====================================== | [ 112.299085][ T916] bond0 (unregistering): Released all slaves | [ 112.299564][ T916] ------------[ cut here ]------------ | [ 112.300025][ T916] WARNING: CPU: 3 PID: 916 at mm/slub.c:4790 free_large_kmalloc (mm/slub.c:4790 (discriminator 1)) | [ 112.300557][ T916] Modules linked in: [last unloaded: netdevsim] [ 112.301624][ T916] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 112.302024][ T916] RIP: 0010:free_large_kmalloc (mm/slub.c:4790 (discriminator 1)) [ 112.302413][ T916] Code: 01 48 8b 74 24 20 4c 89 e7 49 c7 c4 00 f0 ff ff e8 0d fa 06 00 e9 62 ff ff ff 48 c7 c6 18 17 9b 89 e8 6c 5d f2 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 08 cd a0 89 5b 48 89 ef 5d 41 5c 41 5d e9 50 5d All code ======== 0: 01 48 8b add %ecx,-0x75(%rax) 3: 74 24 je 0x29 5: 20 4c 89 e7 and %cl,-0x19(%rcx,%rcx,4) 9: 49 c7 c4 00 f0 ff ff mov $0xfffffffffffff000,%r12 10: e8 0d fa 06 00 call 0x6fa22 15: e9 62 ff ff ff jmp 0xffffffffffffff7c 1a: 48 c7 c6 18 17 9b 89 mov $0xffffffff899b1718,%rsi 21: e8 6c 5d f2 ff call 0xfffffffffff25d92 26: 90 nop 27: 0f 0b ud2 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 c7 c6 08 cd a0 89 mov $0xffffffff89a0cd08,%rsi 34: 5b pop %rbx 35: 48 89 ef mov %rbp,%rdi 38: 5d pop %rbp 39: 41 5c pop %r12 3b: 41 5d pop %r13 3d: e9 .byte 0xe9 3e: 50 push %rax 3f: 5d pop %rbp Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 c7 c6 08 cd a0 89 mov $0xffffffff89a0cd08,%rsi a: 5b pop %rbx b: 48 89 ef mov %rbp,%rdi e: 5d pop %rbp f: 41 5c pop %r12 11: 41 5d pop %r13 13: e9 .byte 0xe9 14: 50 push %rax 15: 5d pop %rbp [ 112.303470][ T916] RSP: 0018:ffffc90000f17110 EFLAGS: 00010202 [ 112.303832][ T916] RAX: 0080000000002000 RBX: ffff88800952a000 RCX: 0000000000000000 [ 112.304266][ T916] RDX: 00000000000000ff RSI: ffffffff88489370 RDI: ffffea0000442240 [ 112.304707][ T916] RBP: ffffea0000442240 R08: 0000000000000000 R09: fffffbfff13bdb04 [ 112.305170][ T916] R10: 0000000000000003 R11: ffffffff89f588d8 R12: ffffffff88489370 [ 112.305602][ T916] R13: ffff88800952b078 R14: 1ffff920001e2e28 R15: ffff88800952ad00 [ 112.306068][ T916] FS: 00007f7ffdb48800(0000) GS:ffff8880ab12d000(0000) knlGS:0000000000000000 [ 112.306596][ T916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.306965][ T916] CR2: 00005651dca4ddec CR3: 0000000008d2e003 CR4: 0000000000772ef0 [ 112.307408][ T916] PKRU: 55555554 [ 112.307631][ T916] Call Trace: [ 112.307850][ T916] [ 112.308003][ T916] bond_uninit (./include/net/bonding.h:869 drivers/net/bonding/bond_main.c:6143) [ 112.308321][ T916] ? bond_siocdevprivate (drivers/net/bonding/bond_main.c:6132) [ 112.308628][ T916] ? notifier_call_chain (kernel/notifier.c:87 (discriminator 2)) [ 112.308930][ T916] unregister_netdevice_many_notify (net/core/dev.c:12177) [ 112.309310][ T916] ? dev_ingress_queue_create (net/core/dev.c:12081) [ 112.309605][ T916] ? unregister_netdevice_queue (net/core/dev.c:12053) [ 112.309969][ T916] ? unregister_netdevice_many (net/core/dev.c:12052) [ 112.310268][ T916] rtnl_dellink (net/core/rtnetlink.c:3515 net/core/rtnetlink.c:3555) [ 112.310574][ T916] ? valid_bridge_getlink_req.constprop.0 (net/core/rtnetlink.c:3521) [ 112.310988][ T916] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 112.311289][ T916] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 112.311591][ T916] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 112.311903][ T916] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:6944) [ 112.312188][ T916] ? __lock_release (kernel/locking/lockdep.c:5536) [ 112.312480][ T916] ? valid_bridge_getlink_req.constprop.0 (net/core/rtnetlink.c:3521) [ 112.312844][ T916] rtnetlink_rcv_msg (net/core/rtnetlink.c:6946) [ 112.313127][ T916] ? validate_chain (kernel/locking/lockdep.c:3801 kernel/locking/lockdep.c:3821 kernel/locking/lockdep.c:3876) [ 112.313425][ T916] ? rtnl_port_fill (net/core/rtnetlink.c:6849) [ 112.313714][ T916] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 112.314005][ T916] netlink_rcv_skb (net/netlink/af_netlink.c:2552) [ 112.314314][ T916] ? rtnl_port_fill (net/core/rtnetlink.c:6849) [ 112.314591][ T916] ? netlink_ack (net/netlink/af_netlink.c:2529) [ 112.314938][ T916] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/netlink/af_netlink.c:340) [ 112.315227][ T916] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 112.315514][ T916] netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1346) [ 112.315834][ T916] ? netlink_attachskb (net/netlink/af_netlink.c:1331) [ 112.316112][ T916] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 112.316414][ T916] netlink_sendmsg (net/netlink/af_netlink.c:1896) [ 112.316711][ T916] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 112.316997][ T916] ? __import_iovec (lib/iov_iter.c:1441 lib/iov_iter.c:1456) [ 112.317340][ T916] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 112.317617][ T916] ____sys_sendmsg (net/socket.c:714 net/socket.c:729 net/socket.c:2614) [ 112.317923][ T916] ? get_timestamp.constprop.0 (net/socket.c:2560) [ 112.318281][ T916] ? __copy_msghdr (net/socket.c:2540) [ 112.318583][ T916] ___sys_sendmsg (net/socket.c:2670) [ 112.318880][ T916] ? kasan_record_aux_stack (mm/kasan/generic.c:548) [ 112.319168][ T916] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:127 kernel/rcu/tree.c:3125) [ 112.319545][ T916] ? copy_msghdr_from_user (net/socket.c:2657) [ 112.319853][ T916] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 112.320147][ T916] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 112.320449][ T916] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 112.320734][ T916] ? __virt_addr_valid (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 ./include/linux/mmzone.h:2172 arch/x86/mm/physaddr.c:65) [ 112.321029][ T916] ? __lock_release (kernel/locking/lockdep.c:5536) [ 112.321332][ T916] __sys_sendmsg (net/socket.c:2700) [ 112.321627][ T916] ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3148) [ 112.321998][ T916] ? __sys_sendmsg_sock (net/socket.c:2685) [ 112.322310][ T916] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 112.322591][ T916] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 112.322894][ T916] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 112.323258][ T916] RIP: 0033:0x7f7ffdd151e7 [ 112.323568][ T916] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0e (bad) 1: 00 f7 add %dh,%bh 3: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 112.324603][ T916] RSP: 002b:00007ffe9cfb5a18 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.325072][ T916] RAX: ffffffffffffffda RBX: 00007ffe9cfb6150 RCX: 00007f7ffdd151e7 [ 112.325521][ T916] RDX: 0000000000000000 RSI: 00007ffe9cfb5a80 RDI: 0000000000000005 [ 112.325966][ T916] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000078 [ 112.326403][ T916] R10: 00007f7ffdc12498 R11: 0000000000000246 R12: 0000000000000001 Finger prints: free_large_kmalloc:bond_uninit:unregister_netdevice_many_notify:rtnl_dellink:rtnetlink_rcv_msg