====================================== | [ 20.520474] vx10: left allmulticast mode | [ 20.520518] vx10: left promiscuous mode | [ 20.520565] br1: port 1(vx10) entered disabled state | [ 20.882043] Oops: general protection fault, probably for non-canonical address 0xdead000000000122: 0000 [#1] PREEMPT SMP NOPTI [ 20.882258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 20.882369] RIP: 0010:neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) [ 20.882427] Code: 89 d6 48 83 ed 10 0f 84 08 01 00 00 48 8b 5d 10 45 84 f6 74 0d 80 bd 9c 00 00 00 00 0f 88 e0 00 00 00 48 8b 45 00 48 8b 55 08 <48> 89 02 48 85 c0 74 04 48 89 50 08 48 8b 45 10 48 8b 55 18 4c 89 All code ======== 0: 89 d6 mov %edx,%esi 2: 48 83 ed 10 sub $0x10,%rbp 6: 0f 84 08 01 00 00 je 0x114 c: 48 8b 5d 10 mov 0x10(%rbp),%rbx 10: 45 84 f6 test %r14b,%r14b 13: 74 0d je 0x22 15: 80 bd 9c 00 00 00 00 cmpb $0x0,0x9c(%rbp) 1c: 0f 88 e0 00 00 00 js 0x102 22: 48 8b 45 00 mov 0x0(%rbp),%rax 26: 48 8b 55 08 mov 0x8(%rbp),%rdx 2a:* 48 89 02 mov %rax,(%rdx) <-- trapping instruction 2d: 48 85 c0 test %rax,%rax 30: 74 04 je 0x36 32: 48 89 50 08 mov %rdx,0x8(%rax) 36: 48 8b 45 10 mov 0x10(%rbp),%rax 3a: 48 8b 55 18 mov 0x18(%rbp),%rdx 3e: 4c rex.WR 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 89 02 mov %rax,(%rdx) 3: 48 85 c0 test %rax,%rax 6: 74 04 je 0xc 8: 48 89 50 08 mov %rdx,0x8(%rax) c: 48 8b 45 10 mov 0x10(%rbp),%rax 10: 48 8b 55 18 mov 0x18(%rbp),%rdx 14: 4c rex.WR 15: 89 .byte 0x89 [ 20.882592] RSP: 0018:ffffb14c80a33568 EFLAGS: 00010246 [ 20.882643] RAX: ffff96b843e7a400 RBX: ffff96b841925810 RCX: 0000000000001388 [ 20.882718] RDX: dead000000000122 RSI: 0000000000000286 RDI: ffff96b87ec9d070 [ 20.882792] RBP: ffff96b84296d200 R08: ffff96b845bd21bc R09: ffff96b87ec9cf40 [ 20.882858] R10: ffff96b87ec9cf58 R11: 000000000000041f R12: ffffffffb702cbc0 [ 20.882932] R13: dead000000000122 R14: 0000000000000000 R15: ffff96b84545ea40 [ 20.883010] FS: 00007f3a0d070800(0000) GS:ffff96b87ec80000(0000) knlGS:0000000000000000 [ 20.883084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 20.883137] CR2: 00000000004e28e0 CR3: 0000000002a8a001 CR4: 0000000000772ef0 [ 20.883206] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 20.883280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 20.883355] PKRU: 55555554 [ 20.883385] Call Trace: [ 20.883412] [ 20.883440] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) [ 20.883487] ? exc_general_protection (arch/x86/kernel/traps.c:748 arch/x86/kernel/traps.c:693) [ 20.883539] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) [ 20.883593] ? neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) [ 20.883644] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) [ 20.883696] __neigh_ifdown.isra.0 (net/core/neighbour.c:425) [ 20.883749] neigh_ifdown (net/core/neighbour.c:445) [ 20.883790] addrconf_ifdown.isra.0 (./include/net/addrconf.h:330 net/ipv6/addrconf.c:3860) [ 20.883845] ? pneigh_queue_purge (./include/linux/skbuff.h:2138 ./include/linux/skbuff.h:2444 net/core/neighbour.c:365) [ 20.883899] addrconf_notify (net/ipv6/addrconf.c:3815) [ 20.883944] notifier_call_chain (kernel/notifier.c:93) [ 20.883991] dev_close_many (net/core/dev.c:1590) [ 20.884039] unregister_netdevice_many_notify (net/core/dev.c:11503) [ 20.884095] ? sock_def_readable (net/core/sock.c:3459) [ 20.884139] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) [ 20.884180] rtnl_dellink (net/core/rtnetlink.c:3329 net/core/rtnetlink.c:3379) [ 20.884224] ? rtnl_getlink (./include/net/netlink.h:1159 net/core/rtnetlink.c:819 net/core/rtnetlink.c:3937) [ 20.884270] ? __rtnl_unlock (net/core/rtnetlink.c:140 (discriminator 3)) [ 20.884308] ? netdev_run_todo (./include/linux/list.h:373 net/core/dev.c:10890) [ 20.884350] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) [ 20.884391] ? get_page_from_freelist (mm/page_alloc.c:1035 mm/page_alloc.c:1535 mm/page_alloc.c:1545 mm/page_alloc.c:3457) [ 20.884449] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) [ 20.884502] netlink_rcv_skb (net/netlink/af_netlink.c:2551) [ 20.884546] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) [ 20.884586] netlink_sendmsg (net/netlink/af_netlink.c:1901) [ 20.884627] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) [ 20.884670] ? copy_msghdr_from_user (net/socket.c:2547) [ 20.884723] ___sys_sendmsg (net/socket.c:2663) [ 20.884766] ? do_wp_page (./include/linux/mmu_notifier.h:468 mm/memory.c:3460 mm/memory.c:3745) [ 20.884810] ? __pte_offset_map (./include/linux/pgtable.h:324 ./include/linux/pgtable.h:594 mm/pgtable-generic.c:289) [ 20.884852] ? __pte_offset_map (./include/linux/pgtable.h:324 ./include/linux/pgtable.h:594 mm/pgtable-generic.c:289) [ 20.884895] ? fsnotify_grab_connector (fs/notify/mark.c:696) [ 20.884946] ? fsnotify_destroy_marks (fs/notify/mark.c:923) [ 20.884999] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) [ 20.885042] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 20.885086] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 20.885145] RIP: 0033:0x7f3a0d27c7b7 [ 20.885189] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0a 00 or (%rax),%al 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 20.885353] RSP: 002b:00007ffecc74e258 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 20.885428] RAX: ffffffffffffffda RBX: 00007ffecc74e980 RCX: 00007f3a0d27c7b7 [ 20.885503] RDX: 0000000000000000 RSI: 00007ffecc74e2c0 RDI: 0000000000000005 [ 20.885578] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078 [ 20.885653] R10: 00007f3a0d13aef8 R11: 0000000000000246 R12: 0000000000000002 Finger prints: neigh_ifdown:addrconf_notify:notifier_call_chain:dev_close_many:unregister_netdevice_many_notify