====================================== | [ 929.016767][ C3] #2: ffff888005de71d8 (&fsvq->lock){+.+.}-{3:3}, at: virtio_fs_enqueue_req (fs/fuse/virtio_fs.c:1434) | [ 929.017140][ C3] #3: ffffc90000290d60 ((&n->timer)){+.-.}-{0:0}, at: call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) | [ 929.017511][ C3] | [ 929.017511][ C3] stack backtrace: [ 929.017765][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 929.017768][ C3] Call Trace: [ 929.017770][ C3] [ 929.017773][ C3] dump_stack_lvl (lib/dump_stack.c:123) [ 929.017781][ C3] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6848) [ 929.017791][ C3] icmp6_send (./include/net/net_namespace.h:404 ./include/linux/netdevice.h:2669 net/ipv6/icmp.c:476) [ 929.017812][ C3] ? __pfx_icmp6_send (net/ipv6/icmp.c:452) [ 929.017821][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3862) [ 929.017826][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 929.017829][ C3] ? mark_lock (kernel/locking/lockdep.c:4729 (discriminator 3)) [ 929.017839][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5228) [ 929.017846][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 929.017852][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 929.017855][ C3] ? neigh_invalidate (net/core/neighbour.c:1008) [ 929.017861][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 929.017865][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:469 kernel/locking/lockdep.c:5853) [ 929.017876][ C3] ip6_link_failure (./include/linux/skbuff.h:1152 net/ipv6/route.c:2801) [ 929.017885][ C3] ndisc_error_report (./include/net/dst.h:429 net/ipv6/ndisc.c:731) [ 929.017892][ C3] neigh_invalidate (net/core/neighbour.c:1008) [ 929.017901][ C3] neigh_timer_handler (net/core/neighbour.c:1109 (discriminator 2)) [ 929.017911][ C3] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1032) [ 929.017915][ C3] call_timer_fn (kernel/time/timer.c:1789) [ 929.017917][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 929.017920][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1779) [ 929.017924][ C3] ? __pfx_call_timer_fn (kernel/time/timer.c:1766) [ 929.017928][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:230) [ 929.017935][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4323) [ 929.017946][ C3] __run_timers (kernel/time/timer.c:1841 kernel/time/timer.c:2414) [ 929.017950][ C3] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1032) [ 929.017960][ C3] ? __pfx___run_timers (kernel/time/timer.c:2385) [ 929.017963][ C3] ? clockevents_program_event (kernel/time/clockevents.c:326) [ 929.017973][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 929.017981][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 929.017985][ C3] ? lock_acquire (kernel/locking/lockdep.c:5824) [ 929.017988][ C3] ? run_timer_softirq (kernel/time/timer.c:2426 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 929.017997][ C3] run_timer_softirq (kernel/time/timer.c:2427 kernel/time/timer.c:2418 kernel/time/timer.c:2435 kernel/time/timer.c:2445) [ 929.018002][ C3] handle_softirqs (kernel/softirq.c:561) [ 929.018016][ C3] __irq_exit_rcu (kernel/softirq.c:596 kernel/softirq.c:435 kernel/softirq.c:662) [ 929.018019][ C3] irq_exit_rcu (kernel/softirq.c:680) [ 929.018022][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049) [ 929.018026][ C3] [ 929.018027][ C3] [ 929.018030][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 929.018034][ C3] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) [ 929.018039][ C3] Code: 10 e8 81 74 88 fd 48 89 ef e8 c9 e4 88 fd 81 e3 00 02 00 00 75 1d 9c 58 f6 c4 02 75 29 48 85 db 74 01 fb 65 ff 0d 75 7d 30 67 <74> 0e 5b 5d c3 cc cc cc cc e8 8f 03 ae fd eb dc 0f 1f 44 00 00 5b All code ======== 0: 10 e8 adc %ch,%al 2: 81 74 88 fd 48 89 ef xorl $0xe8ef8948,-0x3(%rax,%rcx,4) 9: e8 a: c9 leave b: e4 88 in $0x88,%al d: fd std e: 81 e3 00 02 00 00 and $0x200,%ebx 14: 75 1d jne 0x33 16: 9c pushf 17: 58 pop %rax 18: f6 c4 02 test $0x2,%ah 1b: 75 29 jne 0x46 1d: 48 85 db test %rbx,%rbx 20: 74 01 je 0x23 22: fb sti 23: 65 ff 0d 75 7d 30 67 decl %gs:0x67307d75(%rip) # 0x67307d9f 2a:* 74 0e je 0x3a <-- trapping instruction 2c: 5b pop %rbx 2d: 5d pop %rbp 2e: c3 ret 2f: cc int3 30: cc int3 31: cc int3 32: cc int3 33: e8 8f 03 ae fd call 0xfffffffffdae03c7 38: eb dc jmp 0x16 3a: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 3f: 5b pop %rbx Code starting with the faulting instruction =========================================== 0: 74 0e je 0x10 2: 5b pop %rbx 3: 5d pop %rbp 4: c3 ret 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: e8 8f 03 ae fd call 0xfffffffffdae039d e: eb dc jmp 0xffffffffffffffec 10: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 15: 5b pop %rbx [ 929.018042][ C3] RSP: 0000:ffffc90000716f60 EFLAGS: 00000286 [ 929.018045][ C3] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff37c779c [ 929.018047][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff98d34761 [ 929.018048][ C3] RBP: ffff888001040e00 R08: 0000000000000001 R09: fffffbfff37c43e8 [ 929.018050][ C3] R10: ffffffff9be21f47 R11: ffff88800a78c5c0 R12: ffff888001040e00 [ 929.018052][ C3] R13: ffffea00003f6200 R14: ffff8880010430c0 R15: ffff88800fd89c00 [ 929.018063][ C3] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 929.018071][ C3] get_partial_node.part.0 (mm/slub.c:2870) [ 929.018084][ C3] ? virtqueue_add_split (drivers/virtio/virtio_ring.c:493 drivers/virtio/virtio_ring.c:564) [ 929.018090][ C3] ___slab_alloc (mm/slub.c:2831 mm/slub.c:2948 mm/slub.c:3806) [ 929.018093][ C3] ? kasan_save_stack (mm/kasan/common.c:48) [ 929.018099][ C3] ? kasan_save_track (./arch/x86/include/asm/current.h:49 mm/kasan/common.c:60 mm/kasan/common.c:69) [ 929.018102][ C3] ? virtqueue_add_split (drivers/virtio/virtio_ring.c:493 drivers/virtio/virtio_ring.c:564) [ 929.018106][ C3] ? ___slab_alloc (mm/slub.c:3658) [ 929.018114][ C3] ? page_cache_ra_unbounded (./include/linux/fs.h:932 mm/readahead.c:299) [ 929.018117][ C3] ? do_sync_mmap_readahead (mm/filemap.c:3261) [ 929.018124][ C3] ? filemap_fault (mm/filemap.c:3447) [ 929.018126][ C3] ? __do_fault (mm/memory.c:4977) [ 929.018132][ C3] ? do_pte_missing (mm/memory.c:5422 mm/memory.c:5528 mm/memory.c:4047) [ 929.018135][ C3] ? handle_pte_fault (mm/memory.c:5889) [ 929.018141][ C3] ? virtqueue_add_split (drivers/virtio/virtio_ring.c:493 drivers/virtio/virtio_ring.c:564) [ 929.018145][ C3] ? __kmalloc_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4293 mm/slub.c:4306) [ 929.018149][ C3] __kmalloc_noprof (mm/slub.c:3916 mm/slub.c:3991 mm/slub.c:4152 mm/slub.c:4293 mm/slub.c:4306) [ 929.018159][ C3] virtqueue_add_split (drivers/virtio/virtio_ring.c:493 drivers/virtio/virtio_ring.c:564) [ 929.018163][ C3] ? hlock_class (./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/locking/lockdep.c:230) [ 929.018177][ C3] ? __pfx_virtqueue_add_split (drivers/virtio/virtio_ring.c:538) [ 929.018183][ C3] ? kasan_save_track (./arch/x86/include/asm/current.h:49 mm/kasan/common.c:60 mm/kasan/common.c:69) [ 929.018188][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 929.018197][ C3] virtqueue_add_sgs (drivers/virtio/virtio_ring.c:2282 drivers/virtio/virtio_ring.c:2316) [ 929.018209][ C3] virtio_fs_enqueue_req (fs/fuse/virtio_fs.c:1441) [ 929.018223][ C3] ? __pfx_virtio_fs_enqueue_req (fs/fuse/virtio_fs.c:1377) [ 929.018236][ C3] ? find_held_lock (kernel/locking/lockdep.c:5341) [ 929.018242][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 929.018245][ C3] ? fuse_get_unique (fs/fuse/dev.c:222) [ 929.018252][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 929.018255][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 929.018261][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 929.018266][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 929.018272][ C3] ? fuse_get_unique (fs/fuse/dev.c:222) [ 929.018277][ C3] ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 929.018287][ C3] virtio_fs_send_req (fs/fuse/virtio_fs.c:1500) [ 929.018290][ C3] ? fuse_send_one (fs/fuse/dev.c:305) [ 929.018297][ C3] flush_bg_queue (fs/fuse/dev.c:323) [ 929.018308][ C3] fuse_request_queue_background (./include/linux/spinlock.h:391 fs/fuse/dev.c:617) [ 929.018315][ C3] fuse_simple_background (fs/fuse/dev.c:642) [ 929.018321][ C3] fuse_send_readpages (fs/fuse/file.c:993) [ 929.018331][ C3] fuse_readahead (fs/fuse/file.c:1031) [ 929.018347][ C3] ? __pfx_fuse_readahead (fs/fuse/file.c:1004) [ 929.018353][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 929.018355][ C3] ? __folio_batch_add_and_move (./include/linux/local_lock_internal.h:38 mm/swap.c:201) [ 929.018360][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 929.018364][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5816) [ 929.018374][ C3] read_pages (mm/readahead.c:161) [ 929.018378][ C3] ? __folio_batch_add_and_move (./include/linux/local_lock_internal.h:38 mm/swap.c:201) [ 929.018388][ C3] ? __pfx_read_pages (mm/readahead.c:148) [ 929.018408][ C3] page_cache_ra_unbounded (./include/linux/fs.h:932 mm/readahead.c:299) [ 929.018423][ C3] do_sync_mmap_readahead (mm/filemap.c:3261) [ 929.018429][ C3] ? __pfx_do_sync_mmap_readahead (mm/filemap.c:3193) [ 929.018442][ C3] ? __filemap_get_folio (mm/filemap.c:1905) [ 929.018450][ C3] filemap_fault (mm/filemap.c:3447) [ 929.018456][ C3] ? alloc_pages_mpol (mm/mempolicy.c:2272) [ 929.018460][ C3] ? __lock_release (kernel/locking/lockdep.c:5527) [ 929.018464][ C3] ? __pfx_alloc_pages_mpol (mm/mempolicy.c:2227) [ 929.018467][ C3] ? __pfx___lock_release (kernel/locking/lockdep.c:5503) [ 929.018471][ C3] ? __pfx_filemap_fault (mm/filemap.c:3406) [ 929.018473][ C3] ? __up_read (./arch/x86/include/asm/atomic64_64.h:79 ./include/linux/atomic/atomic-arch-fallback.h:2749 ./include/linux/atomic/atomic-long.h:184 ./include/linux/atomic/atomic-instrumented.h:3317 kernel/locking/rwsem.c:1345) [ 929.018484][ C3] ? vma_alloc_folio_noprof (./arch/x86/include/asm/bitops.h:206 ./arch/x86/include/asm/bitops.h:238 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 ./include/linux/page-flags.h:829 ./include/linux/page-flags.h:850 mm/internal.h:711 mm/mempolicy.c:2295 mm/mempolicy.c:2324) [ 929.018487][ C3] ? __vmf_anon_prepare (./include/linux/mmap_lock.h:217 mm/memory.c:3392) [ 929.018492][ C3] ? __pfx_vma_alloc_folio_noprof (mm/mempolicy.c:2315) [ 929.018500][ C3] __do_fault (mm/memory.c:4977) [ 929.018506][ C3] do_pte_missing (mm/memory.c:5422 mm/memory.c:5528 mm/memory.c:4047) [ 929.018508][ C3] ? handle_pte_fault (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/linux/pgtable.h:136 mm/memory.c:5883) [ 929.018515][ C3] handle_pte_fault (mm/memory.c:5889) [ 929.018522][ C3] ? __pfx_handle_pte_fault (mm/memory.c:5846) [ 929.018534][ C3] __handle_mm_fault (mm/memory.c:6032) [ 929.018539][ C3] ? __pfx___handle_mm_fault (mm/memory.c:5941) [ 929.018557][ C3] ? __pfx_lock_vma_under_rcu (mm/memory.c:6357) [ 929.018564][ C3] handle_mm_fault (mm/memory.c:6213) [ 929.018569][ C3] ? __pfx_handle_mm_fault (mm/memory.c:6168) [ 929.018581][ C3] do_user_addr_fault (arch/x86/mm/fault.c:1338) [ 929.018596][ C3] exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) [ 929.018602][ C3] asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) [ 929.018604][ C3] RIP: 0033:0x7f8790133998 [ 929.018609][ C3] Code: 00 00 f3 0f 1e fa 66 0f 6e c6 48 89 f8 66 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 0f 82 7e 00 00 00 48 83 fa 20 77 12 <0f> 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 0f 11 07 0f All code ======== 0: 00 00 add %al,(%rax) 2: f3 0f 1e fa endbr64 6: 66 0f 6e c6 movd %esi,%xmm0 a: 48 89 f8 mov %rdi,%rax d: 66 0f 60 c0 punpcklbw %xmm0,%xmm0 11: 66 0f 61 c0 punpcklwd %xmm0,%xmm0 15: 66 0f 70 c0 00 pshufd $0x0,%xmm0,%xmm0 1a: 48 83 fa 10 cmp $0x10,%rdx 1e: 0f 82 7e 00 00 00 jb 0xa2 24: 48 83 fa 20 cmp $0x20,%rdx 28: 77 12 ja 0x3c 2a:* 0f 11 44 17 f0 movups %xmm0,-0x10(%rdi,%rdx,1) <-- trapping instruction 2f: 0f 11 07 movups %xmm0,(%rdi) 32: c3 ret 33: 0f 11 47 e0 movups %xmm0,-0x20(%rdi) 37: 0f 11 47 f0 movups %xmm0,-0x10(%rdi) 3b: c3 ret 3c: 0f 11 07 movups %xmm0,(%rdi) 3f: 0f .byte 0xf Code starting with the faulting instruction =========================================== 0: 0f 11 44 17 f0 movups %xmm0,-0x10(%rdi,%rdx,1) 5: 0f 11 07 movups %xmm0,(%rdi) 8: c3 ret 9: 0f 11 47 e0 movups %xmm0,-0x20(%rdi) d: 0f 11 47 f0 movups %xmm0,-0x10(%rdi) 11: c3 ret 12: 0f 11 07 movups %xmm0,(%rdi) 15: 0f .byte 0xf [ 929.018611][ C3] RSP: 002b:00007fffb8031a08 EFLAGS: 00010283 [ 929.018613][ C3] RAX: 00007f8790092fe8 RBX: 0000000000000004 RCX: 00007f8790093010 [ 929.018615][ C3] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 00007f8790092fe8 [ 929.018616][ C3] RBP: 00007fffb8031da0 R08: 00007f8790092fe8 R09: 0000000000019000 [ 929.018618][ C3] R10: 0000000000000003 R11: 0000000000000206 R12: 00007fffb8031aa0 Finger prints: lockdep_rcu_suspicious:icmp6_send:ip6_link_failure:ndisc_error_report:neigh_invalidate