======================================
| [ 507.943164][ C1] #3: ffff8880090f3358 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge
| [ 507.943693][ C1] #4: ffffffffb235b5c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4555)
| [ 507.944074][ C1]
| [ 507.944074][ C1] stack backtrace:
[ 507.944573][ C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 507.944575][ C1] Call Trace:
[ 507.944577][ C1]
[ 507.944579][ C1] dump_stack_lvl (lib/dump_stack.c:123)
[ 507.944588][ C1] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848)
[ 507.944599][ C1] dev_hard_start_xmit (./include/net/net_namespace.h:418 ./include/linux/netdevice.h:2695 net/core/dev.c:2466 net/core/dev.c:3772 net/core/dev.c:3793)
[ 507.944611][ C1] __dev_queue_xmit (net/core/dev.h:340 net/core/dev.c:4631)
[ 507.944621][ C1] ? __build_skb_around (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:381 net/core/skbuff.c:439)
[ 507.944631][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4538)
[ 507.944634][ C1] ? __pfx___alloc_skb (net/core/skbuff.c:642)
[ 507.944644][ C1] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[ 507.944650][ C1] ? __pfx___br_multicast_query_handle_vlan (net/bridge/br_multicast.c:909) bridge
[ 507.944702][ C1] br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge
[ 507.944735][ C1] ? __pfx_br_dev_queue_push_xmit (net/bridge/br_forward.c:34) bridge
[ 507.944768][ C1] ? br_multicast_count (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/trace/events/../../../net/bridge/br_private.h:764 net/bridge/br_multicast.c:5052) bridge
[ 507.944807][ C1] __br_multicast_send_query (net/bridge/br_multicast.c:1813) bridge
[ 507.944852][ C1] ? __pfx___br_multicast_send_query (net/bridge/br_multicast.c:1789) bridge
[ 507.944892][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5228)
[ 507.944903][ C1] ? br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge
[ 507.944937][ C1] br_multicast_send_query (net/bridge/br_multicast.c:1891) bridge
[ 507.944975][ C1] ? __pfx_br_multicast_send_query (net/bridge/br_multicast.c:1852) bridge
[ 507.945009][ C1] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge
[ 507.945046][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 507.945083][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816)
[ 507.945089][ C1] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116)
[ 507.945094][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114)
[ 507.945098][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824)
[ 507.945101][ C1] ? br_multicast_port_query_expired (./include/trace/events/../../../net/bridge/br_private.h:1293 ./include/trace/events/../../../net/bridge/br_private.h:1302 net/bridge/br_multicast.c:1906) bridge
[ 507.945141][ C1] ? br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge
[ 507.945174][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 507.945207][ C1] br_multicast_port_query_expired (net/bridge/br_multicast.c:1917) bridge
[ 507.945257][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 507.945291][ C1] call_timer_fn (kernel/time/timer.c:1789)
[ 507.945295][ C1] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779)
[ 507.945298][ C1] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779)
[ 507.945302][ C1] ? __pfx_call_timer_fn (kernel/time/timer.c:1766)
[ 507.945306][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230)
[ 507.945315][ C1] ? mark_held_locks (kernel/locking/lockdep.c:4323)
[ 507.945327][ C1] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414)
[ 507.945331][ C1] ? __pfx_br_ip4_multicast_port_query_expired (net/bridge/br_multicast.c:1920) bridge
[ 507.945372][ C1] ? __pfx___run_timers (kernel/time/timer.c:2385)
[ 507.945381][ C1] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116)
[ 507.945386][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114)
[ 507.945390][ C1] ? lock_acquire (kernel/locking/lockdep.c:5824)
[ 507.945392][ C1] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445)
[ 507.945403][ C1] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445)
[ 507.945408][ C1] handle_softirqs (kernel/softirq.c:561)
[ 507.945418][ C1] ? br_multicast_set_querier (net/bridge/br_multicast.c:4673) bridge
[ 507.945455][ C1] do_softirq (kernel/softirq.c:462 kernel/softirq.c:449)
[ 507.945459][ C1]
[ 507.945460][ C1]
[ 507.945461][ C1] __local_bh_enable_ip (kernel/softirq.c:389)
[ 507.945466][ C1] br_multicast_set_querier (net/bridge/br_multicast.c:4673) bridge
[ 507.945503][ C1] br_changelink (net/bridge/br_netlink.c:1431) bridge
[ 507.945538][ C1] ? __pfx_br_changelink (net/bridge/br_netlink.c:1279) bridge
[ 507.945572][ C1] ? __mutex_lock (./arch/x86/include/asm/preempt.h:94 kernel/locking/mutex.c:595 kernel/locking/mutex.c:730)
[ 507.945581][ C1] ? rtnl_newlink (net/core/rtnetlink.c:343 net/core/rtnetlink.c:4063)
[ 507.945588][ C1] ? __pfx___mutex_lock (kernel/locking/mutex.c:729)
[ 507.945591][ C1] ? __pfx_validate_nla (lib/nlattr.c:396)
[ 507.945602][ C1] __rtnl_newlink (net/core/rtnetlink.c:3728 net/core/rtnetlink.c:3927)
[ 507.945617][ C1] rtnl_newlink (net/core/rtnetlink.c:351 net/core/rtnetlink.c:4065)
[ 507.945630][ C1] ? __pfx_rtnl_newlink (net/core/rtnetlink.c:3955)
[ 507.945634][ C1] ? find_held_lock (kernel/locking/lockdep.c:5341)
[ 507.945644][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5503)
[ 507.945658][ C1] ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/core/rtnetlink.c:6952)
[ 507.945664][ C1] ? __pfx_rtnl_newlink (net/core/rtnetlink.c:3955)
[ 507.945669][ C1] rtnetlink_rcv_msg (net/core/rtnetlink.c:6954)
[ 507.945677][ C1] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6857)
[ 507.945682][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230)
[ 507.945685][ C1] ? mark_lock (kernel/locking/lockdep.c:4729 (discriminator 3))
[ 507.945696][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5228)
[ 507.945704][ C1] netlink_rcv_skb (net/netlink/af_netlink.c:2534)
[ 507.945709][ C1] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6857)
[ 507.945717][ C1] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2511)
[ 507.945740][ C1] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340)
[ 507.945745][ C1] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333)
[ 507.945752][ C1] netlink_unicast (net/netlink/af_netlink.c:1313 net/netlink/af_netlink.c:1339)
[ 507.945761][ C1] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1324)
[ 507.945766][ C1] ? find_held_lock (kernel/locking/lockdep.c:5341)
[ 507.945776][ C1] netlink_sendmsg (net/netlink/af_netlink.c:1883)
[ 507.945786][ C1] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1802)
[ 507.945803][ C1] ____sys_sendmsg (net/socket.c:709 net/socket.c:724 net/socket.c:2563)
[ 507.945815][ C1] ? __pfx_____sys_sendmsg (net/socket.c:2509)
[ 507.945819][ C1] ? __pfx_copy_msghdr_from_user (net/socket.c:2489)
[ 507.945838][ C1] ___sys_sendmsg (net/socket.c:2619)
[ 507.945840][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230)
[ 507.945846][ C1] ? __pfx____sys_sendmsg (net/socket.c:2606)
[ 507.945856][ C1] ? hlock_class (kernel/locking/lockdep.c:225)
[ 507.945868][ C1] ? do_user_addr_fault (./include/linux/rcupdate.h:337 ./include/linux/rcupdate.h:849 ./include/linux/mm.h:740 arch/x86/mm/fault.c:1339)
[ 507.945873][ C1] ? do_user_addr_fault (./include/linux/rcupdate.h:337 ./include/linux/rcupdate.h:849 ./include/linux/mm.h:740 arch/x86/mm/fault.c:1339)
[ 507.945885][ C1] ? find_held_lock (kernel/locking/lockdep.c:5341)
[ 507.945892][ C1] ? __lock_release (kernel/locking/lockdep.c:5527)
[ 507.945901][ C1] __sys_sendmsg (net/socket.c:2649)
[ 507.945905][ C1] ? __pfx___sys_sendmsg (net/socket.c:2634)
[ 507.945919][ C1] ? do_user_addr_fault (./include/linux/rcupdate.h:882 ./include/linux/mm.h:742 arch/x86/mm/fault.c:1339)
[ 507.945932][ C1] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)
[ 507.945939][ C1] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)
[ 507.945946][ C1] RIP: 0033:0x7f9ec8fc79a7
[ 507.945951][ C1] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
0: 0a 00 or (%rax),%al
2: f7 d8 neg %eax
4: 64 89 02 mov %eax,%fs:(%rdx)
7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax
e: eb b9 jmp 0xffffffffffffffc9
10: 0f 1f 00 nopl (%rax)
13: f3 0f 1e fa endbr64
17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax
1e: 00
1f: 85 c0 test %eax,%eax
21: 75 10 jne 0x33
23: b8 2e 00 00 00 mov $0x2e,%eax
28: 0f 05 syscall
2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction
30: 77 51 ja 0x83
32: c3 ret
33: 48 83 ec 28 sub $0x28,%rsp
37: 89 54 24 1c mov %edx,0x1c(%rsp)
3b: 48 89 74 24 10 mov %rsi,0x10(%rsp)
Code starting with the faulting instruction
===========================================
0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax
6: 77 51 ja 0x59
8: c3 ret
9: 48 83 ec 28 sub $0x28,%rsp
d: 89 54 24 1c mov %edx,0x1c(%rsp)
11: 48 89 74 24 10 mov %rsi,0x10(%rsp)
[ 507.945954][ C1] RSP: 002b:00007ffef076c818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 507.945959][ C1] RAX: ffffffffffffffda RBX: 00007ffef076cf40 RCX: 00007f9ec8fc79a7
[ 507.945961][ C1] RDX: 0000000000000000 RSI: 00007ffef076c880 RDI: 0000000000000005
[ 507.945963][ C1] RBP: 0000000000000002 R08: 000000000000003c R09: 0000000000000000
[ 507.945965][ C1] R10: 00007f9ec9016ac0 R11: 0000000000000246 R12: 00007ffef076cf60
Finger prints:
lockdep_rcu_suspicious:dev_hard_start_xmit:__dev_queue_xmit:br_dev_queue_push_xmit:__br_multicast_send_query