====================================== | [ 39.025517][ C3] #0: ffffffffbd142e30 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce (./include/linux/srcu.h:164 ./include/linux/srcu.h:256 mm/kasan/quarantine.c:259) | [ 39.026003][ C3] #1: ffffc90000290d60 ((&n->timer)){+.-.}-{0:0}, at: call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) | [ 39.026647][ C3] | [ 39.026647][ C3] stack backtrace: [ 39.026959][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 39.026962][ C3] Call Trace: [ 39.026964][ C3] [ 39.026966][ C3] dump_stack_lvl (lib/dump_stack.c:123) [ 39.026977][ C3] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848) [ 39.026988][ C3] __icmp_send (./include/net/net_namespace.h:404 ./include/linux/netdevice.h:2669 net/ipv4/icmp.c:616) [ 39.026996][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 39.026999][ C3] ? is_bpf_text_address (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 kernel/bpf/core.c:774) [ 39.027008][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 39.027012][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 39.027017][ C3] ? __pfx___icmp_send (net/ipv4/icmp.c:596) [ 39.027025][ C3] ? is_bpf_text_address (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 kernel/bpf/core.c:774) [ 39.027034][ C3] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 39.027040][ C3] ? validate_chain (kernel/locking/lockdep.c:3799 kernel/locking/lockdep.c:3819 kernel/locking/lockdep.c:3874) [ 39.027052][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3862) [ 39.027056][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 39.027059][ C3] ? mark_lock (kernel/locking/lockdep.c:4729 (discriminator 3)) [ 39.027069][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 39.027078][ C3] ipv4_send_dest_unreach (net/ipv4/route.c:1241) [ 39.027084][ C3] ? neigh_invalidate (net/core/neighbour.c:1008) [ 39.027090][ C3] ? __pfx_ipv4_send_dest_unreach (net/ipv4/route.c:1215) [ 39.027103][ C3] ipv4_link_failure (./include/linux/skbuff.h:1152 ./include/net/route.h:88 net/ipv4/route.c:1250) [ 39.027108][ C3] arp_error_report (./include/net/dst.h:429 net/ipv4/arp.c:296) [ 39.027115][ C3] neigh_invalidate (net/core/neighbour.c:1008) [ 39.027124][ C3] neigh_timer_handler (net/core/neighbour.c:1109 (discriminator 2)) [ 39.027134][ C3] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1032) [ 39.027137][ C3] call_timer_fn (kernel/time/timer.c:1789) [ 39.027142][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 39.027145][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 39.027149][ C3] ? __pfx_call_timer_fn (kernel/time/timer.c:1766) [ 39.027152][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 39.027159][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 39.027170][ C3] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414) [ 39.027174][ C3] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1032) [ 39.027184][ C3] ? __pfx___run_timers (kernel/time/timer.c:2385) [ 39.027188][ C3] ? clockevents_program_event (kernel/time/clockevents.c:326) [ 39.027201][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 39.027208][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 39.027213][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 39.027217][ C3] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 39.027230][ C3] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 39.027235][ C3] handle_softirqs (kernel/softirq.c:561) [ 39.027249][ C3] __irq_exit_rcu (kernel/softirq.c:596 kernel/softirq.c:435 kernel/softirq.c:662) [ 39.027252][ C3] irq_exit_rcu (kernel/softirq.c:680) [ 39.027255][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049) [ 39.027261][ C3] [ 39.027262][ C3] [ 39.027265][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 39.027271][ C3] RIP: 0010:kasan_check_range (./include/linux/kasan.h:65 mm/kasan/generic.c:129 mm/kasan/generic.c:161 mm/kasan/generic.c:180 mm/kasan/generic.c:189) [ 39.027277][ C3] Code: ff ff 48 39 c7 76 dd 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 <48> 89 e8 49 8d 59 01 48 89 da 48 29 ea 48 83 fa 10 0f 8e c0 00 00 All code ======== 0: ff (bad) 1: ff 48 39 decl 0x39(%rax) 4: c7 (bad) 5: 76 dd jbe 0xffffffffffffffe4 7: 4c 8d 54 37 ff lea -0x1(%rdi,%rsi,1),%r10 c: 48 89 fd mov %rdi,%rbp f: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 16: fc ff df 19: 4d 89 d1 mov %r10,%r9 1c: 48 c1 ed 03 shr $0x3,%rbp 20: 49 c1 e9 03 shr $0x3,%r9 24: 48 01 c5 add %rax,%rbp 27: 49 01 c1 add %rax,%r9 2a:* 48 89 e8 mov %rbp,%rax <-- trapping instruction 2d: 49 8d 59 01 lea 0x1(%r9),%rbx 31: 48 89 da mov %rbx,%rdx 34: 48 29 ea sub %rbp,%rdx 37: 48 83 fa 10 cmp $0x10,%rdx 3b: 0f .byte 0xf 3c: 8e c0 mov %eax,%es ... Code starting with the faulting instruction =========================================== 0: 48 89 e8 mov %rbp,%rax 3: 49 8d 59 01 lea 0x1(%r9),%rbx 7: 48 89 da mov %rbx,%rdx a: 48 29 ea sub %rbp,%rdx d: 48 83 fa 10 cmp $0x10,%rdx 11: 0f .byte 0xf 12: 8e c0 mov %eax,%es ... [ 39.027280][ C3] RSP: 0018:ffffc900005a7318 EFLAGS: 00000282 [ 39.027284][ C3] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: ffffffffb97acffc [ 39.027286][ C3] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffbd991190 [ 39.027289][ C3] RBP: fffffbfff7b32232 R08: 0000000000000000 R09: fffffbfff7b32232 [ 39.027291][ C3] R10: ffffffffbd991197 R11: ffffc900005a7479 R12: 0000000000000000 [ 39.027293][ C3] R13: 0000000000000000 R14: 0000000000000002 R15: ffffffffb9984249 [ 39.027294][ C3] ? __is_insn_slot_addr (./include/linux/rcupdate.h:337 ./include/linux/rcupdate.h:849 kernel/kprobes.c:299) [ 39.027307][ C3] ? trace_lock_acquire (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/linux/cpumask.h:570 ./include/linux/cpumask.h:1116 ./include/trace/events/lock.h:24) [ 39.027318][ C3] trace_lock_acquire (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/linux/cpumask.h:570 ./include/linux/cpumask.h:1116 ./include/trace/events/lock.h:24) [ 39.027325][ C3] lock_acquire (kernel/locking/lockdep.c:5824) [ 39.027328][ C3] ? __is_insn_slot_addr (./include/linux/rcupdate.h:337 ./include/linux/rcupdate.h:849 kernel/kprobes.c:299) [ 39.027336][ C3] __is_insn_slot_addr (./include/linux/rcupdate.h:850 kernel/kprobes.c:299) [ 39.027341][ C3] ? __is_insn_slot_addr (./include/linux/rcupdate.h:337 ./include/linux/rcupdate.h:849 kernel/kprobes.c:299) [ 39.027348][ C3] kernel_text_address (kernel/extable.c:123 kernel/extable.c:94) [ 39.027356][ C3] __kernel_text_address (kernel/extable.c:79) [ 39.027360][ C3] unwind_get_return_address (arch/x86/kernel/unwind_orc.c:369 arch/x86/kernel/unwind_orc.c:364) [ 39.027365][ C3] ? __pfx_stack_trace_consume_entry (kernel/stacktrace.c:83) [ 39.027370][ C3] arch_stack_walk (arch/x86/kernel/stacktrace.c:26) [ 39.027388][ C3] stack_trace_save (kernel/stacktrace.c:123) [ 39.027392][ C3] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) [ 39.027398][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 39.027405][ C3] set_track_prepare (mm/slub.c:935) [ 39.027412][ C3] ? kasan_quarantine_reduce (./include/linux/srcu.h:357 mm/kasan/quarantine.c:287) [ 39.027416][ C3] ? __kasan_slab_alloc (mm/kasan/common.c:329) [ 39.027422][ C3] ? kmem_cache_alloc_node_noprof (mm/slub.c:4116 mm/slub.c:4164 mm/slub.c:4216) [ 39.027425][ C3] ? __alloc_skb (net/core/skbuff.c:668) [ 39.027432][ C3] ? alloc_skb_with_frags (./include/linux/skbuff.h:1331 net/core/skbuff.c:6612) [ 39.027435][ C3] ? sock_alloc_send_pskb (net/core/sock.c:2899) [ 39.027440][ C3] ? raw_send_hdrinc (./include/net/sock.h:1804 net/ipv4/raw.c:353) [ 39.027445][ C3] ? raw_sendmsg (net/ipv4/raw.c:644) [ 39.027448][ C3] ? __sys_sendto (net/socket.c:713 net/socket.c:728 net/socket.c:2182) [ 39.027454][ C3] ? __x64_sys_sendto (net/socket.c:2185) [ 39.027457][ C3] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 39.027464][ C3] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 39.027470][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 39.027473][ C3] free_to_partial_list (mm/slub.c:4354) [ 39.027476][ C3] ? qlist_free_all (mm/kasan/quarantine.c:163 mm/kasan/quarantine.c:179) [ 39.027486][ C3] qlist_free_all (mm/kasan/quarantine.c:174) [ 39.027493][ C3] kasan_quarantine_reduce (./include/linux/srcu.h:357 mm/kasan/quarantine.c:287) [ 39.027499][ C3] __kasan_slab_alloc (mm/kasan/common.c:329) [ 39.027505][ C3] kmem_cache_alloc_node_noprof (mm/slub.c:4116 mm/slub.c:4164 mm/slub.c:4216) [ 39.027516][ C3] __alloc_skb (net/core/skbuff.c:668) [ 39.027520][ C3] ? __pfx___alloc_skb (net/core/skbuff.c:651) [ 39.027528][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 39.027538][ C3] alloc_skb_with_frags (./include/linux/skbuff.h:1331 net/core/skbuff.c:6612) [ 39.027544][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 39.027553][ C3] sock_alloc_send_pskb (net/core/sock.c:2899) [ 39.027556][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 39.027561][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 39.027571][ C3] ? __pfx_sock_alloc_send_pskb (net/core/sock.c:2870) [ 39.027577][ C3] ? rt_is_expired (net/ipv4/route.c:400) [ 39.027581][ C3] ? __mkroute_output (./arch/x86/include/asm/atomic.h:79 ./include/linux/atomic/atomic-arch-fallback.h:2401 ./include/linux/atomic/atomic-instrumented.h:1476 ./include/linux/rcuref.h:67 ./include/net/dst.h:302 net/ipv4/route.c:2626) [ 39.027587][ C3] ? ip_route_output_key_hash (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/ipv4/route.c:2683) [ 39.027596][ C3] raw_send_hdrinc (./include/net/sock.h:1804 net/ipv4/raw.c:353) [ 39.027608][ C3] ? __pfx_raw_send_hdrinc (net/ipv4/raw.c:330) [ 39.027621][ C3] raw_sendmsg (net/ipv4/raw.c:644) [ 39.027625][ C3] ? mark_lock_irq (kernel/locking/lockdep.c:2673 kernel/locking/lockdep.c:4153 kernel/locking/lockdep.c:4292) [ 39.027636][ C3] ? __pfx_raw_sendmsg (net/ipv4/raw.c:483) [ 39.027640][ C3] ? synchronize_rcu_tasks_trace (./include/linux/lockdep.h:249 kernel/rcu/tasks.h:2040) [ 39.027659][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 39.027662][ C3] ? __might_fault (mm/memory.c:6840 mm/memory.c:6833) [ 39.027668][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 39.027671][ C3] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 21)) [ 39.027673][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 39.027680][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 39.027682][ C3] ? __might_fault (mm/memory.c:6840 mm/memory.c:6833) [ 39.027688][ C3] ? __might_fault (mm/memory.c:6840 mm/memory.c:6833) [ 39.027698][ C3] __sys_sendto (net/socket.c:713 net/socket.c:728 net/socket.c:2182) [ 39.027704][ C3] ? __pfx___sys_sendto (net/socket.c:2149) [ 39.027706][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 39.027710][ C3] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 21)) [ 39.027722][ C3] ? rseq_update_cpu_node_id (kernel/rseq.c:188 (discriminator 10)) [ 39.027729][ C3] ? __rseq_handle_notify_resume (kernel/rseq.c:420) [ 39.027735][ C3] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:403) [ 39.027742][ C3] ? __pfx_task_work_run (kernel/task_work.c:195) [ 39.027753][ C3] __x64_sys_sendto (net/socket.c:2185) [ 39.027757][ C3] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4349 kernel/locking/lockdep.c:4408) [ 39.027762][ C3] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 39.027768][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 39.027771][ C3] RIP: 0033:0x7ff45b926a4a [ 39.027777][ C3] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 All code ======== 0: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 4: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax b: eb b8 jmp 0xffffffffffffffc5 d: 0f 1f 00 nopl (%rax) 10: f3 0f 1e fa endbr64 14: 41 89 ca mov %ecx,%r10d 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 15 jne 0x38 23: b8 2c 00 00 00 mov $0x2c,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 7e ja 0xb0 32: c3 ret 33: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 38: 41 54 push %r12 3a: 48 83 ec 30 sub $0x30,%rsp 3e: 44 rex.R 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 7e ja 0x86 8: c3 ret 9: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) e: 41 54 push %r12 10: 48 83 ec 30 sub $0x30,%rsp 14: 44 rex.R 15: 89 .byte 0x89 [ 39.027779][ C3] RSP: 002b:00007ffd5ff3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 39.027782][ C3] RAX: ffffffffffffffda RBX: 00000000155ba9d0 RCX: 00007ff45b926a4a [ 39.027784][ C3] RDX: 000000000000005c RSI: 00000000155ba5c0 RDI: 0000000000000005 [ 39.027785][ C3] RBP: 00000000155ba9d0 R08: 00007ffd5ff3e030 R09: 0000000000000010 [ 39.027787][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005c [ 39.027788][ C3] R13: 0000000000000032 R14: 0000000000000000 R15: 0000000000000000 | [ 101.231884][ C3] #1: ffffffffbd142060 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire (mm/page_alloc.c:3870 mm/page_alloc.c:3861) | [ 101.232477][ C3] #2: ffffc90000290ae8 ((&n->timer)){+.-.}-{0:0}, at: call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) | [ 101.232967][ C3] | [ 101.232967][ C3] stack backtrace: [ 101.233308][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 101.233310][ C3] Call Trace: [ 101.233313][ C3] [ 101.233315][ C3] dump_stack_lvl (lib/dump_stack.c:123) [ 101.233326][ C3] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848) [ 101.233337][ C3] icmp6_send (./include/net/net_namespace.h:404 ./include/linux/netdevice.h:2669 net/ipv6/icmp.c:476) [ 101.233365][ C3] ? __pfx_icmp6_send (net/ipv6/icmp.c:452) [ 101.233379][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3862) [ 101.233386][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 101.233391][ C3] ? mark_lock (kernel/locking/lockdep.c:4729 (discriminator 3)) [ 101.233401][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 101.233407][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 101.233414][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 101.233417][ C3] ? neigh_invalidate (net/core/neighbour.c:1008) [ 101.233422][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 101.233426][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:469 kernel/locking/lockdep.c:5853) [ 101.233437][ C3] ip6_link_failure (./include/linux/skbuff.h:1152 net/ipv6/route.c:2801) [ 101.233446][ C3] ndisc_error_report (./include/net/dst.h:429 net/ipv6/ndisc.c:731) [ 101.233457][ C3] neigh_invalidate (net/core/neighbour.c:1008) [ 101.233472][ C3] neigh_timer_handler (net/core/neighbour.c:1109 (discriminator 2)) [ 101.233492][ C3] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1032) [ 101.233498][ C3] call_timer_fn (kernel/time/timer.c:1789) [ 101.233506][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 101.233510][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 101.233516][ C3] ? __pfx_call_timer_fn (kernel/time/timer.c:1766) [ 101.233520][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 101.233528][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 101.233541][ C3] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414) [ 101.233546][ C3] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1032) [ 101.233564][ C3] ? __pfx___run_timers (kernel/time/timer.c:2385) [ 101.233568][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 101.233576][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 101.233583][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 101.233588][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 101.233591][ C3] ? timer_expire_remote (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2177) [ 101.233606][ C3] timer_expire_remote (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2177) [ 101.233612][ C3] tmigr_handle_remote_cpu (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 kernel/time/timer_migration.c:961) [ 101.233620][ C3] ? __pfx_tmigr_handle_remote_cpu (kernel/time/timer_migration.c:905) [ 101.233623][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 101.233629][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 101.233631][ C3] ? mark_lock (kernel/locking/lockdep.c:4729 (discriminator 3)) [ 101.233638][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 101.233649][ C3] tmigr_handle_remote_up (kernel/time/timer_migration.c:1038) [ 101.233655][ C3] ? __pfx_tmigr_handle_remote_up (kernel/time/timer_migration.c:1005) [ 101.233660][ C3] __walk_groups.isra.0 (kernel/time/timer_migration.c:533) [ 101.233671][ C3] tmigr_handle_remote (kernel/time/timer_migration.c:1096) [ 101.233676][ C3] ? __pfx_tmigr_handle_remote (kernel/time/timer_migration.c:1059) [ 101.233680][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 101.233696][ C3] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4341 kernel/locking/lockdep.c:4408) [ 101.233706][ C3] handle_softirqs (kernel/softirq.c:561) [ 101.233720][ C3] __irq_exit_rcu (kernel/softirq.c:596 kernel/softirq.c:435 kernel/softirq.c:662) [ 101.233723][ C3] irq_exit_rcu (kernel/softirq.c:680) [ 101.233726][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049) [ 101.233732][ C3] [ 101.233733][ C3] [ 101.233736][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 101.233742][ C3] RIP: 0010:lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 101.233747][ C3] Code: ff 48 83 c4 28 65 0f c1 05 24 cb 86 46 83 f8 01 0f 85 b5 01 00 00 9c 58 f6 c4 02 0f 85 be 01 00 00 48 85 ed 0f 85 9b 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 All code ======== 0: ff 48 83 decl -0x7d(%rax) 3: c4 (bad) 4: 28 65 0f sub %ah,0xf(%rbp) 7: c1 05 24 cb 86 46 83 roll $0x83,0x4686cb24(%rip) # 0x4686cb32 e: f8 clc f: 01 0f add %ecx,(%rdi) 11: 85 b5 01 00 00 9c test %esi,-0x63ffffff(%rbp) 17: 58 pop %rax 18: f6 c4 02 test $0x2,%ah 1b: 0f 85 be 01 00 00 jne 0x1df 21: 48 85 ed test %rbp,%rbp 24: 0f 85 9b 01 00 00 jne 0x1c5 2a:* 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction 31: fc ff df 34: 48 01 c3 add %rax,%rbx 37: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 3e: 48 rex.W 3f: c7 .byte 0xc7 Code starting with the faulting instruction =========================================== 0: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 7: fc ff df a: 48 01 c3 add %rax,%rbx d: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 14: 48 rex.W 15: c7 .byte 0xc7 [ 101.233751][ C3] RSP: 0018:ffffc90000fc74c8 EFLAGS: 00000206 [ 101.233756][ C3] RAX: 0000000000000046 RBX: 1ffff920001f8e9c RCX: 0000000000000001 [ 101.233759][ C3] RDX: 1ffff11000a0ea00 RSI: 00000000ffffffff RDI: ffff888005075052 [ 101.233762][ C3] RBP: 0000000000000200 R08: 0000000000000001 R09: fffffbfff7e043e2 [ 101.233764][ C3] R10: ffffffffbf021f17 R11: ffff8880050745c0 R12: ffffffffbd142060 [ 101.233767][ C3] R13: 0000000000092cc0 R14: 00000000000000e8 R15: ffffffffb9ee511f [ 101.233770][ C3] ? __alloc_object (mm/kmemleak.c:471 mm/kmemleak.c:651) [ 101.233801][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 101.233807][ C3] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 21)) [ 101.233809][ C3] ? rawv6_sendmsg (net/ipv6/raw.c:915) [ 101.233813][ C3] ? __sys_sendto (net/socket.c:713 net/socket.c:728 net/socket.c:2182) [ 101.233823][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 101.233825][ C3] ? fs_reclaim_acquire (mm/page_alloc.c:3870 mm/page_alloc.c:3861) [ 101.233831][ C3] ? fs_reclaim_acquire (mm/page_alloc.c:3870 mm/page_alloc.c:3861) [ 101.233836][ C3] ? fs_reclaim_acquire (mm/page_alloc.c:3870 mm/page_alloc.c:3861) [ 101.233841][ C3] fs_reclaim_acquire (mm/page_alloc.c:3871 mm/page_alloc.c:3861) [ 101.233844][ C3] ? fs_reclaim_acquire (mm/page_alloc.c:3870 mm/page_alloc.c:3861) [ 101.233849][ C3] kmem_cache_alloc_noprof (./include/linux/sched/mm.h:319 mm/slub.c:4066 mm/slub.c:4144 mm/slub.c:4171) [ 101.233861][ C3] __alloc_object (mm/kmemleak.c:471 mm/kmemleak.c:651) [ 101.233866][ C3] __create_object (mm/kmemleak.c:760) [ 101.233873][ C3] kmem_cache_alloc_node_noprof (./include/linux/kmemleak.h:43 mm/slub.c:4119 mm/slub.c:4164 mm/slub.c:4216) [ 101.233877][ C3] ? __create_object (mm/kmemleak.c:766) [ 101.233888][ C3] kmalloc_reserve (net/core/skbuff.c:590 (discriminator 2)) [ 101.233897][ C3] __alloc_skb (net/core/skbuff.c:678) [ 101.233902][ C3] ? __pfx___alloc_skb (net/core/skbuff.c:651) [ 101.233906][ C3] ? ipv6_dev_get_saddr (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/ipv6/addrconf.c:1900) [ 101.233914][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 101.233932][ C3] alloc_skb_with_frags (./include/linux/skbuff.h:1331 net/core/skbuff.c:6612) [ 101.233945][ C3] ? ipv6_dev_get_saddr (net/ipv6/addrconf.c:1809) [ 101.233959][ C3] sock_alloc_send_pskb (net/core/sock.c:2899) [ 101.233965][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3862) [ 101.233979][ C3] ? __pfx_sock_alloc_send_pskb (net/core/sock.c:2870) [ 101.233989][ C3] ? __pfx_xfrm_lookup_with_ifid (net/xfrm/xfrm_policy.c:3174) [ 101.233998][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 101.234006][ C3] rawv6_send_hdrinc (./include/net/sock.h:1804 net/ipv6/raw.c:614) [ 101.234022][ C3] ? __pfx_rawv6_send_hdrinc (net/ipv6/raw.c:596) [ 101.234028][ C3] ? ip6_dst_hoplimit.part.0.isra.0 (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/ipv6/output_core.c:117) [ 101.234041][ C3] rawv6_sendmsg (net/ipv6/raw.c:915) [ 101.234049][ C3] ? trace_raw_output_lock (./include/trace/events/lock.h:50 (discriminator 2)) [ 101.234060][ C3] ? __pfx_rawv6_sendmsg (net/ipv6/raw.c:741) [ 101.234069][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 101.234081][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3862) [ 101.234090][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 101.234096][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 101.234099][ C3] ? __might_fault (mm/memory.c:6840 mm/memory.c:6833) [ 101.234114][ C3] ? __might_fault (mm/memory.c:6840 mm/memory.c:6833) [ 101.234120][ C3] ? __might_fault (mm/memory.c:6840 mm/memory.c:6833) [ 101.234133][ C3] ? __sys_sendto (net/socket.c:713 net/socket.c:728 net/socket.c:2182) [ 101.234140][ C3] __sys_sendto (net/socket.c:713 net/socket.c:728 net/socket.c:2182) [ 101.234146][ C3] ? __pfx___sys_sendto (net/socket.c:2149) [ 101.234149][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 101.234153][ C3] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 21)) [ 101.234165][ C3] ? rseq_update_cpu_node_id (kernel/rseq.c:188 (discriminator 10)) [ 101.234185][ C3] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:403) [ 101.234208][ C3] __x64_sys_sendto (net/socket.c:2185) [ 101.234218][ C3] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4349 kernel/locking/lockdep.c:4408) [ 101.234226][ C3] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 101.234241][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 101.234248][ C3] RIP: 0033:0x7f96bd6f3a4a [ 101.234255][ C3] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 All code ======== 0: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 4: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax b: eb b8 jmp 0xffffffffffffffc5 d: 0f 1f 00 nopl (%rax) 10: f3 0f 1e fa endbr64 14: 41 89 ca mov %ecx,%r10d 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 15 jne 0x38 23: b8 2c 00 00 00 mov $0x2c,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 7e ja 0xb0 32: c3 ret 33: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 38: 41 54 push %r12 3a: 48 83 ec 30 sub $0x30,%rsp 3e: 44 rex.R 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 7e ja 0x86 8: c3 ret 9: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) e: 41 54 push %r12 10: 48 83 ec 30 sub $0x30,%rsp 14: 44 rex.R 15: 89 .byte 0x89 [ 101.234258][ C3] RSP: 002b:00007fff3d1606b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 101.234261][ C3] RAX: ffffffffffffffda RBX: 0000000037039ec0 RCX: 00007f96bd6f3a4a [ 101.234263][ C3] RDX: 0000000000000070 RSI: 000000003703a160 RDI: 0000000000000005 [ 101.234265][ C3] RBP: 0000000037039ec0 R08: 00007fff3d1606c0 R09: 000000000000001c [ 101.234267][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000070 Finger prints: lockdep_rcu_suspicious:__icmp_send:ipv4_send_dest_unreach:ipv4_link_failure:arp_error_report lockdep_rcu_suspicious:icmp6_send:ip6_link_failure:ndisc_error_report:neigh_invalidate