[ 16.854696][ T263] ip (263) used greatest stack depth: 24688 bytes left [ 17.070279][ T264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 17.080800][ T264] ip (264) used greatest stack depth: 24608 bytes left [ 18.067715][ T268] bond0: (slave bond_slave_1): Releasing backup interface [ 18.084404][ T268] ================================================================== [ 18.084944][ T268] BUG: KASAN: null-ptr-deref in try_to_grab_pending+0x81/0x6c0 [ 18.085437][ T268] Write of size 8 at addr 0000000000000000 by task ip/268 [ 18.085832][ T268] [ 18.086004][ T268] CPU: 0 UID: 0 PID: 268 Comm: ip Not tainted 6.18.0-rc5-virtme #1 PREEMPT(full) [ 18.086015][ T268] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.086018][ T268] Call Trace: [ 18.086030][ T268] [ 18.086036][ T268] dump_stack_lvl+0x82/0xc0 [ 18.086061][ T268] ? try_to_grab_pending+0x81/0x6c0 [ 18.086068][ T268] kasan_report+0xca/0x100 [ 18.086084][ T268] ? try_to_grab_pending+0x81/0x6c0 [ 18.086093][ T268] kasan_check_range+0x39/0x1b0 [ 18.086102][ T268] try_to_grab_pending+0x81/0x6c0 [ 18.086111][ T268] __cancel_work+0x7c/0x260 [ 18.086116][ T268] ? enable_delayed_work+0x10/0x10 [ 18.086124][ T268] ? qdisc_destroy+0x50/0x50 [ 18.086137][ T268] __cancel_work_sync+0x18/0xc0 [ 18.086145][ T268] __dev_close_many+0x1cf/0x980 [ 18.086157][ T268] ? netdev_notify_peers+0x20/0x20 [ 18.086161][ T268] ? unregister_vlan_dev+0x3b0/0x3b0 [ 18.086173][ T268] ? packet_setsockopt+0x2300/0x2300 [ 18.086189][ T268] netif_close_many+0x201/0x650 [ 18.086195][ T268] ? notifier_call_chain+0xcc/0x150 [ 18.086201][ T268] ? __dev_close_many+0x980/0x980 [ 18.086207][ T268] ? netdev_compute_master_upper_features+0x704/0xd40 [ 18.086216][ T268] netif_close+0x129/0x1f0 [ 18.086221][ T268] ? netif_close_many+0x650/0x650 [ 18.086227][ T268] ? lockdep_rtnl_is_held+0x1a/0x20 [ 18.086235][ T268] dev_close+0x9c/0x210 [ 18.086241][ T268] __bond_release_one+0x8a1/0x1630 [bonding] [ 18.086283][ T268] ? bond_enslave+0x5310/0x5310 [bonding] [ 18.086317][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.086332][ T268] ? find_held_lock+0x2b/0x80 [ 18.086345][ T268] ? is_bpf_text_address+0x67/0x120 [ 18.086359][ T268] do_set_master+0x144/0x6d0 [ 18.086365][ T268] ? kernel_text_address+0xc6/0xd0 [ 18.086371][ T268] do_setlink.constprop.0+0x9f6/0x2640 [ 18.086380][ T268] ? rtnl_newlink_create+0x8f0/0x8f0 [ 18.086390][ T268] ? rcu_read_lock_any_held+0x3f/0xa0 [ 18.086402][ T268] ? validate_chain+0x15e/0x4d0 [ 18.086409][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.086415][ T268] ? __mutex_trylock_common+0xf9/0x260 [ 18.086422][ T268] ? __mutex_handoff+0x2b0/0x2b0 [ 18.086427][ T268] ? rcu_is_watching+0x12/0xb0 [ 18.086436][ T268] ? rcu_is_watching+0x12/0xb0 [ 18.086441][ T268] ? trace_contention_end+0xd8/0x140 [ 18.086447][ T268] ? __mutex_lock+0x19f/0x1190 [ 18.086469][ T268] ? __lock_release+0x5d/0x170 [ 18.086474][ T268] ? rtnl_newlink+0x64a/0xa60 [ 18.086480][ T268] ? ww_mutex_lock+0x160/0x160 [ 18.086487][ T268] ? trace_cap_capable+0x10b/0x180 [ 18.086501][ T268] ? __rtnl_newlink+0x40a/0xa30 [ 18.086511][ T268] rtnl_newlink+0x693/0xa60 [ 18.086520][ T268] ? __rtnl_newlink+0xa30/0xa30 [ 18.086526][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.086534][ T268] ? find_held_lock+0x2b/0x80 [ 18.086540][ T268] ? rtnetlink_rcv_msg+0x6e6/0xc00 [ 18.086546][ T268] ? __lock_release+0x5d/0x170 [ 18.086552][ T268] ? __rtnl_newlink+0xa30/0xa30 [ 18.086557][ T268] rtnetlink_rcv_msg+0x709/0xc00 [ 18.086564][ T268] ? rtnl_port_fill+0x890/0x890 [ 18.086570][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.086580][ T268] netlink_rcv_skb+0x121/0x340 [ 18.086587][ T268] ? rtnl_port_fill+0x890/0x890 [ 18.086594][ T268] ? netlink_ack+0xdf0/0xdf0 [ 18.086605][ T268] ? netlink_deliver_tap+0x13e/0x340 [ 18.086610][ T268] ? netlink_deliver_tap+0xc3/0x340 [ 18.086616][ T268] netlink_unicast+0x4aa/0x780 [ 18.086623][ T268] ? netlink_attachskb+0x810/0x810 [ 18.086629][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.086637][ T268] netlink_sendmsg+0x714/0xbd0 [ 18.086644][ T268] ? netlink_unicast+0x780/0x780 [ 18.086649][ T268] ? __import_iovec+0x230/0x3b0 [ 18.086660][ T268] ? netlink_unicast+0x780/0x780 [ 18.086665][ T268] ____sys_sendmsg+0x3dd/0x890 [ 18.086672][ T268] ? get_timestamp.constprop.0+0x370/0x370 [ 18.086677][ T268] ? __copy_msghdr+0x3c0/0x3c0 [ 18.086690][ T268] ___sys_sendmsg+0xed/0x170 [ 18.086694][ T268] ? kasan_record_aux_stack+0x8c/0xa0 [ 18.086705][ T268] ? __call_rcu_common.constprop.0+0xa8/0x630 [ 18.086715][ T268] ? copy_msghdr_from_user+0x110/0x110 [ 18.086723][ T268] ? find_held_lock+0x2b/0x80 [ 18.086730][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.086739][ T268] ? find_held_lock+0x2b/0x80 [ 18.086745][ T268] ? __virt_addr_valid+0x22a/0x450 [ 18.086757][ T268] ? __lock_release+0x5d/0x170 [ 18.086766][ T268] __sys_sendmsg+0x10b/0x1a0 [ 18.086770][ T268] ? __call_rcu_common.constprop.0+0x318/0x630 [ 18.086775][ T268] ? __sys_sendmsg_sock+0x20/0x20 [ 18.086787][ T268] ? rcu_is_watching+0x12/0xb0 [ 18.086793][ T268] do_syscall_64+0xc1/0xfd0 [ 18.086806][ T268] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.086813][ T268] RIP: 0033:0x7ff1de3611d7 [ 18.086827][ T268] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 18.086834][ T268] RSP: 002b:00007fffc24bb928 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 18.086847][ T268] RAX: ffffffffffffffda RBX: 00007fffc24bc050 RCX: 00007ff1de3611d7 [ 18.086854][ T268] RDX: 0000000000000000 RSI: 00007fffc24bb990 RDI: 0000000000000005 [ 18.086857][ T268] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078 [ 18.086859][ T268] R10: 00007ff1de25df60 R11: 0000000000000246 R12: 0000000000000002 [ 18.086862][ T268] R13: 00000000691cd739 R14: 0000000000499600 R15: 0000000000000000 [ 18.086873][ T268] [ 18.086875][ T268] ================================================================== [ 18.116887][ T268] Disabling lock debugging due to kernel taint [ 18.117147][ T268] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 18.117423][ T268] #PF: supervisor write access in kernel mode [ 18.117653][ T268] #PF: error_code(0x0002) - not-present page [ 18.117889][ T268] PGD affb067 P4D affb067 PUD df93067 PMD 0 [ 18.118130][ T268] Oops: Oops: 0002 [#1] SMP KASAN [ 18.118322][ T268] CPU: 0 UID: 0 PID: 268 Comm: ip Tainted: G B 6.18.0-rc5-virtme #1 PREEMPT(full) [ 18.118691][ T268] Tainted: [B]=BAD_PAGE [ 18.118843][ T268] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 18.119085][ T268] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 18.119335][ T268] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 1f 93 82 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 18.120015][ T268] RSP: 0018:ffffc90000526c80 EFLAGS: 00010046 [ 18.120263][ T268] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffb6449b8a [ 18.120539][ T268] RDX: fffffbfff762cacd RSI: 0000000000000008 RDI: ffffffffbb165660 [ 18.120816][ T268] RBP: ffffc90000526ce8 R08: 0000000000000001 R09: fffffbfff762cacc [ 18.121106][ T268] R10: ffffffffbb165667 R11: ffffc90000526740 R12: 0000000000000000 [ 18.121392][ T268] R13: 0000000000000282 R14: ffff88800db09000 R15: dffffc0000000000 [ 18.121680][ T268] FS: 00007ff1de193800(0000) GS:ffff8880b1f07000(0000) knlGS:0000000000000000 [ 18.122000][ T268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.122248][ T268] CR2: 0000000000000000 CR3: 000000000dd9b002 CR4: 0000000000772ef0 [ 18.122652][ T268] PKRU: 55555554 [ 18.122799][ T268] Call Trace: [ 18.122947][ T268] [ 18.123045][ T268] __cancel_work+0x7c/0x260 [ 18.123245][ T268] ? enable_delayed_work+0x10/0x10 [ 18.123545][ T268] ? qdisc_destroy+0x50/0x50 [ 18.123735][ T268] __cancel_work_sync+0x18/0xc0 [ 18.123925][ T268] __dev_close_many+0x1cf/0x980 [ 18.124120][ T268] ? netdev_notify_peers+0x20/0x20 [ 18.124417][ T268] ? unregister_vlan_dev+0x3b0/0x3b0 [ 18.124625][ T268] ? packet_setsockopt+0x2300/0x2300 [ 18.124817][ T268] netif_close_many+0x201/0x650 [ 18.124997][ T268] ? notifier_call_chain+0xcc/0x150 [ 18.125300][ T268] ? __dev_close_many+0x980/0x980 [ 18.125485][ T268] ? netdev_compute_master_upper_features+0x704/0xd40 [ 18.125719][ T268] netif_close+0x129/0x1f0 [ 18.125906][ T268] ? netif_close_many+0x650/0x650 [ 18.126213][ T268] ? lockdep_rtnl_is_held+0x1a/0x20 [ 18.126402][ T268] dev_close+0x9c/0x210 [ 18.126540][ T268] __bond_release_one+0x8a1/0x1630 [bonding] [ 18.126797][ T268] ? bond_enslave+0x5310/0x5310 [bonding] [ 18.127121][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.127317][ T268] ? find_held_lock+0x2b/0x80 [ 18.127502][ T268] ? is_bpf_text_address+0x67/0x120 [ 18.127696][ T268] do_set_master+0x144/0x6d0 [ 18.127998][ T268] ? kernel_text_address+0xc6/0xd0 [ 18.128196][ T268] do_setlink.constprop.0+0x9f6/0x2640 [ 18.128384][ T268] ? rtnl_newlink_create+0x8f0/0x8f0 [ 18.128566][ T268] ? rcu_read_lock_any_held+0x3f/0xa0 [ 18.128863][ T268] ? validate_chain+0x15e/0x4d0 [ 18.129044][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.129248][ T268] ? __mutex_trylock_common+0xf9/0x260 [ 18.129430][ T268] ? __mutex_handoff+0x2b0/0x2b0 [ 18.129722][ T268] ? rcu_is_watching+0x12/0xb0 [ 18.129909][ T268] ? rcu_is_watching+0x12/0xb0 [ 18.130094][ T268] ? trace_contention_end+0xd8/0x140 [ 18.130288][ T268] ? __mutex_lock+0x19f/0x1190 [ 18.130587][ T268] ? __lock_release+0x5d/0x170 [ 18.130776][ T268] ? rtnl_newlink+0x64a/0xa60 [ 18.130970][ T268] ? ww_mutex_lock+0x160/0x160 [ 18.131165][ T268] ? trace_cap_capable+0x10b/0x180 [ 18.131464][ T268] ? __rtnl_newlink+0x40a/0xa30 [ 18.131647][ T268] rtnl_newlink+0x693/0xa60 [ 18.131851][ T268] ? __rtnl_newlink+0xa30/0xa30 [ 18.132035][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.132345][ T268] ? find_held_lock+0x2b/0x80 [ 18.132573][ T268] ? rtnetlink_rcv_msg+0x6e6/0xc00 [ 18.132763][ T268] ? __lock_release+0x5d/0x170 [ 18.132944][ T268] ? __rtnl_newlink+0xa30/0xa30 [ 18.133245][ T268] rtnetlink_rcv_msg+0x709/0xc00 [ 18.133432][ T268] ? rtnl_port_fill+0x890/0x890 [ 18.133608][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.133809][ T268] netlink_rcv_skb+0x121/0x340 [ 18.134104][ T268] ? rtnl_port_fill+0x890/0x890 [ 18.134301][ T268] ? netlink_ack+0xdf0/0xdf0 [ 18.134487][ T268] ? netlink_deliver_tap+0x13e/0x340 [ 18.134688][ T268] ? netlink_deliver_tap+0xc3/0x340 [ 18.134999][ T268] netlink_unicast+0x4aa/0x780 [ 18.135189][ T268] ? netlink_attachskb+0x810/0x810 [ 18.135371][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.135577][ T268] netlink_sendmsg+0x714/0xbd0 [ 18.135886][ T268] ? netlink_unicast+0x780/0x780 [ 18.136078][ T268] ? __import_iovec+0x230/0x3b0 [ 18.136271][ T268] ? netlink_unicast+0x780/0x780 [ 18.136455][ T268] ____sys_sendmsg+0x3dd/0x890 [ 18.136638][ T268] ? get_timestamp.constprop.0+0x370/0x370 [ 18.136874][ T268] ? __copy_msghdr+0x3c0/0x3c0 [ 18.137065][ T268] ___sys_sendmsg+0xed/0x170 [ 18.137259][ T268] ? kasan_record_aux_stack+0x8c/0xa0 [ 18.137566][ T268] ? __call_rcu_common.constprop.0+0xa8/0x630 [ 18.137805][ T268] ? copy_msghdr_from_user+0x110/0x110 [ 18.137991][ T268] ? find_held_lock+0x2b/0x80 [ 18.138294][ T268] ? __lock_acquire+0x449/0x7e0 [ 18.138503][ T268] ? find_held_lock+0x2b/0x80 [ 18.138692][ T268] ? __virt_addr_valid+0x22a/0x450 [ 18.138888][ T268] ? __lock_release+0x5d/0x170 [ 18.139194][ T268] __sys_sendmsg+0x10b/0x1a0 [ 18.139388][ T268] ? __call_rcu_common.constprop.0+0x318/0x630 [ 18.139619][ T268] ? __sys_sendmsg_sock+0x20/0x20 [ 18.139828][ T268] ? rcu_is_watching+0x12/0xb0 [ 18.140153][ T268] do_syscall_64+0xc1/0xfd0 [ 18.140351][ T268] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 18.140585][ T268] RIP: 0033:0x7ff1de3611d7 [ 18.140794][ T268] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 18.141602][ T268] RSP: 002b:00007fffc24bb928 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 18.142007][ T268] RAX: ffffffffffffffda RBX: 00007fffc24bc050 RCX: 00007ff1de3611d7 [ 18.142298][ T268] RDX: 0000000000000000 RSI: 00007fffc24bb990 RDI: 0000000000000005 [ 18.142586][ T268] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078 [ 18.142998][ T268] R10: 00007ff1de25df60 R11: 0000000000000246 R12: 0000000000000002 [ 18.143297][ T268] R13: 00000000691cd739 R14: 0000000000499600 R15: 0000000000000000 [ 18.143585][ T268] [ 18.143744][ T268] Modules linked in: bonding [ 18.143967][ T268] CR2: 0000000000000000 [ 18.144121][ T268] ---[ end trace 0000000000000000 ]--- [ 18.144321][ T268] RIP: 0010:try_to_grab_pending+0x81/0x6c0 [ 18.144708][ T268] Code: 00 41 89 c0 b8 01 00 00 00 45 85 c0 74 0f 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f c3 be 08 00 00 00 48 89 df e8 1f 93 82 00 48 0f ba 2b 00 72 11 48 83 c4 10 31 c0 5b 5d 41 5c 41 5d 41 5e [ 18.145524][ T268] RSP: 0018:ffffc90000526c80 EFLAGS: 00010046 [ 18.145778][ T268] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffb6449b8a [ 18.146068][ T268] RDX: fffffbfff762cacd RSI: 0000000000000008 RDI: ffffffffbb165660 [ 18.146478][ T268] RBP: ffffc90000526ce8 R08: 0000000000000001 R09: fffffbfff762cacc [ 18.146781][ T268] R10: ffffffffbb165667 R11: ffffc90000526740 R12: 0000000000000000 [ 18.147096][ T268] R13: 0000000000000282 R14: ffff88800db09000 R15: dffffc0000000000 [ 18.147540][ T268] FS: 00007ff1de193800(0000) GS:ffff8880b1f07000(0000) knlGS:0000000000000000 [ 18.147895][ T268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.148260][ T268] CR2: 0000000000000000 CR3: 000000000dd9b002 CR4: 0000000000772ef0 [ 18.148542][ T268] PKRU: 55555554 [ 18.148679][ T268] Kernel panic - not syncing: Fatal exception [ 18.149048][ T268] Kernel Offset: 0x34e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 18.149620][ T268] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr