====================================== | [ 305.467839] #PF: supervisor read access in kernel mode | [ 305.467880] #PF: error_code(0x0000) - not-present page | [ 305.467918] PGD 3c5a067 P4D 3c5a067 PUD 28dd067 PMD 0 | [ 305.467964] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI [ 305.468065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 305.468141] RIP: 0010:__inet_csk_reqsk_queue_drop (net/ipv4/inet_connection_sock.c:1042 net/ipv4/inet_connection_sock.c:1058) [ 305.468202] Code: 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 41 56 41 55 45 31 ed 41 54 55 48 89 f5 53 <48> 83 7e 70 00 89 d3 74 35 48 8b 46 30 49 89 fc 48 8b 90 40 03 00 All code ======== 0: 00 00 add %al,(%rax) 2: 00 0f add %cl,(%rdi) 4: 1f (bad) 5: 40 00 90 90 90 90 90 rex add %dl,-0x6f6f6f70(%rax) c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 1c: 41 56 push %r14 1e: 41 55 push %r13 20: 45 31 ed xor %r13d,%r13d 23: 41 54 push %r12 25: 55 push %rbp 26: 48 89 f5 mov %rsi,%rbp 29: 53 push %rbx 2a:* 48 83 7e 70 00 cmpq $0x0,0x70(%rsi) <-- trapping instruction 2f: 89 d3 mov %edx,%ebx 31: 74 35 je 0x68 33: 48 8b 46 30 mov 0x30(%rsi),%rax 37: 49 89 fc mov %rdi,%r12 3a: 48 rex.W 3b: 8b .byte 0x8b 3c: 90 nop 3d: 40 03 00 rex add (%rax),%eax Code starting with the faulting instruction =========================================== 0: 48 83 7e 70 00 cmpq $0x0,0x70(%rsi) 5: 89 d3 mov %edx,%ebx 7: 74 35 je 0x3e 9: 48 8b 46 30 mov 0x30(%rsi),%rax d: 49 89 fc mov %rdi,%r12 10: 48 rex.W 11: 8b .byte 0x8b 12: 90 nop 13: 40 03 00 rex add (%rax),%eax [ 305.468325] RSP: 0018:ffffa9b4800f8e68 EFLAGS: 00010246 [ 305.468363] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000140001500 [ 305.468417] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff9cdbc50aec00 [ 305.468484] RBP: 0000000000000000 R08: 0000000000000141 R09: ffff9cdbfec9d1e8 [ 305.468550] R10: 0000000000000141 R11: ffffa9b4800f8ff8 R12: 0000000000000000 [ 305.468608] R13: 0000000000000000 R14: dead000000000122 R15: ffff9cdbc50aec00 [ 305.468665] FS: 0000000000000000(0000) GS:ffff9cdbfec80000(0000) knlGS:0000000000000000 [ 305.468722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.468766] CR2: 0000000000000070 CR3: 0000000002922006 CR4: 0000000000772ef0 [ 305.468820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.468891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.468943] PKRU: 55555554 [ 305.468964] Call Trace: [ 305.468984] [ 305.469011] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) [ 305.469047] ? page_fault_oops (arch/x86/mm/fault.c:715) [ 305.469082] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) [ 305.469114] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 305.469149] ? __inet_csk_reqsk_queue_drop (net/ipv4/inet_connection_sock.c:1042 net/ipv4/inet_connection_sock.c:1058) [ 305.469186] reqsk_timer_handler (./include/net/request_sock.h:148 net/ipv4/inet_connection_sock.c:1194) [ 305.469225] ? __pfx_reqsk_timer_handler (net/ipv4/inet_connection_sock.c:1085) [ 305.469278] ? __pfx_reqsk_timer_handler (net/ipv4/inet_connection_sock.c:1085) [ 305.469318] call_timer_fn (kernel/time/timer.c:1794) [ 305.469353] __run_timer_base.part.0 (kernel/time/timer.c:1846 kernel/time/timer.c:2419 kernel/time/timer.c:2430) [ 305.469389] ? __pfx_tick_nohz_handler (kernel/time/tick-sched.c:285) [ 305.469427] ? __hrtimer_run_queues (kernel/time/hrtimer.c:1706 kernel/time/hrtimer.c:1755) [ 305.469466] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) [ 305.469509] ? ktime_get (kernel/time/timekeeping.c:195 (discriminator 3) kernel/time/timekeeping.c:395 (discriminator 3) kernel/time/timekeeping.c:403 (discriminator 3) kernel/time/timekeeping.c:850 (discriminator 3)) [ 305.469542] run_timer_softirq (kernel/time/timer.c:2437 kernel/time/timer.c:2449) [ 305.469572] handle_softirqs (kernel/softirq.c:554) [ 305.469607] irq_exit_rcu (kernel/softirq.c:589 kernel/softirq.c:428 kernel/softirq.c:637 kernel/softirq.c:649) [ 305.469650] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1037 arch/x86/kernel/apic/apic.c:1037) [ 305.469696] [ 305.469720] [ 305.469735] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 305.469776] RIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/kernel/process.c:743) [ 305.469808] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 09 28 00 fb f4 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 All code ======== 0: 4c 01 c7 add %r8,%rdi 3: 4c 29 c2 sub %r8,%rdx 6: e9 72 ff ff ff jmp 0xffffffffffffff7d b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d e3 09 28 00 verw 0x2809e3(%rip) # 0x280a0b 28: fb sti 29: f4 hlt 2a:* fa cli <-- trapping instruction 2b: c3 ret 2c: cc int3 2d: cc int3 2e: cc int3 2f: cc int3 30: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) 37: 00 00 00 00 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop Code starting with the faulting instruction =========================================== 0: fa cli 1: c3 ret 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: 66 66 2e 0f 1f 84 00 data16 cs nopw 0x0(%rax,%rax,1) d: 00 00 00 00 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop [ 305.469926] RSP: 0018:ffffa9b4800b3ee8 EFLAGS: 00000242 [ 305.469962] RAX: ffff9cdbfec80000 RBX: ffff9cdbc1300000 RCX: 0000000000000001 [ 305.470024] RDX: 0000000000000001 RSI: ffffffff8ca834ed RDI: 0000000000fd7144 [ 305.470076] RBP: 0000000000000001 R08: 0000000000fd7144 R09: 0000000000000001 [ 305.470128] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 305.470179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.470232] default_idle_call (./include/linux/cpuidle.h:144 kernel/sched/idle.c:118) [ 305.470267] do_idle (kernel/sched/idle.c:186 kernel/sched/idle.c:326) [ 305.470301] cpu_startup_entry (kernel/sched/idle.c:423 (discriminator 1)) [ 305.470331] start_secondary (arch/x86/kernel/smpboot.c:314) Finger prints: __inet_csk_reqsk_queue_drop:reqsk_timer_handler:call_timer_fn:run_timer_softirq:handle_softirqs