====================================== | [ 1261.832404] #PF: supervisor read access in kernel mode | [ 1261.832456] #PF: error_code(0x0000) - not-present page | [ 1261.832507] PGD 0 P4D 0 | [ 1261.832540] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 1261.832662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 1261.832762] RIP: 0010:sock_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3397 net/core/sock.c:2470) [ 1261.832824] Code: c3 d1 fa 39 ca 77 9c e8 28 48 6b ff e9 09 ff ff ff be 03 00 00 00 4c 89 e7 e8 06 8d a6 ff e9 61 ff ff ff 48 8b 85 20 01 00 00 <48> 8b 40 08 a8 04 75 83 eb ad 48 8b bd 00 01 00 00 ba 02 00 00 00 All code ======== 0: c3 ret 1: d1 fa sar %edx 3: 39 ca cmp %ecx,%edx 5: 77 9c ja 0xffffffffffffffa3 7: e8 28 48 6b ff call 0xffffffffff6b4834 c: e9 09 ff ff ff jmp 0xffffffffffffff1a 11: be 03 00 00 00 mov $0x3,%esi 16: 4c 89 e7 mov %r12,%rdi 19: e8 06 8d a6 ff call 0xffffffffffa68d24 1e: e9 61 ff ff ff jmp 0xffffffffffffff84 23: 48 8b 85 20 01 00 00 mov 0x120(%rbp),%rax 2a:* 48 8b 40 08 mov 0x8(%rax),%rax <-- trapping instruction 2e: a8 04 test $0x4,%al 30: 75 83 jne 0xffffffffffffffb5 32: eb ad jmp 0xffffffffffffffe1 34: 48 8b bd 00 01 00 00 mov 0x100(%rbp),%rdi 3b: ba 02 00 00 00 mov $0x2,%edx Code starting with the faulting instruction =========================================== 0: 48 8b 40 08 mov 0x8(%rax),%rax 4: a8 04 test $0x4,%al 6: 75 83 jne 0xffffffffffffff8b 8: eb ad jmp 0xffffffffffffffb7 a: 48 8b bd 00 01 00 00 mov 0x100(%rbp),%rdi 11: ba 02 00 00 00 mov $0x2,%edx [ 1261.832983] RSP: 0018:ffffa23080148e30 EFLAGS: 00010206 [ 1261.833039] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000002080 [ 1261.833114] RDX: 0000000000001d40 RSI: ffff95fdc4a0d000 RDI: 0000000000000000 [ 1261.833190] RBP: ffff95fdc247e900 R08: ffff95fdc10678ac R09: 0000000000000001 [ 1261.833254] R10: ffffffffbb8060c0 R11: ffffa23080148ff8 R12: ffff95fdc247ea7c [ 1261.833328] R13: 000000000000004b R14: 0000000000000000 R15: ffff95fdc4a0d000 [ 1261.833398] FS: 0000000000000000(0000) GS:ffff95fdfed80000(0000) knlGS:0000000000000000 [ 1261.833468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1261.833525] CR2: 0000000000000008 CR3: 0000000018644006 CR4: 0000000000770ef0 [ 1261.833599] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1261.833652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1261.833703] PKRU: 55555554 [ 1261.833733] Call Trace: [ 1261.833772] <IRQ> [ 1261.833806] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [ 1261.833851] ? page_fault_oops (arch/x86/mm/fault.c:713) [ 1261.833894] ? find_busiest_group (kernel/sched/fair.c:10845) [ 1261.833943] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:72 arch/x86/mm/fault.c:1513 arch/x86/mm/fault.c:1563) [ 1261.833986] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 1261.834035] ? sock_wfree (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 net/core/sock.c:3397 net/core/sock.c:2470) [ 1261.834074] skb_release_head_state (net/core/skbuff.c:1162) [ 1261.834119] consume_skb (net/core/skbuff.c:1174 net/core/skbuff.c:1189 net/core/skbuff.c:1405 net/core/skbuff.c:1399) [ 1261.834164] dummy_xmit (drivers/net/dummy.c:66) [ 1261.834211] dev_hard_start_xmit (./include/linux/netdevice.h:4875 ./include/linux/netdevice.h:4889 net/core/dev.c:3563 net/core/dev.c:3579) [ 1261.834259] sch_direct_xmit (net/sched/sch_generic.c:343) [ 1261.834303] __qdisc_run (net/sched/sch_generic.c:416) [ 1261.834343] ? __hrtimer_run_queues (kernel/time/hrtimer.c:1707 kernel/time/hrtimer.c:1756) [ 1261.834390] net_tx_action (./include/net/sch_generic.h:217 ./include/net/pkt_sched.h:128 ./include/net/pkt_sched.h:124 net/core/dev.c:5266) [ 1261.834431] __do_softirq (kernel/softirq.c:554) [ 1261.834475] irq_exit_rcu (kernel/softirq.c:428 kernel/softirq.c:633 kernel/softirq.c:645) [ 1261.834520] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043 arch/x86/kernel/apic/apic.c:1043) [ 1261.834571] </IRQ> [ 1261.834598] <TASK> [ 1261.834620] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 1261.834676] RIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:72 arch/x86/kernel/process.c:743) [ 1261.834714] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 0b 25 00 fb f4 <fa> c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 All code ======== 0: 4c 01 c7 add %r8,%rdi 3: 4c 29 c2 sub %r8,%rdx 6: e9 72 ff ff ff jmp 0xffffffffffffff7d b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d d3 0b 25 00 verw 0x250bd3(%rip) # 0x250bfb 28: fb sti 29: f4 hlt 2a:* fa cli <-- trapping instruction 2b: c3 ret 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 37: 00 00 00 00 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop Code starting with the faulting instruction =========================================== 0: fa cli 1: c3 ret 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) d: 00 00 00 00 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop [ 1261.834869] RSP: 0018:ffffa230800bbee8 EFLAGS: 00000246 [ 1261.834918] RAX: ffff95fdfed80000 RBX: ffff95fdc1379700 RCX: 00000125cbd2af40 [ 1261.834987] RDX: 4000000000000000 RSI: ffffffffbb4a0ffe RDI: 00000000031f16c4 [ 1261.835060] RBP: 0000000000000003 R08: 00000000031f16c4 R09: 00000125cbd2af40 [ 1261.835124] R10: 0000000000000001 R11: 0000000000000008 R12: 0000000000000000 [ 1261.835200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.835274] default_idle_call (./include/linux/cpuidle.h:144 kernel/sched/idle.c:118) [ 1261.835316] do_idle (kernel/sched/idle.c:192 kernel/sched/idle.c:332) [ 1261.835358] cpu_startup_entry (kernel/sched/idle.c:429 (discriminator 1)) [ 1261.835400] start_secondary (arch/x86/kernel/smpboot.c:313) Finger prints: sock_wfree:skb_release_head_state:consume_skb:dummy_xmit