======================================
| [ 514.478074][ C3] #3: ffff888008f8b358 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge
| [ 514.478607][ C3] #4: ffffffff9655b5c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4555)
| [ 514.478973][ C3]
| [ 514.478973][ C3] stack backtrace:
[ 514.479243][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 514.479245][ C3] Call Trace:
[ 514.479247][ C3]
[ 514.479250][ C3] dump_stack_lvl (lib/dump_stack.c:123)
[ 514.479258][ C3] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848)
[ 514.479269][ C3] dev_hard_start_xmit (./include/net/net_namespace.h:418 ./include/linux/netdevice.h:2695 net/core/dev.c:2466 net/core/dev.c:3772 net/core/dev.c:3793)
[ 514.479280][ C3] __dev_queue_xmit (net/core/dev.h:340 net/core/dev.c:4631)
[ 514.479290][ C3] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:381 net/core/skbuff.c:439)
[ 514.479301][ C3] ? __pfx___dev_queue_xmit (net/core/dev.c:4538)
[ 514.479304][ C3] ? __pfx___alloc_skb (net/core/skbuff.c:642)
[ 514.479308][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341)
[ 514.479314][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3862)
[ 514.479319][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230)
[ 514.479324][ C3] ? __pfx___br_multicast_query_handle_vlan (net/bridge/br_multicast.c:909) bridge
[ 514.479375][ C3] br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge
[ 514.479408][ C3] ? __pfx_br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge
[ 514.479441][ C3] ? br_multicast_count (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/trace/events/../../../net/bridge/br_private.h:764 net/bridge/br_multicast.c:5052) bridge
[ 514.479481][ C3] __br_multicast_send_query (net/bridge/br_multicast.c:1813) bridge
[ 514.479526][ C3] ? __pfx___br_multicast_send_query (net/bridge/br_multicast.c:1789) bridge
[ 514.479568][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228)
[ 514.479578][ C3] ? br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge
[ 514.479612][ C3] br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge
[ 514.479651][ C3] ? __pfx_br_multicast_send_query (net/bridge/br_multicast.c:1852) bridge
[ 514.479685][ C3] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge
[ 514.479722][ C3] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 514.479756][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816)
[ 514.479762][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116)
[ 514.479767][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114)
[ 514.479771][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824)
[ 514.479773][ C3] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge
[ 514.479813][ C3] ? br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge
[ 514.479846][ C3] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 514.479879][ C3] br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge
[ 514.479915][ C3] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 514.479949][ C3] call_timer_fn (kernel/time/timer.c:1789)
[ 514.479953][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779)
[ 514.479956][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779)
[ 514.479960][ C3] ? __pfx_call_timer_fn (kernel/time/timer.c:1766)
[ 514.479964][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230)
[ 514.479973][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323)
[ 514.479985][ C3] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414)
[ 514.479989][ C3] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 514.480030][ C3] ? __pfx___run_timers (kernel/time/timer.c:2385)
[ 514.480040][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116)
[ 514.480044][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114)
[ 514.480048][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824)
[ 514.480051][ C3] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445)
[ 514.480061][ C3] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445)
[ 514.480067][ C3] handle_softirqs (kernel/softirq.c:561)
[ 514.480076][ C3] ? br_multicast_set_querier (net/bridge/br_multicast.c:4673) bridge
[ 514.480113][ C3] do_softirq (kernel/softirq.c:462 kernel/softirq.c:449)
[ 514.480116][ C3]
[ 514.480117][ C3]
[ 514.480119][ C3] __local_bh_enable_ip (kernel/softirq.c:389)
[ 514.480124][ C3] br_multicast_set_querier (net/bridge/br_multicast.c:4673) bridge
[ 514.480162][ C3] br_changelink (net/bridge/br_netlink.c:1431) bridge
[ 514.480197][ C3] ? __pfx_br_changelink (net/bridge/br_netlink.c:1279) bridge
[ 514.480232][ C3] ? __mutex_lock (./arch/x86/include/asm/preempt.h:94 kernel/locking/mutex.c:595 kernel/locking/mutex.c:730)
[ 514.480241][ C3] ? rtnl_newlink (net/core/rtnetlink.c:343 net/core/rtnetlink.c:4063)
[ 514.480248][ C3] ? __pfx___mutex_lock (kernel/locking/mutex.c:729)
[ 514.480250][ C3] ? __pfx_validate_nla (lib/nlattr.c:396)
[ 514.480261][ C3] __rtnl_newlink (net/core/rtnetlink.c:3728 net/core/rtnetlink.c:3927)
[ 514.480276][ C3] rtnl_newlink (net/core/rtnetlink.c:351 net/core/rtnetlink.c:4065)
[ 514.480289][ C3] ? __pfx_rtnl_newlink (net/core/rtnetlink.c:3955)
[ 514.480292][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341)
[ 514.480302][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503)
[ 514.480316][ C3] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/core/rtnetlink.c:6952)
[ 514.480322][ C3] ? __pfx_rtnl_newlink (net/core/rtnetlink.c:3955)
[ 514.480327][ C3] rtnetlink_rcv_msg (net/core/rtnetlink.c:6954)
[ 514.480335][ C3] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6857)
[ 514.480340][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230)
[ 514.480343][ C3] ? mark_lock (kernel/locking/lockdep.c:4729 (discriminator 3))
[ 514.480353][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228)
[ 514.480361][ C3] netlink_rcv_skb (net/netlink/af_netlink.c:2534)
[ 514.480365][ C3] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6857)
[ 514.480373][ C3] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2511)
[ 514.480395][ C3] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340)
[ 514.480401][ C3] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333)
[ 514.480408][ C3] netlink_unicast (net/netlink/af_netlink.c:1313 net/netlink/af_netlink.c:1339)
[ 514.480417][ C3] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1324)
[ 514.480421][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341)
[ 514.480432][ C3] netlink_sendmsg (net/netlink/af_netlink.c:1883)
[ 514.480441][ C3] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1802)
[ 514.480458][ C3] ____sys_sendmsg (net/socket.c:709 net/socket.c:724 net/socket.c:2563)
[ 514.480467][ C3] ? __pfx_____sys_sendmsg (net/socket.c:2509)
[ 514.480470][ C3] ? __pfx_copy_msghdr_from_user (net/socket.c:2489)
[ 514.480489][ C3] ___sys_sendmsg (net/socket.c:2619)
[ 514.480496][ C3] ? __pfx____sys_sendmsg (net/socket.c:2606)
[ 514.480505][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228)
[ 514.480523][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341)
[ 514.480530][ C3] ? __lock_release (kernel/locking/lockdep.c:5527)
[ 514.480532][ C3] ? __might_fault (mm/memory.c:6858 mm/memory.c:6851)
[ 514.480538][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503)
[ 514.480542][ C3] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 21))
[ 514.480544][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824)
[ 514.480556][ C3] __sys_sendmsg (net/socket.c:2649)
[ 514.480560][ C3] ? __pfx___sys_sendmsg (net/socket.c:2634)
[ 514.480586][ C3] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)
[ 514.480594][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)
[ 514.480598][ C3] RIP: 0033:0x7f23e3b1d9a7
[ 514.480602][ C3] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
0: 0a 00 or (%rax),%al
2: f7 d8 neg %eax
4: 64 89 02 mov %eax,%fs:(%rdx)
7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax
e: eb b9 jmp 0xffffffffffffffc9
10: 0f 1f 00 nopl (%rax)
13: f3 0f 1e fa endbr64
17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax
1e: 00
1f: 85 c0 test %eax,%eax
21: 75 10 jne 0x33
23: b8 2e 00 00 00 mov $0x2e,%eax
28: 0f 05 syscall
2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction
30: 77 51 ja 0x83
32: c3 ret
33: 48 83 ec 28 sub $0x28,%rsp
37: 89 54 24 1c mov %edx,0x1c(%rsp)
3b: 48 89 74 24 10 mov %rsi,0x10(%rsp)
Code starting with the faulting instruction
===========================================
0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax
6: 77 51 ja 0x59
8: c3 ret
9: 48 83 ec 28 sub $0x28,%rsp
d: 89 54 24 1c mov %edx,0x1c(%rsp)
11: 48 89 74 24 10 mov %rsi,0x10(%rsp)
[ 514.480606][ C3] RSP: 002b:00007ffd52674c98 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 514.480609][ C3] RAX: ffffffffffffffda RBX: 00007ffd526753c0 RCX: 00007f23e3b1d9a7
[ 514.480612][ C3] RDX: 0000000000000000 RSI: 00007ffd52674d00 RDI: 0000000000000005
[ 514.480614][ C3] RBP: 0000000000000002 R08: 000000000000003c R09: 0000000000000000
[ 514.480616][ C3] R10: 00007f23e3b6cac0 R11: 0000000000000246 R12: 00007ffd526753e0
Finger prints:
lockdep_rcu_suspicious:dev_hard_start_xmit:__dev_queue_xmit:br_dev_queue_push_xmit:__br_multicast_send_query