====================================== | [ 18.335096][ T240] ip (240) used greatest stack depth: 24096 bytes left | [ 23.685348][ T245] bond0: (slave eth0): Releasing backup interface | [ 24.470585][ T248] Oops: general protection fault, probably for non-canonical address 0xf1910a0f2827ecc0: 0000 [#1] SMP KASAN | [ 24.471086][ T248] KASAN: maybe wild-memory-access in range [0x8c887079413f6600-0x8c887079413f6607] [ 24.471774][ T248] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 24.472072][ T248] RIP: 0010:bond_fill_info (drivers/net/bonding/bond_netlink.c:733) [ 24.472265][ T248] Code: 5d 08 41 b9 08 00 00 00 48 8d ac 24 ee 00 00 00 45 31 f6 41 29 d9 4d 63 c6 49 83 f8 05 0f 87 98 0f 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 All code ======== 0: 5d pop %rbp 1: 08 41 b9 or %al,-0x47(%rcx) 4: 08 00 or %al,(%rax) 6: 00 00 add %al,(%rax) 8: 48 8d ac 24 ee 00 00 lea 0xee(%rsp),%rbp f: 00 10: 45 31 f6 xor %r14d,%r14d 13: 41 29 d9 sub %ebx,%r9d 16: 4d 63 c6 movslq %r14d,%r8 19: 49 83 f8 05 cmp $0x5,%r8 1d: 0f 87 98 0f 00 00 ja 0xfbb 23: 48 89 d8 mov %rbx,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx <-- trapping instruction 2f: 48 89 d8 mov %rbx,%rax 32: 83 e0 07 and $0x7,%eax 35: 83 c0 01 add $0x1,%eax 38: 38 d0 cmp %dl,%al 3a: 7c 08 jl 0x44 3c: 84 d2 test %dl,%dl 3e: 0f .byte 0xf 3f: 85 .byte 0x85 Code starting with the faulting instruction =========================================== 0: 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx 5: 48 89 d8 mov %rbx,%rax 8: 83 e0 07 and $0x7,%eax b: 83 c0 01 add $0x1,%eax e: 38 d0 cmp %dl,%al 10: 7c 08 jl 0x1a 12: 84 d2 test %dl,%dl 14: 0f .byte 0xf 15: 85 .byte 0x85 [ 24.472954][ T248] RSP: 0018:ffffc90000af6f30 EFLAGS: 00010a06 [ 24.473179][ T248] RAX: 11910e0f2827ecc0 RBX: 8c887079413f6600 RCX: 0000000000000000 [ 24.473482][ T248] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff88800a2a2ef0 [ 24.473759][ T248] RBP: ffffc90000af701e R08: 0000000000000000 R09: 00000000bec09a08 [ 24.474043][ T248] R10: 0000000000000000 R11: ffffffff8556ff00 R12: dffffc0000000000 [ 24.474324][ T248] R13: ffff88800a2a2ee8 R14: 0000000000000000 R15: 0000000000000000 [ 24.474595][ T248] FS: 00007f51b86bf800(0000) GS:ffff8880afb2c000(0000) knlGS:0000000000000000 [ 24.474925][ T248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.475144][ T248] CR2: 00007ffd8b710ff8 CR3: 00000000026bd004 CR4: 0000000000772ef0 [ 24.475400][ T248] PKRU: 55555554 [ 24.475584][ T248] Call Trace: [ 24.475713][ T248] [ 24.475819][ T248] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 24.476008][ T248] ? bond_slave_changelink (drivers/net/bonding/bond_netlink.c:677) [ 24.476181][ T248] ? rtnl_xdp_prog_skb (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:1696) [ 24.476352][ T248] ? __lock_release (kernel/locking/lockdep.c:5536) [ 24.476576][ T248] ? nla_put (lib/nlattr.c:1100) [ 24.476707][ T248] ? rtnl_xdp_fill (net/core/rtnetlink.c:1762) [ 24.476896][ T248] ? nla_put (lib/nlattr.c:1100) [ 24.477024][ T248] rtnl_link_fill (net/core/rtnetlink.c:901 net/core/rtnetlink.c:921) [ 24.477198][ T248] rtnl_fill_ifinfo.constprop.0 (net/core/rtnetlink.c:2139) [ 24.477430][ T248] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 24.477633][ T248] ? rtnl_fill_vf (net/core/rtnetlink.c:2021) [ 24.477843][ T248] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 24.478024][ T248] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 24.478193][ T248] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 24.478438][ T248] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 24.478648][ T248] rtnl_getlink (net/core/rtnetlink.c:4187) [ 24.478836][ T248] ? rtnl_dump_ifinfo (net/core/rtnetlink.c:4128) [ 24.479078][ T248] ? __mutex_lock (./arch/x86/include/asm/preempt.h:104 kernel/locking/mutex.c:739 kernel/locking/mutex.c:760) [ 24.479308][ T248] ? rtnetlink_rcv_msg (net/core/rtnetlink.c:6961) [ 24.479625][ T248] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 24.479860][ T248] rtnetlink_rcv_msg (net/core/rtnetlink.c:6963) [ 24.480120][ T248] ? validate_chain (kernel/locking/lockdep.c:3801 kernel/locking/lockdep.c:3821 kernel/locking/lockdep.c:3876) [ 24.480418][ T248] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 24.480686][ T248] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 24.480971][ T248] netlink_rcv_skb (net/netlink/af_netlink.c:2552) [ 24.481245][ T248] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 24.481558][ T248] ? netlink_ack (net/netlink/af_netlink.c:2529) [ 24.481846][ T248] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/netlink/af_netlink.c:340) [ 24.482129][ T248] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 24.482411][ T248] netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1346) [ 24.482683][ T248] ? netlink_attachskb (net/netlink/af_netlink.c:1331) [ 24.482953][ T248] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 24.483213][ T248] netlink_sendmsg (net/netlink/af_netlink.c:1896) [ 24.483488][ T248] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 24.483766][ T248] ? __import_iovec (lib/iov_iter.c:1441 lib/iov_iter.c:1456) [ 24.484037][ T248] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 24.484306][ T248] ____sys_sendmsg (net/socket.c:727 net/socket.c:742 net/socket.c:2627) [ 24.484598][ T248] ? get_timestamp.constprop.0 (net/socket.c:2573) [ 24.484940][ T248] ? __copy_msghdr (net/socket.c:2553) [ 24.485197][ T248] ? do_anonymous_page (mm/memory.c:5118) [ 24.485494][ T248] ___sys_sendmsg (net/socket.c:2683) [ 24.485762][ T248] ? copy_msghdr_from_user (net/socket.c:2670) [ 24.486037][ T248] ? do_pte_missing (mm/memory.c:6009) [ 24.486279][ T248] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 24.486522][ T248] ? __handle_mm_fault (mm/memory.c:6195) [ 24.486767][ T248] ? __pmd_alloc (mm/memory.c:6104) [ 24.487036][ T248] ? lock_vma_under_rcu (./include/linux/rcupdate.h:874 mm/mmap_lock.c:170) [ 24.487316][ T248] __sys_sendmsg (net/socket.c:2713) [ 24.487586][ T248] ? __sys_sendmsg_sock (net/socket.c:2698) [ 24.487774][ T248] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1484 arch/x86/mm/fault.c:1532) [ 24.487952][ T248] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:143 ./include/linux/mmap_lock.h:267 arch/x86/mm/fault.c:1338) [ 24.488209][ T248] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 24.488488][ T248] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 24.488732][ T248] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 24.489063][ T248] RIP: 0033:0x7f51b888d1d7 [ 24.489337][ T248] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0e (bad) 1: 00 f7 add %dh,%bh 3: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 24.490310][ T248] RSP: 002b:00007ffd8b711b78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.490724][ T248] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f51b888d1d7 [ 24.491155][ T248] RDX: 0000000000000000 RSI: 00007ffd8b711be0 RDI: 0000000000000006 [ 24.491563][ T248] RBP: 00007ffd8b711cd0 R08: 0000000000000006 R09: 00007f51b8a5a060 [ 24.491967][ T248] R10: 00007f51b8784770 R11: 0000000000000246 R12: 00007ffd8b715953 Finger prints: bond_fill_info:rtnl_link_fill:rtnl_getlink:rtnetlink_rcv_msg:netlink_rcv_skb