====================================== | [ 809.544168][T13332] eth1: renamed from tmp | [ 820.085486][T13495] eth1: renamed from tmp | [ 826.953816][T13571] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN | [ 826.954059][T13571] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 826.954361][T13571] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 826.954476][T13571] RIP: 0010:ip6_rt_pcpu_alloc (./include/net/net_namespace.h:419 (discriminator 10) ./include/linux/netdevice.h:2741 (discriminator 10) net/ipv6/route.c:1418 (discriminator 10)) [ 826.954580][T13571] Code: fe ff 0f b7 ed 49 89 c7 e8 1e 02 3f 00 49 8d 87 08 01 00 00 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 de 03 00 00 49 8b 87 08 01 00 00 89 e9 ba ff ff All code ======== 0: fe (bad) 1: ff 0f decl (%rdi) 3: b7 ed mov $0xed,%bh 5: 49 89 c7 mov %rax,%r15 8: e8 1e 02 3f 00 call 0x3f022b d: 49 8d 87 08 01 00 00 lea 0x108(%r15),%rax 14: 48 89 c2 mov %rax,%rdx 17: 48 89 44 24 08 mov %rax,0x8(%rsp) 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 de 03 00 00 jne 0x412 34: 49 8b 87 08 01 00 00 mov 0x108(%r15),%rax 3b: 89 e9 mov %ebp,%ecx 3d: ba .byte 0xba 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 de 03 00 00 jne 0x3e8 a: 49 8b 87 08 01 00 00 mov 0x108(%r15),%rax 11: 89 e9 mov %ebp,%ecx 13: ba .byte 0xba 14: ff (bad) 15: ff .byte 0xff [ 826.954906][T13571] RSP: 0018:ffa0000005eb74d8 EFLAGS: 00010216 [ 826.955023][T13571] RAX: dffffc0000000000 RBX: ff11000016ab322c RCX: 0000000000000000 [ 826.955164][T13571] RDX: 0000000000000021 RSI: dffffc0000000000 RDI: 1fe22000029a4835 [ 826.955296][T13571] RBP: 0000000000000008 R08: ff110000024aad30 R09: ff110000024aad30 [ 826.955432][T13571] R10: 0000000000000002 R11: 0000000000000001 R12: ff11000016ab3200 [ 826.955565][T13571] R13: 1ff4000000bd6e9d R14: ffa0000005eb75f8 R15: 0000000000000000 [ 826.955699][T13571] FS: 00007fcec59f6740(0000) GS:ff110000b68d1000(0000) knlGS:0000000000000000 [ 826.955854][T13571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 826.955973][T13571] CR2: 0000564787cfd4d8 CR3: 000000000f43f002 CR4: 0000000000771ef0 [ 826.956111][T13571] PKRU: 55555554 [ 826.956179][T13571] Call Trace: [ 826.956248][T13571] [ 826.956295][T13571] ? rt6_do_update_pmtu (net/ipv6/route.c:1407) [ 826.956386][T13571] ? __rt6_find_exception_rcu.constprop.0 (net/ipv6/route.c:1612 (discriminator 2)) [ 826.956500][T13571] ip6_pol_route (net/ipv6/route.c:1467 net/ipv6/route.c:2318) [ 826.956587][T13571] ? ip6_pol_route_lookup (net/ipv6/route.c:2267) [ 826.956674][T13571] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 826.956763][T13571] ? ip6_pol_route_input (net/ipv6/route.c:2663) [ 826.956847][T13571] __fib6_rule_action (net/ipv6/fib6_rules.c:239) [ 826.956939][T13571] fib_rules_lookup (net/core/fib_rules.c:339) [ 826.957032][T13571] ? fib_nl_dumprule (net/core/fib_rules.c:315) [ 826.957125][T13571] ? l3mdev_update_flow (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/l3mdev/l3mdev.c:301 (discriminator 1)) [ 826.957212][T13571] ? dev_get_by_index_rcu (net/core/dev.c:987 (discriminator 4)) [ 826.957305][T13571] ? ip6_pol_route_input (net/ipv6/route.c:2663) [ 826.957394][T13571] fib6_rule_lookup (net/ipv6/fib6_rules.c:115) [ 826.957481][T13571] ? fib6_lookup (net/ipv6/fib6_rules.c:99) [ 826.957569][T13571] ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1)) [ 826.957655][T13571] ? ip6_pol_route_input (net/ipv6/route.c:2663) [ 826.957744][T13571] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1)) [ 826.957833][T13571] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 33) kernel/locking/lockdep.c:5831 (discriminator 33)) [ 826.957920][T13571] ip6_route_output_flags (net/ipv6/route.c:2697 net/ipv6/route.c:2709) [ 826.958011][T13571] ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1128 (discriminator 1)) [ 826.958128][T13571] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1260) [ 826.958218][T13571] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1255) [ 826.958327][T13571] ? sk_dst_check (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/sock.h:2198 (discriminator 1) net/core/sock.c:627 (discriminator 1)) [ 826.958418][T13571] ip6_sk_dst_lookup_flow (net/ipv6/ip6_output.c:1297 (discriminator 1)) [ 826.958507][T13571] udpv6_sendmsg (net/ipv6/udp.c:1709) [ 826.958591][T13571] ? ip_frag_init (net/ipv4/ip_output.c:934) [ 826.958681][T13571] ? udpv6_splice_eof (net/ipv6/udp.c:1478) [ 826.958768][T13571] ? __might_fault (mm/memory.c:7217 (discriminator 4)) [ 826.958857][T13571] ? _copy_to_user (./arch/x86/include/asm/smap.h:47 ./arch/x86/include/asm/uaccess_64.h:121 ./arch/x86/include/asm/uaccess_64.h:147 ./include/linux/uaccess.h:206 lib/usercopy.c:26) [ 826.958948][T13571] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 (discriminator 1) kernel/rcu/update.c:380 (discriminator 1)) [ 826.959035][T13571] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 4) kernel/locking/lockdep.c:3821 (discriminator 4) kernel/locking/lockdep.c:3876 (discriminator 4)) [ 826.959132][T13571] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 826.959219][T13571] ? __might_fault (mm/memory.c:7217 (discriminator 4)) [ 826.959313][T13571] ? __sys_sendto (net/socket.c:730 (discriminator 1) net/socket.c:742 (discriminator 1) net/socket.c:2206 (discriminator 1)) [ 826.959400][T13571] __sys_sendto (net/socket.c:730 (discriminator 1) net/socket.c:742 (discriminator 1) net/socket.c:2206 (discriminator 1)) [ 826.959493][T13571] ? __ia32_sys_getpeername (net/socket.c:2173) [ 826.959584][T13571] __x64_sys_sendto (net/socket.c:2213 (discriminator 1) net/socket.c:2209 (discriminator 1) net/socket.c:2209 (discriminator 1)) [ 826.959668][T13571] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 33)) [ 826.959782][T13571] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) [ 826.959871][T13571] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:186 arch/x86/entry/syscall_64.c:90) [ 826.959956][T13571] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 826.960047][T13571] ? irq_exit_rcu (kernel/softirq.c:741 (discriminator 37)) [ 826.960147][T13571] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 826.960257][T13571] RIP: 0033:0x7fcec5a67c5e [ 826.960353][T13571] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 826.960668][T13571] RSP: 002b:00007ffe4097b9e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 826.960803][T13571] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fcec5a67c5e [ 826.960938][T13571] RDX: 000000000000000c RSI: 0000000000406612 RDI: 0000000000000005 [ 826.961070][T13571] RBP: 00007ffe4097b9f0 R08: 00007ffe4097bfe0 R09: 000000000000001c [ 826.961206][T13571] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe4097bfe0 Finger prints: ip6_rt_pcpu_alloc:ip6_pol_route:__fib6_rule_action:fib_rules_lookup:fib6_rule_lookup