====================================== | 0 | xx__-> [ 17.911009][ T237] ------------[ cut here ]------------ | [ 17.911516][ T237] WARNING: CPU: 2 PID: 237 at ./include/net/sch_generic.h:843 __dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) | [ 17.912103][ T237] Modules linked in: [ 17.913128][ T237] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 17.913566][ T237] RIP: 0010:__dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) [ 17.913937][ T237] Code: 7d 06 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 86 0d 00 00 66 83 7d 06 00 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 28 48 89 fa 48 All code ======== 0: 7d 06 jge 0x8 2: 48 89 fa mov %rdi,%rdx 5: 48 c1 ea 03 shr $0x3,%rdx 9: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx d: 48 89 f8 mov %rdi,%rax 10: 83 e0 07 and $0x7,%eax 13: 83 c0 01 add $0x1,%eax 16: 38 d0 cmp %dl,%al 18: 7c 08 jl 0x22 1a: 84 d2 test %dl,%dl 1c: 0f 85 86 0d 00 00 jne 0xda8 22: 66 83 7d 06 00 cmpw $0x0,0x6(%rbp) 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 3c: 48 89 fa mov %rdi,%rdx 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 12: 48 89 fa mov %rdi,%rdx 15: 48 rex.W [ 17.915169][ T237] RSP: 0018:ffffc90000ae7310 EFLAGS: 00010206 [ 17.915636][ T237] RAX: 0000000000000007 RBX: 0000000000000005 RCX: ffffffff9e1f4955 [ 17.916151][ T237] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888004decc06 [ 17.916671][ T237] RBP: ffff888004decc00 R08: ffff88800a6b8118 R09: ffffed1001345e33 [ 17.917179][ T237] R10: ffff888009a2f19f R11: ffffc90000ae7028 R12: ffff88800a6b8118 [ 17.917677][ T237] R13: ffff888009a2f000 R14: ffff888009a2f208 R15: ffff888009a2f000 [ 17.918199][ T237] FS: 00007f5338654640(0000) GS:ffff88809591a000(0000) knlGS:0000000000000000 [ 17.918815][ T237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 17.919239][ T237] CR2: 00007f0d37a1c000 CR3: 0000000004eab005 CR4: 0000000000772ef0 [ 17.919735][ T237] PKRU: 55555554 [ 17.920034][ T237] Call Trace: [ 17.920317][ T237] [ 17.920517][ T237] ? dev_get_stats (net/core/dev.c:4143) [ 17.920893][ T237] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 17.921435][ T237] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5831) [ 17.921834][ T237] __dev_queue_xmit (net/core/dev.c:4786) [ 17.922221][ T237] ? netdev_core_pick_tx (net/core/dev.c:4728) [ 17.922581][ T237] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.922976][ T237] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 17.923353][ T237] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 17.923710][ T237] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 17.924101][ T237] ip_finish_output2 (./include/net/neighbour.h:556 net/ipv4/ip_output.c:237) [ 17.924460][ T237] ? ip_skb_dst_mtu (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 ./include/net/ip.h:504 ./include/net/ip.h:518) [ 17.924833][ T237] ? ip_fragment.constprop.0 (net/ipv4/ip_output.c:201) [ 17.925169][ T237] ? __ip_finish_output (net/ipv4/ip_output.c:258 net/ipv4/ip_output.c:310) [ 17.925517][ T237] ip_output (./include/linux/netfilter.h:414 net/ipv4/ip_output.c:438) [ 17.925802][ T237] __ip_queue_xmit (./include/net/dst.h:464 net/ipv4/ip_output.c:131 net/ipv4/ip_output.c:534) [ 17.926153][ T237] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1585 (discriminator 4)) [ 17.926498][ T237] __tcp_transmit_skb (net/ipv4/tcp_output.c:1628) [ 17.926850][ T237] ? get_page (./arch/x86/include/asm/atomic.h:53 ./include/linux/atomic/atomic-arch-fallback.h:992 ./include/linux/atomic/atomic-instrumented.h:436 ./include/linux/page_ref.h:153 ./include/linux/page_ref.h:160 ./include/linux/mm.h:1387 ./include/linux/mm.h:1397) [ 17.927111][ T237] ? __tcp_select_window (net/ipv4/tcp_output.c:1449) [ 17.927494][ T237] tcp_write_xmit (net/ipv4/tcp_output.c:2999) [ 17.927858][ T237] ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:698) [ 17.928231][ T237] ? tcp_retrans_try_collapse (net/ipv4/tcp_output.c:2903) [ 17.928588][ T237] ? trace_tcp_ao_handshake_failure (./include/linux/cpumask.h:135 ./include/linux/cpumask.h:142 ./include/linux/cpumask.h:646 ./include/linux/cpumask.h:1205 ./include/trace/events/tcp.h:689 ./include/trace/events/tcp.h:689) [ 17.929048][ T237] ? __sk_mem_schedule (net/core/sock.c:3410) [ 17.929388][ T237] tcp_sendmsg_locked (net/ipv4/tcp.c:1355) [ 17.929817][ T237] ? tcp_sendmsg_fastopen (net/ipv4/tcp.c:1078) [ 17.930185][ T237] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.930559][ T237] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455) [ 17.930918][ T237] tcp_sendmsg (net/ipv4/tcp.c:1413) [ 17.931197][ T237] sock_write_iter (net/socket.c:727 net/socket.c:742 net/socket.c:1195) [ 17.931531][ T237] ? ____sys_recvmsg (net/socket.c:1176) [ 17.931937][ T237] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 17.932281][ T237] vfs_write (fs/read_write.c:594 fs/read_write.c:686) [ 17.932547][ T237] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.932904][ T237] ? kernel_write (fs/read_write.c:667) [ 17.933247][ T237] ? __fget_files (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 fs/file.c:1072) [ 17.933596][ T237] ksys_write (fs/read_write.c:738) [ 17.933885][ T237] ? __ia32_sys_read (fs/read_write.c:728) [ 17.934268][ T237] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 17.934607][ T237] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 17.935048][ T237] RIP: 0033:0x49002f [ 17.935356][ T237] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 89 7a 04 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 dc 7a 04 00 48 All code ======== 0: 89 54 24 18 mov %edx,0x18(%rsp) 4: 48 89 74 24 10 mov %rsi,0x10(%rsp) 9: 89 7c 24 08 mov %edi,0x8(%rsp) d: e8 89 7a 04 00 call 0x47a9b 12: 48 8b 54 24 18 mov 0x18(%rsp),%rdx 17: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 1c: 41 89 c0 mov %eax,%r8d 1f: 8b 7c 24 08 mov 0x8(%rsp),%edi 23: b8 01 00 00 00 mov $0x1,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 31 ja 0x63 32: 44 89 c7 mov %r8d,%edi 35: 48 89 44 24 08 mov %rax,0x8(%rsp) 3a: e8 dc 7a 04 00 call 0x47b1b 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 31 ja 0x39 8: 44 89 c7 mov %r8d,%edi b: 48 89 44 24 08 mov %rax,0x8(%rsp) 10: e8 dc 7a 04 00 call 0x47af1 15: 48 rex.W [ 17.936523][ T237] RSP: 002b:00007f5338654090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 17.937063][ T237] RAX: ffffffffffffffda RBX: 0000000007d7f500 RCX: 000000000049002f [ 17.937554][ T237] RDX: 000000000000ee48 RSI: 00007f5330000c50 RDI: 000000000000000a [ 17.938056][ T237] RBP: 00007f5338654110 R08: 0000000000000000 R09: 0000000000000081 [ 17.938560][ T237] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f5338654640 Finger prints: __dev_xmit_skb:__dev_queue_xmit:ip_finish_output2:ip_output:__ip_queue_xmit