====================================== | [ 600.464541][ C3] #2: ffff888011373358 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge | [ 600.465028][ C3] #3: ffffffff8635b5c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4555) | [ 600.465390][ C3] | [ 600.465390][ C3] stack backtrace: [ 600.465642][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 600.465643][ C3] Call Trace: [ 600.465645][ C3] [ 600.465647][ C3] dump_stack_lvl (lib/dump_stack.c:123) [ 600.465656][ C3] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848) [ 600.465668][ C3] dev_hard_start_xmit (./include/net/net_namespace.h:418 ./include/linux/netdevice.h:2695 net/core/dev.c:2466 net/core/dev.c:3772 net/core/dev.c:3793) [ 600.465679][ C3] __dev_queue_xmit (net/core/dev.h:340 net/core/dev.c:4631) [ 600.465684][ C3] ? ipv6_dev_get_saddr (net/ipv6/addrconf.c:1809) [ 600.465694][ C3] ? __pfx_ipv6_dev_get_saddr (net/ipv6/addrconf.c:1809) [ 600.465700][ C3] ? __pfx___dev_queue_xmit (net/core/dev.c:4538) [ 600.465714][ C3] ? __pfx___br_multicast_query_handle_vlan (net/bridge/br_multicast.c:909) bridge [ 600.465759][ C3] ? br_ip6_multicast_alloc_query (./include/linux/skbuff.h:2776 net/bridge/br_multicast.c:1231) bridge [ 600.465799][ C3] br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge [ 600.465831][ C3] ? __pfx_br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge [ 600.465863][ C3] ? br_multicast_count (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/trace/events/../../../net/bridge/br_private.h:764 net/bridge/br_multicast.c:5052) bridge [ 600.465903][ C3] __br_multicast_send_query (net/bridge/br_multicast.c:1813) bridge [ 600.465947][ C3] ? __pfx___br_multicast_send_query (net/bridge/br_multicast.c:1789) bridge [ 600.465987][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 600.465998][ C3] ? br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge [ 600.466032][ C3] br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge [ 600.466070][ C3] ? __pfx_br_multicast_send_query (net/bridge/br_multicast.c:1852) bridge [ 600.466103][ C3] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge [ 600.466141][ C3] ? __pfx_br_ip6_multicast_port_query_expired (net/bridge/br_multicast.c:1929) bridge [ 600.466175][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 600.466182][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 600.466186][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 600.466190][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 600.466193][ C3] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge [ 600.466233][ C3] ? br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge [ 600.466266][ C3] br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge [ 600.466302][ C3] ? __pfx_br_ip6_multicast_port_query_expired (net/bridge/br_multicast.c:1929) bridge [ 600.466336][ C3] call_timer_fn (kernel/time/timer.c:1789) [ 600.466339][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 600.466342][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 600.466346][ C3] ? __pfx_call_timer_fn (kernel/time/timer.c:1766) [ 600.466350][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 600.466359][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 600.466371][ C3] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414) [ 600.466375][ C3] ? __pfx_br_ip6_multicast_port_query_expired (net/bridge/br_multicast.c:1929) bridge [ 600.466417][ C3] ? __pfx___run_timers (kernel/time/timer.c:2385) [ 600.466420][ C3] ? clockevents_program_event (kernel/time/clockevents.c:326) [ 600.466431][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 600.466435][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 600.466439][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 600.466442][ C3] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 600.466453][ C3] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 600.466458][ C3] handle_softirqs (kernel/softirq.c:561) [ 600.466472][ C3] __irq_exit_rcu (kernel/softirq.c:596 kernel/softirq.c:435 kernel/softirq.c:662) [ 600.466476][ C3] irq_exit_rcu (kernel/softirq.c:680) [ 600.466479][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049) [ 600.466484][ C3] [ 600.466485][ C3] [ 600.466487][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 600.466492][ C3] RIP: 0010:page_cache_ra_unbounded (mm/readahead.c:271) [ 600.466496][ C3] Code: 24 10 0f 84 1f 01 00 00 48 8b 04 24 48 8b 7c 24 20 4c 8d 34 18 4c 89 f6 e8 2f 30 22 02 48 85 c0 74 08 a8 01 0f 84 41 02 00 00 <44> 89 e6 48 89 ef e8 47 f2 ff ff 49 89 c5 48 85 c0 0f 84 e6 00 00 All code ======== 0: 24 10 and $0x10,%al 2: 0f 84 1f 01 00 00 je 0x127 8: 48 8b 04 24 mov (%rsp),%rax c: 48 8b 7c 24 20 mov 0x20(%rsp),%rdi 11: 4c 8d 34 18 lea (%rax,%rbx,1),%r14 15: 4c 89 f6 mov %r14,%rsi 18: e8 2f 30 22 02 call 0x222304c 1d: 48 85 c0 test %rax,%rax 20: 74 08 je 0x2a 22: a8 01 test $0x1,%al 24: 0f 84 41 02 00 00 je 0x26b 2a:* 44 89 e6 mov %r12d,%esi <-- trapping instruction 2d: 48 89 ef mov %rbp,%rdi 30: e8 47 f2 ff ff call 0xfffffffffffff27c 35: 49 89 c5 mov %rax,%r13 38: 48 85 c0 test %rax,%rax 3b: 0f .byte 0xf 3c: 84 e6 test %ah,%dh ... Code starting with the faulting instruction =========================================== 0: 44 89 e6 mov %r12d,%esi 3: 48 89 ef mov %rbp,%rdi 6: e8 47 f2 ff ff call 0xfffffffffffff252 b: 49 89 c5 mov %rax,%r13 e: 48 85 c0 test %rax,%rax 11: 0f .byte 0xf 12: 84 e6 test %ah,%dh ... [ 600.466499][ C3] RSP: 0000:ffffc90009e97920 EFLAGS: 00000246 [ 600.466502][ C3] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 1ffff11001f589ff [ 600.466504][ C3] RDX: 0000000000000000 RSI: ffffffff8635b620 RDI: ffff88800fac49c4 [ 600.466505][ C3] RBP: ffffc90009e979e0 R08: ffffffff85318cf3 R09: fffffbfff0db2c32 [ 600.466507][ C3] R10: ffffffff86d96197 R11: ffff88800fac45c0 R12: 0000000000112cca [ 600.466509][ C3] R13: ffffea00004736c0 R14: 0000000000000047 R15: ffff888001499f48 [ 600.466517][ C3] ? xa_load (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 lib/xarray.c:1488) [ 600.466543][ C3] do_sync_mmap_readahead (mm/filemap.c:3260) [ 600.466551][ C3] ? __pfx_do_sync_mmap_readahead (mm/filemap.c:3192) [ 600.466564][ C3] ? __filemap_get_folio (mm/filemap.c:1905) [ 600.466573][ C3] filemap_fault (mm/filemap.c:3446) [ 600.466579][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 600.466583][ C3] ? do_fault_around (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 mm/memory.c:5371) [ 600.466591][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 600.466597][ C3] ? __pfx_filemap_fault (mm/filemap.c:3405) [ 600.466608][ C3] ? do_fault_around (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 mm/memory.c:5371) [ 600.466612][ C3] ? __pfx_filemap_map_pages (mm/filemap.c:3766) [ 600.466621][ C3] __do_fault (mm/memory.c:4990) [ 600.466628][ C3] do_pte_missing (mm/memory.c:5410 mm/memory.c:5544 mm/memory.c:4060) [ 600.466631][ C3] ? handle_pte_fault (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/linux/pgtable.h:136 mm/memory.c:5901) [ 600.466639][ C3] handle_pte_fault (mm/memory.c:5907) [ 600.466646][ C3] ? __pfx_handle_pte_fault (mm/memory.c:5864) [ 600.466660][ C3] __handle_mm_fault (mm/memory.c:6050) [ 600.466665][ C3] ? __pfx___handle_mm_fault (mm/memory.c:5959) [ 600.466685][ C3] ? __pfx_lock_vma_under_rcu (mm/memory.c:6375) [ 600.466693][ C3] handle_mm_fault (mm/memory.c:6231) [ 600.466698][ C3] ? __pfx_handle_mm_fault (mm/memory.c:6186) [ 600.466712][ C3] do_user_addr_fault (arch/x86/mm/fault.c:1337) [ 600.466727][ C3] exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) [ 600.466733][ C3] asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 600.466735][ C3] RIP: 0033:0x7f02219aa178 [ 600.466742][ C3] Code: Unable to access opcode bytes at 0x7f02219aa14e. Code starting with the faulting instruction =========================================== [ 600.466743][ C3] RSP: 002b:00007ffcde5510a8 EFLAGS: 00010206 [ 600.466746][ C3] RAX: 00007f02219aa178 RBX: 00007f0221a37000 RCX: 0000000000000000 [ 600.466747][ C3] RDX: 00007f02219c3c18 RSI: 0000000000000000 RDI: 00007f02219c67e0 [ 600.466749][ C3] RBP: 00007ffcde551170 R08: 0000000000000000 R09: 0000000000000060 [ 600.466750][ C3] R10: 00007f0221734fa8 R11: 00007f0221786910 R12: 0000000000000000 Finger prints: lockdep_rcu_suspicious:dev_hard_start_xmit:__dev_queue_xmit:br_dev_queue_push_xmit:__br_multicast_send_query