====================================== | [ 371.987283][ T3418] bond0 (unregistering): Released all slaves | [ 371.988380][ T3418] ------------[ cut here ]------------ | [ 371.988702][ T3418] WARNING: CPU: 1 PID: 3418 at mm/slub.c:4790 free_large_kmalloc (mm/slub.c:4790 (discriminator 1)) | [ 371.989333][ T3418] Modules linked in: [ 371.990563][ T3418] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 371.990951][ T3418] RIP: 0010:free_large_kmalloc (mm/slub.c:4790 (discriminator 1)) [ 371.991354][ T3418] Code: 01 48 8b 74 24 20 4c 89 e7 49 c7 c4 00 f0 ff ff e8 0d fa 06 00 e9 62 ff ff ff 48 c7 c6 18 17 5b 8e e8 6c 5d f2 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 08 cd 60 8e 5b 48 89 ef 5d 41 5c 41 5d e9 50 5d All code ======== 0: 01 48 8b add %ecx,-0x75(%rax) 3: 74 24 je 0x29 5: 20 4c 89 e7 and %cl,-0x19(%rcx,%rcx,4) 9: 49 c7 c4 00 f0 ff ff mov $0xfffffffffffff000,%r12 10: e8 0d fa 06 00 call 0x6fa22 15: e9 62 ff ff ff jmp 0xffffffffffffff7c 1a: 48 c7 c6 18 17 5b 8e mov $0xffffffff8e5b1718,%rsi 21: e8 6c 5d f2 ff call 0xfffffffffff25d92 26: 90 nop 27: 0f 0b ud2 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 c7 c6 08 cd 60 8e mov $0xffffffff8e60cd08,%rsi 34: 5b pop %rbx 35: 48 89 ef mov %rbp,%rdi 38: 5d pop %rbp 39: 41 5c pop %r12 3b: 41 5d pop %r13 3d: e9 .byte 0xe9 3e: 50 push %rax 3f: 5d pop %rbp Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 c7 c6 08 cd 60 8e mov $0xffffffff8e60cd08,%rsi a: 5b pop %rbx b: 48 89 ef mov %rbp,%rdi e: 5d pop %rbp f: 41 5c pop %r12 11: 41 5d pop %r13 13: e9 .byte 0xe9 14: 50 push %rax 15: 5d pop %rbp [ 371.992547][ T3418] RSP: 0018:ffffc90006437110 EFLAGS: 00010202 [ 371.993068][ T3418] RAX: 0080000000002000 RBX: ffff88800576a000 RCX: 0000000000000000 [ 371.993543][ T3418] RDX: 00000000000000ff RSI: ffffffff8d089370 RDI: ffffea000049a240 [ 371.994046][ T3418] RBP: ffffea000049a240 R08: 0000000000000000 R09: fffffbfff1d3db04 [ 371.994504][ T3418] R10: 0000000000000003 R11: ffffffff8eb588d8 R12: ffffffff8d089370 [ 371.994952][ T3418] R13: ffff88800576b078 R14: 1ffff92000c86e28 R15: ffff88800576ad00 [ 371.995435][ T3418] FS: 00007f66868e2800(0000) GS:ffff8880a642d000(0000) knlGS:0000000000000000 [ 371.996001][ T3418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.996364][ T3418] CR2: 00000000004e5840 CR3: 000000000e8b8005 CR4: 0000000000772ef0 [ 371.997198][ T3418] PKRU: 55555554 [ 371.997430][ T3418] Call Trace: [ 371.997660][ T3418] [ 371.997810][ T3418] bond_uninit (./include/net/bonding.h:869 drivers/net/bonding/bond_main.c:6143) [ 371.998304][ T3418] ? bond_siocdevprivate (drivers/net/bonding/bond_main.c:6132) [ 371.998603][ T3418] ? notifier_call_chain (kernel/notifier.c:87 (discriminator 2)) [ 371.998918][ T3418] unregister_netdevice_many_notify (net/core/dev.c:12177) [ 371.999304][ T3418] ? dev_ingress_queue_create (net/core/dev.c:12081) [ 371.999595][ T3418] ? unregister_netdevice_queue (net/core/dev.c:12053) [ 371.999954][ T3418] ? unregister_netdevice_many (net/core/dev.c:12052) [ 372.000245][ T3418] rtnl_dellink (net/core/rtnetlink.c:3515 net/core/rtnetlink.c:3555) [ 372.000547][ T3418] ? valid_bridge_getlink_req.constprop.0 (net/core/rtnetlink.c:3521) [ 372.000953][ T3418] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 372.001244][ T3418] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 372.001542][ T3418] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 372.001844][ T3418] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:6944) [ 372.002142][ T3418] ? __lock_release (kernel/locking/lockdep.c:5536) [ 372.002438][ T3418] ? valid_bridge_getlink_req.constprop.0 (net/core/rtnetlink.c:3521) [ 372.002827][ T3418] rtnetlink_rcv_msg (net/core/rtnetlink.c:6946) [ 372.003135][ T3418] ? validate_chain (kernel/locking/lockdep.c:3801 kernel/locking/lockdep.c:3821 kernel/locking/lockdep.c:3876) [ 372.003430][ T3418] ? rtnl_port_fill (net/core/rtnetlink.c:6849) [ 372.003740][ T3418] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 372.004052][ T3418] netlink_rcv_skb (net/netlink/af_netlink.c:2552) [ 372.004374][ T3418] ? rtnl_port_fill (net/core/rtnetlink.c:6849) [ 372.004774][ T3418] ? netlink_ack (net/netlink/af_netlink.c:2529) [ 372.005099][ T3418] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/netlink/af_netlink.c:340) [ 372.005401][ T3418] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 372.005777][ T3418] netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1346) [ 372.006167][ T3418] ? netlink_attachskb (net/netlink/af_netlink.c:1331) [ 372.006464][ T3418] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 372.006875][ T3418] netlink_sendmsg (net/netlink/af_netlink.c:1896) [ 372.007181][ T3418] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 372.007508][ T3418] ? __import_iovec (lib/iov_iter.c:1441 lib/iov_iter.c:1456) [ 372.007825][ T3418] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 372.008187][ T3418] ____sys_sendmsg (net/socket.c:714 net/socket.c:729 net/socket.c:2614) [ 372.008549][ T3418] ? get_timestamp.constprop.0 (net/socket.c:2560) [ 372.008950][ T3418] ? __copy_msghdr (net/socket.c:2540) [ 372.009285][ T3418] ___sys_sendmsg (net/socket.c:2670) [ 372.009586][ T3418] ? kasan_record_aux_stack (mm/kasan/generic.c:548) [ 372.009953][ T3418] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:127 kernel/rcu/tree.c:3125) [ 372.010319][ T3418] ? copy_msghdr_from_user (net/socket.c:2657) [ 372.010683][ T3418] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 372.011088][ T3418] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 372.011423][ T3418] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 372.011739][ T3418] ? __virt_addr_valid (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 ./include/linux/mmzone.h:2172 arch/x86/mm/physaddr.c:65) [ 372.012073][ T3418] ? __lock_release (kernel/locking/lockdep.c:5536) [ 372.012358][ T3418] __sys_sendmsg (net/socket.c:2700) [ 372.012647][ T3418] ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3148) [ 372.013015][ T3418] ? __sys_sendmsg_sock (net/socket.c:2685) [ 372.013323][ T3418] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 372.013631][ T3418] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 372.013941][ T3418] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 372.014325][ T3418] RIP: 0033:0x7f6686aaf1e7 [ 372.014665][ T3418] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0e (bad) 1: 00 f7 add %dh,%bh 3: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 372.015804][ T3418] RSP: 002b:00007fff01c3cd68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.016277][ T3418] RAX: ffffffffffffffda RBX: 00007fff01c3d4a0 RCX: 00007f6686aaf1e7 [ 372.016721][ T3418] RDX: 0000000000000000 RSI: 00007fff01c3cdd0 RDI: 0000000000000005 [ 372.017174][ T3418] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000078 [ 372.017711][ T3418] R10: 00007f66869ac498 R11: 0000000000000246 R12: 0000000000000001 Finger prints: free_large_kmalloc:bond_uninit:unregister_netdevice_many_notify:rtnl_dellink:rtnetlink_rcv_msg