====================================== | [ 325.037317][ T3218] bond0 (unregistering): Released all slaves | [ 325.037728][ T3218] ------------[ cut here ]------------ | [ 325.038044][ T3218] WARNING: CPU: 0 PID: 3218 at mm/slub.c:4790 free_large_kmalloc (mm/slub.c:4790 (discriminator 1)) | [ 325.038586][ T3218] Modules linked in: [ 325.039513][ T3218] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 325.039887][ T3218] RIP: 0010:free_large_kmalloc (mm/slub.c:4790 (discriminator 1)) [ 325.040306][ T3218] Code: 01 48 8b 74 24 20 4c 89 e7 49 c7 c4 00 f0 ff ff e8 0d fa 06 00 e9 62 ff ff ff 48 c7 c6 18 17 3b 88 e8 6c 5d f2 ff 90 0f 0b 90 <0f> 0b 90 48 c7 c6 08 cd 40 88 5b 48 89 ef 5d 41 5c 41 5d e9 50 5d All code ======== 0: 01 48 8b add %ecx,-0x75(%rax) 3: 74 24 je 0x29 5: 20 4c 89 e7 and %cl,-0x19(%rcx,%rcx,4) 9: 49 c7 c4 00 f0 ff ff mov $0xfffffffffffff000,%r12 10: e8 0d fa 06 00 call 0x6fa22 15: e9 62 ff ff ff jmp 0xffffffffffffff7c 1a: 48 c7 c6 18 17 3b 88 mov $0xffffffff883b1718,%rsi 21: e8 6c 5d f2 ff call 0xfffffffffff25d92 26: 90 nop 27: 0f 0b ud2 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: 48 c7 c6 08 cd 40 88 mov $0xffffffff8840cd08,%rsi 34: 5b pop %rbx 35: 48 89 ef mov %rbp,%rdi 38: 5d pop %rbp 39: 41 5c pop %r12 3b: 41 5d pop %r13 3d: e9 .byte 0xe9 3e: 50 push %rax 3f: 5d pop %rbp Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: 48 c7 c6 08 cd 40 88 mov $0xffffffff8840cd08,%rsi a: 5b pop %rbx b: 48 89 ef mov %rbp,%rdi e: 5d pop %rbp f: 41 5c pop %r12 11: 41 5d pop %r13 13: e9 .byte 0xe9 14: 50 push %rax 15: 5d pop %rbp [ 325.041374][ T3218] RSP: 0018:ffffc900057f7110 EFLAGS: 00010202 [ 325.041766][ T3218] RAX: 0080000000002000 RBX: ffff88800cfc2000 RCX: 0000000000000000 [ 325.042243][ T3218] RDX: 00000000000000ff RSI: ffffffff86e89370 RDI: ffffea0000eaa240 [ 325.042726][ T3218] RBP: ffffea0000eaa240 R08: 0000000000000000 R09: fffffbfff10fdb04 [ 325.043184][ T3218] R10: 0000000000000003 R11: ffffffff889588d8 R12: ffffffff86e89370 [ 325.043644][ T3218] R13: ffff88800cfc3078 R14: 1ffff92000afee28 R15: ffff88800cfc2d00 [ 325.044107][ T3218] FS: 00007f26bf081800(0000) GS:ffff8880a69ad000(0000) knlGS:0000000000000000 [ 325.044632][ T3218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.045024][ T3218] CR2: 00000000004e5840 CR3: 000000000eb70003 CR4: 0000000000772ef0 [ 325.045492][ T3218] PKRU: 55555554 [ 325.045723][ T3218] Call Trace: [ 325.045996][ T3218] [ 325.046159][ T3218] bond_uninit (./include/net/bonding.h:869 drivers/net/bonding/bond_main.c:6143) [ 325.046462][ T3218] ? bond_siocdevprivate (drivers/net/bonding/bond_main.c:6132) [ 325.046764][ T3218] ? notifier_call_chain (kernel/notifier.c:87 (discriminator 2)) [ 325.047081][ T3218] unregister_netdevice_many_notify (net/core/dev.c:12177) [ 325.047456][ T3218] ? dev_ingress_queue_create (net/core/dev.c:12081) [ 325.047754][ T3218] ? unregister_netdevice_queue (net/core/dev.c:12053) [ 325.048136][ T3218] ? unregister_netdevice_many (net/core/dev.c:12052) [ 325.048439][ T3218] rtnl_dellink (net/core/rtnetlink.c:3515 net/core/rtnetlink.c:3555) [ 325.048735][ T3218] ? valid_bridge_getlink_req.constprop.0 (net/core/rtnetlink.c:3521) [ 325.049162][ T3218] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 325.049463][ T3218] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 325.049762][ T3218] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 325.050067][ T3218] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/rtnetlink.c:6944) [ 325.050355][ T3218] ? __lock_release (kernel/locking/lockdep.c:5536) [ 325.050638][ T3218] ? valid_bridge_getlink_req.constprop.0 (net/core/rtnetlink.c:3521) [ 325.050993][ T3218] rtnetlink_rcv_msg (net/core/rtnetlink.c:6946) [ 325.051270][ T3218] ? validate_chain (kernel/locking/lockdep.c:3801 kernel/locking/lockdep.c:3821 kernel/locking/lockdep.c:3876) [ 325.051555][ T3218] ? rtnl_port_fill (net/core/rtnetlink.c:6849) [ 325.051837][ T3218] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 325.052132][ T3218] netlink_rcv_skb (net/netlink/af_netlink.c:2552) [ 325.052424][ T3218] ? rtnl_port_fill (net/core/rtnetlink.c:6849) [ 325.052712][ T3218] ? netlink_ack (net/netlink/af_netlink.c:2529) [ 325.053013][ T3218] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/netlink/af_netlink.c:340) [ 325.053290][ T3218] ? netlink_deliver_tap (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 325.053580][ T3218] netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1346) [ 325.053865][ T3218] ? netlink_attachskb (net/netlink/af_netlink.c:1331) [ 325.054157][ T3218] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 325.054440][ T3218] netlink_sendmsg (net/netlink/af_netlink.c:1896) [ 325.054738][ T3218] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 325.055044][ T3218] ? __import_iovec (lib/iov_iter.c:1441 lib/iov_iter.c:1456) [ 325.055329][ T3218] ? netlink_unicast (net/netlink/af_netlink.c:1815) [ 325.055608][ T3218] ____sys_sendmsg (net/socket.c:714 net/socket.c:729 net/socket.c:2614) [ 325.055893][ T3218] ? get_timestamp.constprop.0 (net/socket.c:2560) [ 325.056248][ T3218] ? __copy_msghdr (net/socket.c:2540) [ 325.056538][ T3218] ___sys_sendmsg (net/socket.c:2670) [ 325.056815][ T3218] ? kasan_record_aux_stack (mm/kasan/generic.c:548) [ 325.057103][ T3218] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:127 kernel/rcu/tree.c:3125) [ 325.057454][ T3218] ? copy_msghdr_from_user (net/socket.c:2657) [ 325.057739][ T3218] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 325.058037][ T3218] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 325.058321][ T3218] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 325.058611][ T3218] ? __virt_addr_valid (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 ./include/linux/mmzone.h:2172 arch/x86/mm/physaddr.c:65) [ 325.058904][ T3218] ? __lock_release (kernel/locking/lockdep.c:5536) [ 325.059216][ T3218] __sys_sendmsg (net/socket.c:2700) [ 325.059509][ T3218] ? __call_rcu_common.constprop.0 (kernel/rcu/tree.c:3148) [ 325.059856][ T3218] ? __sys_sendmsg_sock (net/socket.c:2685) [ 325.060164][ T3218] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:751) [ 325.060444][ T3218] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 325.060728][ T3218] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 325.061084][ T3218] RIP: 0033:0x7f26bf24e1e7 [ 325.061380][ T3218] Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0e (bad) 1: 00 f7 add %dh,%bh 3: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 325.062403][ T3218] RSP: 002b:00007ffee1a30068 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.062847][ T3218] RAX: ffffffffffffffda RBX: 00007ffee1a307a0 RCX: 00007f26bf24e1e7 [ 325.063272][ T3218] RDX: 0000000000000000 RSI: 00007ffee1a300d0 RDI: 0000000000000005 [ 325.063692][ T3218] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000078 [ 325.064123][ T3218] R10: 00007f26bf14b498 R11: 0000000000000246 R12: 0000000000000001 Finger prints: free_large_kmalloc:bond_uninit:unregister_netdevice_many_notify:rtnl_dellink:rtnetlink_rcv_msg