====================================== | 0 | xx__-> [ 2123.962066][ C2] ------------[ cut here ]------------ | [ 2123.962473][ C2] WARNING: ./include/linux/skbuff.h:3239 at ip_icmp_error_rfc4884+0x42a/0x730, CPU#2: icmp_rfc4884/20343 | [ 2123.963310][ C2] Modules linked in: netdevsim sch_etf sch_fq ipt_rpfilter xt_length act_ct nf_flow_table nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ipvtap ipvlan cls_matchall act_gact cls_flower sch_ingress bonding psample macsec vxlan ip6_gre ip_gre gre cls_u32 sch_htb xfrm_user xt_policy ipt_REJECT nf_reject_ipv4 nft_compat nf_tables [last unloaded: ila] [ 2123.964836][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2123.965063][ C2] RIP: 0010:ip_icmp_error_rfc4884 (./include/linux/skbuff.h:3239 (discriminator 3) net/ipv4/icmp.c:1584 (discriminator 3)) [ 2123.965310][ C2] Code: 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 c2 02 00 00 41 80 4a 02 01 48 8b ac 24 b8 00 00 00 e9 40 fd ff ff 90 <0f> 0b 90 e9 de fc ff ff 90 0f 0b 90 e9 78 fc ff ff 89 54 24 18 4c All code ======== 0: 03 0f add (%rdi),%ecx 2: b6 04 mov $0x4,%dh 4: 02 48 89 add -0x77(%rax),%cl 7: fa cli 8: 83 e2 07 and $0x7,%edx b: 38 d0 cmp %dl,%al d: 7f 08 jg 0x17 f: 84 c0 test %al,%al 11: 0f 85 c2 02 00 00 jne 0x2d9 17: 41 80 4a 02 01 orb $0x1,0x2(%r10) 1c: 48 8b ac 24 b8 00 00 mov 0xb8(%rsp),%rbp 23: 00 24: e9 40 fd ff ff jmp 0xfffffffffffffd69 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: e9 de fc ff ff jmp 0xfffffffffffffd10 32: 90 nop 33: 0f 0b ud2 35: 90 nop 36: e9 78 fc ff ff jmp 0xfffffffffffffcb3 3b: 89 54 24 18 mov %edx,0x18(%rsp) 3f: 4c rex.WR Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: e9 de fc ff ff jmp 0xfffffffffffffce6 8: 90 nop 9: 0f 0b ud2 b: 90 nop c: e9 78 fc ff ff jmp 0xfffffffffffffc89 11: 89 54 24 18 mov %edx,0x18(%rsp) 15: 4c rex.WR [ 2123.965869][ C2] RSP: 0018:ffa00000002287c8 EFLAGS: 00010282 [ 2123.966095][ C2] RAX: ffffffffffffffdc RBX: 000000000000005c RCX: dffffc0000000000 [ 2123.966361][ C2] RDX: 0000000000000008 RSI: 1fe2200001d99822 RDI: ff1100000eccc108 [ 2123.966795][ C2] RBP: ff110000057311e4 R08: ff1100000eccc040 R09: 1ff40000000450ff [ 2123.967057][ C2] R10: ff1100000eccc08c R11: ff1100000eccc110 R12: ff110000166c8900 [ 2123.967339][ C2] R13: ff1100000eccc08c R14: ff1100000eccc0f6 R15: ff1100000eccc110 [ 2123.967613][ C2] FS: 00007f5918699740(0000) GS:ff110000c37d4000(0000) knlGS:0000000000000000 [ 2123.967911][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2123.968139][ C2] CR2: 00007f59188012c0 CR3: 00000000157be004 CR4: 0000000000771ef0 [ 2123.968411][ C2] PKRU: 55555554 [ 2123.968582][ C2] Call Trace: [ 2123.968738][ C2] [ 2123.968857][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 2123.969049][ C2] ? __create_object (mm/kmemleak.c:786) [ 2123.969248][ C2] ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 24)) [ 2123.969440][ C2] ? icmp_rcv (net/ipv4/icmp.c:1580) [ 2123.969608][ C2] ? __copy_skb_header (./arch/x86/include/asm/atomic.h:79 (discriminator 2) ./include/linux/atomic/atomic-arch-fallback.h:2401 (discriminator 2) ./include/linux/atomic/atomic-instrumented.h:1476 (discriminator 2) ./include/linux/rcuref.h:87 (discriminator 2) ./include/net/dst.h:247 (discriminator 2) ./include/net/dst.h:261 (discriminator 2) ./include/net/dst.h:294 (discriminator 2) ./include/net/dst.h:299 (discriminator 2) net/core/skbuff.c:1553 (discriminator 2)) [ 2123.969798][ C2] ? __asan_memcpy (mm/kasan/shadow.c:105 (discriminator 3)) [ 2123.969990][ C2] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 ./include/linux/atomic/atomic-arch-fallback.h:992 ./include/linux/atomic/atomic-instrumented.h:436 net/core/skbuff.c:1624) [ 2123.970188][ C2] ip_icmp_error (./include/linux/skbuff.h:3092 net/ipv4/ip_sockglue.c:437) [ 2123.970382][ C2] udp_err (net/ipv4/udp.c:998) [ 2123.970557][ C2] icmp_unreach (net/ipv4/icmp.c:1196) [ 2123.970745][ C2] ? __skb_checksum_complete (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/linux/refcount.h:170 ./include/linux/skbuff.h:2112 net/core/skbuff.c:3785) [ 2123.970935][ C2] icmp_rcv (net/ipv4/icmp.c:1525 (discriminator 1)) [ 2123.971097][ C2] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:209) [ 2123.971294][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6671 (discriminator 2)) [ 2123.971487][ C2] ip_local_deliver_finish (./include/linux/rcupdate.h:867 net/ipv4/ip_input.c:242) [ 2123.971686][ C2] ip_local_deliver (net/ipv4/ip_input.c:259) [ 2123.971873][ C2] ? ip_local_deliver_finish (net/ipv4/ip_input.c:251) [ 2123.972058][ C2] ? ip_rcv_finish_core (./include/net/net_namespace.h:419 (discriminator 7) ./include/linux/netdevice.h:2747 (discriminator 7) net/ipv4/ip_input.c:414 (discriminator 7)) [ 2123.972250][ C2] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 2)) [ 2123.972439][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6671 (discriminator 2)) [ 2123.972636][ C2] ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612) [ 2123.972789][ C2] ? ip_local_deliver (net/ipv4/ip_input.c:605) [ 2123.972978][ C2] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 3) kernel/locking/lockdep.c:3821 (discriminator 3) kernel/locking/lockdep.c:3876 (discriminator 3)) [ 2123.973168][ C2] ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1)) [ 2123.973362][ C2] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 2123.973559][ C2] ? down_read_killable_nested (kernel/locking/rwsem.c:1298 (discriminator 1) kernel/locking/rwsem.c:1314 (discriminator 1) kernel/locking/rwsem.c:1714 (discriminator 1)) [ 2123.973779][ C2] __netif_receive_skb_one_core (net/core/dev.c:6202) [ 2123.973996][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2)) [ 2123.974188][ C2] ? __netif_receive_skb_list_core (net/core/dev.c:6202) [ 2123.974409][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 2123.974610][ C2] process_backlog (./include/linux/rcupdate.h:867 net/core/dev.c:6674) [ 2123.974799][ C2] __napi_poll (net/core/dev.c:7737) [ 2123.974957][ C2] net_rx_action (net/core/dev.c:7800 net/core/dev.c:7957) [ 2123.975147][ C2] ? __napi_poll (net/core/dev.c:7919) [ 2123.975349][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 2123.975549][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1)) [ 2123.975736][ C2] handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623) [ 2123.975929][ C2] ? _local_bh_enable (kernel/softirq.c:580) [ 2123.976119][ C2] ? _local_bh_enable (kernel/softirq.c:580) [ 2123.976315][ C2] do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19)) [ 2123.976466][ C2] [ 2123.976596][ C2] [ 2123.976712][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:909 (discriminator 2) net/core/dev.c:4905 (discriminator 2)) [ 2123.976900][ C2] __local_bh_enable_ip (kernel/softirq.c:450) [ 2123.977088][ C2] __dev_queue_xmit (net/core/dev.c:4906) [ 2123.977285][ C2] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 2123.977473][ C2] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 2123.977669][ C2] ? netdev_core_pick_tx (net/core/dev.c:4767) [ 2123.977857][ C2] ? __asan_memcpy (mm/kasan/shadow.c:105 (discriminator 3)) [ 2123.978044][ C2] ? eth_header (net/ethernet/eth.c:100) [ 2123.978240][ C2] ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3458 net/core/neighbour.c:1614) [ 2123.978470][ C2] ip_finish_output2 (./include/net/neighbour.h:556 (discriminator 3) net/ipv4/ip_output.c:237 (discriminator 3)) [ 2123.978670][ C2] ? ip_dst_mtu_maybe_forward (./include/net/ip.h:469) [ 2123.978860][ C2] ? ip4_dst_hoplimit (net/ipv4/ip_output.c:201) [ 2123.979047][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 2123.979243][ C2] ip_output (./include/linux/netfilter.h:307 net/ipv4/ip_output.c:438) [ 2123.979397][ C2] ? ip_finish_output (net/ipv4/ip_output.c:429) [ 2123.979596][ C2] ? __ip_make_skb (net/ipv4/ip_output.c:1389 net/ipv4/ip_output.c:1499) [ 2123.979788][ C2] ip_push_pending_frames (net/ipv4/ip_output.c:1509 net/ipv4/ip_output.c:1528) [ 2123.979974][ C2] raw_sendmsg (net/ipv4/raw.c:660) [ 2123.980162][ C2] ? filemap_map_pages (mm/filemap.c:3946 (discriminator 3)) [ 2123.980359][ C2] ? raw_send_hdrinc (net/ipv4/raw.c:484) [ 2123.980559][ C2] ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4040 (discriminator 4) kernel/rcu/tree.c:4032 (discriminator 4)) [ 2123.980782][ C2] ? filemap_map_folio_range (mm/filemap.c:3873) [ 2123.980972][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2)) [ 2123.981157][ C2] ? __might_fault (mm/memory.c:7230 (discriminator 6)) [ 2123.981353][ C2] ? __might_fault (mm/memory.c:7230 (discriminator 6)) [ 2123.981554][ C2] ? __might_fault (mm/memory.c:7230 (discriminator 6)) [ 2123.981741][ C2] __sys_sendto (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4) net/socket.c:2265 (discriminator 4)) [ 2123.981931][ C2] ? __ia32_sys_getpeername (net/socket.c:2232) [ 2123.982125][ C2] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1480 arch/x86/mm/fault.c:1527) [ 2123.982324][ C2] __x64_sys_sendto (net/socket.c:2272 (discriminator 1) net/socket.c:2268 (discriminator 1) net/socket.c:2268 (discriminator 1)) [ 2123.982527][ C2] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 24)) [ 2123.982747][ C2] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) [ 2123.982931][ C2] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:187 arch/x86/entry/syscall_64.c:89) [ 2123.983121][ C2] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 2123.983324][ C2] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:106 (discriminator 9)) [ 2123.983527][ C2] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 2123.983716][ C2] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 2123.983936][ C2] RIP: 0033:0x7f591870c22e [ 2123.984130][ C2] Code: 4d 89 d8 e8 94 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 94 bd 00 00 call 0xbd9c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 2123.984700][ C2] RSP: 002b:00007ffc96bd8760 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2123.984959][ C2] RAX: ffffffffffffffda RBX: 0000000000404ae0 RCX: 00007f591870c22e [ 2123.985221][ C2] RDX: 0000000000000070 RSI: 00007ffc96bd8850 RDI: 0000000000000006 [ 2123.985482][ C2] RBP: 00007ffc96bd8770 R08: 00007ffc96bd87f0 R09: 0000000000000010 [ 2123.985752][ C2] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000070 Finger prints: ip_icmp_error_rfc4884:ip_icmp_error:udp_err:icmp_unreach:icmp_rcv