====================================== | [ 1263.981897] #PF: supervisor read access in kernel mode | [ 1263.981935] #PF: error_code(0x0000) - not-present page | [ 1263.981967] PGD 0 P4D 0 | [ 1263.981992] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 1263.982080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 1263.982156] RIP: 0010:sock_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3397 net/core/sock.c:2470) [ 1263.982201] Code: c3 d1 fa 39 ca 77 9c e8 28 48 6b ff e9 09 ff ff ff be 03 00 00 00 4c 89 e7 e8 06 8d a6 ff e9 61 ff ff ff 48 8b 85 20 01 00 00 <48> 8b 40 08 a8 04 75 83 eb ad 48 8b bd 00 01 00 00 ba 02 00 00 00 All code ======== 0: c3 ret 1: d1 fa sar %edx 3: 39 ca cmp %ecx,%edx 5: 77 9c ja 0xffffffffffffffa3 7: e8 28 48 6b ff call 0xffffffffff6b4834 c: e9 09 ff ff ff jmp 0xffffffffffffff1a 11: be 03 00 00 00 mov $0x3,%esi 16: 4c 89 e7 mov %r12,%rdi 19: e8 06 8d a6 ff call 0xffffffffffa68d24 1e: e9 61 ff ff ff jmp 0xffffffffffffff84 23: 48 8b 85 20 01 00 00 mov 0x120(%rbp),%rax 2a:* 48 8b 40 08 mov 0x8(%rax),%rax <-- trapping instruction 2e: a8 04 test $0x4,%al 30: 75 83 jne 0xffffffffffffffb5 32: eb ad jmp 0xffffffffffffffe1 34: 48 8b bd 00 01 00 00 mov 0x100(%rbp),%rdi 3b: ba 02 00 00 00 mov $0x2,%edx Code starting with the faulting instruction =========================================== 0: 48 8b 40 08 mov 0x8(%rax),%rax 4: a8 04 test $0x4,%al 6: 75 83 jne 0xffffffffffffff8b 8: eb ad jmp 0xffffffffffffffb7 a: 48 8b bd 00 01 00 00 mov 0x100(%rbp),%rdi 11: ba 02 00 00 00 mov $0x2,%edx [ 1263.982318] RSP: 0018:ffffae05800f0e30 EFLAGS: 00010206 [ 1263.982356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000002080 [ 1263.982410] RDX: 0000000000001d40 RSI: ffff9ea901183000 RDI: 0000000000000000 [ 1263.982456] RBP: ffff9ea905d96e40 R08: ffff9ea901f71cac R09: 0000000000000001 [ 1263.982509] R10: ffffffff888060c0 R11: ffffae05800f0ff8 R12: ffff9ea905d96fbc [ 1263.982559] R13: 000000000000004b R14: 0000000000000000 R15: ffff9ea901183000 [ 1263.982614] FS: 0000000000000000(0000) GS:ffff9ea93ec80000(0000) knlGS:0000000000000000 [ 1263.982667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1263.982710] CR2: 0000000000000008 CR3: 0000000002a30005 CR4: 0000000000770ef0 [ 1263.982758] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1263.982810] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1263.982872] PKRU: 55555554 [ 1263.982894] Call Trace: [ 1263.982918] <IRQ> [ 1263.982948] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [ 1263.982984] ? page_fault_oops (arch/x86/mm/fault.c:713) [ 1263.983015] ? find_busiest_group (kernel/sched/fair.c:10845) [ 1263.983053] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:72 arch/x86/mm/fault.c:1513 arch/x86/mm/fault.c:1563) [ 1263.983084] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 1263.983116] ? sock_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3397 net/core/sock.c:2470) [ 1263.983146] skb_release_head_state (net/core/skbuff.c:1162) [ 1263.983185] consume_skb (net/core/skbuff.c:1174 net/core/skbuff.c:1189 net/core/skbuff.c:1405 net/core/skbuff.c:1399) [ 1263.983215] dummy_xmit (drivers/net/dummy.c:66) [ 1263.983255] dev_hard_start_xmit (./include/linux/netdevice.h:4875 ./include/linux/netdevice.h:4889 net/core/dev.c:3563 net/core/dev.c:3579) [ 1263.983292] sch_direct_xmit (net/sched/sch_generic.c:343) [ 1263.983329] __qdisc_run (net/sched/sch_generic.c:416) [ 1263.983361] ? __hrtimer_run_queues (kernel/time/hrtimer.c:1707 kernel/time/hrtimer.c:1756) [ 1263.983399] net_tx_action (./include/net/sch_generic.h:217 ./include/net/pkt_sched.h:128 ./include/net/pkt_sched.h:124 net/core/dev.c:5266) [ 1263.983431] __do_softirq (kernel/softirq.c:554) [ 1263.983467] irq_exit_rcu (kernel/softirq.c:428 kernel/softirq.c:633 kernel/softirq.c:645) [ 1263.983500] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043 arch/x86/kernel/apic/apic.c:1043) [ 1263.983544] </IRQ> [ 1263.983564] <TASK> [ 1263.983580] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 1263.983621] RIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:72 arch/x86/kernel/process.c:743) [ 1263.983651] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 fb 24 00 fb f4 <fa> c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 All code ======== 0: 4c 01 c7 add %r8,%rdi 3: 4c 29 c2 sub %r8,%rdx 6: e9 72 ff ff ff jmp 0xffffffffffffff7d b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d d3 fb 24 00 verw 0x24fbd3(%rip) # 0x24fbfb 28: fb sti 29: f4 hlt 2a:* fa cli <-- trapping instruction 2b: c3 ret 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 37: 00 00 00 00 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop Code starting with the faulting instruction =========================================== 0: fa cli 1: c3 ret 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) d: 00 00 00 00 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop [ 1263.983768] RSP: 0018:ffffae05800abee8 EFLAGS: 00000256 [ 1263.983805] RAX: ffff9ea93ec80000 RBX: ffff9ea90136dc00 RCX: 0000000000000001 [ 1263.983862] RDX: 4000000000000000 RSI: ffffffff884a12e1 RDI: 000000000902073c [ 1263.983910] RBP: 0000000000000001 R08: 000000000902073c R09: 0000000000000001 [ 1263.983958] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 1263.984006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.984056] default_idle_call (./include/linux/cpuidle.h:144 kernel/sched/idle.c:118) [ 1263.984084] do_idle (kernel/sched/idle.c:192 kernel/sched/idle.c:332) [ 1263.984125] ? do_idle (kernel/sched/idle.c:259) [ 1263.984154] cpu_startup_entry (kernel/sched/idle.c:429 (discriminator 1)) [ 1263.984184] start_secondary (arch/x86/kernel/smpboot.c:313) Finger prints: sock_wfree:skb_release_head_state:consume_skb:dummy_xmit