====================================== | [ 789.031558][T12848] eth1: renamed from tmp | [ 799.715477][T13010] eth1: renamed from tmp | [ 806.650235][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN | [ 806.650528][ C1] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 806.650855][ C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 806.650987][ C1] RIP: 0010:ip6_rt_pcpu_alloc (./include/net/net_namespace.h:419 (discriminator 10) ./include/linux/netdevice.h:2741 (discriminator 10) net/ipv6/route.c:1418 (discriminator 10)) [ 806.651091][ C1] Code: fe ff 0f b7 ed 49 89 c7 e8 8e fb 3e 00 49 8d 87 08 01 00 00 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 de 03 00 00 49 8b 87 08 01 00 00 89 e9 ba ff ff All code ======== 0: fe (bad) 1: ff 0f decl (%rdi) 3: b7 ed mov $0xed,%bh 5: 49 89 c7 mov %rax,%r15 8: e8 8e fb 3e 00 call 0x3efb9b d: 49 8d 87 08 01 00 00 lea 0x108(%r15),%rax 14: 48 89 c2 mov %rax,%rdx 17: 48 89 44 24 08 mov %rax,0x8(%rsp) 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 de 03 00 00 jne 0x412 34: 49 8b 87 08 01 00 00 mov 0x108(%r15),%rax 3b: 89 e9 mov %ebp,%ecx 3d: ba .byte 0xba 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 de 03 00 00 jne 0x3e8 a: 49 8b 87 08 01 00 00 mov 0x108(%r15),%rax 11: 89 e9 mov %ebp,%ecx 13: ba .byte 0xba 14: ff (bad) 15: ff .byte 0xff [ 806.651444][ C1] RSP: 0018:ffa00000001c05b8 EFLAGS: 00010216 [ 806.651572][ C1] RAX: dffffc0000000000 RBX: ff1100000acc022c RCX: 0000000000000000 [ 806.651720][ C1] RDX: 0000000000000021 RSI: dffffc0000000000 RDI: 1fe22000011a3235 [ 806.651864][ C1] RBP: 0000000000000008 R08: ff11000012980b58 R09: ff11000012980b58 [ 806.652010][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ff1100000acc0200 [ 806.652151][ C1] R13: 1ff40000000380b9 R14: ffa00000001c06d8 R15: 0000000000000000 [ 806.652305][ C1] FS: 00007ff40d949740(0000) GS:ff110000c566b000(0000) knlGS:0000000000000000 [ 806.652478][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.652603][ C1] CR2: 0000559957458638 CR3: 000000001438b006 CR4: 0000000000771ef0 [ 806.652750][ C1] PKRU: 55555554 [ 806.652823][ C1] Call Trace: [ 806.652895][ C1] [ 806.652945][ C1] ? trace_fib6_table_lookup (./include/trace/events/fib6.h:13 (discriminator 33)) [ 806.653046][ C1] ? rt6_do_update_pmtu (net/ipv6/route.c:1407) [ 806.653139][ C1] ? __rt6_find_exception_rcu.constprop.0 (net/ipv6/route.c:1612 (discriminator 2)) [ 806.653258][ C1] ip6_pol_route (net/ipv6/route.c:1467 net/ipv6/route.c:2318) [ 806.653356][ C1] ? ip6_pol_route_lookup (net/ipv6/route.c:2267) [ 806.653453][ C1] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 806.653549][ C1] ? ip6_pol_route (net/ipv6/route.c:2338) [ 806.653645][ C1] __fib6_rule_action (net/ipv6/fib6_rules.c:239) [ 806.653734][ C1] fib_rules_lookup (net/core/fib_rules.c:339) [ 806.653832][ C1] ? fib_nl_dumprule (net/core/fib_rules.c:315) [ 806.653923][ C1] ? l3mdev_update_flow (./include/linux/rcupdate.h:341 (discriminator 1) ./include/linux/rcupdate.h:897 (discriminator 1) net/l3mdev/l3mdev.c:301 (discriminator 1)) [ 806.654018][ C1] ? ip6_pol_route (net/ipv6/route.c:2338) [ 806.654108][ C1] fib6_rule_lookup (net/ipv6/fib6_rules.c:115) [ 806.654196][ C1] ? __udp6_lib_rcv (net/ipv6/udp.c:1150) [ 806.654286][ C1] ? fib6_lookup (net/ipv6/fib6_rules.c:99) [ 806.654384][ C1] ? ip6_pol_route (net/ipv6/route.c:2338) [ 806.654475][ C1] ? vrf_ip6_rcv (./arch/x86/include/asm/jump_label.h:37 ./include/linux/jump_label.h:208 ./include/linux/netfilter.h:238 drivers/net/vrf.c:1181 drivers/net/vrf.c:1370) [ 806.654569][ C1] ip6_route_input (./include/linux/skbuff.h:1247 net/ipv6/route.c:2654) [ 806.654658][ C1] ? ip6_validate_gw (net/ipv6/route.c:2629) [ 806.654749][ C1] ? __udp6_lib_demux_lookup (net/ipv6/udp.c:1213 (discriminator 4)) [ 806.654840][ C1] ? ip6_rcv_core (./include/linux/skbuff.h:3391 net/ipv6/ip6_input.c:292) [ 806.654928][ C1] ipv6_rcv (./include/linux/skbuff.h:1175 ./include/net/dst.h:480 net/ipv6/ip6_input.c:79 ./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv6/ip6_input.c:311) [ 806.654998][ C1] ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4028 (discriminator 2) kernel/rcu/tree.c:4020 (discriminator 2)) [ 806.655121][ C1] ? ip6_rcv_core (net/ipv6/ip6_input.c:305) [ 806.655209][ C1] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 4) kernel/locking/lockdep.c:3821 (discriminator 4) kernel/locking/lockdep.c:3876 (discriminator 4)) [ 806.655300][ C1] ? asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697) [ 806.655412][ C1] ? pv_native_safe_halt (arch/x86/kernel/paravirt.c:82) [ 806.655507][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 806.655599][ C1] __netif_receive_skb_one_core (net/core/dev.c:6143) [ 806.655713][ C1] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 806.655809][ C1] ? __netif_receive_skb_list_core (net/core/dev.c:6143) [ 806.655922][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 806.656020][ C1] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 33) kernel/locking/lockdep.c:5831 (discriminator 33)) [ 806.656110][ C1] process_backlog (./include/linux/rcupdate.h:895 net/core/dev.c:6616) [ 806.656205][ C1] ? process_backlog (./include/linux/local_lock_internal.h:57 (discriminator 1) net/core/dev.c:6613 (discriminator 1)) [ 806.656295][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 806.656389][ C1] __napi_poll.constprop.0 (net/core/dev.c:7680) [ 806.656481][ C1] net_rx_action (net/core/dev.c:7742 net/core/dev.c:7894) [ 806.656577][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 806.656668][ C1] ? run_backlog_napi (net/core/dev.c:7856) [ 806.656759][ C1] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 6) kernel/locking/lockdep.c:4411 (discriminator 6)) [ 806.656870][ C1] ? warn_bogus_irq_restore (kernel/locking/irqflag-debug.c:10 (discriminator 4)) [ 806.656965][ C1] ? rcu_do_batch (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 kernel/rcu/tree_nocb.h:1638 kernel/rcu/tree.c:2671) [ 806.657059][ C1] handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623) [ 806.657150][ C1] ? _local_bh_enable (kernel/softirq.c:580) [ 806.657236][ C1] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 806.657331][ C1] do_softirq (kernel/softirq.c:523 (discriminator 25) kernel/softirq.c:510 (discriminator 25)) [ 806.657403][ C1] [ 806.657449][ C1] [ 806.657493][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 (discriminator 1) ./include/linux/rcupdate.h:934 (discriminator 1) net/core/dev.c:4857 (discriminator 1)) [ 806.657586][ C1] __local_bh_enable_ip (kernel/softirq.c:450) [ 806.657674][ C1] __dev_queue_xmit (net/core/dev.c:4858) [ 806.657765][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 806.657857][ C1] ? netdev_core_pick_tx (net/core/dev.c:4738) [ 806.657945][ C1] ? __asan_memcpy (mm/kasan/shadow.c:105 (discriminator 3)) [ 806.658037][ C1] ? eth_header (net/ethernet/eth.c:100) [ 806.658126][ C1] ? neigh_resolve_output (./include/linux/netdevice.h:3439 net/core/neighbour.c:1614 net/core/neighbour.c:1599) [ 806.658223][ C1] ip6_finish_output2 (net/ipv6/ip6_output.c:61) [ 806.658328][ C1] ? ip6_xmit (net/ipv6/ip6_output.c:61) [ 806.658421][ C1] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 806.658511][ C1] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 806.658601][ C1] ? ip6_mtu (./include/linux/rcupdate.h:341 (discriminator 1) ./include/linux/rcupdate.h:897 (discriminator 1) ./include/net/ip6_route.h:349 (discriminator 1) net/ipv6/route.c:3279 (discriminator 1)) [ 806.658669][ C1] ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 806.658763][ C1] ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246) [ 806.658833][ C1] ? ip6_finish_output (net/ipv6/ip6_output.c:227) [ 806.658928][ C1] ? __ip6_local_out (./include/linux/rcupdate.h:341 (discriminator 1) ./include/linux/rcupdate.h:897 (discriminator 1) ./include/net/l3mdev.h:222 (discriminator 1) ./include/net/l3mdev.h:236 (discriminator 1) net/ipv6/output_core.c:134 (discriminator 1)) [ 806.659022][ C1] ip6_send_skb (net/ipv6/ip6_output.c:1984) [ 806.659113][ C1] udp_v6_send_skb (net/ipv6/udp.c:1442) [ 806.659204][ C1] ? print_irq_inversion_bug.part.0 (kernel/locking/lockdep.c:4067) [ 806.659314][ C1] udpv6_sendmsg (net/ipv6/udp.c:1733) [ 806.659411][ C1] ? ip_frag_init (net/ipv4/ip_output.c:934) [ 806.659506][ C1] ? udpv6_splice_eof (net/ipv6/udp.c:1478) [ 806.659598][ C1] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 (discriminator 1) kernel/rcu/update.c:380 (discriminator 1)) [ 806.659689][ C1] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 4) kernel/locking/lockdep.c:3821 (discriminator 4) kernel/locking/lockdep.c:3876 (discriminator 4)) [ 806.659778][ C1] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 806.659873][ C1] ? __might_fault (mm/memory.c:7177 (discriminator 4)) [ 806.659964][ C1] ? ____sys_sendmsg (net/socket.c:727 (discriminator 4) net/socket.c:742 (discriminator 4) net/socket.c:2592 (discriminator 4)) [ 806.660058][ C1] ____sys_sendmsg (net/socket.c:727 (discriminator 4) net/socket.c:742 (discriminator 4) net/socket.c:2592 (discriminator 4)) [ 806.660151][ C1] ? get_timestamp.constprop.0 (net/socket.c:2538) [ 806.660260][ C1] ? move_addr_to_kernel (net/socket.c:2518) [ 806.660360][ C1] ___sys_sendmsg (net/socket.c:2648) [ 806.660450][ C1] ? trace_kfree (./include/trace/events/kmem.h:97 (discriminator 33)) [ 806.660541][ C1] ? copy_msghdr_from_user (net/socket.c:2635) [ 806.660633][ C1] ? ktime_get_ts64 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 ./include/linux/seqlock.h:74 kernel/time/timekeeping.c:965) [ 806.660726][ C1] __sys_sendmsg (net/socket.c:2678 (discriminator 1)) [ 806.660817][ C1] ? __sys_sendmsg_sock (net/socket.c:2663) [ 806.660907][ C1] ? kern_select (fs/select.c:728) [ 806.661006][ C1] ? restore_fpregs_from_fpstate (arch/x86/kernel/fpu/xstate.h:240 arch/x86/kernel/fpu/core.c:207) [ 806.661119][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 806.661211][ C1] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 806.661300][ C1] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131) [ 806.661414][ C1] RIP: 0033:0x7ff40d9bac5e [ 806.661508][ C1] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 806.661830][ C1] RSP: 002b:00007ffe1c5160f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 806.661974][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff40d9bac5e [ 806.662113][ C1] RDX: 0000000000000000 RSI: 00007ffe1c5161a0 RDI: 0000000000000005 [ 806.662252][ C1] RBP: 00007ffe1c516100 R08: 0000000000000000 R09: 0000000000000000 [ 806.662394][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe1c51aa20 Finger prints: ip6_rt_pcpu_alloc:ip6_pol_route:__fib6_rule_action:fib_rules_lookup:fib6_rule_lookup