====================================== | [ 279.764152][ T71] br0: port 2(s1) entered disabled state | [ 279.766634][ T71] br0: port 4(s2) entered disabled state | [ 279.965623][ T2935] Oops: general protection fault, probably for non-canonical address 0xecdc78513e8110a0: 0000 [#1] SMP KASAN | [ 279.966119][ T2935] KASAN: maybe wild-memory-access in range [0x66e3e289f4088500-0x66e3e289f4088507] [ 279.966821][ T2935] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 279.967067][ T2935] RIP: 0010:bond_fill_info (drivers/net/bonding/bond_netlink.c:733) [ 279.967267][ T2935] Code: 5d 08 41 b9 08 00 00 00 48 8d ac 24 ee 00 00 00 45 31 f6 41 29 d9 4d 63 c6 49 83 f8 05 0f 87 98 0f 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 All code ======== 0: 5d pop %rbp 1: 08 41 b9 or %al,-0x47(%rcx) 4: 08 00 or %al,(%rax) 6: 00 00 add %al,(%rax) 8: 48 8d ac 24 ee 00 00 lea 0xee(%rsp),%rbp f: 00 10: 45 31 f6 xor %r14d,%r14d 13: 41 29 d9 sub %ebx,%r9d 16: 4d 63 c6 movslq %r14d,%r8 19: 49 83 f8 05 cmp $0x5,%r8 1d: 0f 87 98 0f 00 00 ja 0xfbb 23: 48 89 d8 mov %rbx,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx <-- trapping instruction 2f: 48 89 d8 mov %rbx,%rax 32: 83 e0 07 and $0x7,%eax 35: 83 c0 01 add $0x1,%eax 38: 38 d0 cmp %dl,%al 3a: 7c 08 jl 0x44 3c: 84 d2 test %dl,%dl 3e: 0f .byte 0xf 3f: 85 .byte 0x85 Code starting with the faulting instruction =========================================== 0: 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx 5: 48 89 d8 mov %rbx,%rax 8: 83 e0 07 and $0x7,%eax b: 83 c0 01 add $0x1,%eax e: 38 d0 cmp %dl,%al 10: 7c 08 jl 0x1a 12: 84 d2 test %dl,%dl 14: 0f .byte 0xf 15: 85 .byte 0x85 [ 279.967974][ T2935] RSP: 0018:ffffc90005026db8 EFLAGS: 00010206 [ 279.968207][ T2935] RAX: 0cdc7c513e8110a0 RBX: 66e3e289f4088500 RCX: 0000000000000000 [ 279.968491][ T2935] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff88800309aef0 [ 279.968777][ T2935] RBP: ffffc90005026ea6 R08: 0000000000000000 R09: 000000000bf77b08 [ 279.969063][ T2935] R10: 0000000000000000 R11: ffffffff9496ff00 R12: dffffc0000000000 [ 279.969389][ T2935] R13: ffff88800309aee8 R14: 0000000000000000 R15: 0000000000000000 [ 279.969673][ T2935] FS: 00007fa61ea6d800(0000) GS:ffff8880a06ac000(0000) knlGS:0000000000000000 [ 279.969996][ T2935] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.970248][ T2935] CR2: 00000000004e5a38 CR3: 000000000e9ce005 CR4: 0000000000772ef0 [ 279.970526][ T2935] PKRU: 55555554 [ 279.970665][ T2935] Call Trace: [ 279.970804][ T2935] [ 279.970904][ T2935] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 279.971095][ T2935] ? bond_slave_changelink (drivers/net/bonding/bond_netlink.c:677) [ 279.971282][ T2935] ? rtnl_xdp_prog_skb (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:1696) [ 279.971479][ T2935] ? __lock_release (kernel/locking/lockdep.c:5536) [ 279.971690][ T2935] ? nla_put (lib/nlattr.c:1100) [ 279.971837][ T2935] ? rtnl_xdp_fill (net/core/rtnetlink.c:1762) [ 279.972025][ T2935] ? nla_put (lib/nlattr.c:1100) [ 279.972175][ T2935] rtnl_link_fill (net/core/rtnetlink.c:901 net/core/rtnetlink.c:921) [ 279.972369][ T2935] rtnl_fill_ifinfo.constprop.0 (net/core/rtnetlink.c:2139) [ 279.972622][ T2935] ? rtnl_fill_vf (net/core/rtnetlink.c:2021) [ 279.972824][ T2935] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/preempt.h:104 ./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 279.973053][ T2935] ? trace_kmalloc (./include/trace/events/kmem.h:54 (discriminator 21)) [ 279.973244][ T2935] ? __kmalloc_node_track_caller_noprof (mm/slub.c:4397) [ 279.973490][ T2935] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 279.973682][ T2935] ? __alloc_skb (net/core/skbuff.c:670) [ 279.973889][ T2935] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:383 net/core/skbuff.c:440) [ 279.974094][ T2935] ? __alloc_skb (net/core/skbuff.c:686) [ 279.974301][ T2935] ? napi_skb_cache_get (net/core/skbuff.c:643) [ 279.974501][ T2935] ? rtnl_prop_list_size (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:1233) [ 279.974703][ T2935] rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4409) [ 279.974912][ T2935] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4444) [ 279.975125][ T2935] rtmsg_ifinfo (net/core/rtnetlink.c:4453 net/core/rtnetlink.c:4451) [ 279.975275][ T2935] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/preempt.h:104 ./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 279.975524][ T2935] __dev_notify_flags (net/core/dev.c:9675) [ 279.975725][ T2935] ? debug_object_activate (lib/debugobjects.c:732) [ 279.975929][ T2935] ? netif_change_name (net/core/dev.c:9668) [ 279.976129][ T2935] ? __queue_work (kernel/workqueue.c:2481) [ 279.976328][ T2935] ? __queue_work (kernel/workqueue.c:2481) [ 279.976528][ T2935] ? lockdep_init_map_type (kernel/locking/lockdep.c:4973) [ 279.976732][ T2935] rtnl_configure_link (net/core/rtnetlink.c:3600) [ 279.976933][ T2935] rtnl_newlink_create (net/core/rtnetlink.c:3844) [ 279.977129][ T2935] ? rtnl_create_link (net/core/rtnetlink.c:3799) [ 279.977325][ T2935] ? __dev_get_by_name (net/core/dev.c:865) [ 279.977526][ T2935] ? rtnl_dev_get (net/core/rtnetlink.c:3412) [ 279.977725][ T2935] ? rtnl_validate_mdb_entry_del_bulk (net/core/rtnetlink.c:3412) [ 279.977976][ T2935] ? rtnl_newlink (net/core/rtnetlink.c:343 net/core/rtnetlink.c:4064) [ 279.978173][ T2935] ? reacquire_held_locks (kernel/locking/lockdep.c:5385) [ 279.978397][ T2935] __rtnl_newlink (net/core/rtnetlink.c:3950) [ 279.978599][ T2935] rtnl_newlink (net/core/rtnetlink.c:351 net/core/rtnetlink.c:4066) [ 279.978803][ T2935] ? __rtnl_newlink (net/core/rtnetlink.c:3956) [ 279.979001][ T2935] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:6952) [ 279.979199][ T2935] ? __lock_release (kernel/locking/lockdep.c:5536) [ 279.979398][ T2935] ? __rtnl_newlink (net/core/rtnetlink.c:3956) [ 279.979622][ T2935] rtnetlink_rcv_msg (net/core/rtnetlink.c:6954) [ 279.979819][ T2935] ? validate_chain (kernel/locking/lockdep.c:3801 kernel/locking/lockdep.c:3821 kernel/locking/lockdep.c:3876) [ 279.980030][ T2935] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 279.980239][ T2935] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 279.980453][ T2935] netlink_rcv_skb (net/netlink/af_netlink.c:2552) [ 279.980651][ T2935] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 279.980848][ T2935] ? netlink_ack (net/netlink/af_netlink.c:2529) [ 279.981049][ T2935] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/netlink/af_netlink.c:340) [ 279.981247][ T2935] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 279.981445][ T2935] netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1346) [ 279.981655][ T2935] ? netlink_attachskb (net/netlink/af_netlink.c:1331) [ 279.981864][ T2935] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 279.982064][ T2935] netlink_sendmsg (net/netlink/af_netlink.c:1896) [ 279.982266][ T2935] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 279.982463][ T2935] ? __import_iovec (lib/iov_iter.c:1441 lib/iov_iter.c:1456) [ 279.982657][ T2935] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 279.982850][ T2935] ____sys_sendmsg (net/socket.c:727 net/socket.c:742 net/socket.c:2627) [ 279.983040][ T2935] ? get_timestamp.constprop.0 (net/socket.c:2573) [ 279.983287][ T2935] ? __copy_msghdr (net/socket.c:2553) [ 279.983493][ T2935] ___sys_sendmsg (net/socket.c:2683) [ 279.983691][ T2935] ? kasan_record_aux_stack (mm/kasan/generic.c:548) [ 279.983889][ T2935] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:127 kernel/rcu/tree.c:3125) [ 279.984138][ T2935] ? copy_msghdr_from_user (net/socket.c:2670) [ 279.984335][ T2935] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 279.984537][ T2935] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 279.984739][ T2935] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 279.984943][ T2935] ? __virt_addr_valid (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 ./include/linux/mmzone.h:2172 arch/x86/mm/physaddr.c:65) [ 279.985143][ T2935] ? __lock_release (kernel/locking/lockdep.c:5536) [ 279.985347][ T2935] __sys_sendmsg (net/socket.c:2713) [ 279.985547][ T2935] ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3148) [ 279.985797][ T2935] ? __sys_sendmsg_sock (net/socket.c:2698) [ 279.986000][ T2935] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 279.986214][ T2935] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 279.986416][ T2935] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 279.986667][ T2935] RIP: 0033:0x7fa61ec3b1d7 [ 279.986873][ T2935] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0e (bad) 1: 00 f7 add %dh,%bh 3: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 279.987567][ T2935] RSP: 002b:00007ffdf662a168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.987895][ T2935] RAX: ffffffffffffffda RBX: 00007ffdf662a8a0 RCX: 00007fa61ec3b1d7 [ 279.988194][ T2935] RDX: 0000000000000000 RSI: 00007ffdf662a1d0 RDI: 0000000000000005 [ 279.988507][ T2935] RBP: 000000000000000a R08: 0000000000000068 R09: 0000000000000000 [ 279.988805][ T2935] R10: 00007fa61ecc9ac0 R11: 0000000000000246 R12: 00007ffdf662a8b8 Finger prints: bond_fill_info:rtnl_link_fill:rtmsg_ifinfo_build_skb:rtmsg_ifinfo:__dev_notify_flags