====================================== | [ 265.504839][ T35] br0: port 2(s1) entered disabled state | [ 265.508220][ T35] br0: port 4(s2) entered disabled state | [ 265.681004][ T3051] Oops: general protection fault, probably for non-canonical address 0xe79c2e6d00ad0160: 0000 [#1] SMP KASAN | [ 265.681449][ T3051] KASAN: maybe wild-memory-access in range [0x3ce1936805680b00-0x3ce1936805680b07] [ 265.682064][ T3051] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 265.682281][ T3051] RIP: 0010:bond_fill_info (drivers/net/bonding/bond_netlink.c:733) [ 265.682476][ T3051] Code: 5d 08 41 b9 08 00 00 00 48 8d ac 24 ee 00 00 00 45 31 f6 41 29 d9 4d 63 c6 49 83 f8 05 0f 87 98 0f 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 All code ======== 0: 5d pop %rbp 1: 08 41 b9 or %al,-0x47(%rcx) 4: 08 00 or %al,(%rax) 6: 00 00 add %al,(%rax) 8: 48 8d ac 24 ee 00 00 lea 0xee(%rsp),%rbp f: 00 10: 45 31 f6 xor %r14d,%r14d 13: 41 29 d9 sub %ebx,%r9d 16: 4d 63 c6 movslq %r14d,%r8 19: 49 83 f8 05 cmp $0x5,%r8 1d: 0f 87 98 0f 00 00 ja 0xfbb 23: 48 89 d8 mov %rbx,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx <-- trapping instruction 2f: 48 89 d8 mov %rbx,%rax 32: 83 e0 07 and $0x7,%eax 35: 83 c0 01 add $0x1,%eax 38: 38 d0 cmp %dl,%al 3a: 7c 08 jl 0x44 3c: 84 d2 test %dl,%dl 3e: 0f .byte 0xf 3f: 85 .byte 0x85 Code starting with the faulting instruction =========================================== 0: 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx 5: 48 89 d8 mov %rbx,%rax 8: 83 e0 07 and $0x7,%eax b: 83 c0 01 add $0x1,%eax e: 38 d0 cmp %dl,%al 10: 7c 08 jl 0x1a 12: 84 d2 test %dl,%dl 14: 0f .byte 0xf 15: 85 .byte 0x85 [ 265.683093][ T3051] RSP: 0018:ffffc900054b6db8 EFLAGS: 00010206 [ 265.683312][ T3051] RAX: 079c326d00ad0160 RBX: 3ce1936805680b00 RCX: 0000000000000000 [ 265.683578][ T3051] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff88800ead2ef0 [ 265.683837][ T3051] RBP: ffffc900054b6ea6 R08: 0000000000000000 R09: 00000000fa97f508 [ 265.684109][ T3051] R10: 0000000000000000 R11: ffffffffa1b6ff00 R12: dffffc0000000000 [ 265.684372][ T3051] R13: ffff88800ead2ee8 R14: 0000000000000000 R15: 0000000000000000 [ 265.684639][ T3051] FS: 00007f60a9194800(0000) GS:ffff88809352c000(0000) knlGS:0000000000000000 [ 265.684945][ T3051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.685167][ T3051] CR2: 00000000004e5a38 CR3: 000000000f115005 CR4: 0000000000772ef0 [ 265.685428][ T3051] PKRU: 55555554 [ 265.685561][ T3051] Call Trace: [ 265.685691][ T3051] [ 265.685784][ T3051] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 265.685970][ T3051] ? bond_slave_changelink (drivers/net/bonding/bond_netlink.c:677) [ 265.686141][ T3051] ? rtnl_xdp_prog_skb (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:1696) [ 265.686314][ T3051] ? __lock_release (kernel/locking/lockdep.c:5536) [ 265.686484][ T3051] ? nla_put (lib/nlattr.c:1100) [ 265.686622][ T3051] ? rtnl_xdp_fill (net/core/rtnetlink.c:1762) [ 265.686794][ T3051] ? nla_put (lib/nlattr.c:1100) [ 265.686923][ T3051] rtnl_link_fill (net/core/rtnetlink.c:901 net/core/rtnetlink.c:921) [ 265.687098][ T3051] rtnl_fill_ifinfo.constprop.0 (net/core/rtnetlink.c:2139) [ 265.687315][ T3051] ? rtnl_fill_vf (net/core/rtnetlink.c:2021) [ 265.687486][ T3051] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/preempt.h:104 ./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 265.687709][ T3051] ? trace_kmalloc (./include/trace/events/kmem.h:54 (discriminator 21)) [ 265.687885][ T3051] ? __kmalloc_node_track_caller_noprof (mm/slub.c:4397) [ 265.688101][ T3051] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 265.688277][ T3051] ? __alloc_skb (net/core/skbuff.c:670) [ 265.688450][ T3051] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:383 net/core/skbuff.c:440) [ 265.688629][ T3051] ? __alloc_skb (net/core/skbuff.c:686) [ 265.688802][ T3051] ? napi_skb_cache_get (net/core/skbuff.c:643) [ 265.688973][ T3051] ? rtnl_prop_list_size (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:1233) [ 265.689145][ T3051] rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4409) [ 265.689319][ T3051] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4444) [ 265.689494][ T3051] rtmsg_ifinfo (net/core/rtnetlink.c:4453 net/core/rtnetlink.c:4451) [ 265.689624][ T3051] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/preempt.h:104 ./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 265.689836][ T3051] __dev_notify_flags (net/core/dev.c:9675) [ 265.690005][ T3051] ? debug_object_activate (lib/debugobjects.c:732) [ 265.690183][ T3051] ? netif_change_name (net/core/dev.c:9668) [ 265.690355][ T3051] ? __queue_work (kernel/workqueue.c:2481) [ 265.690532][ T3051] ? __queue_work (kernel/workqueue.c:2481) [ 265.690702][ T3051] ? lockdep_init_map_type (kernel/locking/lockdep.c:4973) [ 265.690878][ T3051] rtnl_configure_link (net/core/rtnetlink.c:3600) [ 265.691051][ T3051] rtnl_newlink_create (net/core/rtnetlink.c:3844) [ 265.691226][ T3051] ? rtnl_create_link (net/core/rtnetlink.c:3799) [ 265.691395][ T3051] ? __dev_get_by_name (net/core/dev.c:865) [ 265.691568][ T3051] ? rtnl_dev_get (net/core/rtnetlink.c:3412) [ 265.691738][ T3051] ? rtnl_validate_mdb_entry_del_bulk (net/core/rtnetlink.c:3412) [ 265.691951][ T3051] ? rtnl_newlink (net/core/rtnetlink.c:343 net/core/rtnetlink.c:4064) [ 265.692121][ T3051] ? reacquire_held_locks (kernel/locking/lockdep.c:5385) [ 265.692296][ T3051] __rtnl_newlink (net/core/rtnetlink.c:3950) [ 265.692469][ T3051] rtnl_newlink (net/core/rtnetlink.c:351 net/core/rtnetlink.c:4066) [ 265.692645][ T3051] ? __rtnl_newlink (net/core/rtnetlink.c:3956) [ 265.692817][ T3051] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:6952) [ 265.692987][ T3051] ? __lock_release (kernel/locking/lockdep.c:5536) [ 265.693159][ T3051] ? __rtnl_newlink (net/core/rtnetlink.c:3956) [ 265.693331][ T3051] rtnetlink_rcv_msg (net/core/rtnetlink.c:6954) [ 265.693503][ T3051] ? validate_chain (kernel/locking/lockdep.c:3801 kernel/locking/lockdep.c:3821 kernel/locking/lockdep.c:3876) [ 265.693674][ T3051] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 265.693849][ T3051] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 265.694033][ T3051] netlink_rcv_skb (net/netlink/af_netlink.c:2552) [ 265.694206][ T3051] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 265.694379][ T3051] ? netlink_ack (net/netlink/af_netlink.c:2529) [ 265.694557][ T3051] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/netlink/af_netlink.c:340) [ 265.694733][ T3051] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 265.694905][ T3051] netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1346) [ 265.695072][ T3051] ? netlink_attachskb (net/netlink/af_netlink.c:1331) [ 265.695242][ T3051] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 265.695414][ T3051] netlink_sendmsg (net/netlink/af_netlink.c:1896) [ 265.695587][ T3051] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 265.695756][ T3051] ? __import_iovec (lib/iov_iter.c:1441 lib/iov_iter.c:1456) [ 265.695931][ T3051] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 265.696100][ T3051] ____sys_sendmsg (net/socket.c:727 net/socket.c:742 net/socket.c:2627) [ 265.696273][ T3051] ? get_timestamp.constprop.0 (net/socket.c:2573) [ 265.696483][ T3051] ? __copy_msghdr (net/socket.c:2553) [ 265.696658][ T3051] ___sys_sendmsg (net/socket.c:2683) [ 265.696828][ T3051] ? kasan_record_aux_stack (mm/kasan/generic.c:548) [ 265.697001][ T3051] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:127 kernel/rcu/tree.c:3125) [ 265.697218][ T3051] ? copy_msghdr_from_user (net/socket.c:2670) [ 265.697387][ T3051] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 265.697564][ T3051] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 265.697846][ T3051] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 265.698017][ T3051] ? __virt_addr_valid (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 ./include/linux/mmzone.h:2172 arch/x86/mm/physaddr.c:65) [ 265.698193][ T3051] ? __lock_release (kernel/locking/lockdep.c:5536) [ 265.698365][ T3051] __sys_sendmsg (net/socket.c:2713) [ 265.698640][ T3051] ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3148) [ 265.698853][ T3051] ? __sys_sendmsg_sock (net/socket.c:2698) [ 265.699025][ T3051] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 265.699193][ T3051] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 265.699472][ T3051] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 265.699682][ T3051] RIP: 0033:0x7f60a93621d7 [ 265.699862][ T3051] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0e (bad) 1: 00 f7 add %dh,%bh 3: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 265.700582][ T3051] RSP: 002b:00007ffe45c6ab78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.700843][ T3051] RAX: ffffffffffffffda RBX: 00007ffe45c6b2b0 RCX: 00007f60a93621d7 [ 265.701207][ T3051] RDX: 0000000000000000 RSI: 00007ffe45c6abe0 RDI: 0000000000000005 [ 265.701464][ T3051] RBP: 000000000000000a R08: 0000000000000068 R09: 0000000000000000 [ 265.701835][ T3051] R10: 00007f60a93f0ac0 R11: 0000000000000246 R12: 00007ffe45c6b2c8 Finger prints: bond_fill_info:rtnl_link_fill:rtmsg_ifinfo_build_skb:rtmsg_ifinfo:__dev_notify_flags