====================================== | [ 2.706712] #PF: supervisor read access in kernel mode | [ 2.706738] #PF: error_code(0x0000) - not-present page | [ 2.706764] PGD 4474067 P4D 5d26067 PUD 5d25067 PMD 0 | [ 2.706795] Oops: Oops: 0000 [#1] SMP [ 2.706855] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2.706887] RIP: 0010:l2tp_eth_create (net/l2tp/l2tp_core.h:341 net/l2tp/l2tp_core.h:346 net/l2tp/l2tp_eth.c:202 net/l2tp/l2tp_eth.c:250) l2tp_eth [ 2.706916] Code: 00 00 ff ff 00 00 48 89 85 18 02 00 00 41 8b 74 24 3c 85 f6 0f 84 a2 00 00 00 48 8b 53 20 0f b7 43 4a 4d 8b ac 24 b8 00 00 00 <8b> 4a 54 03 42 3c 31 d2 85 c9 0f 94 c2 44 8d 74 d0 0e e8 37 31 60 All code ======== 0: 00 00 add %al,(%rax) 2: ff (bad) 3: ff 00 incl (%rax) 5: 00 48 89 add %cl,-0x77(%rax) 8: 85 18 test %ebx,(%rax) a: 02 00 add (%rax),%al c: 00 41 8b add %al,-0x75(%rcx) f: 74 24 je 0x35 11: 3c 85 cmp $0x85,%al 13: f6 0f 84 testb $0x84,(%rdi) 16: a2 00 00 00 48 8b 53 movabs %al,0xf20538b48000000 1d: 20 0f 1f: b7 43 mov $0x43,%bh 21: 4a rex.WX 22: 4d 8b ac 24 b8 00 00 mov 0xb8(%r12),%r13 29: 00 2a:* 8b 4a 54 mov 0x54(%rdx),%ecx <-- trapping instruction 2d: 03 42 3c add 0x3c(%rdx),%eax 30: 31 d2 xor %edx,%edx 32: 85 c9 test %ecx,%ecx 34: 0f 94 c2 sete %dl 37: 44 8d 74 d0 0e lea 0xe(%rax,%rdx,8),%r14d 3c: e8 .byte 0xe8 3d: 37 (bad) 3e: 31 .byte 0x31 3f: 60 (bad) Code starting with the faulting instruction =========================================== 0: 8b 4a 54 mov 0x54(%rdx),%ecx 3: 03 42 3c add 0x3c(%rdx),%eax 6: 31 d2 xor %edx,%edx 8: 85 c9 test %ecx,%ecx a: 0f 94 c2 sete %dl d: 44 8d 74 d0 0e lea 0xe(%rax,%rdx,8),%r14d 12: e8 .byte 0xe8 13: 37 (bad) 14: 31 .byte 0x31 15: 60 (bad) [ 2.706995] RSP: 0018:ff80e3718063f8f8 EFLAGS: 00010206 [ 2.707020] RAX: 0000000000000008 RBX: ff3edc6bc1876400 RCX: 0000000000000005 [ 2.707057] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 7f7f7fffffffffff [ 2.707099] RBP: ff3edc6bc5d11000 R08: 8080808080808080 R09: ff3edc6bc5d11120 [ 2.707136] R10: ff80e3718063f900 R11: fefefefefefefeff R12: ff3edc6bc45fcf00 [ 2.707172] R13: ff3edc6bc30b1980 R14: 0000000000000411 R15: 0000000000000000 [ 2.707213] FS: 00007f28c6107400(0000) GS:ff3edc6c512b4000(0000) knlGS:0000000000000000 [ 2.707258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.707302] CR2: 0000000000000054 CR3: 0000000004d4e005 CR4: 0000000000771ef0 [ 2.707339] PKRU: 55555554 [ 2.707353] Call Trace: [ 2.707369] [ 2.707385] l2tp_nl_cmd_session_create (net/l2tp/l2tp_netlink.c:644) l2tp_netlink [ 2.707420] genl_family_rcv_msg_doit (net/netlink/genetlink.c:1114) [ 2.707452] genl_rcv_msg (net/netlink/genetlink.c:1194 net/netlink/genetlink.c:1209) [ 2.707473] ? l2tp_session_notify.constprop.0 (net/l2tp/l2tp_netlink.c:529) l2tp_netlink [ 2.707504] ? genl_family_rcv_msg_dumpit (net/netlink/genetlink.c:1200) [ 2.707530] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 2.707551] genl_rcv (net/netlink/genetlink.c:1219) [ 2.707571] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 2.707592] netlink_sendmsg (net/netlink/af_netlink.c:1894) [ 2.707612] ____sys_sendmsg (net/socket.c:727 (discriminator 4) net/socket.c:742 (discriminator 4) net/socket.c:2592 (discriminator 4)) [ 2.707635] ___sys_sendmsg (net/socket.c:2648) [ 2.707656] __sys_sendmsg (net/socket.c:2678 (discriminator 1)) [ 2.707680] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 2.707704] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:114 arch/x86/mm/fault.c:1480 arch/x86/mm/fault.c:1527) [ 2.707724] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2.707753] RIP: 0033:0x7f28c6261c5e [ 2.707773] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 34 bd 00 00 call 0xbd3c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 2.707852] RSP: 002b:00007ffc98472800 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 2.707888] RAX: ffffffffffffffda RBX: 00007ffc98472bc0 RCX: 00007f28c6261c5e [ 2.707924] RDX: 0000000000000000 RSI: 00007ffc984728c0 RDI: 0000000000000006 [ 2.707960] RBP: 00007ffc98472810 R08: 0000000000000000 R09: 0000000000000000 [ 2.707996] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 Finger prints: l2tp_eth_create:l2tp_nl_cmd_session_create:genl_family_rcv_msg_doit:genl_rcv_msg:netlink_rcv_skb