======================================
| xx__-> [    9.428726][  T167] ------------[ cut here ]------------
| [    9.429599][  T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#3: unshare/167
| [    9.430034][  T167] Modules linked in:
| [    9.430627][  T167] Tainted: [W]=WARN
[    9.430730][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[    9.430900][  T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3))
[    9.431075][  T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff
All code
========
   0:	89 fa                	mov    %edi,%edx
   2:	48 c1 ea 03          	shr    $0x3,%rdx
   6:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   a:	48 89 f8             	mov    %rdi,%rax
   d:	83 e0 07             	and    $0x7,%eax
  10:	83 c0 03             	add    $0x3,%eax
  13:	38 d0                	cmp    %dl,%al
  15:	7c 04                	jl     0x1b
  17:	84 d2                	test   %dl,%dl
  19:	75 79                	jne    0x94
  1b:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
  20:	44 8b 48 08          	mov    0x8(%rax),%r9d
  24:	e9 42 ff ff ff       	jmp    0xffffffffffffff6b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	ba 02 00 00 00       	mov    $0x2,%edx
  32:	48 89 de             	mov    %rbx,%rsi
  35:	31 ff                	xor    %edi,%edi
  37:	e8 38 ff f0 ff       	call   0xfffffffffff0ff74
  3c:	b9                   	.byte 0xb9
  3d:	a6                   	cmpsb  (%rdi),(%rsi)
  3e:	ff                   	(bad)
  3f:	ff                   	.byte 0xff

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	ba 02 00 00 00       	mov    $0x2,%edx
   8:	48 89 de             	mov    %rbx,%rsi
   b:	31 ff                	xor    %edi,%edi
   d:	e8 38 ff f0 ff       	call   0xfffffffffff0ff4a
  12:	b9                   	.byte 0xb9
  13:	a6                   	cmpsb  (%rdi),(%rsi)
  14:	ff                   	(bad)
  15:	ff                   	.byte 0xff
[    9.431544][  T167] RSP: 0018:ffa0000000817ab0 EFLAGS: 00010286
[    9.431709][  T167] RAX: 00000000ffffffa6 RBX: ff1100000b5579c0 RCX: 1ff4000000102f1c
[    9.431909][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff1100000b557a70
[    9.432103][  T167] RBP: ff11000007cfc000 R08: 1fe22000016aaf4f R09: ff1100000c53d180
[    9.432304][  T167] R10: 0000000000000003 R11: 0000000000000001 R12: 00000000ffffffff
[    9.432494][  T167] R13: 0000000000000000 R14: 0000000000000000 R15: ff11000007cfc000
[    9.432688][  T167] FS:  00007f456c37a740(0000) GS:ff11000084d53000(0000) knlGS:0000000000000000
[    9.432921][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    9.433083][  T167] CR2: 000055605fc7e310 CR3: 000000000bef9006 CR4: 0000000000771ef0
[    9.433292][  T167] PKRU: 55555554
[    9.433391][  T167] Call Trace:
[    9.433488][  T167]  <TASK>
[    9.433556][  T167]  ? ip6_route_dev_notify (net/ipv6/route.c:6484)
[    9.433688][  T167]  rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551)
[    9.433818][  T167]  ? notifier_call_chain (kernel/notifier.c:85)
[    9.433955][  T167]  rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560)
[    9.434055][  T167]  register_netdevice (net/core/dev.c:11488)
[    9.434190][  T167]  ? unregister_netdevice_queue (./include/linux/list.h:162)
[    9.434362][  T167]  register_netdev (net/core/dev.c:11552)
[    9.434490][  T167]  loopback_net_init (drivers/net/loopback.c:218)
[    9.434629][  T167]  ops_init (net/core/net_namespace.c:137)
[    9.434729][  T167]  setup_net (net/core/net_namespace.c:446)
[    9.434827][  T167]  ? unregister_pernet_device (net/core/net_namespace.c:1503)
[    9.434962][  T167]  ? lockdep_init_map_type (kernel/locking/lockdep.c:4973)
[    9.435093][  T167]  ? mutex_init_lockdep (./include/linux/lockdep.h:135 ./include/linux/lockdep.h:142 kernel/locking/mutex.c:185)
[    9.435230][  T167]  copy_net_ns (net/core/net_namespace.c:579)
[    9.435361][  T167]  create_new_namespaces (kernel/nsproxy.c:132)
[    9.435493][  T167]  unshare_nsproxy_namespaces (kernel/nsproxy.c:234 (discriminator 4))
[    9.435623][  T167]  ksys_unshare (kernel/fork.c:3243)
[    9.435753][  T167]  ? walk_process_tree (kernel/fork.c:3036 (discriminator 19))
[    9.435893][  T167]  __x64_sys_unshare (kernel/fork.c:3317 kernel/fork.c:3315 kernel/fork.c:3315)
[    9.436021][  T167]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[    9.436149][  T167]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[    9.436286][  T167]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[    9.436430][  T167]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[    9.436559][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[    9.436718][  T167] RIP: 0033:0x7f456c475bcb
[    9.436859][  T167] Code: 73 01 c3 48 8b 0d 2d 82 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d fd 81 0f 00 f7 d8 64 89 01 48
All code
========
   0:	73 01                	jae    0x3
   2:	c3                   	ret
   3:	48 8b 0d 2d 82 0f 00 	mov    0xf822d(%rip),%rcx        # 0xf8237
   a:	f7 d8                	neg    %eax
   c:	64 89 01             	mov    %eax,%fs:(%rcx)
   f:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  13:	c3                   	ret
  14:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  1b:	00 00 00 
  1e:	90                   	nop
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 10 01 00 00       	mov    $0x110,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d fd 81 0f 00 	mov    0xf81fd(%rip),%rcx        # 0xf8237
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d fd 81 0f 00 	mov    0xf81fd(%rip),%rcx        # 0xf820d
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[    9.437321][  T167] RSP: 002b:00007ffcbda46a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[    9.437517][  T167] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f456c475bcb
[    9.437709][  T167] RDX: 0000000000000000 RSI: 00007ffcbda46770 RDI: 0000000040000000
[    9.437904][  T167] RBP: 00007ffcbda46d90 R08: 00007ffcbda46960 R09: 0000000000000000
[    9.438096][  T167] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000040000000
[    9.438295][  T167] R13: 0000000000000000 R14: 00000000ffffffff R15: 000055605fc81b68
| [    9.468018][  T167] ------------[ cut here ]------------
| [    9.468166][  T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#3: packetdrill/167
| [    9.468417][  T167] Modules linked in:
| [    9.469031][  T167] Tainted: [W]=WARN
[    9.469124][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[    9.469292][  T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3))
[    9.469530][  T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff
All code
========
   0:	89 fa                	mov    %edi,%edx
   2:	48 c1 ea 03          	shr    $0x3,%rdx
   6:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   a:	48 89 f8             	mov    %rdi,%rax
   d:	83 e0 07             	and    $0x7,%eax
  10:	83 c0 03             	add    $0x3,%eax
  13:	38 d0                	cmp    %dl,%al
  15:	7c 04                	jl     0x1b
  17:	84 d2                	test   %dl,%dl
  19:	75 79                	jne    0x94
  1b:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
  20:	44 8b 48 08          	mov    0x8(%rax),%r9d
  24:	e9 42 ff ff ff       	jmp    0xffffffffffffff6b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	ba 02 00 00 00       	mov    $0x2,%edx
  32:	48 89 de             	mov    %rbx,%rsi
  35:	31 ff                	xor    %edi,%edi
  37:	e8 38 ff f0 ff       	call   0xfffffffffff0ff74
  3c:	b9                   	.byte 0xb9
  3d:	a6                   	cmpsb  (%rdi),(%rsi)
  3e:	ff                   	(bad)
  3f:	ff                   	.byte 0xff

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	ba 02 00 00 00       	mov    $0x2,%edx
   8:	48 89 de             	mov    %rbx,%rsi
   b:	31 ff                	xor    %edi,%edi
   d:	e8 38 ff f0 ff       	call   0xfffffffffff0ff4a
  12:	b9                   	.byte 0xb9
  13:	a6                   	cmpsb  (%rdi),(%rsi)
  14:	ff                   	(bad)
  15:	ff                   	.byte 0xff
[    9.470006][  T167] RSP: 0018:ffa0000000817b58 EFLAGS: 00010286
[    9.470157][  T167] RAX: 00000000ffffffa6 RBX: ff11000008fc19c0 RCX: 1ff4000000102f31
[    9.470343][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000008fc1a70
[    9.470519][  T167] RBP: ff1100000e1fc000 R08: 1fe22000011f834f R09: ff1100000c53d158
[    9.470758][  T167] R10: 0000000000000003 R11: 0000000000000001 R12: 00000000ffffffff
[    9.471030][  T167] R13: 0000000000000000 R14: 0000000000000000 R15: ff1100000e1fc000
[    9.471307][  T167] FS:  0000000037900400(0000) GS:ff11000084d53000(0000) knlGS:0000000000000000
[    9.471611][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    9.471761][  T167] CR2: 00007fe59f964000 CR3: 00000000093f0001 CR4: 0000000000771ef0
[    9.471951][  T167] PKRU: 55555554
[    9.472040][  T167] Call Trace:
[    9.472131][  T167]  <TASK>
[    9.472194][  T167]  ? ip6_route_dev_notify (./include/net/net_namespace.h:419 (discriminator 1) ./include/linux/netdevice.h:2776 (discriminator 1) net/ipv6/route.c:6476 (discriminator 1))
[    9.472324][  T167]  rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551)
[    9.472441][  T167]  ? notifier_call_chain (kernel/notifier.c:85)
[    9.472564][  T167]  rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560)
[    9.472656][  T167]  register_netdevice (net/core/dev.c:11488)
[    9.472781][  T167]  ? unregister_netdevice_queue (./include/linux/list.h:162)
[    9.472940][  T167]  ? alloc_netdev_mqs (net/core/dev.c:12133)
[    9.473063][  T167]  tun_set_iff.constprop.0 (drivers/net/tun.c:2876)
[    9.473186][  T167]  ? tun_attach.isra.0 (./include/linux/ptr_ring.h:601)
[    9.473311][  T167]  ? tun_get (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) drivers/net/tun.c:803 (discriminator 2))
[    9.473406][  T167]  __tun_chr_ioctl (drivers/net/tun.c:3157)
[    9.473524][  T167]  ? build_open_flags (fs/open.c:1212)
[    9.473643][  T167]  ? tun_chr_read_iter (drivers/net/tun.c:2271 (discriminator 1))
[    9.473761][  T167]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[    9.473889][  T167]  ? __x64_sys_openat (fs/open.c:1370 fs/open.c:1386 fs/open.c:1381 fs/open.c:1381)
[    9.474005][  T167]  ? fput_close_sync (fs/file_table.c:615)
[    9.474124][  T167]  ? __ia32_sys_open (fs/open.c:1374)
[    9.474248][  T167]  __x64_sys_ioctl (fs/ioctl.c:51 fs/ioctl.c:597 fs/ioctl.c:583 fs/ioctl.c:583)
[    9.474369][  T167]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[    9.474488][  T167]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[    9.474609][  T167]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[    9.474726][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[    9.474879][  T167] RIP: 0033:0x47cc8d
[    9.474976][  T167] Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00
All code
========
   0:	04 25                	add    $0x25,%al
   2:	28 00                	sub    %al,(%rax)
   4:	00 00                	add    %al,(%rax)
   6:	48 89 45 c8          	mov    %rax,-0x38(%rbp)
   a:	31 c0                	xor    %eax,%eax
   c:	48 8d 45 10          	lea    0x10(%rbp),%rax
  10:	c7 45 b0 10 00 00 00 	movl   $0x10,-0x50(%rbp)
  17:	48 89 45 b8          	mov    %rax,-0x48(%rbp)
  1b:	48 8d 45 d0          	lea    -0x30(%rbp),%rax
  1f:	48 89 45 c0          	mov    %rax,-0x40(%rbp)
  23:	b8 10 00 00 00       	mov    $0x10,%eax
  28:	0f 05                	syscall
  2a:*	89 c2                	mov    %eax,%edx		<-- trapping instruction
  2c:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
  31:	77 1a                	ja     0x4d
  33:	48 8b 45 c8          	mov    -0x38(%rbp),%rax
  37:	64 48 2b 04 25 28 00 	sub    %fs:0x28,%rax
  3e:	00 00 

Code starting with the faulting instruction
===========================================
   0:	89 c2                	mov    %eax,%edx
   2:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
   7:	77 1a                	ja     0x23
   9:	48 8b 45 c8          	mov    -0x38(%rbp),%rax
   d:	64 48 2b 04 25 28 00 	sub    %fs:0x28,%rax
  14:	00 00 
[    9.475403][  T167] RSP: 002b:00007ffe94f5a540 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[    9.475586][  T167] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000047cc8d
[    9.475774][  T167] RDX: 00007ffe94f5a5c0 RSI: 00000000400454ca RDI: 0000000000000005
[    9.475962][  T167] RBP: 00007ffe94f5a590 R08: 0000000000000000 R09: 0000000000000000
[    9.476139][  T167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe94f5aa98
[    9.476321][  T167] R13: 00007ffe94f5ab20 R14: 0000000000000002 R15: 0000000000543540
| [    9.478110][  T167] ------------[ cut here ]------------
| [    9.478240][  T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#3: packetdrill/167
| [    9.478475][  T167] Modules linked in:
| [    9.478841][  T167] Tainted: [W]=WARN
[    9.478937][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[    9.479082][  T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3))
[    9.479243][  T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff
All code
========
   0:	89 fa                	mov    %edi,%edx
   2:	48 c1 ea 03          	shr    $0x3,%rdx
   6:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   a:	48 89 f8             	mov    %rdi,%rax
   d:	83 e0 07             	and    $0x7,%eax
  10:	83 c0 03             	add    $0x3,%eax
  13:	38 d0                	cmp    %dl,%al
  15:	7c 04                	jl     0x1b
  17:	84 d2                	test   %dl,%dl
  19:	75 79                	jne    0x94
  1b:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
  20:	44 8b 48 08          	mov    0x8(%rax),%r9d
  24:	e9 42 ff ff ff       	jmp    0xffffffffffffff6b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	ba 02 00 00 00       	mov    $0x2,%edx
  32:	48 89 de             	mov    %rbx,%rsi
  35:	31 ff                	xor    %edi,%edi
  37:	e8 38 ff f0 ff       	call   0xfffffffffff0ff74
  3c:	b9                   	.byte 0xb9
  3d:	a6                   	cmpsb  (%rdi),(%rsi)
  3e:	ff                   	(bad)
  3f:	ff                   	.byte 0xff

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	ba 02 00 00 00       	mov    $0x2,%edx
   8:	48 89 de             	mov    %rbx,%rsi
   b:	31 ff                	xor    %edi,%edi
   d:	e8 38 ff f0 ff       	call   0xfffffffffff0ff4a
  12:	b9                   	.byte 0xb9
  13:	a6                   	cmpsb  (%rdi),(%rsi)
  14:	ff                   	(bad)
  15:	ff                   	.byte 0xff
[    9.479662][  T167] RSP: 0018:ffa0000000817c58 EFLAGS: 00010286
[    9.479808][  T167] RAX: 00000000ffffffa6 RBX: ff11000008fc0040 RCX: 1ff4000000102f51
[    9.479991][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000008fc00f0
[    9.480166][  T167] RBP: ff1100000e1fc000 R08: 1fe22000011f801f R09: ff1100000c53d158
[    9.480344][  T167] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000
[    9.480519][  T167] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000003
[    9.480694][  T167] FS:  0000000037900400(0000) GS:ff11000084d53000(0000) knlGS:0000000000000000
[    9.480905][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    9.481052][  T167] CR2: 00007fe59f964000 CR3: 00000000093f0001 CR4: 0000000000771ef0
[    9.481236][  T167] PKRU: 55555554
[    9.481323][  T167] Call Trace:
[    9.481411][  T167]  <TASK>
[    9.481476][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[    9.481600][  T167]  rtnetlink_event (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4541 net/core/rtnetlink.c:7121)
[    9.481718][  T167]  notifier_call_chain (kernel/notifier.c:85)
[    9.481837][  T167]  netdev_update_features (net/core/dev.c:2287 net/core/dev.c:2301 net/core/dev.c:1590 net/core/dev.c:11099 net/core/dev.c:11096)
[    9.481959][  T167]  ? netdev_sync_lower_features (net/core/dev.c:10883)
[    9.482106][  T167]  __tun_chr_ioctl (drivers/net/tun.c:2963 drivers/net/tun.c:3285)
[    9.482229][  T167]  ? tun_chr_read_iter (drivers/net/tun.c:2271 (discriminator 1))
[    9.482348][  T167]  ? fd_install (./include/linux/rcupdate.h:963 (discriminator 1) fs/file.c:699 (discriminator 1))
[    9.482468][  T167]  ? update_socket_protocol+0x10/0x10
[    9.482588][  T167]  ? alloc_file_clone (fs/file_table.c:477)
[    9.482707][  T167]  __x64_sys_ioctl (fs/ioctl.c:51 fs/ioctl.c:597 fs/ioctl.c:583 fs/ioctl.c:583)
[    9.482826][  T167]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[    9.482947][  T167]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[    9.483064][  T167]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[    9.483182][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[    9.483331][  T167] RIP: 0033:0x47cc8d
[    9.483425][  T167] Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00
All code
========
   0:	04 25                	add    $0x25,%al
   2:	28 00                	sub    %al,(%rax)
   4:	00 00                	add    %al,(%rax)
   6:	48 89 45 c8          	mov    %rax,-0x38(%rbp)
   a:	31 c0                	xor    %eax,%eax
   c:	48 8d 45 10          	lea    0x10(%rbp),%rax
  10:	c7 45 b0 10 00 00 00 	movl   $0x10,-0x50(%rbp)
  17:	48 89 45 b8          	mov    %rax,-0x48(%rbp)
  1b:	48 8d 45 d0          	lea    -0x30(%rbp),%rax
  1f:	48 89 45 c0          	mov    %rax,-0x40(%rbp)
  23:	b8 10 00 00 00       	mov    $0x10,%eax
  28:	0f 05                	syscall
  2a:*	89 c2                	mov    %eax,%edx		<-- trapping instruction
  2c:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
  31:	77 1a                	ja     0x4d
  33:	48 8b 45 c8          	mov    -0x38(%rbp),%rax
  37:	64 48 2b 04 25 28 00 	sub    %fs:0x28,%rax
  3e:	00 00 

Code starting with the faulting instruction
===========================================
   0:	89 c2                	mov    %eax,%edx
   2:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
   7:	77 1a                	ja     0x23
   9:	48 8b 45 c8          	mov    -0x38(%rbp),%rax
   d:	64 48 2b 04 25 28 00 	sub    %fs:0x28,%rax
  14:	00 00 
[    9.483840][  T167] RSP: 002b:00007ffe94f5a580 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[    9.484022][  T167] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000047cc8d
[    9.484253][  T167] RDX: 000000000000000f RSI: 00000000400454d0 RDI: 0000000000000005
[    9.484504][  T167] RBP: 00007ffe94f5a5d0 R08: 0000000000000005 R09: 0000000000001ff0
[    9.484697][  T167] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffe94f5aa98
[    9.484881][  T167] R13: 00007ffe94f5ab20 R14: 0000000000000002 R15: 0000000000543540
| [    9.486565][  T167] ------------[ cut here ]------------
| [    9.486689][  T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#3: packetdrill/167
| [    9.486995][  T167] Modules linked in:
| [    9.487612][  T167] Tainted: [W]=WARN
[    9.487763][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[    9.488016][  T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3))
[    9.488276][  T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff
All code
========
   0:	89 fa                	mov    %edi,%edx
   2:	48 c1 ea 03          	shr    $0x3,%rdx
   6:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   a:	48 89 f8             	mov    %rdi,%rax
   d:	83 e0 07             	and    $0x7,%eax
  10:	83 c0 03             	add    $0x3,%eax
  13:	38 d0                	cmp    %dl,%al
  15:	7c 04                	jl     0x1b
  17:	84 d2                	test   %dl,%dl
  19:	75 79                	jne    0x94
  1b:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
  20:	44 8b 48 08          	mov    0x8(%rax),%r9d
  24:	e9 42 ff ff ff       	jmp    0xffffffffffffff6b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	ba 02 00 00 00       	mov    $0x2,%edx
  32:	48 89 de             	mov    %rbx,%rsi
  35:	31 ff                	xor    %edi,%edi
  37:	e8 38 ff f0 ff       	call   0xfffffffffff0ff74
  3c:	b9                   	.byte 0xb9
  3d:	a6                   	cmpsb  (%rdi),(%rsi)
  3e:	ff                   	(bad)
  3f:	ff                   	.byte 0xff

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	ba 02 00 00 00       	mov    $0x2,%edx
   8:	48 89 de             	mov    %rbx,%rsi
   b:	31 ff                	xor    %edi,%edi
   d:	e8 38 ff f0 ff       	call   0xfffffffffff0ff4a
  12:	b9                   	.byte 0xb9
  13:	a6                   	cmpsb  (%rdi),(%rsi)
  14:	ff                   	(bad)
  15:	ff                   	.byte 0xff
[    9.488980][  T167] RSP: 0018:ffa0000000817850 EFLAGS: 00010286
[    9.489229][  T167] RAX: 00000000ffffffa6 RBX: ff11000008fc0340 RCX: 1ff4000000102ed0
[    9.489520][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000008fc03f0
[    9.489813][  T167] RBP: ff1100000e1fc000 R08: 1fe22000011f807f R09: ff1100000c53d158
[    9.490110][  T167] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000001
[    9.490408][  T167] R13: 0000000000000000 R14: 0000000000000000 R15: ff110000057d8900
[    9.490703][  T167] FS:  0000000037900400(0000) GS:ff11000084d53000(0000) knlGS:0000000000000000
[    9.491052][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    9.491307][  T167] CR2: 00007fe59f964000 CR3: 00000000093f0001 CR4: 0000000000771ef0
[    9.491600][  T167] PKRU: 55555554
[    9.491747][  T167] Call Trace:
[    9.491900][  T167]  <TASK>
[    9.492003][  T167]  rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551)
[    9.492203][  T167]  rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560)
[    9.492353][  T167]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[    9.492550][  T167]  __dev_notify_flags (net/core/dev.c:9787)
[    9.492749][  T167]  ? netif_change_name (net/core/dev.c:1495)
[    9.492953][  T167]  ? __dev_change_flags (net/core/dev.c:9752)
[    9.493151][  T167]  ? netif_set_allmulti (./include/net/netdev_lock.h:30 (discriminator 1))
[    9.493354][  T167]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[    9.493553][  T167]  netif_change_flags (net/core/dev.c:9820)
[    9.493749][  T167]  ? cap_capable (./include/trace/events/capability.h:26 (discriminator 22) security/commoncap.c:130 (discriminator 22))
[    9.493957][  T167]  dev_change_flags (net/core/dev_api.c:68)
[    9.494155][  T167]  devinet_ioctl (net/ipv4/devinet.c:1199)
[    9.494362][  T167]  ? inet_ifa_byprefix (net/ipv4/devinet.c:619 (discriminator 9))
[    9.494559][  T167]  ? _copy_from_user (./include/linux/instrumented.h:146 ./include/linux/uaccess.h:184 lib/usercopy.c:18)
[    9.494760][  T167]  inet_ioctl (net/ipv4/af_inet.c:1011)
[    9.494917][  T167]  ? inet_dgram_connect (net/ipv4/af_inet.c:589)
[    9.495115][  T167]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[    9.495330][  T167]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[    9.495521][  T167]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[    9.495673][  T167]  sock_do_ioctl (net/socket.c:1313)
[    9.495801][  T167]  ? __sock_recv_cmsgs (./include/net/sock.h:2867)
[    9.495937][  T167]  ? ioctl_file_clone (fs/ioctl.c:244)
[    9.496071][  T167]  sock_ioctl (net/socket.c:1434)
[    9.496167][  T167]  ? br_ioctl_call (net/socket.c:1279)
[    9.496302][  T167]  ? fd_install (./include/linux/rcupdate.h:963 (discriminator 1) fs/file.c:699 (discriminator 1))
[    9.496430][  T167]  ? update_socket_protocol+0x10/0x10
[    9.496558][  T167]  ? alloc_file_clone (fs/file_table.c:477)
[    9.496687][  T167]  __x64_sys_ioctl (fs/ioctl.c:51 fs/ioctl.c:597 fs/ioctl.c:583 fs/ioctl.c:583)
[    9.496814][  T167]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[    9.496947][  T167]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[    9.497075][  T167]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[    9.497202][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[    9.497365][  T167] RIP: 0033:0x47cc8d
[    9.497466][  T167] Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00
All code
========
   0:	04 25                	add    $0x25,%al
   2:	28 00                	sub    %al,(%rax)
   4:	00 00                	add    %al,(%rax)
   6:	48 89 45 c8          	mov    %rax,-0x38(%rbp)
   a:	31 c0                	xor    %eax,%eax
   c:	48 8d 45 10          	lea    0x10(%rbp),%rax
  10:	c7 45 b0 10 00 00 00 	movl   $0x10,-0x50(%rbp)
  17:	48 89 45 b8          	mov    %rax,-0x48(%rbp)
  1b:	48 8d 45 d0          	lea    -0x30(%rbp),%rax
  1f:	48 89 45 c0          	mov    %rax,-0x40(%rbp)
  23:	b8 10 00 00 00       	mov    $0x10,%eax
  28:	0f 05                	syscall
  2a:*	89 c2                	mov    %eax,%edx		<-- trapping instruction
  2c:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
  31:	77 1a                	ja     0x4d
  33:	48 8b 45 c8          	mov    -0x38(%rbp),%rax
  37:	64 48 2b 04 25 28 00 	sub    %fs:0x28,%rax
  3e:	00 00 

Code starting with the faulting instruction
===========================================
   0:	89 c2                	mov    %eax,%edx
   2:	3d 00 f0 ff ff       	cmp    $0xfffff000,%eax
   7:	77 1a                	ja     0x23
   9:	48 8b 45 c8          	mov    -0x38(%rbp),%rax
   d:	64 48 2b 04 25 28 00 	sub    %fs:0x28,%rax
  14:	00 00 
[    9.497915][  T167] RSP: 002b:00007ffe94f5a560 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[    9.498103][  T167] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000047cc8d
[    9.498294][  T167] RDX: 00007ffe94f5a5d0 RSI: 0000000000008914 RDI: 0000000000000006
[    9.498484][  T167] RBP: 00007ffe94f5a5b0 R08: 0000000000000005 R09: 0000000000001ff0
[    9.498669][  T167] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffe94f5aa98
[    9.498859][  T167] R13: 00007ffe94f5ab20 R14: 0000000000000002 R15: 0000000000543540
| [   99.275653][  T167] ------------[ cut here ]------------
| [   99.275872][  T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#3: packetdrill/167
| [   99.276145][  T167] Modules linked in:
| [   99.276572][  T167] Tainted: [W]=WARN
[   99.276676][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   99.276842][  T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3))
[   99.277023][  T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff
All code
========
   0:	89 fa                	mov    %edi,%edx
   2:	48 c1 ea 03          	shr    $0x3,%rdx
   6:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   a:	48 89 f8             	mov    %rdi,%rax
   d:	83 e0 07             	and    $0x7,%eax
  10:	83 c0 03             	add    $0x3,%eax
  13:	38 d0                	cmp    %dl,%al
  15:	7c 04                	jl     0x1b
  17:	84 d2                	test   %dl,%dl
  19:	75 79                	jne    0x94
  1b:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
  20:	44 8b 48 08          	mov    0x8(%rax),%r9d
  24:	e9 42 ff ff ff       	jmp    0xffffffffffffff6b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	ba 02 00 00 00       	mov    $0x2,%edx
  32:	48 89 de             	mov    %rbx,%rsi
  35:	31 ff                	xor    %edi,%edi
  37:	e8 38 ff f0 ff       	call   0xfffffffffff0ff74
  3c:	b9                   	.byte 0xb9
  3d:	a6                   	cmpsb  (%rdi),(%rsi)
  3e:	ff                   	(bad)
  3f:	ff                   	.byte 0xff

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	ba 02 00 00 00       	mov    $0x2,%edx
   8:	48 89 de             	mov    %rbx,%rsi
   b:	31 ff                	xor    %edi,%edi
   d:	e8 38 ff f0 ff       	call   0xfffffffffff0ff4a
  12:	b9                   	.byte 0xb9
  13:	a6                   	cmpsb  (%rdi),(%rsi)
  14:	ff                   	(bad)
  15:	ff                   	.byte 0xff
[   99.277506][  T167] RSP: 0018:ffa00000008176f0 EFLAGS: 00010286
[   99.277681][  T167] RAX: 00000000ffffffa6 RBX: ff11000009089e40 RCX: 1ff4000000102ea4
[   99.277886][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000009089ef0
[   99.278091][  T167] RBP: ff1100000e1fc000 R08: 1fe22000012113df R09: ff1100000c53d158
[   99.278291][  T167] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000041
[   99.278510][  T167] R13: 0000000000000000 R14: 0000000000000000 R15: ffa0000000817790
[   99.278767][  T167] FS:  0000000000000000(0000) GS:ff11000084d53000(0000) knlGS:0000000000000000
[   99.279023][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.279197][  T167] CR2: 00007fe59f964000 CR3: 0000000019f39004 CR4: 0000000000771ef0
[   99.279493][  T167] PKRU: 55555554
[   99.279632][  T167] Call Trace:
[   99.279732][  T167]  <TASK>
[   99.279802][  T167]  rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551)
[   99.280009][  T167]  rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560)
[   99.280114][  T167]  netif_close_many (net/core/dev.c:1804)
[   99.280249][  T167]  ? asym_cpu_capacity_scan (./include/linux/rculist.h:103)
[   99.280383][  T167]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   99.280551][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.280729][  T167]  ? __dev_close_many (net/core/dev.c:1781)
[   99.280989][  T167]  ? netif_close_many_and_unlock (net/core/dev.c:12330)
[   99.281207][  T167]  unregister_netdevice_many_notify (net/core/dev.c:12406)
[   99.281427][  T167]  ? select_fallback_rq (kernel/sched/sched.h:1383)
[   99.281609][  T167]  ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3))
[   99.281803][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.281993][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.282164][  T167]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   99.282357][  T167]  ? __queue_work (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) kernel/workqueue.c:2402 (discriminator 2))
[   99.282567][  T167]  unregister_netdevice_queue (net/core/dev.c:12497 net/core/dev.c:12309 net/core/dev.c:12299)
[   99.282779][  T167]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[   99.283081][  T167]  ? unregister_netdevice_many (net/core/dev.c:12497)
[   99.283223][  T167]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   99.283360][  T167]  ? queue_delayed_work_on (kernel/workqueue.c:2616 (discriminator 6))
[   99.283503][  T167]  __tun_detach (./include/linux/netdevice.h:3455 drivers/net/tun.c:628)
[   99.283640][  T167]  tun_chr_close (drivers/net/tun.c:644 drivers/net/tun.c:3505)
[   99.283774][  T167]  __fput (fs/file_table.c:510)
[   99.283945][  T167]  task_work_run (kernel/task_work.c:233)
[   99.284079][  T167]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   99.284214][  T167]  ? task_work_cancel (kernel/task_work.c:190)
[   99.284353][  T167]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2689 mm/slub.c:6250 mm/slub.c:6377)
[   99.284496][  T167]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:976)
[   99.284598][  T167]  ? exit_notify (kernel/exit.c:748)
[   99.284730][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.284922][  T167]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   99.285062][  T167]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   99.285196][  T167]  do_group_exit (kernel/exit.c:1119)
[   99.285329][  T167]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2))
[   99.285498][  T167]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   99.285638][  T167]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:187 kernel/locking/spinlock.c:206)
[   99.285801][  T167]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:188 (discriminator 1) kernel/locking/spinlock.c:206 (discriminator 1))
[   99.286039][  T167]  get_signal (kernel/signal.c:3037)
[   99.286176][  T167]  ? __raw_spin_lock_init (./include/linux/lockdep.h:135 ./include/linux/lockdep.h:142 kernel/locking/spinlock_debug.c:25)
[   99.286311][  T167]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   99.286446][  T167]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   99.286596][  T167]  ? ptrace_signal (./include/linux/signal.h:87)
[   99.286729][  T167]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   99.286921][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.287093][  T167]  arch_do_signal_or_restart (arch/x86/kernel/signal.c:337)
[   99.287296][  T167]  ? fd_install (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:960 (discriminator 2) fs/file.c:699 (discriminator 2))
[   99.287507][  T167]  ? get_sigframe_size (arch/x86/kernel/signal.c:233)
[   99.287715][  T167]  ? update_socket_protocol+0x10/0x10
[   99.287992][  T167]  ? alloc_file_clone (fs/file_table.c:477)
[   99.288126][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   99.288262][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   99.288430][  T167]  exit_to_user_mode_loop (kernel/entry/common.c:64 kernel/entry/common.c:98)
[   99.288567][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   99.288701][  T167]  do_syscall_64 (./include/linux/irq-entry-common.h:207 ./include/linux/irq-entry-common.h:230 ./include/linux/entry-common.h:318 arch/x86/entry/syscall_64.c:100)
[   99.288836][  T167]  ? irq_exit_rcu (kernel/softirq.c:754)
[   99.289044][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   99.289213][  T167] RIP: 0033:0x47ea2b
[   99.289324][  T167] Code: Unable to access opcode bytes at 0x47ea01.

Code starting with the faulting instruction
===========================================
[   99.289517][  T167] RSP: 002b:00007ffe94f59fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[   99.289721][  T167] RAX: 0000000000000007 RBX: 00007ffe94f5a0c0 RCX: 000000000047ea2b
[   99.290022][  T167] RDX: 0000000000000000 RSI: 0000000000080003 RDI: 0000000000000010
[   99.290223][  T167] RBP: 00007ffe94f5a020 R08: 0000000000000041 R09: 00000000379013e0
[   99.290423][  T167] R10: 0000000000000040 R11: 0000000000000206 R12: 00007ffe94f5aa98
[   99.290629][  T167] R13: 00007ffe94f5ab20 R14: 00007ffe94f5a598 R15: 0000000000543540
| [   99.298644][  T167] ------------[ cut here ]------------
| [   99.298785][  T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#3: packetdrill/167
| [   99.299559][  T167] Modules linked in:
| [   99.300466][  T167] Tainted: [W]=WARN
[   99.300568][  T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   99.300733][  T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3))
[   99.301766][  T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff
All code
========
   0:	89 fa                	mov    %edi,%edx
   2:	48 c1 ea 03          	shr    $0x3,%rdx
   6:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   a:	48 89 f8             	mov    %rdi,%rax
   d:	83 e0 07             	and    $0x7,%eax
  10:	83 c0 03             	add    $0x3,%eax
  13:	38 d0                	cmp    %dl,%al
  15:	7c 04                	jl     0x1b
  17:	84 d2                	test   %dl,%dl
  19:	75 79                	jne    0x94
  1b:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
  20:	44 8b 48 08          	mov    0x8(%rax),%r9d
  24:	e9 42 ff ff ff       	jmp    0xffffffffffffff6b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	ba 02 00 00 00       	mov    $0x2,%edx
  32:	48 89 de             	mov    %rbx,%rsi
  35:	31 ff                	xor    %edi,%edi
  37:	e8 38 ff f0 ff       	call   0xfffffffffff0ff74
  3c:	b9                   	.byte 0xb9
  3d:	a6                   	cmpsb  (%rdi),(%rsi)
  3e:	ff                   	(bad)
  3f:	ff                   	.byte 0xff

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	ba 02 00 00 00       	mov    $0x2,%edx
   8:	48 89 de             	mov    %rbx,%rsi
   b:	31 ff                	xor    %edi,%edi
   d:	e8 38 ff f0 ff       	call   0xfffffffffff0ff4a
  12:	b9                   	.byte 0xb9
  13:	a6                   	cmpsb  (%rdi),(%rsi)
  14:	ff                   	(bad)
  15:	ff                   	.byte 0xff
[   99.302829][  T167] RSP: 0018:ffa0000000817820 EFLAGS: 00010286
[   99.303162][  T167] RAX: 00000000ffffffa6 RBX: ff11000009088ac0 RCX: 1ff4000000102eca
[   99.303361][  T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000009088b70
[   99.303560][  T167] RBP: ff1100000e1fc000 R08: 1fe220000121116f R09: ff1100000c53d158
[   99.303755][  T167] R10: 0000000000000003 R11: 0000000000000001 R12: 00000000ffffffff
[   99.303954][  T167] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
[   99.304148][  T167] FS:  0000000000000000(0000) GS:ff11000084d53000(0000) knlGS:0000000000000000
[   99.304372][  T167] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.304542][  T167] CR2: 00007fe59f964000 CR3: 0000000019f39004 CR4: 0000000000771ef0
[   99.304735][  T167] PKRU: 55555554
[   99.304831][  T167] Call Trace:
[   99.304934][  T167]  <TASK>
[   99.305001][  T167]  unregister_netdevice_many_notify (net/core/dev.c:12439)
[   99.305166][  T167]  ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3))
[   99.305327][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.305464][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.305598][  T167]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   99.305729][  T167]  ? __queue_work (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) kernel/workqueue.c:2402 (discriminator 2))
[   99.305869][  T167]  unregister_netdevice_queue (net/core/dev.c:12497 net/core/dev.c:12309 net/core/dev.c:12299)
[   99.306001][  T167]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[   99.306137][  T167]  ? unregister_netdevice_many (net/core/dev.c:12497)
[   99.306264][  T167]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   99.306392][  T167]  ? queue_delayed_work_on (kernel/workqueue.c:2616 (discriminator 6))
[   99.306529][  T167]  __tun_detach (./include/linux/netdevice.h:3455 drivers/net/tun.c:628)
[   99.306662][  T167]  tun_chr_close (drivers/net/tun.c:644 drivers/net/tun.c:3505)
[   99.306792][  T167]  __fput (fs/file_table.c:510)
[   99.306897][  T167]  task_work_run (kernel/task_work.c:233)
[   99.307028][  T167]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   99.307156][  T167]  ? task_work_cancel (kernel/task_work.c:190)
[   99.307284][  T167]  ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2689 mm/slub.c:6250 mm/slub.c:6377)
[   99.307415][  T167]  do_exit (./include/linux/task_work.h:40 kernel/exit.c:976)
[   99.307522][  T167]  ? exit_notify (kernel/exit.c:748)
[   99.307655][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.307786][  T167]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   99.307921][  T167]  ? __rwlock_init (kernel/locking/spinlock_debug.c:48)
[   99.308054][  T167]  do_group_exit (kernel/exit.c:1119)
[   99.308182][  T167]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2))
[   99.308341][  T167]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   99.308479][  T167]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:187 kernel/locking/spinlock.c:206)
[   99.308609][  T167]  ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:188 (discriminator 1) kernel/locking/spinlock.c:206 (discriminator 1))
[   99.308737][  T167]  get_signal (kernel/signal.c:3037)
[   99.308874][  T167]  ? __raw_spin_lock_init (./include/linux/lockdep.h:135 ./include/linux/lockdep.h:142 kernel/locking/spinlock_debug.c:25)
[   99.309006][  T167]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   99.309136][  T167]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   99.309264][  T167]  ? ptrace_signal (./include/linux/signal.h:87)
[   99.309394][  T167]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   99.309528][  T167]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   99.309660][  T167]  arch_do_signal_or_restart (arch/x86/kernel/signal.c:337)
[   99.309791][  T167]  ? fd_install (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:960 (discriminator 2) fs/file.c:699 (discriminator 2))
[   99.309925][  T167]  ? get_sigframe_size (arch/x86/kernel/signal.c:233)
[   99.310059][  T167]  ? update_socket_protocol+0x10/0x10
[   99.310189][  T167]  ? alloc_file_clone (fs/file_table.c:477)
[   99.310316][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   99.310448][  T167]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   99.310614][  T167]  exit_to_user_mode_loop (kernel/entry/common.c:64 kernel/entry/common.c:98)
[   99.310744][  T167]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   99.310883][  T167]  do_syscall_64 (./include/linux/irq-entry-common.h:207 ./include/linux/irq-entry-common.h:230 ./include/linux/entry-common.h:318 arch/x86/entry/syscall_64.c:100)
[   99.311013][  T167]  ? irq_exit_rcu (kernel/softirq.c:754)
[   99.311142][  T167]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   99.311300][  T167] RIP: 0033:0x47ea2b
[   99.311404][  T167] Code: Unable to access opcode bytes at 0x47ea01.

Code starting with the faulting instruction
===========================================
[   99.311584][  T167] RSP: 002b:00007ffe94f59fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[   99.311782][  T167] RAX: 0000000000000007 RBX: 00007ffe94f5a0c0 RCX: 000000000047ea2b
[   99.311983][  T167] RDX: 0000000000000000 RSI: 0000000000080003 RDI: 0000000000000010
[   99.312177][  T167] RBP: 00007ffe94f5a020 R08: 0000000000000041 R09: 00000000379013e0
[   99.312372][  T167] R10: 0000000000000040 R11: 0000000000000206 R12: 00007ffe94f5aa98
[   99.312573][  T167] R13: 00007ffe94f5ab20 R14: 00007ffe94f5a598 R15: 0000000000543540
| [   99.338067][   T12] ------------[ cut here ]------------
| [   99.338241][   T12] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#0: 0/12
| [   99.338553][   T12] Modules linked in:
| [   99.339433][   T12] Tainted: [W]=WARN
[   99.339533][   T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   99.339687][   T12] Workqueue: netns cleanup_net
[   99.339826][   T12] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3))
[   99.340046][   T12] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff
All code
========
   0:	89 fa                	mov    %edi,%edx
   2:	48 c1 ea 03          	shr    $0x3,%rdx
   6:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
   a:	48 89 f8             	mov    %rdi,%rax
   d:	83 e0 07             	and    $0x7,%eax
  10:	83 c0 03             	add    $0x3,%eax
  13:	38 d0                	cmp    %dl,%al
  15:	7c 04                	jl     0x1b
  17:	84 d2                	test   %dl,%dl
  19:	75 79                	jne    0x94
  1b:	48 8b 44 24 58       	mov    0x58(%rsp),%rax
  20:	44 8b 48 08          	mov    0x8(%rax),%r9d
  24:	e9 42 ff ff ff       	jmp    0xffffffffffffff6b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	ba 02 00 00 00       	mov    $0x2,%edx
  32:	48 89 de             	mov    %rbx,%rsi
  35:	31 ff                	xor    %edi,%edi
  37:	e8 38 ff f0 ff       	call   0xfffffffffff0ff74
  3c:	b9                   	.byte 0xb9
  3d:	a6                   	cmpsb  (%rdi),(%rsi)
  3e:	ff                   	(bad)
  3f:	ff                   	.byte 0xff

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	ba 02 00 00 00       	mov    $0x2,%edx
   8:	48 89 de             	mov    %rbx,%rsi
   b:	31 ff                	xor    %edi,%edi
   d:	e8 38 ff f0 ff       	call   0xfffffffffff0ff4a
  12:	b9                   	.byte 0xb9
  13:	a6                   	cmpsb  (%rdi),(%rsi)
  14:	ff                   	(bad)
  15:	ff                   	.byte 0xff
[   99.340614][   T12] RSP: 0018:ffa00000000c7878 EFLAGS: 00010286
[   99.340776][   T12] RAX: 00000000ffffffa6 RBX: ff110000105db840 RCX: 1ff4000000018ed5
[   99.340972][   T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff110000105db8f0
[   99.341153][   T12] RBP: ff11000007cfc000 R08: 1fe22000020bb71f R09: ff11000001afd1d0
[   99.341332][   T12] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff
[   99.341523][   T12] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
[   99.341704][   T12] FS:  0000000000000000(0000) GS:ff11000084bd3000(0000) knlGS:0000000000000000
[   99.341924][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.342076][   T12] CR2: 00007f5cda4e7f98 CR3: 0000000019f39005 CR4: 0000000000771ef0
[   99.342257][   T12] PKRU: 55555554
[   99.342348][   T12] Call Trace:
[   99.342439][   T12]  <TASK>
[   99.342512][   T12]  unregister_netdevice_many_notify (net/core/dev.c:12439)
[   99.342668][   T12]  ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3))
[   99.342821][   T12]  ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3))
[   99.342957][   T12]  default_device_exit_batch (net/core/dev.c:12497 net/core/dev.c:13089)
[   99.343077][   T12]  ? generic_xdp_install (./include/linux/netdevice.h:5659)
[   99.343200][   T12]  ? ipmr_free_table (net/ipv4/ipmr.c:453)
[   99.343320][   T12]  ? unregister_netdev (./include/net/net_namespace.h:419 (discriminator 7))
[   99.343442][   T12]  ? rtnl_is_locked (net/core/rtnetlink.c:169)
[   99.343567][   T12]  ? nexthop_net_exit_rtnl (./include/linux/rtnetlink.h:150 (discriminator 1) net/ipv4/nexthop.c:4145 (discriminator 1))
[   99.343690][   T12]  ops_undo_list (net/core/net_namespace.c:205 net/core/net_namespace.c:252)
[   99.343816][   T12]  ? rtnl_net_dumpid_one (net/core/net_namespace.c:1094)
[   99.343943][   T12]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   99.344066][   T12]  cleanup_net (net/core/net_namespace.c:702)
[   99.344190][   T12]  ? net_passive_dec (./include/linux/llist.h:241)
[   99.344310][   T12]  ? process_one_work (kernel/workqueue.c:3290 (discriminator 2))
[   99.344431][   T12]  ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22))
[   99.344564][   T12]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   99.344696][   T12]  process_one_work (kernel/workqueue.c:3314)
[   99.344824][   T12]  ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4))
[   99.344952][   T12]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   99.345075][   T12]  worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)
[   99.345201][   T12]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[   99.345319][   T12]  kthread (kernel/kthread.c:436)
[   99.345410][   T12]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   99.345566][   T12]  ? kthread_affine_node (kernel/kthread.c:378)
[   99.345689][   T12]  ret_from_fork (arch/x86/kernel/process.c:158)
[   99.345813][   T12]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37)
[   99.345970][   T12]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[   99.346091][   T12]  ? kthread_affine_node (kernel/kthread.c:378)


Finger prints:
rtmsg_ifinfo_build_skb:rtmsg_ifinfo:register_netdevice:register_netdev:loopback_net_init
rtmsg_ifinfo_build_skb:rtmsg_ifinfo:register_netdevice:__tun_chr_ioctl:__x64_sys_ioctl
rtmsg_ifinfo_build_skb:unregister_netdevice_many_notify:unregister_netdevice_queue:__tun_detach:tun_chr_close
rtmsg_ifinfo_build_skb:rtmsg_ifinfo:netif_close_many:unregister_netdevice_many_notify:unregister_netdevice_queue
rtmsg_ifinfo_build_skb:rtnetlink_event:notifier_call_chain:netdev_update_features:__tun_chr_ioctl
rtmsg_ifinfo_build_skb:rtmsg_ifinfo:__dev_notify_flags:netif_change_flags:dev_change_flags
rtmsg_ifinfo_build_skb:unregister_netdevice_many_notify:default_device_exit_batch:ops_undo_list:cleanup_net