====================================== | [ 8.728358][ T209] ================================================================== | [ 8.728516][ T209] BUG: KASAN: slab-use-after-free in ip6_pol_route (net/ipv6/route.c:1446 (discriminator 1) net/ipv6/route.c:2316 (discriminator 1)) | [ 8.728643][ T209] Read of size 4 at addr ff11000004e067d8 by task cmsg_sender/209 | [ 8.728758][ T209] [ 8.728803][ T209] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 8.728805][ T209] Call Trace: [ 8.728806][ T209] [ 8.728808][ T209] dump_stack_lvl (lib/dump_stack.c:122) [ 8.728814][ T209] print_address_description.constprop.0 (mm/kasan/report.c:379 (discriminator 1)) [ 8.728819][ T209] print_report (mm/kasan/report.c:483) [ 8.728821][ T209] ? __virt_addr_valid (./include/linux/rcupdate.h:937 (discriminator 1) ./include/linux/mmzone.h:2197 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1)) [ 8.728824][ T209] ? __virt_addr_valid (./include/linux/rcupdate.h:963 (discriminator 4) ./include/linux/mmzone.h:2207 (discriminator 4) arch/x86/mm/physaddr.c:54 (discriminator 4)) [ 8.728826][ T209] kasan_report (mm/kasan/report.c:597) [ 8.728830][ T209] ? ip6_pol_route (net/ipv6/route.c:1446 (discriminator 1) net/ipv6/route.c:2316 (discriminator 1)) [ 8.728832][ T209] ? ip6_pol_route (net/ipv6/route.c:1446 (discriminator 1) net/ipv6/route.c:2316 (discriminator 1)) [ 8.728834][ T209] ip6_pol_route (net/ipv6/route.c:1446 (discriminator 1) net/ipv6/route.c:2316 (discriminator 1)) [ 8.728835][ T209] ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1)) [ 8.728839][ T209] ? ip6_pol_route_lookup (net/ipv6/route.c:2268) [ 8.728841][ T209] ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1)) [ 8.728843][ T209] ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4040 (discriminator 4) kernel/rcu/tree.c:4032 (discriminator 4)) [ 8.728846][ T209] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 (discriminator 1) kernel/rcu/update.c:380 (discriminator 1)) [ 8.728848][ T209] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 3) kernel/locking/lockdep.c:3821 (discriminator 3) kernel/locking/lockdep.c:3876 (discriminator 3)) [ 8.728850][ T209] ? ip6_pol_route_input (net/ipv6/route.c:2665) [ 8.728852][ T209] fib6_rule_lookup (net/ipv6/fib6_rules.c:130) [ 8.728855][ T209] ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1)) [ 8.728857][ T209] ? fib6_lookup (net/ipv6/fib6_rules.c:102) [ 8.728860][ T209] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2)) [ 8.728861][ T209] ? ip6_route_output_flags (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:838 (discriminator 2) net/ipv6/route.c:2710 (discriminator 2)) [ 8.728863][ T209] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 8.728865][ T209] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 24) kernel/locking/lockdep.c:5831 (discriminator 24)) [ 8.728867][ T209] ip6_route_output_flags (net/ipv6/route.c:2699 net/ipv6/route.c:2711) [ 8.728869][ T209] ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1155 (discriminator 1)) [ 8.728871][ T209] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2)) [ 8.728874][ T209] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1289) [ 8.728875][ T209] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1282) [ 8.728877][ T209] ? sk_dst_check (net/core/sock.c:622) [ 8.728881][ T209] ip6_sk_dst_lookup_flow (net/ipv6/ip6_output.c:1326 (discriminator 1)) [ 8.728883][ T209] ping_v6_sendmsg (net/ipv6/ping.c:151) [ 8.728886][ T209] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 3) kernel/locking/lockdep.c:3821 (discriminator 3) kernel/locking/lockdep.c:3876 (discriminator 3)) [ 8.728888][ T209] ? l3mdev_master_ifindex_by_index (./include/linux/rcupdate.h:867 (discriminator 7) ./include/net/l3mdev.h:102 (discriminator 7)) [ 8.728891][ T209] ? release_sock (net/core/sock.c:3814) [ 8.728892][ T209] ? reacquire_held_locks (kernel/locking/lockdep.c:5385 (discriminator 2)) [ 8.728894][ T209] ? release_sock (net/core/sock.c:3814) [ 8.728895][ T209] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2)) [ 8.728898][ T209] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 8.728901][ T209] ? inet_autobind (net/ipv4/af_inet.c:195) [ 8.728903][ T209] ? inet_send_prepare (net/ipv4/af_inet.c:853) [ 8.728905][ T209] ____sys_sendmsg (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4) net/socket.c:2698 (discriminator 4)) [ 8.728907][ T209] ? copy_msghdr_from_user (net/socket.c:2638) [ 8.728909][ T209] ? get_timestamp.constprop.0 (net/socket.c:2644) [ 8.728910][ T209] ? move_addr_to_kernel (net/socket.c:2624) [ 8.728912][ T209] ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1)) [ 8.728915][ T209] ___sys_sendmsg (net/socket.c:2754) [ 8.728916][ T209] ? copy_msghdr_from_user (net/socket.c:2741) [ 8.728918][ T209] ? insert_pfn (mm/memory.c:2712) [ 8.728922][ T209] ? rcu_read_unlock (./include/linux/rcupdate.h:867 (discriminator 5)) [ 8.728924][ T209] ? do_pte_missing (mm/memory.c:5799 mm/memory.c:5933 mm/memory.c:4477) [ 8.728928][ T209] __sys_sendmsg (net/socket.c:2784 (discriminator 1)) [ 8.728930][ T209] ? __sys_sendmsg_sock (net/socket.c:2769) [ 8.728931][ T209] ? down_write_nested (kernel/locking/rwsem.c:1380) [ 8.728933][ T209] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 8.728936][ T209] ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1413) [ 8.728938][ T209] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 8.728939][ T209] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 8.728940][ T209] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 8.728943][ T209] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:106 (discriminator 9)) [ 8.728946][ T209] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 8.728949][ T209] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 8.728951][ T209] RIP: 0033:0x7f699fa7322e [ 8.728953][ T209] Code: 4d 89 d8 e8 94 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 94 bd 00 00 call 0xbd9c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 8.728955][ T209] RSP: 002b:00007ffe19c8b110 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 8.728959][ T209] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f699fa7322e [ 8.728961][ T209] RDX: 0000000000000000 RSI: 00007ffe19c8b1e0 RDI: 0000000000000005 [ 8.728962][ T209] RBP: 00007ffe19c8b120 R08: 0000000000000000 R09: 0000000000000000 [ 8.728963][ T209] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000005 [ 8.728963][ T209] R13: 00000000245ff010 R14: 00007f699fc45000 R15: 0000000000404e00 | [ 8.741553][ T209] Disabling lock debugging due to kernel taint | [ 12.996453][ T453] Oops: general protection fault, probably for non-canonical address 0xed6d696d6d6d6d8e: 0000 [#1] SMP KASAN | [ 12.996665][ T453] KASAN: maybe wild-memory-access in range [0x6b6b6b6b6b6b6c70-0x6b6b6b6b6b6b6c77] | [ 12.996964][ T453] Tainted: [B]=BAD_PAGE [ 12.997025][ T453] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 12.997124][ T453] RIP: 0010:ip6_pol_route (./include/net/net_namespace.h:419 (discriminator 7) ./include/linux/netdevice.h:2764 (discriminator 7) net/ipv6/route.c:1436 (discriminator 7) net/ipv6/route.c:1446 (discriminator 7) net/ipv6/route.c:2316 (discriminator 7)) [ 12.997212][ T453] Code: 80 3c 02 00 0f 85 80 04 00 00 4c 8b 3b e8 7f 4e 40 00 48 b8 00 00 00 00 00 fc ff df 49 8d bf 08 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4c 04 00 00 49 8b 97 08 01 00 00 be 04 00 00 00 All code ======== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 80 04 00 00 jne 0x48a a: 4c 8b 3b mov (%rbx),%r15 d: e8 7f 4e 40 00 call 0x404e91 12: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 19: fc ff df 1c: 49 8d bf 08 01 00 00 lea 0x108(%r15),%rdi 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 4c 04 00 00 jne 0x480 34: 49 8b 97 08 01 00 00 mov 0x108(%r15),%rdx 3b: be 04 00 00 00 mov $0x4,%esi Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 4c 04 00 00 jne 0x456 a: 49 8b 97 08 01 00 00 mov 0x108(%r15),%rdx 11: be 04 00 00 00 mov $0x4,%esi [ 12.997491][ T453] RSP: 0018:ffa00000013c7388 EFLAGS: 00010216 [ 12.997593][ T453] RAX: dffffc0000000000 RBX: ff11000004e06740 RCX: ffffffff9034dee1 [ 12.997719][ T453] RDX: 0d6d6d6d6d6d6d8e RSI: 0000000000000008 RDI: 6b6b6b6b6b6b6c73 [ 12.997837][ T453] RBP: 1ff4000000278e74 R08: 0000000000000000 R09: 0000000000000000 [ 12.997950][ T453] R10: 0000000000000000 R11: ff1100000a3e94c0 R12: ff1100000fb50040 [ 12.998065][ T453] R13: 000000006b6b6b6b R14: 0000000000000080 R15: 6b6b6b6b6b6b6b6b [ 12.998181][ T453] FS: 00007f39e6fc1740(0000) GS:ff110000d92cc000(0000) knlGS:0000000000000000 [ 12.998316][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 12.998418][ T453] CR2: 00007f39e71c9000 CR3: 000000000f163006 CR4: 0000000000771ef0 [ 12.998533][ T453] PKRU: 55555554 [ 12.998592][ T453] Call Trace: [ 12.998651][ T453] [ 12.998692][ T453] ? ip6_pol_route_lookup (net/ipv6/route.c:2268) [ 12.998777][ T453] ? unwind_next_frame (./include/linux/rcupdate.h:871 ./include/linux/rcupdate.h:1181 arch/x86/kernel/unwind_orc.c:495) [ 12.998860][ T453] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 24) kernel/locking/lockdep.c:5831 (discriminator 24)) [ 12.998942][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 12.999019][ T453] ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24)) [ 12.999098][ T453] ? ip6_pol_route_input (net/ipv6/route.c:2665) [ 12.999174][ T453] __fib6_rule_action (net/ipv6/fib6_rules.c:242) [ 12.999260][ T453] fib_rules_lookup (net/core/fib_rules.c:339) [ 12.999341][ T453] ? fib_nl_dumprule (net/core/fib_rules.c:315) [ 12.999418][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 12.999498][ T453] ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24)) [ 12.999573][ T453] ? ip6_pol_route_input (net/ipv6/route.c:2665) [ 12.999653][ T453] fib6_rule_lookup (net/ipv6/fib6_rules.c:118) [ 12.999728][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 12.999804][ T453] ? fib6_lookup (net/ipv6/fib6_rules.c:102) [ 12.999885][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 12.999965][ T453] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 24) kernel/locking/lockdep.c:5831 (discriminator 24)) [ 13.000046][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 13.000124][ T453] ? ip6_pol_route_input (net/ipv6/route.c:2665) [ 13.000201][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 13.000284][ T453] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 24) kernel/locking/lockdep.c:5831 (discriminator 24)) [ 13.000360][ T453] ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24)) [ 13.000440][ T453] ip6_route_output_flags (net/ipv6/route.c:2699 net/ipv6/route.c:2711) [ 13.000516][ T453] ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1155 (discriminator 1)) [ 13.000616][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 13.000691][ T453] ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24)) [ 13.000769][ T453] ip6_dst_lookup_flow (net/ipv6/ip6_output.c:1289) [ 13.000845][ T453] ? ip6_dst_lookup_tail.constprop.0 (net/ipv6/ip6_output.c:1282) [ 13.000942][ T453] ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24)) [ 13.001023][ T453] ? sk_dst_check (./include/linux/rcupdate.h:839 (discriminator 1) ./include/net/sock.h:2197 (discriminator 1) net/core/sock.c:620 (discriminator 1)) [ 13.001108][ T453] ? sk_dst_check (net/core/sock.c:622) [ 13.001189][ T453] ip6_sk_dst_lookup_flow (net/ipv6/ip6_output.c:1326 (discriminator 1)) [ 13.001266][ T453] udpv6_sendmsg (net/ipv6/udp.c:1686) [ 13.001346][ T453] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 24) kernel/locking/lockdep.c:5831 (discriminator 24)) [ 13.001422][ T453] ? udpv6_splice_eof (net/ipv6/udp.c:1457) [ 13.001500][ T453] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:79 (discriminator 1)) [ 13.001581][ T453] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455) [ 13.001665][ T453] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 24)) [ 13.001765][ T453] ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 24)) [ 13.001860][ T453] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:79 (discriminator 1)) [ 13.001940][ T453] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455) [ 13.002021][ T453] ? inet_autobind (net/ipv4/af_inet.c:195) [ 13.002100][ T453] ? ____sys_sendmsg (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4) net/socket.c:2698 (discriminator 4)) [ 13.002179][ T453] ____sys_sendmsg (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4) net/socket.c:2698 (discriminator 4)) [ 13.002258][ T453] ? copy_msghdr_from_user (net/socket.c:2638) [ 13.002339][ T453] ? get_timestamp.constprop.0 (net/socket.c:2644) [ 13.002439][ T453] ? move_addr_to_kernel (net/socket.c:2624) [ 13.002520][ T453] ___sys_sendmsg (net/socket.c:2754) [ 13.002596][ T453] ? copy_msghdr_from_user (net/socket.c:2741) [ 13.002671][ T453] ? insert_pfn (mm/memory.c:2712) [ 13.002748][ T453] ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24)) [ 13.002824][ T453] ? do_pte_missing (mm/memory.c:5799 mm/memory.c:5933 mm/memory.c:4477) [ 13.002903][ T453] ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24)) [ 13.002985][ T453] __sys_sendmsg (net/socket.c:2784 (discriminator 1)) [ 13.003065][ T453] ? __sys_sendmsg_sock (net/socket.c:2769) [ 13.003144][ T453] ? down_write_nested (kernel/locking/rwsem.c:1380) [ 13.003225][ T453] ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1413) [ 13.003306][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 13.003385][ T453] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 13.003464][ T453] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 13.003545][ T453] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:106 (discriminator 9)) [ 13.003624][ T453] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 13.003707][ T453] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 13.003802][ T453] RIP: 0033:0x7f39e703422e [ 13.003883][ T453] Code: 4d 89 d8 e8 94 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 94 bd 00 00 call 0xbd9c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 13.004160][ T453] RSP: 002b:00007ffddc182740 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 13.004275][ T453] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39e703422e [ 13.004394][ T453] RDX: 0000000000000000 RSI: 00007ffddc182810 RDI: 0000000000000005 [ 13.004513][ T453] RBP: 00007ffddc182750 R08: 0000000000000000 R09: 0000000000000000 [ 13.004633][ T453] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000005 Finger prints: ip6_pol_route:__fib6_rule_action:fib_rules_lookup:fib6_rule_lookup:ip6_route_output_flags print_report:kasan_report:ip6_pol_route:fib6_rule_lookup:ip6_route_output_flags