====================================== | [ 829.034814][ C2] #1: ffff88800b2d9720 (&mm->mmap_lock){++++}-{4:4}, at: __vmf_anon_prepare (./include/linux/mmap_lock.h:204 mm/memory.c:3429) | [ 829.035187][ C2] #2: ffffc90000218d60 ((&icsk->icsk_retransmit_timer)){+.-.}-{0:0}, at: call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1737) | [ 829.035611][ C2] | [ 829.035611][ C2] stack backtrace: [ 829.035881][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 829.035883][ C2] Call Trace: [ 829.035885][ C2] [ 829.035887][ C2] dump_stack_lvl (lib/dump_stack.c:123) [ 829.035896][ C2] print_usage_bug.part.0 (kernel/locking/lockdep.c:4048) [ 829.035901][ C2] mark_lock_irq (kernel/locking/lockdep.c:4013 kernel/locking/lockdep.c:4059 kernel/locking/lockdep.c:4270) [ 829.035904][ C2] ? __slab_alloc.constprop.0 (mm/slub.c:3948) [ 829.035910][ C2] ? kmem_cache_alloc_noprof (mm/slub.c:4023 mm/slub.c:4184 mm/slub.c:4203) [ 829.035913][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.035919][ C2] ? __vmf_anon_prepare (mm/memory.c:3434) [ 829.035922][ C2] ? wp_page_copy (mm/internal.h:410 mm/memory.c:3473) [ 829.035925][ C2] ? handle_pte_fault (mm/memory.c:6013) [ 829.035928][ C2] ? __handle_mm_fault (mm/memory.c:6140) [ 829.035930][ C2] ? handle_mm_fault (mm/memory.c:6321) [ 829.035934][ C2] mark_lock (kernel/locking/lockdep.c:4756) [ 829.035938][ C2] mark_usage (kernel/locking/lockdep.c:4645) [ 829.035940][ C2] __lock_acquire (kernel/locking/lockdep.c:5194) [ 829.035943][ C2] ? __pfx___debug_check_no_obj_freed (lib/debugobjects.c:1070) [ 829.035952][ C2] lock_acquire.part.0 (kernel/locking/lockdep.c:473 kernel/locking/lockdep.c:5873) [ 829.035955][ C2] ? simple_pin_fs (fs/libfs.c:1067) [ 829.035959][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 829.035964][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 829.035966][ C2] ? simple_pin_fs (fs/libfs.c:1067) [ 829.035970][ C2] _raw_spin_lock (./include/linux/spinlock_api_smp.h:134 kernel/locking/spinlock.c:154) [ 829.035974][ C2] ? simple_pin_fs (fs/libfs.c:1067) [ 829.035977][ C2] simple_pin_fs (fs/libfs.c:1067) [ 829.035982][ C2] debugfs_remove (fs/debugfs/inode.c:805 fs/debugfs/inode.c:799) [ 829.035988][ C2] ref_tracker_dir_exit (lib/ref_tracker.c:411 lib/ref_tracker.c:195) [ 829.035996][ C2] ? __pfx_ref_tracker_free (lib/ref_tracker.c:253) [ 829.036001][ C2] ? __sk_destruct (./include/linux/instrumented.h:96 ./include/linux/atomic/atomic-instrumented.h:400 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/net_namespace.h:287 ./include/net/net_namespace.h:390 net/core/sock.c:2376) [ 829.036010][ C2] ? call_timer_fn (kernel/time/timer.c:1747) [ 829.036018][ C2] ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:189) [ 829.036022][ C2] ? handle_softirqs (kernel/softirq.c:580) [ 829.036027][ C2] ? __irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680) [ 829.036031][ C2] ? irq_exit_rcu (kernel/softirq.c:698) [ 829.036034][ C2] ? sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 arch/x86/kernel/apic/apic.c:1050) [ 829.036039][ C2] ? asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 829.036043][ C2] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 829.036047][ C2] ? get_partial_node.part.0 (mm/slub.c:2902) [ 829.036050][ C2] ? ___slab_alloc (mm/slub.c:2863 mm/slub.c:2980 mm/slub.c:3838) [ 829.036053][ C2] ? __slab_alloc.constprop.0 (mm/slub.c:3948) [ 829.036056][ C2] ? kmem_cache_alloc_noprof (mm/slub.c:4023 mm/slub.c:4184 mm/slub.c:4203) [ 829.036059][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.036064][ C2] __put_net (net/core/net_namespace.c:732) [ 829.036071][ C2] __sk_destruct (./include/net/net_namespace.h:288 ./include/net/net_namespace.h:390 net/core/sock.c:2376) [ 829.036074][ C2] ? __pfx_tcp_write_timer (net/ipv4/tcp_timer.c:727) [ 829.036080][ C2] call_timer_fn (kernel/time/timer.c:1747) [ 829.036083][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1737) [ 829.036086][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1737) [ 829.036090][ C2] ? __pfx_call_timer_fn (kernel/time/timer.c:1724) [ 829.036096][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4328) [ 829.036100][ C2] __run_timers (kernel/time/timer.c:1799 kernel/time/timer.c:2372) [ 829.036103][ C2] ? __pfx_tcp_write_timer (net/ipv4/tcp_timer.c:727) [ 829.036107][ C2] ? __pfx___run_timers (kernel/time/timer.c:2343) [ 829.036111][ C2] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 829.036115][ C2] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 829.036118][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 829.036120][ C2] ? run_timer_base (kernel/time/timer.c:2384 kernel/time/timer.c:2376 kernel/time/timer.c:2393) [ 829.036124][ C2] run_timer_base (kernel/time/timer.c:2385 kernel/time/timer.c:2376 kernel/time/timer.c:2393) [ 829.036127][ C2] run_timer_softirq (kernel/time/timer.c:2404) [ 829.036129][ C2] handle_softirqs (kernel/softirq.c:580) [ 829.036134][ C2] __irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680) [ 829.036137][ C2] irq_exit_rcu (kernel/softirq.c:698) [ 829.036140][ C2] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 arch/x86/kernel/apic/apic.c:1050) [ 829.036143][ C2] [ 829.036145][ C2] [ 829.036146][ C2] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 829.036149][ C2] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 829.036153][ C2] Code: 74 24 10 e8 81 4c 56 fd 48 89 ef e8 39 9f 56 fd 81 e3 00 02 00 00 75 29 9c 58 f6 c4 02 75 35 48 85 db 74 01 fb bf 01 00 00 00 ba 9c 4a fd 65 8b 05 f3 3c 1f 03 85 c0 74 0e 5b 5d e9 98 34 00 All code ======== 0: 74 24 je 0x26 2: 10 e8 adc %ch,%al 4: 81 4c 56 fd 48 89 ef orl $0xe8ef8948,-0x3(%rsi,%rdx,2) b: e8 c: 39 9f 56 fd 81 e3 cmp %ebx,-0x1c7e02aa(%rdi) 12: 00 02 add %al,(%rdx) 14: 00 00 add %al,(%rax) 16: 75 29 jne 0x41 18: 9c pushf 19: 58 pop %rax 1a: f6 c4 02 test $0x2,%ah 1d: 75 35 jne 0x54 1f: 48 85 db test %rbx,%rbx 22: 74 01 je 0x25 24: fb sti 25: bf 01 00 00 00 mov $0x1,%edi 2a:* e8 ba 9c 4a fd call 0xfffffffffd4a9ce9 <-- trapping instruction 2f: 65 8b 05 f3 3c 1f 03 mov %gs:0x31f3cf3(%rip),%eax # 0x31f3d29 36: 85 c0 test %eax,%eax 38: 74 0e je 0x48 3a: 5b pop %rbx 3b: 5d pop %rbp 3c: e9 .byte 0xe9 3d: 98 cwtl 3e: 34 00 xor $0x0,%al Code starting with the faulting instruction =========================================== 0: e8 ba 9c 4a fd call 0xfffffffffd4a9cbf 5: 65 8b 05 f3 3c 1f 03 mov %gs:0x31f3cf3(%rip),%eax # 0x31f3cff c: 85 c0 test %eax,%eax e: 74 0e je 0x1e 10: 5b pop %rbx 11: 5d pop %rbp 12: e9 .byte 0xe9 13: 98 cwtl 14: 34 00 xor $0x0,%al [ 829.036156][ C2] RSP: 0000:ffffc90000d87918 EFLAGS: 00000206 [ 829.036159][ C2] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 0000000000000080 [ 829.036161][ C2] RDX: 0000000000000000 RSI: ffffffffa6515cea RDI: 0000000000000001 [ 829.036162][ C2] RBP: ffff8880011c7080 R08: 0000000000000001 R09: 0000000000000001 [ 829.036164][ C2] R10: ffffffffa7a7c7d7 R11: ffff8880011c7098 R12: ffff8880011c7080 [ 829.036166][ C2] R13: ffffea0000367180 R14: ffff888001956040 R15: ffff88800d9c63c8 [ 829.036172][ C2] get_partial_node.part.0 (mm/slub.c:2902) [ 829.036178][ C2] ___slab_alloc (mm/slub.c:2863 mm/slub.c:2980 mm/slub.c:3838) [ 829.036182][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.036186][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.036189][ C2] __slab_alloc.constprop.0 (mm/slub.c:3948) [ 829.036194][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.036196][ C2] kmem_cache_alloc_noprof (mm/slub.c:4023 mm/slub.c:4184 mm/slub.c:4203) [ 829.036201][ C2] __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.036205][ C2] __vmf_anon_prepare (mm/memory.c:3434) [ 829.036210][ C2] wp_page_copy (mm/internal.h:410 mm/memory.c:3473) [ 829.036213][ C2] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 829.036217][ C2] ? __pfx_wp_page_copy (mm/memory.c:3457) [ 829.036220][ C2] ? __lock_release (kernel/locking/lockdep.c:5539) [ 829.036224][ C2] ? rcu_read_unlock (./include/linux/rcupdate.h:341 (discriminator 9) ./include/linux/rcupdate.h:871 (discriminator 9)) [ 829.036229][ C2] ? do_wp_page (mm/memory.c:3939) [ 829.036234][ C2] handle_pte_fault (mm/memory.c:6013) [ 829.036237][ C2] ? __pfx_handle_pte_fault (mm/memory.c:5954) [ 829.036240][ C2] ? reacquire_held_locks (kernel/locking/lockdep.c:5388) [ 829.036243][ C2] ? do_user_addr_fault (arch/x86/mm/fault.c:1327) [ 829.036248][ C2] __handle_mm_fault (mm/memory.c:6140) [ 829.036251][ C2] ? __pfx___handle_mm_fault (mm/memory.c:6049) [ 829.036253][ C2] ? __lock_release (kernel/locking/lockdep.c:5585) [ 829.036259][ C2] ? __pfx_lock_vma_under_rcu (mm/memory.c:6547) [ 829.036263][ C2] handle_mm_fault (mm/memory.c:6321) [ 829.036266][ C2] ? __pfx_handle_mm_fault (mm/memory.c:6276) [ 829.036268][ C2] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1484 arch/x86/mm/fault.c:1532) [ 829.036271][ C2] ? __lock_release (kernel/locking/lockdep.c:5539) [ 829.036276][ C2] do_user_addr_fault (arch/x86/mm/fault.c:1337) [ 829.036280][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 829.036284][ C2] exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1484 arch/x86/mm/fault.c:1532) [ 829.036288][ C2] asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 829.036290][ C2] RIP: 0033:0x7f6f197e674c [ 829.036294][ C2] Code: 1e fa 80 3d d5 68 01 00 00 75 2b 55 48 83 3d aa 68 01 00 00 48 89 e5 74 0c 48 8d 3d be 62 01 00 e8 49 ff ff ff e8 64 ff ff ff 05 ad 68 01 00 01 5d c3 0f 1f 00 c3 0f 1f 80 00 00 00 00 f3 0f All code ======== 0: 1e (bad) 1: fa cli 2: 80 3d d5 68 01 00 00 cmpb $0x0,0x168d5(%rip) # 0x168de 9: 75 2b jne 0x36 b: 55 push %rbp c: 48 83 3d aa 68 01 00 cmpq $0x0,0x168aa(%rip) # 0x168be 13: 00 14: 48 89 e5 mov %rsp,%rbp 17: 74 0c je 0x25 19: 48 8d 3d be 62 01 00 lea 0x162be(%rip),%rdi # 0x162de 20: e8 49 ff ff ff call 0xffffffffffffff6e 25: e8 64 ff ff ff call 0xffffffffffffff8e 2a:* c6 05 ad 68 01 00 01 movb $0x1,0x168ad(%rip) # 0x168de <-- trapping instruction 31: 5d pop %rbp 32: c3 ret 33: 0f 1f 00 nopl (%rax) 36: c3 ret 37: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 3e: f3 repz 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: c6 05 ad 68 01 00 01 movb $0x1,0x168ad(%rip) # 0x168b4 7: 5d pop %rbp 8: c3 ret 9: 0f 1f 00 nopl (%rax) c: c3 ret d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 14: f3 repz 15: 0f .byte 0xf [ 829.036296][ C2] RSP: 002b:00007ffd44b0d090 EFLAGS: 00010246 [ 829.036298][ C2] RAX: 00007f6f197fd000 RBX: 00007f6f198d9000 RCX: 0000000000000000 [ 829.036301][ C2] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6f197fd000 [ 829.036302][ C2] RBP: 00007ffd44b0d090 R08: 0000000000000000 R09: 0000000000000060 [ 829.036304][ C2] R10: 00007ffd44b0cf90 R11: 00007ffd44b0cf90 R12: 0000000000000000 [ 829.036305][ C2] R13: 00007f6f198d9988 R14: 00007ffd44b0d0c8 R15: 00007f6f1989a340 | [ 829.065352][ C2] RCU nest depth: 0, expected: 0 | [ 829.065574][ C2] INFO: lockdep is turned off. | [ 829.065788][ C2] Preemption disabled at: | [ 829.065790][ C2] __slab_alloc.constprop.0 (mm/slub.c:3945) [ 829.066372][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 829.066374][ C2] Call Trace: [ 829.066376][ C2] [ 829.066378][ C2] dump_stack_lvl (lib/dump_stack.c:123) [ 829.066385][ C2] __might_resched (kernel/sched/core.c:8796) [ 829.066394][ C2] down_write (./include/linux/kernel.h:73 kernel/locking/rwsem.c:1576) [ 829.066398][ C2] ? __pfx_down_write (kernel/locking/rwsem.c:1575) [ 829.066401][ C2] ? simple_recursive_removal (fs/libfs.c:614) [ 829.066406][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 829.066411][ C2] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 829.066416][ C2] simple_recursive_removal (./include/linux/dcache.h:409 ./include/linux/dcache.h:424 ./include/linux/dcache.h:434 fs/libfs.c:617) [ 829.066419][ C2] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 829.066422][ C2] ? __pfx_remove_one (fs/debugfs/inode.c:780) [ 829.066429][ C2] debugfs_remove (fs/debugfs/inode.c:806 fs/debugfs/inode.c:799) [ 829.066432][ C2] ref_tracker_dir_exit (lib/ref_tracker.c:411 lib/ref_tracker.c:195) [ 829.066437][ C2] ? __pfx_ref_tracker_free (lib/ref_tracker.c:253) [ 829.066439][ C2] ? __sk_destruct (./include/linux/instrumented.h:96 ./include/linux/atomic/atomic-instrumented.h:400 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/net_namespace.h:287 ./include/net/net_namespace.h:390 net/core/sock.c:2376) [ 829.066444][ C2] ? call_timer_fn (kernel/time/timer.c:1747) [ 829.066449][ C2] ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:189) [ 829.066452][ C2] ? handle_softirqs (kernel/softirq.c:580) [ 829.066456][ C2] ? __irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680) [ 829.066459][ C2] ? irq_exit_rcu (kernel/softirq.c:698) [ 829.066461][ C2] ? sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 arch/x86/kernel/apic/apic.c:1050) [ 829.066465][ C2] ? asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 829.066470][ C2] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 829.066473][ C2] ? get_partial_node.part.0 (mm/slub.c:2902) [ 829.066476][ C2] ? ___slab_alloc (mm/slub.c:2863 mm/slub.c:2980 mm/slub.c:3838) [ 829.066479][ C2] ? __slab_alloc.constprop.0 (mm/slub.c:3948) [ 829.066482][ C2] ? kmem_cache_alloc_noprof (mm/slub.c:4023 mm/slub.c:4184 mm/slub.c:4203) [ 829.066485][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.066492][ C2] __put_net (net/core/net_namespace.c:732) [ 829.066497][ C2] __sk_destruct (./include/net/net_namespace.h:288 ./include/net/net_namespace.h:390 net/core/sock.c:2376) [ 829.066501][ C2] ? __pfx_tcp_write_timer (net/ipv4/tcp_timer.c:727) [ 829.066505][ C2] call_timer_fn (kernel/time/timer.c:1747) [ 829.066508][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1737) [ 829.066511][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1737) [ 829.066515][ C2] ? __pfx_call_timer_fn (kernel/time/timer.c:1724) [ 829.066521][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4328) [ 829.066526][ C2] __run_timers (kernel/time/timer.c:1799 kernel/time/timer.c:2372) [ 829.066528][ C2] ? __pfx_tcp_write_timer (net/ipv4/tcp_timer.c:727) [ 829.066533][ C2] ? __pfx___run_timers (kernel/time/timer.c:2343) [ 829.066536][ C2] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 829.066540][ C2] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 829.066543][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 829.066545][ C2] ? run_timer_base (kernel/time/timer.c:2384 kernel/time/timer.c:2376 kernel/time/timer.c:2393) [ 829.066550][ C2] run_timer_base (kernel/time/timer.c:2385 kernel/time/timer.c:2376 kernel/time/timer.c:2393) [ 829.066552][ C2] run_timer_softirq (kernel/time/timer.c:2404) [ 829.066555][ C2] handle_softirqs (kernel/softirq.c:580) [ 829.066559][ C2] __irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680) [ 829.066562][ C2] irq_exit_rcu (kernel/softirq.c:698) [ 829.066565][ C2] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 arch/x86/kernel/apic/apic.c:1050) [ 829.066568][ C2] [ 829.066569][ C2] [ 829.066570][ C2] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 829.066573][ C2] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 829.066577][ C2] Code: 74 24 10 e8 81 4c 56 fd 48 89 ef e8 39 9f 56 fd 81 e3 00 02 00 00 75 29 9c 58 f6 c4 02 75 35 48 85 db 74 01 fb bf 01 00 00 00 ba 9c 4a fd 65 8b 05 f3 3c 1f 03 85 c0 74 0e 5b 5d e9 98 34 00 All code ======== 0: 74 24 je 0x26 2: 10 e8 adc %ch,%al 4: 81 4c 56 fd 48 89 ef orl $0xe8ef8948,-0x3(%rsi,%rdx,2) b: e8 c: 39 9f 56 fd 81 e3 cmp %ebx,-0x1c7e02aa(%rdi) 12: 00 02 add %al,(%rdx) 14: 00 00 add %al,(%rax) 16: 75 29 jne 0x41 18: 9c pushf 19: 58 pop %rax 1a: f6 c4 02 test $0x2,%ah 1d: 75 35 jne 0x54 1f: 48 85 db test %rbx,%rbx 22: 74 01 je 0x25 24: fb sti 25: bf 01 00 00 00 mov $0x1,%edi 2a:* e8 ba 9c 4a fd call 0xfffffffffd4a9ce9 <-- trapping instruction 2f: 65 8b 05 f3 3c 1f 03 mov %gs:0x31f3cf3(%rip),%eax # 0x31f3d29 36: 85 c0 test %eax,%eax 38: 74 0e je 0x48 3a: 5b pop %rbx 3b: 5d pop %rbp 3c: e9 .byte 0xe9 3d: 98 cwtl 3e: 34 00 xor $0x0,%al Code starting with the faulting instruction =========================================== 0: e8 ba 9c 4a fd call 0xfffffffffd4a9cbf 5: 65 8b 05 f3 3c 1f 03 mov %gs:0x31f3cf3(%rip),%eax # 0x31f3cff c: 85 c0 test %eax,%eax e: 74 0e je 0x1e 10: 5b pop %rbx 11: 5d pop %rbp 12: e9 .byte 0xe9 13: 98 cwtl 14: 34 00 xor $0x0,%al [ 829.066579][ C2] RSP: 0000:ffffc90000d87918 EFLAGS: 00000206 [ 829.066582][ C2] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 0000000000000080 [ 829.066584][ C2] RDX: 0000000000000000 RSI: ffffffffa6515cea RDI: 0000000000000001 [ 829.066586][ C2] RBP: ffff8880011c7080 R08: 0000000000000001 R09: 0000000000000001 [ 829.066587][ C2] R10: ffffffffa7a7c7d7 R11: ffff8880011c7098 R12: ffff8880011c7080 [ 829.066589][ C2] R13: ffffea0000367180 R14: ffff888001956040 R15: ffff88800d9c63c8 [ 829.066596][ C2] get_partial_node.part.0 (mm/slub.c:2902) [ 829.066601][ C2] ___slab_alloc (mm/slub.c:2863 mm/slub.c:2980 mm/slub.c:3838) [ 829.066605][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.066610][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.066613][ C2] __slab_alloc.constprop.0 (mm/slub.c:3948) [ 829.066617][ C2] ? __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.066620][ C2] kmem_cache_alloc_noprof (mm/slub.c:4023 mm/slub.c:4184 mm/slub.c:4203) [ 829.066625][ C2] __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) [ 829.066629][ C2] __vmf_anon_prepare (mm/memory.c:3434) [ 829.066635][ C2] wp_page_copy (mm/internal.h:410 mm/memory.c:3473) [ 829.066638][ C2] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 829.066642][ C2] ? __pfx_wp_page_copy (mm/memory.c:3457) [ 829.066645][ C2] ? __lock_release (kernel/locking/lockdep.c:5539) [ 829.066649][ C2] ? rcu_read_unlock (./include/linux/rcupdate.h:341 (discriminator 9) ./include/linux/rcupdate.h:871 (discriminator 9)) [ 829.066653][ C2] ? do_wp_page (mm/memory.c:3939) [ 829.066658][ C2] handle_pte_fault (mm/memory.c:6013) [ 829.066662][ C2] ? __pfx_handle_pte_fault (mm/memory.c:5954) [ 829.066665][ C2] ? reacquire_held_locks (kernel/locking/lockdep.c:5388) [ 829.066667][ C2] ? do_user_addr_fault (arch/x86/mm/fault.c:1327) [ 829.066674][ C2] __handle_mm_fault (mm/memory.c:6140) [ 829.066677][ C2] ? __pfx___handle_mm_fault (mm/memory.c:6049) [ 829.066679][ C2] ? __lock_release (kernel/locking/lockdep.c:5585) [ 829.066686][ C2] ? __pfx_lock_vma_under_rcu (mm/memory.c:6547) [ 829.066689][ C2] handle_mm_fault (mm/memory.c:6321) [ 829.066692][ C2] ? __pfx_handle_mm_fault (mm/memory.c:6276) [ 829.066695][ C2] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1484 arch/x86/mm/fault.c:1532) [ 829.066698][ C2] ? __lock_release (kernel/locking/lockdep.c:5539) [ 829.066702][ C2] do_user_addr_fault (arch/x86/mm/fault.c:1337) [ 829.066707][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 829.066711][ C2] exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1484 arch/x86/mm/fault.c:1532) [ 829.066714][ C2] asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 829.066717][ C2] RIP: 0033:0x7f6f197e674c [ 829.066721][ C2] Code: 1e fa 80 3d d5 68 01 00 00 75 2b 55 48 83 3d aa 68 01 00 00 48 89 e5 74 0c 48 8d 3d be 62 01 00 e8 49 ff ff ff e8 64 ff ff ff 05 ad 68 01 00 01 5d c3 0f 1f 00 c3 0f 1f 80 00 00 00 00 f3 0f All code ======== 0: 1e (bad) 1: fa cli 2: 80 3d d5 68 01 00 00 cmpb $0x0,0x168d5(%rip) # 0x168de 9: 75 2b jne 0x36 b: 55 push %rbp c: 48 83 3d aa 68 01 00 cmpq $0x0,0x168aa(%rip) # 0x168be 13: 00 14: 48 89 e5 mov %rsp,%rbp 17: 74 0c je 0x25 19: 48 8d 3d be 62 01 00 lea 0x162be(%rip),%rdi # 0x162de 20: e8 49 ff ff ff call 0xffffffffffffff6e 25: e8 64 ff ff ff call 0xffffffffffffff8e 2a:* c6 05 ad 68 01 00 01 movb $0x1,0x168ad(%rip) # 0x168de <-- trapping instruction 31: 5d pop %rbp 32: c3 ret 33: 0f 1f 00 nopl (%rax) 36: c3 ret 37: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 3e: f3 repz 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: c6 05 ad 68 01 00 01 movb $0x1,0x168ad(%rip) # 0x168b4 7: 5d pop %rbp 8: c3 ret 9: 0f 1f 00 nopl (%rax) c: c3 ret d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 14: f3 repz 15: 0f .byte 0xf [ 829.066723][ C2] RSP: 002b:00007ffd44b0d090 EFLAGS: 00010246 [ 829.066725][ C2] RAX: 00007f6f197fd000 RBX: 00007f6f198d9000 RCX: 0000000000000000 [ 829.066727][ C2] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f6f197fd000 [ 829.066729][ C2] RBP: 00007ffd44b0d090 R08: 0000000000000000 R09: 0000000000000060 [ 829.066730][ C2] R10: 00007ffd44b0cf90 R11: 00007ffd44b0cf90 R12: 0000000000000000 [ 829.066732][ C2] R13: 00007f6f198d9988 R14: 00007ffd44b0d0c8 R15: 00007f6f1989a340 | [ 882.273727][ C2] INFO: lockdep is turned off. | [ 882.273941][ C2] Preemption disabled at: | [ 882.273943][ C2] 0x0 | [ 882.274330][ C2] Tainted: [W]=WARN [ 882.274332][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 882.274334][ C2] Call Trace: [ 882.274336][ C2] [ 882.274339][ C2] dump_stack_lvl (lib/dump_stack.c:123) [ 882.274353][ C2] __might_resched (kernel/sched/core.c:8796) [ 882.274362][ C2] down_write (./include/linux/kernel.h:73 kernel/locking/rwsem.c:1576) [ 882.274367][ C2] ? __pfx_down_write (kernel/locking/rwsem.c:1575) [ 882.274370][ C2] ? simple_recursive_removal (fs/libfs.c:614) [ 882.274376][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 882.274398][ C2] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 882.274404][ C2] simple_recursive_removal (./include/linux/dcache.h:409 ./include/linux/dcache.h:424 ./include/linux/dcache.h:434 fs/libfs.c:617) [ 882.274407][ C2] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 882.274410][ C2] ? __pfx_remove_one (fs/debugfs/inode.c:780) [ 882.274418][ C2] debugfs_remove (fs/debugfs/inode.c:806 fs/debugfs/inode.c:799) [ 882.274422][ C2] ref_tracker_dir_exit (lib/ref_tracker.c:411 lib/ref_tracker.c:195) [ 882.274428][ C2] ? __pfx_ref_tracker_free (lib/ref_tracker.c:253) [ 882.274430][ C2] ? __sk_destruct (./include/linux/instrumented.h:96 ./include/linux/atomic/atomic-instrumented.h:400 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/net_namespace.h:287 ./include/net/net_namespace.h:390 net/core/sock.c:2376) [ 882.274436][ C2] ? call_timer_fn (kernel/time/timer.c:1747) [ 882.274443][ C2] ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:189) [ 882.274445][ C2] ? handle_softirqs (kernel/softirq.c:580) [ 882.274452][ C2] ? __irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680) [ 882.274454][ C2] ? irq_exit_rcu (kernel/softirq.c:698) [ 882.274457][ C2] ? sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 arch/x86/kernel/apic/apic.c:1050) [ 882.274462][ C2] ? asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 882.274466][ C2] ? pv_native_safe_halt (arch/x86/kernel/paravirt.c:82) [ 882.274470][ C2] ? default_idle (./arch/x86/include/asm/paravirt.h:107 arch/x86/kernel/process.c:743) [ 882.274473][ C2] ? default_idle_call (./include/linux/cpuidle.h:143 kernel/sched/idle.c:118) [ 882.274475][ C2] ? cpuidle_idle_call (kernel/sched/idle.c:186) [ 882.274478][ C2] ? do_idle (kernel/sched/idle.c:325) [ 882.274480][ C2] ? cpu_startup_entry (kernel/sched/idle.c:422 (discriminator 1)) [ 882.274482][ C2] ? bpf_sk_storage_free (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/bpf_sk_storage.c:61) [ 882.274488][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 882.274493][ C2] __put_net (net/core/net_namespace.c:732) [ 882.274499][ C2] __sk_destruct (./include/net/net_namespace.h:288 ./include/net/net_namespace.h:390 net/core/sock.c:2376) [ 882.274502][ C2] ? __pfx_tcp_write_timer (net/ipv4/tcp_timer.c:727) [ 882.274507][ C2] call_timer_fn (kernel/time/timer.c:1747) [ 882.274511][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1737) [ 882.274514][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1737) [ 882.274517][ C2] ? __pfx_call_timer_fn (kernel/time/timer.c:1724) [ 882.274520][ C2] ? perf_event_task_tick (kernel/events/core.c:4501) [ 882.274529][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 882.274533][ C2] __run_timers (kernel/time/timer.c:1799 kernel/time/timer.c:2372) [ 882.274536][ C2] ? __pfx_tcp_write_timer (net/ipv4/tcp_timer.c:727) [ 882.274541][ C2] ? __pfx___run_timers (kernel/time/timer.c:2343) [ 882.274544][ C2] ? trace_lock_release (./include/trace/events/lock.h:69 (discriminator 21)) [ 882.274549][ C2] ? lock_release (kernel/locking/lockdep.c:118 kernel/locking/lockdep.c:5884) [ 882.274552][ C2] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 882.274556][ C2] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 882.274559][ C2] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 882.274561][ C2] ? run_timer_base (kernel/time/timer.c:2384 kernel/time/timer.c:2376 kernel/time/timer.c:2393) [ 882.274566][ C2] run_timer_base (kernel/time/timer.c:2385 kernel/time/timer.c:2376 kernel/time/timer.c:2393) [ 882.274568][ C2] run_timer_softirq (kernel/time/timer.c:2404) [ 882.274571][ C2] handle_softirqs (kernel/softirq.c:580) [ 882.274576][ C2] __irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680) [ 882.274578][ C2] irq_exit_rcu (kernel/softirq.c:698) [ 882.274581][ C2] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 arch/x86/kernel/apic/apic.c:1050) [ 882.274584][ C2] [ 882.274585][ C2] [ 882.274587][ C2] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 882.274590][ C2] RIP: 0010:pv_native_safe_halt (arch/x86/kernel/paravirt.c:82) [ 882.274594][ C2] Code: 92 d0 00 e9 03 55 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 97 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 All code ======== 0: 92 xchg %eax,%edx 1: d0 00 rolb $1,(%rax) 3: e9 03 55 02 00 jmp 0x2550b 8: 0f 1f 00 nopl (%rax) b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 63 97 22 00 verw 0x229763(%rip) # 0x22978b 28: fb sti 29: f4 hlt 2a:* c3 ret <-- trapping instruction 2b: cc int3 2c: cc int3 2d: cc int3 2e: cc int3 2f: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 36: 00 00 00 39: 66 90 xchg %ax,%ax 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop Code starting with the faulting instruction =========================================== 0: c3 ret 1: cc int3 2: cc int3 3: cc int3 4: cc int3 5: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) c: 00 00 00 f: 66 90 xchg %ax,%ax 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop [ 882.274597][ C2] RSP: 0018:ffffc90000147de8 EFLAGS: 00000246 [ 882.274601][ C2] RAX: 0000000000000002 RBX: 1ffff92000028fc1 RCX: ffffffffa586a5f9 [ 882.274604][ C2] RDX: ffffed100d9e66fb RSI: ffffffffa5c56840 RDI: ffffffffa2d99f6f [ 882.274605][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100d9e66fa [ 882.274607][ C2] R10: ffff88806cf337d3 R11: ffff888001f04ad8 R12: 0000000000000000 [ 882.274609][ C2] R13: ffff888001b62300 R14: dffffc0000000000 R15: 0000000000000000 [ 882.274613][ C2] ? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:146) [ 882.274617][ C2] ? cpuidle_idle_call (kernel/sched/idle.c:186) [ 882.274620][ C2] default_idle (./arch/x86/include/asm/paravirt.h:107 arch/x86/kernel/process.c:743) [ 882.274623][ C2] default_idle_call (./include/linux/cpuidle.h:143 kernel/sched/idle.c:118) [ 882.274625][ C2] cpuidle_idle_call (kernel/sched/idle.c:186) [ 882.274628][ C2] ? __pfx_cpuidle_idle_call (kernel/sched/idle.c:168) [ 882.274631][ C2] ? tsc_verify_tsc_adjust (arch/x86/kernel/tsc_sync.c:60) [ 882.274637][ C2] do_idle (kernel/sched/idle.c:325) [ 882.274641][ C2] cpu_startup_entry (kernel/sched/idle.c:422 (discriminator 1)) [ 882.274643][ C2] start_secondary (arch/x86/kernel/smpboot.c:203 arch/x86/kernel/smpboot.c:283) [ 882.274648][ C2] ? __pfx_start_secondary (arch/x86/kernel/smpboot.c:233) Finger prints: mark_lock_irq:mark_lock:mark_usage:__lock_acquire:_raw_spin_lock __might_resched:down_write:simple_recursive_removal:debugfs_remove:ref_tracker_dir_exit