======================================
| [  135.806102][ T1595] ==================================================================
| [  135.806311][ T1595] BUG: KASAN: slab-out-of-bounds in bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
| [  135.806506][ T1595] Write of size 8 at addr ff11000009d59040 by task ip/1595
| [  135.806694][ T1595]
[  135.806769][ T1595] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  135.806771][ T1595] Call Trace:
[  135.806773][ T1595]  <TASK>
[  135.806774][ T1595]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[  135.806779][ T1595]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[  135.806784][ T1595]  print_report (mm/kasan/report.c:482)
[  135.806785][ T1595]  ? __virt_addr_valid (./include/linux/rcupdate.h:948 ./include/linux/mmzone.h:2276 arch/x86/mm/physaddr.c:54)
[  135.806789][ T1595]  ? __virt_addr_valid (./include/linux/rcupdate.h:974 (discriminator 1) ./include/linux/mmzone.h:2286 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[  135.806790][ T1595]  kasan_report (mm/kasan/report.c:595)
[  135.806793][ T1595]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[  135.806795][ T1595]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[  135.806797][ T1595]  bond_update_slave_arr (drivers/net/bonding/bond_main.c:5196)
[  135.806799][ T1595]  ? bond_slave_arr_work_rearm (drivers/net/bonding/bond_main.c:5078)
[  135.806800][ T1595]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4488)
[  135.806804][ T1595]  ? __local_bh_enable_ip (kernel/softirq.c:478)
[  135.806807][ T1595]  ? __local_bh_enable_ip (kernel/softirq.c:478)
[  135.806809][ T1595]  bond_enslave (drivers/net/bonding/bond_main.c:2337)
[  135.806812][ T1595]  ? bond_update_slave_arr (drivers/net/bonding/bond_main.c:5218 (discriminator 9))
[  135.806813][ T1595]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  135.806816][ T1595]  ? sync_exp_reset_tree_hotplug (kernel/rcu/tree_exp.h:98)
[  135.806819][ T1595]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.806821][ T1595]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[  135.806823][ T1595]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[  135.806825][ T1595]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[  135.806828][ T1595]  ? _mutex_trylock_nest_lock (kernel/locking/mutex.c:1227 (discriminator 6))
[  135.806831][ T1595]  do_set_master (net/core/rtnetlink.c:3088)
[  135.806835][ T1595]  do_setlink.isra.0 (net/core/rtnetlink.c:3290 (discriminator 1))
[  135.806838][ T1595]  ? rtnl_link_get_size (net/core/rtnetlink.c:747)
[  135.806839][ T1595]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  135.806842][ T1595]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[  135.806844][ T1595]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:388 kernel/rcu/update.c:380)
[  135.806847][ T1595]  ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 2) lib/stackdepot.c:676 (discriminator 2))
[  135.806849][ T1595]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4116 (discriminator 3) kernel/rcu/tree.c:4108 (discriminator 3))
[  135.806851][ T1595]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[  135.806852][ T1595]  ? validate_chain (kernel/locking/lockdep.c:3817 (discriminator 2) kernel/locking/lockdep.c:3837 (discriminator 2) kernel/locking/lockdep.c:3892 (discriminator 2))
[  135.806854][ T1595]  ? kasan_save_stack (mm/kasan/common.c:58)
[  135.806856][ T1595]  ? kasan_save_stack (mm/kasan/common.c:57)
[  135.806857][ T1595]  ? kasan_save_track (mm/kasan/common.c:78)
[  135.806859][ T1595]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  135.806860][ T1595]  ? __netlink_dump_start (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) net/netlink/af_netlink.c:2433 (discriminator 1))
[  135.806864][ T1595]  ? ___sys_sendmsg (net/socket.c:2758 (discriminator 1))
[  135.806867][ T1595]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[  135.806868][ T1595]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[  135.806871][ T1595]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.806872][ T1595]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5871 (discriminator 22))
[  135.806874][ T1595]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.806875][ T1595]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.806876][ T1595]  ? trace_contention_end (./include/trace/events/lock.h:121 (discriminator 22))
[  135.806878][ T1595]  ? __mutex_lock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:3188 kernel/locking/mutex.c:89 kernel/locking/mutex.c:134 kernel/locking/mutex.c:649 kernel/locking/mutex.c:821)
[  135.806879][ T1595]  ? __mutex_lock (kernel/locking/mutex.c:656 (discriminator 1) kernel/locking/mutex.c:821 (discriminator 1))
[  135.806880][ T1595]  ? rtnl_newlink (net/core/rtnetlink.c:80 net/core/rtnetlink.c:366 net/core/rtnetlink.c:4240)
[  135.806882][ T1595]  ? ww_mutex_lock (kernel/locking/mutex.c:934)
[  135.806884][ T1595]  ? nla_get_range_signed (lib/nlattr.c:270)
[  135.806887][ T1595]  ? __rtnl_newlink (net/core/rtnetlink.c:4089)
[  135.806890][ T1595]  rtnl_newlink (net/core/rtnetlink.c:4241)
[  135.806893][ T1595]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  135.806894][ T1595]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  135.806897][ T1595]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[  135.806899][ T1595]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[  135.806900][ T1595]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  135.806902][ T1595]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5554)
[  135.806904][ T1595]  ? rtnl_bridge_getlink (net/core/rtnetlink.c:5584)
[  135.806906][ T1595]  rtnetlink_rcv_msg (net/core/rtnetlink.c:7158)
[  135.806909][ T1595]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  135.806910][ T1595]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  135.806913][ T1595]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5908 (discriminator 2))
[  135.806915][ T1595]  ? find_held_lock (kernel/locking/lockdep.c:5367)
[  135.806917][ T1595]  netlink_rcv_skb (net/netlink/af_netlink.c:2556)
[  135.806918][ T1595]  ? rtnl_link_fill (./include/net/netlink.h:1107 (discriminator 1))
[  135.806920][ T1595]  ? netlink_ack (./include/linux/skbuff.h:2718)
[  135.806923][ T1595]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:334 (discriminator 2))
[  135.806925][ T1595]  ? netlink_deliver_tap (./include/linux/rcupdate.h:319 (discriminator 2) ./include/linux/rcupdate.h:880 (discriminator 2) net/netlink/af_netlink.c:341 (discriminator 2))
[  135.806927][ T1595]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1345)
[  135.806929][ T1595]  ? netlink_attachskb (./arch/x86/include/asm/bitops.h:202 (discriminator 1))
[  135.806931][ T1595]  ? __lock_acquire (kernel/locking/lockdep.c:5254)
[  135.806933][ T1595]  netlink_sendmsg (net/netlink/af_netlink.c:1900)
[  135.806935][ T1595]  ? netlink_unicast (./include/net/net_namespace.h:426 (discriminator 7))
[  135.806937][ T1595]  ? __might_fault (mm/memory.c:7482 (discriminator 5))
[  135.806941][ T1595]  ____sys_sendmsg (net/socket.c:800 (discriminator 4) net/socket.c:815 (discriminator 4) net/socket.c:2713 (discriminator 4))
[  135.806943][ T1595]  ? copy_msghdr_from_user (net/socket.c:2650)
[  135.806944][ T1595]  ? get_timestamp.constprop.0 (./include/linux/netdevice.h:5405)
[  135.806946][ T1595]  ? move_addr_to_kernel (net/socket.c:258)
[  135.806949][ T1595]  ___sys_sendmsg (net/socket.c:2767)
[  135.806950][ T1595]  ? copy_msghdr_from_user (net/socket.c:2619)
[  135.806955][ T1595]  __sys_sendmsg (net/socket.c:2799)
[  135.806957][ T1595]  ? __sys_sendmsg_sock (net/socket.c:2780)
[  135.806960][ T1595]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  135.806962][ T1595]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  135.806964][ T1595]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  135.806965][ T1595]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  135.806968][ T1595] RIP: 0033:0x7ffabfe1354e
[  135.806971][ T1595] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  135.806973][ T1595] RSP: 002b:00007fff20ddfc30 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  135.806976][ T1595] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ffabfe1354e
[  135.806978][ T1595] RDX: 0000000000000000 RSI: 00007fff20ddfce0 RDI: 0000000000000005
[  135.806979][ T1595] RBP: 00007fff20ddfc40 R08: 0000000000000000 R09: 0000000000000000
[  135.806979][ T1595] R10: 0000000000000000 R11: 0000000000000202 R12: 000000006a994049
[  135.806980][ T1595] R13: 00000000004a1620 R14: 0000000000000000 R15: 00007fff20de03a0
| [  136.331457][ T1540] Padding  ff11000009d590b8: 5a 5a 5a 5a 5a 5a 5a 5a                          ZZZZZZZZ
| [  136.331693][ T1540] WARNING: mm/slub.c:1257 at object_err+0x68/0x70, CPU#3: udev-worker)/1540
| [  136.331931][ T1540] Modules linked in: netconsole netdevsim
| [  136.332374][ T1540] Tainted: [B]=BAD_PAGE
[  136.332477][ T1540] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  136.332646][ T1540] RIP: 0010:object_err (mm/slub.c:1257 (discriminator 3))
[  136.332790][ T1540] Code: c7 10 64 2a 94 e8 28 57 fc ff eb 0e 48 89 da 4c 89 e6 48 89 ef e8 48 fe ff ff be 01 00 00 00 bf 05 00 00 00 e8 69 4e 54 00 90 <0f> 0b 90 5b 5d 41 5c c3 48 85 ed 0f 84 7e 01 00 00 4c 89 cf 48 89
All code
========
   0:	c7                   	(bad)
   1:	10 64 2a 94          	adc    %ah,-0x6c(%rdx,%rbp,1)
   5:	e8 28 57 fc ff       	call   0xfffffffffffc5732
   a:	eb 0e                	jmp    0x1a
   c:	48 89 da             	mov    %rbx,%rdx
   f:	4c 89 e6             	mov    %r12,%rsi
  12:	48 89 ef             	mov    %rbp,%rdi
  15:	e8 48 fe ff ff       	call   0xfffffffffffffe62
  1a:	be 01 00 00 00       	mov    $0x1,%esi
  1f:	bf 05 00 00 00       	mov    $0x5,%edi
  24:	e8 69 4e 54 00       	call   0x544e92
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	5b                   	pop    %rbx
  2e:	5d                   	pop    %rbp
  2f:	41 5c                	pop    %r12
  31:	c3                   	ret
  32:	48 85 ed             	test   %rbp,%rbp
  35:	0f 84 7e 01 00 00    	je     0x1b9
  3b:	4c 89 cf             	mov    %r9,%rdi
  3e:	48                   	rex.W
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	5b                   	pop    %rbx
   4:	5d                   	pop    %rbp
   5:	41 5c                	pop    %r12
   7:	c3                   	ret
   8:	48 85 ed             	test   %rbp,%rbp
   b:	0f 84 7e 01 00 00    	je     0x18f
  11:	4c 89 cf             	mov    %r9,%rdi
  14:	48                   	rex.W
  15:	89                   	.byte 0x89
[  136.333261][ T1540] RSP: 0018:ffa0000002957748 EFLAGS: 00010046
[  136.333427][ T1540] RAX: 0000000000000020 RBX: ff11000009d59020 RCX: 0000000000000001
[  136.333627][ T1540] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff959b4660
[  136.333832][ T1540] RBP: ff1100000103c940 R08: ffffffff911bcf0a R09: 1ffffffff2b368cc
[  136.334030][ T1540] R10: fffffbfff2b368cd R11: fffffbfff2b368cd R12: ffd4000000275640
[  136.334228][ T1540] R13: ff11000009d59040 R14: ff1100000103c940 R15: ffd4000000275640
[  136.334427][ T1540] FS:  00007f5f4d4661c0(0000) GS:ff11000098e2e000(0000) knlGS:0000000000000000
[  136.334660][ T1540] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  136.334833][ T1540] CR2: 0000557aad4c4a58 CR3: 000000000fcb0004 CR4: 0000000000771ef0
[  136.335033][ T1540] PKRU: 55555554
[  136.335134][ T1540] Call Trace:
[  136.335236][ T1540]  <TASK>
[  136.335304][ T1540]  check_bytes_and_report.cold (mm/slub.c:1359)
[  136.335440][ T1540]  check_object (mm/slub.c:1507)
[  136.335572][ T1540]  free_debug_processing (mm/slub.c:1803 mm/slub.c:4299)
[  136.335705][ T1540]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  136.335842][ T1540]  free_to_partial_list (mm/slub.c:5631)
[  136.335973][ T1540]  ? qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  136.336103][ T1540]  qlist_free_all (mm/kasan/quarantine.c:163 (discriminator 2) mm/kasan/quarantine.c:179 (discriminator 2))
[  136.336234][ T1540]  kasan_quarantine_reduce (mm/kasan/quarantine.c:286)
[  136.336365][ T1540]  __kasan_slab_alloc (mm/kasan/common.c:350)
[  136.336496][ T1540]  __kmalloc_cache_noprof (./include/linux/kasan.h:253 mm/slub.c:4683 mm/slub.c:4996 mm/slub.c:5559)
[  136.336626][ T1540]  ? kernfs_fop_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/kernfs/file.c:634 (discriminator 1))
[  136.336765][ T1540]  kernfs_fop_open (./include/linux/slab.h:991 (discriminator 1) ./include/linux/slab.h:1312 (discriminator 1) fs/kernfs/file.c:634 (discriminator 1))
[  136.336896][ T1540]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  136.337027][ T1540]  ? kernfs_notify_workfn (fs/kernfs/file.c:969)
[  136.337156][ T1540]  do_dentry_open (fs/open.c:996)
[  136.337288][ T1540]  ? kernfs_iop_permission (fs/kernfs/inode.c:291)
[  136.337417][ T1540]  vfs_open (fs/open.c:1101)
[  136.337514][ T1540]  ? may_open (fs/namei.c:4269)
[  136.337613][ T1540]  do_open (fs/namei.c:4837)
[  136.337709][ T1540]  ? open_last_lookups (fs/namei.c:2152 fs/namei.c:4780)
[  136.337845][ T1540]  path_openat (fs/namei.c:5000)
[  136.337976][ T1540]  ? kernel_tmpfile_open (fs/namei.c:4942)
[  136.338105][ T1540]  ? stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  136.338238][ T1540]  do_file_open (fs/namei.c:5029)
[  136.338372][ T1540]  ? path_openat (./include/linux/mount.h:68 (discriminator 3))
[  136.338503][ T1540]  ? _raw_spin_unlock (./include/linux/spinlock_api_smp.h:201 (discriminator 1) kernel/locking/spinlock.c:213 (discriminator 1))
[  136.338633][ T1540]  ? alloc_fd (./include/linux/spinlock.h:401 fs/file.c:610)
[  136.338731][ T1540]  do_sys_openat2 (fs/open.c:1417 (discriminator 5))
[  136.338865][ T1540]  ? build_open_flags (fs/open.c:1319 (discriminator 3))
[  136.338992][ T1540]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  136.339121][ T1540]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  136.339282][ T1540]  __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434 fs/open.c:1434)
[  136.339412][ T1540]  ? fput_close_sync (fs/file_table.c:617)
[  136.339540][ T1540]  ? __ia32_sys_open (fs/open.c:1427)
[  136.339668][ T1540]  ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5920 (discriminator 22))
[  136.339800][ T1540]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:753 (discriminator 3))
[  136.339930][ T1540]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  136.340088][ T1540]  ? trace_hardirqs_off_finish (./include/trace/events/preemptirq.h:36 (discriminator 22) kernel/trace/trace_preemptirq.c:95 (discriminator 22) kernel/trace/trace_preemptirq.c:90 (discriminator 22))
[  136.340248][ T1540]  do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)
[  136.340377][ T1540]  ? exc_page_fault (arch/x86/mm/fault.c:1489 (discriminator 3) arch/x86/mm/fault.c:1536 (discriminator 3))
[  136.340508][ T1540]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  136.340667][ T1540] RIP: 0033:0x7f5f4dbb754e
[  136.340806][ T1540] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  136.341264][ T1540] RSP: 002b:00007ffc3b1f88f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  136.341462][ T1540] RAX: ffffffffffffffda RBX: 00000000ffffffc9 RCX: 00007f5f4dbb754e
[  136.341657][ T1540] RDX: 0000000000080100 RSI: 00007ffc3b1f89b0 RDI: ffffffffffffff9c
[  136.341857][ T1540] RBP: 00007ffc3b1f8900 R08: 0000000000000000 R09: 0000000000000000
[  136.342054][ T1540] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557aad62a9f0


Finger prints:
print_report:kasan_report:bond_update_slave_arr:bond_enslave:do_set_master
object_err:check_object:free_debug_processing:free_to_partial_list:qlist_free_all