====================================== | [ 33.071552][ C1] #4: ffff88800c5a3358 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge | [ 33.072028][ C1] #5: ffffffffba75b5c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4555) | [ 33.072385][ C1] | [ 33.072385][ C1] stack backtrace: [ 33.072637][ C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 33.072639][ C1] Workqueue: events_unbound linkwatch_event [ 33.072644][ C1] Call Trace: [ 33.072646][ C1] [ 33.072650][ C1] dump_stack_lvl (lib/dump_stack.c:123) [ 33.072657][ C1] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848) [ 33.072668][ C1] dev_hard_start_xmit (./include/net/net_namespace.h:418 ./include/linux/netdevice.h:2695 net/core/dev.c:2466 net/core/dev.c:3772 net/core/dev.c:3793) [ 33.072679][ C1] __dev_queue_xmit (net/core/dev.h:340 net/core/dev.c:4631) [ 33.072690][ C1] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:381 net/core/skbuff.c:439) [ 33.072700][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4538) [ 33.072703][ C1] ? __pfx___alloc_skb (net/core/skbuff.c:642) [ 33.072709][ C1] ? stack_trace_save (kernel/stacktrace.c:114) [ 33.072714][ C1] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) [ 33.072722][ C1] ? __pfx___br_multicast_query_handle_vlan (net/bridge/br_multicast.c:909) bridge [ 33.072774][ C1] br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge [ 33.072806][ C1] ? __pfx_br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge [ 33.072839][ C1] ? br_multicast_count (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/trace/events/../../../net/bridge/br_private.h:764 net/bridge/br_multicast.c:5052) bridge [ 33.072879][ C1] __br_multicast_send_query (net/bridge/br_multicast.c:1813) bridge [ 33.072924][ C1] ? __pfx___br_multicast_send_query (net/bridge/br_multicast.c:1789) bridge [ 33.072965][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 33.072977][ C1] ? br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge [ 33.073011][ C1] br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge [ 33.073050][ C1] ? __pfx_br_multicast_send_query (net/bridge/br_multicast.c:1852) bridge [ 33.073084][ C1] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge [ 33.073121][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge [ 33.073159][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 33.073165][ C1] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 33.073170][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 33.073174][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 33.073177][ C1] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge [ 33.073219][ C1] ? br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge [ 33.073252][ C1] br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge [ 33.073290][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge [ 33.073324][ C1] call_timer_fn (kernel/time/timer.c:1789) [ 33.073328][ C1] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 33.073331][ C1] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 33.073335][ C1] ? __pfx_call_timer_fn (kernel/time/timer.c:1766) [ 33.073339][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 33.073348][ C1] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 33.073361][ C1] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414) [ 33.073365][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge [ 33.073407][ C1] ? __pfx___run_timers (kernel/time/timer.c:2385) [ 33.073410][ C1] ? clockevents_program_event (kernel/time/clockevents.c:326) [ 33.073420][ C1] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 33.073425][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 33.073428][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 33.073431][ C1] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 33.073442][ C1] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 33.073448][ C1] handle_softirqs (kernel/softirq.c:561) [ 33.073462][ C1] __irq_exit_rcu (kernel/softirq.c:596 kernel/softirq.c:435 kernel/softirq.c:662) [ 33.073466][ C1] irq_exit_rcu (kernel/softirq.c:680) [ 33.073468][ C1] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049) [ 33.073473][ C1] [ 33.073474][ C1] [ 33.073477][ C1] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 33.073481][ C1] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 33.073485][ C1] Code: 10 e8 b1 3d 87 fd 48 89 ef e8 f9 ad 87 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d b5 0d 8f 46 <74> 0e 5b 5d c3 cc cc cc cc e8 2f df ac fd eb dc 0f 1f 44 00 00 5b All code ======== 0: 10 e8 adc %ch,%al 2: b1 3d mov $0x3d,%cl 4: 87 fd xchg %edi,%ebp 6: 48 89 ef mov %rbp,%rdi 9: e8 f9 ad 87 fd call 0xfffffffffd87ae07 e: 81 e3 00 02 00 00 and $0x200,%ebx 14: 75 1d jne 0x33 16: 9c pushf 17: 58 pop %rax 18: f6 c4 02 test $0x2,%ah 1b: 75 29 jne 0x46 1d: 48 85 db test %rbx,%rbx 20: 74 01 je 0x23 22: fb sti 23: 65 ff 0d b5 0d 8f 46 decl %gs:0x468f0db5(%rip) # 0x468f0ddf 2a:* 74 0e je 0x3a <-- trapping instruction 2c: 5b pop %rbx 2d: 5d pop %rbp 2e: c3 ret 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: e8 2f df ac fd call 0xfffffffffdacdf67 38: eb dc jmp 0x16 3a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 3f: 5b pop %rbx Code starting with the faulting instruction =========================================== 0: 74 0e je 0x10 2: 5b pop %rbx 3: 5d pop %rbp 4: c3 ret 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: e8 2f df ac fd call 0xfffffffffdacdf3d e: eb dc jmp 0xffffffffffffffec 10: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 15: 5b pop %rbx [ 33.073488][ C1] RSP: 0018:ffffc900007b7760 EFLAGS: 00000282 [ 33.073491][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff79066b1 [ 33.073493][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffb974b761 [ 33.073495][ C1] RBP: ffff888001041080 R08: 0000000000000001 R09: fffffbfff7905be1 [ 33.073496][ C1] R10: ffffffffbc82df0f R11: ffff8880050b45c0 R12: ffff888001041080 [ 33.073498][ C1] R13: ffffea000023c200 R14: ffff8880010433c0 R15: ffff888008f0c000 [ 33.073511][ C1] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 33.073520][ C1] get_partial_node.part.0 (mm/slub.c:2870) [ 33.073535][ C1] ___slab_alloc (mm/slub.c:2831 mm/slub.c:2948 mm/slub.c:3806) [ 33.073539][ C1] ? __lock_release (kernel/locking/lockdep.c:5527) [ 33.073542][ C1] ? __alloc_skb (net/core/skbuff.c:669) [ 33.073546][ C1] ? get_any_partial (./include/linux/seqlock.h:72 ./include/linux/cpuset.h:144 mm/slub.c:2909) [ 33.073566][ C1] ? __kmalloc_node_track_caller_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4293 mm/slub.c:4313) [ 33.073571][ C1] __kmalloc_node_track_caller_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4293 mm/slub.c:4313) [ 33.073574][ C1] ? __create_object (mm/kmemleak.c:766) [ 33.073581][ C1] ? __alloc_skb (net/core/skbuff.c:669) [ 33.073588][ C1] kmalloc_reserve (net/core/skbuff.c:603) [ 33.073597][ C1] __alloc_skb (net/core/skbuff.c:669) [ 33.073601][ C1] ? __pfx___alloc_skb (net/core/skbuff.c:642) [ 33.073608][ C1] ? rtnl_prop_list_size (net/core/rtnetlink.c:1233) [ 33.073616][ C1] ? if_nlmsg_size (net/core/rtnetlink.c:1326) [ 33.073625][ C1] rtmsg_ifinfo_build_skb (./include/linux/skbuff.h:1339 ./include/net/netlink.h:1019 net/core/rtnetlink.c:4399) [ 33.073634][ C1] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4443) [ 33.073644][ C1] rtmsg_ifinfo (net/core/rtnetlink.c:4452 net/core/rtnetlink.c:4450) [ 33.073653][ C1] netdev_state_change (net/core/dev.c:1540) [ 33.073657][ C1] ? __pfx_netdev_state_change (net/core/dev.c:1530) [ 33.073673][ C1] linkwatch_do_dev (net/core/link_watch.c:186) [ 33.073677][ C1] __linkwatch_run_queue (./include/linux/spinlock.h:376 net/core/link_watch.c:245) [ 33.073684][ C1] ? __pfx___linkwatch_run_queue (net/core/link_watch.c:195) [ 33.073691][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 33.073701][ C1] linkwatch_event (net/core/link_watch.c:287) [ 33.073704][ C1] process_one_work (kernel/workqueue.c:3238) [ 33.073718][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 33.073723][ C1] ? __pfx_process_one_work (kernel/workqueue.c:3140) [ 33.073737][ C1] ? assign_work (kernel/workqueue.c:1200) [ 33.073747][ C1] worker_thread (kernel/workqueue.c:3313 kernel/workqueue.c:3400) [ 33.073752][ C1] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4349 kernel/locking/lockdep.c:4408) [ 33.073764][ C1] ? __pfx_worker_thread (kernel/workqueue.c:3346) [ 33.073770][ C1] kthread (kernel/kthread.c:464) [ 33.073775][ C1] ? __pfx_kthread (kernel/kthread.c:413) [ 33.073784][ C1] ? __pfx_kthread (kernel/kthread.c:413) [ 33.073790][ C1] ret_from_fork (arch/x86/kernel/process.c:148) [ 33.073794][ C1] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: lockdep_rcu_suspicious:dev_hard_start_xmit:__dev_queue_xmit:br_dev_queue_push_xmit:__br_multicast_send_query