======================================
|
| [   21.455856] ------------[ cut here ]------------
| [   21.456727] kernel BUG at net/core/skbuff.c:2813!
| [   21.457336] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
[   21.458415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   21.458772] ------------[ cut here ]------------
[   21.459112] RIP: 0010:__pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[ 21.459118] Code: 44 24 10 e8 ed 38 83 ff 49 8b be c0 00 00 00 44 8b 44 24 10 41 8b 8e bc 00 00 00 e9 f4 fc ff ff 4c 8d 48 ff e9 41 fd ff ff 90 <0f> 0b 48 c7 44 24 10 00 00 00 00 e9 99 fe ff ff 41 f6 44 24 7e 20
All code
========
   0:	44 24 10             	rex.R and $0x10,%al
   3:	e8 ed 38 83 ff       	call   0xffffffffff8338f5
   8:	49 8b be c0 00 00 00 	mov    0xc0(%r14),%rdi
   f:	44 8b 44 24 10       	mov    0x10(%rsp),%r8d
  14:	41 8b 8e bc 00 00 00 	mov    0xbc(%r14),%ecx
  1b:	e9 f4 fc ff ff       	jmp    0xfffffffffffffd14
  20:	4c 8d 48 ff          	lea    -0x1(%rax),%r9
  24:	e9 41 fd ff ff       	jmp    0xfffffffffffffd6a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	48 c7 44 24 10 00 00 	movq   $0x0,0x10(%rsp)
  33:	00 00 
  35:	e9 99 fe ff ff       	jmp    0xfffffffffffffed3
  3a:	41 f6 44 24 7e 20    	testb  $0x20,0x7e(%r12)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	48 c7 44 24 10 00 00 	movq   $0x0,0x10(%rsp)
   9:	00 00 
   b:	e9 99 fe ff ff       	jmp    0xfffffffffffffea9
  10:	41 f6 44 24 7e 20    	testb  $0x20,0x7e(%r12)
[   21.459170] kernel BUG at net/core/skbuff.c:2813!
[   21.459370] RSP: 0018:ffffb392000e8da8 EFLAGS: 00010282
[   21.461241] RAX: 00000000fffffff2 RBX: 0000000000000014 RCX: 0000000000000014
[   21.462079] RDX: ffff9497825f4704 RSI: 0000000000000100 RDI: 0000000000000000
[   21.462636] RBP: ffffb392000e8de8 R08: 00000000ffffffd8 R09: 0000000000000008
[   21.463152] R10: ffff949781c250c8 R11: 0000000000000020 R12: 00000000ffffffff
[   21.463978] R13: 0000000000000014 R14: ffff9497824af500 R15: 0000000000000002
[   21.464843] FS:  00007f2f57b01740(0000) GS:ffff9497bec80000(0000) knlGS:0000000000000000
[   21.465983] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   21.466856] CR2: 00007ffddb202fd8 CR3: 0000000007620003 CR4: 0000000000770ef0
[   21.468053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   21.469173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   21.469307] PKRU: 55555554
[   21.469330] Call Trace:
[   21.469358]  <IRQ>
[   21.469379] ? die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434 arch/x86/kernel/dumpstack.c:447) 
[   21.469408] ? do_trap (arch/x86/kernel/traps.c:113 arch/x86/kernel/traps.c:154) 
[   21.469435] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.469464] ? do_error_trap (./arch/x86/include/asm/traps.h:58 arch/x86/kernel/traps.c:175) 
[   21.469490] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.469516] ? exc_invalid_op (arch/x86/kernel/traps.c:265) 
[   21.469550] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.469694] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:568) 
[   21.469956] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.470691] ? __pskb_pull_tail (net/core/skbuff.c:2813) 
[   21.471294] tcp_v4_rcv (./include/linux/skbuff.h:2731 ./include/linux/skbuff.h:2739 net/ipv4/tcp_ipv4.c:2181) 
[   21.471739] ? raw_local_deliver (net/ipv4/raw.c:199) 
[   21.471906] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205 (discriminator 1)) 
[   21.472026] ip_local_deliver_finish (./include/linux/rcupdate.h:782 net/ipv4/ip_input.c:234) 
[   21.472247] __netif_receive_skb_one_core (net/core/dev.c:5610 (discriminator 4)) 
[   21.472849] process_backlog (./include/linux/rcupdate.h:782 net/core/dev.c:6053) 
[   21.473218] __napi_poll (net/core/dev.c:6703) 
[   21.473656] net_rx_action (net/core/dev.c:6774 net/core/dev.c:6886) 
[   21.473721] __do_softirq (kernel/softirq.c:553) 
[   21.473781] do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) 
[   21.473828]  </IRQ>
[   21.473847]  <TASK>
[   21.473918] __local_bh_enable_ip (kernel/softirq.c:381) 
[   21.473964] __dev_queue_xmit (net/core/dev.c:4400) 
[   21.474014] ip_finish_output2 (./include/linux/netdevice.h:3172 ./include/net/neighbour.h:526 ./include/net/neighbour.h:540 net/ipv4/ip_output.c:235) 
[   21.474159] __ip_queue_xmit (net/ipv4/ip_output.c:535) 
[   21.474213] __tcp_transmit_skb (net/ipv4/tcp_output.c:1462 (discriminator 4)) 
[   21.474273] tcp_write_xmit (net/ipv4/tcp_output.c:2792) 
[   21.474306] __tcp_push_pending_frames (net/ipv4/tcp_output.c:2977) 
[   21.474351] __tcp_close (net/ipv4/tcp.c:2842) 
[   21.474443] __mptcp_close_ssk (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:327 ./include/linux/refcount.h:348 ./include/net/sock.h:782 net/mptcp/protocol.c:2467) 
[   21.474618] ? __pte_offset_map_lock (./include/linux/pgtable.h:298 ./include/linux/pgtable.h:518 mm/pgtable-generic.c:374) 
[   21.474705] mptcp_destroy_common (net/mptcp/protocol.c:3353) 
[   21.474747] mptcp_destroy (./include/net/sock.h:1480 net/mptcp/protocol.c:3380) 
[   21.474788] __mptcp_destroy_sock (net/mptcp/protocol.c:2999) 
[   21.474825] __mptcp_close (net/mptcp/protocol.c:3104) 
[   21.474906] mptcp_close (net/mptcp/protocol.c:3119) 
[   21.474940] inet_release (net/ipv4/af_inet.c:436) 
[   21.474970] __sock_release (net/socket.c:659) 
[   21.475011] sock_close (net/socket.c:1423) 
[   21.475039] __fput (fs/file_table.c:376) 
[   21.475067] __x64_sys_close (fs/open.c:1557 fs/open.c:1539 fs/open.c:1539) 
[   21.475096] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[   21.475130] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[   21.475220] RIP: 0033:0x7f2f57c43007
[ 21.475302] Code: ff e8 fd e2 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 cb f5 ff
All code
========
   0:	ff                   	(bad)
   1:	e8 fd e2 01 00       	call   0x1e303
   6:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 03 00 00 00       	mov    $0x3,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 41                	ja     0x73
  32:	c3                   	ret
  33:	48 83 ec 18          	sub    $0x18,%rsp
  37:	89 7c 24 0c          	mov    %edi,0xc(%rsp)
  3b:	e8 c3 cb f5 ff       	call   0xfffffffffff5cc03

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 41                	ja     0x49
   8:	c3                   	ret
   9:	48 83 ec 18          	sub    $0x18,%rsp
   d:	89 7c 24 0c          	mov    %edi,0xc(%rsp)
  11:	e8 c3 cb f5 ff       	call   0xfffffffffff5cbd9
[   21.475576] RSP: 002b:00007ffddb209148 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   21.475680] RAX: ffffffffffffffda RBX: 00000000023732a0 RCX: 00007f2f57c43007
[   21.476028] RDX: 0000000000000000 RSI: 00007ffddb2070a0 RDI: 0000000000000005
[   21.476101] RBP: 0000000000000005 R08: 00007f2f57cfd1f8 R09: 00007f2f57cfd260
[   21.476294] R10: 00007f2f57b11ef8 R11: 0000000000000246 R12: 0000000000000000
[   21.476481] ------------[ cut here ]------------
[   21.476594] R13: 0000000000000000 R14: 00007ffddb20ca49 R15: 00007f2f57d48000
| [   21.476638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
| [   21.476639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
| [   21.476641] PKRU: 55555554
| [   21.476641] Kernel panic - not syncing: Fatal exception in interrupt
[   21.476728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   21.476729] RIP: 0010:__pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[ 21.476733] Code: 44 24 10 e8 ed 38 83 ff 49 8b be c0 00 00 00 44 8b 44 24 10 41 8b 8e bc 00 00 00 e9 f4 fc ff ff 4c 8d 48 ff e9 41 fd ff ff 90 <0f> 0b 48 c7 44 24 10 00 00 00 00 e9 99 fe ff ff 41 f6 44 24 7e 20
All code
========
   0:	44 24 10             	rex.R and $0x10,%al
   3:	e8 ed 38 83 ff       	call   0xffffffffff8338f5
   8:	49 8b be c0 00 00 00 	mov    0xc0(%r14),%rdi
   f:	44 8b 44 24 10       	mov    0x10(%rsp),%r8d
  14:	41 8b 8e bc 00 00 00 	mov    0xbc(%r14),%ecx
  1b:	e9 f4 fc ff ff       	jmp    0xfffffffffffffd14
  20:	4c 8d 48 ff          	lea    -0x1(%rax),%r9
  24:	e9 41 fd ff ff       	jmp    0xfffffffffffffd6a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	48 c7 44 24 10 00 00 	movq   $0x0,0x10(%rsp)
  33:	00 00 
  35:	e9 99 fe ff ff       	jmp    0xfffffffffffffed3
  3a:	41 f6 44 24 7e 20    	testb  $0x20,0x7e(%r12)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	48 c7 44 24 10 00 00 	movq   $0x0,0x10(%rsp)
   9:	00 00 
   b:	e9 99 fe ff ff       	jmp    0xfffffffffffffea9
  10:	41 f6 44 24 7e 20    	testb  $0x20,0x7e(%r12)
[   21.476734] RSP: 0018:ffffb39200003da8 EFLAGS: 00010282
[   21.476736] RAX: 00000000fffffff2 RBX: 0000000000000014 RCX: 0000000000000014
[   21.476737] RDX: ffff9497825f9904 RSI: 0000000000000100 RDI: 0000000000000000
[   21.476738] RBP: ffffb39200003de8 R08: 00000000ffffffd8 R09: 0000000000000008
[   21.476738] R10: ffff949781c250c8 R11: 0000000000000020 R12: 00000000ffffffff
[   21.476739] R13: 0000000000000014 R14: ffff949781b15900 R15: 0000000000000002
[   21.476742] FS:  00007fe2e82eb740(0000) GS:ffff9497bec00000(0000) knlGS:0000000000000000
[   21.476743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   21.476744] CR2: 00007ffce9fddfe8 CR3: 00000000067d0001 CR4: 0000000000770ef0
[   21.476745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   21.476745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   21.476746] PKRU: 55555554
[   21.476747] Call Trace:
[   21.476748]  <IRQ>
[   21.476749] ? die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434 arch/x86/kernel/dumpstack.c:447) 
[   21.476758] ? do_trap (arch/x86/kernel/traps.c:113 arch/x86/kernel/traps.c:154) 
[   21.476761] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.476762] ? do_error_trap (./arch/x86/include/asm/traps.h:58 arch/x86/kernel/traps.c:175) 
[   21.476764] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.476765] ? exc_invalid_op (arch/x86/kernel/traps.c:265) 
[   21.476768] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.476769] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:568) 
[   21.476772] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.476773] ? __pskb_pull_tail (net/core/skbuff.c:2813) 
[   21.476774] tcp_v4_rcv (./include/linux/skbuff.h:2731 ./include/linux/skbuff.h:2739 net/ipv4/tcp_ipv4.c:2181) 
[   21.476777] ? raw_local_deliver (net/ipv4/raw.c:199) 
[   21.476780] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205 (discriminator 1)) 
[   21.476783] ip_local_deliver_finish (./include/linux/rcupdate.h:782 net/ipv4/ip_input.c:234) 
[   21.476786] __netif_receive_skb_one_core (net/core/dev.c:5610 (discriminator 4)) 
[   21.476788] process_backlog (./include/linux/rcupdate.h:782 net/core/dev.c:6053) 
[   21.476790] __napi_poll (net/core/dev.c:6703) 
[   21.476792] net_rx_action (net/core/dev.c:6774 net/core/dev.c:6886) 
[   21.476794] __do_softirq (kernel/softirq.c:553) 
[   21.476796] do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) 
[   21.476799]  </IRQ>
[   21.476799]  <TASK>
[   21.476799] __local_bh_enable_ip (kernel/softirq.c:381) 
[   21.476801] __dev_queue_xmit (net/core/dev.c:4400) 
[   21.476803] ip_finish_output2 (./include/linux/netdevice.h:3172 ./include/net/neighbour.h:526 ./include/net/neighbour.h:540 net/ipv4/ip_output.c:235) 
[   21.476805] __ip_queue_xmit (net/ipv4/ip_output.c:535) 
[   21.476806] __tcp_transmit_skb (net/ipv4/tcp_output.c:1462 (discriminator 4)) 
[   21.476810] tcp_write_xmit (net/ipv4/tcp_output.c:2792) 
[   21.476812] __tcp_push_pending_frames (net/ipv4/tcp_output.c:2977) 
[   21.476814] __tcp_close (net/ipv4/tcp.c:2842) 
[   21.476816] __mptcp_close_ssk (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:327 ./include/linux/refcount.h:348 ./include/net/sock.h:782 net/mptcp/protocol.c:2467) 
[   21.476819] ? __pte_offset_map_lock (./include/linux/pgtable.h:298 ./include/linux/pgtable.h:518 mm/pgtable-generic.c:374) 
[   21.476822] mptcp_destroy_common (net/mptcp/protocol.c:3353) 
[   21.476824] mptcp_destroy (./include/net/sock.h:1480 net/mptcp/protocol.c:3380) 
[   21.476826] __mptcp_destroy_sock (net/mptcp/protocol.c:2999) 
[   21.476827] __mptcp_close (net/mptcp/protocol.c:3104) 
[   21.476829] mptcp_close (net/mptcp/protocol.c:3119) 
[   21.476830] inet_release (net/ipv4/af_inet.c:436) 
[   21.476832] __sock_release (net/socket.c:659) 
[   21.476834] sock_close (net/socket.c:1423) 
[   21.476835] __fput (fs/file_table.c:376) 
[   21.476838] __x64_sys_close (fs/open.c:1557 fs/open.c:1539 fs/open.c:1539) 
[   21.476840] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[   21.476842] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[   21.476844] RIP: 0033:0x7fe2e842d007
[ 21.476846] Code: ff e8 fd e2 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 cb f5 ff
All code
========
   0:	ff                   	(bad)
   1:	e8 fd e2 01 00       	call   0x1e303
   6:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 03 00 00 00       	mov    $0x3,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 41                	ja     0x73
  32:	c3                   	ret
  33:	48 83 ec 18          	sub    $0x18,%rsp
  37:	89 7c 24 0c          	mov    %edi,0xc(%rsp)
  3b:	e8 c3 cb f5 ff       	call   0xfffffffffff5cc03

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 41                	ja     0x49
   8:	c3                   	ret
   9:	48 83 ec 18          	sub    $0x18,%rsp
   d:	89 7c 24 0c          	mov    %edi,0xc(%rsp)
  11:	e8 c3 cb f5 ff       	call   0xfffffffffff5cbd9
[   21.476847] RSP: 002b:00007ffce9fe4158 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[   21.476849] RAX: ffffffffffffffda RBX: 000000000217f2a0 RCX: 00007fe2e842d007
[   21.476850] RDX: 0000000000000000 RSI: 00007ffce9fe20b0 RDI: 0000000000000005
[   21.476850] RBP: 0000000000000005 R08: 00007fe2e84e71f8 R09: 00007fe2e84e7260
[   21.476851] R10: 00007fe2e82fbef8 R11: 0000000000000246 R12: 0000000000000000


Finger prints:
__pskb_pull_tail:tcp_v4_rcv:ip_protocol_deliver_rcu:ip_local_deliver_finish
__pskb_pull_tail:tcp_v4_rcv:ip_protocol_deliver_rcu:ip_local_deliver_finish