Re: [Qemu-devel] qemu-system_x86-64 (32-bit binary) -M q35 can be crashed on viewing youtube.

[Fam Zheng]

On Mon, 07/23 03:42, Andrew Randrianasulu wrote:
> It was crashing and crashing, so I tried to debug it a bit ... 
> 
> 
> valgrind --leak-check=yes /dev/shm/qemu/x86_64-softmmu/qemu-system-x86_64  
> -display 
> sdl,gl=on  -M q35 -soundhw 
> hda -cdrom /home/guest/Downloads/ISO/slax-English-US-7.0.8-x86_64.iso -m 
> 1G -enable-kvm -d trace:e1000e*   shows some errors at very end, see attached 
> file.
> 
> For reproduction, wait for liveCD to finish loading, start firefox, go to 
> youtube.com, it will warn you about outdated browser but continue anyway, try 
> to click on any video ....
> 
> It seems even modern KDE Neon distribution affected by same bug :/

Cc'ing Jason and Samuel/Jan who maintain net and slirp respectively.

> --------------quote-----
> 
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), 
> value: 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 
> 0x1500004 --> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending 
> bit for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 
> 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), 
> value: 0x97
> address@hidden:e1000e_tx_descr 0x21180e : 27000b68 5b43600
> address@hidden:e1000e_tx_descr 0x3bf970fa : 261005c6 300
> address@hidden:e1000e_tx_descr 0x1c1c8000 : af1005d8 300
> ==29362== Invalid write of size 4
> ==29362==    at 0x552E58: memcpy (string3.h:53)
> ==29362==    by 0x552E58: m_cat (mbuf.c:143)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==  Address 0x114f9b60 is 0 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid write of size 4
> ==29362==    at 0x552E5E: memcpy (string3.h:53)
> ==29362==    by 0x552E5E: m_cat (mbuf.c:143)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==  Address 0x114f9b78 is 24 bytes before an unallocated block of size 
> 156,632 in arena "client"
> ==29362==
> ==29362== Invalid write of size 4
> ==29362==    at 0x552E6B: memcpy (string3.h:53)
> ==29362==    by 0x552E6B: m_cat (mbuf.c:143)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==  Address 0x114f9b64 is 4 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D710: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b60 is 0 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D716: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b62 is 2 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D71C: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b64 is 4 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D722: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b66 is 6 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D728: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b68 is 8 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D72E: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b6a is 10 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D734: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b6c is 12 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D73A: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b6e is 14 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D780: cksum (cksum.c:100)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b72 is 18 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D784: cksum (cksum.c:100)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b70 is 16 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> 
> valgrind: m_mallocfree.c:303 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' 
> failed.
> valgrind: Heap block lo/hi size mismatch: lo = 3024, hi = 4106420400.
> This is probably caused by your program erroneously writing past the
> end of a heap block and corrupting heap metadata.  If you fix any
> invalid writes reported by Memcheck, this assertion failure will
> probably go away.  Please try that before reporting this as a bug.
> 
> 
> host stacktrace:
> ==29362==    at 0x3803B71E: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803B846: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803B96D: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3804BE12: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803424E: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x380321BF: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803262F: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803714E: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803169D: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3800FCEB: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x8809D25D: ???
> 
> sched status:
>   running_tid=5
> 
> Thread 1: status = VgTs_WaitSys (lwpid 29362)
> ==29362==    at 0x55413CE: ppoll (in /lib/libc-2.23.so)
> ==29362==    by 0x683634: ppoll (poll2.h:77)
> ==29362==    by 0x683634: qemu_poll_ns (qemu-timer.c:334)
> ==29362==    by 0x6847C9: os_host_main_loop_wait (main-loop.c:233)
> ==29362==    by 0x6847C9: main_loop_wait (main-loop.c:497)
> ==29362==    by 0x398A6D: main_loop (vl.c:1866)
> ==29362==    by 0x1FF9E9: main (vl.c:4644)
> 
> Thread 2: status = VgTs_WaitSys (lwpid 29363)
> ==29362==    at 0x5547C12: syscall (in /lib/libc-2.23.so)
> ==29362==    by 0x68854C: qemu_futex_wait (futex.h:29)
> ==29362==    by 0x68854C: qemu_event_wait (qemu-thread-posix.c:442)
> ==29362==    by 0x69A300: call_rcu_thread (rcu.c:261)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 3: status = VgTs_WaitSys (lwpid 29364)
> ==29362==    at 0x55413CE: ppoll (in /lib/libc-2.23.so)
> ==29362==    by 0x68365D: ppoll (poll2.h:77)
> ==29362==    by 0x68365D: qemu_poll_ns (qemu-timer.c:322)
> ==29362==    by 0x68569D: aio_poll (aio-posix.c:629)
> ==29362==    by 0x391D8C: iothread_run (iothread.c:64)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 4: status = VgTs_WaitSys (lwpid 29492)
> ==29362==    at 0x54593FD: __libc_do_syscall (in /lib/libpthread-2.23.so)
> ==29362==    by 0x5456148: do_futex_wait (in /lib/libpthread-2.23.so)
> ==29362==    by 0x5456258: __new_sem_wait_slow (in /lib/libpthread-2.23.so)
> ==29362==    by 0x6882B5: qemu_sem_timedwait (qemu-thread-posix.c:289)
> ==29362==    by 0x682B05: worker_thread (thread-pool.c:92)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 5: status = VgTs_Runnable (lwpid 29367)
> ==29362==    at 0x54D78C: cksum (cksum.c:100)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x47C1C1: net_tx_pkt_sendv (net_tx_pkt.c:546)
> ==29362==    by 0x47C1C1: net_tx_pkt_do_sw_fragmentation (net_tx_pkt.c:588)
> ==29362==    by 0x47CF0F: net_tx_pkt_send (net_tx_pkt.c:625)
> ==29362==    by 0x487256: e1000e_tx_pkt_send (e1000e_core.c:665)
> ==29362==    by 0x487256: e1000e_process_tx_desc (e1000e_core.c:742)
> ==29362==    by 0x487256: e1000e_start_xmit (e1000e_core.c:933)
> ==29362==    by 0x4875DF: e1000e_set_tdt (e1000e_core.c:2450)
> ==29362==    by 0x48A7F3: e1000e_core_write (e1000e_core.c:3255)
> ==29362==    by 0x47FCD1: e1000e_mmio_write (e1000e.c:105)
> ==29362==    by 0x271548: memory_region_write_accessor (memory.c:527)
> ==29362==    by 0x26D783: access_with_adjusted_size (memory.c:594)
> ==29362==    by 0x274308: memory_region_dispatch_write (memory.c:1486)
> ==29362==    by 0x209B6C: flatview_write_continue (exec.c:3255)
> ==29362==    by 0x209DA4: flatview_write (exec.c:3294)
> ==29362==    by 0x20E0A4: address_space_write (exec.c:3384)
> ==29362==    by 0x288278: kvm_cpu_exec (kvm-all.c:1979)
> ==29362==    by 0x25B256: qemu_kvm_cpu_thread_fn (cpus.c:1215)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 6: status = VgTs_WaitSys (lwpid 29373)
> ==29362==    at 0x5453AE1: pthread_cond_wait@@GLIBC_2.3.2 
> (in /lib/libpthread-2.23.so)
> ==29362==    by 0xC3F5149: ??? (in /usr/X11R7/lib/dri/nouveau_dri.so)
> ==29362==    by 0xC3F4EB4: ??? (in /usr/X11R7/lib/dri/nouveau_dri.so)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> 
> Note: see also the FAQ in the source distribution.
> It contains workarounds to several common problems.
> In particular, if Valgrind aborted or crashed after
> identifying problems in your program, there's a good chance
> that fixing those problems will prevent Valgrind aborting or
> crashing, especially if it happened in m_mallocfree.c.
> 
> If that doesn't help, please report this bug to: www.valgrind.org
> 
> In the bug report, send all the above text, the valgrind
> version, and what OS and version you are using.  Thanks.
> 
> ------------quote end-----
> 
> it seems slirp (user-mode networking) and e1000e doesn't work yet?
> 
> 
> You can download slax-English-US-7.0.8-x86_64.iso for example from 
> http://ftp.linux.cz/pub/linux/slax/Slax-7.x/7.0.8/
> 
> default machine (without M parameter) works fine, also -M pc-q35-2.11 works 
> fine.
> 
> qemu-system-x86_64 --version
> QEMU emulator version 2.12.91 (v3.0.0-rc1-17-g5b3ecd3d94-dirty)
> Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers
> 
> (same as in my qemu-system-ppc bug)

> address@hidden:e1000e_rx_metadata_ack the packet is TCP ACK
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 37, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_postponed_by_xitr Interrupt postponed by [E]ITR 
> register 0xec
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x84
> address@hidden:e1000e_tx_descr (nil) : 21000000 0
> address@hidden:e1000e_tx_descr 0x286f5cfa : ab100036 200
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_read Read from register 0x4000, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x4074, 4 byte(s), value: 
> 0x625
> address@hidden:e1000e_core_read Read from register 0x4088, 4 byte(s), value: 
> 0x1c469a
> address@hidden:e1000e_core_read Read from register 0x408c, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x4078, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x407c, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40ac, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x4010, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x4048, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x404c, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x4050, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x4054, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x4080, 4 byte(s), value: 
> 0x12
> address@hidden:e1000e_core_read Read from register 0x4090, 4 byte(s), value: 
> 0x1f3fc
> address@hidden:e1000e_core_read Read from register 0x4094, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40a0, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40a4, 4 byte(s), value: 
> 0x8
> address@hidden:e1000e_core_read Read from register 0x40f0, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40f4, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40d4, 4 byte(s), value: 
> 0x12
> address@hidden:e1000e_core_read Read from register 0x4004, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x400c, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x403c, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40f8, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40fc, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40bc, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40b4, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_read Read from register 0x40b8, 4 byte(s), value: 
> 0x0
> address@hidden:e1000e_core_write Write to register 0xc8, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_write_ics Adding ICR bits 0x100000
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_core_write Write to register 0x3820, 4 byte(s), value: 
> 0x80000008
> address@hidden:e1000e_irq_tidv_fpd_not_running FPD written while TIDV was not 
> running
> address@hidden:e1000e_core_write Write to register 0x2820, 4 byte(s), value: 
> 0x80000020
> address@hidden:e1000e_irq_rdtr_fpd_not_running FPD written while RDTR was not 
> running
> address@hidden:e1000e_link_status Link up: 1, Duplex: 1, Speed: 2, ASDV: 2
> address@hidden:e1000e_core_read Read from register 0x8, 4 byte(s), value: 
> 0x283
> address@hidden:e1000e_core_write Write to register 0x3820, 4 byte(s), value: 
> 0x80000008
> address@hidden:e1000e_irq_tidv_fpd_not_running FPD written while TIDV was not 
> running
> address@hidden:e1000e_core_write Write to register 0x2820, 4 byte(s), value: 
> 0x80000020
> address@hidden:e1000e_irq_rdtr_fpd_not_running FPD written while RDTR was not 
> running
> address@hidden:e1000e_link_status Link up: 1, Duplex: 1, Speed: 2, ASDV: 2
> address@hidden:e1000e_core_read Read from register 0x8, 4 byte(s), value: 
> 0x283
> address@hidden:e1000e_core_read Read from register 0xf00, 4 byte(s), value: 
> 0x8
> address@hidden:e1000e_core_write Write to register 0xf00, 4 byte(s), value: 
> 0x28
> address@hidden:e1000e_core_read Read from register 0xf00, 4 byte(s), value: 
> 0x28
> address@hidden:e1000e_core_write Write to register 0x20, 4 byte(s), value: 
> 0x4360000
> address@hidden:e1000e_core_mdic_write MDIC WRITE: PHY[0][22] = 0x0
> address@hidden:e1000e_core_read Read from register 0x20, 4 byte(s), value: 
> 0x14360000
> address@hidden:e1000e_core_write Write to register 0x20, 4 byte(s), value: 
> 0x8350000
> address@hidden:e1000e_core_mdic_read MDIC READ: PHY[0][21] = 0x8350000
> address@hidden:e1000e_core_read Read from register 0x20, 4 byte(s), value: 
> 0x18350000
> address@hidden:e1000e_core_read Read from register 0xf00, 4 byte(s), value: 
> 0x28
> address@hidden:e1000e_core_write Write to register 0xf00, 4 byte(s), value: 
> 0x8
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x86
> address@hidden:e1000e_tx_descr (nil) : 21000000 0
> address@hidden:e1000e_tx_descr 0x3bf970fa : ab1001b8 200
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 37, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 251, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 37, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 251, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 37, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 251, packet size 
> 60, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a250, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5fc3c0, offset: 
> 0, from: 0x8697c00, length: 60
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 0, tcp: 1
> address@hidden:e1000e_rx_metadata_ack the packet is TCP ACK
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 38, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x88
> address@hidden:e1000e_tx_descr (nil) : 21000000 0
> address@hidden:e1000e_tx_descr 0x3bf970fa : ab100520 200
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 38, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 250, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 38, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 250, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 38, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 250, packet size 
> 60, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a260, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5fcb40, offset: 
> 0, from: 0x8697c00, length: 60
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 0, tcp: 1
> address@hidden:e1000e_rx_metadata_ack the packet is TCP ACK
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 39, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 39, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 249, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 39, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 249, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 39, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 249, packet size 
> 205, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a270, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5fd2c0, offset: 
> 0, from: 0xfef3d98c, length: 205
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 0, tcp: 1
> address@hidden:e1000e_rx_metadata_ack the packet is TCP ACK
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 40, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x8a
> address@hidden:e1000e_tx_descr (nil) : 21000000 0
> address@hidden:e1000e_tx_descr 0x286f54fa : ab100036 200
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x8c
> address@hidden:e1000e_tx_descr (nil) : 20000000 0
> address@hidden:e1000e_tx_descr 0x3bee0802 : ab10005a 200
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 40, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 248, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 40, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 248, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 40, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 248, packet size 
> 176, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a280, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5fda40, offset: 
> 0, from: 0xfef3d74c, length: 176
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 1, tcp: 0
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 41, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x8e
> address@hidden:e1000e_tx_descr (nil) : 20000000 0
> address@hidden:e1000e_tx_descr 0x3bee0802 : ab10005a 200
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x90
> address@hidden:e1000e_tx_descr (nil) : 21000000 0
> address@hidden:e1000e_tx_descr 0x3bf970fa : ab100071 200
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 41, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 247, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 41, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 247, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 41, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 247, packet size 
> 60, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a290, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5fe1c0, offset: 
> 0, from: 0x8697c00, length: 60
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 0, tcp: 1
> address@hidden:e1000e_rx_metadata_ack the packet is TCP ACK
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 42, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 42, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 246, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 42, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 246, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 42, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 246, packet size 
> 438, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a2a0, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5fe940, offset: 
> 0, from: 0xfef3d74c, length: 438
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 1, tcp: 0
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 43, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 43, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 245, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 43, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 245, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 43, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 245, packet size 
> 1467, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a2b0, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5ff0c0, offset: 
> 0, from: 0xfef3d98c, length: 1467
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 0, tcp: 1
> address@hidden:e1000e_rx_metadata_ack the packet is TCP ACK
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 44, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 44, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 244, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 44, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 244, packet size 1, 
> descr buffer size 2048
> address@hidden:e1000e_rx_can_recv Can receive
> address@hidden:e1000e_rx_receive_iov Received vector of 1 fragments
> address@hidden:e1000e_rx_rss_started Starting RSS processing
> address@hidden:e1000e_rx_rss_disabled RSS is disabled
> address@hidden:e1000e_rx_rss_dispatched_to_queue Packet being dispatched to 
> queue 0
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 44, DT: 32
> address@hidden:e1000e_rx_has_buffers ring #0: free descr: 244, packet size 
> 704, descr buffer size 2048
> address@hidden:e1000e_rx_descr Next RX descriptor: ring #0, PA: 0x3b20a2c0, 
> length: 16
> address@hidden:e1000e_rx_desc_buff_write buffer #0, addr: 0x3a5ff840, offset: 
> 0, from: 0xfef3d98c, length: 704
> address@hidden:e1000e_rx_metadata_protocols protocols: ip4: 1, ip6: 0, udp: 
> 0, tcp: 1
> address@hidden:e1000e_rx_metadata_ack the packet is TCP ACK
> address@hidden:e1000e_rx_metadata_pkt_type the packet type is 2
> address@hidden:e1000e_rx_metadata_no_virthdr the packet has no virt-header
> address@hidden:e1000e_ring_free_space ring #0: LEN: 4096, DH: 45, DT: 32
> address@hidden:e1000e_rx_written_to_guest Received packet written to guest 
> (ICR causes 1048576)
> address@hidden:e1000e_rx_interrupt_set Receive interrupt set (ICR causes 
> 1048576)
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x100000, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x100000, ICR: 
> 0x80100002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80100002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x100000 (ICR: 
> 0x80100002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xE8, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x0
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x100000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80100002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[0]
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x92
> address@hidden:e1000e_tx_descr (nil) : 21000000 0
> address@hidden:e1000e_tx_descr 0x286f54fa : ab100036 200
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x94
> address@hidden:e1000e_tx_descr (nil) : 21000000 0
> address@hidden:e1000e_tx_descr 0x286f5cfa : ab100036 200
> address@hidden:e1000e_irq_set_cause_entry Going to set IRQ cause 0x400002, 
> ICR: 0x80000002
> address@hidden:e1000e_irq_set_cause_exit Set IRQ cause 0x400002, ICR: 
> 0x80400002
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80400002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x400000 (ICR: 
> 0x80400002, IMS: 0x1500004)
> address@hidden:e1000e_irq_rearm_timer Mitigation timer armed for register 
> 0xEC, delay 128000 ns
> address@hidden:e1000e_irq_msix_notify_vec MSI-X notify vector 0x1
> address@hidden:e1000e_irq_iam_clear_eiame Clearing IMS due to EIAME, IAM: 
> 0xFE0FFFFF, cause: 0x400000
> address@hidden:e1000e_irq_icr_clear_eiac Clearing ICR bits due to EIAC, ICR: 
> 0x80400002, EIAC: 0x500000
> address@hidden:e1000e_irq_msix_notify_postponed_vec Sending MSI-X postponed 
> by EITR[1]
> address@hidden:e1000e_core_write Write to register 0xd0, 4 byte(s), value: 
> 0x100000
> address@hidden:e1000e_irq_set_ims Setting IMS bits 0x100000: 0x1500004 --> 
> 0x1500004
> address@hidden:e1000e_irq_msix_pending_clearing Clearing MSI-X pending bit 
> for cause 0x100000, IVAR config 0x800a0908, vector 0
> address@hidden:e1000e_irq_fix_icr_asserted ICR_ASSERTED bit fixed: 0x80000002
> address@hidden:e1000e_irq_pending_interrupts ICR PENDING: 0x0 (ICR: 
> 0x80000002, IMS: 0x1500004)
> address@hidden:e1000e_core_write Write to register 0x3818, 4 byte(s), value: 
> 0x97
> address@hidden:e1000e_tx_descr 0x21180e : 27000b68 5b43600
> address@hidden:e1000e_tx_descr 0x3bf970fa : 261005c6 300
> address@hidden:e1000e_tx_descr 0x1c1c8000 : af1005d8 300
> ==29362== Invalid write of size 4
> ==29362==    at 0x552E58: memcpy (string3.h:53)
> ==29362==    by 0x552E58: m_cat (mbuf.c:143)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==  Address 0x114f9b60 is 0 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid write of size 4
> ==29362==    at 0x552E5E: memcpy (string3.h:53)
> ==29362==    by 0x552E5E: m_cat (mbuf.c:143)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==  Address 0x114f9b78 is 24 bytes before an unallocated block of size 
> 156,632 in arena "client"
> ==29362==
> ==29362== Invalid write of size 4
> ==29362==    at 0x552E6B: memcpy (string3.h:53)
> ==29362==    by 0x552E6B: m_cat (mbuf.c:143)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==  Address 0x114f9b64 is 4 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D710: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b60 is 0 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D716: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b62 is 2 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D71C: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b64 is 4 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D722: cksum (cksum.c:94)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b66 is 6 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D728: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b68 is 8 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D72E: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b6a is 10 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D734: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b6c is 12 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D73A: cksum (cksum.c:95)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b6e is 14 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D780: cksum (cksum.c:100)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b72 is 18 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> ==29362== Invalid read of size 2
> ==29362==    at 0x54D784: cksum (cksum.c:100)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==  Address 0x114f9b70 is 16 bytes after a block of size 2,976 alloc'd
> ==29362==    at 0x482B29C: malloc (vg_replace_malloc.c:299)
> ==29362==    by 0x534D3E1: g_malloc (in /usr/lib/libglib-2.0.so.0.4600.2)
> ==29362==    by 0x552B53: m_inc.part.1 (mbuf.c:166)
> ==29362==    by 0x552EAE: m_inc (string3.h:53)
> ==29362==    by 0x552EAE: m_cat (mbuf.c:141)
> ==29362==    by 0x54FE1E: ip_reass (ip_input.c:341)
> ==29362==    by 0x54FE1E: ip_input (ip_input.c:190)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==
> 
> valgrind: m_mallocfree.c:303 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' 
> failed.
> valgrind: Heap block lo/hi size mismatch: lo = 3024, hi = 4106420400.
> This is probably caused by your program erroneously writing past the
> end of a heap block and corrupting heap metadata.  If you fix any
> invalid writes reported by Memcheck, this assertion failure will
> probably go away.  Please try that before reporting this as a bug.
> 
> 
> host stacktrace:
> ==29362==    at 0x3803B71E: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803B846: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803B96D: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3804BE12: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803424E: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x380321BF: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803262F: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803714E: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3803169D: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x3800FCEB: ??? (in /usr/lib/valgrind/memcheck-x86-linux)
> ==29362==    by 0x8809D25D: ???
> 
> sched status:
>   running_tid=5
> 
> Thread 1: status = VgTs_WaitSys (lwpid 29362)
> ==29362==    at 0x55413CE: ppoll (in /lib/libc-2.23.so)
> ==29362==    by 0x683634: ppoll (poll2.h:77)
> ==29362==    by 0x683634: qemu_poll_ns (qemu-timer.c:334)
> ==29362==    by 0x6847C9: os_host_main_loop_wait (main-loop.c:233)
> ==29362==    by 0x6847C9: main_loop_wait (main-loop.c:497)
> ==29362==    by 0x398A6D: main_loop (vl.c:1866)
> ==29362==    by 0x1FF9E9: main (vl.c:4644)
> 
> Thread 2: status = VgTs_WaitSys (lwpid 29363)
> ==29362==    at 0x5547C12: syscall (in /lib/libc-2.23.so)
> ==29362==    by 0x68854C: qemu_futex_wait (futex.h:29)
> ==29362==    by 0x68854C: qemu_event_wait (qemu-thread-posix.c:442)
> ==29362==    by 0x69A300: call_rcu_thread (rcu.c:261)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 3: status = VgTs_WaitSys (lwpid 29364)
> ==29362==    at 0x55413CE: ppoll (in /lib/libc-2.23.so)
> ==29362==    by 0x68365D: ppoll (poll2.h:77)
> ==29362==    by 0x68365D: qemu_poll_ns (qemu-timer.c:322)
> ==29362==    by 0x68569D: aio_poll (aio-posix.c:629)
> ==29362==    by 0x391D8C: iothread_run (iothread.c:64)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 4: status = VgTs_WaitSys (lwpid 29492)
> ==29362==    at 0x54593FD: __libc_do_syscall (in /lib/libpthread-2.23.so)
> ==29362==    by 0x5456148: do_futex_wait (in /lib/libpthread-2.23.so)
> ==29362==    by 0x5456258: __new_sem_wait_slow (in /lib/libpthread-2.23.so)
> ==29362==    by 0x6882B5: qemu_sem_timedwait (qemu-thread-posix.c:289)
> ==29362==    by 0x682B05: worker_thread (thread-pool.c:92)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 5: status = VgTs_Runnable (lwpid 29367)
> ==29362==    at 0x54D78C: cksum (cksum.c:100)
> ==29362==    by 0x555C93: tcp_input (tcp_input.c:336)
> ==29362==    by 0x54FEEB: ip_input (ip_input.c:206)
> ==29362==    by 0x552478: slirp_input (slirp.c:874)
> ==29362==    by 0x53FBE7: net_slirp_receive (slirp.c:121)
> ==29362==    by 0x537478: nc_sendv_compat (net.c:701)
> ==29362==    by 0x537478: qemu_deliver_packet_iov (net.c:728)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x53AB71: net_hub_receive_iov (hub.c:73)
> ==29362==    by 0x53AB71: net_hub_port_receive_iov (hub.c:124)
> ==29362==    by 0x53748D: qemu_deliver_packet_iov (net.c:726)
> ==29362==    by 0x53A649: qemu_net_queue_deliver_iov (queue.c:179)
> ==29362==    by 0x53A649: qemu_net_queue_send_iov (queue.c:224)
> ==29362==    by 0x538901: qemu_sendv_packet_async (net.c:764)
> ==29362==    by 0x538925: qemu_sendv_packet (net.c:772)
> ==29362==    by 0x47C1C1: net_tx_pkt_sendv (net_tx_pkt.c:546)
> ==29362==    by 0x47C1C1: net_tx_pkt_do_sw_fragmentation (net_tx_pkt.c:588)
> ==29362==    by 0x47CF0F: net_tx_pkt_send (net_tx_pkt.c:625)
> ==29362==    by 0x487256: e1000e_tx_pkt_send (e1000e_core.c:665)
> ==29362==    by 0x487256: e1000e_process_tx_desc (e1000e_core.c:742)
> ==29362==    by 0x487256: e1000e_start_xmit (e1000e_core.c:933)
> ==29362==    by 0x4875DF: e1000e_set_tdt (e1000e_core.c:2450)
> ==29362==    by 0x48A7F3: e1000e_core_write (e1000e_core.c:3255)
> ==29362==    by 0x47FCD1: e1000e_mmio_write (e1000e.c:105)
> ==29362==    by 0x271548: memory_region_write_accessor (memory.c:527)
> ==29362==    by 0x26D783: access_with_adjusted_size (memory.c:594)
> ==29362==    by 0x274308: memory_region_dispatch_write (memory.c:1486)
> ==29362==    by 0x209B6C: flatview_write_continue (exec.c:3255)
> ==29362==    by 0x209DA4: flatview_write (exec.c:3294)
> ==29362==    by 0x20E0A4: address_space_write (exec.c:3384)
> ==29362==    by 0x288278: kvm_cpu_exec (kvm-all.c:1979)
> ==29362==    by 0x25B256: qemu_kvm_cpu_thread_fn (cpus.c:1215)
> ==29362==    by 0x68792D: qemu_thread_start (qemu-thread-posix.c:504)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> Thread 6: status = VgTs_WaitSys (lwpid 29373)
> ==29362==    at 0x5453AE1: pthread_cond_wait@@GLIBC_2.3.2 (in 
> /lib/libpthread-2.23.so)
> ==29362==    by 0xC3F5149: ??? (in /usr/X11R7/lib/dri/nouveau_dri.so)
> ==29362==    by 0xC3F4EB4: ??? (in /usr/X11R7/lib/dri/nouveau_dri.so)
> ==29362==    by 0x544F308: start_thread (in /lib/libpthread-2.23.so)
> ==29362==    by 0x554CA5D: clone (in /lib/libc-2.23.so)
> 
> 
> Note: see also the FAQ in the source distribution.
> It contains workarounds to several common problems.
> In particular, if Valgrind aborted or crashed after
> identifying problems in your program, there's a good chance
> that fixing those problems will prevent Valgrind aborting or
> crashing, especially if it happened in m_mallocfree.c.
> 
> If that doesn't help, please report this bug to: www.valgrind.org
> 
> In the bug report, send all the above text, the valgrind
> version, and what OS and version you are using.  Thanks.
>