====================================== | 0 | xx__-> [ 245.240162][ C3] ------------[ cut here ]------------ | [ 245.240773][ C3] WARNING: CPU: 3 PID: 1663 at ./include/linux/skbuff.h:1164 ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) | [ 245.241535][ C3] Modules linked in: nft_nat nft_flow_offload nf_flow_table_inet nf_flow_table ebtable_filter ebt_redirect ebt_ip ebtable_broute ebtables ts_kmp ts_bm xt_string dummy nft_masq nft_chain_nat nf_nat sctp xt_conntrack nft_compat sch_netem cls_u32 sch_htb nf_conntrack_netlink tcp_diag inet_diag nf_conntrack_ftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables vxlan ip6_udp_tunnel udp_tunnel 8021q veth br_netfilter bridge stp llc [ 245.245535][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 245.246023][ C3] RIP: 0010:ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) [ 245.246519][ C3] Code: 31 db e9 9a f7 ff ff 80 3c 02 00 0f 85 ee 05 00 00 49 8b 46 58 48 89 c3 48 83 e3 fe a8 01 0f 85 f5 02 00 00 48 85 db 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c All code ======== 0: 31 db xor %ebx,%ebx 2: e9 9a f7 ff ff jmp 0xfffffffffffff7a1 7: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) b: 0f 85 ee 05 00 00 jne 0x5ff 11: 49 8b 46 58 mov 0x58(%r14),%rax 15: 48 89 c3 mov %rax,%rbx 18: 48 83 e3 fe and $0xfffffffffffffffe,%rbx 1c: a8 01 test $0x1,%al 1e: 0f 85 f5 02 00 00 jne 0x319 24: 48 85 db test %rbx,%rbx 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 4c 89 ea mov %r13,%rdx 3a: 48 c1 ea 03 shr $0x3,%rdx 3e: 80 .byte 0x80 3f: 3c .byte 0x3c Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 4c 89 ea mov %r13,%rdx 10: 48 c1 ea 03 shr $0x3,%rdx 14: 80 .byte 0x80 15: 3c .byte 0x3c [ 245.247848][ C3] RSP: 0018:ffffc90000270620 EFLAGS: 00010286 [ 245.248319][ C3] RAX: ffff8880162396c0 RBX: ffff8880162396c0 RCX: 1ffff11002c472d8 [ 245.248932][ C3] RDX: 1ffff11002b77cf3 RSI: 0000000000000000 RDI: ffff8880095140e0 [ 245.249489][ C3] RBP: ffff888012e01bc0 R08: 1ffff9200004e0d6 R09: 0000000000000000 [ 245.250056][ C3] R10: ffff888016239703 R11: dffffc0000000000 R12: ffff888005b64d40 [ 245.250613][ C3] R13: ffff888015bbe798 R14: ffff888015bbe740 R15: ffff888015bbe7c1 [ 245.251600][ C3] FS: 00007f281ce0e740(0000) GS:ffff88807d624000(0000) knlGS:0000000000000000 [ 245.252266][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.252745][ C3] CR2: 000055df0dfd1000 CR3: 0000000011259001 CR4: 0000000000772ef0 [ 245.253305][ C3] PKRU: 55555554 [ 245.253591][ C3] Call Trace: [ 245.253882][ C3] [ 245.254086][ C3] ? __pfx_ip_route_me_harder (net/ipv4/netfilter.c:22) [ 245.254462][ C3] ? nf_nat_ipv4_manip_pkt (net/netfilter/nf_nat_proto.c:324 net/netfilter/nf_nat_proto.c:310) nf_nat [ 245.254947][ C3] ? __pfx_nf_nat_icmp_reply_translation (net/netfilter/nf_nat_proto.c:520) nf_nat [ 245.255501][ C3] ? nf_conntrack_in (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/net/netfilter/nf_conntrack.h:259 net/netfilter/nf_conntrack_core.c:2017) nf_conntrack [ 245.256003][ C3] nf_nat_ipv4_local_fn (net/netfilter/nf_nat_proto.c:768 net/netfilter/nf_nat_proto.c:749) nf_nat [ 245.256472][ C3] ? ipv4_conntrack_defrag (./arch/x86/include/asm/bitops.h:206 (discriminator 3) ./arch/x86/include/asm/bitops.h:238 (discriminator 3) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 3) net/ipv4/netfilter/nf_defrag_ipv4.c:69 (discriminator 3)) nf_defrag_ipv4 [ 245.256944][ C3] ? __pfx_nf_nat_ipv4_local_fn (net/netfilter/nf_nat_proto.c:751) nf_nat [ 245.257405][ C3] nf_hook_slow (./include/linux/netfilter.h:157 net/netfilter/core.c:623) [ 245.257786][ C3] __ip_local_out (./include/linux/netfilter.h:272 net/ipv4/ip_output.c:118) [ 245.258155][ C3] ? __pfx___ip_local_out (net/ipv4/ip_output.c:101) [ 245.258521][ C3] ? __ip_make_skb (net/ipv4/ip_output.c:1382 net/ipv4/ip_output.c:1492) [ 245.258908][ C3] ? __pfx_dst_output (./include/net/dst.h:460) [ 245.259284][ C3] ip_push_pending_frames (net/ipv4/ip_output.c:128 net/ipv4/ip_output.c:1501 net/ipv4/ip_output.c:1521) [ 245.259672][ C3] __icmp_send (./include/net/route.h:285 net/ipv4/icmp.c:785) [ 245.260050][ C3] ? __pfx___icmp_send (net/ipv4/icmp.c:596) [ 245.260427][ C3] ? ip_route_input_noref (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv4/route.c:2549) [ 245.260820][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 245.261193][ C3] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:873 ./include/net/ip.h:501) [ 245.261655][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 245.262034][ C3] ip_forward (net/ipv4/ip_forward.c:139) [ 245.262409][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:567) [ 245.262783][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 245.263153][ C3] __netif_receive_skb_one_core (net/core/dev.c:5979 (discriminator 4)) [ 245.263613][ C3] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5972) [ 245.264081][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 245.264450][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 245.264826][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 245.265198][ C3] process_backlog (./include/linux/rcupdate.h:869 net/core/dev.c:6445) [ 245.265580][ C3] __napi_poll.constprop.0 (net/core/dev.c:7482) [ 245.265959][ C3] net_rx_action (net/core/dev.c:7546 net/core/dev.c:7673) [ 245.266340][ C3] ? __pfx_net_rx_action (net/core/dev.c:7635) [ 245.266715][ C3] ? clockevents_program_event (kernel/time/clockevents.c:326) [ 245.267084][ C3] ? __lock_release (kernel/locking/lockdep.c:5515) [ 245.267458][ C3] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:95 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) [ 245.267843][ C3] ? ktime_get (kernel/time/timekeeping.c:251 (discriminator 4) kernel/time/timekeeping.c:360 (discriminator 4) kernel/time/timekeeping.c:778 (discriminator 4)) [ 245.268130][ C3] ? clockevents_program_event (kernel/time/clockevents.c:336 (discriminator 3)) [ 245.268597][ C3] handle_softirqs (kernel/softirq.c:579) [ 245.268993][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 245.269364][ C3] do_softirq (kernel/softirq.c:480 kernel/softirq.c:467) [ 245.269652][ C3] [ 245.269844][ C3] [ 245.270029][ C3] __local_bh_enable_ip (kernel/softirq.c:407) [ 245.270396][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 245.270776][ C3] __dev_queue_xmit (net/core/dev.c:4741) [ 245.271146][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 245.271519][ C3] ? __pfx___dev_queue_xmit (net/core/dev.c:4621) [ 245.271902][ C3] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 245.272269][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 245.272650][ C3] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 245.273031][ C3] ip_finish_output2 (./include/net/neighbour.h:545 net/ipv4/ip_output.c:235) [ 245.273409][ C3] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) [ 245.273789][ C3] ? __ip_finish_output (net/ipv4/ip_output.c:256 net/ipv4/ip_output.c:308 net/ipv4/ip_output.c:295) [ 245.274162][ C3] __ip_queue_xmit (./include/net/dst.h:461 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:527) [ 245.274531][ C3] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1566 (discriminator 4)) [ 245.274918][ C3] __tcp_transmit_skb (net/ipv4/tcp_output.c:1625 (discriminator 4)) [ 245.275296][ C3] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1446) [ 245.275679][ C3] ? tcp_tso_should_defer (./include/net/net_namespace.h:409 ./include/net/sock.h:682 net/ipv4/tcp_output.c:2406) [ 245.276059][ C3] tcp_write_xmit (net/ipv4/tcp_output.c:2984) [ 245.276440][ C3] ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:693) [ 245.276819][ C3] ? __pfx_tcp_write_xmit (net/ipv4/tcp_output.c:2888) [ 245.277192][ C3] ? skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 245.277564][ C3] ? __pfx_skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 245.278034][ C3] __tcp_push_pending_frames (net/ipv4/tcp_output.c:3167) [ 245.278405][ C3] tcp_sendmsg_locked (net/ipv4/tcp.c:1358) [ 245.278806][ C3] ? __pfx_tcp_sendmsg_locked (net/ipv4/tcp.c:1061) [ 245.279183][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 245.279557][ C3] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 245.279937][ C3] tcp_sendmsg (net/ipv4/tcp.c:1396) [ 245.280215][ C3] sock_write_iter (net/socket.c:714 net/socket.c:729 net/socket.c:1179) [ 245.280584][ C3] ? __pfx___unix_dgram_recvmsg (net/unix/af_unix.c:2554) [ 245.280961][ C3] ? backing_file_read_iter (fs/backing-file.c:203) [ 245.281335][ C3] ? __pfx_sock_write_iter (net/socket.c:1163) [ 245.281722][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 245.282096][ C3] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 245.282374][ C3] ? __pfx___sys_recvfrom (net/socket.c:2255) [ 245.282748][ C3] ? ksys_read (./include/linux/file.h:62 ./include/linux/file.h:80 ./include/linux/file.h:85 fs/read_write.c:706) [ 245.283113][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 245.283479][ C3] ? __pfx_vfs_write (fs/read_write.c:667) [ 245.283881][ C3] ksys_write (fs/read_write.c:738) [ 245.284161][ C3] ? __pfx_ksys_write (fs/read_write.c:728) [ 245.284538][ C3] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 245.284916][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 245.285371][ C3] RIP: 0033:0x7f281cf5b337 [ 245.285762][ C3] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 245.287089][ C3] RSP: 002b:00007ffd74a95e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.287657][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f281cf5b337 [ 245.288211][ C3] RDX: 0000000000002000 RSI: 000055df0dfd0000 RDI: 0000000000000007 [ 245.288781][ C3] RBP: 000055df0dfd0000 R08: 0000000000002000 R09: 0000000000000000 [ 245.289348][ C3] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000007 [ 245.289913][ C3] R13: 0000000000002000 R14: 000055dee7d57570 R15: 0000000000002000 | [ 266.747917][ C3] ------------[ cut here ]------------ | [ 266.748472][ C3] WARNING: CPU: 3 PID: 1875 at ./include/linux/skbuff.h:1164 __xfrm_route_forward (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/xfrm/xfrm_policy.c:3898) | [ 266.749163][ C3] Modules linked in: esp4 sha1_generic xfrm_user nft_nat nft_flow_offload nf_flow_table_inet nf_flow_table ebtable_filter ebt_redirect ebt_ip ebtable_broute ebtables ts_kmp ts_bm xt_string dummy nft_masq nft_chain_nat nf_nat sctp xt_conntrack nft_compat sch_netem cls_u32 sch_htb nf_conntrack_netlink tcp_diag inet_diag nf_conntrack_ftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables vxlan ip6_udp_tunnel udp_tunnel 8021q veth br_netfilter bridge stp llc | [ 266.752548][ C3] Tainted: [W]=WARN [ 266.752840][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 266.753259][ C3] RIP: 0010:__xfrm_route_forward (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/xfrm/xfrm_policy.c:3898) [ 266.753728][ C3] Code: fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 66 04 00 00 48 8b 43 58 a8 01 0f 85 8d 02 00 00 48 a9 fe ff ff ff 74 04 90 <0f> 0b 90 48 8d bb 81 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 All code ======== 0: fc cld 1: ff lcall (bad) 2: df 48 8b fisttps -0x75(%rax) 5: 14 24 adc $0x24,%al 7: 48 c1 ea 03 shr $0x3,%rdx b: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) f: 0f 85 66 04 00 00 jne 0x47b 15: 48 8b 43 58 mov 0x58(%rbx),%rax 19: a8 01 test $0x1,%al 1b: 0f 85 8d 02 00 00 jne 0x2ae 21: 48 a9 fe ff ff ff test $0xfffffffffffffffe,%rax 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 8d bb 81 00 00 00 lea 0x81(%rbx),%rdi 34: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 3b: fc ff df 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 8d bb 81 00 00 00 lea 0x81(%rbx),%rdi a: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 11: fc ff df 14: 48 rex.W 15: 89 .byte 0x89 [ 266.754914][ C3] RSP: 0018:ffffc90000270ad8 EFLAGS: 00010282 [ 266.755335][ C3] RAX: ffff888015aa0f40 RBX: ffff8880161a86a8 RCX: 0000000000000000 [ 266.756217][ C3] RDX: 1ffff11002c350e0 RSI: 0000000000000001 RDI: ffff888004dc4060 [ 266.756728][ C3] RBP: 1ffff9200004e15d R08: 0000000000000001 R09: ffffed1002b541f0 [ 266.757223][ C3] R10: ffff888015aa0f83 R11: ffff8880361ba598 R12: 0000000000000002 [ 266.757730][ C3] R13: ffff888004dc4040 R14: 0000000000000001 R15: ffffc90000270b08 [ 266.758223][ C3] FS: 00007f3f42893740(0000) GS:ffff88807d624000(0000) knlGS:0000000000000000 [ 266.758833][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.759250][ C3] CR2: 00007f3f42a0d1d0 CR3: 0000000004c50004 CR4: 0000000000772ef0 [ 266.759757][ C3] PKRU: 55555554 [ 266.760006][ C3] Call Trace: [ 266.760255][ C3] [ 266.760425][ C3] ? __pfx___xfrm_route_forward (net/xfrm/xfrm_policy.c:3872) [ 266.760781][ C3] ? tcp_v4_early_demux (net/ipv4/tcp_ipv4.c:1997) [ 266.761120][ C3] ip_forward (./include/net/xfrm.h:1363 ./include/net/xfrm.h:1369 net/ipv4/ip_forward.c:121) [ 266.761459][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:567) [ 266.761798][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 266.762134][ C3] __netif_receive_skb_one_core (net/core/dev.c:5979 (discriminator 4)) [ 266.762548][ C3] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5972) [ 266.762971][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 266.763307][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 266.763654][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 266.763988][ C3] process_backlog (./include/linux/rcupdate.h:869 net/core/dev.c:6445) [ 266.764326][ C3] __napi_poll.constprop.0 (net/core/dev.c:7482) [ 266.764672][ C3] net_rx_action (net/core/dev.c:7546 net/core/dev.c:7673) [ 266.765013][ C3] ? __pfx_net_rx_action (net/core/dev.c:7635) [ 266.765342][ C3] ? clockevents_program_event (kernel/time/clockevents.c:326) [ 266.765682][ C3] ? __lock_release (kernel/locking/lockdep.c:5515) [ 266.766022][ C3] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:95 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) [ 266.766350][ C3] ? ktime_get (kernel/time/timekeeping.c:251 (discriminator 4) kernel/time/timekeeping.c:360 (discriminator 4) kernel/time/timekeeping.c:778 (discriminator 4)) [ 266.766603][ C3] ? clockevents_program_event (kernel/time/clockevents.c:336 (discriminator 3)) [ 266.767032][ C3] handle_softirqs (kernel/softirq.c:579) [ 266.767368][ C3] ? __neigh_event_send (./include/linux/bottom_half.h:33 net/core/neighbour.c:1240) [ 266.767710][ C3] do_softirq (kernel/softirq.c:480 kernel/softirq.c:467) [ 266.767960][ C3] [ 266.768127][ C3] [ 266.768299][ C3] __local_bh_enable_ip (kernel/softirq.c:407) [ 266.768630][ C3] __neigh_event_send (net/core/neighbour.c:1241) [ 266.768984][ C3] neigh_resolve_output (net/core/neighbour.c:1545) [ 266.769314][ C3] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 266.769656][ C3] ? ___neigh_create (net/core/neighbour.c:693) [ 266.769993][ C3] ip_finish_output2 (./include/net/neighbour.h:547 net/ipv4/ip_output.c:235) [ 266.770325][ C3] ? ip_skb_dst_mtu (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/ip.h:501 ./include/net/ip.h:515) [ 266.770670][ C3] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) [ 266.771003][ C3] ? __ip_finish_output (./include/linux/skbuff.h:1685 ./include/linux/skbuff.h:5079 net/ipv4/ip_output.c:307 net/ipv4/ip_output.c:295) [ 266.771336][ C3] __ip_queue_xmit (./include/net/dst.h:461 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:527) [ 266.771676][ C3] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1566 (discriminator 4)) [ 266.772006][ C3] __tcp_transmit_skb (net/ipv4/tcp_output.c:1625 (discriminator 4)) [ 266.772348][ C3] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1446) [ 266.772703][ C3] tcp_connect (net/ipv4/tcp_output.c:1643 net/ipv4/tcp_output.c:4319) [ 266.773043][ C3] tcp_v4_connect (net/ipv4/tcp_ipv4.c:346) [ 266.773382][ C3] ? __pfx_tcp_v4_connect (net/ipv4/tcp_ipv4.c:224) [ 266.773721][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 266.774052][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 266.774385][ C3] __inet_stream_connect (net/ipv4/af_inet.c:677) [ 266.774724][ C3] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 266.775057][ C3] ? __pfx_inet_stream_connect (net/ipv4/af_inet.c:744) [ 266.775391][ C3] inet_stream_connect (net/ipv4/af_inet.c:749) [ 266.775733][ C3] __sys_connect (net/socket.c:2086 net/socket.c:2105) [ 266.776064][ C3] ? __pfx___sys_connect (net/socket.c:2093) [ 266.776393][ C3] ? do_fcntl (fs/fcntl.c:473) [ 266.776657][ C3] ? __pfx_do_fcntl (fs/fcntl.c:448) [ 266.776987][ C3] ? fd_install (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcupdate.h:955 fs/file.c:661) [ 266.777326][ C3] ? __sys_socket (net/socket.c:503 net/socket.c:1740) [ 266.777667][ C3] ? __pfx___sys_socket (net/socket.c:1727) [ 266.778011][ C3] __x64_sys_connect (net/socket.c:2108) [ 266.778339][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 266.778680][ C3] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 266.779020][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 266.779431][ C3] RIP: 0033:0x7f3f429f1d77 [ 266.779783][ C3] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89 All code ======== 0: 64 89 01 mov %eax,%fs:(%rcx) 3: 48 83 c8 ff or $0xffffffffffffffff,%rax 7: c3 ret 8: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) f: 00 00 00 12: 90 nop 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2a 00 00 00 mov $0x2a,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 18 sub $0x18,%rsp 37: 89 54 24 0c mov %edx,0xc(%rsp) 3b: 48 89 34 24 mov %rsi,(%rsp) 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 18 sub $0x18,%rsp d: 89 54 24 0c mov %edx,0xc(%rsp) 11: 48 89 34 24 mov %rsi,(%rsp) 15: 89 .byte 0x89 [ 266.780970][ C3] RSP: 002b:00007fff2f20e9c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 266.781470][ C3] RAX: ffffffffffffffda RBX: 0000558056494560 RCX: 00007f3f429f1d77 [ 266.781973][ C3] RDX: 0000000000000010 RSI: 00007fff2f20f340 RDI: 0000000000000007 [ 266.782469][ C3] RBP: 00007fff2f20f340 R08: 00007fff2f20e9d0 R09: 0000000000000010 [ 266.782989][ C3] R10: 0000000000003039 R11: 0000000000000246 R12: 0000000000000010 [ 266.783487][ C3] R13: 0000000000000007 R14: 00007fff2f20ec70 R15: 00007fff2f20f340 | [ 266.791694][ C3] ------------[ cut here ]------------ | [ 266.792404][ C3] WARNING: CPU: 3 PID: 1866 at ./include/linux/skbuff.h:1164 icmp_route_lookup.constprop.0 (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/icmp.c:548) | [ 266.793092][ C3] Modules linked in: esp4 sha1_generic xfrm_user nft_nat nft_flow_offload nf_flow_table_inet nf_flow_table ebtable_filter ebt_redirect ebt_ip ebtable_broute ebtables ts_kmp ts_bm xt_string dummy nft_masq nft_chain_nat nf_nat sctp xt_conntrack nft_compat sch_netem cls_u32 sch_htb nf_conntrack_netlink tcp_diag inet_diag nf_conntrack_ftp nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables vxlan ip6_udp_tunnel udp_tunnel 8021q veth br_netfilter bridge stp llc | [ 266.796573][ C3] Tainted: [W]=WARN [ 266.796858][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 266.797299][ C3] RIP: 0010:icmp_route_lookup.constprop.0 (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/icmp.c:548) [ 266.797761][ C3] Code: c1 ea 03 80 3c 02 00 0f 85 2c 05 00 00 48 8b 45 58 48 89 44 24 08 a8 01 0f 85 35 02 00 00 48 f7 44 24 08 fe ff ff ff 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 4c 89 da 48 c1 ea 03 80 3c All code ======== 0: c1 ea 03 shr $0x3,%edx 3: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 7: 0f 85 2c 05 00 00 jne 0x539 d: 48 8b 45 58 mov 0x58(%rbp),%rax 11: 48 89 44 24 08 mov %rax,0x8(%rsp) 16: a8 01 test $0x1,%al 18: 0f 85 35 02 00 00 jne 0x253 1e: 48 f7 44 24 08 fe ff testq $0xfffffffffffffffe,0x8(%rsp) 25: ff ff 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 4c 89 da mov %r11,%rdx 3a: 48 c1 ea 03 shr $0x3,%rdx 3e: 80 .byte 0x80 3f: 3c .byte 0x3c Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 4c 89 da mov %r11,%rdx 10: 48 c1 ea 03 shr $0x3,%rdx 14: 80 .byte 0x80 15: 3c .byte 0x3c [ 266.799042][ C3] RSP: 0018:ffffc900002707e8 EFLAGS: 00010282 [ 266.799490][ C3] RAX: ffff888004dc4640 RBX: 1ffff9200004e101 RCX: 0000000000000002 [ 266.800026][ C3] RDX: 1ffff11002c353f8 RSI: ffffffffb6ca1d68 RDI: ffffc9000027089a [ 266.800554][ C3] RBP: ffff8880161a9f68 R08: 0000000000000001 R09: ffff888015aa1240 [ 266.801100][ C3] R10: ffffe8ffffd8780f R11: ffff8880161a9fc0 R12: ffff888012898040 [ 266.801621][ C3] R13: ffffc90000270a98 R14: ffff888015aa0640 R15: ffffc90000270828 [ 266.802155][ C3] FS: 00007f003e15a740(0000) GS:ffff88807d624000(0000) knlGS:0000000000000000 [ 266.802786][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.803238][ C3] CR2: 0000559d54a0d000 CR3: 000000001a18a006 CR4: 0000000000772ef0 [ 266.803775][ C3] PKRU: 55555554 [ 266.804038][ C3] Call Trace: [ 266.804299][ C3] [ 266.804477][ C3] ? __pfx_icmp_route_lookup.constprop.0 (net/ipv4/icmp.c:480) [ 266.804933][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 266.805277][ C3] ? __ip_options_echo (net/ipv4/ip_options.c:86) [ 266.805626][ C3] ? __icmp_send (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/ipv4/icmp.c:718) [ 266.805979][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 266.806324][ C3] __icmp_send (net/ipv4/icmp.c:746) [ 266.806688][ C3] ? __xfrm_route_forward (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/xfrm/xfrm_policy.c:3898) [ 266.807032][ C3] ? __pfx___icmp_send (net/ipv4/icmp.c:596) [ 266.807373][ C3] ? handle_bug (arch/x86/kernel/traps.c:338) [ 266.807731][ C3] ? exc_invalid_op (arch/x86/kernel/traps.c:392 (discriminator 1)) [ 266.808096][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 266.808442][ C3] ? ip_dst_mtu_maybe_forward.constprop.0 (./include/linux/rcupdate.h:873 ./include/net/ip.h:501) [ 266.808888][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 266.809240][ C3] ip_forward (net/ipv4/ip_forward.c:139) [ 266.809584][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:567) [ 266.809934][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 266.810277][ C3] __netif_receive_skb_one_core (net/core/dev.c:5979 (discriminator 4)) [ 266.810712][ C3] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5972) [ 266.811147][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 266.811485][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 266.811835][ C3] ? process_backlog (./include/linux/local_lock_internal.h:54 net/core/dev.c:6442) [ 266.812182][ C3] process_backlog (./include/linux/rcupdate.h:869 net/core/dev.c:6445) [ 266.812532][ C3] __napi_poll.constprop.0 (net/core/dev.c:7482) [ 266.812892][ C3] net_rx_action (net/core/dev.c:7546 net/core/dev.c:7673) [ 266.813237][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 266.813586][ C3] ? __pfx_net_rx_action (net/core/dev.c:7635) [ 266.813945][ C3] ? rcu_start_this_gp (kernel/rcu/tree.c:1047) [ 266.814290][ C3] ? trace_rcu_quiescent_state_report (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745 ./include/trace/events/rcu.h:368) [ 266.814727][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 266.815072][ C3] ? rcu_core (kernel/rcu/rcu.h:138 kernel/rcu/tree.c:222 kernel/rcu/tree.c:2819) [ 266.815331][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 266.815689][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 266.816031][ C3] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 266.816461][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 266.816825][ C3] handle_softirqs (kernel/softirq.c:579) [ 266.817177][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 266.817521][ C3] do_softirq (kernel/softirq.c:480 kernel/softirq.c:467) [ 266.817791][ C3] [ 266.817964][ C3] [ 266.818136][ C3] __local_bh_enable_ip (kernel/softirq.c:407) [ 266.818479][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:908 net/core/dev.c:4740) [ 266.818845][ C3] __dev_queue_xmit (net/core/dev.c:4741) [ 266.819190][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 266.819538][ C3] ? __pfx___dev_queue_xmit (net/core/dev.c:4621) [ 266.819896][ C3] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 266.820239][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 266.820581][ C3] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 ./include/net/neighbour.h:501) [ 266.820943][ C3] ip_finish_output2 (./include/net/neighbour.h:545 net/ipv4/ip_output.c:235) [ 266.821288][ C3] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) [ 266.821650][ C3] ? __ip_finish_output (net/ipv4/ip_output.c:256 net/ipv4/ip_output.c:308 net/ipv4/ip_output.c:295) [ 266.821997][ C3] __ip_queue_xmit (./include/net/dst.h:461 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:527) [ 266.822339][ C3] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1566 (discriminator 4)) [ 266.822698][ C3] __tcp_transmit_skb (net/ipv4/tcp_output.c:1625 (discriminator 4)) [ 266.823055][ C3] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1446) [ 266.823401][ C3] ? ktime_get (./include/linux/seqlock.h:74 kernel/time/timekeeping.c:776) [ 266.823763][ C3] tcp_write_xmit (net/ipv4/tcp_output.c:2984) [ 266.824125][ C3] ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:693) [ 266.824468][ C3] ? __pfx_tcp_write_xmit (net/ipv4/tcp_output.c:2888) [ 266.824824][ C3] ? skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 266.825171][ C3] ? __pfx_skb_do_copy_data_nocache (./include/net/sock.h:2242) [ 266.825604][ C3] __tcp_push_pending_frames (net/ipv4/tcp_output.c:3167) [ 266.825959][ C3] tcp_sendmsg_locked (net/ipv4/tcp.c:1358) [ 266.826620][ C3] ? __pfx_tcp_sendmsg_locked (net/ipv4/tcp.c:1061) [ 266.826979][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 266.827328][ C3] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 266.827683][ C3] tcp_sendmsg (net/ipv4/tcp.c:1396) [ 266.828187][ C3] sock_write_iter (net/socket.c:714 net/socket.c:729 net/socket.c:1179) [ 266.828528][ C3] ? __pfx___unix_dgram_recvmsg (net/unix/af_unix.c:2554) [ 266.828892][ C3] ? backing_file_read_iter (fs/backing-file.c:203) [ 266.829239][ C3] ? __pfx_sock_write_iter (net/socket.c:1163) [ 266.829850][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 266.830198][ C3] vfs_write (fs/read_write.c:593 fs/read_write.c:686) [ 266.830455][ C3] ? __pfx___sys_recvfrom (net/socket.c:2255) [ 266.830810][ C3] ? ksys_read (./include/linux/file.h:62 ./include/linux/file.h:80 ./include/linux/file.h:85 fs/read_write.c:706) [ 266.831394][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 266.831747][ C3] ? __pfx_vfs_write (fs/read_write.c:667) [ 266.832122][ C3] ksys_write (fs/read_write.c:738) [ 266.832386][ C3] ? __pfx_ksys_write (fs/read_write.c:728) [ 266.832990][ C3] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 266.833336][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 266.833767][ C3] RIP: 0033:0x7f003e2a7337 [ 266.834118][ C3] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24 All code ======== 0: 0f 00 (bad) 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b7 jmp 0xffffffffffffffc7 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 48 89 54 24 18 mov %rdx,0x18(%rsp) 3c: 48 rex.W 3d: 89 .byte 0x89 3e: 74 24 je 0x64 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 48 89 54 24 18 mov %rdx,0x18(%rsp) 12: 48 rex.W 13: 89 .byte 0x89 14: 74 24 je 0x3a [ 266.835615][ C3] RSP: 002b:00007fff55b8d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.836392][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f003e2a7337 [ 266.836914][ C3] RDX: 0000000000002000 RSI: 0000559d54a0c000 RDI: 0000000000000008 [ 266.837426][ C3] RBP: 0000559d54a0c000 R08: 0000000000002000 R09: 0000000000000000 [ 266.838203][ C3] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000008 Finger prints: __xfrm_route_forward:ip_forward:__netif_receive_skb_one_core:process_backlog:net_rx_action __icmp_send:ip_forward:__netif_receive_skb_one_core:process_backlog:net_rx_action ip_route_me_harder:nf_nat_ipv4_local_fn:nf_hook_slow:__ip_local_out:ip_push_pending_frames