====================================== | 0 | xx__-> [ 2029.287539][ C1] ------------[ cut here ]------------ | [ 2029.288208][ C1] WARNING: CPU: 1 PID: 18652 at ./include/linux/skbuff.h:1164 ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) | [ 2029.288992][ C1] Modules linked in: nft_nat nft_flow_offload nf_flow_table_inet nf_flow_table nft_masq nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 tcp_diag inet_diag veth nf_tables [ 2029.291178][ C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2029.291671][ C1] RIP: 0010:ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) [ 2029.292199][ C1] Code: 31 db e9 9a f7 ff ff 80 3c 02 00 0f 85 ee 05 00 00 49 8b 46 58 48 89 c3 48 83 e3 fe a8 01 0f 85 f5 02 00 00 48 85 db 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c All code ======== 0: 31 db xor %ebx,%ebx 2: e9 9a f7 ff ff jmp 0xfffffffffffff7a1 7: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) b: 0f 85 ee 05 00 00 jne 0x5ff 11: 49 8b 46 58 mov 0x58(%r14),%rax 15: 48 89 c3 mov %rax,%rbx 18: 48 83 e3 fe and $0xfffffffffffffffe,%rbx 1c: a8 01 test $0x1,%al 1e: 0f 85 f5 02 00 00 jne 0x319 24: 48 85 db test %rbx,%rbx 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 4c 89 ea mov %r13,%rdx 3a: 48 c1 ea 03 shr $0x3,%rdx 3e: 80 .byte 0x80 3f: 3c .byte 0x3c Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 4c 89 ea mov %r13,%rdx 10: 48 c1 ea 03 shr $0x3,%rdx 14: 80 .byte 0x80 15: 3c .byte 0x3c [ 2029.293522][ C1] RSP: 0018:ffffc900001c0620 EFLAGS: 00010282 [ 2029.294382][ C1] RAX: ffff88800925f840 RBX: ffff88800925f840 RCX: 1ffff1100124bf08 [ 2029.294961][ C1] RDX: 1ffff11002f4c9d3 RSI: 0000000000000000 RDI: ffff888005e590e0 [ 2029.295525][ C1] RBP: ffff8880138552c0 R08: 1ffff920000380d6 R09: 0000000000000000 [ 2029.296081][ C1] R10: ffff88800925f883 R11: dffffc0000000000 R12: ffff888005a63f40 [ 2029.296639][ C1] R13: ffff888017a64e98 R14: ffff888017a64e40 R15: ffff888017a64ec1 [ 2029.297182][ C1] FS: 00007fc5a8fa9740(0000) GS:ffff888087b24000(0000) knlGS:0000000000000000 [ 2029.297816][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2029.298286][ C1] CR2: 00005632dcc5b000 CR3: 000000001134c003 CR4: 0000000000772ef0 [ 2029.298822][ C1] PKRU: 55555554 [ 2029.299117][ C1] Call Trace: [ 2029.299405][ C1] [ 2029.299595][ C1] ? __pfx_ip_route_me_harder (net/ipv4/netfilter.c:22) [ 2029.299969][ C1] ? nf_nat_ipv4_manip_pkt (net/netfilter/nf_nat_proto.c:324 net/netfilter/nf_nat_proto.c:310) nf_nat [ 2029.300443][ C1] ? __pfx_nf_nat_icmp_reply_translation (net/netfilter/nf_nat_proto.c:520) nf_nat [ 2029.300995][ C1] ? nf_conntrack_in (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/net/netfilter/nf_conntrack.h:259 net/netfilter/nf_conntrack_core.c:2017) nf_conntrack [ 2029.301482][ C1] nf_nat_ipv4_local_fn (net/netfilter/nf_nat_proto.c:768 net/netfilter/nf_nat_proto.c:749) nf_nat [ 2029.301962][ C1] ? ipv4_conntrack_defrag (./arch/x86/include/asm/bitops.h:206 (discriminator 3) ./arch/x86/include/asm/bitops.h:238 (discriminator 3) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 3) net/ipv4/netfilter/nf_defrag_ipv4.c:69 (discriminator 3)) nf_defrag_ipv4 [ 2029.302419][ C1] ? __pfx_nf_nat_ipv4_local_fn (net/netfilter/nf_nat_proto.c:751) nf_nat [ 2029.302867][ C1] nf_hook_slow (./include/linux/netfilter.h:157 net/netfilter/core.c:623) [ 2029.303259][ C1] __ip_local_out (./include/linux/netfilter.h:272 net/ipv4/ip_output.c:118) [ 2029.303631][ C1] ? __pfx___ip_local_out (net/ipv4/ip_output.c:101) [ 2029.303995][ C1] ? __ip_make_skb (net/ipv4/ip_output.c:1382 net/ipv4/ip_output.c:1492) [ 2029.304368][ C1] ? __pfx_dst_output (./include/net/dst.h:460) [ 2029.304746][ C1] ip_push_pending_frames (net/ipv4/ip_output.c:128 net/ipv4/ip_output.c:1501 net/ipv4/ip_output.c:1521) [ 2029.305118][ C1] __icmp_send (./include/net/route.h:285 net/ipv4/icmp.c:785) [ 2029.305499][ C1] ? __pfx___icmp_send (net/ipv4/icmp.c:596) [ 2029.305872][ C1] ? ip_route_input_noref (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv4/route.c:2549) [ 2029.306262][ C1] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2029.306636][ C1] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:873 ./include/net/ip.h:501) [ 2029.307136][ C1] ? __lock_release (kernel/locking/lockdep.c:5539) [ 2029.307540][ C1] ip_forward (net/ipv4/ip_forward.c:139) [ 2029.308134][ C1] ? __pfx_ip_rcv (net/ipv4/ip_input.c:567) [ 2029.308752][ C1] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 2029.309386][ C1] __netif_receive_skb_one_core (net/core/dev.c:5979 (discriminator 4)) [ 2029.310170][ C1] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5972) [ 2029.310973][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 2029.311629][ C1] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 2029.312291][ C1] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 2029.312933][ C1] process_backlog (./include/linux/rcupdate.h:869 net/core/dev.c:6445) [ 2029.313590][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 2029.314230][ C1] __napi_poll.constprop.0 (net/core/dev.c:7482) [ 2029.314839][ C1] net_rx_action (net/core/dev.c:7546 net/core/dev.c:7673) [ 2029.315220][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 2029.315601][ C1] ? __pfx_net_rx_action (net/core/dev.c:7635) [ 2029.315976][ C1] ? rcu_start_this_gp (kernel/rcu/tree.c:1047) [ 2029.316362][ C1] ? trace_rcu_quiescent_state_report (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745 ./include/trace/events/rcu.h:368) [ 2029.316809][ C1] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2029.317182][ C1] ? mark_held_locks (kernel/locking/lockdep.c:4328) [ 2029.317544][ C1] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 2029.318010][ C1] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 2029.318390][ C1] handle_softirqs (kernel/softirq.c:579) [ 2029.318763][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 2029.319141][ C1] do_softirq (kernel/softirq.c:480 kernel/softirq.c:467) [ 2029.319419][ C1] [ 2029.319604][ C1] [ 2029.319784][ C1] __local_bh_enable_ip (kernel/softirq.c:407) [ 2029.320152][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 2029.320517][ C1] __dev_queue_xmit (net/core/dev.c:4741) [ 2029.320881][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 2029.321261][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4621) [ 2029.321631][ C1] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 2029.322171][ C1] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 2029.322564][ C1] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 2029.322944][ C1] ip_finish_output2 (./include/net/neighbour.h:545 net/ipv4/ip_output.c:235) [ 2029.323327][ C1] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) [ 2029.323686][ C1] ? __ip_finish_output (net/ipv4/ip_output.c:256 net/ipv4/ip_output.c:308 net/ipv4/ip_output.c:295) [ 2029.324060][ C1] __ip_queue_xmit (./include/net/dst.h:461 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:527) [ 2029.324437][ C1] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1566 (discriminator 4)) [ 2029.324822][ C1] __tcp_transmit_skb (net/ipv4/tcp_output.c:1625 (discriminator 4)) [ 2029.325207][ C1] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1446) [ 2029.325576][ C1] ? tcp_tso_should_defer (./include/net/net_namespace.h:409 ./include/net/sock.h:682 net/ipv4/tcp_output.c:2406) [ 2029.325951][ C1] tcp_write_xmit (net/ipv4/tcp_output.c:2984) [ 2029.326329][ C1] ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:693) [ 2029.326688][ C1] ? __pfx_tcp_write_xmit (net/ipv4/tcp_output.c:2888) [ 2029.327065][ C1] ? skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 2029.327435][ C1] ? __pfx_skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 2029.327895][ C1] __tcp_push_pending_frames (net/ipv4/tcp_output.c:3167) [ 2029.328266][ C1] tcp_sendmsg_locked (net/ipv4/tcp.c:1358) [ 2029.328641][ C1] ? __pfx_tcp_sendmsg_locked (net/ipv4/tcp.c:1061) [ 2029.329012][ C1] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2029.329383][ C1] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 2029.329751][ C1] tcp_sendmsg (net/ipv4/tcp.c:1396) [ 2029.330042][ C1] sock_write_iter (net/socket.c:714 net/socket.c:729 net/socket.c:1179) [ 2029.330416][ C1] ? __pfx___unix_dgram_recvmsg (net/unix/af_unix.c:2554) [ 2029.330772][ C1] ? backing_file_read_iter (fs/backing-file.c:203) [ 2029.331201][ C1] ? __pfx_sock_write_iter (net/socket.c:1163) [ 2029.331583][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 2029.331975][ C1] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 2029.332278][ C1] ? __pfx___sys_recvfrom (net/socket.c:2255) [ 2029.332630][ C1] ? ksys_read (./include/linux/file.h:62 ./include/linux/file.h:80 ./include/linux/file.h:85 fs/read_write.c:706) [ 2029.332980][ C1] ? __lock_release (kernel/locking/lockdep.c:5539) [ 2029.333355][ C1] ? __pfx_vfs_write (fs/read_write.c:667) [ 2029.333731][ C1] ksys_write (fs/read_write.c:738) [ 2029.334000][ C1] ? __pfx_ksys_write (fs/read_write.c:728) [ 2029.334371][ C1] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 2029.334750][ C1] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2029.335216][ C1] RIP: 0033:0x7fc5a90f6337 [ 2029.335606][ C1] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 2029.336879][ C1] RSP: 002b:00007ffefb25c5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2029.337434][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc5a90f6337 [ 2029.337966][ C1] RDX: 0000000000002000 RSI: 00005632dcc5a000 RDI: 0000000000000007 [ 2029.338797][ C1] RBP: 00005632dcc5a000 R08: 0000000000002000 R09: 0000000000000000 [ 2029.339715][ C1] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000007 [ 2029.340685][ C1] R13: 0000000000002000 R14: 00005632baa48570 R15: 0000000000002000 | [ 2052.592603][ C3] ------------[ cut here ]------------ | [ 2052.593206][ C3] WARNING: CPU: 3 PID: 18869 at ./include/linux/skbuff.h:1164 __xfrm_route_forward (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/xfrm/xfrm_policy.c:3898) | [ 2052.593848][ C3] Modules linked in: esp4 sha1_generic xfrm_user 8021q bridge stp llc nft_nat nft_flow_offload nf_flow_table_inet nf_flow_table nft_masq nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 tcp_diag inet_diag veth nf_tables | [ 2052.595945][ C3] Tainted: [W]=WARN [ 2052.596205][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2052.596610][ C3] RIP: 0010:__xfrm_route_forward (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/xfrm/xfrm_policy.c:3898) [ 2052.597024][ C3] Code: fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 66 04 00 00 48 8b 43 58 a8 01 0f 85 8d 02 00 00 48 a9 fe ff ff ff 74 04 90 <0f> 0b 90 48 8d bb 81 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 All code ======== 0: fc cld 1: ff lcall (bad) 2: df 48 8b fisttps -0x75(%rax) 5: 14 24 adc $0x24,%al 7: 48 c1 ea 03 shr $0x3,%rdx b: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) f: 0f 85 66 04 00 00 jne 0x47b 15: 48 8b 43 58 mov 0x58(%rbx),%rax 19: a8 01 test $0x1,%al 1b: 0f 85 8d 02 00 00 jne 0x2ae 21: 48 a9 fe ff ff ff test $0xfffffffffffffffe,%rax 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 8d bb 81 00 00 00 lea 0x81(%rbx),%rdi 34: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 3b: fc ff df 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 8d bb 81 00 00 00 lea 0x81(%rbx),%rdi a: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 11: fc ff df 14: 48 rex.W 15: 89 .byte 0x89 [ 2052.598182][ C3] RSP: 0018:ffffc90000270ad8 EFLAGS: 00010282 [ 2052.598598][ C3] RAX: ffff88801b26f840 RBX: ffff88800a8bc968 RCX: 0000000000000000 [ 2052.599081][ C3] RDX: 1ffff11001517938 RSI: 0000000000000001 RDI: ffff88800c4c2060 [ 2052.599563][ C3] RBP: 1ffff9200004e15d R08: 0000000000000001 R09: ffffed100364df10 [ 2052.600064][ C3] R10: ffff88801b26f883 R11: ffff8880361ba598 R12: 0000000000000002 [ 2052.600970][ C3] R13: ffff88800c4c2040 R14: 0000000000000001 R15: ffffc90000270b08 [ 2052.601454][ C3] FS: 00007f74097f1740(0000) GS:ffff888087c24000(0000) knlGS:0000000000000000 [ 2052.602005][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.602417][ C3] CR2: 00007f740996e730 CR3: 000000000b550002 CR4: 0000000000772ef0 [ 2052.602891][ C3] PKRU: 55555554 [ 2052.603128][ C3] Call Trace: [ 2052.603375][ C3] [ 2052.603539][ C3] ? __pfx___xfrm_route_forward (net/xfrm/xfrm_policy.c:3872) [ 2052.603862][ C3] ? tcp_v4_early_demux (net/ipv4/tcp_ipv4.c:1997) [ 2052.604192][ C3] ip_forward (./include/net/xfrm.h:1363 ./include/net/xfrm.h:1369 net/ipv4/ip_forward.c:121) [ 2052.604531][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:567) [ 2052.604855][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 2052.605171][ C3] __netif_receive_skb_one_core (net/core/dev.c:5979 (discriminator 4)) [ 2052.605591][ C3] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5972) [ 2052.605993][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 2052.606321][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 2052.606637][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 2052.606955][ C3] process_backlog (./include/linux/rcupdate.h:869 net/core/dev.c:6445) [ 2052.607292][ C3] __napi_poll.constprop.0 (net/core/dev.c:7482) [ 2052.607612][ C3] net_rx_action (net/core/dev.c:7546 net/core/dev.c:7673) [ 2052.607939][ C3] ? __pfx_net_rx_action (net/core/dev.c:7635) [ 2052.608276][ C3] ? __pfx_sched_balance_domains (kernel/sched/fair.c:12202) [ 2052.608674][ C3] ? clockevents_program_event (kernel/time/clockevents.c:336 (discriminator 3)) [ 2052.609085][ C3] handle_softirqs (kernel/softirq.c:579) [ 2052.609422][ C3] ? __neigh_event_send (./include/linux/bottom_half.h:33 net/core/neighbour.c:1240) [ 2052.609751][ C3] do_softirq (kernel/softirq.c:480 kernel/softirq.c:467) [ 2052.609989][ C3] [ 2052.610148][ C3] [ 2052.610316][ C3] __local_bh_enable_ip (kernel/softirq.c:407) [ 2052.610631][ C3] __neigh_event_send (net/core/neighbour.c:1241) [ 2052.610954][ C3] neigh_resolve_output (net/core/neighbour.c:1545) [ 2052.611278][ C3] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 2052.611591][ C3] ? ___neigh_create (net/core/neighbour.c:693) [ 2052.611924][ C3] ip_finish_output2 (./include/net/neighbour.h:547 net/ipv4/ip_output.c:235) [ 2052.612255][ C3] ? ip_skb_dst_mtu (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/ip.h:501 ./include/net/ip.h:515) [ 2052.612574][ C3] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) [ 2052.612891][ C3] ? __ip_finish_output (./include/linux/skbuff.h:1685 ./include/linux/skbuff.h:5079 net/ipv4/ip_output.c:307 net/ipv4/ip_output.c:295) [ 2052.613208][ C3] __ip_queue_xmit (./include/net/dst.h:461 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:527) [ 2052.613536][ C3] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1566 (discriminator 4)) [ 2052.613856][ C3] __tcp_transmit_skb (net/ipv4/tcp_output.c:1625 (discriminator 4)) [ 2052.614192][ C3] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1446) [ 2052.614528][ C3] tcp_connect (net/ipv4/tcp_output.c:1643 net/ipv4/tcp_output.c:4319) [ 2052.614855][ C3] tcp_v4_connect (net/ipv4/tcp_ipv4.c:346) [ 2052.615178][ C3] ? __pfx_tcp_v4_connect (net/ipv4/tcp_ipv4.c:224) [ 2052.615502][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 2052.615820][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2052.616139][ C3] __inet_stream_connect (net/ipv4/af_inet.c:677) [ 2052.616469][ C3] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 2052.616785][ C3] ? __pfx_inet_stream_connect (net/ipv4/af_inet.c:744) [ 2052.617097][ C3] inet_stream_connect (net/ipv4/af_inet.c:749) [ 2052.617425][ C3] __sys_connect (net/socket.c:2086 net/socket.c:2105) [ 2052.617744][ C3] ? __pfx___sys_connect (net/socket.c:2093) [ 2052.618056][ C3] ? do_fcntl (fs/fcntl.c:473) [ 2052.618313][ C3] ? __pfx_do_fcntl (fs/fcntl.c:448) [ 2052.618630][ C3] ? fd_install (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcupdate.h:955 fs/file.c:661) [ 2052.618962][ C3] ? __sys_socket (net/socket.c:503 net/socket.c:1740) [ 2052.619289][ C3] ? __pfx___sys_socket (net/socket.c:1727) [ 2052.619613][ C3] __x64_sys_connect (net/socket.c:2108) [ 2052.619925][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 2052.620253][ C3] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 2052.620575][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2052.620967][ C3] RIP: 0033:0x7f740994fd77 [ 2052.621309][ C3] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89 All code ======== 0: 64 89 01 mov %eax,%fs:(%rcx) 3: 48 83 c8 ff or $0xffffffffffffffff,%rax 7: c3 ret 8: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) f: 00 00 00 12: 90 nop 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2a 00 00 00 mov $0x2a,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 18 sub $0x18,%rsp 37: 89 54 24 0c mov %edx,0xc(%rsp) 3b: 48 89 34 24 mov %rsi,(%rsp) 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 18 sub $0x18,%rsp d: 89 54 24 0c mov %edx,0xc(%rsp) 11: 48 89 34 24 mov %rsi,(%rsp) 15: 89 .byte 0x89 [ 2052.622441][ C3] RSP: 002b:00007ffd0e5a2628 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2052.622916][ C3] RAX: ffffffffffffffda RBX: 0000557751de7560 RCX: 00007f740994fd77 [ 2052.623404][ C3] RDX: 0000000000000010 RSI: 00007ffd0e5a2fa0 RDI: 0000000000000007 [ 2052.623882][ C3] RBP: 00007ffd0e5a2fa0 R08: 00007ffd0e5a2630 R09: 0000000000000010 [ 2052.624370][ C3] R10: 0000000000003039 R11: 0000000000000246 R12: 0000000000000010 [ 2052.624857][ C3] R13: 0000000000000007 R14: 00007ffd0e5a28d0 R15: 00007ffd0e5a2fa0 | [ 2052.632492][ C3] ------------[ cut here ]------------ | [ 2052.632968][ C3] WARNING: CPU: 3 PID: 18869 at ./include/linux/skbuff.h:1164 icmp_route_lookup.constprop.0 (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/icmp.c:548) | [ 2052.633663][ C3] Modules linked in: esp4 sha1_generic xfrm_user 8021q bridge stp llc nft_nat nft_flow_offload nf_flow_table_inet nf_flow_table nft_masq nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 tcp_diag inet_diag veth nf_tables | [ 2052.636272][ C3] Tainted: [W]=WARN [ 2052.636553][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2052.636973][ C3] RIP: 0010:icmp_route_lookup.constprop.0 (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/icmp.c:548) [ 2052.637419][ C3] Code: c1 ea 03 80 3c 02 00 0f 85 2c 05 00 00 48 8b 45 58 48 89 44 24 08 a8 01 0f 85 35 02 00 00 48 f7 44 24 08 fe ff ff ff 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 4c 89 da 48 c1 ea 03 80 3c All code ======== 0: c1 ea 03 shr $0x3,%edx 3: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 7: 0f 85 2c 05 00 00 jne 0x539 d: 48 8b 45 58 mov 0x58(%rbp),%rax 11: 48 89 44 24 08 mov %rax,0x8(%rsp) 16: a8 01 test $0x1,%al 18: 0f 85 35 02 00 00 jne 0x253 1e: 48 f7 44 24 08 fe ff testq $0xfffffffffffffffe,0x8(%rsp) 25: ff ff 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 4c 89 da mov %r11,%rdx 3a: 48 c1 ea 03 shr $0x3,%rdx 3e: 80 .byte 0x80 3f: 3c .byte 0x3c Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 4c 89 da mov %r11,%rdx 10: 48 c1 ea 03 shr $0x3,%rdx 14: 80 .byte 0x80 15: 3c .byte 0x3c [ 2052.638629][ C3] RSP: 0018:ffffc900002707e8 EFLAGS: 00010282 [ 2052.639068][ C3] RAX: ffff88800c4c2640 RBX: 1ffff9200004e101 RCX: 0000000000000002 [ 2052.639572][ C3] RDX: 1ffff11001517fc0 RSI: ffffffffac6a1d68 RDI: ffffc9000027089a [ 2052.640078][ C3] RBP: ffff88800a8bfda8 R08: 0000000000000001 R09: ffff88801b26e040 [ 2052.640580][ C3] R10: ffffe8ffffd8640f R11: ffff88800a8bfe00 R12: ffff8880138552c0 [ 2052.641079][ C3] R13: ffffc90000270a98 R14: ffff88801b26e7c0 R15: ffffc90000270828 [ 2052.641578][ C3] FS: 00007f74097f1740(0000) GS:ffff888087c24000(0000) knlGS:0000000000000000 [ 2052.642156][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.642576][ C3] CR2: 0000557751dea000 CR3: 000000000b550002 CR4: 0000000000772ef0 [ 2052.643075][ C3] PKRU: 55555554 [ 2052.643332][ C3] Call Trace: [ 2052.643583][ C3] [ 2052.643753][ C3] ? __pfx_icmp_route_lookup.constprop.0 (net/ipv4/icmp.c:480) [ 2052.644174][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2052.644510][ C3] ? __ip_options_echo (net/ipv4/ip_options.c:86) [ 2052.644848][ C3] ? __icmp_send (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv4/icmp.c:718) [ 2052.645173][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 2052.645511][ C3] __icmp_send (net/ipv4/icmp.c:746) [ 2052.645854][ C3] ? __xfrm_route_forward (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/xfrm/xfrm_policy.c:3898) [ 2052.646184][ C3] ? __pfx___icmp_send (net/ipv4/icmp.c:596) [ 2052.646517][ C3] ? handle_bug (arch/x86/kernel/traps.c:338) [ 2052.646846][ C3] ? exc_invalid_op (arch/x86/kernel/traps.c:392 (discriminator 1)) [ 2052.647194][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2052.647530][ C3] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:873 ./include/net/ip.h:501) [ 2052.647935][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 2052.648290][ C3] ip_forward (net/ipv4/ip_forward.c:139) [ 2052.648623][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:567) [ 2052.648946][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 2052.649284][ C3] __netif_receive_skb_one_core (net/core/dev.c:5979 (discriminator 4)) [ 2052.649692][ C3] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5972) [ 2052.650098][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 2052.650438][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 2052.650765][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 2052.651102][ C3] process_backlog (./include/linux/rcupdate.h:869 net/core/dev.c:6445) [ 2052.651448][ C3] __napi_poll.constprop.0 (net/core/dev.c:7482) [ 2052.651778][ C3] net_rx_action (net/core/dev.c:7546 net/core/dev.c:7673) [ 2052.652112][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 2052.652452][ C3] ? __pfx_net_rx_action (net/core/dev.c:7635) [ 2052.652778][ C3] ? _raw_spin_unlock_irq (kernel/locking/spinlock.c:203) [ 2052.653114][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2052.653461][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4328) [ 2052.653797][ C3] handle_softirqs (kernel/softirq.c:579) [ 2052.654129][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 2052.654464][ C3] do_softirq (kernel/softirq.c:480 kernel/softirq.c:467) [ 2052.654721][ C3] [ 2052.654887][ C3] [ 2052.655060][ C3] __local_bh_enable_ip (kernel/softirq.c:407) [ 2052.655398][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 2052.655730][ C3] __dev_queue_xmit (net/core/dev.c:4741) [ 2052.656061][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 2052.656406][ C3] ? __pfx___dev_queue_xmit (net/core/dev.c:4621) [ 2052.656739][ C3] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 2052.657069][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 2052.657411][ C3] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 2052.657752][ C3] ip_finish_output2 (./include/net/neighbour.h:545 net/ipv4/ip_output.c:235) [ 2052.658083][ C3] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) [ 2052.658428][ C3] ? __ip_finish_output (net/ipv4/ip_output.c:256 net/ipv4/ip_output.c:308 net/ipv4/ip_output.c:295) [ 2052.658759][ C3] __ip_queue_xmit (./include/net/dst.h:461 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:527) [ 2052.659092][ C3] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1566 (discriminator 4)) [ 2052.659432][ C3] __tcp_transmit_skb (net/ipv4/tcp_output.c:1625 (discriminator 4)) [ 2052.659773][ C3] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1446) [ 2052.660113][ C3] tcp_write_xmit (net/ipv4/tcp_output.c:2984) [ 2052.660467][ C3] ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:693) [ 2052.660822][ C3] ? __pfx_tcp_write_xmit (net/ipv4/tcp_output.c:2888) [ 2052.661149][ C3] ? skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 2052.661491][ C3] ? __pfx_skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 2052.661905][ C3] __tcp_push_pending_frames (net/ipv4/tcp_output.c:3167) [ 2052.662233][ C3] tcp_sendmsg_locked (net/ipv4/tcp.c:1358) [ 2052.662589][ C3] ? __pfx_tcp_sendmsg_locked (net/ipv4/tcp.c:1061) [ 2052.662926][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 2052.663270][ C3] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 2052.663600][ C3] tcp_sendmsg (net/ipv4/tcp.c:1396) [ 2052.663847][ C3] sock_write_iter (net/socket.c:714 net/socket.c:729 net/socket.c:1179) [ 2052.664177][ C3] ? __pfx___unix_dgram_recvmsg (net/unix/af_unix.c:2554) [ 2052.664521][ C3] ? backing_file_read_iter (fs/backing-file.c:203) [ 2052.664860][ C3] ? __pfx_sock_write_iter (net/socket.c:1163) [ 2052.665206][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 2052.665854][ C3] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 2052.666105][ C3] ? __pfx___sys_recvfrom (net/socket.c:2255) [ 2052.666438][ C3] ? ksys_read (./include/linux/file.h:62 ./include/linux/file.h:80 ./include/linux/file.h:85 fs/read_write.c:706) [ 2052.666765][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 2052.667349][ C3] ? __pfx_vfs_write (fs/read_write.c:667) [ 2052.667695][ C3] ksys_write (fs/read_write.c:738) [ 2052.667943][ C3] ? __pfx_ksys_write (fs/read_write.c:728) [ 2052.668291][ C3] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 2052.668622][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2052.669284][ C3] RIP: 0033:0x7f740993e337 [ 2052.669622][ C3] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 2052.670808][ C3] RSP: 002b:00007ffd0e5a2e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2052.671309][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f740993e337 [ 2052.672051][ C3] RDX: 0000000000002000 RSI: 0000557751de9000 RDI: 0000000000000007 [ 2052.672551][ C3] RBP: 0000557751de9000 R08: 0000000000002000 R09: 0000000000000000 [ 2052.673042][ C3] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000007 Finger prints: __xfrm_route_forward:ip_forward:__netif_receive_skb_one_core:process_backlog:net_rx_action __icmp_send:ip_forward:__netif_receive_skb_one_core:process_backlog:net_rx_action ip_route_me_harder:nf_nat_ipv4_local_fn:nf_hook_slow:__ip_local_out:ip_push_pending_frames