====================================== | [ 20.013231][ T282] ip_local_port_range: prefer different parity for start/end values. | [ 22.529107][ T293] ------------[ cut here ]------------ | [ 22.529604][ T293] WARNING: CPU: 2 PID: 293 at ./include/linux/skbuff.h:1164 ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) | [ 22.530441][ T293] Modules linked in: nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_compat nf_tables veth [ 22.531838][ T293] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 22.532243][ T293] RIP: 0010:ip_route_me_harder (./include/linux/skbuff.h:1164 ./include/linux/skbuff.h:1178 net/ipv4/netfilter.c:68) [ 22.532669][ T293] Code: 31 db e9 9a f7 ff ff 80 3c 02 00 0f 85 ee 05 00 00 49 8b 46 58 48 89 c3 48 83 e3 fe a8 01 0f 85 f5 02 00 00 48 85 db 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c All code ======== 0: 31 db xor %ebx,%ebx 2: e9 9a f7 ff ff jmp 0xfffffffffffff7a1 7: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) b: 0f 85 ee 05 00 00 jne 0x5ff 11: 49 8b 46 58 mov 0x58(%r14),%rax 15: 48 89 c3 mov %rax,%rbx 18: 48 83 e3 fe and $0xfffffffffffffffe,%rbx 1c: a8 01 test $0x1,%al 1e: 0f 85 f5 02 00 00 jne 0x319 24: 48 85 db test %rbx,%rbx 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 4c 89 ea mov %r13,%rdx 3a: 48 c1 ea 03 shr $0x3,%rdx 3e: 80 .byte 0x80 3f: 3c .byte 0x3c Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 4c 89 ea mov %r13,%rdx 10: 48 c1 ea 03 shr $0x3,%rdx 14: 80 .byte 0x80 15: 3c .byte 0x3c [ 22.533808][ T293] RSP: 0018:ffffc900005cf738 EFLAGS: 00010286 [ 22.534235][ T293] RAX: ffff888009e407c0 RBX: ffff888009e407c0 RCX: 1ffff110013c80f8 [ 22.534720][ T293] RDX: 1ffff110011d0138 RSI: 0000000000000000 RDI: ffff888004cf10e0 [ 22.535200][ T293] RBP: ffff88800cae1bc0 R08: 1ffff920000b9ef9 R09: 0000000000000000 [ 22.535691][ T293] R10: ffffe8ffffd03aef R11: dffffc0000000000 R12: ffff88800c1b2740 [ 22.536168][ T293] R13: ffff888008e809c0 R14: ffff888008e80968 R15: ffff888008e809e9 [ 22.536653][ T293] FS: 00007ff1ec3cc740(0000) GS:ffff88807bba4000(0000) knlGS:0000000000000000 [ 22.537208][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.537607][ T293] CR2: 00007ff1ec549730 CR3: 000000000f7e9003 CR4: 0000000000772ef0 [ 22.538414][ T293] PKRU: 55555554 [ 22.538674][ T293] Call Trace: [ 22.538923][ T293] [ 22.539101][ T293] ? __pfx_ip_route_me_harder (net/ipv4/netfilter.c:22) [ 22.539436][ T293] ? nf_nat_manip_pkt (net/netfilter/nf_nat_proto.c:388) nf_nat [ 22.539848][ T293] ? __pfx_nf_nat_manip_pkt (net/netfilter/nf_nat_proto.c:379) nf_nat [ 22.540311][ T293] nf_nat_ipv4_local_fn (net/netfilter/nf_nat_proto.c:768 net/netfilter/nf_nat_proto.c:749) nf_nat [ 22.540733][ T293] ? ipv4_conntrack_defrag (./arch/x86/include/asm/bitops.h:206 (discriminator 3) ./arch/x86/include/asm/bitops.h:238 (discriminator 3) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 3) net/ipv4/netfilter/nf_defrag_ipv4.c:69 (discriminator 3)) nf_defrag_ipv4 [ 22.541132][ T293] ? __pfx_nf_nat_ipv4_local_fn (net/netfilter/nf_nat_proto.c:751) nf_nat [ 22.541528][ T293] nf_hook_slow (./include/linux/netfilter.h:157 net/netfilter/core.c:623) [ 22.541865][ T293] __ip_local_out (./include/linux/netfilter.h:272 net/ipv4/ip_output.c:118) [ 22.542188][ T293] ? __pfx___ip_local_out (net/ipv4/ip_output.c:101) [ 22.542510][ T293] ? __pfx_dst_output (./include/net/dst.h:460) [ 22.542845][ T293] __ip_queue_xmit (net/ipv4/ip_output.c:127 (discriminator 4) net/ipv4/ip_output.c:527 (discriminator 4)) [ 22.543174][ T293] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1566 (discriminator 4)) [ 22.543500][ T293] __tcp_transmit_skb (net/ipv4/tcp_output.c:1625 (discriminator 4)) [ 22.543841][ T293] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1446) [ 22.544175][ T293] tcp_connect (net/ipv4/tcp_output.c:1643 net/ipv4/tcp_output.c:4319) [ 22.544506][ T293] tcp_v4_connect (net/ipv4/tcp_ipv4.c:346) [ 22.544843][ T293] ? __pfx_tcp_v4_connect (net/ipv4/tcp_ipv4.c:224) [ 22.545163][ T293] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 22.545492][ T293] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 22.545830][ T293] __inet_stream_connect (net/ipv4/af_inet.c:677) [ 22.546151][ T293] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:412) [ 22.546477][ T293] ? __pfx_inet_stream_connect (net/ipv4/af_inet.c:744) [ 22.546806][ T293] inet_stream_connect (net/ipv4/af_inet.c:749) [ 22.547131][ T293] __sys_connect (net/socket.c:2086 net/socket.c:2105) [ 22.547454][ T293] ? __pfx___sys_connect (net/socket.c:2093) [ 22.547788][ T293] ? do_fcntl (fs/fcntl.c:478) [ 22.548040][ T293] ? __pfx_do_fcntl (fs/fcntl.c:448) [ 22.548362][ T293] ? fd_install (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcupdate.h:955 fs/file.c:661) [ 22.548709][ T293] ? __sys_socket (net/socket.c:503 net/socket.c:1740) [ 22.549028][ T293] ? __pfx___sys_socket (net/socket.c:1727) [ 22.549357][ T293] __x64_sys_connect (net/socket.c:2108) [ 22.549682][ T293] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 22.550008][ T293] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 22.550383][ T293] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 22.550790][ T293] RIP: 0033:0x7ff1ec52ad77 [ 22.551123][ T293] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89 All code ======== 0: 64 89 01 mov %eax,%fs:(%rcx) 3: 48 83 c8 ff or $0xffffffffffffffff,%rax 7: c3 ret 8: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) f: 00 00 00 12: 90 nop 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2a 00 00 00 mov $0x2a,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 18 sub $0x18,%rsp 37: 89 54 24 0c mov %edx,0xc(%rsp) 3b: 48 89 34 24 mov %rsi,(%rsp) 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 18 sub $0x18,%rsp d: 89 54 24 0c mov %edx,0xc(%rsp) 11: 48 89 34 24 mov %rsi,(%rsp) 15: 89 .byte 0x89 [ 22.552250][ T293] RSP: 002b:00007ffc6ff5ffb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 22.552747][ T293] RAX: ffffffffffffffda RBX: 000055be189cccf0 RCX: 00007ff1ec52ad77 [ 22.553228][ T293] RDX: 0000000000000010 RSI: 00007ffc6ff60930 RDI: 0000000000000007 [ 22.553716][ T293] RBP: 00007ffc6ff60930 R08: 00007ffc6ff5ffc0 R09: 0000000000000010 [ 22.554192][ T293] R10: 00000000000001bb R11: 0000000000000246 R12: 0000000000000010 Finger prints: ip_route_me_harder:nf_nat_ipv4_local_fn:nf_hook_slow:__ip_local_out:__ip_queue_xmit