====================================== | [ 2708.957291][ T66] test_br1: entered promiscuous mode | [ 2708.957576][ T66] test_team1: entered promiscuous mode | [ 2709.014623][T14757] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000118: 0000 [#1] SMP KASAN | [ 2709.014867][T14757] KASAN: null-ptr-deref in range [0x00000000000008c0-0x00000000000008c7] [ 2709.015197][T14757] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2709.015323][T14757] RIP: 0010:macvlan_port_release_mac (drivers/net/macvlan.c:79 drivers/net/macvlan.c:808) [ 2709.015457][T14757] Code: f3 f3 65 48 8b 05 2d 8b 69 03 48 89 84 24 f0 00 00 00 31 c0 e8 0e ff ff ff 48 8d b8 c0 08 00 00 48 89 c1 48 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 74 08 3c 03 0f 8e 2a 02 00 00 f6 81 c0 08 00 00 All code ======== 0: f3 f3 65 48 8b 05 2d repz repz mov %gs:0x3698b2d(%rip),%rax # 0x3698b37 7: 8b 69 03 a: 48 89 84 24 f0 00 00 mov %rax,0xf0(%rsp) 11: 00 12: 31 c0 xor %eax,%eax 14: e8 0e ff ff ff call 0xffffffffffffff27 19: 48 8d b8 c0 08 00 00 lea 0x8c0(%rax),%rdi 20: 48 89 c1 mov %rax,%rcx 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax 2a:* 0f b6 04 28 movzbl (%rax,%rbp,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 74 08 je 0x3a 32: 3c 03 cmp $0x3,%al 34: 0f 8e 2a 02 00 00 jle 0x264 3a: f6 .byte 0xf6 3b: 81 .byte 0x81 3c: c0 08 00 rorb $0x0,(%rax) ... Code starting with the faulting instruction =========================================== 0: 0f b6 04 28 movzbl (%rax,%rbp,1),%eax 4: 84 c0 test %al,%al 6: 74 08 je 0x10 8: 3c 03 cmp $0x3,%al a: 0f 8e 2a 02 00 00 jle 0x23a 10: f6 .byte 0xf6 11: 81 .byte 0x81 12: c0 08 00 rorb $0x0,(%rax) ... [ 2709.015800][T14757] RSP: 0018:ffa0000001cff0b0 EFLAGS: 00010216 [ 2709.015922][T14757] RAX: 0000000000000118 RBX: 1ff400000039fe19 RCX: 0000000000000000 [ 2709.016066][T14757] RDX: 1fe2200003648420 RSI: ffffffff9a49414f RDI: 00000000000008c0 [ 2709.016217][T14757] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2709.016362][T14757] R10: 0000000000000002 R11: 0000000000000001 R12: ff1100001401a818 [ 2709.016507][T14757] R13: 0000000000000007 R14: ff1100001b242000 R15: dffffc0000000000 [ 2709.016657][T14757] FS: 00007f4e5f0e8840(0000) GS:ff110000cff80000(0000) knlGS:0000000000000000 [ 2709.016826][T14757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2709.016950][T14757] CR2: 00000000004ec4a0 CR3: 0000000014cf9005 CR4: 0000000000771ef0 [ 2709.017095][T14757] PKRU: 55555554 [ 2709.017170][T14757] Call Trace: [ 2709.017242][T14757] [ 2709.017293][T14757] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 2709.017396][T14757] ? macvlan_port_get_rtnl (drivers/net/macvlan.c:128 (discriminator 9)) [ 2709.017493][T14757] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 2709.017593][T14757] ? enable_work (kernel/workqueue.c:4630 (discriminator 6)) [ 2709.017689][T14757] ? mod_delayed_work_on (kernel/workqueue.c:2660) [ 2709.017785][T14757] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 2709.017883][T14757] ? perf_trace_sched_switch (./include/linux/list.h:1021 (discriminator 3)) [ 2709.017979][T14757] ? __cancel_work_sync (kernel/workqueue.c:4497) [ 2709.018074][T14757] macvlan_port_destroy (drivers/net/macvlan.c:1344) [ 2709.018178][T14757] unregister_netdevice_many_notify (net/core/dev.c:12460) [ 2709.018302][T14757] ? unregister_netdevice_queued (./include/linux/list.h:404 (discriminator 3)) [ 2709.018424][T14757] ? __netdev_upper_dev_unlink (net/core/dev.c:9037) [ 2709.018548][T14757] rtnl_dellink (net/core/rtnetlink.c:3601 net/core/rtnetlink.c:3643) [ 2709.018646][T14757] ? mark_usage (kernel/locking/lockdep.c:4674) [ 2709.018742][T14757] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 2709.018841][T14757] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 2709.018938][T14757] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 2709.019035][T14757] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 2709.019139][T14757] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 2709.019241][T14757] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 2709.019337][T14757] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 2709.019433][T14757] ? mark_usage (kernel/locking/lockdep.c:4674) [ 2709.019528][T14757] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 2709.019624][T14757] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 2709.019718][T14757] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 2709.019812][T14757] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 2709.019909][T14757] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 2709.020005][T14757] ? rtnl_mdb_del (net/core/rtnetlink.c:6918 (discriminator 2)) [ 2709.020100][T14757] rtnetlink_rcv_msg (net/core/rtnetlink.c:7079) [ 2709.020201][T14757] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 2709.020297][T14757] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 2709.020394][T14757] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 2709.020490][T14757] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 2709.020586][T14757] netlink_rcv_skb (net/netlink/af_netlink.c:2556) [ 2709.020683][T14757] ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1)) [ 2709.020779][T14757] ? netlink_ack (./include/linux/skbuff.h:2718) [ 2709.020877][T14757] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2)) [ 2709.020970][T14757] ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2)) [ 2709.021066][T14757] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345) [ 2709.021164][T14757] ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1)) [ 2709.021259][T14757] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 2709.021358][T14757] netlink_sendmsg (net/netlink/af_netlink.c:1900) [ 2709.021453][T14757] ? netlink_unicast (./include/net/net_namespace.h:419 (discriminator 7)) [ 2709.021549][T14757] ? __might_fault (mm/memory.c:7292 (discriminator 5)) [ 2709.021647][T14757] ____sys_sendmsg (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2684 (discriminator 4)) [ 2709.021742][T14757] ? copy_msghdr_from_user (net/socket.c:2621) [ 2709.021836][T14757] ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5373) [ 2709.021953][T14757] ? move_addr_to_kernel (net/socket.c:258) [ 2709.022052][T14757] ___sys_sendmsg (net/socket.c:2738) [ 2709.022147][T14757] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 2709.022268][T14757] ? copy_msghdr_from_user (net/socket.c:2590) [ 2709.022369][T14757] __sys_sendmsg (net/socket.c:2770) [ 2709.022464][T14757] ? __sys_sendmsg_sock (net/socket.c:2751) [ 2709.022560][T14757] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 2709.022657][T14757] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 2709.022753][T14757] ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1)) [ 2709.022852][T14757] ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3)) [ 2709.022949][T14757] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) [ 2709.023067][T14757] RIP: 0033:0x7f4e5f32154e [ 2709.023172][T14757] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 b4 bd 00 00 call 0xbdbc 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 03 ff ff ff call 0xffffffffffffff3c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 03 ff ff ff call 0xffffffffffffff12 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 2709.023510][T14757] RSP: 002b:00007ffec9fd2b20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 2709.023655][T14757] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4e5f32154e [ 2709.023798][T14757] RDX: 0000000000000000 RSI: 00007ffec9fd2bd0 RDI: 0000000000000005 [ 2709.023941][T14757] RBP: 00007ffec9fd2b30 R08: 0000000000000000 R09: 0000000000000000 [ 2709.024084][T14757] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a506cce Finger prints: macvlan_port_release_mac:macvlan_port_destroy:unregister_netdevice_many_notify:rtnl_dellink:rtnetlink_rcv_msg