======================================
| [ 552.316956][ C3] #3: ffff88800f8f3358 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge 
| [ 552.317617][ C3] #4: ffffffff9535b5c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4555) 
| [  552.318090][    C3]
| [  552.318090][    C3] stack backtrace:
[  552.318446][    C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  552.318449][    C3] Call Trace:
[  552.318452][    C3]  <IRQ>
[ 552.318456][ C3] dump_stack_lvl (lib/dump_stack.c:123) 
[ 552.318469][ C3] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848) 
[ 552.318488][ C3] dev_hard_start_xmit (./include/net/net_namespace.h:418 ./include/linux/netdevice.h:2695 net/core/dev.c:2466 net/core/dev.c:3772 net/core/dev.c:3793) 
[ 552.318502][ C3] __dev_queue_xmit (net/core/dev.h:340 net/core/dev.c:4631) 
[ 552.318508][ C3] ? ipv6_dev_get_saddr (net/ipv6/addrconf.c:1809) 
[ 552.318518][ C3] ? __pfx_ipv6_dev_get_saddr (net/ipv6/addrconf.c:1809) 
[ 552.318524][ C3] ? __pfx___dev_queue_xmit (net/core/dev.c:4538) 
[ 552.318527][ C3] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) 
[ 552.318536][ C3] ? ktime_get (kernel/time/timekeeping.c:226 (discriminator 4) kernel/time/timekeeping.c:335 (discriminator 4) kernel/time/timekeeping.c:752 (discriminator 4)) 
[ 552.318550][ C3] ? __pfx___br_multicast_query_handle_vlan (net/bridge/br_multicast.c:909) bridge 
[ 552.318604][ C3] ? br_ip6_multicast_alloc_query (./include/linux/skbuff.h:2776 net/bridge/br_multicast.c:1231) bridge 
[ 552.318645][ C3] br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge 
[ 552.318678][ C3] ? __pfx_br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge 
[ 552.318710][ C3] ? br_multicast_count (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/trace/events/../../../net/bridge/br_private.h:764 net/bridge/br_multicast.c:5052) bridge 
[ 552.318750][ C3] __br_multicast_send_query (net/bridge/br_multicast.c:1813) bridge 
[ 552.318794][ C3] ? __pfx___br_multicast_send_query (net/bridge/br_multicast.c:1789) bridge 
[ 552.318834][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) 
[ 552.318850][ C3] ? br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge 
[ 552.318908][ C3] br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge 
[ 552.318962][ C3] ? __pfx_br_multicast_send_query (net/bridge/br_multicast.c:1852) bridge 
[ 552.318995][ C3] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge 
[ 552.319034][ C3] ? __pfx_br_ip6_multicast_port_query_expired (net/bridge/br_multicast.c:1929) bridge 
[ 552.319068][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) 
[ 552.319075][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) 
[ 552.319080][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 552.319084][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) 
[ 552.319087][ C3] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge 
[ 552.319127][ C3] ? br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge 
[ 552.319175][ C3] br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge 
[ 552.319237][ C3] ? __pfx_br_ip6_multicast_port_query_expired (net/bridge/br_multicast.c:1929) bridge 
[ 552.319278][ C3] call_timer_fn (kernel/time/timer.c:1789) 
[ 552.319282][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) 
[ 552.319285][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) 
[ 552.319290][ C3] ? __pfx_call_timer_fn (kernel/time/timer.c:1766) 
[ 552.319294][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) 
[ 552.319303][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323) 
[ 552.319315][ C3] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414) 
[ 552.319319][ C3] ? __pfx_br_ip6_multicast_port_query_expired (net/bridge/br_multicast.c:1929) bridge 
[ 552.319361][ C3] ? __pfx___run_timers (kernel/time/timer.c:2385) 
[ 552.319364][ C3] ? clockevents_program_event (kernel/time/clockevents.c:326) 
[ 552.319375][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) 
[ 552.319380][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 552.319384][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) 
[ 552.319386][ C3] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) 
[ 552.319397][ C3] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) 
[ 552.319403][ C3] handle_softirqs (kernel/softirq.c:561) 
[ 552.319418][ C3] __irq_exit_rcu (kernel/softirq.c:596 kernel/softirq.c:435 kernel/softirq.c:662) 
[ 552.319422][ C3] irq_exit_rcu (kernel/softirq.c:680) 
[ 552.319424][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049) 
[  552.319431][    C3]  </IRQ>
[  552.319432][    C3]  <TASK>
[ 552.319437][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) 
[ 552.319444][ C3] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) 
[ 552.319451][ C3] Code: 10 e8 b1 3d 87 fd 48 89 ef e8 f9 ad 87 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d b5 0d cf 6b <74> 0e 5b 5d c3 cc cc cc cc e8 2f df ac fd eb dc 0f 1f 44 00 00 5b
All code
========
   0:	10 e8                	adc    %ch,%al
   2:	b1 3d                	mov    $0x3d,%cl
   4:	87 fd                	xchg   %edi,%ebp
   6:	48 89 ef             	mov    %rbp,%rdi
   9:	e8 f9 ad 87 fd       	call   0xfffffffffd87ae07
   e:	81 e3 00 02 00 00    	and    $0x200,%ebx
  14:	75 1d                	jne    0x33
  16:	9c                   	pushf
  17:	58                   	pop    %rax
  18:	f6 c4 02             	test   $0x2,%ah
  1b:	75 29                	jne    0x46
  1d:	48 85 db             	test   %rbx,%rbx
  20:	74 01                	je     0x23
  22:	fb                   	sti
  23:	65 ff 0d b5 0d cf 6b 	decl   %gs:0x6bcf0db5(%rip)        # 0x6bcf0ddf
  2a:*	74 0e                	je     0x3a		<-- trapping instruction
  2c:	5b                   	pop    %rbx
  2d:	5d                   	pop    %rbp
  2e:	c3                   	ret
  2f:	cc                   	int3
  30:	cc                   	int3
  31:	cc                   	int3
  32:	cc                   	int3
  33:	e8 2f df ac fd       	call   0xfffffffffdacdf67
  38:	eb dc                	jmp    0x16
  3a:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  3f:	5b                   	pop    %rbx

Code starting with the faulting instruction
===========================================
   0:	74 0e                	je     0x10
   2:	5b                   	pop    %rbx
   3:	5d                   	pop    %rbp
   4:	c3                   	ret
   5:	cc                   	int3
   6:	cc                   	int3
   7:	cc                   	int3
   8:	cc                   	int3
   9:	e8 2f df ac fd       	call   0xfffffffffdacdf3d
   e:	eb dc                	jmp    0xffffffffffffffec
  10:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  15:	5b                   	pop    %rbx
[  552.319456][    C3] RSP: 0000:ffffc900064f7840 EFLAGS: 00000282
[  552.319462][    C3] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff2e8815a
[  552.319465][    C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9434b761
[  552.319467][    C3] RBP: ffff88800104f440 R08: 0000000000000001 R09: fffffbfff2e85be5
[  552.319470][    C3] R10: ffffffff9742df2f R11: ffff888005f82300 R12: ffff88800104f440
[  552.319473][    C3] R13: ffffea00002de080 R14: ffff88800104de40 R15: ffff88800b782140
[ 552.319498][ C3] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) 
[ 552.319514][ C3] get_partial_node.part.0 (mm/slub.c:2870) 
[ 552.319539][ C3] ? __alloc_object (mm/kmemleak.c:471 mm/kmemleak.c:651) 
[ 552.319546][ C3] ___slab_alloc (mm/slub.c:2831 mm/slub.c:2948 mm/slub.c:3806) 
[ 552.319550][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) 
[ 552.319553][ C3] ? __alloc_object (mm/kmemleak.c:471 mm/kmemleak.c:651) 
[ 552.319558][ C3] ? get_any_partial (./include/linux/seqlock.h:72 ./include/linux/cpuset.h:144 mm/slub.c:2909) 
[ 552.319564][ C3] ? do_user_addr_fault (arch/x86/mm/fault.c:1337) 
[ 552.319579][ C3] ? __alloc_object (mm/kmemleak.c:471 mm/kmemleak.c:651) 
[ 552.319583][ C3] ? kmem_cache_alloc_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4171) 
[ 552.319587][ C3] kmem_cache_alloc_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4171) 
[ 552.319592][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:469 kernel/locking/lockdep.c:5853) 
[ 552.319600][ C3] __alloc_object (mm/kmemleak.c:471 mm/kmemleak.c:651) 
[ 552.319606][ C3] __create_object (mm/kmemleak.c:760) 
[ 552.319613][ C3] kmem_cache_alloc_noprof (./include/linux/kmemleak.h:43 mm/slub.c:4119 mm/slub.c:4164 mm/slub.c:4171) 
[ 552.319626][ C3] __anon_vma_prepare (mm/rmap.c:142 mm/rmap.c:195) 
[ 552.319639][ C3] __vmf_anon_prepare (mm/memory.c:3404) 
[ 552.319653][ C3] wp_page_copy (mm/internal.h:372 mm/memory.c:3443) 
[ 552.319657][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) 
[ 552.319672][ C3] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 21)) 
[ 552.319680][ C3] ? __pfx_wp_page_copy (mm/memory.c:3427) 
[ 552.319689][ C3] ? rcu_read_unlock (./include/linux/rcupdate.h:347 (discriminator 9) ./include/linux/rcupdate.h:880 (discriminator 9)) 
[ 552.319710][ C3] ? do_wp_page (mm/memory.c:3840) 
[ 552.319727][ C3] handle_pte_fault (mm/memory.c:5923) 
[ 552.319741][ C3] ? __pfx_handle_pte_fault (mm/memory.c:5864) 
[ 552.319756][ C3] __handle_mm_fault (mm/memory.c:6050) 
[ 552.319761][ C3] ? __pfx___handle_mm_fault (mm/memory.c:5959) 
[ 552.319781][ C3] ? __pfx_lock_vma_under_rcu (mm/memory.c:6375) 
[ 552.319789][ C3] handle_mm_fault (mm/memory.c:6231) 
[ 552.319794][ C3] ? __pfx_handle_mm_fault (mm/memory.c:6186) 
[ 552.319809][ C3] do_user_addr_fault (arch/x86/mm/fault.c:1337) 
[ 552.319822][ C3] exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) 
[ 552.319828][ C3] asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) 
[  552.319831][    C3] RIP: 0033:0x7fb8bdcd774c
[ 552.319837][ C3] Code: 1e fa 80 3d d5 68 01 00 00 75 2b 55 48 83 3d aa 68 01 00 00 48 89 e5 74 0c 48 8d 3d be 62 01 00 e8 49 ff ff ff e8 64 ff ff ff <c6> 05 ad 68 01 00 01 5d c3 0f 1f 00 c3 0f 1f 80 00 00 00 00 f3 0f
All code
========
   0:	1e                   	(bad)
   1:	fa                   	cli
   2:	80 3d d5 68 01 00 00 	cmpb   $0x0,0x168d5(%rip)        # 0x168de
   9:	75 2b                	jne    0x36
   b:	55                   	push   %rbp
   c:	48 83 3d aa 68 01 00 	cmpq   $0x0,0x168aa(%rip)        # 0x168be
  13:	00 
  14:	48 89 e5             	mov    %rsp,%rbp
  17:	74 0c                	je     0x25
  19:	48 8d 3d be 62 01 00 	lea    0x162be(%rip),%rdi        # 0x162de
  20:	e8 49 ff ff ff       	call   0xffffffffffffff6e
  25:	e8 64 ff ff ff       	call   0xffffffffffffff8e
  2a:*	c6 05 ad 68 01 00 01 	movb   $0x1,0x168ad(%rip)        # 0x168de		<-- trapping instruction
  31:	5d                   	pop    %rbp
  32:	c3                   	ret
  33:	0f 1f 00             	nopl   (%rax)
  36:	c3                   	ret
  37:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  3e:	f3                   	repz
  3f:	0f                   	.byte 0xf

Code starting with the faulting instruction
===========================================
   0:	c6 05 ad 68 01 00 01 	movb   $0x1,0x168ad(%rip)        # 0x168b4
   7:	5d                   	pop    %rbp
   8:	c3                   	ret
   9:	0f 1f 00             	nopl   (%rax)
   c:	c3                   	ret
   d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  14:	f3                   	repz
  15:	0f                   	.byte 0xf
[  552.319841][    C3] RSP: 002b:00007ffc147a38c0 EFLAGS: 00010246
[  552.319845][    C3] RAX: 00007fb8bdcee000 RBX: 00007fb8bddc1000 RCX: 0000000000000000
[  552.319847][    C3] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007fb8bdcee000
[  552.319851][    C3] RBP: 00007ffc147a38c0 R08: 0000000000000000 R09: 0000000000000060
[  552.319853][    C3] R10: 00007fb8bdabefa8 R11: 00007fb8bdb10910 R12: 0000000000000000


Finger prints:
lockdep_rcu_suspicious:dev_hard_start_xmit:__dev_queue_xmit:br_dev_queue_push_xmit:__br_multicast_send_query