====================================== | 0 | xx__-> [ 17.632248][ T232] ------------[ cut here ]------------ | [ 17.632927][ T232] WARNING: CPU: 2 PID: 232 at ./include/net/sch_generic.h:843 __dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) | [ 17.633556][ T232] Modules linked in: [ 17.634565][ T232] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 17.634987][ T232] RIP: 0010:__dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) [ 17.635358][ T232] Code: 7d 06 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 86 0d 00 00 66 83 7d 06 00 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 28 48 89 fa 48 All code ======== 0: 7d 06 jge 0x8 2: 48 89 fa mov %rdi,%rdx 5: 48 c1 ea 03 shr $0x3,%rdx 9: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx d: 48 89 f8 mov %rdi,%rax 10: 83 e0 07 and $0x7,%eax 13: 83 c0 01 add $0x1,%eax 16: 38 d0 cmp %dl,%al 18: 7c 08 jl 0x22 1a: 84 d2 test %dl,%dl 1c: 0f 85 86 0d 00 00 jne 0xda8 22: 66 83 7d 06 00 cmpw $0x0,0x6(%rbp) 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 3c: 48 89 fa mov %rdi,%rdx 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 12: 48 89 fa mov %rdi,%rdx 15: 48 rex.W [ 17.636547][ T232] RSP: 0018:ffffc90000b672e8 EFLAGS: 00010202 [ 17.636972][ T232] RAX: 0000000000000007 RBX: 0000000000000001 RCX: ffffffff8a3f4955 [ 17.637515][ T232] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888004f69306 [ 17.638022][ T232] RBP: ffff888004f69300 R08: ffff888009b7c118 R09: ffffed1001422e33 [ 17.638539][ T232] R10: ffff88800a11719f R11: ffffc90000b67000 R12: ffff888009b7c118 [ 17.639035][ T232] R13: ffff88800a117000 R14: ffff88800a117208 R15: ffff88800a117000 [ 17.639549][ T232] FS: 000000000f6173c0(0000) GS:ffff8880a971a000(0000) knlGS:0000000000000000 [ 17.640113][ T232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 17.640551][ T232] CR2: 00007ff59e3d8000 CR3: 000000000938b006 CR4: 0000000000772ef0 [ 17.641047][ T232] PKRU: 55555554 [ 17.641301][ T232] Call Trace: [ 17.641594][ T232] [ 17.641783][ T232] ? dev_get_stats (net/core/dev.c:4143) [ 17.642134][ T232] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 17.642500][ T232] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5831) [ 17.643034][ T232] __dev_queue_xmit (net/core/dev.c:4786) [ 17.643406][ T232] ? netdev_core_pick_tx (net/core/dev.c:4728) [ 17.643750][ T232] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.644093][ T232] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 17.644447][ T232] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 17.644800][ T232] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 17.645139][ T232] ip_finish_output2 (./include/net/neighbour.h:556 net/ipv4/ip_output.c:237) [ 17.645505][ T232] ? ip_skb_dst_mtu (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 ./include/net/ip.h:504 ./include/net/ip.h:518) [ 17.645842][ T232] ? ip_fragment.constprop.0 (net/ipv4/ip_output.c:201) [ 17.646170][ T232] ? ip_skb_dst_mtu (./include/net/ip.h:523) [ 17.646533][ T232] ? __ip_finish_output (./include/linux/skbuff.h:1724 ./include/linux/skbuff.h:5149 net/ipv4/ip_output.c:309) [ 17.646871][ T232] ip_output (./include/linux/netfilter.h:414 net/ipv4/ip_output.c:438) [ 17.647130][ T232] __ip_queue_xmit (./include/net/dst.h:464 net/ipv4/ip_output.c:131 net/ipv4/ip_output.c:534) [ 17.647484][ T232] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1585 (discriminator 4)) [ 17.647834][ T232] __tcp_transmit_skb (net/ipv4/tcp_output.c:1628) [ 17.648194][ T232] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.648558][ T232] ? __tcp_select_window (net/ipv4/tcp_output.c:1449) [ 17.648900][ T232] ? tcp_fastopen_no_cookie (./include/net/net_namespace.h:414 ./include/net/sock.h:695 net/ipv4/tcp_fastopen.c:342) [ 17.649297][ T232] tcp_send_syn_data (net/ipv4/tcp_output.c:1646 net/ipv4/tcp_output.c:4245) [ 17.649699][ T232] tcp_connect (net/ipv4/tcp_output.c:4336 (discriminator 2)) [ 17.650053][ T232] tcp_v4_connect (net/ipv4/tcp_ipv4.c:347) [ 17.650427][ T232] ? tcp_v4_conn_request (net/ipv4/tcp_ipv4.c:225) [ 17.650763][ T232] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/preempt.h:104 ./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 17.651179][ T232] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 17.651545][ T232] __inet_stream_connect (net/ipv4/af_inet.c:679) [ 17.651890][ T232] ? kasan_save_track (./arch/x86/include/asm/current.h:25 mm/kasan/common.c:69 mm/kasan/common.c:78) [ 17.652227][ T232] tcp_sendmsg_fastopen (net/ipv4/tcp.c:1069) [ 17.652596][ T232] tcp_sendmsg_locked (net/ipv4/tcp.c:1143) [ 17.652926][ T232] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 17.653258][ T232] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 17.653624][ T232] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 17.653959][ T232] ? tcp_sendmsg_fastopen (net/ipv4/tcp.c:1078) [ 17.654301][ T232] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.654668][ T232] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455) [ 17.655014][ T232] tcp_sendmsg (net/ipv4/tcp.c:1413) [ 17.655272][ T232] __sys_sendto (net/socket.c:727 net/socket.c:742 net/socket.c:2244) [ 17.655629][ T232] ? __ia32_sys_getpeername (net/socket.c:2211) [ 17.655963][ T232] ? move_addr_to_user (net/socket.c:2329) [ 17.656301][ T232] ? __fget_files (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 fs/file.c:1072) [ 17.656664][ T232] ? __fget_files (fs/file.c:1075) [ 17.657006][ T232] ? fput (./arch/x86/include/asm/preempt.h:104 ./include/linux/preempt.h:470 ./include/linux/file_ref.h:150 fs/file_table.c:544) [ 17.657281][ T232] ? __sys_setsockopt (./include/linux/file.h:63 ./include/linux/file.h:83 net/socket.c:2377) [ 17.657643][ T232] __x64_sys_sendto (net/socket.c:2247) [ 17.657984][ T232] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:124 arch/x86/entry/syscall_64.c:90) [ 17.658318][ T232] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 17.658681][ T232] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 17.659018][ T232] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 17.659444][ T232] RIP: 0033:0x492b56 [ 17.659726][ T232] Code: 4f 04 00 44 8b 4c 24 2c 4c 8b 44 24 20 41 89 c4 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 3a 44 89 e7 48 89 44 24 08 e8 b5 4f 04 00 48 All code ======== 0: 4f 04 00 rex.WRXB add $0x0,%al 3: 44 8b 4c 24 2c mov 0x2c(%rsp),%r9d 8: 4c 8b 44 24 20 mov 0x20(%rsp),%r8 d: 41 89 c4 mov %eax,%r12d 10: 44 8b 54 24 28 mov 0x28(%rsp),%r10d 15: 48 8b 54 24 18 mov 0x18(%rsp),%rdx 1a: b8 2c 00 00 00 mov $0x2c,%eax 1f: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 24: 8b 7c 24 08 mov 0x8(%rsp),%edi 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 3a ja 0x6c 32: 44 89 e7 mov %r12d,%edi 35: 48 89 44 24 08 mov %rax,0x8(%rsp) 3a: e8 b5 4f 04 00 call 0x44ff4 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 3a ja 0x42 8: 44 89 e7 mov %r12d,%edi b: 48 89 44 24 08 mov %rax,0x8(%rsp) 10: e8 b5 4f 04 00 call 0x44fca 15: 48 rex.W [ 17.660879][ T232] RSP: 002b:00007fffaa299840 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 17.661377][ T232] RAX: ffffffffffffffda RBX: 00007fffaa299ed0 RCX: 0000000000492b56 [ 17.661904][ T232] RDX: 00000000000001f4 RSI: 000000000f61f7f0 RDI: 0000000000000009 [ 17.662434][ T232] RBP: 00007fffaa299960 R08: 00007fffaa2998b0 R09: 0000000000000010 [ 17.662945][ T232] R10: 0000000024000000 R11: 0000000000000293 R12: 0000000000000000 Finger prints: __dev_xmit_skb:__dev_queue_xmit:ip_finish_output2:ip_output:__ip_queue_xmit