====================================== | [ 24.003884][ T302] bond0 (unregistering): (slave eth1): Releasing backup interface | [ 24.015032][ T302] bond0 (unregistering): Released all slaves | [ 24.204494][ T303] Oops: general protection fault, probably for non-canonical address 0xf111b97e9c612ec0: 0000 [#1] SMP KASAN | [ 24.204964][ T303] KASAN: maybe wild-memory-access in range [0x888debf4e3097600-0x888debf4e3097607] [ 24.205608][ T303] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 24.205846][ T303] RIP: 0010:bond_fill_info (drivers/net/bonding/bond_netlink.c:733) [ 24.206052][ T303] Code: 5d 08 41 b9 08 00 00 00 48 8d ac 24 ee 00 00 00 45 31 f6 41 29 d9 4d 63 c6 49 83 f8 05 0f 87 98 0f 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 All code ======== 0: 5d pop %rbp 1: 08 41 b9 or %al,-0x47(%rcx) 4: 08 00 or %al,(%rax) 6: 00 00 add %al,(%rax) 8: 48 8d ac 24 ee 00 00 lea 0xee(%rsp),%rbp f: 00 10: 45 31 f6 xor %r14d,%r14d 13: 41 29 d9 sub %ebx,%r9d 16: 4d 63 c6 movslq %r14d,%r8 19: 49 83 f8 05 cmp $0x5,%r8 1d: 0f 87 98 0f 00 00 ja 0xfbb 23: 48 89 d8 mov %rbx,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx <-- trapping instruction 2f: 48 89 d8 mov %rbx,%rax 32: 83 e0 07 and $0x7,%eax 35: 83 c0 01 add $0x1,%eax 38: 38 d0 cmp %dl,%al 3a: 7c 08 jl 0x44 3c: 84 d2 test %dl,%dl 3e: 0f .byte 0xf 3f: 85 .byte 0x85 Code starting with the faulting instruction =========================================== 0: 42 0f b6 14 20 movzbl (%rax,%r12,1),%edx 5: 48 89 d8 mov %rbx,%rax 8: 83 e0 07 and $0x7,%eax b: 83 c0 01 add $0x1,%eax e: 38 d0 cmp %dl,%al 10: 7c 08 jl 0x1a 12: 84 d2 test %dl,%dl 14: 0f .byte 0xf 15: 85 .byte 0x85 [ 24.206708][ T303] RSP: 0018:ffffc90000606db8 EFLAGS: 00010a06 [ 24.206942][ T303] RAX: 1111bd7e9c612ec0 RBX: 888debf4e3097600 RCX: 0000000000000000 [ 24.207229][ T303] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff888012e02ef0 [ 24.207508][ T303] RBP: ffffc90000606ea6 R08: 0000000000000000 R09: 000000001cf68a08 [ 24.207784][ T303] R10: 0000000000000000 R11: ffffffff9036ff00 R12: dffffc0000000000 [ 24.208069][ T303] R13: ffff888012e02ee8 R14: 0000000000000000 R15: 0000000000000000 [ 24.208345][ T303] FS: 00007fce3c3fd800(0000) GS:ffff8880a4cac000(0000) knlGS:0000000000000000 [ 24.208672][ T303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.208906][ T303] CR2: 00007fce3c64f430 CR3: 0000000013d37001 CR4: 0000000000772ef0 [ 24.209190][ T303] PKRU: 55555554 [ 24.209327][ T303] Call Trace: [ 24.209467][ T303] [ 24.209563][ T303] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 24.209756][ T303] ? bond_slave_changelink (drivers/net/bonding/bond_netlink.c:677) [ 24.209941][ T303] ? rtnl_xdp_prog_skb (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:1696) [ 24.210129][ T303] ? __lock_release (kernel/locking/lockdep.c:5536) [ 24.210312][ T303] ? nla_put (lib/nlattr.c:1100) [ 24.210459][ T303] ? rtnl_xdp_fill (net/core/rtnetlink.c:1762) [ 24.210644][ T303] ? nla_put (lib/nlattr.c:1100) [ 24.210783][ T303] rtnl_link_fill (net/core/rtnetlink.c:901 net/core/rtnetlink.c:921) [ 24.210969][ T303] rtnl_fill_ifinfo.constprop.0 (net/core/rtnetlink.c:2139) [ 24.211200][ T303] ? rtnl_fill_vf (net/core/rtnetlink.c:2021) [ 24.211385][ T303] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/preempt.h:104 ./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 24.211620][ T303] ? trace_kmalloc (./include/trace/events/kmem.h:54 (discriminator 21)) [ 24.211807][ T303] ? __kmalloc_node_track_caller_noprof (mm/slub.c:4397) [ 24.212037][ T303] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 24.212222][ T303] ? __alloc_skb (net/core/skbuff.c:670) [ 24.212406][ T303] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:383 net/core/skbuff.c:440) [ 24.212595][ T303] ? __alloc_skb (net/core/skbuff.c:686) [ 24.212776][ T303] ? napi_skb_cache_get (net/core/skbuff.c:643) [ 24.212962][ T303] ? rtnl_prop_list_size (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:1233) [ 24.213146][ T303] rtmsg_ifinfo_build_skb (net/core/rtnetlink.c:4409) [ 24.213335][ T303] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4444) [ 24.213523][ T303] rtmsg_ifinfo (net/core/rtnetlink.c:4453 net/core/rtnetlink.c:4451) [ 24.213664][ T303] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/preempt.h:104 ./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 24.213894][ T303] __dev_notify_flags (net/core/dev.c:9675) [ 24.214081][ T303] ? debug_object_activate (lib/debugobjects.c:732) [ 24.214266][ T303] ? netif_change_name (net/core/dev.c:9668) [ 24.214451][ T303] ? __queue_work (kernel/workqueue.c:2481) [ 24.214633][ T303] ? __queue_work (kernel/workqueue.c:2481) [ 24.214815][ T303] ? lockdep_init_map_type (kernel/locking/lockdep.c:4973) [ 24.214998][ T303] rtnl_configure_link (net/core/rtnetlink.c:3600) [ 24.215183][ T303] rtnl_newlink_create (net/core/rtnetlink.c:3844) [ 24.215369][ T303] ? rtnl_create_link (net/core/rtnetlink.c:3799) [ 24.215551][ T303] ? __dev_get_by_name (net/core/dev.c:865) [ 24.215734][ T303] ? rtnl_dev_get (net/core/rtnetlink.c:3412) [ 24.215919][ T303] ? rtnl_validate_mdb_entry_del_bulk (net/core/rtnetlink.c:3412) [ 24.216147][ T303] ? rtnl_newlink (net/core/rtnetlink.c:343 net/core/rtnetlink.c:4064) [ 24.216327][ T303] ? reacquire_held_locks (kernel/locking/lockdep.c:5385) [ 24.216512][ T303] __rtnl_newlink (net/core/rtnetlink.c:3950) [ 24.216701][ T303] rtnl_newlink (net/core/rtnetlink.c:351 net/core/rtnetlink.c:4066) [ 24.216886][ T303] ? __rtnl_newlink (net/core/rtnetlink.c:3956) [ 24.217071][ T303] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:6952) [ 24.217253][ T303] ? __lock_release (kernel/locking/lockdep.c:5536) [ 24.217436][ T303] ? __rtnl_newlink (net/core/rtnetlink.c:3956) [ 24.217621][ T303] rtnetlink_rcv_msg (net/core/rtnetlink.c:6954) [ 24.217812][ T303] ? validate_chain (kernel/locking/lockdep.c:3801 kernel/locking/lockdep.c:3821 kernel/locking/lockdep.c:3876) [ 24.217999][ T303] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 24.218185][ T303] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 24.218370][ T303] netlink_rcv_skb (net/netlink/af_netlink.c:2552) [ 24.218559][ T303] ? rtnl_port_fill (net/core/rtnetlink.c:6857) [ 24.218743][ T303] ? netlink_ack (net/netlink/af_netlink.c:2529) [ 24.218928][ T303] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/netlink/af_netlink.c:340) [ 24.219112][ T303] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 24.219296][ T303] netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1346) [ 24.219480][ T303] ? netlink_attachskb (net/netlink/af_netlink.c:1331) [ 24.219666][ T303] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 24.219852][ T303] netlink_sendmsg (net/netlink/af_netlink.c:1896) [ 24.220039][ T303] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 24.220223][ T303] ? __import_iovec (lib/iov_iter.c:1441 lib/iov_iter.c:1456) [ 24.220407][ T303] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 24.220590][ T303] ____sys_sendmsg (net/socket.c:727 net/socket.c:742 net/socket.c:2627) [ 24.220775][ T303] ? get_timestamp.constprop.0 (net/socket.c:2573) [ 24.221114][ T303] ? __copy_msghdr (net/socket.c:2553) [ 24.221299][ T303] ___sys_sendmsg (net/socket.c:2683) [ 24.221483][ T303] ? copy_msghdr_from_user (net/socket.c:2670) [ 24.221653][ T303] ? do_pte_missing (mm/memory.c:6009) [ 24.221925][ T303] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 24.222106][ T303] ? __handle_mm_fault (mm/memory.c:6195) [ 24.222290][ T303] ? __pmd_alloc (mm/memory.c:6104) [ 24.222475][ T303] ? lock_vma_under_rcu (./include/linux/rcupdate.h:874 mm/mmap_lock.c:170) [ 24.222768][ T303] __sys_sendmsg (net/socket.c:2713) [ 24.222949][ T303] ? __sys_sendmsg_sock (net/socket.c:2698) [ 24.223131][ T303] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1484 arch/x86/mm/fault.c:1532) [ 24.223315][ T303] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:143 ./include/linux/mmap_lock.h:267 arch/x86/mm/fault.c:1338) [ 24.223505][ T303] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 24.223686][ T303] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 24.223869][ T303] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 24.224100][ T303] RIP: 0033:0x7fce3c5cb1d7 [ 24.224289][ T303] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0e (bad) 1: 00 f7 add %dh,%bh 3: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 24.225049][ T303] RSP: 002b:00007ffd945c7a08 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.225326][ T303] RAX: ffffffffffffffda RBX: 00007ffd945c8140 RCX: 00007fce3c5cb1d7 [ 24.225602][ T303] RDX: 0000000000000000 RSI: 00007ffd945c7a70 RDI: 0000000000000005 [ 24.225986][ T303] RBP: 0000000000000006 R08: 0000000000000058 R09: 0000000000000000 [ 24.226263][ T303] R10: 00007fce3c4c2770 R11: 0000000000000246 R12: 00007ffd945c8158 Finger prints: bond_fill_info:rtnl_link_fill:rtmsg_ifinfo_build_skb:rtmsg_ifinfo:__dev_notify_flags