====================================== | [ 14.709901][ T234] veth1: entered promiscuous mode | [ 14.777041][ T238] veth1: left promiscuous mode | [ 14.779698][ T238] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000118: 0000 [#1] SMP KASAN | [ 14.779892][ T238] KASAN: null-ptr-deref in range [0x00000000000008c0-0x00000000000008c7] [ 14.780139][ T238] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 14.780242][ T238] RIP: 0010:macvlan_port_release_mac (drivers/net/macvlan.c:79 drivers/net/macvlan.c:808) macvlan [ 14.780353][ T238] Code: f3 f3 65 48 8b 05 cd 44 ca e4 48 89 84 24 f0 00 00 00 31 c0 e8 0e ff ff ff 48 8d b8 c0 08 00 00 48 89 c1 48 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 74 08 3c 03 0f 8e 2a 02 00 00 f6 81 c0 08 00 00 All code ======== 0: f3 f3 65 48 8b 05 cd repz repz mov %gs:-0x1b35bb33(%rip),%rax # 0xffffffffe4ca44d7 7: 44 ca e4 a: 48 89 84 24 f0 00 00 mov %rax,0xf0(%rsp) 11: 00 12: 31 c0 xor %eax,%eax 14: e8 0e ff ff ff call 0xffffffffffffff27 19: 48 8d b8 c0 08 00 00 lea 0x8c0(%rax),%rdi 20: 48 89 c1 mov %rax,%rcx 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 0f b6 04 28 movzbl (%rax,%rbp,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 74 08 je 0x3a 32: 3c 03 cmp $0x3,%al 34: 0f 8e 2a 02 00 00 jle 0x264 3a: f6 .byte 0xf6 3b: 81 .byte 0x81 3c: c0 08 00 rorb $0x0,(%rax) ... Code starting with the faulting instruction =========================================== 0: 0f b6 04 28 movzbl (%rax,%rbp,1),%eax 4: 84 c0 test %al,%al 6: 74 08 je 0x10 8: 3c 03 cmp $0x3,%al a: 0f 8e 2a 02 00 00 jle 0x23a 10: f6 .byte 0xf6 11: 81 .byte 0x81 12: c0 08 00 rorb $0x0,(%rax) ... [ 14.780599][ T238] RSP: 0018:ffa00000005570b0 EFLAGS: 00010216 [ 14.780686][ T238] RAX: 0000000000000118 RBX: 1ff40000000aae19 RCX: 0000000000000000 [ 14.780787][ T238] RDX: 1fe22000004b3220 RSI: ffffffffa3c00c88 RDI: 00000000000008c0 [ 14.780893][ T238] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 14.781015][ T238] R10: 0000000000000002 R11: 0000000000000001 R12: ff1100000c30a818 [ 14.781131][ T238] R13: 0000000000000007 R14: ff11000002599000 R15: dffffc0000000000 [ 14.781238][ T238] FS: 00007fb0fb371840(0000) GS:ff1100009006a000(0000) knlGS:0000000000000000 [ 14.781365][ T238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 14.781454][ T238] CR2: 00000000004ec3e8 CR3: 0000000009552004 CR4: 0000000000771ef0 [ 14.781563][ T238] PKRU: 55555554 [ 14.781618][ T238] Call Trace: [ 14.781671][ T238] [ 14.781711][ T238] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 14.781788][ T238] ? macvlan_port_get_rtnl (drivers/net/macvlan.c:128 (discriminator 9)) macvlan [ 14.781878][ T238] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 14.781963][ T238] ? enable_work (kernel/workqueue.c:4630 (discriminator 6)) [ 14.782039][ T238] ? mod_delayed_work_on (kernel/workqueue.c:2660) [ 14.782116][ T238] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 14.782193][ T238] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 14.782268][ T238] ? __cancel_work_sync (kernel/workqueue.c:4497) [ 14.782345][ T238] macvlan_port_destroy (drivers/net/macvlan.c:1344) macvlan [ 14.782441][ T238] unregister_netdevice_many_notify (net/core/dev.c:12460) [ 14.782539][ T238] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 14.782634][ T238] ? __netdev_upper_dev_unlink (net/core/dev.c:9037) [ 14.782728][ T238] rtnl_dellink (net/core/rtnetlink.c:3601 net/core/rtnetlink.c:3643) [ 14.782807][ T238] ? mark_usage (kernel/locking/lockdep.c:4674) [ 14.782882][ T238] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 14.782965][ T238] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 14.783046][ T238] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 14.783124][ T238] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 14.783200][ T238] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 14.783277][ T238] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 14.783351][ T238] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 14.783438][ T238] ? mark_usage (kernel/locking/lockdep.c:4674) [ 14.783513][ T238] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 14.783592][ T238] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 14.783664][ T238] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 14.783742][ T238] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 14.783813][ T238] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 14.783888][ T238] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 14.783970][ T238] rtnetlink_rcv_msg (net/core/rtnetlink.c:7079) [ 14.784040][ T238] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 14.784109][ T238] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 14.784186][ T238] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 14.784286][ T238] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 14.784370][ T238] netlink_rcv_skb (net/netlink/af_netlink.c:2556) [ 14.784443][ T238] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 14.784513][ T238] ? netlink_ack (./include/linux/skbuff.h:2718) [ 14.784584][ T238] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2)) [ 14.784653][ T238] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2)) [ 14.784722][ T238] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345) [ 14.784797][ T238] ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1)) [ 14.784869][ T238] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 14.784947][ T238] netlink_sendmsg (net/netlink/af_netlink.c:1900) [ 14.785019][ T238] ? netlink_unicast (./include/net/net_namespace.h:419 (discriminator 7)) [ 14.785088][ T238] ? __might_fault (mm/memory.c:7292 (discriminator 5)) [ 14.785161][ T238] ____sys_sendmsg (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2684 (discriminator 4)) [ 14.785237][ T238] ? copy_msghdr_from_user (net/socket.c:2621) [ 14.785309][ T238] ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5373) [ 14.785395][ T238] ? move_addr_to_kernel (net/socket.c:258) [ 14.785465][ T238] ___sys_sendmsg (net/socket.c:2738) [ 14.785533][ T238] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 14.785642][ T238] ? copy_msghdr_from_user (net/socket.c:2590) [ 14.785718][ T238] __sys_sendmsg (net/socket.c:2770) [ 14.785787][ T238] ? __sys_sendmsg_sock (net/socket.c:2751) [ 14.785857][ T238] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 14.785936][ T238] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 14.786008][ T238] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 14.786079][ T238] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 14.786149][ T238] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 14.786234][ T238] RIP: 0033:0x7fb0fb5aa54e [ 14.786307][ T238] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 14.786552][ T238] RSP: 002b:00007ffd75145130 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 14.786658][ T238] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb0fb5aa54e [ 14.786762][ T238] RDX: 0000000000000000 RSI: 00007ffd751451e0 RDI: 0000000000000005 [ 14.786865][ T238] RBP: 00007ffd75145140 R08: 0000000000000000 R09: 0000000000000000 [ 14.786974][ T238] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a508e0d Finger prints: macvlan_port_release_mac:macvlan_port_destroy:unregister_netdevice_many_notify:rtnl_dellink:rtnetlink_rcv_msg