====================================== | [ 258.160285][ T2472] Mirror/redirect action on | [ 296.870924][ T2801] ------------[ cut here ]------------ | [ 296.871412][ T2801] WARNING: CPU: 1 PID: 2801 at ./include/linux/skbuff.h:1164 ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) | [ 296.872006][ T2801] Modules linked in: xt_mark nft_compat nf_tables act_mirred cls_basic sch_fq_codel unix_diag cls_bpf sch_ingress [ 296.873514][ T2801] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 296.873879][ T2801] RIP: 0010:ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) [ 296.874377][ T2801] Code: 31 db e9 9a f7 ff ff 80 3c 02 00 0f 85 ee 05 00 00 49 8b 46 58 48 89 c3 48 83 e3 fe a8 01 0f 85 f5 02 00 00 48 85 db 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c All code ======== 0: 31 db xor %ebx,%ebx 2: e9 9a f7 ff ff jmp 0xfffffffffffff7a1 7: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) b: 0f 85 ee 05 00 00 jne 0x5ff 11: 49 8b 46 58 mov 0x58(%r14),%rax 15: 48 89 c3 mov %rax,%rbx 18: 48 83 e3 fe and $0xfffffffffffffffe,%rbx 1c: a8 01 test $0x1,%al 1e: 0f 85 f5 02 00 00 jne 0x319 24: 48 85 db test %rbx,%rbx 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 4c 89 ea mov %r13,%rdx 3a: 48 c1 ea 03 shr $0x3,%rdx 3e: 80 .byte 0x80 3f: 3c .byte 0x3c Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 4c 89 ea mov %r13,%rdx 10: 48 c1 ea 03 shr $0x3,%rdx 14: 80 .byte 0x80 15: 3c .byte 0x3c [ 296.875567][ T2801] RSP: 0018:ffffc900010f7510 EFLAGS: 00010282 [ 296.875930][ T2801] RAX: ffff88800a21a340 RBX: ffff88800a21a340 RCX: 1ffff11001443468 [ 296.876505][ T2801] RDX: 1ffff11000a1f35b RSI: 0000000000000000 RDI: ffff88800cba40e0 [ 296.876934][ T2801] RBP: ffff88800d0b8040 R08: 1ffff9200021eeb4 R09: 0000000000000000 [ 296.877508][ T2801] R10: ffff88800a21a383 R11: dffffc0000000000 R12: ffff888005dd9040 [ 296.877933][ T2801] R13: ffff8880050f9ad8 R14: ffff8880050f9a80 R15: ffff8880050f9b01 [ 296.878487][ T2801] FS: 00007f3d8ec26740(0000) GS:ffff8880d2012000(0000) knlGS:0000000000000000 [ 296.878982][ T2801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.879441][ T2801] CR2: 00005589e5599000 CR3: 000000000bbdf003 CR4: 0000000000772ef0 [ 296.879867][ T2801] PKRU: 55555554 [ 296.880081][ T2801] Call Trace: [ 296.880305][ T2801] [ 296.880459][ T2801] ? __pfx_ip_route_me_harder (net/ipv4/netfilter.c:22) [ 296.880751][ T2801] ? ip_generic_getfrag (./include/linux/uio.h:246 net/ipv4/ip_output.c:931) [ 296.881038][ T2801] ? __pfx_ip_generic_getfrag (net/ipv4/ip_output.c:927) [ 296.881335][ T2801] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 296.881644][ T2801] nf_route_table_hook4 (net/netfilter/nft_chain_route.c:47) nf_tables [ 296.882035][ T2801] ? __pfx_nf_route_table_hook4 (net/netfilter/nft_chain_route.c:19) nf_tables [ 296.882428][ T2801] ? __pfx_nf_route_table_hook4 (net/netfilter/nft_chain_route.c:19) nf_tables [ 296.882805][ T2801] nf_hook_slow (./include/linux/netfilter.h:157 net/netfilter/core.c:623) [ 296.883094][ T2801] __ip_local_out (./include/linux/netfilter.h:272 net/ipv4/ip_output.c:118) [ 296.883390][ T2801] ? __pfx___ip_local_out (net/ipv4/ip_output.c:101) [ 296.883682][ T2801] ? __pfx_dst_output (./include/net/dst.h:460) [ 296.883962][ T2801] ? __pfx_ip_make_skb (net/ipv4/ip_output.c:1551) [ 296.884255][ T2801] ip_send_skb (net/ipv4/ip_output.c:128 net/ipv4/ip_output.c:1501) [ 296.884464][ T2801] ? ipv4_dst_check (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv4/route.c:401 net/ipv4/route.c:1216) [ 296.884749][ T2801] udp_send_skb (net/ipv4/udp.c:1195) [ 296.885312][ T2801] ? rt_fill_info (net/ipv4/route.c:3044) [ 296.885603][ T2801] udp_sendmsg (net/ipv4/udp.c:1484) [ 296.885894][ T2801] ? __pfx_ip_generic_getfrag (net/ipv4/ip_output.c:927) [ 296.886190][ T2801] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 296.886479][ T2801] ? __pfx_udp_sendmsg (net/ipv4/udp.c:1271) [ 296.886760][ T2801] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 296.887046][ T2801] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 296.887343][ T2801] ? __unix_dgram_recvmsg (net/unix/af_unix.c:2583) [ 296.887637][ T2801] ? __pfx___skb_try_recv_datagram (net/core/datagram.c:246) [ 296.887999][ T2801] ? __pfx___mutex_unlock_slowpath (kernel/locking/mutex.c:903) [ 296.888374][ T2801] ? __unix_dgram_recvmsg (net/unix/af_unix.c:2583) [ 296.888657][ T2801] sock_write_iter (net/socket.c:714 net/socket.c:729 net/socket.c:1179) [ 296.888941][ T2801] ? __pfx___unix_dgram_recvmsg (net/unix/af_unix.c:2554) [ 296.889229][ T2801] ? __pfx_sock_write_iter (net/socket.c:1163) [ 296.889527][ T2801] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 296.889748][ T2801] ? __pfx___sys_recvfrom (net/socket.c:2255) [ 296.890034][ T2801] ? __pfx_vfs_write (fs/read_write.c:667) [ 296.890334][ T2801] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 296.890630][ T2801] ksys_write (fs/read_write.c:738) [ 296.890844][ T2801] ? __pfx_ksys_write (fs/read_write.c:728) [ 296.891130][ T2801] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 296.891426][ T2801] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 296.891779][ T2801] RIP: 0033:0x7f3d8ed73337 [ 296.892072][ T2801] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 296.893092][ T2801] RSP: 002b:00007ffe25c55458 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.893553][ T2801] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3d8ed73337 [ 296.893978][ T2801] RDX: 0000000000000002 RSI: 00005589e5599000 RDI: 0000000000000007 [ 296.894414][ T2801] RBP: 00005589e5599000 R08: 0000000000000002 R09: 0000000000000000 [ 296.894836][ T2801] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000007 [ 296.895268][ T2801] R13: 0000000000000002 R14: 00005589d26e1570 R15: 0000000000000002 | [ 312.156517][ T2913] ------------[ cut here ]------------ | [ 312.156850][ T2913] WARNING: CPU: 1 PID: 2913 at ./include/linux/skbuff.h:1164 ip6_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv6/netfilter.c:66) | [ 312.157677][ T2913] Modules linked in: xt_mark nft_compat nf_tables act_mirred cls_basic sch_fq_codel unix_diag cls_bpf sch_ingress | [ 312.159066][ T2913] Tainted: [W]=WARN [ 312.159305][ T2913] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 312.159667][ T2913] RIP: 0010:ip6_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv6/netfilter.c:66) [ 312.160035][ T2913] Code: ff e8 67 1e f8 fd e9 a3 fd ff ff 80 3c 02 00 0f 85 90 04 00 00 49 8b 47 58 a8 01 0f 85 54 02 00 00 48 a9 fe ff ff ff 74 04 90 <0f> 0b 90 48 8b 95 88 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 All code ======== 0: ff ljmp (bad) 1: e8 67 1e f8 fd call 0xfffffffffdf81e6d 6: e9 a3 fd ff ff jmp 0xfffffffffffffdae b: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) f: 0f 85 90 04 00 00 jne 0x4a5 15: 49 8b 47 58 mov 0x58(%r15),%rax 19: a8 01 test $0x1,%al 1b: 0f 85 54 02 00 00 jne 0x275 21: 48 a9 fe ff ff ff test $0xfffffffffffffffe,%rax 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 8b 95 88 fe ff ff mov -0x178(%rbp),%rdx 34: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 3b: fc ff df 3e: 48 rex.W 3f: c1 .byte 0xc1 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 8b 95 88 fe ff ff mov -0x178(%rbp),%rdx a: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 11: fc ff df 14: 48 rex.W 15: c1 .byte 0xc1 [ 312.161080][ T2913] RSP: 0018:ffffc90000f97418 EFLAGS: 00010286 [ 312.161749][ T2913] RAX: ffff88800e51d8c0 RBX: 0000000000000000 RCX: 1ffff11001ca3b18 [ 312.162189][ T2913] RDX: 1ffff110022d88bb RSI: 0000000000000000 RDI: ffff8880066740e0 [ 312.162620][ T2913] RBP: ffffc90000f975c0 R08: 0000000031d43930 R09: ffff8880116c4601 [ 312.163051][ T2913] R10: ffff88800e51d903 R11: dffffc0000000000 R12: ffff88800aed4f00 [ 312.163507][ T2913] R13: ffff88800d0b9cc0 R14: ffff88800e51d8c0 R15: ffff8880116c4580 [ 312.163939][ T2913] FS: 00007f055fc3a740(0000) GS:ffff8880d2012000(0000) knlGS:0000000000000000 [ 312.164450][ T2913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.164813][ T2913] CR2: 00005646ca285000 CR3: 0000000009a09005 CR4: 0000000000772ef0 [ 312.165261][ T2913] PKRU: 55555554 [ 312.165480][ T2913] Call Trace: [ 312.165698][ T2913] [ 312.165849][ T2913] ? __pfx_ip6_route_me_harder (net/ipv6/netfilter.c:24) [ 312.166147][ T2913] ? __pfx_ipv6_find_hdr (net/ipv6/exthdrs_core.c:190) [ 312.166465][ T2913] ? ip_generic_getfrag (./include/linux/uio.h:246 net/ipv4/ip_output.c:931) [ 312.166759][ T2913] nf_route_table_hook6 (net/netfilter/nft_chain_route.c:97) nf_tables [ 312.167174][ T2913] ? __pfx_nf_route_table_hook6 (net/netfilter/nft_chain_route.c:68) nf_tables [ 312.167565][ T2913] ? __ip6_make_skb (net/ipv6/ip6_output.c:1972 (discriminator 61)) [ 312.167862][ T2913] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 312.168174][ T2913] ? __pfx_nf_route_table_hook6 (net/netfilter/nft_chain_route.c:68) nf_tables [ 312.168561][ T2913] nf_hook_slow (./include/linux/netfilter.h:157 net/netfilter/core.c:623) [ 312.168854][ T2913] nf_hook.constprop.0 (./include/linux/netfilter.h:272) [ 312.169141][ T2913] ? __pfx_nf_hook.constprop.0 (./include/linux/netfilter.h:226) [ 312.169456][ T2913] ? __pfx_dst_output (./include/net/dst.h:460) [ 312.169755][ T2913] ip6_local_out (net/ipv6/output_core.c:154) [ 312.170046][ T2913] ip6_send_skb (net/ipv6/ip6_output.c:1984) [ 312.170343][ T2913] udp_v6_send_skb (net/ipv6/udp.c:1439) [ 312.170635][ T2913] ? add_chain_block (kernel/locking/lockdep.c:3405 kernel/locking/lockdep.c:3444) [ 312.170929][ T2913] udpv6_sendmsg (net/ipv6/udp.c:1730) [ 312.171230][ T2913] ? __pfx_ip_generic_getfrag (net/ipv4/ip_output.c:927) [ 312.171522][ T2913] ? __pfx_udpv6_sendmsg (net/ipv6/udp.c:1475) [ 312.171819][ T2913] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 312.172112][ T2913] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 312.172411][ T2913] ? __unix_dgram_recvmsg (net/unix/af_unix.c:2583) [ 312.172698][ T2913] ? __lock_release (kernel/locking/lockdep.c:5539) [ 312.173012][ T2913] ? sock_write_iter (net/socket.c:714 net/socket.c:729 net/socket.c:1179) [ 312.173313][ T2913] sock_write_iter (net/socket.c:714 net/socket.c:729 net/socket.c:1179) [ 312.173607][ T2913] ? __pfx___unix_dgram_recvmsg (net/unix/af_unix.c:2554) [ 312.173893][ T2913] ? __pfx_sock_write_iter (net/socket.c:1163) [ 312.174211][ T2913] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 312.174430][ T2913] ? __pfx___sys_recvfrom (net/socket.c:2255) [ 312.174719][ T2913] ? __pfx_vfs_write (fs/read_write.c:667) [ 312.175016][ T2913] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 312.175319][ T2913] ksys_write (fs/read_write.c:738) [ 312.175539][ T2913] ? __pfx_ksys_write (fs/read_write.c:728) [ 312.175834][ T2913] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 312.176125][ T2913] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 312.176498][ T2913] RIP: 0033:0x7f055fd87337 [ 312.176796][ T2913] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 312.177839][ T2913] RSP: 002b:00007ffe56368228 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.178292][ T2913] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f055fd87337 [ 312.178729][ T2913] RDX: 0000000000000002 RSI: 00005646ca285000 RDI: 0000000000000007 [ 312.179169][ T2913] RBP: 00005646ca285000 R08: 0000000000000002 R09: 0000000000000000 [ 312.179600][ T2913] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000007 Finger prints: ip6_route_me_harder:nf_route_table_hook6:nf_hook_slow:ip6_local_out:ip6_send_skb ip_route_me_harder:nf_route_table_hook4:nf_hook_slow:__ip_local_out:ip_send_skb