====================================== | xx__-> [ 8.544589][ T167] ------------[ cut here ]------------ | [ 8.544799][ T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#0: unshare/167 | [ 8.545085][ T167] Modules linked in: | [ 8.545534][ T167] Tainted: [W]=WARN [ 8.545635][ T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 8.545801][ T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3)) [ 8.545980][ T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff All code ======== 0: 89 fa mov %edi,%edx 2: 48 c1 ea 03 shr $0x3,%rdx 6: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx a: 48 89 f8 mov %rdi,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 79 jne 0x94 1b: 48 8b 44 24 58 mov 0x58(%rsp),%rax 20: 44 8b 48 08 mov 0x8(%rax),%r9d 24: e9 42 ff ff ff jmp 0xffffffffffffff6b 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 48 89 de mov %rbx,%rsi 35: 31 ff xor %edi,%edi 37: e8 38 ff f0 ff call 0xfffffffffff0ff74 3c: b9 .byte 0xb9 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 48 89 de mov %rbx,%rsi b: 31 ff xor %edi,%edi d: e8 38 ff f0 ff call 0xfffffffffff0ff4a 12: b9 .byte 0xb9 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 8.546457][ T167] RSP: 0018:ffa00000007f7ab0 EFLAGS: 00010286 [ 8.546626][ T167] RAX: 00000000ffffffa6 RBX: ff1100000b599540 RCX: 1ff40000000fef1c [ 8.546825][ T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff1100000b5995f0 [ 8.547031][ T167] RBP: ff1100000a0d1000 R08: 1fe22000016b32bf R09: ff1100000ce5d180 [ 8.547237][ T167] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 8.547437][ T167] R13: 0000000000000000 R14: 0000000000000000 R15: ff1100000a0d1000 [ 8.547639][ T167] FS: 00007f0577e34740(0000) GS:ff11000082bd3000(0000) knlGS:0000000000000000 [ 8.547876][ T167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 8.548043][ T167] CR2: 00005639e82fe310 CR3: 000000000b732005 CR4: 0000000000771ef0 [ 8.548246][ T167] PKRU: 55555554 [ 8.548348][ T167] Call Trace: [ 8.548449][ T167] [ 8.548518][ T167] ? ip6_route_dev_notify (net/ipv6/route.c:6484) [ 8.548702][ T167] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551) [ 8.548834][ T167] ? notifier_call_chain (kernel/notifier.c:85) [ 8.548971][ T167] rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560) [ 8.549071][ T167] register_netdevice (net/core/dev.c:11488) [ 8.549206][ T167] ? unregister_netdevice_queue (./include/linux/list.h:162) [ 8.549376][ T167] register_netdev (net/core/dev.c:11552) [ 8.549519][ T167] loopback_net_init (drivers/net/loopback.c:218) [ 8.549655][ T167] ops_init (net/core/net_namespace.c:137) [ 8.549756][ T167] setup_net (net/core/net_namespace.c:446) [ 8.549856][ T167] ? unregister_pernet_device (net/core/net_namespace.c:1503) [ 8.549992][ T167] ? lockdep_init_map_type (kernel/locking/lockdep.c:4973) [ 8.550126][ T167] ? mutex_init_lockdep (./include/linux/lockdep.h:135 ./include/linux/lockdep.h:142 kernel/locking/mutex.c:185) [ 8.550269][ T167] copy_net_ns (net/core/net_namespace.c:579) [ 8.550403][ T167] create_new_namespaces (kernel/nsproxy.c:132) [ 8.550537][ T167] unshare_nsproxy_namespaces (kernel/nsproxy.c:234 (discriminator 4)) [ 8.550668][ T167] ksys_unshare (kernel/fork.c:3243) [ 8.550800][ T167] ? walk_process_tree (kernel/fork.c:3036 (discriminator 19)) [ 8.550939][ T167] __x64_sys_unshare (kernel/fork.c:3317 kernel/fork.c:3315 kernel/fork.c:3315) [ 8.551071][ T167] ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89) [ 8.551202][ T167] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 8.551338][ T167] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 8.551471][ T167] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 8.551601][ T167] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 8.551763][ T167] RIP: 0033:0x7f0577f2fbcb [ 8.551907][ T167] Code: 73 01 c3 48 8b 0d 2d 82 0f 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d fd 81 0f 00 f7 d8 64 89 01 48 All code ======== 0: 73 01 jae 0x3 2: c3 ret 3: 48 8b 0d 2d 82 0f 00 mov 0xf822d(%rip),%rcx # 0xf8237 a: f7 d8 neg %eax c: 64 89 01 mov %eax,%fs:(%rcx) f: 48 83 c8 ff or $0xffffffffffffffff,%rax 13: c3 ret 14: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 1b: 00 00 00 1e: 90 nop 1f: f3 0f 1e fa endbr64 23: b8 10 01 00 00 mov $0x110,%eax 28: 0f 05 syscall 2a:* 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 30: 73 01 jae 0x33 32: c3 ret 33: 48 8b 0d fd 81 0f 00 mov 0xf81fd(%rip),%rcx # 0xf8237 3a: f7 d8 neg %eax 3c: 64 89 01 mov %eax,%fs:(%rcx) 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax 6: 73 01 jae 0x9 8: c3 ret 9: 48 8b 0d fd 81 0f 00 mov 0xf81fd(%rip),%rcx # 0xf820d 10: f7 d8 neg %eax 12: 64 89 01 mov %eax,%fs:(%rcx) 15: 48 rex.W [ 8.552433][ T167] RSP: 002b:00007ffc077273e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 8.552633][ T167] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0577f2fbcb [ 8.552828][ T167] RDX: 0000000000000000 RSI: 00007ffc07727150 RDI: 0000000040000000 [ 8.553028][ T167] RBP: 00007ffc07727770 R08: 00007ffc07727340 R09: 0000000000000000 [ 8.553221][ T167] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000040000000 [ 8.553479][ T167] R13: 0000000000000000 R14: 00000000ffffffff R15: 00005639e8301b68 | [ 8.584873][ T167] ------------[ cut here ]------------ | [ 8.585019][ T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#1: packetdrill/167 | [ 8.585271][ T167] Modules linked in: | [ 8.585650][ T167] Tainted: [W]=WARN [ 8.585750][ T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 8.585908][ T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3)) [ 8.586066][ T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff All code ======== 0: 89 fa mov %edi,%edx 2: 48 c1 ea 03 shr $0x3,%rdx 6: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx a: 48 89 f8 mov %rdi,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 79 jne 0x94 1b: 48 8b 44 24 58 mov 0x58(%rsp),%rax 20: 44 8b 48 08 mov 0x8(%rax),%r9d 24: e9 42 ff ff ff jmp 0xffffffffffffff6b 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 48 89 de mov %rbx,%rsi 35: 31 ff xor %edi,%edi 37: e8 38 ff f0 ff call 0xfffffffffff0ff74 3c: b9 .byte 0xb9 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 48 89 de mov %rbx,%rsi b: 31 ff xor %edi,%edi d: e8 38 ff f0 ff call 0xfffffffffff0ff4a 12: b9 .byte 0xb9 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 8.586529][ T167] RSP: 0018:ffa00000007f7b58 EFLAGS: 00010286 [ 8.586681][ T167] RAX: 00000000ffffffa6 RBX: ff1100000959fb40 RCX: 1ff40000000fef31 [ 8.586865][ T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff1100000959fbf0 [ 8.587046][ T167] RBP: ff11000004998000 R08: 1fe22000012b3f7f R09: ff1100000ce5d158 [ 8.587237][ T167] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 8.587418][ T167] R13: 0000000000000000 R14: 0000000000000000 R15: ff11000004998000 [ 8.587599][ T167] FS: 00000000055dc400(0000) GS:ff11000082c53000(0000) knlGS:0000000000000000 [ 8.587809][ T167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 8.587969][ T167] CR2: 00007f345ec43000 CR3: 000000000ac3a003 CR4: 0000000000771ef0 [ 8.588150][ T167] PKRU: 55555554 [ 8.588243][ T167] Call Trace: [ 8.588333][ T167] [ 8.588396][ T167] ? ip6_route_dev_notify (./include/net/net_namespace.h:419 (discriminator 1) ./include/linux/netdevice.h:2776 (discriminator 1) net/ipv6/route.c:6476 (discriminator 1)) [ 8.588516][ T167] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551) [ 8.588637][ T167] ? notifier_call_chain (kernel/notifier.c:85) [ 8.588761][ T167] rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560) [ 8.588853][ T167] register_netdevice (net/core/dev.c:11488) [ 8.588983][ T167] ? unregister_netdevice_queue (./include/linux/list.h:162) [ 8.589130][ T167] ? alloc_netdev_mqs (net/core/dev.c:12133) [ 8.589258][ T167] tun_set_iff.constprop.0 (drivers/net/tun.c:2876) [ 8.589381][ T167] ? tun_attach.isra.0 (./include/linux/ptr_ring.h:601) [ 8.589500][ T167] ? tun_get (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) drivers/net/tun.c:803 (discriminator 2)) [ 8.589596][ T167] __tun_chr_ioctl (drivers/net/tun.c:3157) [ 8.589715][ T167] ? build_open_flags (fs/open.c:1212) [ 8.589838][ T167] ? tun_chr_read_iter (drivers/net/tun.c:2271 (discriminator 1)) [ 8.589961][ T167] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 8.590082][ T167] ? __x64_sys_openat (fs/open.c:1370 fs/open.c:1386 fs/open.c:1381 fs/open.c:1381) [ 8.590202][ T167] ? fput_close_sync (fs/file_table.c:615) [ 8.590327][ T167] ? __ia32_sys_open (fs/open.c:1374) [ 8.590446][ T167] __x64_sys_ioctl (fs/ioctl.c:51 fs/ioctl.c:597 fs/ioctl.c:583 fs/ioctl.c:583) [ 8.590571][ T167] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 8.590689][ T167] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 8.590808][ T167] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 8.590932][ T167] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 8.591080][ T167] RIP: 0033:0x47cc8d [ 8.591177][ T167] Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00 All code ======== 0: 04 25 add $0x25,%al 2: 28 00 sub %al,(%rax) 4: 00 00 add %al,(%rax) 6: 48 89 45 c8 mov %rax,-0x38(%rbp) a: 31 c0 xor %eax,%eax c: 48 8d 45 10 lea 0x10(%rbp),%rax 10: c7 45 b0 10 00 00 00 movl $0x10,-0x50(%rbp) 17: 48 89 45 b8 mov %rax,-0x48(%rbp) 1b: 48 8d 45 d0 lea -0x30(%rbp),%rax 1f: 48 89 45 c0 mov %rax,-0x40(%rbp) 23: b8 10 00 00 00 mov $0x10,%eax 28: 0f 05 syscall 2a:* 89 c2 mov %eax,%edx <-- trapping instruction 2c: 3d 00 f0 ff ff cmp $0xfffff000,%eax 31: 77 1a ja 0x4d 33: 48 8b 45 c8 mov -0x38(%rbp),%rax 37: 64 48 2b 04 25 28 00 sub %fs:0x28,%rax 3e: 00 00 Code starting with the faulting instruction =========================================== 0: 89 c2 mov %eax,%edx 2: 3d 00 f0 ff ff cmp $0xfffff000,%eax 7: 77 1a ja 0x23 9: 48 8b 45 c8 mov -0x38(%rbp),%rax d: 64 48 2b 04 25 28 00 sub %fs:0x28,%rax 14: 00 00 [ 8.591709][ T167] RSP: 002b:00007ffc27bb3220 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 8.591897][ T167] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000047cc8d [ 8.592074][ T167] RDX: 00007ffc27bb32a0 RSI: 00000000400454ca RDI: 0000000000000005 [ 8.592263][ T167] RBP: 00007ffc27bb3270 R08: 0000000000000000 R09: 0000000000000000 [ 8.592441][ T167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc27bb3778 [ 8.592619][ T167] R13: 00007ffc27bb3800 R14: 0000000000000002 R15: 0000000000543540 | [ 8.594658][ T167] ------------[ cut here ]------------ | [ 8.594777][ T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#1: packetdrill/167 | [ 8.595013][ T167] Modules linked in: | [ 8.595444][ T167] Tainted: [W]=WARN [ 8.595533][ T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 8.595684][ T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3)) [ 8.595837][ T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff All code ======== 0: 89 fa mov %edi,%edx 2: 48 c1 ea 03 shr $0x3,%rdx 6: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx a: 48 89 f8 mov %rdi,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 79 jne 0x94 1b: 48 8b 44 24 58 mov 0x58(%rsp),%rax 20: 44 8b 48 08 mov 0x8(%rax),%r9d 24: e9 42 ff ff ff jmp 0xffffffffffffff6b 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 48 89 de mov %rbx,%rsi 35: 31 ff xor %edi,%edi 37: e8 38 ff f0 ff call 0xfffffffffff0ff74 3c: b9 .byte 0xb9 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 48 89 de mov %rbx,%rsi b: 31 ff xor %edi,%edi d: e8 38 ff f0 ff call 0xfffffffffff0ff4a 12: b9 .byte 0xb9 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 8.596274][ T167] RSP: 0018:ffa00000007f7c58 EFLAGS: 00010286 [ 8.596423][ T167] RAX: 00000000ffffffa6 RBX: ff1100000959f3c0 RCX: 1ff40000000fef51 [ 8.596597][ T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff1100000959f470 [ 8.596776][ T167] RBP: ff11000004998000 R08: 1fe22000012b3e8f R09: ff1100000ce5d158 [ 8.596961][ T167] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 8.597134][ T167] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000001 [ 8.597316][ T167] FS: 00000000055dc400(0000) GS:ff11000082c53000(0000) knlGS:0000000000000000 [ 8.597523][ T167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 8.597672][ T167] CR2: 00007f345ec43000 CR3: 000000000ac3a003 CR4: 0000000000771ef0 [ 8.597890][ T167] PKRU: 55555554 [ 8.597979][ T167] Call Trace: [ 8.598066][ T167] [ 8.598127][ T167] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 8.598251][ T167] rtnetlink_event (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4541 net/core/rtnetlink.c:7121) [ 8.598371][ T167] notifier_call_chain (kernel/notifier.c:85) [ 8.598491][ T167] netdev_update_features (net/core/dev.c:2287 net/core/dev.c:2301 net/core/dev.c:1590 net/core/dev.c:11099 net/core/dev.c:11096) [ 8.598607][ T167] ? netdev_sync_lower_features (net/core/dev.c:10883) [ 8.598755][ T167] __tun_chr_ioctl (drivers/net/tun.c:2963 drivers/net/tun.c:3285) [ 8.598878][ T167] ? tun_chr_read_iter (drivers/net/tun.c:2271 (discriminator 1)) [ 8.598996][ T167] ? fd_install (./include/linux/rcupdate.h:963 (discriminator 1) fs/file.c:699 (discriminator 1)) [ 8.599117][ T167] ? update_socket_protocol+0x10/0x10 [ 8.599240][ T167] ? alloc_file_clone (fs/file_table.c:477) [ 8.599360][ T167] __x64_sys_ioctl (fs/ioctl.c:51 fs/ioctl.c:597 fs/ioctl.c:583 fs/ioctl.c:583) [ 8.599478][ T167] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 8.599597][ T167] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 8.599716][ T167] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 8.599835][ T167] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 8.599986][ T167] RIP: 0033:0x47cc8d [ 8.600079][ T167] Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00 All code ======== 0: 04 25 add $0x25,%al 2: 28 00 sub %al,(%rax) 4: 00 00 add %al,(%rax) 6: 48 89 45 c8 mov %rax,-0x38(%rbp) a: 31 c0 xor %eax,%eax c: 48 8d 45 10 lea 0x10(%rbp),%rax 10: c7 45 b0 10 00 00 00 movl $0x10,-0x50(%rbp) 17: 48 89 45 b8 mov %rax,-0x48(%rbp) 1b: 48 8d 45 d0 lea -0x30(%rbp),%rax 1f: 48 89 45 c0 mov %rax,-0x40(%rbp) 23: b8 10 00 00 00 mov $0x10,%eax 28: 0f 05 syscall 2a:* 89 c2 mov %eax,%edx <-- trapping instruction 2c: 3d 00 f0 ff ff cmp $0xfffff000,%eax 31: 77 1a ja 0x4d 33: 48 8b 45 c8 mov -0x38(%rbp),%rax 37: 64 48 2b 04 25 28 00 sub %fs:0x28,%rax 3e: 00 00 Code starting with the faulting instruction =========================================== 0: 89 c2 mov %eax,%edx 2: 3d 00 f0 ff ff cmp $0xfffff000,%eax 7: 77 1a ja 0x23 9: 48 8b 45 c8 mov -0x38(%rbp),%rax d: 64 48 2b 04 25 28 00 sub %fs:0x28,%rax 14: 00 00 [ 8.600517][ T167] RSP: 002b:00007ffc27bb3260 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 8.600697][ T167] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000047cc8d [ 8.600876][ T167] RDX: 000000000000000f RSI: 00000000400454d0 RDI: 0000000000000005 [ 8.601059][ T167] RBP: 00007ffc27bb32b0 R08: 0000000000000005 R09: 0000000000001ff0 [ 8.601252][ T167] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffc27bb3778 [ 8.601431][ T167] R13: 00007ffc27bb3800 R14: 0000000000000002 R15: 0000000000543540 | [ 8.603081][ T167] ------------[ cut here ]------------ | [ 8.603210][ T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#1: packetdrill/167 | [ 8.603464][ T167] Modules linked in: | [ 8.603849][ T167] Tainted: [W]=WARN [ 8.603952][ T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 8.604111][ T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3)) [ 8.604279][ T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff All code ======== 0: 89 fa mov %edi,%edx 2: 48 c1 ea 03 shr $0x3,%rdx 6: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx a: 48 89 f8 mov %rdi,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 79 jne 0x94 1b: 48 8b 44 24 58 mov 0x58(%rsp),%rax 20: 44 8b 48 08 mov 0x8(%rax),%r9d 24: e9 42 ff ff ff jmp 0xffffffffffffff6b 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 48 89 de mov %rbx,%rsi 35: 31 ff xor %edi,%edi 37: e8 38 ff f0 ff call 0xfffffffffff0ff74 3c: b9 .byte 0xb9 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 48 89 de mov %rbx,%rsi b: 31 ff xor %edi,%edi d: e8 38 ff f0 ff call 0xfffffffffff0ff4a 12: b9 .byte 0xb9 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 8.604734][ T167] RSP: 0018:ffa00000007f7850 EFLAGS: 00010286 [ 8.604901][ T167] RAX: 00000000ffffffa6 RBX: ff1100000959f6c0 RCX: 1ff40000000feed0 [ 8.605090][ T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff1100000959f770 [ 8.605284][ T167] RBP: ff11000004998000 R08: 1fe22000012b3eef R09: ff1100000ce5d158 [ 8.605474][ T167] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 8.605662][ T167] R13: 0000000000000000 R14: 0000000000000000 R15: ff110000057e0900 [ 8.605852][ T167] FS: 00000000055dc400(0000) GS:ff11000082c53000(0000) knlGS:0000000000000000 [ 8.606080][ T167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 8.606243][ T167] CR2: 00007f345ec43000 CR3: 000000000ac3a003 CR4: 0000000000771ef0 [ 8.606435][ T167] PKRU: 55555554 [ 8.606532][ T167] Call Trace: [ 8.606626][ T167] [ 8.606691][ T167] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551) [ 8.606821][ T167] rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560) [ 8.606927][ T167] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 8.607055][ T167] __dev_notify_flags (net/core/dev.c:9787) [ 8.607183][ T167] ? netif_change_name (net/core/dev.c:1495) [ 8.607314][ T167] ? __dev_change_flags (net/core/dev.c:9752) [ 8.607443][ T167] ? netif_set_allmulti (./include/net/netdev_lock.h:30 (discriminator 1)) [ 8.607570][ T167] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 8.607699][ T167] netif_change_flags (net/core/dev.c:9820) [ 8.607825][ T167] ? cap_capable (./include/trace/events/capability.h:26 (discriminator 22) security/commoncap.c:130 (discriminator 22)) [ 8.607977][ T167] dev_change_flags (net/core/dev_api.c:68) [ 8.608105][ T167] devinet_ioctl (net/ipv4/devinet.c:1199) [ 8.608240][ T167] ? inet_ifa_byprefix (net/ipv4/devinet.c:619 (discriminator 9)) [ 8.608369][ T167] ? _copy_from_user (./include/linux/instrumented.h:146 ./include/linux/uaccess.h:184 lib/usercopy.c:18) [ 8.608499][ T167] inet_ioctl (net/ipv4/af_inet.c:1011) [ 8.608595][ T167] ? inet_dgram_connect (net/ipv4/af_inet.c:589) [ 8.608722][ T167] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 8.608855][ T167] ? __might_fault (mm/memory.c:7340 (discriminator 5)) [ 8.608989][ T167] ? __might_fault (mm/memory.c:7340 (discriminator 5)) [ 8.609118][ T167] sock_do_ioctl (net/socket.c:1313) [ 8.609252][ T167] ? __sock_recv_cmsgs (./include/net/sock.h:2867) [ 8.609384][ T167] ? ioctl_file_clone (fs/ioctl.c:244) [ 8.609514][ T167] sock_ioctl (net/socket.c:1434) [ 8.609612][ T167] ? br_ioctl_call (net/socket.c:1279) [ 8.609742][ T167] ? fd_install (./include/linux/rcupdate.h:963 (discriminator 1) fs/file.c:699 (discriminator 1)) [ 8.609876][ T167] ? update_socket_protocol+0x10/0x10 [ 8.610004][ T167] ? alloc_file_clone (fs/file_table.c:477) [ 8.610135][ T167] __x64_sys_ioctl (fs/ioctl.c:51 fs/ioctl.c:597 fs/ioctl.c:583 fs/ioctl.c:583) [ 8.610270][ T167] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 8.610400][ T167] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 8.610526][ T167] ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3)) [ 8.610653][ T167] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 8.610810][ T167] RIP: 0033:0x47cc8d [ 8.610916][ T167] Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1a 48 8b 45 c8 64 48 2b 04 25 28 00 00 00 All code ======== 0: 04 25 add $0x25,%al 2: 28 00 sub %al,(%rax) 4: 00 00 add %al,(%rax) 6: 48 89 45 c8 mov %rax,-0x38(%rbp) a: 31 c0 xor %eax,%eax c: 48 8d 45 10 lea 0x10(%rbp),%rax 10: c7 45 b0 10 00 00 00 movl $0x10,-0x50(%rbp) 17: 48 89 45 b8 mov %rax,-0x48(%rbp) 1b: 48 8d 45 d0 lea -0x30(%rbp),%rax 1f: 48 89 45 c0 mov %rax,-0x40(%rbp) 23: b8 10 00 00 00 mov $0x10,%eax 28: 0f 05 syscall 2a:* 89 c2 mov %eax,%edx <-- trapping instruction 2c: 3d 00 f0 ff ff cmp $0xfffff000,%eax 31: 77 1a ja 0x4d 33: 48 8b 45 c8 mov -0x38(%rbp),%rax 37: 64 48 2b 04 25 28 00 sub %fs:0x28,%rax 3e: 00 00 Code starting with the faulting instruction =========================================== 0: 89 c2 mov %eax,%edx 2: 3d 00 f0 ff ff cmp $0xfffff000,%eax 7: 77 1a ja 0x23 9: 48 8b 45 c8 mov -0x38(%rbp),%rax d: 64 48 2b 04 25 28 00 sub %fs:0x28,%rax 14: 00 00 [ 8.611374][ T167] RSP: 002b:00007ffc27bb3240 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 8.611565][ T167] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000047cc8d [ 8.611753][ T167] RDX: 00007ffc27bb32b0 RSI: 0000000000008914 RDI: 0000000000000006 [ 8.611947][ T167] RBP: 00007ffc27bb3290 R08: 0000000000000005 R09: 0000000000001ff0 [ 8.612137][ T167] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffc27bb3778 [ 8.612330][ T167] R13: 00007ffc27bb3800 R14: 0000000000000002 R15: 0000000000543540 | [ 98.401211][ T167] ------------[ cut here ]------------ | [ 98.401407][ T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#1: packetdrill/167 | [ 98.401684][ T167] Modules linked in: | [ 98.402125][ T167] Tainted: [W]=WARN [ 98.402244][ T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 98.402415][ T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3)) [ 98.402591][ T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff All code ======== 0: 89 fa mov %edi,%edx 2: 48 c1 ea 03 shr $0x3,%rdx 6: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx a: 48 89 f8 mov %rdi,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 79 jne 0x94 1b: 48 8b 44 24 58 mov 0x58(%rsp),%rax 20: 44 8b 48 08 mov 0x8(%rax),%r9d 24: e9 42 ff ff ff jmp 0xffffffffffffff6b 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 48 89 de mov %rbx,%rsi 35: 31 ff xor %edi,%edi 37: e8 38 ff f0 ff call 0xfffffffffff0ff74 3c: b9 .byte 0xb9 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 48 89 de mov %rbx,%rsi b: 31 ff xor %edi,%edi d: e8 38 ff f0 ff call 0xfffffffffff0ff4a 12: b9 .byte 0xb9 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 98.403068][ T167] RSP: 0018:ffa00000007f76f0 EFLAGS: 00010286 [ 98.403245][ T167] RAX: 00000000ffffffa6 RBX: ff110000053ea040 RCX: 1ff40000000feea4 [ 98.403446][ T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff110000053ea0f0 [ 98.403645][ T167] RBP: ff11000004998000 R08: 1fe2200000a7d41f R09: ff1100000ce5d158 [ 98.403844][ T167] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000041 [ 98.404044][ T167] R13: 0000000000000000 R14: 0000000000000000 R15: ffa00000007f7790 [ 98.404250][ T167] FS: 0000000000000000(0000) GS:ff11000082c53000(0000) knlGS:0000000000000000 [ 98.404484][ T167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.404652][ T167] CR2: 0000555711b7a1b0 CR3: 0000000017739001 CR4: 0000000000771ef0 [ 98.404854][ T167] PKRU: 55555554 [ 98.404954][ T167] Call Trace: [ 98.405054][ T167] [ 98.405123][ T167] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4551) [ 98.405267][ T167] rtmsg_ifinfo (net/core/rtnetlink.c:4551 net/core/rtnetlink.c:4560) [ 98.405369][ T167] netif_close_many (net/core/dev.c:1804) [ 98.405503][ T167] ? asym_cpu_capacity_scan (./include/linux/rculist.h:103) [ 98.405638][ T167] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 98.405771][ T167] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 98.405903][ T167] ? __dev_close_many (net/core/dev.c:1781) [ 98.406036][ T167] ? netif_close_many_and_unlock (net/core/dev.c:12330) [ 98.406206][ T167] unregister_netdevice_many_notify (net/core/dev.c:12406) [ 98.406377][ T167] ? select_fallback_rq (kernel/sched/sched.h:1383) [ 98.406512][ T167] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 98.406676][ T167] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 98.406810][ T167] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 98.406943][ T167] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 98.407075][ T167] ? __queue_work (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) kernel/workqueue.c:2402 (discriminator 2)) [ 98.407216][ T167] unregister_netdevice_queue (net/core/dev.c:12497 net/core/dev.c:12309 net/core/dev.c:12299) [ 98.407354][ T167] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 98.407486][ T167] ? unregister_netdevice_many (net/core/dev.c:12497) [ 98.407619][ T167] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 98.407752][ T167] ? queue_delayed_work_on (kernel/workqueue.c:2616 (discriminator 6)) [ 98.407886][ T167] __tun_detach (./include/linux/netdevice.h:3455 drivers/net/tun.c:628) [ 98.408023][ T167] tun_chr_close (drivers/net/tun.c:644 drivers/net/tun.c:3505) [ 98.408161][ T167] __fput (fs/file_table.c:510) [ 98.408271][ T167] task_work_run (kernel/task_work.c:233) [ 98.408405][ T167] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 98.408538][ T167] ? task_work_cancel (kernel/task_work.c:190) [ 98.408670][ T167] ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2689 mm/slub.c:6250 mm/slub.c:6377) [ 98.408806][ T167] do_exit (./include/linux/task_work.h:40 kernel/exit.c:976) [ 98.408908][ T167] ? exit_notify (kernel/exit.c:748) [ 98.409040][ T167] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 98.409178][ T167] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 98.409960][ T167] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 98.410095][ T167] do_group_exit (kernel/exit.c:1119) [ 98.410928][ T167] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2)) [ 98.411093][ T167] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 98.411229][ T167] ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:187 kernel/locking/spinlock.c:206) [ 98.412210][ T167] ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:188 (discriminator 1) kernel/locking/spinlock.c:206 (discriminator 1)) [ 98.412501][ T167] get_signal (kernel/signal.c:3037) [ 98.412638][ T167] ? __sys_sendto (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4) net/socket.c:2265 (discriminator 4)) [ 98.412772][ T167] ? __ia32_sys_getpeername (net/socket.c:2219) [ 98.412909][ T167] ? __might_fault (mm/memory.c:7340 (discriminator 5)) [ 98.413045][ T167] ? ptrace_signal (./include/linux/signal.h:87) [ 98.413188][ T167] arch_do_signal_or_restart (arch/x86/kernel/signal.c:337) [ 98.413328][ T167] ? get_sigframe_size (arch/x86/kernel/signal.c:233) [ 98.413464][ T167] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 98.413601][ T167] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 98.413769][ T167] exit_to_user_mode_loop (kernel/entry/common.c:64 kernel/entry/common.c:98) [ 98.413902][ T167] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 98.414038][ T167] do_syscall_64 (./include/linux/irq-entry-common.h:207 ./include/linux/irq-entry-common.h:230 ./include/linux/entry-common.h:318 arch/x86/entry/syscall_64.c:100) [ 98.414175][ T167] ? irq_exit_rcu (kernel/softirq.c:754) [ 98.414310][ T167] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 98.414479][ T167] RIP: 0033:0x4c2d9e [ 98.414589][ T167] Code: Unable to access opcode bytes at 0x4c2d74. Code starting with the faulting instruction =========================================== [ 98.414778][ T167] RSP: 002b:00007ffc27bb2bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 98.414979][ T167] RAX: 0000000000000014 RBX: 0000000000000012 RCX: 00000000004c2d9e [ 98.415184][ T167] RDX: 0000000000000014 RSI: 00007ffc27bb2cb0 RDI: 0000000000000007 [ 98.415388][ T167] RBP: 00007ffc27bb2be0 R08: 00007ffc27bb2c70 R09: 000000000000000c [ 98.415591][ T167] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc27bb3778 [ 98.415790][ T167] R13: 00007ffc27bb3800 R14: 00007ffc27bb2da0 R15: 0000000000543540 | [ 98.420100][ T167] ------------[ cut here ]------------ | [ 98.420271][ T167] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#1: packetdrill/167 | [ 98.420534][ T167] Modules linked in: | [ 98.420932][ T167] Tainted: [W]=WARN [ 98.421029][ T167] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 98.421195][ T167] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3)) [ 98.421370][ T167] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff All code ======== 0: 89 fa mov %edi,%edx 2: 48 c1 ea 03 shr $0x3,%rdx 6: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx a: 48 89 f8 mov %rdi,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 79 jne 0x94 1b: 48 8b 44 24 58 mov 0x58(%rsp),%rax 20: 44 8b 48 08 mov 0x8(%rax),%r9d 24: e9 42 ff ff ff jmp 0xffffffffffffff6b 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 48 89 de mov %rbx,%rsi 35: 31 ff xor %edi,%edi 37: e8 38 ff f0 ff call 0xfffffffffff0ff74 3c: b9 .byte 0xb9 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 48 89 de mov %rbx,%rsi b: 31 ff xor %edi,%edi d: e8 38 ff f0 ff call 0xfffffffffff0ff4a 12: b9 .byte 0xb9 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 98.421832][ T167] RSP: 0018:ffa00000007f7820 EFLAGS: 00010286 [ 98.421996][ T167] RAX: 00000000ffffffa6 RBX: ff11000009a5c940 RCX: 1ff40000000feeca [ 98.422193][ T167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000009a5c9f0 [ 98.422389][ T167] RBP: ff11000004998000 R08: 1fe220000134b93f R09: ff1100000ce5d158 [ 98.422578][ T167] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 98.422770][ T167] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 98.422960][ T167] FS: 0000000000000000(0000) GS:ff11000082c53000(0000) knlGS:0000000000000000 [ 98.423189][ T167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.423356][ T167] CR2: 0000555711b7a1b0 CR3: 0000000017739001 CR4: 0000000000771ef0 [ 98.423546][ T167] PKRU: 55555554 [ 98.423642][ T167] Call Trace: [ 98.423738][ T167] [ 98.423806][ T167] unregister_netdevice_many_notify (net/core/dev.c:12439) [ 98.423973][ T167] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 98.424131][ T167] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 98.424268][ T167] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 98.424397][ T167] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 98.424526][ T167] ? __queue_work (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) kernel/workqueue.c:2402 (discriminator 2)) [ 98.424655][ T167] unregister_netdevice_queue (net/core/dev.c:12497 net/core/dev.c:12309 net/core/dev.c:12299) [ 98.424782][ T167] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 98.424910][ T167] ? unregister_netdevice_many (net/core/dev.c:12497) [ 98.425038][ T167] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 98.425169][ T167] ? queue_delayed_work_on (kernel/workqueue.c:2616 (discriminator 6)) [ 98.425303][ T167] __tun_detach (./include/linux/netdevice.h:3455 drivers/net/tun.c:628) [ 98.425433][ T167] tun_chr_close (drivers/net/tun.c:644 drivers/net/tun.c:3505) [ 98.425560][ T167] __fput (fs/file_table.c:510) [ 98.425660][ T167] task_work_run (kernel/task_work.c:233) [ 98.425789][ T167] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 98.425916][ T167] ? task_work_cancel (kernel/task_work.c:190) [ 98.426044][ T167] ? kmem_cache_free (./include/linux/kasan.h:235 mm/slub.c:2689 mm/slub.c:6250 mm/slub.c:6377) [ 98.426179][ T167] do_exit (./include/linux/task_work.h:40 kernel/exit.c:976) [ 98.426278][ T167] ? exit_notify (kernel/exit.c:748) [ 98.426408][ T167] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 98.426536][ T167] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 98.426663][ T167] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 98.426792][ T167] do_group_exit (kernel/exit.c:1119) [ 98.426919][ T167] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2)) [ 98.427079][ T167] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 98.427212][ T167] ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:187 kernel/locking/spinlock.c:206) [ 98.427345][ T167] ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:188 (discriminator 1) kernel/locking/spinlock.c:206 (discriminator 1)) [ 98.427641][ T167] get_signal (kernel/signal.c:3037) [ 98.427806][ T167] ? __sys_sendto (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4) net/socket.c:2265 (discriminator 4)) [ 98.427938][ T167] ? __ia32_sys_getpeername (net/socket.c:2219) [ 98.428084][ T167] ? __might_fault (mm/memory.c:7340 (discriminator 5)) [ 98.428322][ T167] ? ptrace_signal (./include/linux/signal.h:87) [ 98.428470][ T167] arch_do_signal_or_restart (arch/x86/kernel/signal.c:337) [ 98.428613][ T167] ? get_sigframe_size (arch/x86/kernel/signal.c:233) [ 98.428757][ T167] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 98.428979][ T167] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 98.429150][ T167] exit_to_user_mode_loop (kernel/entry/common.c:64 kernel/entry/common.c:98) [ 98.429285][ T167] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 98.429415][ T167] do_syscall_64 (./include/linux/irq-entry-common.h:207 ./include/linux/irq-entry-common.h:230 ./include/linux/entry-common.h:318 arch/x86/entry/syscall_64.c:100) [ 98.429626][ T167] ? irq_exit_rcu (kernel/softirq.c:754) [ 98.429755][ T167] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 98.429913][ T167] RIP: 0033:0x4c2d9e [ 98.430016][ T167] Code: Unable to access opcode bytes at 0x4c2d74. Code starting with the faulting instruction =========================================== [ 98.430279][ T167] RSP: 002b:00007ffc27bb2bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 98.430472][ T167] RAX: 0000000000000014 RBX: 0000000000000012 RCX: 00000000004c2d9e [ 98.430747][ T167] RDX: 0000000000000014 RSI: 00007ffc27bb2cb0 RDI: 0000000000000007 [ 98.430936][ T167] RBP: 00007ffc27bb2be0 R08: 00007ffc27bb2c70 R09: 000000000000000c [ 98.431125][ T167] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc27bb3778 [ 98.431324][ T167] R13: 00007ffc27bb3800 R14: 00007ffc27bb2da0 R15: 0000000000543540 | [ 98.458676][ T12] ------------[ cut here ]------------ | [ 98.458890][ T12] WARNING: net/core/rtnetlink.c:4523 at rtmsg_ifinfo_build_skb+0x1a6/0x250, CPU#3: 0/12 | [ 98.459130][ T12] Modules linked in: | [ 98.459593][ T12] Tainted: [W]=WARN [ 98.459685][ T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 98.459843][ T12] Workqueue: netns cleanup_net [ 98.459980][ T12] RIP: 0010:rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4523 (discriminator 3)) [ 98.460139][ T12] Code: 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 79 48 8b 44 24 58 44 8b 48 08 e9 42 ff ff ff 90 <0f> 0b 90 ba 02 00 00 00 48 89 de 31 ff e8 38 ff f0 ff b9 a6 ff ff All code ======== 0: 89 fa mov %edi,%edx 2: 48 c1 ea 03 shr $0x3,%rdx 6: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx a: 48 89 f8 mov %rdi,%rax d: 83 e0 07 and $0x7,%eax 10: 83 c0 03 add $0x3,%eax 13: 38 d0 cmp %dl,%al 15: 7c 04 jl 0x1b 17: 84 d2 test %dl,%dl 19: 75 79 jne 0x94 1b: 48 8b 44 24 58 mov 0x58(%rsp),%rax 20: 44 8b 48 08 mov 0x8(%rax),%r9d 24: e9 42 ff ff ff jmp 0xffffffffffffff6b 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: ba 02 00 00 00 mov $0x2,%edx 32: 48 89 de mov %rbx,%rsi 35: 31 ff xor %edi,%edi 37: e8 38 ff f0 ff call 0xfffffffffff0ff74 3c: b9 .byte 0xb9 3d: a6 cmpsb (%rdi),(%rsi) 3e: ff (bad) 3f: ff .byte 0xff Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: ba 02 00 00 00 mov $0x2,%edx 8: 48 89 de mov %rbx,%rsi b: 31 ff xor %edi,%edi d: e8 38 ff f0 ff call 0xfffffffffff0ff4a 12: b9 .byte 0xb9 13: a6 cmpsb (%rdi),(%rsi) 14: ff (bad) 15: ff .byte 0xff [ 98.460636][ T12] RSP: 0018:ffa00000000c7878 EFLAGS: 00010286 [ 98.460856][ T12] RAX: 00000000ffffffa6 RBX: ff11000009a5de40 RCX: 1ff4000000018ed5 [ 98.461039][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000009a5def0 [ 98.461223][ T12] RBP: ff1100000a0d1000 R08: 1fe220000134bbdf R09: ff11000001afd1d0 [ 98.461415][ T12] R10: 0000000000000003 R11: 0000000000000001 R12: 00000000ffffffff [ 98.461609][ T12] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 98.461790][ T12] FS: 0000000000000000(0000) GS:ff11000082d53000(0000) knlGS:0000000000000000 [ 98.462000][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.462154][ T12] CR2: 00007f2f128ad770 CR3: 00000000049f0004 CR4: 0000000000771ef0 [ 98.462339][ T12] PKRU: 55555554 [ 98.462431][ T12] Call Trace: [ 98.462520][ T12] [ 98.462583][ T12] unregister_netdevice_many_notify (net/core/dev.c:12439) [ 98.462737][ T12] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 98.462887][ T12] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 98.463007][ T12] default_device_exit_batch (net/core/dev.c:12497 net/core/dev.c:13089) [ 98.463131][ T12] ? generic_xdp_install (./include/linux/netdevice.h:5659) [ 98.463261][ T12] ? ipmr_free_table (net/ipv4/ipmr.c:453) [ 98.463382][ T12] ? unregister_netdev (./include/net/net_namespace.h:419 (discriminator 7)) [ 98.463503][ T12] ? rtnl_is_locked (net/core/rtnetlink.c:169) [ 98.463623][ T12] ? nexthop_net_exit_rtnl (./include/linux/rtnetlink.h:150 (discriminator 1) net/ipv4/nexthop.c:4145 (discriminator 1)) [ 98.463743][ T12] ops_undo_list (net/core/net_namespace.c:205 net/core/net_namespace.c:252) [ 98.463869][ T12] ? rtnl_net_dumpid_one (net/core/net_namespace.c:1094) [ 98.463988][ T12] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 98.464110][ T12] cleanup_net (net/core/net_namespace.c:702) [ 98.464245][ T12] ? net_passive_dec (./include/linux/llist.h:241) [ 98.464364][ T12] ? process_one_work (kernel/workqueue.c:3290 (discriminator 2)) [ 98.464484][ T12] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 98.464604][ T12] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 98.464726][ T12] process_one_work (kernel/workqueue.c:3314) [ 98.464850][ T12] ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4)) [ 98.464967][ T12] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 98.465095][ T12] worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478) [ 98.465224][ T12] ? rescuer_thread (./include/linux/list.h:404 (discriminator 3)) [ 98.465355][ T12] kthread (kernel/kthread.c:436) [ 98.465447][ T12] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 98.465596][ T12] ? kthread_affine_node (kernel/kthread.c:378) [ 98.465716][ T12] ret_from_fork (arch/x86/kernel/process.c:158) [ 98.465835][ T12] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 98.465985][ T12] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 98.466108][ T12] ? kthread_affine_node (kernel/kthread.c:378) Finger prints: rtmsg_ifinfo_build_skb:rtmsg_ifinfo:register_netdevice:register_netdev:loopback_net_init rtmsg_ifinfo_build_skb:rtmsg_ifinfo:register_netdevice:__tun_chr_ioctl:__x64_sys_ioctl rtmsg_ifinfo_build_skb:unregister_netdevice_many_notify:unregister_netdevice_queue:__tun_detach:tun_chr_close rtmsg_ifinfo_build_skb:rtmsg_ifinfo:netif_close_many:unregister_netdevice_many_notify:unregister_netdevice_queue rtmsg_ifinfo_build_skb:rtnetlink_event:notifier_call_chain:netdev_update_features:__tun_chr_ioctl rtmsg_ifinfo_build_skb:rtmsg_ifinfo:__dev_notify_flags:netif_change_flags:dev_change_flags rtmsg_ifinfo_build_skb:unregister_netdevice_many_notify:default_device_exit_batch:ops_undo_list:cleanup_net