====================================== | [ 13.775382][ C1] #4: ffff8880061e3358 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge | [ 13.775867][ C1] #5: ffffffffb035b5c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4555) | [ 13.776218][ C1] | [ 13.776218][ C1] stack backtrace: [ 13.776464][ C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 13.776466][ C1] Workqueue: events_unbound linkwatch_event [ 13.776471][ C1] Call Trace: [ 13.776473][ C1] [ 13.776476][ C1] dump_stack_lvl (lib/dump_stack.c:123) [ 13.776483][ C1] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848) [ 13.776493][ C1] dev_hard_start_xmit (./include/net/net_namespace.h:418 ./include/linux/netdevice.h:2695 net/core/dev.c:2466 net/core/dev.c:3772 net/core/dev.c:3793) [ 13.776504][ C1] __dev_queue_xmit (net/core/dev.h:340 net/core/dev.c:4631) [ 13.776515][ C1] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:381 net/core/skbuff.c:439) [ 13.776525][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4538) [ 13.776527][ C1] ? __pfx___alloc_skb (net/core/skbuff.c:642) [ 13.776533][ C1] ? stack_trace_save (kernel/stacktrace.c:114) [ 13.776538][ C1] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) [ 13.776546][ C1] ? __pfx___br_multicast_query_handle_vlan (net/bridge/br_multicast.c:909) bridge [ 13.776599][ C1] br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge [ 13.776632][ C1] ? __pfx_br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge [ 13.776665][ C1] ? br_multicast_count (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/trace/events/../../../net/bridge/br_private.h:764 net/bridge/br_multicast.c:5052) bridge [ 13.776705][ C1] __br_multicast_send_query (net/bridge/br_multicast.c:1813) bridge [ 13.776750][ C1] ? __pfx___br_multicast_send_query (net/bridge/br_multicast.c:1789) bridge [ 13.776791][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 13.776802][ C1] ? br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge [ 13.776841][ C1] br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge [ 13.776879][ C1] ? __pfx_br_multicast_send_query (net/bridge/br_multicast.c:1852) bridge [ 13.776912][ C1] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge [ 13.776949][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge [ 13.776984][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 13.776990][ C1] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 13.776995][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 13.776998][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 13.777001][ C1] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge [ 13.777041][ C1] ? br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge [ 13.777074][ C1] br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge [ 13.777113][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge [ 13.777147][ C1] call_timer_fn (kernel/time/timer.c:1789) [ 13.777151][ C1] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 13.777153][ C1] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 13.777158][ C1] ? __pfx_call_timer_fn (kernel/time/timer.c:1766) [ 13.777161][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 13.777170][ C1] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 13.777182][ C1] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414) [ 13.777186][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge [ 13.777228][ C1] ? __pfx___run_timers (kernel/time/timer.c:2385) [ 13.777231][ C1] ? clockevents_program_event (kernel/time/clockevents.c:326) [ 13.777241][ C1] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 13.777246][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 13.777249][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 13.777252][ C1] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 13.777263][ C1] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 13.777268][ C1] handle_softirqs (kernel/softirq.c:561) [ 13.777276][ C1] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 13.777284][ C1] __irq_exit_rcu (kernel/softirq.c:596 kernel/softirq.c:435 kernel/softirq.c:662) [ 13.777288][ C1] irq_exit_rcu (kernel/softirq.c:680) [ 13.777290][ C1] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049) [ 13.777295][ C1] [ 13.777296][ C1] [ 13.777299][ C1] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 13.777303][ C1] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 13.777307][ C1] Code: 10 e8 b1 3d 87 fd 48 89 ef e8 f9 ad 87 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d b5 0d cf 50 <74> 0e 5b 5d c3 cc cc cc cc e8 2f df ac fd eb dc 0f 1f 44 00 00 5b All code ======== 0: 10 e8 adc %ch,%al 2: b1 3d mov $0x3d,%cl 4: 87 fd xchg %edi,%ebp 6: 48 89 ef mov %rbp,%rdi 9: e8 f9 ad 87 fd call 0xfffffffffd87ae07 e: 81 e3 00 02 00 00 and $0x200,%ebx 14: 75 1d jne 0x33 16: 9c pushf 17: 58 pop %rax 18: f6 c4 02 test $0x2,%ah 1b: 75 29 jne 0x46 1d: 48 85 db test %rbx,%rbx 20: 74 01 je 0x23 22: fb sti 23: 65 ff 0d b5 0d cf 50 decl %gs:0x50cf0db5(%rip) # 0x50cf0ddf 2a:* 74 0e je 0x3a <-- trapping instruction 2c: 5b pop %rbx 2d: 5d pop %rbp 2e: c3 ret 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: e8 2f df ac fd call 0xfffffffffdacdf67 38: eb dc jmp 0x16 3a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 3f: 5b pop %rbx Code starting with the faulting instruction =========================================== 0: 74 0e je 0x10 2: 5b pop %rbx 3: 5d pop %rbp 4: c3 ret 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: e8 2f df ac fd call 0xfffffffffdacdf3d e: eb dc jmp 0xffffffffffffffec 10: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 15: 5b pop %rbx [ 13.777309][ C1] RSP: 0018:ffffc900002af7a0 EFLAGS: 00000282 [ 13.777312][ C1] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff64866b1 [ 13.777314][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffaf34b761 [ 13.777316][ C1] RBP: ffff888002190180 R08: 0000000000000001 R09: fffffbfff6485be1 [ 13.777317][ C1] R10: ffffffffb242df0f R11: ffff888001d82300 R12: ffff888002190180 [ 13.777319][ C1] R13: ffffea00002ea580 R14: ffff8880019759c0 R15: ffff88800ba96200 [ 13.777332][ C1] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 13.777340][ C1] get_partial_node.part.0 (mm/slub.c:2870) [ 13.777354][ C1] ___slab_alloc (mm/slub.c:2831 mm/slub.c:2948 mm/slub.c:3806) [ 13.777358][ C1] ? __lock_release (kernel/locking/lockdep.c:5527) [ 13.777361][ C1] ? __alloc_skb (net/core/skbuff.c:659) [ 13.777365][ C1] ? get_any_partial (./include/linux/seqlock.h:72 ./include/linux/cpuset.h:144 mm/slub.c:2909) [ 13.777385][ C1] ? kmem_cache_alloc_node_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4216) [ 13.777389][ C1] kmem_cache_alloc_node_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4216) [ 13.777392][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 13.777398][ C1] ? __alloc_skb (net/core/skbuff.c:659) [ 13.777405][ C1] __alloc_skb (net/core/skbuff.c:659) [ 13.777409][ C1] ? __pfx___alloc_skb (net/core/skbuff.c:642) [ 13.777416][ C1] ? rtnl_prop_list_size (net/core/rtnetlink.c:1233) [ 13.777424][ C1] ? if_nlmsg_size (net/core/rtnetlink.c:1326) [ 13.777433][ C1] rtmsg_ifinfo_build_skb (./include/linux/skbuff.h:1339 ./include/net/netlink.h:1019 net/core/rtnetlink.c:4399) [ 13.777441][ C1] rtmsg_ifinfo_event.part.0 (net/core/rtnetlink.c:4443) [ 13.777451][ C1] rtmsg_ifinfo (net/core/rtnetlink.c:4452 net/core/rtnetlink.c:4450) [ 13.777460][ C1] netdev_state_change (net/core/dev.c:1540) [ 13.777464][ C1] ? __pfx_netdev_state_change (net/core/dev.c:1530) [ 13.777479][ C1] linkwatch_do_dev (net/core/link_watch.c:186) [ 13.777483][ C1] __linkwatch_run_queue (./include/linux/spinlock.h:376 net/core/link_watch.c:245) [ 13.777491][ C1] ? __pfx___linkwatch_run_queue (net/core/link_watch.c:195) [ 13.777497][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 13.777507][ C1] linkwatch_event (net/core/link_watch.c:287) [ 13.777510][ C1] process_one_work (kernel/workqueue.c:3238) [ 13.777523][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 13.777529][ C1] ? __pfx_process_one_work (kernel/workqueue.c:3140) [ 13.777542][ C1] ? assign_work (kernel/workqueue.c:1200) [ 13.777552][ C1] worker_thread (kernel/workqueue.c:3313 kernel/workqueue.c:3400) [ 13.777566][ C1] ? __pfx_worker_thread (kernel/workqueue.c:3346) [ 13.777572][ C1] kthread (kernel/kthread.c:464) [ 13.777578][ C1] ? __pfx_kthread (kernel/kthread.c:413) [ 13.777586][ C1] ? __pfx_kthread (kernel/kthread.c:413) [ 13.777592][ C1] ret_from_fork (arch/x86/kernel/process.c:148) [ 13.777597][ C1] ? __pfx_kthread (kernel/kthread.c:413) Finger prints: lockdep_rcu_suspicious:dev_hard_start_xmit:__dev_queue_xmit:br_dev_queue_push_xmit:__br_multicast_send_query