====================================== | 0 | xx__-> [ 17.255940][ T230] ------------[ cut here ]------------ | [ 17.256693][ T230] WARNING: CPU: 0 PID: 230 at ./include/net/sch_generic.h:843 __dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) | [ 17.257911][ T230] Modules linked in: [ 17.259743][ T230] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 17.260516][ T230] RIP: 0010:__dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) [ 17.261171][ T230] Code: 7d 06 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 86 0d 00 00 66 83 7d 06 00 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 28 48 89 fa 48 All code ======== 0: 7d 06 jge 0x8 2: 48 89 fa mov %rdi,%rdx 5: 48 c1 ea 03 shr $0x3,%rdx 9: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx d: 48 89 f8 mov %rdi,%rax 10: 83 e0 07 and $0x7,%eax 13: 83 c0 01 add $0x1,%eax 16: 38 d0 cmp %dl,%al 18: 7c 08 jl 0x22 1a: 84 d2 test %dl,%dl 1c: 0f 85 86 0d 00 00 jne 0xda8 22: 66 83 7d 06 00 cmpw $0x0,0x6(%rbp) 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 3c: 48 89 fa mov %rdi,%rdx 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 12: 48 89 fa mov %rdi,%rdx 15: 48 rex.W [ 17.263392][ T230] RSP: 0018:ffffc90000b56df0 EFLAGS: 00010202 [ 17.264202][ T230] RAX: 0000000000000007 RBX: 0000000000000001 RCX: ffffffffb1bf4955 [ 17.265144][ T230] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880086d9686 [ 17.266013][ T230] RBP: ffff8880086d9680 R08: ffff888008a41540 R09: ffffed10016bab33 [ 17.266916][ T230] R10: ffff88800b5d599f R11: ffffc90000b56b08 R12: ffff888008a41540 [ 17.267894][ T230] R13: ffff88800b5d5800 R14: ffff88800b5d5a08 R15: ffff88800b5d5800 [ 17.268864][ T230] FS: 0000000032b3d3c0(0000) GS:ffff888081e1a000(0000) knlGS:0000000000000000 [ 17.269940][ T230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 17.270713][ T230] CR2: 00007efdf6ebe000 CR3: 000000000c0d4003 CR4: 0000000000772ef0 [ 17.271659][ T230] PKRU: 55555554 [ 17.271952][ T230] Call Trace: [ 17.272230][ T230] [ 17.272461][ T230] ? dev_get_stats (net/core/dev.c:4143) [ 17.272818][ T230] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 17.273205][ T230] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5831) [ 17.273605][ T230] __dev_queue_xmit (net/core/dev.c:4786) [ 17.273973][ T230] ? netdev_core_pick_tx (net/core/dev.c:4728) [ 17.274335][ T230] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.274692][ T230] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 17.275046][ T230] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 17.275421][ T230] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 17.275787][ T230] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 17.276158][ T230] ip_finish_output2 (./include/net/neighbour.h:556 net/ipv4/ip_output.c:237) [ 17.276531][ T230] ? ip_skb_dst_mtu (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 ./include/net/ip.h:504 ./include/net/ip.h:518) [ 17.276883][ T230] ? ip_fragment.constprop.0 (net/ipv4/ip_output.c:201) [ 17.277239][ T230] ? ip_skb_dst_mtu (./include/net/ip.h:523) [ 17.277610][ T230] ? __ip_finish_output (./include/linux/skbuff.h:1724 ./include/linux/skbuff.h:5149 net/ipv4/ip_output.c:309) [ 17.277982][ T230] ip_output (./include/linux/netfilter.h:414 net/ipv4/ip_output.c:438) [ 17.278270][ T230] __ip_queue_xmit (./include/net/dst.h:464 net/ipv4/ip_output.c:131 net/ipv4/ip_output.c:534) [ 17.278653][ T230] __tcp_transmit_skb (net/ipv4/tcp_output.c:1628) [ 17.279020][ T230] ? __tcp_select_window (net/ipv4/tcp_output.c:1449) [ 17.279392][ T230] ? napi_skb_cache_get (net/core/skbuff.c:647) [ 17.279757][ T230] ? __tcp_send_ack.part.0 (./include/linux/skbuff.h:1383 net/ipv4/tcp_output.c:4434) [ 17.280112][ T230] ? __tcp_ack_snd_check (./include/net/net_namespace.h:414 ./include/net/sock.h:695 ./include/net/inet_connection_sock.h:330 net/ipv4/tcp_input.c:341 net/ipv4/tcp_input.c:5910) [ 17.280642][ T230] tcp_rcv_established (net/ipv4/tcp_input.c:5976 net/ipv4/tcp_input.c:6467) [ 17.281008][ T230] ? tcp_check_space (net/ipv4/tcp_input.c:6276) [ 17.281398][ T230] ? ipv4_dst_check (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 net/ipv4/route.c:402 net/ipv4/route.c:1217) [ 17.281762][ T230] tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) [ 17.282122][ T230] tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2324) [ 17.282506][ T230] ? raw_v4_input (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 net/ipv4/raw.c:196) [ 17.282862][ T230] ? raw_v4_input (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 net/ipv4/raw.c:196) [ 17.283321][ T230] ? tcp_filter (net/ipv4/tcp_ipv4.c:2153) [ 17.283605][ T230] ? raw_v4_input (net/ipv4/raw.c:165) [ 17.283959][ T230] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 17.284359][ T230] ? raw_rcv (net/ipv4/raw.c:165) [ 17.284625][ T230] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870) [ 17.284983][ T230] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207) [ 17.285358][ T230] ip_local_deliver_finish.constprop.0 (./include/linux/rcupdate.h:895 net/ipv4/ip_input.c:242) [ 17.285838][ T230] ? ip_local_deliver (net/ipv4/ip_input.c:566) [ 17.286229][ T230] __netif_receive_skb_one_core (net/core/dev.c:6131) [ 17.286673][ T230] ? __netif_receive_skb_list_core (net/core/dev.c:6131) [ 17.287117][ T230] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 17.287621][ T230] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5831) [ 17.287964][ T230] ? netif_receive_skb_internal (./include/linux/rcupdate.h:331 (discriminator 16) ./include/linux/rcupdate.h:867 (discriminator 16) net/core/dev.c:6324 (discriminator 16)) [ 17.288462][ T230] netif_receive_skb_internal (net/core/dev.c:6337) [ 17.288813][ T230] ? __netif_receive_skb (net/core/dev.c:6316) [ 17.289181][ T230] ? _copy_from_iter (./arch/x86/include/asm/smap.h:29 ./arch/x86/include/asm/uaccess_64.h:134 ./arch/x86/include/asm/uaccess_64.h:141 lib/iov_iter.c:55 ./include/linux/iov_iter.h:52 ./include/linux/iov_iter.h:304 ./include/linux/iov_iter.h:330 lib/iov_iter.c:249 lib/iov_iter.c:260) [ 17.289559][ T230] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 17.289922][ T230] netif_receive_skb (net/core/dev.c:6396) [ 17.290310][ T230] tun_rx_batched.isra.0 (./include/linux/bottom_half.h:33 drivers/net/tun.c:1510) [ 17.290675][ T230] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 17.291035][ T230] ? tun_setup (drivers/net/tun.c:1474) [ 17.291450][ T230] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 17.291805][ T230] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5831) [ 17.292166][ T230] ? tun_get_user (./include/linux/rcupdate.h:331 ./include/linux/rcupdate.h:867 drivers/net/tun.c:1894) [ 17.292539][ T230] tun_get_user (drivers/net/tun.c:1953) [ 17.292893][ T230] ? orc_sort_cmp (arch/x86/kernel/unwind_orc.c:80 arch/x86/kernel/unwind_orc.c:272) [ 17.293279][ T230] ? tun_build_skb (drivers/net/tun.c:1696) [ 17.293638][ T230] ? ref_tracker_dir_print (lib/ref_tracker.c:256) [ 17.293992][ T230] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.294377][ T230] ? tun_get (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 drivers/net/tun.c:793) [ 17.294638][ T230] ? __lock_release (kernel/locking/lockdep.c:5536) [ 17.294985][ T230] ? tun_get (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 drivers/net/tun.c:793) [ 17.295280][ T230] tun_chr_write_iter (drivers/net/tun.c:800 drivers/net/tun.c:2001) [ 17.295655][ T230] do_iter_readv_writev (fs/read_write.c:828) [ 17.296011][ T230] ? ksys_lseek (fs/read_write.c:814) [ 17.296403][ T230] ? import_iovec (lib/iov_iter.c:1430) [ 17.296753][ T230] vfs_writev (fs/read_write.c:1057) [ 17.297031][ T230] ? vfs_iocb_iter_write (fs/read_write.c:1030) [ 17.297418][ T230] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 17.297788][ T230] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 17.298154][ T230] ? __lock_release (kernel/locking/lockdep.c:5536) [ 17.298537][ T230] ? __fget_files (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 fs/file.c:1072) [ 17.298887][ T230] ? __fget_files (fs/file.c:1075) [ 17.299251][ T230] ? do_writev (fs/read_write.c:1103) [ 17.299534][ T230] do_writev (fs/read_write.c:1103) [ 17.299823][ T230] ? vfs_writev (fs/read_write.c:1093) [ 17.300203][ T230] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 17.300586][ T230] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 17.301016][ T230] RIP: 0033:0x4909bd [ 17.301333][ T230] Code: 28 89 54 24 1c 48 89 74 24 10 89 7c 24 08 e8 fa 70 04 00 8b 54 24 1c 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 14 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 33 44 89 c7 48 89 44 24 08 e8 4e 71 04 00 48 All code ======== 0: 28 89 54 24 1c 48 sub %cl,0x481c2454(%rcx) 6: 89 74 24 10 mov %esi,0x10(%rsp) a: 89 7c 24 08 mov %edi,0x8(%rsp) e: e8 fa 70 04 00 call 0x4710d 13: 8b 54 24 1c mov 0x1c(%rsp),%edx 17: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 1c: 41 89 c0 mov %eax,%r8d 1f: 8b 7c 24 08 mov 0x8(%rsp),%edi 23: b8 14 00 00 00 mov $0x14,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 33 ja 0x65 32: 44 89 c7 mov %r8d,%edi 35: 48 89 44 24 08 mov %rax,0x8(%rsp) 3a: e8 4e 71 04 00 call 0x4718d 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 33 ja 0x3b 8: 44 89 c7 mov %r8d,%edi b: 48 89 44 24 08 mov %rax,0x8(%rsp) 10: e8 4e 71 04 00 call 0x47163 15: 48 rex.W [ 17.302625][ T230] RSP: 002b:00007ffe413d3900 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 17.303159][ T230] RAX: ffffffffffffffda RBX: 00007ffe413d3f90 RCX: 00000000004909bd [ 17.303705][ T230] RDX: 0000000000000002 RSI: 00007ffe413d3940 RDI: 0000000000000005 [ 17.304235][ T230] RBP: 00007ffe413d3970 R08: 0000000000000000 R09: 00007ffe413d39d0 [ 17.304788][ T230] R10: 7fffffffffffffff R11: 0000000000000293 R12: 00007ffe413d3f08 Finger prints: __dev_xmit_skb:__dev_queue_xmit:ip_finish_output2:ip_output:__ip_queue_xmit