====================================== | [ 528.239085][ T8971] eth1: renamed from tmp | [ 537.406442][ T9107] eth1: renamed from tmp | [ 542.634647][ T9155] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN | [ 542.634937][ T9155] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 542.635282][ T9155] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 542.635413][ T9155] RIP: 0010:ip6_rt_pcpu_alloc (./include/net/net_namespace.h:414 (discriminator 10) ./include/linux/netdevice.h:2738 (discriminator 10) net/ipv6/route.c:1418 (discriminator 10)) [ 542.635525][ T9155] Code: fe ff 0f b7 ed 49 89 c7 e8 de d1 3e 00 49 8d 87 08 01 00 00 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 de 03 00 00 49 8b 87 08 01 00 00 89 e9 ba ff ff All code ======== 0: fe (bad) 1: ff 0f decl (%rdi) 3: b7 ed mov $0xed,%bh 5: 49 89 c7 mov %rax,%r15 8: e8 de d1 3e 00 call 0x3ed1eb d: 49 8d 87 08 01 00 00 lea 0x108(%r15),%rax 14: 48 89 c2 mov %rax,%rdx 17: 48 89 44 24 08 mov %rax,0x8(%rsp) 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 de 03 00 00 jne 0x412 34: 49 8b 87 08 01 00 00 mov 0x108(%r15),%rax 3b: 89 e9 mov %ebp,%ecx 3d: ba .byte 0xba 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 de 03 00 00 jne 0x3e8 a: 49 8b 87 08 01 00 00 mov 0x108(%r15),%rax 11: 89 e9 mov %ebp,%ecx 13: ba .byte 0xba 14: ff (bad) 15: ff .byte 0xff [ 542.635896][ T9155] RSP: 0018:ffa000000a2c68c8 EFLAGS: 00010216 [ 542.636043][ T9155] RAX: dffffc0000000000 RBX: ff1100001b42ca2c RCX: 0000000000000000 [ 542.636221][ T9155] RDX: 0000000000000021 RSI: dffffc0000000000 RDI: 1fe2200001256835 [ 542.636385][ T9155] RBP: 0000000000000008 R08: ff11000013400bd0 R09: ff11000013400bd0 [ 542.636545][ T9155] R10: 0000000000000001 R11: 0000000000000001 R12: ff1100001b42ca00 [ 542.636705][ T9155] R13: 1ff4000001458d1b R14: ffa000000a2c69e8 R15: 0000000000000000 [ 542.636862][ T9155] FS: 00007fe653ad3740(0000) GS:ff110000b8e73000(0000) knlGS:0000000000000000 [ 542.637042][ T9155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.637181][ T9155] CR2: 00007efe318e8730 CR3: 000000001c08e006 CR4: 0000000000771ef0 [ 542.637336][ T9155] PKRU: 55555554 [ 542.637415][ T9155] Call Trace: [ 542.637494][ T9155] [ 542.637547][ T9155] ? trace_fib6_table_lookup (./include/trace/events/fib6.h:13 (discriminator 33)) [ 542.637657][ T9155] ? rt6_do_update_pmtu (net/ipv6/route.c:1407) [ 542.637763][ T9155] ? __rt6_find_exception_rcu.constprop.0 (net/ipv6/route.c:1612 (discriminator 2)) [ 542.637892][ T9155] ip6_pol_route (net/ipv6/route.c:1467 net/ipv6/route.c:2316) [ 542.637998][ T9155] ? ip6_pol_route_lookup (net/ipv6/route.c:2265) [ 542.638107][ T9155] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 542.638230][ T9155] ? ip6_pol_route_input (net/ipv6/route.c:2661) [ 542.638330][ T9155] __fib6_rule_action (net/ipv6/fib6_rules.c:239) [ 542.638439][ T9155] fib_rules_lookup (net/core/fib_rules.c:339) [ 542.638542][ T9155] ? fib_nl_dumprule (net/core/fib_rules.c:315) [ 542.638647][ T9155] ? l3mdev_update_flow (./include/linux/rcupdate.h:341 (discriminator 1) ./include/linux/rcupdate.h:897 (discriminator 1) net/l3mdev/l3mdev.c:301 (discriminator 1)) [ 542.638751][ T9155] ? ip6_pol_route_input (net/ipv6/route.c:2661) [ 542.638854][ T9155] fib6_rule_lookup (net/ipv6/fib6_rules.c:115) [ 542.638956][ T9155] ? fib6_lookup (net/ipv6/fib6_rules.c:99) [ 542.639056][ T9155] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 542.639163][ T9155] ? ip6_pol_route_input (net/ipv6/route.c:2661) [ 542.639270][ T9155] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 6) kernel/locking/lockdep.c:4411 (discriminator 6)) [ 542.639398][ T9155] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 542.639500][ T9155] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 542.639630][ T9155] ? ip6_route_output_flags (./include/linux/rcupdate.h:331 (discriminator 1) ./include/linux/rcupdate.h:867 (discriminator 1) net/ipv6/route.c:2706 (discriminator 1)) [ 542.639732][ T9155] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 33) kernel/locking/lockdep.c:5831 (discriminator 33)) [ 542.639833][ T9155] ip6_route_output_flags (net/ipv6/route.c:2695 net/ipv6/route.c:2707) [ 542.639942][ T9155] ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1169 (discriminator 1)) [ 542.640066][ T9155] ? tcp_wfree (net/ipv4/tcp_output.c:1394) [ 542.640170][ T9155] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1273) [ 542.640269][ T9155] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1268) [ 542.640394][ T9155] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 542.640496][ T9155] vrf_process_v6_outbound (drivers/net/vrf.c:437 (discriminator 2)) [ 542.640600][ T9155] ? vrf_ip6_local_out (drivers/net/vrf.c:413) [ 542.640703][ T9155] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 542.640804][ T9155] vrf_xmit (drivers/net/vrf.c:556 drivers/net/vrf.c:568) [ 542.640880][ T9155] dev_hard_start_xmit (./include/linux/netdevice.h:5273 ./include/linux/netdevice.h:5282 net/core/dev.c:3853 net/core/dev.c:3869) [ 542.640982][ T9155] __dev_queue_xmit (net/core/dev.h:380 net/core/dev.c:4820) [ 542.641083][ T9155] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 542.641196][ T9155] ? write_profile (kernel/stacktrace.c:83) [ 542.641298][ T9155] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 542.641401][ T9155] ? netdev_core_pick_tx (net/core/dev.c:4727) [ 542.641505][ T9155] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 542.641611][ T9155] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 542.641712][ T9155] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 542.641813][ T9155] ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1)) [ 542.641914][ T9155] ? __asan_memcpy (mm/kasan/shadow.c:105 (discriminator 3)) [ 542.642016][ T9155] ? neigh_hh_output (./include/net/neighbour.h:521) [ 542.642118][ T9155] ip6_finish_output2 (./include/net/neighbour.h:554 net/ipv6/ip6_output.c:136) [ 542.642221][ T9155] ? ip6_xmit (net/ipv6/ip6_output.c:61) [ 542.642321][ T9155] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 542.642422][ T9155] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 542.642521][ T9155] ? ip6_mtu (./include/linux/rcupdate.h:341 (discriminator 1) ./include/linux/rcupdate.h:897 (discriminator 1) ./include/net/ip6_route.h:343 (discriminator 1) net/ipv6/route.c:3277 (discriminator 1)) [ 542.642596][ T9155] ip6_finish_output (net/ipv6/ip6_output.c:209 net/ipv6/ip6_output.c:220) [ 542.642697][ T9155] ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:247) [ 542.642772][ T9155] ? ip6_finish_output (net/ipv6/ip6_output.c:228) [ 542.642873][ T9155] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 542.642975][ T9155] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 542.643075][ T9155] ? ip6_mtu (./include/linux/rcupdate.h:341 (discriminator 1) ./include/linux/rcupdate.h:897 (discriminator 1) ./include/net/ip6_route.h:343 (discriminator 1) net/ipv6/route.c:3277 (discriminator 1)) [ 542.643152][ T9155] ip6_xmit (./include/net/dst.h:464 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/ip6_output.c:371 (discriminator 4)) [ 542.643234][ T9155] ? ip6_dst_lookup (net/ipv6/ip6_output.c:271) [ 542.643334][ T9155] ? ip6_mtu (net/ipv6/route.c:2797) [ 542.643413][ T9155] ? __print_lock_name (kernel/locking/lockdep.c:670 kernel/locking/lockdep.c:724) [ 542.643513][ T9155] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 542.643621][ T9155] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 542.643724][ T9155] ? inet6_csk_xmit (./include/linux/rcupdate.h:331 (discriminator 1) ./include/linux/rcupdate.h:867 (discriminator 1) net/ipv6/inet6_connection_sock.c:114 (discriminator 1)) [ 542.643833][ T9155] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 542.643946][ T9155] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 542.644058][ T9155] ? inet6_csk_xmit (./include/linux/rcupdate.h:331 (discriminator 1) ./include/linux/rcupdate.h:867 (discriminator 1) net/ipv6/inet6_connection_sock.c:114 (discriminator 1)) [ 542.644177][ T9155] inet6_csk_xmit (net/ipv6/inet6_connection_sock.c:120 (discriminator 16)) [ 542.644290][ T9155] ? inet6_csk_route_socket (net/ipv6/inet6_connection_sock.c:100) [ 542.644396][ T9155] ? __asan_memcpy (mm/kasan/shadow.c:105 (discriminator 3)) [ 542.644505][ T9155] __tcp_transmit_skb (net/ipv4/tcp_output.c:1631) [ 542.644612][ T9155] ? __tcp_select_window (net/ipv4/tcp_output.c:1452) [ 542.644712][ T9155] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 542.644814][ T9155] tcp_write_xmit (net/ipv4/tcp_output.c:3002 (discriminator 2)) [ 542.644917][ T9155] ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:714) [ 542.645020][ T9155] ? tcp_retrans_try_collapse (net/ipv4/tcp_output.c:2906) [ 542.645151][ T9155] ? skb_do_copy_data_nocache (./include/linux/uio.h:264 (discriminator 1) ./include/net/sock.h:2289 (discriminator 1)) [ 542.645264][ T9155] ? trace_tcp_sendmsg_locked (./include/net/sock.h:2282) [ 542.645368][ T9155] __tcp_push_pending_frames (net/ipv4/tcp_output.c:3185 (discriminator 2)) [ 542.645474][ T9155] tcp_sendmsg_locked (net/ipv4/tcp.c:1375) [ 542.645580][ T9155] ? tcp_sendmsg_fastopen (net/ipv4/tcp.c:1078) [ 542.645689][ T9155] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 542.645793][ T9155] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 (discriminator 5) ./include/linux/atomic/atomic-arch-fallback.h:2170 (discriminator 5) ./include/linux/atomic/atomic-instrumented.h:1302 (discriminator 5) ./include/asm-generic/qspinlock.h:111 (discriminator 5) kernel/locking/spinlock_debug.c:116 (discriminator 5)) [ 542.645898][ T9155] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 542.646000][ T9155] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 542.646103][ T9155] ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1)) [ 542.646214][ T9155] tcp_sendmsg (net/ipv4/tcp.c:1413) [ 542.646289][ T9155] sock_write_iter (net/socket.c:730 (discriminator 1) net/socket.c:742 (discriminator 1) net/socket.c:1195 (discriminator 1)) [ 542.646400][ T9155] ? ____sys_recvmsg (net/socket.c:1176) [ 542.646504][ T9155] ? sock_write_iter (net/socket.c:1154) [ 542.646609][ T9155] ? ns_to_timespec64 (kernel/time/time.c:905) [ 542.646710][ T9155] ? ktime_get_ts64 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 ./include/linux/seqlock.h:74 kernel/time/timekeeping.c:965) [ 542.646814][ T9155] ? ____sys_recvmsg (net/socket.c:1176) [ 542.646913][ T9155] new_sync_write (fs/read_write.c:594 (discriminator 1)) [ 542.647013][ T9155] ? new_sync_read (fs/read_write.c:492 (discriminator 1)) [ 542.647113][ T9155] ? poll_select_finish (fs/select.c:343 (discriminator 1)) [ 542.647224][ T9155] ? new_sync_read (fs/read_write.c:584) [ 542.647327][ T9155] ? generic_atomic_write_valid (fs/read_write.c:482) [ 542.647453][ T9155] ? do_pselect.constprop.0 (fs/select.c:760 (discriminator 1)) [ 542.647553][ T9155] vfs_write (fs/read_write.c:686) [ 542.647629][ T9155] ? vfs_read (fs/read_write.c:572) [ 542.647708][ T9155] ksys_write (fs/read_write.c:739) [ 542.647783][ T9155] ? __ia32_sys_read (fs/read_write.c:728) [ 542.647885][ T9155] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 542.647985][ T9155] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 542.648087][ T9155] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131) [ 542.648217][ T9155] RIP: 0033:0x7fe653b44c5e [ 542.648334][ T9155] Code: 4d 89 d8 e8 14 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 14 bd 00 00 call 0xbd1c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 542.648688][ T9155] RSP: 002b:00007ffdc23e6450 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 542.648851][ T9155] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe653b44c5e [ 542.649012][ T9155] RDX: 000000000000000c RSI: 0000000000406612 RDI: 0000000000000005 [ 542.649171][ T9155] RBP: 00007ffdc23e6460 R08: 0000000000000000 R09: 0000000000000000 [ 542.649324][ T9155] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020 Finger prints: ip6_rt_pcpu_alloc:ip6_pol_route:__fib6_rule_action:fib_rules_lookup:fib6_rule_lookup