====================================== | 0 | xx__-> [ 15.371118][ T230] ------------[ cut here ]------------ | [ 15.371636][ T230] WARNING: CPU: 2 PID: 230 at ./include/net/sch_generic.h:843 __dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) | [ 15.372213][ T230] Modules linked in: [ 15.373223][ T230] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 15.373666][ T230] RIP: 0010:__dev_xmit_skb (./include/net/sch_generic.h:843 ./include/net/sch_generic.h:889 ./include/net/sch_generic.h:901 net/core/dev.c:4239) [ 15.374037][ T230] Code: 7d 06 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 86 0d 00 00 66 83 7d 06 00 74 04 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 28 48 89 fa 48 All code ======== 0: 7d 06 jge 0x8 2: 48 89 fa mov %rdi,%rdx 5: 48 c1 ea 03 shr $0x3,%rdx 9: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx d: 48 89 f8 mov %rdi,%rax 10: 83 e0 07 and $0x7,%eax 13: 83 c0 01 add $0x1,%eax 16: 38 d0 cmp %dl,%al 18: 7c 08 jl 0x22 1a: 84 d2 test %dl,%dl 1c: 0f 85 86 0d 00 00 jne 0xda8 22: 66 83 7d 06 00 cmpw $0x0,0x6(%rbp) 27: 74 04 je 0x2d 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 34: fc ff df 37: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 3c: 48 89 fa mov %rdi,%rdx 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax a: fc ff df d: 49 8d 7c 24 28 lea 0x28(%r12),%rdi 12: 48 89 fa mov %rdi,%rdx 15: 48 rex.W [ 15.375218][ T230] RSP: 0018:ffffc90000b475a8 EFLAGS: 00010202 [ 15.375665][ T230] RAX: 0000000000000007 RBX: 0000000000000001 RCX: ffffffffbb1f4955 [ 15.376168][ T230] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888011921306 [ 15.376706][ T230] RBP: ffff888011921300 R08: ffff888008b10118 R09: ffffed10020f76b3 [ 15.377205][ T230] R10: ffff8880107bb59f R11: ffffc90000b472c0 R12: ffff888008b10118 [ 15.377727][ T230] R13: ffff8880107bb400 R14: ffff8880107bb608 R15: ffff8880107bb400 [ 15.378228][ T230] FS: 0000000005cf63c0(0000) GS:ffff88807891a000(0000) knlGS:0000000000000000 [ 15.378828][ T230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 15.379250][ T230] CR2: 00007f021f9e4000 CR3: 0000000011e2d004 CR4: 0000000000772ef0 [ 15.379773][ T230] PKRU: 55555554 [ 15.380038][ T230] Call Trace: [ 15.380300][ T230] [ 15.380505][ T230] ? dev_get_stats (net/core/dev.c:4143) [ 15.380975][ T230] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 15.381322][ T230] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5831) [ 15.381691][ T230] __dev_queue_xmit (net/core/dev.c:4786) [ 15.382045][ T230] ? netdev_core_pick_tx (net/core/dev.c:4728) [ 15.382384][ T230] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 15.382751][ T230] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 15.383091][ T230] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 15.383429][ T230] ? neigh_connected_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:836 net/core/neighbour.c:1617) [ 15.383796][ T230] ip_finish_output2 (./include/net/neighbour.h:556 net/ipv4/ip_output.c:237) [ 15.384156][ T230] ? ip_skb_dst_mtu (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:897 ./include/net/ip.h:504 ./include/net/ip.h:518) [ 15.384508][ T230] ? ip_fragment.constprop.0 (net/ipv4/ip_output.c:201) [ 15.384888][ T230] ? ip_skb_dst_mtu (./include/net/ip.h:523) [ 15.385233][ T230] ? __ip_finish_output (./include/linux/skbuff.h:1724 ./include/linux/skbuff.h:5149 net/ipv4/ip_output.c:309) [ 15.385603][ T230] ip_output (./include/linux/netfilter.h:414 net/ipv4/ip_output.c:438) [ 15.385868][ T230] __ip_queue_xmit (./include/net/dst.h:464 net/ipv4/ip_output.c:131 net/ipv4/ip_output.c:534) [ 15.386205][ T230] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1585 (discriminator 4)) [ 15.386563][ T230] __tcp_transmit_skb (net/ipv4/tcp_output.c:1628) [ 15.386917][ T230] ? __tcp_select_window (net/ipv4/tcp_output.c:1449) [ 15.387256][ T230] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 15.387621][ T230] ? ktime_get (./include/linux/seqlock.h:74 kernel/time/timekeeping.c:824) [ 15.387969][ T230] tcp_write_xmit (net/ipv4/tcp_output.c:2999) [ 15.388323][ T230] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:387 net/core/skbuff.c:444) [ 15.388684][ T230] ? __alloc_skb (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 ./include/linux/refcount.h:134 net/core/skbuff.c:698) [ 15.389025][ T230] ? tcp_retrans_try_collapse (net/ipv4/tcp_output.c:2903) [ 15.389363][ T230] ? inet_sk_state_store (net/ipv4/af_inet.c:1376) [ 15.389725][ T230] ? tcp_set_state (net/ipv4/tcp.c:2947 (discriminator 53)) [ 15.390065][ T230] ? tcp_call_bpf.constprop.0.isra.0 (net/ipv4/tcp.c:2947) [ 15.390501][ T230] __tcp_push_pending_frames (net/ipv4/tcp_output.c:3182) [ 15.390851][ T230] __tcp_close (net/ipv4/tcp.c:3208) [ 15.391194][ T230] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455) [ 15.391551][ T230] tcp_close (net/ipv4/tcp.c:3300) [ 15.391814][ T230] inet_release (net/ipv4/af_inet.c:438) [ 15.392155][ T230] __sock_release (net/socket.c:663) [ 15.392513][ T230] sock_close (net/socket.c:1457) [ 15.392773][ T230] __fput (fs/file_table.c:468) [ 15.393058][ T230] fput_close_sync (fs/file_table.c:571) [ 15.393396][ T230] ? alloc_file_clone (fs/file_table.c:571) [ 15.393762][ T230] __x64_sys_close (fs/open.c:1592 fs/open.c:1574 fs/open.c:1574) [ 15.394111][ T230] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 15.394454][ T230] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 15.394888][ T230] RIP: 0033:0x4901eb [ 15.395163][ T230] Code: 03 00 00 00 0f 05 48 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 c3 78 04 00 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 21 79 04 00 8b 44 All code ======== 0: 03 00 add (%rax),%eax 2: 00 00 add %al,(%rax) 4: 0f 05 syscall 6: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax c: 77 41 ja 0x4f e: c3 ret f: 48 83 ec 18 sub $0x18,%rsp 13: 89 7c 24 0c mov %edi,0xc(%rsp) 17: e8 c3 78 04 00 call 0x478df 1c: 8b 7c 24 0c mov 0xc(%rsp),%edi 20: 41 89 c0 mov %eax,%r8d 23: b8 03 00 00 00 mov $0x3,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 35 ja 0x67 32: 44 89 c7 mov %r8d,%edi 35: 89 44 24 0c mov %eax,0xc(%rsp) 39: e8 21 79 04 00 call 0x4795f 3e: 8b .byte 0x8b 3f: 44 rex.R Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 35 ja 0x3d 8: 44 89 c7 mov %r8d,%edi b: 89 44 24 0c mov %eax,0xc(%rsp) f: e8 21 79 04 00 call 0x47935 14: 8b .byte 0x8b 15: 44 rex.R [ 15.396344][ T230] RSP: 002b:00007ffd9d200230 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 15.396862][ T230] RAX: ffffffffffffffda RBX: 00007ffd9d2007f0 RCX: 00000000004901eb [ 15.397363][ T230] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000000a [ 15.397889][ T230] RBP: 00007ffd9d200280 R08: 0000000000000000 R09: 0000000000000010 [ 15.398386][ T230] R10: 0000000000000001 R11: 0000000000000293 R12: 00007ffd9d200768 Finger prints: __dev_xmit_skb:__dev_queue_xmit:ip_finish_output2:ip_output:__ip_queue_xmit