T16076] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 961.911243][T16076] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 961.911433][T16076] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 961.911631][T16076] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 961.911944][T16076] RIP: 0033:0x7f9abad92c5e [ 961.912145][T16076] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 961.912779][T16076] RSP: 002b:00007ffd78ada6b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 961.913045][T16076] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9abad92c5e [ 961.913382][T16076] RDX: 0000000000000000 RSI: 00007ffd78ada770 RDI: 0000000000000005 [ 961.913644][T16076] RBP: 00007ffd78ada6c0 R08: 0000000000000000 R09: 0000000000000000 [ 961.913935][T16076] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 961.914282][T16076] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 961.995516][T16080] ------------[ cut here ]------------ | [ 961.995704][T16080] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16080 | [ 961.995989][T16080] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 961.996799][T16080] Tainted: [W]=WARN [ 961.996907][T16080] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 961.997082][T16080] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 961.997221][T16080] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 961.997705][T16080] RSP: 0018:ffa0000004ea75d0 EFLAGS: 00010286 [ 961.997878][T16080] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0457 [ 961.998093][T16080] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 961.998292][T16080] RBP: 1ff40000009d4ebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b37 [ 961.998489][T16080] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503034 [ 961.998695][T16080] R13: ff1100000f503000 R14: ffffffff931c7940 R15: ff1100000f502200 [ 961.998905][T16080] FS: 00007f74ef6a2440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 961.999143][T16080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.999309][T16080] CR2: 000000000044f720 CR3: 000000000d920004 CR4: 0000000000771ef0 [ 961.999512][T16080] PKRU: 55555554 [ 961.999615][T16080] Call Trace: [ 961.999715][T16080] [ 961.999786][T16080] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 961.999926][T16080] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.000068][T16080] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.000203][T16080] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.000333][T16080] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.000467][T16080] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.000602][T16080] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.000734][T16080] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.000868][T16080] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.001002][T16080] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.001135][T16080] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.001268][T16080] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.001433][T16080] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.001579][T16080] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.001708][T16080] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.001841][T16080] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.002002][T16080] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.002151][T16080] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.002312][T16080] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.002450][T16080] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.002625][T16080] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.002794][T16080] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.002939][T16080] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.003145][T16080] ? move_addr_to_kernel (net/socket.c:2511) [ 962.003311][T16080] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.003465][T16080] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.003633][T16080] ___sys_sendmsg (net/socket.c:2641) [ 962.003800][T16080] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.003974][T16080] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.004135][T16080] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.004291][T16080] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.004430][T16080] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.004573][T16080] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.004710][T16080] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.004875][T16080] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.005038][T16080] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.005207][T16080] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.005355][T16080] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.005578][T16080] RIP: 0033:0x7f74ef7fcc5e [ 962.005813][T16080] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.006426][T16080] RSP: 002b:00007ffd35b47910 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.006685][T16080] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f74ef7fcc5e [ 962.006913][T16080] RDX: 0000000000000000 RSI: 00007ffd35b479d0 RDI: 0000000000000005 [ 962.007214][T16080] RBP: 00007ffd35b47920 R08: 0000000000000000 R09: 0000000000000000 [ 962.007412][T16080] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.007624][T16080] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 962.086585][T16086] ------------[ cut here ]------------ | [ 962.086759][T16086] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16086 | [ 962.087139][T16086] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.087916][T16086] Tainted: [W]=WARN [ 962.088031][T16086] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.088206][T16086] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.088353][T16086] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.088878][T16086] RSP: 0018:ffa0000004f275d0 EFLAGS: 00010286 [ 962.089071][T16086] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0687 [ 962.089285][T16086] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503438 [ 962.089509][T16086] RBP: 1ff40000009e4ebb R08: 1fe2200001ea0688 R09: fffa3bfffffb0b37 [ 962.089728][T16086] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503ab4 [ 962.089955][T16086] R13: ff1100000f503a80 R14: ffffffff931c7940 R15: ff1100000f503380 [ 962.090174][T16086] FS: 00007f9a38a9e440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 962.090410][T16086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.090593][T16086] CR2: 000000000044f720 CR3: 00000000102fe001 CR4: 0000000000771ef0 [ 962.090802][T16086] PKRU: 55555554 [ 962.090919][T16086] Call Trace: [ 962.091018][T16086] [ 962.091093][T16086] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.091227][T16086] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.091369][T16086] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.091509][T16086] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.091645][T16086] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.091804][T16086] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.091981][T16086] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.092127][T16086] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.092269][T16086] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.092412][T16086] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.092576][T16086] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.092724][T16086] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.092873][T16086] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.093030][T16086] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.093167][T16086] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.093313][T16086] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.093451][T16086] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.093593][T16086] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.093740][T16086] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.093878][T16086] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.094033][T16086] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.094173][T16086] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.094318][T16086] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.094492][T16086] ? move_addr_to_kernel (net/socket.c:2511) [ 962.094640][T16086] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.094781][T16086] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.094931][T16086] ___sys_sendmsg (net/socket.c:2641) [ 962.095074][T16086] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.095222][T16086] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.095366][T16086] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.095515][T16086] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.095653][T16086] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.095795][T16086] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.095939][T16086] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.096087][T16086] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.096225][T16086] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.096364][T16086] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.096507][T16086] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.096678][T16086] RIP: 0033:0x7f9a38bf8c5e [ 962.096825][T16086] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.097332][T16086] RSP: 002b:00007ffc6fda8e00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.097554][T16086] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f9a38bf8c5e [ 962.097764][T16086] RDX: 0000000000000000 RSI: 00007ffc6fda8ec0 RDI: 0000000000000005 [ 962.097981][T16086] RBP: 00007ffc6fda8e10 R08: 0000000000000000 R09: 0000000000000000 [ 962.098190][T16086] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.098404][T16086] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 962.181569][T16090] ------------[ cut here ]------------ | [ 962.181750][T16090] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16090 | [ 962.182000][T16090] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.182827][T16090] Tainted: [W]=WARN [ 962.182939][T16090] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.183112][T16090] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.183260][T16090] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.183782][T16090] RSP: 0018:ffa0000004f875d0 EFLAGS: 00010286 [ 962.183984][T16090] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f188f [ 962.184200][T16090] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c478 [ 962.184416][T16090] RBP: 1ff40000009f0ebb R08: 1fe22000036f1890 R09: fffa3bfffffb0b37 [ 962.184644][T16090] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78caf4 [ 962.184857][T16090] R13: ff1100001b78cac0 R14: ffffffff931c7940 R15: ff1100001b78c3c0 [ 962.185080][T16090] FS: 00007fa10313f440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 962.185327][T16090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.185521][T16090] CR2: 000000000044f720 CR3: 000000001c60f003 CR4: 0000000000771ef0 [ 962.185755][T16090] PKRU: 55555554 [ 962.185868][T16090] Call Trace: [ 962.185985][T16090] [ 962.186060][T16090] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.186206][T16090] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.186357][T16090] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.186498][T16090] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.186648][T16090] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.186792][T16090] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.186948][T16090] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.187095][T16090] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.187238][T16090] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.187377][T16090] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.187565][T16090] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.187702][T16090] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.187841][T16090] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.187982][T16090] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.188117][T16090] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.188272][T16090] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.188463][T16090] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.188637][T16090] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.188775][T16090] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.188934][T16090] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.189095][T16090] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.189251][T16090] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.189393][T16090] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.189567][T16090] ? move_addr_to_kernel (net/socket.c:2511) [ 962.189723][T16090] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.189869][T16090] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.190043][T16090] ___sys_sendmsg (net/socket.c:2641) [ 962.190199][T16090] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.190357][T16090] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.190507][T16090] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.190680][T16090] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.190846][T16090] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.191003][T16090] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.191141][T16090] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.191277][T16090] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.191415][T16090] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.191562][T16090] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.191714][T16090] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.191930][T16090] RIP: 0033:0x7fa103299c5e [ 962.192088][T16090] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.192590][T16090] RSP: 002b:00007ffee81c0d10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.192790][T16090] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa103299c5e [ 962.192998][T16090] RDX: 0000000000000000 RSI: 00007ffee81c0dd0 RDI: 0000000000000005 [ 962.193196][T16090] RBP: 00007ffee81c0d20 R08: 0000000000000000 R09: 0000000000000000 [ 962.193402][T16090] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.193636][T16090] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 962.263200][T16096] ------------[ cut here ]------------ | [ 962.263375][T16096] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16096 | [ 962.263645][T16096] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.265352][T16096] Tainted: [W]=WARN [ 962.265468][T16096] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.265671][T16096] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.265830][T16096] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.266493][T16096] RSP: 0018:ffa00000050075d0 EFLAGS: 00010286 [ 962.266672][T16096] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f181f [ 962.266873][T16096] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78c0f8 [ 962.267176][T16096] RBP: 1ff4000000a00ebb R08: 1fe22000036f1820 R09: fffa3bfffffb0b37 [ 962.267386][T16096] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d1f4 [ 962.267593][T16096] R13: ff1100001b78d1c0 R14: ffffffff931c7940 R15: ff1100001b78c040 [ 962.267805][T16096] FS: 00007f00af9dd440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 962.268151][T16096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.268323][T16096] CR2: 000000000044f720 CR3: 0000000018383002 CR4: 0000000000771ef0 [ 962.268541][T16096] PKRU: 55555554 [ 962.268644][T16096] Call Trace: [ 962.268742][T16096] [ 962.268811][T16096] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.269023][T16096] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.269183][T16096] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.269321][T16096] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.269459][T16096] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.269600][T16096] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.269732][T16096] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.269872][T16096] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.270089][T16096] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.270222][T16096] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.270357][T16096] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.270487][T16096] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.270630][T16096] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.270769][T16096] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.271013][T16096] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.271203][T16096] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.271376][T16096] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.271562][T16096] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.271717][T16096] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.271869][T16096] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.272101][T16096] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.272235][T16096] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.272371][T16096] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.272545][T16096] ? move_addr_to_kernel (net/socket.c:2511) [ 962.272676][T16096] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.272808][T16096] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.273015][T16096] ___sys_sendmsg (net/socket.c:2641) [ 962.273148][T16096] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.273291][T16096] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.273431][T16096] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.273584][T16096] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.273724][T16096] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.273860][T16096] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.274025][T16096] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.274164][T16096] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.274309][T16096] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.274469][T16096] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.274607][T16096] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.274774][T16096] RIP: 0033:0x7f00afb37c5e [ 962.274944][T16096] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.275457][T16096] RSP: 002b:00007fff6aed9900 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.275664][T16096] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f00afb37c5e [ 962.275869][T16096] RDX: 0000000000000000 RSI: 00007fff6aed99c0 RDI: 0000000000000005 [ 962.276080][T16096] RBP: 00007fff6aed9910 R08: 0000000000000000 R09: 0000000000000000 [ 962.276283][T16096] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.276481][T16096] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 962.356597][T16100] ------------[ cut here ]------------ | [ 962.356816][T16100] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/16100 | [ 962.357071][T16100] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.357930][T16100] Tainted: [W]=WARN [ 962.358056][T16100] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.358230][T16100] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.358376][T16100] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.358885][T16100] RSP: 0018:ffa0000004f675d0 EFLAGS: 00010286 [ 962.359064][T16100] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897a17 [ 962.359259][T16100] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd0b8 [ 962.359458][T16100] RBP: 1ff40000009ecebb R08: 1fe2200001897a18 R09: fffa3bfffffb0b37 [ 962.359665][T16100] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bce74 [ 962.359863][T16100] R13: ff1100000c4bce40 R14: ffffffff931c7940 R15: ff1100000c4bd000 [ 962.360103][T16100] FS: 00007fdd020fb440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 962.360364][T16100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.360548][T16100] CR2: 000000000044f720 CR3: 000000000dbbb002 CR4: 0000000000771ef0 [ 962.360759][T16100] PKRU: 55555554 [ 962.360864][T16100] Call Trace: [ 962.360975][T16100] [ 962.361045][T16100] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.361187][T16100] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.361334][T16100] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.361476][T16100] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.361622][T16100] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.361766][T16100] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.361907][T16100] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.362045][T16100] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.362183][T16100] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.362320][T16100] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.362462][T16100] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.362611][T16100] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.362749][T16100] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.362887][T16100] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.363111][T16100] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.363251][T16100] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.363385][T16100] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.363529][T16100] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.363661][T16100] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.363793][T16100] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.363993][T16100] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.364126][T16100] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.364256][T16100] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.364417][T16100] ? move_addr_to_kernel (net/socket.c:2511) [ 962.364558][T16100] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.364688][T16100] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.364821][T16100] ___sys_sendmsg (net/socket.c:2641) [ 962.365042][T16100] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.365186][T16100] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.365323][T16100] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.365458][T16100] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.365602][T16100] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.365737][T16100] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.365876][T16100] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.366068][T16100] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.366201][T16100] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.366331][T16100] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.366462][T16100] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.366654][T16100] RIP: 0033:0x7fdd02255c5e [ 962.366794][T16100] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.367357][T16100] RSP: 002b:00007ffcaa75f900 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.367568][T16100] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fdd02255c5e [ 962.367762][T16100] RDX: 0000000000000000 RSI: 00007ffcaa75f9c0 RDI: 0000000000000005 [ 962.368026][T16100] RBP: 00007ffcaa75f910 R08: 0000000000000000 R09: 0000000000000000 [ 962.368222][T16100] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.368417][T16100] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 962.451188][T16106] ------------[ cut here ]------------ | [ 962.451362][T16106] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16106 | [ 962.451609][T16106] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.452382][T16106] Tainted: [W]=WARN [ 962.452485][T16106] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.452656][T16106] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.452796][T16106] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.453276][T16106] RSP: 0018:ffa00000050575d0 EFLAGS: 00010286 [ 962.453451][T16106] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897857 [ 962.453652][T16106] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bc2b8 [ 962.453849][T16106] RBP: 1ff4000000a0aebb R08: 1fe2200001897858 R09: fffa3bfffffb0b37 [ 962.454056][T16106] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd1f4 [ 962.454258][T16106] R13: ff1100000c4bd1c0 R14: ffffffff931c7940 R15: ff1100000c4bc200 [ 962.454464][T16106] FS: 00007fb393d96440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 962.454700][T16106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.454866][T16106] CR2: 000000000044f720 CR3: 000000000d931003 CR4: 0000000000771ef0 [ 962.455067][T16106] PKRU: 55555554 [ 962.455166][T16106] Call Trace: [ 962.455268][T16106] [ 962.455338][T16106] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.455496][T16106] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.455648][T16106] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.455782][T16106] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.455919][T16106] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.456054][T16106] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.456188][T16106] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.456322][T16106] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.456453][T16106] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.456586][T16106] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.456720][T16106] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.456848][T16106] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.456987][T16106] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.457118][T16106] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.457252][T16106] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.457384][T16106] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.457520][T16106] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.457656][T16106] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.457795][T16106] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.457942][T16106] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.458088][T16106] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.458226][T16106] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.458358][T16106] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.458530][T16106] ? move_addr_to_kernel (net/socket.c:2511) [ 962.458673][T16106] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.458809][T16106] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.458947][T16106] ___sys_sendmsg (net/socket.c:2641) [ 962.459078][T16106] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.459215][T16106] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.459350][T16106] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.459483][T16106] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.459626][T16106] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.459761][T16106] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.459900][T16106] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.460036][T16106] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.460168][T16106] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.460306][T16106] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.460438][T16106] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.460606][T16106] RIP: 0033:0x7fb393ef0c5e [ 962.460750][T16106] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.461323][T16106] RSP: 002b:00007ffe0e60eb60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.461531][T16106] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fb393ef0c5e [ 962.461727][T16106] RDX: 0000000000000000 RSI: 00007ffe0e60ec20 RDI: 0000000000000005 [ 962.461992][T16106] RBP: 00007ffe0e60eb70 R08: 0000000000000000 R09: 0000000000000000 [ 962.462198][T16106] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.462390][T16106] R13: 0000000069cbe809 R14: 0000000000000004 R15: 000000000049d620 | [ 962.537205][T16110] ------------[ cut here ]------------ | [ 962.537382][T16110] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16110 | [ 962.537631][T16110] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.538420][T16110] Tainted: [W]=WARN [ 962.538527][T16110] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.538699][T16110] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.538841][T16110] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.539365][T16110] RSP: 0018:ffa00000050575d0 EFLAGS: 00010286 [ 962.539548][T16110] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b2f [ 962.539746][T16110] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d978 [ 962.539958][T16110] RBP: 1ff4000000a0aebb R08: 1fe2200003725b30 R09: fffa3bfffffb0b37 [ 962.540155][T16110] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c934 [ 962.540354][T16110] R13: ff1100001b92c900 R14: ffffffff931c7940 R15: ff1100001b92d8c0 [ 962.540560][T16110] FS: 00007f2caa0f3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 962.540793][T16110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.540968][T16110] CR2: 000000000044f720 CR3: 000000000c57f001 CR4: 0000000000771ef0 [ 962.541175][T16110] PKRU: 55555554 [ 962.541275][T16110] Call Trace: [ 962.541374][T16110] [ 962.541447][T16110] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.541586][T16110] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.541726][T16110] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.541865][T16110] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.542010][T16110] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.542165][T16110] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.542298][T16110] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.542431][T16110] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.542568][T16110] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.542700][T16110] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.542836][T16110] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.542970][T16110] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.543109][T16110] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.543245][T16110] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.543377][T16110] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.543513][T16110] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.543648][T16110] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.543788][T16110] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.544003][T16110] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.544140][T16110] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.544273][T16110] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.544406][T16110] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.544543][T16110] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.544705][T16110] ? move_addr_to_kernel (net/socket.c:2511) [ 962.544844][T16110] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.545074][T16110] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.545225][T16110] ___sys_sendmsg (net/socket.c:2641) [ 962.545371][T16110] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.545513][T16110] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.545649][T16110] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.545787][T16110] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.546003][T16110] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.546143][T16110] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.546273][T16110] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.546419][T16110] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.546561][T16110] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.546694][T16110] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.546825][T16110] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.546996][T16110] RIP: 0033:0x7f2caa24dc5e [ 962.547144][T16110] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.547632][T16110] RSP: 002b:00007fff94fe1e00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.547832][T16110] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2caa24dc5e [ 962.548041][T16110] RDX: 0000000000000000 RSI: 00007fff94fe1ec0 RDI: 0000000000000005 [ 962.548241][T16110] RBP: 00007fff94fe1e10 R08: 0000000000000000 R09: 0000000000000000 [ 962.548441][T16110] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.548644][T16110] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 962.620660][T16116] ------------[ cut here ]------------ | [ 962.620834][T16116] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16116 | [ 962.621091][T16116] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.621909][T16116] Tainted: [W]=WARN [ 962.622015][T16116] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.622186][T16116] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.622333][T16116] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.622881][T16116] RSP: 0018:ffa00000050f75d0 EFLAGS: 00010286 [ 962.623080][T16116] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725a4f [ 962.623346][T16116] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d278 [ 962.623552][T16116] RBP: 1ff4000000a1eebb R08: 1fe2200003725a50 R09: fffa3bfffffb0b37 [ 962.623764][T16116] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92caf4 [ 962.623998][T16116] R13: ff1100001b92cac0 R14: ffffffff931c7940 R15: ff1100001b92d1c0 [ 962.624228][T16116] FS: 00007f18ee737440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 962.624474][T16116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.624659][T16116] CR2: 000000000044f720 CR3: 000000000d92a006 CR4: 0000000000771ef0 [ 962.624874][T16116] PKRU: 55555554 [ 962.624998][T16116] Call Trace: [ 962.625119][T16116] [ 962.625193][T16116] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.625335][T16116] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.625480][T16116] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.625626][T16116] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.625766][T16116] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.625910][T16116] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.626052][T16116] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.626190][T16116] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.626328][T16116] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.626477][T16116] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.626637][T16116] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.626791][T16116] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.626961][T16116] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.627095][T16116] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.627230][T16116] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.627367][T16116] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.627503][T16116] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.627646][T16116] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.627791][T16116] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.628021][T16116] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.628162][T16116] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.628298][T16116] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.628435][T16116] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.628646][T16116] ? move_addr_to_kernel (net/socket.c:2511) [ 962.628788][T16116] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.629008][T16116] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.629154][T16116] ___sys_sendmsg (net/socket.c:2641) [ 962.629306][T16116] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.629451][T16116] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.629595][T16116] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.629738][T16116] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.630847][T16116] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.631044][T16116] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.631180][T16116] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.631316][T16116] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.631453][T16116] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.631596][T16116] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.631731][T16116] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.631954][T16116] RIP: 0033:0x7f18ee891c5e [ 962.632097][T16116] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.632597][T16116] RSP: 002b:00007ffd176f6d00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.632800][T16116] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f18ee891c5e [ 962.633058][T16116] RDX: 0000000000000000 RSI: 00007ffd176f6dc0 RDI: 0000000000000005 [ 962.633269][T16116] RBP: 00007ffd176f6d10 R08: 0000000000000000 R09: 0000000000000000 [ 962.633474][T16116] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.633686][T16116] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 962.713114][T16120] ------------[ cut here ]------------ | [ 962.713302][T16120] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16120 | [ 962.713556][T16120] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.714338][T16120] Tainted: [W]=WARN [ 962.714440][T16120] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.714623][T16120] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.714807][T16120] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.715324][T16120] RSP: 0018:ffa00000051075d0 EFLAGS: 00010286 [ 962.715499][T16120] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e937 [ 962.715728][T16120] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9749b8 [ 962.715942][T16120] RBP: 1ff4000000a20ebb R08: 1fe220000192e938 R09: fffa3bfffffb0b37 [ 962.716142][T16120] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975574 [ 962.716363][T16120] R13: ff1100000c975540 R14: ffffffff931c7940 R15: ff1100000c974900 [ 962.716574][T16120] FS: 00007f6606c67440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 962.716819][T16120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.717001][T16120] CR2: 000000000044f720 CR3: 000000001a467004 CR4: 0000000000771ef0 [ 962.717206][T16120] PKRU: 55555554 [ 962.717325][T16120] Call Trace: [ 962.717439][T16120] [ 962.717562][T16120] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.717698][T16120] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.717848][T16120] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.717998][T16120] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.718158][T16120] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.718301][T16120] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.718444][T16120] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.718726][T16120] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.718864][T16120] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.719548][T16120] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.719695][T16120] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.719831][T16120] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.719993][T16120] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.720135][T16120] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.720266][T16120] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.720408][T16120] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.720548][T16120] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.720683][T16120] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.720827][T16120] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.720976][T16120] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.721117][T16120] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.721265][T16120] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.721407][T16120] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.721583][T16120] ? move_addr_to_kernel (net/socket.c:2511) [ 962.721721][T16120] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.721862][T16120] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.722010][T16120] ___sys_sendmsg (net/socket.c:2641) [ 962.722146][T16120] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.722303][T16120] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.722444][T16120] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.722595][T16120] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.722734][T16120] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.722879][T16120] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.723562][T16120] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.723702][T16120] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.723866][T16120] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.724049][T16120] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.724187][T16120] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.724358][T16120] RIP: 0033:0x7f6606dc1c5e [ 962.724502][T16120] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.725017][T16120] RSP: 002b:00007ffe5e0baeb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.725229][T16120] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6606dc1c5e [ 962.725435][T16120] RDX: 0000000000000000 RSI: 00007ffe5e0baf70 RDI: 0000000000000005 [ 962.725669][T16120] RBP: 00007ffe5e0baec0 R08: 0000000000000000 R09: 0000000000000000 [ 962.725878][T16120] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.726084][T16120] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 962.816977][T16126] ------------[ cut here ]------------ | [ 962.817181][T16126] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16126 | [ 962.817467][T16126] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.818332][T16126] Tainted: [W]=WARN [ 962.818479][T16126] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.818702][T16126] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.818910][T16126] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.819433][T16126] RSP: 0018:ffa00000050e75d0 EFLAGS: 00010286 [ 962.819662][T16126] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e81f [ 962.819920][T16126] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9740f8 [ 962.820166][T16126] RBP: 1ff4000000a1cebb R08: 1fe220000192e820 R09: fffa3bfffffb0b37 [ 962.820414][T16126] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975734 [ 962.820670][T16126] R13: ff1100000c975700 R14: ffffffff931c7940 R15: ff1100000c974040 [ 962.820933][T16126] FS: 00007f1725881440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 962.821218][T16126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.821439][T16126] CR2: 000000000044f720 CR3: 000000000d994004 CR4: 0000000000771ef0 [ 962.821694][T16126] PKRU: 55555554 [ 962.821843][T16126] Call Trace: [ 962.822005][T16126] [ 962.822123][T16126] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.822306][T16126] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.822501][T16126] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.822699][T16126] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.822883][T16126] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.823088][T16126] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.823270][T16126] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.823456][T16126] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.823650][T16126] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.823835][T16126] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.824036][T16126] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.824221][T16126] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.824410][T16126] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.824605][T16126] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.824786][T16126] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.824982][T16126] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.825167][T16126] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.825357][T16126] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.825552][T16126] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.825736][T16126] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.825941][T16126] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.826125][T16126] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.826309][T16126] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.826528][T16126] ? move_addr_to_kernel (net/socket.c:2511) [ 962.826713][T16126] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.826909][T16126] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.827094][T16126] ___sys_sendmsg (net/socket.c:2641) [ 962.827277][T16126] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.827466][T16126] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.827663][T16126] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.827847][T16126] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.828046][T16126] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.828231][T16126] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.828414][T16126] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.828609][T16126] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.828793][T16126] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.828991][T16126] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.829176][T16126] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.829391][T16126] RIP: 0033:0x7f17259dbc5e [ 962.829591][T16126] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.830124][T16126] RSP: 002b:00007ffe052d90a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.830376][T16126] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f17259dbc5e [ 962.830631][T16126] RDX: 0000000000000000 RSI: 00007ffe052d9160 RDI: 0000000000000005 [ 962.830880][T16126] RBP: 00007ffe052d90b0 R08: 0000000000000000 R09: 0000000000000000 [ 962.831142][T16126] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.831395][T16126] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 962.910888][T16130] ------------[ cut here ]------------ | [ 962.911074][T16130] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16130 | [ 962.911327][T16130] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 962.912735][T16130] Tainted: [W]=WARN [ 962.912840][T16130] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 962.913024][T16130] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 962.913167][T16130] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 962.913651][T16130] RSP: 0018:ffa00000050575d0 EFLAGS: 00010286 [ 962.913821][T16130] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0839f [ 962.914030][T16130] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841cf8 [ 962.914230][T16130] RBP: 1ff4000000a0aebb R08: 1fe2200001b083a0 R09: fffa3bfffffb0b37 [ 962.914430][T16130] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d841ab4 [ 962.914636][T16130] R13: ff1100000d841a80 R14: ffffffff931c7940 R15: ff1100000d841c40 [ 962.914839][T16130] FS: 00007f1d1db2a440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 962.915079][T16130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.915249][T16130] CR2: 000000000044f720 CR3: 000000001d3ff002 CR4: 0000000000771ef0 [ 962.915449][T16130] PKRU: 55555554 [ 962.915554][T16130] Call Trace: [ 962.915654][T16130] [ 962.915722][T16130] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 962.915862][T16130] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 962.916009][T16130] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 962.916146][T16130] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.916277][T16130] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.916412][T16130] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 962.916547][T16130] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 962.916681][T16130] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 962.916812][T16130] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 962.916952][T16130] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 962.917090][T16130] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 962.917224][T16130] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 962.917358][T16130] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 962.917492][T16130] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 962.917627][T16130] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 962.917761][T16130] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 962.917900][T16130] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.918035][T16130] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 962.918170][T16130] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 962.918303][T16130] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 962.918438][T16130] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 962.918576][T16130] ? copy_msghdr_from_user (net/socket.c:2525) [ 962.918707][T16130] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 962.918871][T16130] ? move_addr_to_kernel (net/socket.c:2511) [ 962.919008][T16130] ? filemap_map_folio_range (mm/filemap.c:3873) [ 962.919141][T16130] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 962.919275][T16130] ___sys_sendmsg (net/socket.c:2641) [ 962.919408][T16130] ? copy_msghdr_from_user (net/socket.c:2628) [ 962.919555][T16130] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 962.919692][T16130] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 962.919832][T16130] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 962.919972][T16130] ? __sys_sendmsg_sock (net/socket.c:2656) [ 962.920106][T16130] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 962.920252][T16130] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.920388][T16130] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 962.920529][T16130] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 962.920669][T16130] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 962.920803][T16130] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 962.920971][T16130] RIP: 0033:0x7f1d1dc84c5e [ 962.921114][T16130] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 962.921598][T16130] RSP: 002b:00007ffcd43ad3a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 962.921800][T16130] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f1d1dc84c5e [ 962.922005][T16130] RDX: 0000000000000000 RSI: 00007ffcd43ad460 RDI: 0000000000000005 [ 962.922204][T16130] RBP: 00007ffcd43ad3b0 R08: 0000000000000000 R09: 0000000000000000 [ 962.922403][T16130] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 962.922609][T16130] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 963.011642][T16136] ------------[ cut here ]------------ | [ 963.011819][T16136] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16136 | [ 963.012682][T16136] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.013626][T16136] Tainted: [W]=WARN [ 963.013733][T16136] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.014007][T16136] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.014152][T16136] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.014768][T16136] RSP: 0018:ffa00000050e75d0 EFLAGS: 00010286 [ 963.015048][T16136] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0808f [ 963.015277][T16136] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d840478 [ 963.015480][T16136] RBP: 1ff4000000a1cebb R08: 1fe2200001b08090 R09: fffa3bfffffb0b37 [ 963.015685][T16136] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8405b4 [ 963.016007][T16136] R13: ff1100000d840580 R14: ffffffff931c7940 R15: ff1100000d8403c0 [ 963.016231][T16136] FS: 00007f4ebcab5440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 963.016481][T16136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.016658][T16136] CR2: 000000000044f720 CR3: 000000001c0f7002 CR4: 0000000000771ef0 [ 963.016865][T16136] PKRU: 55555554 [ 963.017072][T16136] Call Trace: [ 963.017192][T16136] [ 963.017266][T16136] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.017398][T16136] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.017549][T16136] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.017697][T16136] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.017831][T16136] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.018074][T16136] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.018214][T16136] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.018351][T16136] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.018486][T16136] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.018632][T16136] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.018768][T16136] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.018983][T16136] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.019125][T16136] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.019266][T16136] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.019406][T16136] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.019574][T16136] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.020444][T16136] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.020591][T16136] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.020746][T16136] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.020879][T16136] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.021100][T16136] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.021242][T16136] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.021380][T16136] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.021572][T16136] ? move_addr_to_kernel (net/socket.c:2511) [ 963.021707][T16136] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.021841][T16136] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.022048][T16136] ___sys_sendmsg (net/socket.c:2641) [ 963.022182][T16136] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.022319][T16136] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.022458][T16136] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.022601][T16136] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.022735][T16136] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.022870][T16136] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.023072][T16136] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.023206][T16136] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.023340][T16136] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.023479][T16136] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.023635][T16136] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.023802][T16136] RIP: 0033:0x7f4ebcc0fc5e [ 963.024024][T16136] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.024498][T16136] RSP: 002b:00007ffcf806e1c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.024706][T16136] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f4ebcc0fc5e [ 963.024973][T16136] RDX: 0000000000000000 RSI: 00007ffcf806e280 RDI: 0000000000000005 [ 963.025176][T16136] RBP: 00007ffcf806e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 963.025379][T16136] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.025585][T16136] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 963.092368][T16140] ------------[ cut here ]------------ | [ 963.092561][T16140] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16140 | [ 963.092812][T16140] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.093671][T16140] Tainted: [W]=WARN [ 963.093773][T16140] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.093950][T16140] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.094095][T16140] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.094632][T16140] RSP: 0018:ffa00000050b75d0 EFLAGS: 00010286 [ 963.094821][T16140] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387524f [ 963.095371][T16140] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9278 [ 963.095577][T16140] RBP: 1ff4000000a16ebb R08: 1fe2200003875250 R09: fffa3bfffffb0b37 [ 963.095777][T16140] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9ab4 [ 963.095997][T16140] R13: ff1100001c3a9a80 R14: ffffffff931c7940 R15: ff1100001c3a91c0 [ 963.096217][T16140] FS: 00007fda6d288440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 963.096459][T16140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.096641][T16140] CR2: 000000000044f720 CR3: 000000001b9de001 CR4: 0000000000771ef0 [ 963.096875][T16140] PKRU: 55555554 [ 963.096993][T16140] Call Trace: [ 963.097095][T16140] [ 963.097175][T16140] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.097313][T16140] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.097456][T16140] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.097630][T16140] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.097777][T16140] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.097927][T16140] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.098064][T16140] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.098322][T16140] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.098460][T16140] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.098603][T16140] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.098753][T16140] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.098906][T16140] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.099070][T16140] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.099208][T16140] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.099339][T16140] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.099472][T16140] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.099612][T16140] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.099758][T16140] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.099903][T16140] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.100039][T16140] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.100180][T16140] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.100317][T16140] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.100463][T16140] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.100643][T16140] ? move_addr_to_kernel (net/socket.c:2511) [ 963.100780][T16140] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.100926][T16140] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.101065][T16140] ___sys_sendmsg (net/socket.c:2641) [ 963.101201][T16140] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.101339][T16140] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.101475][T16140] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.101628][T16140] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.101768][T16140] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.101910][T16140] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.102056][T16140] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.102190][T16140] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.102324][T16140] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.102454][T16140] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.102595][T16140] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.102761][T16140] RIP: 0033:0x7fda6d3e2c5e [ 963.102932][T16140] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.103426][T16140] RSP: 002b:00007ffc0a48ccf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.103633][T16140] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fda6d3e2c5e [ 963.103843][T16140] RDX: 0000000000000000 RSI: 00007ffc0a48cdb0 RDI: 0000000000000005 [ 963.104073][T16140] RBP: 00007ffc0a48cd00 R08: 0000000000000000 R09: 0000000000000000 [ 963.104292][T16140] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.104490][T16140] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 963.186013][T16146] ------------[ cut here ]------------ | [ 963.186187][T16146] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16146 | [ 963.186426][T16146] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.187704][T16146] Tainted: [W]=WARN [ 963.187805][T16146] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.187982][T16146] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.188124][T16146] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.188628][T16146] RSP: 0018:ffa00000051575d0 EFLAGS: 00010286 [ 963.188802][T16146] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387516f [ 963.189004][T16146] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8b78 [ 963.189216][T16146] RBP: 1ff4000000a2aebb R08: 1fe2200003875170 R09: fffa3bfffffb0b37 [ 963.189421][T16146] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9e34 [ 963.189626][T16146] R13: ff1100001c3a9e00 R14: ffffffff931c7940 R15: ff1100001c3a8ac0 [ 963.189824][T16146] FS: 00007fba11626440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 963.190078][T16146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.190249][T16146] CR2: 000000000044f720 CR3: 000000001c918006 CR4: 0000000000771ef0 [ 963.190456][T16146] PKRU: 55555554 [ 963.190570][T16146] Call Trace: [ 963.190679][T16146] [ 963.190753][T16146] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.190900][T16146] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.191055][T16146] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.191193][T16146] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.191327][T16146] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.191468][T16146] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.191611][T16146] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.191746][T16146] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.191880][T16146] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.192023][T16146] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.192162][T16146] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.192297][T16146] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.192431][T16146] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.192572][T16146] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.192707][T16146] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.192843][T16146] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.192985][T16146] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.193120][T16146] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.193253][T16146] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.193385][T16146] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.193525][T16146] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.193663][T16146] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.193800][T16146] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.193968][T16146] ? move_addr_to_kernel (net/socket.c:2511) [ 963.194104][T16146] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.194236][T16146] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.194369][T16146] ___sys_sendmsg (net/socket.c:2641) [ 963.194504][T16146] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.194647][T16146] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.194789][T16146] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.194931][T16146] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.195063][T16146] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.195197][T16146] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.195332][T16146] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.195465][T16146] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.195604][T16146] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.195736][T16146] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.195869][T16146] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.196038][T16146] RIP: 0033:0x7fba11780c5e [ 963.196178][T16146] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.196676][T16146] RSP: 002b:00007ffc373b1cf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.196907][T16146] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fba11780c5e [ 963.197114][T16146] RDX: 0000000000000000 RSI: 00007ffc373b1db0 RDI: 0000000000000005 [ 963.197319][T16146] RBP: 00007ffc373b1d00 R08: 0000000000000000 R09: 0000000000000000 [ 963.197526][T16146] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.197725][T16146] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 963.264839][T16150] ------------[ cut here ]------------ | [ 963.265098][T16150] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/16150 | [ 963.265339][T16150] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.266185][T16150] Tainted: [W]=WARN [ 963.266288][T16150] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.266462][T16150] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.266628][T16150] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.267200][T16150] RSP: 0018:ffa00000051575d0 EFLAGS: 00010286 [ 963.267382][T16150] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea05a7 [ 963.267594][T16150] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502d38 [ 963.267803][T16150] RBP: 1ff4000000a2aebb R08: 1fe2200001ea05a8 R09: fffa3bfffffb0b37 [ 963.268081][T16150] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502074 [ 963.268279][T16150] R13: ff1100000f502040 R14: ffffffff931c7940 R15: ff1100000f502c80 [ 963.268480][T16150] FS: 00007f2a88647440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 963.268726][T16150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.268972][T16150] CR2: 000000000044f720 CR3: 000000001cfe1006 CR4: 0000000000771ef0 [ 963.269174][T16150] PKRU: 55555554 [ 963.269276][T16150] Call Trace: [ 963.269384][T16150] [ 963.269454][T16150] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.269595][T16150] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.269734][T16150] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.269866][T16150] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.270080][T16150] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.270216][T16150] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.270355][T16150] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.270492][T16150] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.270644][T16150] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.270777][T16150] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.270959][T16150] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.271115][T16150] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.271254][T16150] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.271395][T16150] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.271540][T16150] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.271680][T16150] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.271822][T16150] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.271968][T16150] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.272106][T16150] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.272253][T16150] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.272395][T16150] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.272538][T16150] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.272680][T16150] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.272858][T16150] ? move_addr_to_kernel (net/socket.c:2511) [ 963.273021][T16150] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.273163][T16150] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.273299][T16150] ___sys_sendmsg (net/socket.c:2641) [ 963.273439][T16150] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.273584][T16150] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.273726][T16150] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.273868][T16150] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.274068][T16150] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.274206][T16150] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.274346][T16150] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.274488][T16150] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.274633][T16150] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.274766][T16150] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.274960][T16150] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.275136][T16150] RIP: 0033:0x7f2a887a1c5e [ 963.275278][T16150] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.275796][T16150] RSP: 002b:00007ffff4120610 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.276085][T16150] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2a887a1c5e [ 963.276290][T16150] RDX: 0000000000000000 RSI: 00007ffff41206d0 RDI: 0000000000000005 [ 963.276494][T16150] RBP: 00007ffff4120620 R08: 0000000000000000 R09: 0000000000000000 [ 963.276696][T16150] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.276952][T16150] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 963.346731][T16156] ------------[ cut here ]------------ | [ 963.346916][T16156] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16156 | [ 963.347165][T16156] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.348053][T16156] Tainted: [W]=WARN [ 963.348167][T16156] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.348336][T16156] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.348484][T16156] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.349000][T16156] RSP: 0018:ffa00000051a75d0 EFLAGS: 00010286 [ 963.349186][T16156] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea06bf [ 963.349411][T16156] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5035f8 [ 963.349733][T16156] RBP: 1ff4000000a34ebb R08: 1fe2200001ea06c0 R09: fffa3bfffffb0b37 [ 963.349944][T16156] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503734 [ 963.350145][T16156] R13: ff1100000f503700 R14: ffffffff931c7940 R15: ff1100000f503540 [ 963.350370][T16156] FS: 00007ff83e286440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 963.350626][T16156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.350812][T16156] CR2: 000000000044f720 CR3: 000000000dbbe004 CR4: 0000000000771ef0 [ 963.351024][T16156] PKRU: 55555554 [ 963.351126][T16156] Call Trace: [ 963.351226][T16156] [ 963.351295][T16156] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.351431][T16156] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.351583][T16156] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.351718][T16156] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.351853][T16156] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.351995][T16156] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.352142][T16156] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.352275][T16156] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.352407][T16156] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.352548][T16156] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.352685][T16156] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.352817][T16156] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.353043][T16156] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.353175][T16156] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.353316][T16156] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.353466][T16156] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.353707][T16156] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.353850][T16156] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.353992][T16156] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.354127][T16156] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.354344][T16156] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.354477][T16156] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.354630][T16156] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.354802][T16156] ? move_addr_to_kernel (net/socket.c:2511) [ 963.355021][T16156] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.355152][T16156] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.355292][T16156] ___sys_sendmsg (net/socket.c:2641) [ 963.355423][T16156] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.355656][T16156] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.355791][T16156] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.355933][T16156] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.356083][T16156] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.356323][T16156] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.356472][T16156] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.356612][T16156] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.356747][T16156] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.356983][T16156] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.357116][T16156] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.357282][T16156] RIP: 0033:0x7ff83e3e0c5e [ 963.357510][T16156] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.358045][T16156] RSP: 002b:00007ffe0ba45b10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.358329][T16156] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff83e3e0c5e [ 963.358546][T16156] RDX: 0000000000000000 RSI: 00007ffe0ba45bd0 RDI: 0000000000000005 [ 963.358834][T16156] RBP: 00007ffe0ba45b20 R08: 0000000000000000 R09: 0000000000000000 [ 963.359034][T16156] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.359231][T16156] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 963.444246][T16160] ------------[ cut here ]------------ | [ 963.444462][T16160] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/16160 | [ 963.444736][T16160] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.445582][T16160] Tainted: [W]=WARN [ 963.445692][T16160] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.445874][T16160] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.446033][T16160] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.446562][T16160] RSP: 0018:ffa00000052075d0 EFLAGS: 00010286 [ 963.446758][T16160] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1af7 [ 963.446985][T16160] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d7b8 [ 963.447199][T16160] RBP: 1ff4000000a40ebb R08: 1fe22000036f1af8 R09: fffa3bfffffb0b37 [ 963.447432][T16160] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d574 [ 963.447648][T16160] R13: ff1100001b78d540 R14: ffffffff931c7940 R15: ff1100001b78d700 [ 963.447864][T16160] FS: 00007faee4e91440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 963.448132][T16160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.448302][T16160] CR2: 000000000044f720 CR3: 00000000193ac006 CR4: 0000000000771ef0 [ 963.448548][T16160] PKRU: 55555554 [ 963.448664][T16160] Call Trace: [ 963.448775][T16160] [ 963.448865][T16160] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.449015][T16160] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.449199][T16160] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.449338][T16160] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.449473][T16160] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.449618][T16160] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.449753][T16160] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.449910][T16160] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.450047][T16160] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.450181][T16160] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.450317][T16160] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.450459][T16160] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.450618][T16160] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.450762][T16160] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.450912][T16160] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.451049][T16160] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.451186][T16160] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.451329][T16160] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.451474][T16160] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.451616][T16160] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.451752][T16160] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.451912][T16160] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.452046][T16160] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.452219][T16160] ? move_addr_to_kernel (net/socket.c:2511) [ 963.452358][T16160] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.452491][T16160] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.452632][T16160] ___sys_sendmsg (net/socket.c:2641) [ 963.452769][T16160] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.452968][T16160] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.453112][T16160] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.453256][T16160] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.453398][T16160] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.453553][T16160] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.453705][T16160] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.453853][T16160] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.454060][T16160] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.454194][T16160] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.454347][T16160] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.454513][T16160] RIP: 0033:0x7faee4febc5e [ 963.454663][T16160] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.455254][T16160] RSP: 002b:00007ffc67707460 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.455471][T16160] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007faee4febc5e [ 963.455690][T16160] RDX: 0000000000000000 RSI: 00007ffc67707520 RDI: 0000000000000005 [ 963.455986][T16160] RBP: 00007ffc67707470 R08: 0000000000000000 R09: 0000000000000000 [ 963.456215][T16160] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.456424][T16160] R13: 0000000069cbe80a R14: 0000000000000004 R15: 000000000049d620 | [ 963.533636][T16166] ------------[ cut here ]------------ | [ 963.533814][T16166] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16166 | [ 963.534298][T16166] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.535111][T16166] Tainted: [W]=WARN [ 963.535212][T16166] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.535404][T16166] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.535561][T16166] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.536075][T16166] RSP: 0018:ffa00000050b75d0 EFLAGS: 00010286 [ 963.536260][T16166] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f19a7 [ 963.536476][T16166] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cd38 [ 963.536693][T16166] RBP: 1ff4000000a16ebb R08: 1fe22000036f19a8 R09: fffa3bfffffb0b37 [ 963.536914][T16166] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78c3f4 [ 963.537127][T16166] R13: ff1100001b78c3c0 R14: ffffffff931c7940 R15: ff1100001b78cc80 [ 963.537352][T16166] FS: 00007f0de50b8440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 963.537610][T16166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.537787][T16166] CR2: 000000000044f720 CR3: 00000000193ac005 CR4: 0000000000771ef0 [ 963.538009][T16166] PKRU: 55555554 [ 963.538122][T16166] Call Trace: [ 963.538229][T16166] [ 963.538306][T16166] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.538451][T16166] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.538611][T16166] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.538760][T16166] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.538912][T16166] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.539090][T16166] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.539229][T16166] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.539376][T16166] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.539525][T16166] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.539662][T16166] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.539806][T16166] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.539944][T16166] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.540080][T16166] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.540215][T16166] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.540348][T16166] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.540483][T16166] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.540623][T16166] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.540764][T16166] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.540905][T16166] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.541041][T16166] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.541178][T16166] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.541319][T16166] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.541452][T16166] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.541628][T16166] ? move_addr_to_kernel (net/socket.c:2511) [ 963.541767][T16166] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.541907][T16166] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.542048][T16166] ___sys_sendmsg (net/socket.c:2641) [ 963.542182][T16166] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.542325][T16166] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.542462][T16166] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.542611][T16166] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.542747][T16166] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.542888][T16166] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.543033][T16166] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.543182][T16166] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.543335][T16166] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.543478][T16166] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.543628][T16166] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.543802][T16166] RIP: 0033:0x7f0de5212c5e [ 963.543960][T16166] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.544472][T16166] RSP: 002b:00007fff1a00dd20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.544687][T16166] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0de5212c5e [ 963.544892][T16166] RDX: 0000000000000000 RSI: 00007fff1a00dde0 RDI: 0000000000000005 [ 963.545096][T16166] RBP: 00007fff1a00dd30 R08: 0000000000000000 R09: 0000000000000000 [ 963.545297][T16166] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.545502][T16166] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 963.610600][T16170] ------------[ cut here ]------------ | [ 963.610771][T16170] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16170 | [ 963.611114][T16170] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.612017][T16170] Tainted: [W]=WARN [ 963.612142][T16170] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.612317][T16170] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.612461][T16170] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.613064][T16170] RSP: 0018:ffa00000052575d0 EFLAGS: 00010286 [ 963.613269][T16170] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897a87 [ 963.613495][T16170] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd438 [ 963.613724][T16170] RBP: 1ff4000000a4aebb R08: 1fe2200001897a88 R09: fffa3bfffffb0b37 [ 963.614026][T16170] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd034 [ 963.614245][T16170] R13: ff1100000c4bd000 R14: ffffffff931c7940 R15: ff1100000c4bd380 [ 963.614468][T16170] FS: 00007fe6e1e67440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 963.614720][T16170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.614958][T16170] CR2: 000000000044f720 CR3: 0000000019a83004 CR4: 0000000000771ef0 [ 963.615172][T16170] PKRU: 55555554 [ 963.615280][T16170] Call Trace: [ 963.615387][T16170] [ 963.615458][T16170] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.615605][T16170] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.615757][T16170] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.615947][T16170] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.616088][T16170] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.616233][T16170] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.616371][T16170] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.616525][T16170] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.616666][T16170] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.616810][T16170] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.616958][T16170] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.617100][T16170] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.617237][T16170] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.617374][T16170] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.617513][T16170] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.617656][T16170] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.617791][T16170] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.617934][T16170] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.618082][T16170] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.618220][T16170] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.618358][T16170] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.618493][T16170] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.618633][T16170] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.618798][T16170] ? move_addr_to_kernel (net/socket.c:2511) [ 963.618942][T16170] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.619078][T16170] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.619216][T16170] ___sys_sendmsg (net/socket.c:2641) [ 963.619350][T16170] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.619487][T16170] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.619631][T16170] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.619770][T16170] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.619907][T16170] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.620045][T16170] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.620178][T16170] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.620313][T16170] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.620459][T16170] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.620599][T16170] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.620734][T16170] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.620909][T16170] RIP: 0033:0x7fe6e1fc1c5e [ 963.621057][T16170] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.621566][T16170] RSP: 002b:00007ffe06f6b870 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.621783][T16170] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fe6e1fc1c5e [ 963.621997][T16170] RDX: 0000000000000000 RSI: 00007ffe06f6b930 RDI: 0000000000000005 [ 963.622201][T16170] RBP: 00007ffe06f6b880 R08: 0000000000000000 R09: 0000000000000000 [ 963.622411][T16170] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.622622][T16170] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 963.699053][T16176] ------------[ cut here ]------------ | [ 963.699239][T16176] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16176 | [ 963.699498][T16176] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.700780][T16176] Tainted: [W]=WARN [ 963.700891][T16176] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.701076][T16176] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.701221][T16176] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.701723][T16176] RSP: 0018:ffa00000052a75d0 EFLAGS: 00010286 [ 963.701918][T16176] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897bd7 [ 963.702128][T16176] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bdeb8 [ 963.702337][T16176] RBP: 1ff4000000a54ebb R08: 1fe2200001897bd8 R09: fffa3bfffffb0b37 [ 963.702564][T16176] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bc234 [ 963.702784][T16176] R13: ff1100000c4bc200 R14: ffffffff931c7940 R15: ff1100000c4bde00 [ 963.703015][T16176] FS: 00007fbe57819440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 963.703285][T16176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.703465][T16176] CR2: 000000000044f720 CR3: 000000001b5fe001 CR4: 0000000000771ef0 [ 963.703683][T16176] PKRU: 55555554 [ 963.703785][T16176] Call Trace: [ 963.703905][T16176] [ 963.703978][T16176] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.704112][T16176] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.704254][T16176] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.704388][T16176] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.704531][T16176] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.704673][T16176] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.704807][T16176] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.704954][T16176] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.705099][T16176] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.705233][T16176] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.705373][T16176] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.705506][T16176] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.705655][T16176] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.705797][T16176] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.705949][T16176] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.706104][T16176] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.706254][T16176] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.706389][T16176] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.706530][T16176] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.706664][T16176] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.706800][T16176] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.706939][T16176] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.707072][T16176] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.707267][T16176] ? move_addr_to_kernel (net/socket.c:2511) [ 963.707406][T16176] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.707551][T16176] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.707692][T16176] ___sys_sendmsg (net/socket.c:2641) [ 963.707823][T16176] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.707969][T16176] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.708107][T16176] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.708248][T16176] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.708387][T16176] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.708538][T16176] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.708676][T16176] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.708810][T16176] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.708947][T16176] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.709084][T16176] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.709223][T16176] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.709393][T16176] RIP: 0033:0x7fbe57973c5e [ 963.709546][T16176] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.710042][T16176] RSP: 002b:00007ffcd5d29e10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.710255][T16176] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbe57973c5e [ 963.710459][T16176] RDX: 0000000000000000 RSI: 00007ffcd5d29ed0 RDI: 0000000000000005 [ 963.710678][T16176] RBP: 00007ffcd5d29e20 R08: 0000000000000000 R09: 0000000000000000 [ 963.710890][T16176] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.711100][T16176] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 963.789670][T16180] ------------[ cut here ]------------ | [ 963.789919][T16180] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16180 | [ 963.790255][T16180] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.791215][T16180] Tainted: [W]=WARN [ 963.791368][T16180] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.791599][T16180] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.791806][T16180] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.792355][T16180] RSP: 0018:ffa00000051e75d0 EFLAGS: 00010286 [ 963.792587][T16180] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b2f [ 963.792837][T16180] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d978 [ 963.793102][T16180] RBP: 1ff4000000a3cebb R08: 1fe2200003725b30 R09: fffa3bfffffb0b37 [ 963.793353][T16180] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c934 [ 963.793642][T16180] R13: ff1100001b92c900 R14: ffffffff931c7940 R15: ff1100001b92d8c0 [ 963.793914][T16180] FS: 00007f8823685440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 963.794201][T16180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.794430][T16180] CR2: 000000000044f720 CR3: 000000001d3fa005 CR4: 0000000000771ef0 [ 963.794691][T16180] PKRU: 55555554 [ 963.794843][T16180] Call Trace: [ 963.795013][T16180] [ 963.795131][T16180] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.795329][T16180] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.795547][T16180] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.795744][T16180] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.795943][T16180] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.796136][T16180] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.796321][T16180] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.796511][T16180] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.796711][T16180] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.796911][T16180] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.797099][T16180] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.797281][T16180] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.797471][T16180] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.797695][T16180] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.797912][T16180] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.798121][T16180] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.798348][T16180] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.798556][T16180] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.798801][T16180] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.799029][T16180] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.799252][T16180] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.799467][T16180] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.799698][T16180] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.799963][T16180] ? move_addr_to_kernel (net/socket.c:2511) [ 963.800166][T16180] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.800354][T16180] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.800564][T16180] ___sys_sendmsg (net/socket.c:2641) [ 963.800764][T16180] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.800991][T16180] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.801193][T16180] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.801395][T16180] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.801632][T16180] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.801845][T16180] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.802076][T16180] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.802299][T16180] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.802493][T16180] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.802717][T16180] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.802931][T16180] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.803168][T16180] RIP: 0033:0x7f88237dfc5e [ 963.803378][T16180] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.803982][T16180] RSP: 002b:00007ffc4cd60b90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.804252][T16180] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f88237dfc5e [ 963.804536][T16180] RDX: 0000000000000000 RSI: 00007ffc4cd60c50 RDI: 0000000000000005 [ 963.804807][T16180] RBP: 00007ffc4cd60ba0 R08: 0000000000000000 R09: 0000000000000000 [ 963.805095][T16180] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.805366][T16180] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 963.884322][T16186] ------------[ cut here ]------------ | [ 963.884546][T16186] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16186 | [ 963.884862][T16186] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.885837][T16186] Tainted: [W]=WARN [ 963.886018][T16186] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.886252][T16186] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.886462][T16186] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.887049][T16186] RSP: 0018:ffa00000051b75d0 EFLAGS: 00010286 [ 963.887319][T16186] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000372581f [ 963.887600][T16186] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92c0f8 [ 963.887876][T16186] RBP: 1ff4000000a36ebb R08: 1fe2200003725820 R09: fffa3bfffffb0b37 [ 963.888158][T16186] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c234 [ 963.888428][T16186] R13: ff1100001b92c200 R14: ffffffff931c7940 R15: ff1100001b92c040 [ 963.888724][T16186] FS: 00007ff4056f2440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 963.889049][T16186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.889284][T16186] CR2: 000000000044f720 CR3: 000000001a81c003 CR4: 0000000000771ef0 [ 963.889570][T16186] PKRU: 55555554 [ 963.889730][T16186] Call Trace: [ 963.889891][T16186] [ 963.890024][T16186] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.890218][T16186] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.890423][T16186] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.890621][T16186] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.890806][T16186] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.891112][T16186] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.891371][T16186] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.891623][T16186] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.891881][T16186] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.892141][T16186] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.892415][T16186] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.892695][T16186] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.892980][T16186] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.893239][T16186] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.893538][T16186] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.893848][T16186] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.894095][T16186] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.894290][T16186] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.894517][T16186] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.894739][T16186] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.894953][T16186] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.895142][T16186] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.895354][T16186] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.895599][T16186] ? move_addr_to_kernel (net/socket.c:2511) [ 963.895813][T16186] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.896028][T16186] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.896245][T16186] ___sys_sendmsg (net/socket.c:2641) [ 963.896483][T16186] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.896718][T16186] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.896935][T16186] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.897138][T16186] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.897350][T16186] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.897553][T16186] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.897753][T16186] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.897977][T16186] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.898172][T16186] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.898390][T16186] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.898589][T16186] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.898812][T16186] RIP: 0033:0x7ff40584cc5e [ 963.899023][T16186] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.899604][T16186] RSP: 002b:00007ffdf9223910 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.899911][T16186] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff40584cc5e [ 963.900191][T16186] RDX: 0000000000000000 RSI: 00007ffdf92239d0 RDI: 0000000000000005 [ 963.900464][T16186] RBP: 00007ffdf9223920 R08: 0000000000000000 R09: 0000000000000000 [ 963.900768][T16186] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.901049][T16186] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 963.967632][T16190] ------------[ cut here ]------------ | [ 963.967798][T16190] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16190 | [ 963.968564][T16190] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 963.969423][T16190] Tainted: [W]=WARN [ 963.969541][T16190] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 963.969717][T16190] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 963.969864][T16190] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 963.970434][T16190] RSP: 0018:ffa00000052575d0 EFLAGS: 00010286 [ 963.970622][T16190] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eaf7 [ 963.970859][T16190] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9757b8 [ 963.971139][T16190] RBP: 1ff4000000a4aebb R08: 1fe220000192eaf8 R09: fffa3bfffffb0b37 [ 963.971342][T16190] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975c74 [ 963.971562][T16190] R13: ff1100000c975c40 R14: ffffffff931c7940 R15: ff1100000c975700 [ 963.971774][T16190] FS: 00007ff7110c9440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 963.972107][T16190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.972283][T16190] CR2: 000000000044f720 CR3: 000000001959b002 CR4: 0000000000771ef0 [ 963.972486][T16190] PKRU: 55555554 [ 963.972604][T16190] Call Trace: [ 963.972704][T16190] [ 963.972773][T16190] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 963.972985][T16190] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 963.973139][T16190] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 963.973279][T16190] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.973419][T16190] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.973568][T16190] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 963.973712][T16190] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 963.973854][T16190] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 963.974064][T16190] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 963.974212][T16190] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 963.974362][T16190] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 963.974501][T16190] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 963.974654][T16190] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 963.974798][T16190] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 963.975006][T16190] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 963.975148][T16190] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 963.975286][T16190] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.975427][T16190] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 963.975570][T16190] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 963.975708][T16190] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 963.975849][T16190] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 963.976057][T16190] ? copy_msghdr_from_user (net/socket.c:2525) [ 963.976200][T16190] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 963.976387][T16190] ? move_addr_to_kernel (net/socket.c:2511) [ 963.976531][T16190] ? filemap_map_folio_range (mm/filemap.c:3873) [ 963.976679][T16190] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 963.976833][T16190] ___sys_sendmsg (net/socket.c:2641) [ 963.977067][T16190] ? copy_msghdr_from_user (net/socket.c:2628) [ 963.977223][T16190] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 963.977369][T16190] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 963.977515][T16190] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 963.977663][T16190] ? __sys_sendmsg_sock (net/socket.c:2656) [ 963.977813][T16190] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 963.978026][T16190] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.978173][T16190] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 963.978315][T16190] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 963.978458][T16190] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 963.978604][T16190] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 963.978784][T16190] RIP: 0033:0x7ff711223c5e [ 963.979138][T16190] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 963.979687][T16190] RSP: 002b:00007ffc824eef00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.980008][T16190] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff711223c5e [ 963.980263][T16190] RDX: 0000000000000000 RSI: 00007ffc824eefc0 RDI: 0000000000000005 [ 963.980511][T16190] RBP: 00007ffc824eef10 R08: 0000000000000000 R09: 0000000000000000 [ 963.980732][T16190] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 963.981081][T16190] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 964.064108][T16196] ------------[ cut here ]------------ | [ 964.064356][T16196] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16196 | [ 964.064733][T16196] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.065979][T16196] Tainted: [W]=WARN [ 964.066139][T16196] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.066400][T16196] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.066625][T16196] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.067393][T16196] RSP: 0018:ffa00000052e75d0 EFLAGS: 00010286 [ 964.067660][T16196] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192ea17 [ 964.067980][T16196] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9750b8 [ 964.068288][T16196] RBP: 1ff4000000a5cebb R08: 1fe220000192ea18 R09: fffa3bfffffb0b37 [ 964.068604][T16196] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9753b4 [ 964.068919][T16196] R13: ff1100000c975380 R14: ffffffff931c7940 R15: ff1100000c975000 [ 964.069227][T16196] FS: 00007fd9965a9440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 964.069595][T16196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.069859][T16196] CR2: 000000000044f720 CR3: 000000001959b005 CR4: 0000000000771ef0 [ 964.070172][T16196] PKRU: 55555554 [ 964.070327][T16196] Call Trace: [ 964.070479][T16196] [ 964.070593][T16196] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.070803][T16196] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.071899][T16196] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.072109][T16196] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.072310][T16196] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.072519][T16196] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.072740][T16196] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.072957][T16196] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.073167][T16196] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.073371][T16196] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.073591][T16196] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.073795][T16196] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.074010][T16196] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.074218][T16196] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.074420][T16196] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.074629][T16196] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.074833][T16196] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.075043][T16196] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.075251][T16196] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.075455][T16196] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.075668][T16196] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.075874][T16196] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.076083][T16196] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.076332][T16196] ? move_addr_to_kernel (net/socket.c:2511) [ 964.076544][T16196] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.076748][T16196] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.076963][T16196] ___sys_sendmsg (net/socket.c:2641) [ 964.077167][T16196] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.077382][T16196] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.077600][T16196] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.077807][T16196] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.077971][T16196] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.078116][T16196] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.078264][T16196] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.078403][T16196] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.078561][T16196] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.078704][T16196] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.078845][T16196] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.079021][T16196] RIP: 0033:0x7fd996703c5e [ 964.079171][T16196] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.079750][T16196] RSP: 002b:00007ffdb0d0afc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.079988][T16196] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd996703c5e [ 964.080204][T16196] RDX: 0000000000000000 RSI: 00007ffdb0d0b080 RDI: 0000000000000005 [ 964.080414][T16196] RBP: 00007ffdb0d0afd0 R08: 0000000000000000 R09: 0000000000000000 [ 964.080630][T16196] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.080841][T16196] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 964.160215][T16200] ------------[ cut here ]------------ | [ 964.160431][T16200] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16200 | [ 964.160686][T16200] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.161580][T16200] Tainted: [W]=WARN [ 964.161685][T16200] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.161858][T16200] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.162011][T16200] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.162506][T16200] RSP: 0018:ffa00000052d75d0 EFLAGS: 00010286 [ 964.162683][T16200] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0816f [ 964.162882][T16200] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d840b78 [ 964.163130][T16200] RBP: 1ff4000000a5aebb R08: 1fe2200001b08170 R09: fffa3bfffffb0b37 [ 964.163372][T16200] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840e74 [ 964.163612][T16200] R13: ff1100000d840e40 R14: ffffffff931c7940 R15: ff1100000d840ac0 [ 964.163821][T16200] FS: 00007ff4ab268440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 964.164076][T16200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.164243][T16200] CR2: 000000000044f720 CR3: 000000000ca6b003 CR4: 0000000000771ef0 [ 964.164450][T16200] PKRU: 55555554 [ 964.164557][T16200] Call Trace: [ 964.164667][T16200] [ 964.164735][T16200] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.164869][T16200] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.165016][T16200] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.165153][T16200] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.165315][T16200] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.165457][T16200] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.165617][T16200] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.165756][T16200] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.165903][T16200] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.166047][T16200] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.166208][T16200] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.166378][T16200] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.166517][T16200] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.166662][T16200] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.166805][T16200] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.166949][T16200] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.167095][T16200] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.167239][T16200] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.167375][T16200] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.167599][T16200] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.167761][T16200] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.167921][T16200] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.168087][T16200] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.168259][T16200] ? move_addr_to_kernel (net/socket.c:2511) [ 964.168393][T16200] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.168531][T16200] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.168675][T16200] ___sys_sendmsg (net/socket.c:2641) [ 964.168822][T16200] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.168983][T16200] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.169135][T16200] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.169275][T16200] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.169409][T16200] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.169557][T16200] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.169711][T16200] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.169855][T16200] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.170005][T16200] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.170143][T16200] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.170278][T16200] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.170446][T16200] RIP: 0033:0x7ff4ab3c2c5e [ 964.170596][T16200] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.171114][T16200] RSP: 002b:00007ffcb4632d90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.171370][T16200] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff4ab3c2c5e [ 964.171660][T16200] RDX: 0000000000000000 RSI: 00007ffcb4632e50 RDI: 0000000000000005 [ 964.171883][T16200] RBP: 00007ffcb4632da0 R08: 0000000000000000 R09: 0000000000000000 [ 964.172105][T16200] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.172344][T16200] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 964.243407][T16206] ------------[ cut here ]------------ | [ 964.243647][T16206] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16206 | [ 964.243956][T16206] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.244855][T16206] Tainted: [W]=WARN [ 964.245023][T16206] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.245247][T16206] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.245452][T16206] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.246040][T16206] RSP: 0018:ffa00000052575d0 EFLAGS: 00010286 [ 964.246271][T16206] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b08367 [ 964.246539][T16206] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841b38 [ 964.246799][T16206] RBP: 1ff4000000a4aebb R08: 1fe2200001b08368 R09: fffa3bfffffb0b37 [ 964.247082][T16206] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d841e34 [ 964.247341][T16206] R13: ff1100000d841e00 R14: ffffffff931c7940 R15: ff1100000d841a80 [ 964.247613][T16206] FS: 00007ff344954440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 964.247923][T16206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.248151][T16206] CR2: 000000000044f720 CR3: 000000001b0c6005 CR4: 0000000000771ef0 [ 964.248409][T16206] PKRU: 55555554 [ 964.248570][T16206] Call Trace: [ 964.248740][T16206] [ 964.248865][T16206] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.249066][T16206] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.249263][T16206] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.249449][T16206] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.249656][T16206] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.249850][T16206] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.250051][T16206] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.250243][T16206] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.250435][T16206] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.250639][T16206] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.250851][T16206] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.251069][T16206] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.251275][T16206] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.251482][T16206] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.251686][T16206] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.251876][T16206] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.252077][T16206] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.252263][T16206] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.252451][T16206] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.252643][T16206] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.252836][T16206] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.253035][T16206] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.253226][T16206] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.253452][T16206] ? move_addr_to_kernel (net/socket.c:2511) [ 964.253643][T16206] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.253830][T16206] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.254033][T16206] ___sys_sendmsg (net/socket.c:2641) [ 964.254223][T16206] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.254413][T16206] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.254609][T16206] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.254801][T16206] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.255006][T16206] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.255201][T16206] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.255403][T16206] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.255600][T16206] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.255788][T16206] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.255982][T16206] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.256180][T16206] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.256415][T16206] RIP: 0033:0x7ff344aaec5e [ 964.256624][T16206] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.257183][T16206] RSP: 002b:00007ffe22291ea0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.257462][T16206] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007ff344aaec5e [ 964.257723][T16206] RDX: 0000000000000000 RSI: 00007ffe22291f60 RDI: 0000000000000005 [ 964.257982][T16206] RBP: 00007ffe22291eb0 R08: 0000000000000000 R09: 0000000000000000 [ 964.258231][T16206] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.258480][T16206] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 964.347227][T16210] ------------[ cut here ]------------ | [ 964.347457][T16210] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16210 | [ 964.347793][T16210] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.348772][T16210] Tainted: [W]=WARN [ 964.349416][T16210] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.349656][T16210] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.349868][T16210] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.350425][T16210] RSP: 0018:ffa00000051575d0 EFLAGS: 00010286 [ 964.350676][T16210] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387539f [ 964.350945][T16210] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9cf8 [ 964.351199][T16210] RBP: 1ff4000000a2aebb R08: 1fe22000038753a0 R09: fffa3bfffffb0b37 [ 964.351460][T16210] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a9574 [ 964.351737][T16210] R13: ff1100001c3a9540 R14: ffffffff931c7940 R15: ff1100001c3a9c40 [ 964.352020][T16210] FS: 00007fd3246ed440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 964.352327][T16210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.352564][T16210] CR2: 000000000044f720 CR3: 0000000018017002 CR4: 0000000000771ef0 [ 964.352839][T16210] PKRU: 55555554 [ 964.353020][T16210] Call Trace: [ 964.353181][T16210] [ 964.353307][T16210] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.353499][T16210] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.353723][T16210] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.353939][T16210] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.354129][T16210] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.354326][T16210] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.354535][T16210] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.354739][T16210] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.354946][T16210] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.355135][T16210] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.355340][T16210] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.355534][T16210] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.355727][T16210] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.355932][T16210] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.356119][T16210] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.356308][T16210] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.356500][T16210] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.356705][T16210] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.356912][T16210] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.357102][T16210] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.357304][T16210] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.357494][T16210] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.357702][T16210] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.357935][T16210] ? move_addr_to_kernel (net/socket.c:2511) [ 964.358124][T16210] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.358312][T16210] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.358505][T16210] ___sys_sendmsg (net/socket.c:2641) [ 964.358702][T16210] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.358912][T16210] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.359107][T16210] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.359302][T16210] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.359500][T16210] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.359704][T16210] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.359911][T16210] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.360116][T16210] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.360321][T16210] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.360534][T16210] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.360742][T16210] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.360980][T16210] RIP: 0033:0x7fd324847c5e [ 964.361178][T16210] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.361735][T16210] RSP: 002b:00007ffc29a07750 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.362011][T16210] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fd324847c5e [ 964.362269][T16210] RDX: 0000000000000000 RSI: 00007ffc29a07810 RDI: 0000000000000005 [ 964.362534][T16210] RBP: 00007ffc29a07760 R08: 0000000000000000 R09: 0000000000000000 [ 964.362792][T16210] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.363064][T16210] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 964.444117][T16216] ------------[ cut here ]------------ | [ 964.444347][T16216] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16216 | [ 964.444642][T16216] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.446044][T16216] Tainted: [W]=WARN [ 964.446199][T16216] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.446420][T16216] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.446625][T16216] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.447171][T16216] RSP: 0018:ffa00000053175d0 EFLAGS: 00010286 [ 964.447395][T16216] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387532f [ 964.447666][T16216] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9978 [ 964.447935][T16216] RBP: 1ff4000000a62ebb R08: 1fe2200003875330 R09: fffa3bfffffb0b37 [ 964.448188][T16216] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8234 [ 964.448457][T16216] R13: ff1100001c3a8200 R14: ffffffff931c7940 R15: ff1100001c3a98c0 [ 964.448722][T16216] FS: 00007fa9a8229440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 964.449025][T16216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.449251][T16216] CR2: 000000000044f720 CR3: 000000001a1d5001 CR4: 0000000000771ef0 [ 964.449514][T16216] PKRU: 55555554 [ 964.449677][T16216] Call Trace: [ 964.449830][T16216] [ 964.449965][T16216] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.450153][T16216] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.450352][T16216] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.450549][T16216] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.450742][T16216] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.450968][T16216] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.451159][T16216] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.451348][T16216] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.451545][T16216] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.451736][T16216] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.451948][T16216] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.452142][T16216] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.452335][T16216] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.452534][T16216] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.452719][T16216] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.452921][T16216] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.453112][T16216] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.453303][T16216] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.453503][T16216] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.453701][T16216] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.453913][T16216] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.454101][T16216] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.454289][T16216] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.454504][T16216] ? move_addr_to_kernel (net/socket.c:2511) [ 964.454703][T16216] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.454914][T16216] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.455105][T16216] ___sys_sendmsg (net/socket.c:2641) [ 964.455292][T16216] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.455484][T16216] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.455681][T16216] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.455872][T16216] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.456080][T16216] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.456271][T16216] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.456458][T16216] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.456655][T16216] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.456848][T16216] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.457046][T16216] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.457234][T16216] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.457454][T16216] RIP: 0033:0x7fa9a8383c5e [ 964.457663][T16216] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.458232][T16216] RSP: 002b:00007ffe0fb65400 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.458502][T16216] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa9a8383c5e [ 964.458774][T16216] RDX: 0000000000000000 RSI: 00007ffe0fb654c0 RDI: 0000000000000005 [ 964.459038][T16216] RBP: 00007ffe0fb65410 R08: 0000000000000000 R09: 0000000000000000 [ 964.459313][T16216] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.459572][T16216] R13: 0000000069cbe80b R14: 0000000000000004 R15: 000000000049d620 | [ 964.543456][T16220] ------------[ cut here ]------------ | [ 964.543645][T16220] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16220 | [ 964.543943][T16220] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.544758][T16220] Tainted: [W]=WARN [ 964.544872][T16220] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.545053][T16220] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.545204][T16220] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.545747][T16220] RSP: 0018:ffa00000052e75d0 EFLAGS: 00010286 [ 964.545940][T16220] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea079f [ 964.546167][T16220] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f503cf8 [ 964.546393][T16220] RBP: 1ff4000000a5cebb R08: 1fe2200001ea07a0 R09: fffa3bfffffb0b37 [ 964.546628][T16220] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502934 [ 964.546858][T16220] R13: ff1100000f502900 R14: ffffffff931c7940 R15: ff1100000f503c40 [ 964.547084][T16220] FS: 00007f2c251e8440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 964.547353][T16220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.547551][T16220] CR2: 000000000044f720 CR3: 000000001b0c1004 CR4: 0000000000771ef0 [ 964.547771][T16220] PKRU: 55555554 [ 964.547899][T16220] Call Trace: [ 964.548015][T16220] [ 964.548090][T16220] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.548236][T16220] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.548389][T16220] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.548540][T16220] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.548692][T16220] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.548840][T16220] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.548996][T16220] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.549146][T16220] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.549287][T16220] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.549428][T16220] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.549584][T16220] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.549726][T16220] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.549868][T16220] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.550521][T16220] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.550672][T16220] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.550823][T16220] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.550980][T16220] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.551138][T16220] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.551288][T16220] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.551452][T16220] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.551681][T16220] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.551838][T16220] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.552000][T16220] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.552200][T16220] ? move_addr_to_kernel (net/socket.c:2511) [ 964.552344][T16220] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.552480][T16220] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.552639][T16220] ___sys_sendmsg (net/socket.c:2641) [ 964.552780][T16220] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.552929][T16220] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.553076][T16220] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.553225][T16220] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.553368][T16220] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.553505][T16220] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.553687][T16220] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.553837][T16220] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.553996][T16220] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.554145][T16220] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.554300][T16220] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.554534][T16220] RIP: 0033:0x7f2c25342c5e [ 964.554689][T16220] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.555207][T16220] RSP: 002b:00007ffe9deee460 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.555423][T16220] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f2c25342c5e [ 964.555636][T16220] RDX: 0000000000000000 RSI: 00007ffe9deee520 RDI: 0000000000000005 [ 964.555838][T16220] RBP: 00007ffe9deee470 R08: 0000000000000000 R09: 0000000000000000 [ 964.556043][T16220] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.556256][T16220] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 964.641341][T16226] ------------[ cut here ]------------ | [ 964.641575][T16226] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16226 | [ 964.641920][T16226] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.642852][T16226] Tainted: [W]=WARN [ 964.643126][T16226] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.643537][T16226] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.643813][T16226] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.644462][T16226] RSP: 0018:ffa00000051575d0 EFLAGS: 00010286 [ 964.644798][T16226] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea048f [ 964.645183][T16226] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502478 [ 964.645494][T16226] RBP: 1ff4000000a2aebb R08: 1fe2200001ea0490 R09: fffa3bfffffb0b37 [ 964.645774][T16226] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f5031f4 [ 964.646050][T16226] R13: ff1100000f5031c0 R14: ffffffff931c7940 R15: ff1100000f5023c0 [ 964.646310][T16226] FS: 00007fcea50ab440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 964.646612][T16226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.646839][T16226] CR2: 000000000044f720 CR3: 000000001c787006 CR4: 0000000000771ef0 [ 964.647137][T16226] PKRU: 55555554 [ 964.647304][T16226] Call Trace: [ 964.647472][T16226] [ 964.647610][T16226] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.647803][T16226] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.648019][T16226] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.648215][T16226] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.648409][T16226] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.648621][T16226] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.648824][T16226] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.649029][T16226] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.649217][T16226] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.649408][T16226] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.649642][T16226] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.649844][T16226] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.650058][T16226] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.650282][T16226] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.650482][T16226] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.650707][T16226] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.650995][T16226] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.651201][T16226] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.651395][T16226] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.651592][T16226] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.651785][T16226] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.651983][T16226] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.652172][T16226] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.652419][T16226] ? move_addr_to_kernel (net/socket.c:2511) [ 964.652629][T16226] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.652825][T16226] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.653039][T16226] ___sys_sendmsg (net/socket.c:2641) [ 964.653234][T16226] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.653436][T16226] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.653645][T16226] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.653860][T16226] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.654082][T16226] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.654289][T16226] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.654494][T16226] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.654696][T16226] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.654889][T16226] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.655098][T16226] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.655293][T16226] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.655542][T16226] RIP: 0033:0x7fcea5205c5e [ 964.655759][T16226] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.656340][T16226] RSP: 002b:00007ffce819af90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.656616][T16226] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcea5205c5e [ 964.656871][T16226] RDX: 0000000000000000 RSI: 00007ffce819b050 RDI: 0000000000000005 [ 964.657145][T16226] RBP: 00007ffce819afa0 R08: 0000000000000000 R09: 0000000000000000 [ 964.657411][T16226] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.657673][T16226] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 964.742536][T16230] ------------[ cut here ]------------ | [ 964.742704][T16230] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16230 | [ 964.742957][T16230] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.743740][T16230] Tainted: [W]=WARN [ 964.743845][T16230] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.744020][T16230] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.744165][T16230] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.744680][T16230] RSP: 0018:ffa00000053075d0 EFLAGS: 00010286 [ 964.744850][T16230] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1b2f [ 964.745069][T16230] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d978 [ 964.745288][T16230] RBP: 1ff4000000a60ebb R08: 1fe22000036f1b30 R09: fffa3bfffffb0b37 [ 964.745486][T16230] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78ce74 [ 964.745700][T16230] R13: ff1100001b78ce40 R14: ffffffff931c7940 R15: ff1100001b78d8c0 [ 964.745925][T16230] FS: 00007fc9d28f3440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 964.746178][T16230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.746353][T16230] CR2: 000000000044f720 CR3: 000000000d427005 CR4: 0000000000771ef0 [ 964.746571][T16230] PKRU: 55555554 [ 964.746671][T16230] Call Trace: [ 964.746773][T16230] [ 964.746840][T16230] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.746994][T16230] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.747144][T16230] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.747287][T16230] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.747427][T16230] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.747571][T16230] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.747715][T16230] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.747861][T16230] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.748007][T16230] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.748146][T16230] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.748293][T16230] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.748441][T16230] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.748584][T16230] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.748733][T16230] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.748875][T16230] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.749020][T16230] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.749157][T16230] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.749297][T16230] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.749431][T16230] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.749587][T16230] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.749733][T16230] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.749872][T16230] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.750013][T16230] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.750176][T16230] ? move_addr_to_kernel (net/socket.c:2511) [ 964.750311][T16230] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.750445][T16230] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.750600][T16230] ___sys_sendmsg (net/socket.c:2641) [ 964.750732][T16230] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.750874][T16230] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.751017][T16230] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.751162][T16230] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.751296][T16230] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.751431][T16230] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.751588][T16230] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.751725][T16230] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.751884][T16230] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.752034][T16230] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.752169][T16230] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.752364][T16230] RIP: 0033:0x7fc9d2a4dc5e [ 964.752509][T16230] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.753015][T16230] RSP: 002b:00007ffd15a80c40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.753231][T16230] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc9d2a4dc5e [ 964.753443][T16230] RDX: 0000000000000000 RSI: 00007ffd15a80d00 RDI: 0000000000000005 [ 964.753664][T16230] RBP: 00007ffd15a80c50 R08: 0000000000000000 R09: 0000000000000000 [ 964.753884][T16230] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.754105][T16230] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 964.828149][T16236] ------------[ cut here ]------------ | [ 964.828302][T16236] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16236 | [ 964.828540][T16236] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.829298][T16236] Tainted: [W]=WARN [ 964.829412][T16236] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.829597][T16236] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.829747][T16236] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.830231][T16236] RSP: 0018:ffa00000053875d0 EFLAGS: 00010286 [ 964.830401][T16236] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1a4f [ 964.830611][T16236] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78d278 [ 964.830818][T16236] RBP: 1ff4000000a70ebb R08: 1fe22000036f1a50 R09: fffa3bfffffb0b37 [ 964.831021][T16236] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78c074 [ 964.831229][T16236] R13: ff1100001b78c040 R14: ffffffff931c7940 R15: ff1100001b78d1c0 [ 964.831427][T16236] FS: 00007f30f71f5440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 964.831667][T16236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.831835][T16236] CR2: 000000000044f720 CR3: 000000001808a006 CR4: 0000000000771ef0 [ 964.832038][T16236] PKRU: 55555554 [ 964.832140][T16236] Call Trace: [ 964.832244][T16236] [ 964.832312][T16236] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.832443][T16236] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.832586][T16236] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.832720][T16236] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.832850][T16236] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.833000][T16236] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.833131][T16236] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.833263][T16236] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.833393][T16236] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.833533][T16236] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.833686][T16236] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.833816][T16236] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.833955][T16236] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.834088][T16236] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.834218][T16236] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.834353][T16236] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.834485][T16236] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.834626][T16236] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.834766][T16236] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.834904][T16236] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.835046][T16236] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.835181][T16236] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.835314][T16236] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.835477][T16236] ? move_addr_to_kernel (net/socket.c:2511) [ 964.835627][T16236] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.835766][T16236] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.835908][T16236] ___sys_sendmsg (net/socket.c:2641) [ 964.836042][T16236] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.836178][T16236] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.836320][T16236] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.836458][T16236] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.836602][T16236] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.836737][T16236] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.836869][T16236] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.837008][T16236] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.837141][T16236] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.837298][T16236] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.837456][T16236] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.837636][T16236] RIP: 0033:0x7f30f734fc5e [ 964.837775][T16236] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.838278][T16236] RSP: 002b:00007ffff81b0010 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.838478][T16236] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f30f734fc5e [ 964.838685][T16236] RDX: 0000000000000000 RSI: 00007ffff81b00d0 RDI: 0000000000000005 [ 964.839473][T16236] RBP: 00007ffff81b0020 R08: 0000000000000000 R09: 0000000000000000 [ 964.839703][T16236] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.839954][T16236] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 964.904585][T16240] ------------[ cut here ]------------ | [ 964.904774][T16240] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16240 | [ 964.905032][T16240] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.905842][T16240] Tainted: [W]=WARN [ 964.905954][T16240] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.906136][T16240] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.906295][T16240] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.906801][T16240] RSP: 0018:ffa00000053b75d0 EFLAGS: 00010286 [ 964.907301][T16240] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897b9f [ 964.907527][T16240] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bdcf8 [ 964.907740][T16240] RBP: 1ff4000000a76ebb R08: 1fe2200001897ba0 R09: fffa3bfffffb0b37 [ 964.907954][T16240] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bccb4 [ 964.908167][T16240] R13: ff1100000c4bcc80 R14: ffffffff931c7940 R15: ff1100000c4bdc40 [ 964.908373][T16240] FS: 00007f6795eab440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 964.908624][T16240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.908797][T16240] CR2: 000000000044f720 CR3: 000000001808a002 CR4: 0000000000771ef0 [ 964.909009][T16240] PKRU: 55555554 [ 964.909114][T16240] Call Trace: [ 964.909216][T16240] [ 964.909297][T16240] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.909431][T16240] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.909584][T16240] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.909721][T16240] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.909856][T16240] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.910008][T16240] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 964.910145][T16240] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 964.910282][T16240] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 964.910428][T16240] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.910580][T16240] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 964.910716][T16240] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 964.910857][T16240] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 964.911001][T16240] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 964.911140][T16240] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 964.911276][T16240] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 964.911414][T16240] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 964.911551][T16240] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.911688][T16240] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 964.911828][T16240] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 964.911973][T16240] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 964.912115][T16240] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 964.912273][T16240] ? copy_msghdr_from_user (net/socket.c:2525) [ 964.912432][T16240] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 964.912617][T16240] ? move_addr_to_kernel (net/socket.c:2511) [ 964.912757][T16240] ? filemap_map_folio_range (mm/filemap.c:3873) [ 964.912907][T16240] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.913047][T16240] ___sys_sendmsg (net/socket.c:2641) [ 964.913186][T16240] ? copy_msghdr_from_user (net/socket.c:2628) [ 964.913322][T16240] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 964.913472][T16240] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 964.913634][T16240] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 964.913786][T16240] ? __sys_sendmsg_sock (net/socket.c:2656) [ 964.913934][T16240] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 964.914066][T16240] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.914198][T16240] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 964.914332][T16240] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 964.914464][T16240] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 964.914603][T16240] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 964.914764][T16240] RIP: 0033:0x7f6796005c5e [ 964.914910][T16240] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 964.915413][T16240] RSP: 002b:00007fffd547cfd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 964.915621][T16240] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6796005c5e [ 964.915830][T16240] RDX: 0000000000000000 RSI: 00007fffd547d090 RDI: 0000000000000005 [ 964.916042][T16240] RBP: 00007fffd547cfe0 R08: 0000000000000000 R09: 0000000000000000 [ 964.916246][T16240] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 964.916453][T16240] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 964.993203][T16246] ------------[ cut here ]------------ | [ 964.993412][T16246] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16246 | [ 964.993721][T16246] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 964.994660][T16246] Tainted: [W]=WARN [ 964.994829][T16246] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 964.995113][T16246] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 964.995308][T16246] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 964.995863][T16246] RSP: 0018:ffa00000053075d0 EFLAGS: 00010286 [ 964.996109][T16246] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897a87 [ 964.996364][T16246] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd438 [ 964.996634][T16246] RBP: 1ff4000000a60ebb R08: 1fe2200001897a88 R09: fffa3bfffffb0b37 [ 964.996924][T16246] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd034 [ 964.997187][T16246] R13: ff1100000c4bd000 R14: ffffffff931c7940 R15: ff1100000c4bd380 [ 964.997458][T16246] FS: 00007f240b5d6440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 964.997777][T16246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.998060][T16246] CR2: 000000000044f720 CR3: 0000000018012001 CR4: 0000000000771ef0 [ 964.998342][T16246] PKRU: 55555554 [ 964.998501][T16246] Call Trace: [ 964.998666][T16246] [ 964.998794][T16246] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 964.998996][T16246] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 964.999198][T16246] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 964.999411][T16246] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 964.999619][T16246] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 964.999807][T16246] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.000025][T16246] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.000232][T16246] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.000426][T16246] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.000651][T16246] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.000913][T16246] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.001163][T16246] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.001371][T16246] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.001571][T16246] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.001770][T16246] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.001984][T16246] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.002179][T16246] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.002377][T16246] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.002570][T16246] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.002754][T16246] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.002965][T16246] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.003156][T16246] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.003353][T16246] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.003575][T16246] ? move_addr_to_kernel (net/socket.c:2511) [ 965.003773][T16246] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.003980][T16246] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.004188][T16246] ___sys_sendmsg (net/socket.c:2641) [ 965.004375][T16246] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.004582][T16246] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.004774][T16246] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.004974][T16246] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.005185][T16246] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.005378][T16246] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.005568][T16246] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.005752][T16246] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.005948][T16246] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.006136][T16246] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.006321][T16246] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.006540][T16246] RIP: 0033:0x7f240b730c5e [ 965.006732][T16246] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.007266][T16246] RSP: 002b:00007fff431d6f90 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.007519][T16246] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f240b730c5e [ 965.007773][T16246] RDX: 0000000000000000 RSI: 00007fff431d7050 RDI: 0000000000000005 [ 965.008036][T16246] RBP: 00007fff431d6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 965.008283][T16246] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.008541][T16246] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 965.087023][T16250] ------------[ cut here ]------------ | [ 965.087268][T16250] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16250 | [ 965.087579][T16250] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.089019][T16250] Tainted: [W]=WARN [ 965.089171][T16250] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.089387][T16250] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.089607][T16250] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.090163][T16250] RSP: 0018:ffa00000053975d0 EFLAGS: 00010286 [ 965.090401][T16250] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725af7 [ 965.090664][T16250] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92d7b8 [ 965.090924][T16250] RBP: 1ff4000000a72ebb R08: 1fe2200003725af8 R09: fffa3bfffffb0b37 [ 965.091183][T16250] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d3b4 [ 965.091437][T16250] R13: ff1100001b92d380 R14: ffffffff931c7940 R15: ff1100001b92d700 [ 965.091695][T16250] FS: 00007f37d7e2a440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 965.091998][T16250] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.092221][T16250] CR2: 000000000044f720 CR3: 000000000ea06004 CR4: 0000000000771ef0 [ 965.092478][T16250] PKRU: 55555554 [ 965.092645][T16250] Call Trace: [ 965.092796][T16250] [ 965.092927][T16250] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.093117][T16250] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.093310][T16250] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.093497][T16250] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.093686][T16250] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.093881][T16250] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.094080][T16250] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.094288][T16250] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.094476][T16250] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.094704][T16250] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.094932][T16250] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.095117][T16250] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.095383][T16250] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.095575][T16250] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.095769][T16250] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.095973][T16250] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.096164][T16250] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.096351][T16250] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.096544][T16250] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.096728][T16250] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.096929][T16250] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.097114][T16250] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.097301][T16250] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.097519][T16250] ? move_addr_to_kernel (net/socket.c:2511) [ 965.097714][T16250] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.097911][T16250] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.098109][T16250] ___sys_sendmsg (net/socket.c:2641) [ 965.098295][T16250] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.098495][T16250] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.098727][T16250] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.098953][T16250] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.099146][T16250] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.099342][T16250] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.099543][T16250] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.099753][T16250] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.099968][T16250] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.100159][T16250] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.100356][T16250] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.100601][T16250] RIP: 0033:0x7f37d7f84c5e [ 965.100811][T16250] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.101373][T16250] RSP: 002b:00007ffc99db1b10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.101632][T16250] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f37d7f84c5e [ 965.101884][T16250] RDX: 0000000000000000 RSI: 00007ffc99db1bd0 RDI: 0000000000000005 [ 965.102164][T16250] RBP: 00007ffc99db1b20 R08: 0000000000000000 R09: 0000000000000000 [ 965.102410][T16250] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.102663][T16250] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 965.178352][T16256] ------------[ cut here ]------------ | [ 965.178566][T16256] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16256 | [ 965.178863][T16256] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.179778][T16256] Tainted: [W]=WARN [ 965.179954][T16256] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.180175][T16256] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.180372][T16256] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.180919][T16256] RSP: 0018:ffa00000053e75d0 EFLAGS: 00010286 [ 965.181140][T16256] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b67 [ 965.181388][T16256] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92db38 [ 965.181646][T16256] RBP: 1ff4000000a7cebb R08: 1fe2200003725b68 R09: fffa3bfffffb0b37 [ 965.181907][T16256] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92c774 [ 965.182153][T16256] R13: ff1100001b92c740 R14: ffffffff931c7940 R15: ff1100001b92da80 [ 965.182410][T16256] FS: 00007fcf45909440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 965.182706][T16256] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.182943][T16256] CR2: 000000000044f720 CR3: 00000000181e2002 CR4: 0000000000771ef0 [ 965.183197][T16256] PKRU: 55555554 [ 965.183349][T16256] Call Trace: [ 965.183500][T16256] [ 965.183622][T16256] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.183806][T16256] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.184013][T16256] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.184199][T16256] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.184381][T16256] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.184594][T16256] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.184790][T16256] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.184993][T16256] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.185184][T16256] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.185373][T16256] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.185570][T16256] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.185756][T16256] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.185961][T16256] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.186152][T16256] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.186342][T16256] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.186541][T16256] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.186731][T16256] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.186933][T16256] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.187124][T16256] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.187326][T16256] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.187519][T16256] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.187718][T16256] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.187923][T16256] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.188144][T16256] ? move_addr_to_kernel (net/socket.c:2511) [ 965.188334][T16256] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.188524][T16256] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.188724][T16256] ___sys_sendmsg (net/socket.c:2641) [ 965.188928][T16256] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.189138][T16256] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.189333][T16256] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.189524][T16256] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.189722][T16256] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.189927][T16256] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.190117][T16256] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.190308][T16256] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.190499][T16256] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.190695][T16256] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.190887][T16256] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.191124][T16256] RIP: 0033:0x7fcf45a63c5e [ 965.191323][T16256] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.191868][T16256] RSP: 002b:00007fff5bb14970 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.192140][T16256] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcf45a63c5e [ 965.192409][T16256] RDX: 0000000000000000 RSI: 00007fff5bb14a30 RDI: 0000000000000005 [ 965.192676][T16256] RBP: 00007fff5bb14980 R08: 0000000000000000 R09: 0000000000000000 [ 965.192959][T16256] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.193219][T16256] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 965.254504][T16260] ------------[ cut here ]------------ | [ 965.254692][T16260] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/16260 | [ 965.255003][T16260] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.255820][T16260] Tainted: [W]=WARN [ 965.255981][T16260] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.256149][T16260] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.256305][T16260] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.256787][T16260] RSP: 0018:ffa00000054375d0 EFLAGS: 00010286 [ 965.256966][T16260] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e81f [ 965.257191][T16260] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9740f8 [ 965.257433][T16260] RBP: 1ff4000000a86ebb R08: 1fe220000192e820 R09: fffa3bfffffb0b37 [ 965.257635][T16260] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c974af4 [ 965.257834][T16260] R13: ff1100000c974ac0 R14: ffffffff931c7940 R15: ff1100000c974040 [ 965.258040][T16260] FS: 00007f6aa80ca440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 965.258277][T16260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.258447][T16260] CR2: 000000000044f720 CR3: 0000000010808001 CR4: 0000000000771ef0 [ 965.258650][T16260] PKRU: 55555554 [ 965.258751][T16260] Call Trace: [ 965.258849][T16260] [ 965.258926][T16260] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.259058][T16260] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.259196][T16260] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.259328][T16260] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.259464][T16260] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.259607][T16260] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.259740][T16260] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.259872][T16260] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.260010][T16260] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.260140][T16260] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.260273][T16260] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.260402][T16260] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.260544][T16260] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.260678][T16260] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.260813][T16260] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.260980][T16260] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.261114][T16260] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.261263][T16260] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.261414][T16260] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.261582][T16260] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.261718][T16260] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.261849][T16260] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.261988][T16260] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.262151][T16260] ? move_addr_to_kernel (net/socket.c:2511) [ 965.262283][T16260] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.262414][T16260] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.262553][T16260] ___sys_sendmsg (net/socket.c:2641) [ 965.262685][T16260] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.262823][T16260] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.262970][T16260] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.263105][T16260] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.263238][T16260] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.263373][T16260] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.263505][T16260] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.263646][T16260] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.263784][T16260] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.263925][T16260] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.264058][T16260] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.264221][T16260] RIP: 0033:0x7f6aa8224c5e [ 965.264361][T16260] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.264850][T16260] RSP: 002b:00007ffee41e60a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.265059][T16260] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6aa8224c5e [ 965.265290][T16260] RDX: 0000000000000000 RSI: 00007ffee41e6160 RDI: 0000000000000005 [ 965.265494][T16260] RBP: 00007ffee41e60b0 R08: 0000000000000000 R09: 0000000000000000 [ 965.265717][T16260] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.265966][T16260] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 965.353942][T16266] ------------[ cut here ]------------ | [ 965.354124][T16266] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16266 | [ 965.354418][T16266] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.355258][T16266] Tainted: [W]=WARN [ 965.355367][T16266] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.355560][T16266] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.355727][T16266] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.356306][T16266] RSP: 0018:ffa00000054175d0 EFLAGS: 00010286 [ 965.356494][T16266] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b08287 [ 965.356735][T16266] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d841438 [ 965.356978][T16266] RBP: 1ff4000000a82ebb R08: 1fe2200001b08288 R09: fffa3bfffffb0b37 [ 965.357190][T16266] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c975734 [ 965.357399][T16266] R13: ff1100000c975700 R14: ffffffff931c7940 R15: ff1100000d841380 [ 965.357643][T16266] FS: 00007efef1afe440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 965.357878][T16266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.358051][T16266] CR2: 000000000044f720 CR3: 000000001d2c8006 CR4: 0000000000771ef0 [ 965.358253][T16266] PKRU: 55555554 [ 965.358380][T16266] Call Trace: [ 965.358502][T16266] [ 965.358605][T16266] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.358746][T16266] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.358889][T16266] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.359053][T16266] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.359207][T16266] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.359374][T16266] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.359521][T16266] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.359693][T16266] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.359833][T16266] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.359979][T16266] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.360147][T16266] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.360286][T16266] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.360424][T16266] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.360568][T16266] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.360701][T16266] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.360835][T16266] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.360979][T16266] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.361127][T16266] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.361280][T16266] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.361423][T16266] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.361565][T16266] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.361698][T16266] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.361836][T16266] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.362002][T16266] ? move_addr_to_kernel (net/socket.c:2511) [ 965.362140][T16266] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.362279][T16266] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.362411][T16266] ___sys_sendmsg (net/socket.c:2641) [ 965.362555][T16266] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.362691][T16266] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.362826][T16266] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.362969][T16266] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.363101][T16266] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.363256][T16266] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.363390][T16266] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.363523][T16266] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.363676][T16266] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.363813][T16266] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.363961][T16266] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.364132][T16266] RIP: 0033:0x7efef1c58c5e [ 965.364282][T16266] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.364777][T16266] RSP: 002b:00007ffecd24ec30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.364999][T16266] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007efef1c58c5e [ 965.365208][T16266] RDX: 0000000000000000 RSI: 00007ffecd24ecf0 RDI: 0000000000000005 [ 965.365412][T16266] RBP: 00007ffecd24ec40 R08: 0000000000000000 R09: 0000000000000000 [ 965.365622][T16266] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.365824][T16266] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 965.447325][T16270] ------------[ cut here ]------------ | [ 965.447512][T16270] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16270 | [ 965.447816][T16270] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.448684][T16270] Tainted: [W]=WARN [ 965.448788][T16270] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.449013][T16270] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.449163][T16270] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.449673][T16270] RSP: 0018:ffa00000054075d0 EFLAGS: 00010286 [ 965.449847][T16270] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b0808f [ 965.450069][T16270] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d840478 [ 965.450267][T16270] RBP: 1ff4000000a80ebb R08: 1fe2200001b08090 R09: fffa3bfffffb0b37 [ 965.450486][T16270] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840cb4 [ 965.450693][T16270] R13: ff1100000d840c80 R14: ffffffff931c7940 R15: ff1100000d8403c0 [ 965.450909][T16270] FS: 00007fa282f3a440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 965.451147][T16270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.451321][T16270] CR2: 000000000044f720 CR3: 000000001d2c8005 CR4: 0000000000771ef0 [ 965.451521][T16270] PKRU: 55555554 [ 965.451631][T16270] Call Trace: [ 965.451734][T16270] [ 965.451803][T16270] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.451942][T16270] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.452090][T16270] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.452257][T16270] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.452390][T16270] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.452524][T16270] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.452668][T16270] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.452813][T16270] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.452960][T16270] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.453093][T16270] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.453241][T16270] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.453371][T16270] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.453511][T16270] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.453652][T16270] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.453798][T16270] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.453942][T16270] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.454074][T16270] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.454206][T16270] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.454353][T16270] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.454489][T16270] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.454655][T16270] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.454795][T16270] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.454940][T16270] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.455102][T16270] ? move_addr_to_kernel (net/socket.c:2511) [ 965.455255][T16270] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.455387][T16270] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.455522][T16270] ___sys_sendmsg (net/socket.c:2641) [ 965.455715][T16270] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.455879][T16270] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.456022][T16270] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.456179][T16270] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.456320][T16270] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.456462][T16270] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.456610][T16270] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.456750][T16270] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.456892][T16270] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.457037][T16270] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.457183][T16270] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.457358][T16270] RIP: 0033:0x7fa283094c5e [ 965.457504][T16270] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.458027][T16270] RSP: 002b:00007fff8484d850 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.458248][T16270] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa283094c5e [ 965.458467][T16270] RDX: 0000000000000000 RSI: 00007fff8484d910 RDI: 0000000000000005 [ 965.458691][T16270] RBP: 00007fff8484d860 R08: 0000000000000000 R09: 0000000000000000 [ 965.458903][T16270] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.459110][T16270] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 965.519401][T16276] ------------[ cut here ]------------ | [ 965.519577][T16276] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16276 | [ 965.519834][T16276] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.520855][T16276] Tainted: [W]=WARN [ 965.520963][T16276] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.521131][T16276] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.521276][T16276] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.521758][T16276] RSP: 0018:ffa00000054875d0 EFLAGS: 00010286 [ 965.521940][T16276] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003875367 [ 965.522145][T16276] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a9b38 [ 965.522357][T16276] RBP: 1ff4000000a90ebb R08: 1fe2200003875368 R09: fffa3bfffffb0b37 [ 965.522559][T16276] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d840774 [ 965.522758][T16276] R13: ff1100000d840740 R14: ffffffff931c7940 R15: ff1100001c3a9a80 [ 965.522969][T16276] FS: 00007fcb9d6d0440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 965.523207][T16276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.523382][T16276] CR2: 000000000044f720 CR3: 000000001d2c8002 CR4: 0000000000771ef0 [ 965.523583][T16276] PKRU: 55555554 [ 965.523681][T16276] Call Trace: [ 965.523784][T16276] [ 965.523855][T16276] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.523994][T16276] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.524142][T16276] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.524278][T16276] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.524408][T16276] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.524547][T16276] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.524679][T16276] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.524811][T16276] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.524949][T16276] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.525081][T16276] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.525215][T16276] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.525345][T16276] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.525477][T16276] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.525614][T16276] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.525744][T16276] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.525882][T16276] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.526024][T16276] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.526160][T16276] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.526296][T16276] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.526431][T16276] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.526570][T16276] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.526703][T16276] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.526835][T16276] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.527002][T16276] ? move_addr_to_kernel (net/socket.c:2511) [ 965.527134][T16276] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.527268][T16276] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.527401][T16276] ___sys_sendmsg (net/socket.c:2641) [ 965.527533][T16276] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.527677][T16276] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.527814][T16276] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.527957][T16276] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.528090][T16276] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.528226][T16276] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.528359][T16276] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.528491][T16276] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.528630][T16276] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.528761][T16276] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.528905][T16276] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.529075][T16276] RIP: 0033:0x7fcb9d82ac5e [ 965.529214][T16276] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.529699][T16276] RSP: 002b:00007ffcdfff7b60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.529914][T16276] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fcb9d82ac5e [ 965.530112][T16276] RDX: 0000000000000000 RSI: 00007ffcdfff7c20 RDI: 0000000000000005 [ 965.530308][T16276] RBP: 00007ffcdfff7b70 R08: 0000000000000000 R09: 0000000000000000 [ 965.530503][T16276] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.530706][T16276] R13: 0000000069cbe80c R14: 0000000000000004 R15: 000000000049d620 | [ 965.608274][T16280] ------------[ cut here ]------------ | [ 965.608454][T16280] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16280 | [ 965.608705][T16280] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.609929][T16280] Tainted: [W]=WARN [ 965.610035][T16280] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.610206][T16280] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.610348][T16280] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.610852][T16280] RSP: 0018:ffa00000053d75d0 EFLAGS: 00010286 [ 965.611041][T16280] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000387516f [ 965.611246][T16280] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001c3a8b78 [ 965.611456][T16280] RBP: 1ff4000000a7aebb R08: 1fe2200003875170 R09: fffa3bfffffb0b37 [ 965.611666][T16280] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8934 [ 965.611874][T16280] R13: ff1100001c3a8900 R14: ffffffff931c7940 R15: ff1100001c3a8ac0 [ 965.612103][T16280] FS: 00007fa766179440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 965.612343][T16280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.612514][T16280] CR2: 000000000044f720 CR3: 000000001cf6f003 CR4: 0000000000771ef0 [ 965.612728][T16280] PKRU: 55555554 [ 965.612846][T16280] Call Trace: [ 965.612964][T16280] [ 965.613035][T16280] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.613218][T16280] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.613368][T16280] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.613555][T16280] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.613740][T16280] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.613905][T16280] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.614075][T16280] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.614244][T16280] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.614407][T16280] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.614553][T16280] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.614722][T16280] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.614859][T16280] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.615004][T16280] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.615141][T16280] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.615293][T16280] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.615432][T16280] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.615592][T16280] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.615761][T16280] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.615926][T16280] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.616069][T16280] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.616215][T16280] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.616353][T16280] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.616485][T16280] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.616686][T16280] ? move_addr_to_kernel (net/socket.c:2511) [ 965.616836][T16280] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.617003][T16280] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.617166][T16280] ___sys_sendmsg (net/socket.c:2641) [ 965.617319][T16280] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.617479][T16280] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.617627][T16280] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.617775][T16280] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.617920][T16280] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.618065][T16280] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.618208][T16280] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.618350][T16280] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.618493][T16280] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.618679][T16280] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.618848][T16280] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.619035][T16280] RIP: 0033:0x7fa7662d3c5e [ 965.619178][T16280] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.619665][T16280] RSP: 002b:00007ffcf881a100 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.619866][T16280] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fa7662d3c5e [ 965.620086][T16280] RDX: 0000000000000000 RSI: 00007ffcf881a1c0 RDI: 0000000000000005 [ 965.620315][T16280] RBP: 00007ffcf881a110 R08: 0000000000000000 R09: 0000000000000000 [ 965.620511][T16280] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.620742][T16280] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 965.699327][T16286] ------------[ cut here ]------------ | [ 965.699518][T16286] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16286 | [ 965.699771][T16286] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.700579][T16286] Tainted: [W]=WARN [ 965.700679][T16286] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.700851][T16286] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.701077][T16286] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.701579][T16286] RSP: 0018:ffa00000053375d0 EFLAGS: 00010286 [ 965.701747][T16286] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea06f7 [ 965.702037][T16286] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5037b8 [ 965.702234][T16286] RBP: 1ff4000000a66ebb R08: 1fe2200001ea06f8 R09: fffa3bfffffb0b37 [ 965.702606][T16286] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001c3a8e74 [ 965.702809][T16286] R13: ff1100001c3a8e40 R14: ffffffff931c7940 R15: ff1100000f503700 [ 965.703070][T16286] FS: 00007f025eb15440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 965.703333][T16286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.703507][T16286] CR2: 000000000044f720 CR3: 000000001b51a004 CR4: 0000000000771ef0 [ 965.703711][T16286] PKRU: 55555554 [ 965.703816][T16286] Call Trace: [ 965.704007][T16286] [ 965.704076][T16286] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.704225][T16286] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.704375][T16286] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.704514][T16286] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.704667][T16286] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.704811][T16286] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.705019][T16286] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.705163][T16286] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.705295][T16286] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.705430][T16286] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.705577][T16286] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.705711][T16286] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.705857][T16286] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.706066][T16286] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.706209][T16286] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.706353][T16286] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.706504][T16286] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.706649][T16286] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.706785][T16286] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.706979][T16286] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.707114][T16286] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.707252][T16286] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.707388][T16286] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.707561][T16286] ? move_addr_to_kernel (net/socket.c:2511) [ 965.707706][T16286] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.707845][T16286] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.708012][T16286] ___sys_sendmsg (net/socket.c:2641) [ 965.708154][T16286] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.708302][T16286] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.708444][T16286] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.708584][T16286] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.708716][T16286] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.708874][T16286] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.709019][T16286] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.709162][T16286] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.709298][T16286] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.709433][T16286] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.709586][T16286] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.709755][T16286] RIP: 0033:0x7f025ec6fc5e [ 965.709917][T16286] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.710424][T16286] RSP: 002b:00007ffea6e21860 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.710639][T16286] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f025ec6fc5e [ 965.710845][T16286] RDX: 0000000000000000 RSI: 00007ffea6e21920 RDI: 0000000000000005 [ 965.711066][T16286] RBP: 00007ffea6e21870 R08: 0000000000000000 R09: 0000000000000000 [ 965.711279][T16286] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.711499][T16286] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 965.771491][T16290] ------------[ cut here ]------------ | [ 965.771669][T16290] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16290 | [ 965.772417][T16290] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.773305][T16290] Tainted: [W]=WARN [ 965.773411][T16290] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.773592][T16290] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.773733][T16290] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.774217][T16290] RSP: 0018:ffa00000054c75d0 EFLAGS: 00010286 [ 965.774387][T16290] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea0457 [ 965.774589][T16290] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f5022b8 [ 965.774791][T16290] RBP: 1ff4000000a98ebb R08: 1fe2200001ea0458 R09: fffa3bfffffb0b37 [ 965.774998][T16290] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f503034 [ 965.775195][T16290] R13: ff1100000f503000 R14: ffffffff931c7940 R15: ff1100000f502200 [ 965.776660][T16290] FS: 00007f3babbdc440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 965.776927][T16290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.777132][T16290] CR2: 000000000044f720 CR3: 000000001ab54002 CR4: 0000000000771ef0 [ 965.777354][T16290] PKRU: 55555554 [ 965.777489][T16290] Call Trace: [ 965.777611][T16290] [ 965.777699][T16290] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.777861][T16290] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.778037][T16290] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.778189][T16290] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.778334][T16290] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.778502][T16290] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.778648][T16290] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.778791][T16290] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.778939][T16290] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.779095][T16290] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.779269][T16290] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.779439][T16290] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.779599][T16290] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.779769][T16290] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.779909][T16290] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.780050][T16290] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.780188][T16290] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.780327][T16290] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.780476][T16290] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.780713][T16290] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.780852][T16290] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.781017][T16290] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.781154][T16290] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.781323][T16290] ? move_addr_to_kernel (net/socket.c:2511) [ 965.781460][T16290] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.781601][T16290] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.781734][T16290] ___sys_sendmsg (net/socket.c:2641) [ 965.781865][T16290] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.782009][T16290] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.782142][T16290] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.782276][T16290] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.782406][T16290] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.782562][T16290] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.782708][T16290] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.782858][T16290] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.783003][T16290] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.783140][T16290] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.783276][T16290] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.783450][T16290] RIP: 0033:0x7f3babd36c5e [ 965.783602][T16290] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.784089][T16290] RSP: 002b:00007ffeeb6fd710 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.784289][T16290] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f3babd36c5e [ 965.784488][T16290] RDX: 0000000000000000 RSI: 00007ffeeb6fd7d0 RDI: 0000000000000005 [ 965.784714][T16290] RBP: 00007ffeeb6fd720 R08: 0000000000000000 R09: 0000000000000000 [ 965.784930][T16290] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.785143][T16290] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 965.888353][T16296] ------------[ cut here ]------------ | [ 965.888534][T16296] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16296 | [ 965.888776][T16296] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.889713][T16296] Tainted: [W]=WARN [ 965.889817][T16296] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.890002][T16296] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.890147][T16296] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.890661][T16296] RSP: 0018:ffa00000054475d0 EFLAGS: 00010286 [ 965.890865][T16296] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001ea04c7 [ 965.891149][T16296] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000f502638 [ 965.891358][T16296] RBP: 1ff4000000a88ebb R08: 1fe2200001ea04c8 R09: fffa3bfffffb0b37 [ 965.891579][T16296] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000f502074 [ 965.891790][T16296] R13: ff1100000f502040 R14: ffffffff931c7940 R15: ff1100000f502580 [ 965.892090][T16296] FS: 00007f8aae07d440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 965.892346][T16296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.892527][T16296] CR2: 000000000044f720 CR3: 0000000010829005 CR4: 0000000000771ef0 [ 965.892752][T16296] PKRU: 55555554 [ 965.892856][T16296] Call Trace: [ 965.893018][T16296] [ 965.893088][T16296] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.893228][T16296] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.893373][T16296] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.893514][T16296] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.893654][T16296] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.893790][T16296] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.893979][T16296] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.894127][T16296] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.894261][T16296] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.894407][T16296] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.894555][T16296] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.894698][T16296] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.894832][T16296] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.895021][T16296] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.895233][T16296] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.895381][T16296] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.895514][T16296] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.895666][T16296] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.895802][T16296] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.895984][T16296] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.896119][T16296] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.896252][T16296] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.896399][T16296] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.896569][T16296] ? move_addr_to_kernel (net/socket.c:2511) [ 965.896703][T16296] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.896849][T16296] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.897041][T16296] ___sys_sendmsg (net/socket.c:2641) [ 965.897179][T16296] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.897319][T16296] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.897455][T16296] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.897595][T16296] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.897726][T16296] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.897866][T16296] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.898055][T16296] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.898193][T16296] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.898334][T16296] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.898474][T16296] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.898621][T16296] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.898792][T16296] RIP: 0033:0x7f8aae1d7c5e [ 965.899022][T16296] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.899526][T16296] RSP: 002b:00007fff675386f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.899755][T16296] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f8aae1d7c5e [ 965.900045][T16296] RDX: 0000000000000000 RSI: 00007fff675387b0 RDI: 0000000000000005 [ 965.900258][T16296] RBP: 00007fff67538700 R08: 0000000000000000 R09: 0000000000000000 [ 965.900465][T16296] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.900778][T16296] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 965.963356][T16300] ------------[ cut here ]------------ | [ 965.963517][T16300] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16300 | [ 965.963758][T16300] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 965.964560][T16300] Tainted: [W]=WARN [ 965.964663][T16300] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 965.964842][T16300] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 965.964996][T16300] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 965.965483][T16300] RSP: 0018:ffa00000054a75d0 EFLAGS: 00010286 [ 965.965662][T16300] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f1b9f [ 965.965858][T16300] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78dcf8 [ 965.966060][T16300] RBP: 1ff4000000a94ebb R08: 1fe22000036f1ba0 R09: fffa3bfffffb0b37 [ 965.966261][T16300] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d034 [ 965.966464][T16300] R13: ff1100001b78d000 R14: ffffffff931c7940 R15: ff1100001b78dc40 [ 965.966670][T16300] FS: 00007fbfc3c3a440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 965.966921][T16300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.967093][T16300] CR2: 000000000044f720 CR3: 000000001c668004 CR4: 0000000000771ef0 [ 965.967310][T16300] PKRU: 55555554 [ 965.967416][T16300] Call Trace: [ 965.967523][T16300] [ 965.967599][T16300] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 965.967740][T16300] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 965.967880][T16300] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 965.968110][T16300] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.968253][T16300] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.968390][T16300] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 965.968520][T16300] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 965.968747][T16300] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 965.968889][T16300] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 965.969023][T16300] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 965.969158][T16300] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 965.969369][T16300] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 965.969503][T16300] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 965.969648][T16300] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 965.969783][T16300] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 965.969926][T16300] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 965.970067][T16300] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.970200][T16300] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 965.970352][T16300] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 965.970491][T16300] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 965.970640][T16300] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 965.970781][T16300] ? copy_msghdr_from_user (net/socket.c:2525) [ 965.970920][T16300] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 965.971085][T16300] ? move_addr_to_kernel (net/socket.c:2511) [ 965.971225][T16300] ? filemap_map_folio_range (mm/filemap.c:3873) [ 965.971367][T16300] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 965.971504][T16300] ___sys_sendmsg (net/socket.c:2641) [ 965.971642][T16300] ? copy_msghdr_from_user (net/socket.c:2628) [ 965.971782][T16300] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 965.971932][T16300] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 965.972071][T16300] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 965.972203][T16300] ? __sys_sendmsg_sock (net/socket.c:2656) [ 965.972352][T16300] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 965.972501][T16300] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.972640][T16300] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 965.972782][T16300] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 965.972946][T16300] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 965.973084][T16300] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 965.973247][T16300] RIP: 0033:0x7fbfc3d94c5e [ 965.973389][T16300] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 965.973900][T16300] RSP: 002b:00007ffdd41ccf80 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 965.974108][T16300] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fbfc3d94c5e [ 965.974309][T16300] RDX: 0000000000000000 RSI: 00007ffdd41cd040 RDI: 0000000000000005 [ 965.974506][T16300] RBP: 00007ffdd41ccf90 R08: 0000000000000000 R09: 0000000000000000 [ 965.974714][T16300] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 965.974921][T16300] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 966.050174][T16306] ------------[ cut here ]------------ | [ 966.050334][T16306] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#0: ip/16306 | [ 966.050576][T16306] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.051354][T16306] Tainted: [W]=WARN [ 966.051454][T16306] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.051639][T16306] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.051792][T16306] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.052277][T16306] RSP: 0018:ffa00000053d75d0 EFLAGS: 00010286 [ 966.052445][T16306] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000036f196f [ 966.052653][T16306] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b78cb78 [ 966.052888][T16306] RBP: 1ff4000000a7aebb R08: 1fe22000036f1970 R09: fffa3bfffffb0b37 [ 966.053103][T16306] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b78d574 [ 966.053299][T16306] R13: ff1100001b78d540 R14: ffffffff931c7940 R15: ff1100001b78cac0 [ 966.053503][T16306] FS: 00007efe1e3bc440(0000) GS:ff110000a30b8000(0000) knlGS:0000000000000000 [ 966.053741][T16306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.053918][T16306] CR2: 000000000044f720 CR3: 000000001c668003 CR4: 0000000000771ef0 [ 966.054118][T16306] PKRU: 55555554 [ 966.054218][T16306] Call Trace: [ 966.054317][T16306] [ 966.054391][T16306] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.054526][T16306] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.054670][T16306] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.054803][T16306] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.054945][T16306] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.055080][T16306] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.055212][T16306] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.055348][T16306] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.055478][T16306] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.055618][T16306] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.055757][T16306] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.055892][T16306] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.056039][T16306] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.056192][T16306] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.056322][T16306] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.056455][T16306] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.056633][T16306] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.056769][T16306] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.056909][T16306] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.057042][T16306] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.057204][T16306] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.057358][T16306] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.057504][T16306] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.057701][T16306] ? move_addr_to_kernel (net/socket.c:2511) [ 966.057837][T16306] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.057979][T16306] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.058116][T16306] ___sys_sendmsg (net/socket.c:2641) [ 966.058251][T16306] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.058423][T16306] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.058596][T16306] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.058760][T16306] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.058906][T16306] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.059060][T16306] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.059193][T16306] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.059326][T16306] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.059459][T16306] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.059599][T16306] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.059773][T16306] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.059949][T16306] RIP: 0033:0x7efe1e516c5e [ 966.060093][T16306] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.060584][T16306] RSP: 002b:00007ffed3c488e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.060787][T16306] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007efe1e516c5e [ 966.060992][T16306] RDX: 0000000000000000 RSI: 00007ffed3c489a0 RDI: 0000000000000005 [ 966.061204][T16306] RBP: 00007ffed3c488f0 R08: 0000000000000000 R09: 0000000000000000 [ 966.061418][T16306] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 966.061626][T16306] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 966.138915][T16310] ------------[ cut here ]------------ | [ 966.139091][T16310] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#1: ip/16310 | [ 966.139346][T16310] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.140174][T16310] Tainted: [W]=WARN [ 966.140276][T16310] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.140444][T16310] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.140628][T16310] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.141135][T16310] RSP: 0018:ffa00000055075d0 EFLAGS: 00010286 [ 966.141314][T16310] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001897a87 [ 966.141547][T16310] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bd438 [ 966.141761][T16310] RBP: 1ff4000000aa0ebb R08: 1fe2200001897a88 R09: fffa3bfffffb0b37 [ 966.141975][T16310] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd034 [ 966.142173][T16310] R13: ff1100000c4bd000 R14: ffffffff931c7940 R15: ff1100000c4bd380 [ 966.142406][T16310] FS: 00007f75d3321440(0000) GS:ff110000a3138000(0000) knlGS:0000000000000000 [ 966.142660][T16310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.142842][T16310] CR2: 000000000044f720 CR3: 000000001c668004 CR4: 0000000000771ef0 [ 966.143064][T16310] PKRU: 55555554 [ 966.143169][T16310] Call Trace: [ 966.143277][T16310] [ 966.143351][T16310] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.143494][T16310] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.143651][T16310] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.143792][T16310] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.143937][T16310] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.144315][T16310] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.144451][T16310] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.144591][T16310] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.144725][T16310] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.144860][T16310] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.145261][T16310] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.145394][T16310] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.145528][T16310] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.145682][T16310] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.145816][T16310] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.146035][T16310] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.146177][T16310] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.146327][T16310] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.146460][T16310] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.146601][T16310] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.146738][T16310] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.146875][T16310] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.147095][T16310] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.147283][T16310] ? move_addr_to_kernel (net/socket.c:2511) [ 966.147417][T16310] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.147557][T16310] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.147699][T16310] ___sys_sendmsg (net/socket.c:2641) [ 966.147840][T16310] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.148064][T16310] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.148219][T16310] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.148355][T16310] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.148518][T16310] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.148668][T16310] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.148802][T16310] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.149008][T16310] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.149152][T16310] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.149291][T16310] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.149432][T16310] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.149622][T16310] RIP: 0033:0x7f75d347bc5e [ 966.149766][T16310] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.150353][T16310] RSP: 002b:00007ffc168bec20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.150570][T16310] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f75d347bc5e [ 966.150780][T16310] RDX: 0000000000000000 RSI: 00007ffc168bece0 RDI: 0000000000000005 [ 966.151051][T16310] RBP: 00007ffc168bec30 R08: 0000000000000000 R09: 0000000000000000 [ 966.151273][T16310] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 966.151476][T16310] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 966.231858][T16316] ------------[ cut here ]------------ | [ 966.232336][T16316] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16316 | [ 966.232630][T16316] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.233555][T16316] Tainted: [W]=WARN [ 966.233711][T16316] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.233947][T16316] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.234148][T16316] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.234694][T16316] RSP: 0018:ffa00000055275d0 EFLAGS: 00010286 [ 966.234937][T16316] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe22000018978ff [ 966.235193][T16316] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c4bc7f8 [ 966.235448][T16316] RBP: 1ff4000000aa4ebb R08: 1fe2200001897900 R09: fffa3bfffffb0b37 [ 966.235717][T16316] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c4bd1f4 [ 966.235982][T16316] R13: ff1100000c4bd1c0 R14: ffffffff931c7940 R15: ff1100000c4bc740 [ 966.236244][T16316] FS: 00007f0731c9f440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 966.236538][T16316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.236784][T16316] CR2: 000000000044f720 CR3: 000000000d999005 CR4: 0000000000771ef0 [ 966.237061][T16316] PKRU: 55555554 [ 966.237225][T16316] Call Trace: [ 966.237375][T16316] [ 966.237493][T16316] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.237685][T16316] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.237878][T16316] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.238081][T16316] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.238264][T16316] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.238458][T16316] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.238657][T16316] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.238850][T16316] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.239054][T16316] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.239245][T16316] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.239446][T16316] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.239644][T16316] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.239830][T16316] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.240036][T16316] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.240221][T16316] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.240405][T16316] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.240594][T16316] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.240778][T16316] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.240977][T16316] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.241162][T16316] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.241360][T16316] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.241559][T16316] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.241749][T16316] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.241982][T16316] ? move_addr_to_kernel (net/socket.c:2511) [ 966.242171][T16316] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.242358][T16316] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.242562][T16316] ___sys_sendmsg (net/socket.c:2641) [ 966.242756][T16316] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.242964][T16316] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.243159][T16316] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.243352][T16316] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.243562][T16316] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.243762][T16316] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.243969][T16316] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.244159][T16316] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.244351][T16316] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.244548][T16316] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.244738][T16316] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.244984][T16316] RIP: 0033:0x7f0731df9c5e [ 966.245183][T16316] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.245729][T16316] RSP: 002b:00007ffee90e4e60 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.246001][T16316] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0731df9c5e [ 966.246271][T16316] RDX: 0000000000000000 RSI: 00007ffee90e4f20 RDI: 0000000000000005 [ 966.246558][T16316] RBP: 00007ffee90e4e70 R08: 0000000000000000 R09: 0000000000000000 [ 966.246857][T16316] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 966.247126][T16316] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 966.319108][T16320] ------------[ cut here ]------------ | [ 966.319326][T16320] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16320 | [ 966.319645][T16320] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.320569][T16320] Tainted: [W]=WARN [ 966.320729][T16320] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.321293][T16320] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.321506][T16320] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.322064][T16320] RSP: 0018:ffa00000055375d0 EFLAGS: 00010286 [ 966.322300][T16320] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000372596f [ 966.322599][T16320] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92cb78 [ 966.322870][T16320] RBP: 1ff4000000aa6ebb R08: 1fe2200003725970 R09: fffa3bfffffb0b37 [ 966.323146][T16320] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92d574 [ 966.323410][T16320] R13: ff1100001b92d540 R14: ffffffff931c7940 R15: ff1100001b92cac0 [ 966.323684][T16320] FS: 00007f6fd0802440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 966.324003][T16320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.324231][T16320] CR2: 000000000044f720 CR3: 000000001c173003 CR4: 0000000000771ef0 [ 966.324490][T16320] PKRU: 55555554 [ 966.324658][T16320] Call Trace: [ 966.324816][T16320] [ 966.324949][T16320] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.325140][T16320] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.325341][T16320] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.325534][T16320] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.325731][T16320] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.325938][T16320] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.326125][T16320] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.326318][T16320] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.326516][T16320] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.326715][T16320] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.326924][T16320] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.327115][T16320] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.327307][T16320] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.327501][T16320] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.327732][T16320] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.327932][T16320] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.328122][T16320] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.328322][T16320] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.328514][T16320] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.328712][T16320] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.328921][T16320] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.329113][T16320] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.329299][T16320] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.329515][T16320] ? move_addr_to_kernel (net/socket.c:2511) [ 966.329712][T16320] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.329908][T16320] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.330095][T16320] ___sys_sendmsg (net/socket.c:2641) [ 966.330284][T16320] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.330473][T16320] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.330679][T16320] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.330877][T16320] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.331082][T16320] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.331276][T16320] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.331480][T16320] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.331674][T16320] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.331861][T16320] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.332060][T16320] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.332244][T16320] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.332464][T16320] RIP: 0033:0x7f6fd095cc5e [ 966.332658][T16320] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.333216][T16320] RSP: 002b:00007ffe01ae3160 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.333478][T16320] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f6fd095cc5e [ 966.333744][T16320] RDX: 0000000000000000 RSI: 00007ffe01ae3220 RDI: 0000000000000005 [ 966.334009][T16320] RBP: 00007ffe01ae3170 R08: 0000000000000000 R09: 0000000000000000 [ 966.334257][T16320] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 966.334504][T16320] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 966.401209][T16326] ------------[ cut here ]------------ | [ 966.401411][T16326] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16326 | [ 966.401733][T16326] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.403496][T16326] Tainted: [W]=WARN [ 966.403762][T16326] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.404101][T16326] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.404431][T16326] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.405074][T16326] RSP: 0018:ffa00000055475d0 EFLAGS: 00010286 [ 966.405377][T16326] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200003725b9f [ 966.405679][T16326] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100001b92dcf8 [ 966.405990][T16326] RBP: 1ff4000000aa8ebb R08: 1fe2200003725ba0 R09: fffa3bfffffb0b37 [ 966.406291][T16326] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100001b92ccb4 [ 966.406598][T16326] R13: ff1100001b92cc80 R14: ffffffff931c7940 R15: ff1100001b92dc40 [ 966.406923][T16326] FS: 00007f0de988f440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 966.407213][T16326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.407441][T16326] CR2: 000000000044f720 CR3: 000000001c605002 CR4: 0000000000771ef0 [ 966.407724][T16326] PKRU: 55555554 [ 966.407888][T16326] Call Trace: [ 966.408060][T16326] [ 966.408183][T16326] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.408367][T16326] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.408580][T16326] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.408773][T16326] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.408978][T16326] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.409172][T16326] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.409358][T16326] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.409553][T16326] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.409740][T16326] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.409937][T16326] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.410157][T16326] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.410357][T16326] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.410558][T16326] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.410757][T16326] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.410946][T16326] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.411133][T16326] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.411331][T16326] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.411523][T16326] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.411726][T16326] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.411933][T16326] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.412127][T16326] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.412311][T16326] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.412494][T16326] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.412724][T16326] ? move_addr_to_kernel (net/socket.c:2511) [ 966.412931][T16326] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.413124][T16326] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.413318][T16326] ___sys_sendmsg (net/socket.c:2641) [ 966.413512][T16326] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.413712][T16326] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.413919][T16326] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.414112][T16326] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.414303][T16326] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.414495][T16326] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.414686][T16326] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.414872][T16326] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.415068][T16326] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.415251][T16326] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.415445][T16326] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.415672][T16326] RIP: 0033:0x7f0de99e9c5e [ 966.415874][T16326] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.416417][T16326] RSP: 002b:00007ffd61f577a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.416689][T16326] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f0de99e9c5e [ 966.416960][T16326] RDX: 0000000000000000 RSI: 00007ffd61f57860 RDI: 0000000000000005 [ 966.417209][T16326] RBP: 00007ffd61f577b0 R08: 0000000000000000 R09: 0000000000000000 [ 966.417455][T16326] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 966.417709][T16326] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 966.494488][T16330] ------------[ cut here ]------------ | [ 966.494654][T16330] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16330 | [ 966.494891][T16330] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.495722][T16330] Tainted: [W]=WARN [ 966.495827][T16330] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.496554][T16330] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.496711][T16330] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.497282][T16330] RSP: 0018:ffa00000054a75d0 EFLAGS: 00010286 [ 966.497472][T16330] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192eabf [ 966.497692][T16330] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c9755f8 [ 966.497976][T16330] RBP: 1ff4000000a94ebb R08: 1fe220000192eac0 R09: fffa3bfffffb0b37 [ 966.498176][T16330] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c974cb4 [ 966.498387][T16330] R13: ff1100000c974c80 R14: ffffffff931c7940 R15: ff1100000c975540 [ 966.498605][T16330] FS: 00007fc513391440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 966.498848][T16330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.499059][T16330] CR2: 000000000044f720 CR3: 000000000f7d5001 CR4: 0000000000771ef0 [ 966.499268][T16330] PKRU: 55555554 [ 966.499373][T16330] Call Trace: [ 966.499477][T16330] [ 966.499556][T16330] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.499697][T16330] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.499846][T16330] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.499998][T16330] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.500141][T16330] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.500289][T16330] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.500427][T16330] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.500571][T16330] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.500703][T16330] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.500841][T16330] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.500979][T16330] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.501124][T16330] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.501269][T16330] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.501418][T16330] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.501567][T16330] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.501711][T16330] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.501854][T16330] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.501994][T16330] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.502161][T16330] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.502306][T16330] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.502453][T16330] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.502599][T16330] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.502742][T16330] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.502925][T16330] ? move_addr_to_kernel (net/socket.c:2511) [ 966.503078][T16330] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.503219][T16330] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.503361][T16330] ___sys_sendmsg (net/socket.c:2641) [ 966.503505][T16330] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.503648][T16330] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.503800][T16330] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.503952][T16330] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.504085][T16330] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.504227][T16330] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.504365][T16330] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.504514][T16330] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.504663][T16330] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.504800][T16330] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.504939][T16330] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.505118][T16330] RIP: 0033:0x7fc5134ebc5e [ 966.505285][T16330] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.505818][T16330] RSP: 002b:00007ffd663e1140 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.506027][T16330] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007fc5134ebc5e [ 966.506227][T16330] RDX: 0000000000000000 RSI: 00007ffd663e1200 RDI: 0000000000000005 [ 966.506425][T16330] RBP: 00007ffd663e1150 R08: 0000000000000000 R09: 0000000000000000 [ 966.506650][T16330] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 966.506860][T16330] R13: 0000000069cbe80d R14: 0000000000000004 R15: 000000000049d620 | [ 966.580090][T16336] ------------[ cut here ]------------ | [ 966.580315][T16336] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#2: ip/16336 | [ 966.580623][T16336] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.581856][T16336] Tainted: [W]=WARN [ 966.582017][T16336] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.582236][T16336] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.582427][T16336] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.583014][T16336] RSP: 0018:ffa00000055575d0 EFLAGS: 00010286 [ 966.583246][T16336] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe220000192e88f [ 966.583493][T16336] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000c974478 [ 966.583751][T16336] RBP: 1ff4000000aaaebb R08: 1fe220000192e890 R09: fffa3bfffffb0b37 [ 966.584011][T16336] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000c9745b4 [ 966.584259][T16336] R13: ff1100000c974580 R14: ffffffff931c7940 R15: ff1100000c9743c0 [ 966.584683][T16336] FS: 00007f562e61e440(0000) GS:ff110000a31b8000(0000) knlGS:0000000000000000 [ 966.584996][T16336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.585237][T16336] CR2: 000000000044f720 CR3: 000000001b29a001 CR4: 0000000000771ef0 [ 966.585496][T16336] PKRU: 55555554 [ 966.585662][T16336] Call Trace: [ 966.585819][T16336] [ 966.585950][T16336] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.586139][T16336] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.586338][T16336] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.586528][T16336] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.586725][T16336] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.586929][T16336] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.587117][T16336] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.587310][T16336] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.587495][T16336] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.587693][T16336] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.587881][T16336] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.588098][T16336] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.588300][T16336] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.588493][T16336] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.588691][T16336] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.588882][T16336] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.589083][T16336] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.589270][T16336] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.589478][T16336] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.589679][T16336] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.589875][T16336] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.590087][T16336] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.590277][T16336] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.590498][T16336] ? move_addr_to_kernel (net/socket.c:2511) [ 966.590702][T16336] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.590891][T16336] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.591096][T16336] ___sys_sendmsg (net/socket.c:2641) [ 966.591289][T16336] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.591489][T16336] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.591737][T16336] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.591951][T16336] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.592152][T16336] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.592356][T16336] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.592586][T16336] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.592787][T16336] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.592988][T16336] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.593175][T16336] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.593373][T16336] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.593605][T16336] RIP: 0033:0x7f562e778c5e [ 966.593809][T16336] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.594380][T16336] RSP: 002b:00007ffe5ef22450 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.594651][T16336] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f562e778c5e [ 966.594922][T16336] RDX: 0000000000000000 RSI: 00007ffe5ef22510 RDI: 0000000000000005 [ 966.595178][T16336] RBP: 00007ffe5ef22460 R08: 0000000000000000 R09: 0000000000000000 [ 966.595433][T16336] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 [ 966.595693][T16336] R13: 0000000069cbe80e R14: 0000000000000004 R15: 000000000049d620 | [ 966.668361][T16340] ------------[ cut here ]------------ | [ 966.668542][T16340] WARNING: net/ipv4/nexthop.c:3395 at rtm_get_nexthop+0x3ae/0x440, CPU#3: ip/16340 | [ 966.668795][T16340] Modules linked in: ip6_gre ip6_tunnel tunnel6 ip_gre gre act_mirred cls_matchall sch_red dummy sch_tbf act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc 8021q sch_ingress vrf veth | [ 966.669615][T16340] Tainted: [W]=WARN [ 966.669722][T16340] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 966.669907][T16340] RIP: 0010:rtm_get_nexthop (net/ipv4/nexthop.c:3395 (discriminator 2)) [ 966.670055][T16340] Code: 1e 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 75 74 48 c7 03 00 70 6d 90 b8 ea ff ff ff e9 2e ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 4c 89 fe 31 ff e8 c0 57 ad ff b8 a6 ff ff All code ======== 0: 1e (bad) 1: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 8: fc ff df b: 48 89 da mov %rbx,%rdx e: 48 c1 ea 03 shr $0x3,%rdx 12: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 16: 75 74 jne 0x8c 18: 48 c7 03 00 70 6d 90 movq $0xffffffff906d7000,(%rbx) 1f: b8 ea ff ff ff mov $0xffffffea,%eax 24: e9 2e ff ff ff jmp 0xffffffffffffff57 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 4c 89 fe mov %r15,%rsi 35: 31 ff xor %edi,%edi 37: e8 c0 57 ad ff call 0xffffffffffad57fc 3c: b8 .byte 0xb8 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 4c 89 fe mov %r15,%rsi b: 31 ff xor %edi,%edi d: e8 c0 57 ad ff call 0xffffffffffad57d2 12: b8 .byte 0xb8 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 966.670554][T16340] RSP: 0018:ffa00000055a75d0 EFLAGS: 00010286 [ 966.670736][T16340] RAX: 00000000ffffffa6 RBX: ff1100000bc36800 RCX: 1fe2200001b082f7 [ 966.670944][T16340] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ff1100000d8417b8 [ 966.671145][T16340] RBP: 1ff4000000ab4ebb R08: 1fe2200001b082f8 R09: fffa3bfffffb0b37 [ 966.671366][T16340] R10: fffa3bfffffb0b38 R11: 0000000000000001 R12: ff1100000d8418f4 [ 966.671577][T16340] R13: ff1100000d8418c0 R14: ffffffff931c7940 R15: ff1100000d841700 [ 966.671786][T16340] FS: 00007f303ca0c440(0000) GS:ff110000a3238000(0000) knlGS:0000000000000000 [ 966.672034][T16340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.672207][T16340] CR2: 000000000044f720 CR3: 00000000109a6003 CR4: 0000000000771ef0 [ 966.672417][T16340] PKRU: 55555554 [ 966.672522][T16340] Call Trace: [ 966.672633][T16340] [ 966.672704][T16340] ? nh_fill_node (net/ipv4/nexthop.c:3363) [ 966.672842][T16340] ? ww_mutex_lock (kernel/locking/mutex.c:775) [ 966.672994][T16340] rtnetlink_rcv_msg (net/core/rtnetlink.c:7000) [ 966.673133][T16340] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.673269][T16340] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.673412][T16340] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 966.673564][T16340] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 966.673704][T16340] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 966.673841][T16340] ? rtnl_link_fill (net/core/rtnetlink.c:6894) [ 966.673981][T16340] ? netlink_ack (net/netlink/af_netlink.c:2527) [ 966.674122][T16340] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1)) [ 966.674258][T16340] ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1)) [ 966.674395][T16340] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 966.674533][T16340] ? netlink_attachskb (net/netlink/af_netlink.c:1329) [ 966.674667][T16340] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1)) [ 966.674816][T16340] ? napi_skb_cache_get (net/core/skbuff.c:674) [ 966.674958][T16340] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.675090][T16340] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 966.675222][T16340] ? netlink_unicast (net/netlink/af_netlink.c:1813) [ 966.675353][T16340] ? __might_fault (mm/memory.c:7218 (discriminator 4)) [ 966.675487][T16340] ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4)) [ 966.675637][T16340] ? copy_msghdr_from_user (net/socket.c:2525) [ 966.675787][T16340] ? get_timestamp.constprop.0 (net/socket.c:2531) [ 966.675958][T16340] ? move_addr_to_kernel (net/socket.c:2511) [ 966.676091][T16340] ? filemap_map_folio_range (mm/filemap.c:3873) [ 966.676233][T16340] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 966.676378][T16340] ___sys_sendmsg (net/socket.c:2641) [ 966.676519][T16340] ? copy_msghdr_from_user (net/socket.c:2628) [ 966.676712][T16340] ? do_pte_missing (mm/memory.c:5790 mm/memory.c:5933 mm/memory.c:4477) [ 966.676860][T16340] ? lock_vma_under_rcu (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) mm/mmap_lock.c:329 (discriminator 1)) [ 966.677059][T16340] __sys_sendmsg (net/socket.c:2671 (discriminator 1)) [ 966.677239][T16340] ? __sys_sendmsg_sock (net/socket.c:2656) [ 966.677406][T16340] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:196 (discriminator 4) ./include/linux/mmap_lock.h:217 (discriminator 4) ./include/linux/mmap_lock.h:264 (discriminator 4) arch/x86/mm/fault.c:1336 (discriminator 4)) [ 966.677540][T16340] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.677884][T16340] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 966.678026][T16340] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 966.678158][T16340] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 966.678291][T16340] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 966.678457][T16340] RIP: 0033:0x7f303cb66c5e [ 966.678603][T16340] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 966.679075][T16340] RSP: 002b:00007ffd0be7c970 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 966.679275][T16340] RAX: ffffffffffffffda RBX: 000000000048ba90 RCX: 00007f303cb66c5e [ 966.679472][T16340] RDX: 0000000000000000 RSI: 00007ffd0be7ca30 RDI: 0000000000000005 [ 966.679675][T16340] RBP: 00007ffd0be7c980 R08: 0000000000000000 R09: 0000000000000000 [ 966.679875][T16340] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000049d620 Finger prints: rtm_get_nexthop:rtnetlink_rcv_msg:netlink_rcv_skb:netlink_unicast:netlink_sendmsg