======================================
| 0
| xx__-> [   15.869840][  T232] ------------[ cut here ]------------
| [   15.870310][  T232] WARNING: CPU: 0 PID: 232 at ./include/net/sch_generic.h:843 __dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239)
| [   15.870890][  T232] Modules linked in:
[   15.871873][  T232] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   15.872278][  T232] RIP: 0010:__dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239)
[   15.872708][  T232] Code: 7d 06 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 86 0d 00 00 66 83 7d 06 00 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 28 48 89 fa 48
All code
========
   0:	7d 06                	jge    0x8
   2:	48 89 fa             	mov    %rdi,%rdx
   5:	48 c1 ea 03          	shr    $0x3,%rdx
   9:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   d:	48 89 f8             	mov    %rdi,%rax
  10:	83 e0 07             	and    $0x7,%eax
  13:	83 c0 01             	add    $0x1,%eax
  16:	38 d0                	cmp    %dl,%al
  18:	7c 08                	jl     0x22
  1a:	84 d2                	test   %dl,%dl
  1c:	0f 85 86 0d 00 00    	jne    0xda8
  22:	66 83 7d 06 00       	cmpw   $0x0,0x6(%rbp)
  27:	74 04                	je     0x2d
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  34:	fc ff df 
  37:	49 8d 7c 24 28       	lea    0x28(%r12),%rdi
  3c:	48 89 fa             	mov    %rdi,%rdx
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
   a:	fc ff df 
   d:	49 8d 7c 24 28       	lea    0x28(%r12),%rdi
  12:	48 89 fa             	mov    %rdi,%rdx
  15:	48                   	rex.W
[   15.874087][  T232] RSP: 0018:ffffc90000b772e0 EFLAGS: 00010202
[   15.874767][  T232] RAX: 0000000000000007 RBX: 0000000000000001 RCX: ffffffff9abf4955
[   15.875540][  T232] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888005594886
[   15.876298][  T232] RBP: ffff888005594880 R08: ffff888009cb0118 R09: ffffed10018c1cb3
[   15.877068][  T232] R10: ffff88800c60e59f R11: ffffc90000b76ff8 R12: ffff888009cb0118
[   15.877840][  T232] R13: ffff88800c60e400 R14: ffff88800c60e608 R15: ffff88800c60e400
[   15.878605][  T232] FS:  000000001c3983c0(0000) GS:ffff88809321a000(0000) knlGS:0000000000000000
[   15.879467][  T232] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   15.879994][  T232] CR2: 00007f834a6d7000 CR3: 0000000009e82001 CR4: 0000000000772ef0
[   15.880566][  T232] PKRU: 55555554
[   15.880910][  T232] Call Trace:
[   15.881297][  T232]  <TASK>
[   15.881580][  T232]  ? dev_get_stats (net/core/dev.c:4143)
[   15.882296][  T232]  ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751)
[   15.882824][  T232]  ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5831)
[   15.883344][  T232]  __dev_queue_xmit (net/core/dev.c:4786)
[   15.883885][  T232]  ? netdev_core_pick_tx (net/core/dev.c:4728)
[   15.884377][  T232]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   15.884908][  T232]  ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617)
[   15.885410][  T232]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   15.885928][  T232]  ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617)
[   15.886452][  T232]  ip_finish_output2 (./include/net/neighbour.h:556 net/ipv4/ip_output.c:237)
[   15.886984][  T232]  ? ip_skb_dst_mtu (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 ./include/net/ip.h:504 ./include/net/ip.h:518)
[   15.887495][  T232]  ? ip_fragment.constprop.0 (net/ipv4/ip_output.c:201)
[   15.887994][  T232]  ? ip_skb_dst_mtu (./include/net/ip.h:523)
[   15.888514][  T232]  ? __ip_finish_output (./include/linux/skbuff.h:1724 ./include/linux/skbuff.h:5149 net/ipv4/ip_output.c:309)
[   15.889022][  T232]  ip_output (./include/linux/netfilter.h:414 net/ipv4/ip_output.c:438)
[   15.889395][  T232]  __ip_queue_xmit (./include/net/dst.h:464 net/ipv4/ip_output.c:131 net/ipv4/ip_output.c:534)
[   15.889908][  T232]  ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1585 (discriminator 4))
[   15.890371][  T232]  __tcp_transmit_skb (net/ipv4/tcp_output.c:1628)
[   15.890803][  T232]  ? __tcp_select_window (net/ipv4/tcp_output.c:1449)
[   15.891271][  T232]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   15.891758][  T232]  ? ktime_get (./include/linux/seqlock.h:74 kernel/time/timekeeping.c:824)
[   15.892222][  T232]  tcp_write_xmit (net/ipv4/tcp_output.c:2999)
[   15.892670][  T232]  ? policy_nodemask (mm/mempolicy.c:2373)
[   15.893001][  T232]  ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:698)
[   15.893321][  T232]  ? tcp_retrans_try_collapse (net/ipv4/tcp_output.c:2903)
[   15.893743][  T232]  ? skb_do_copy_data_nocache (./include/net/sock.h:2281)
[   15.894093][  T232]  ? trace_tcp_ao_handshake_failure (./include/net/sock.h:2275)
[   15.894503][  T232]  ? skb_page_frag_refill (net/core/sock.c:3146 net/core/sock.c:3130)
[   15.894837][  T232]  __tcp_push_pending_frames (net/ipv4/tcp_output.c:3182)
[   15.895161][  T232]  tcp_sendmsg_locked (net/ipv4/tcp.c:1375)
[   15.895503][  T232]  ? tcp_sendmsg_fastopen (net/ipv4/tcp.c:1078)
[   15.895830][  T232]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   15.896175][  T232]  ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455)
[   15.896585][  T232]  tcp_sendmsg (net/ipv4/tcp.c:1413)
[   15.896838][  T232]  sock_write_iter (net/socket.c:727 net/socket.c:742 net/socket.c:1195)
[   15.897161][  T232]  ? ____sys_recvmsg (net/socket.c:1176)
[   15.897489][  T232]  ? tcp_sock_set_maxseg (net/ipv4/tcp.c:3826)
[   15.897824][  T232]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   15.898168][  T232]  vfs_write (fs/read_write.c:594 fs/read_write.c:686)
[   15.898412][  T232]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   15.898742][  T232]  ? kernel_write (fs/read_write.c:667)
[   15.899084][  T232]  ? __fget_files (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 fs/file.c:1072)
[   15.899417][  T232]  ksys_write (fs/read_write.c:738)
[   15.899665][  T232]  ? fput (./arch/x86/include/asm/preempt.h:104 ./include/linux/preempt.h:470 ./include/linux/file_ref.h:150 fs/file_table.c:544)
[   15.899919][  T232]  ? __ia32_sys_read (fs/read_write.c:728)
[   15.900243][  T232]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   15.900576][  T232]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)
[   15.900979][  T232] RIP: 0033:0x49002f
[   15.901237][  T232] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 89 7a 04 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 dc 7a 04 00 48
All code
========
   0:	89 54 24 18          	mov    %edx,0x18(%rsp)
   4:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
   9:	89 7c 24 08          	mov    %edi,0x8(%rsp)
   d:	e8 89 7a 04 00       	call   0x47a9b
  12:	48 8b 54 24 18       	mov    0x18(%rsp),%rdx
  17:	48 8b 74 24 10       	mov    0x10(%rsp),%rsi
  1c:	41 89 c0             	mov    %eax,%r8d
  1f:	8b 7c 24 08          	mov    0x8(%rsp),%edi
  23:	b8 01 00 00 00       	mov    $0x1,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 31                	ja     0x63
  32:	44 89 c7             	mov    %r8d,%edi
  35:	48 89 44 24 08       	mov    %rax,0x8(%rsp)
  3a:	e8 dc 7a 04 00       	call   0x47b1b
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 31                	ja     0x39
   8:	44 89 c7             	mov    %r8d,%edi
   b:	48 89 44 24 08       	mov    %rax,0x8(%rsp)
  10:	e8 dc 7a 04 00       	call   0x47af1
  15:	48                   	rex.W
[   15.902406][  T232] RSP: 002b:00007fff12345480 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   15.902910][  T232] RAX: ffffffffffffffda RBX: 00007fff12345a70 RCX: 000000000049002f
[   15.903388][  T232] RDX: 0000000000000018 RSI: 000000001c3a02b0 RDI: 000000000000000a
[   15.903893][  T232] RBP: 00007fff12345500 R08: 0000000000000000 R09: 000000000001ad17
[   15.904380][  T232] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fff123459e8


Finger prints:
__dev_xmit_skb:__dev_queue_xmit:ip_finish_output2:ip_output:__ip_queue_xmit