====================================== | [ 150.299750][ C2] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) | [ 150.299939][ C2] | [ 150.300015][ C2] | [ 150.300015][ C2] stack backtrace: [ 150.300517][ C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 150.300852][ C2] Call Trace: [ 150.300974][ C2] [ 150.301145][ C2] dump_stack_lvl (lib/dump_stack.c:117) [ 150.301300][ C2] print_irq_inversion_bug.part.0 (kernel/locking/lockdep.c:4024) [ 150.301505][ C2] ? kernel_text_address (kernel/extable.c:97 kernel/extable.c:94) [ 150.301659][ C2] ? __pfx_print_irq_inversion_bug.part.0 (kernel/locking/lockdep.c:4024) [ 150.301940][ C2] ? __pfx_usage_skip (kernel/locking/lockdep.c:2264) [ 150.302092][ C2] ? __pfx_usage_match (kernel/locking/lockdep.c:2256) [ 150.302249][ C2] ? arch_stack_walk (arch/x86/kernel/stacktrace.c:26) [ 150.302402][ C2] mark_lock_irq (kernel/locking/lockdep.c:4244) [ 150.302649][ C2] ? __pfx_mark_lock_irq (kernel/locking/lockdep.c:4207) [ 150.302799][ C2] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) [ 150.302950][ C2] ? save_trace (kernel/locking/lockdep.c:586) [ 150.303104][ C2] mark_lock (kernel/locking/lockdep.c:4678) [ 150.303218][ C2] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) [ 150.303463][ C2] mark_usage (kernel/locking/lockdep.c:4567) [ 150.303577][ C2] __lock_acquire (kernel/locking/lockdep.c:5091) [ 150.303730][ C2] ? __pfx_validate_chain (kernel/locking/lockdep.c:3825) [ 150.303881][ C2] ? __pfx_addrconf_rs_timer (net/ipv6/addrconf.c:4016) [ 150.304127][ C2] lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) [ 150.304278][ C2] ? addrconf_rs_timer (net/ipv6/addrconf.c:4023) [ 150.304429][ C2] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) [ 150.304580][ C2] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 150.304826][ C2] ? addrconf_rs_timer (net/ipv6/addrconf.c:4023) [ 150.304977][ C2] ? lock_acquire (kernel/locking/lockdep.c:5727) [ 150.305126][ C2] ? addrconf_rs_timer (net/ipv6/addrconf.c:4023) [ 150.305277][ C2] _raw_write_lock (./include/linux/rwlock_api_smp.h:210 kernel/locking/spinlock.c:300) [ 150.305426][ C2] ? addrconf_rs_timer (net/ipv6/addrconf.c:4023) [ 150.305670][ C2] addrconf_rs_timer (net/ipv6/addrconf.c:4023) [ 150.305820][ C2] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) [ 150.305970][ C2] ? __pfx_addrconf_rs_timer (net/ipv6/addrconf.c:4016) [ 150.306119][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1783) [ 150.306364][ C2] ? lock_acquire (kernel/locking/lockdep.c:5727) [ 150.306514][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1783) [ 150.306664][ C2] ? __pfx_addrconf_rs_timer (net/ipv6/addrconf.c:4016) [ 150.306814][ C2] call_timer_fn (kernel/time/timer.c:1793) [ 150.307058][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1783) [ 150.307207][ C2] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1783) [ 150.307357][ C2] ? __pfx_call_timer_fn (kernel/time/timer.c:1770) [ 150.307506][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) [ 150.307657][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) [ 150.307812][ C2] __run_timers (kernel/time/timer.c:1845 kernel/time/timer.c:2418) [ 150.307962][ C2] ? __pfx_addrconf_rs_timer (net/ipv6/addrconf.c:4016) [ 150.308114][ C2] ? __pfx___run_timers (kernel/time/timer.c:2389) [ 150.308265][ C2] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:115 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 150.308416][ C2] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) [ 150.308565][ C2] ? lock_acquire (kernel/locking/lockdep.c:5727) [ 150.308715][ C2] ? run_timer_softirq (kernel/time/timer.c:2429 kernel/time/timer.c:2422 kernel/time/timer.c:2438 kernel/time/timer.c:2448) [ 150.308867][ C2] run_timer_softirq (kernel/time/timer.c:2430 kernel/time/timer.c:2422 kernel/time/timer.c:2438 kernel/time/timer.c:2448) [ 150.309116][ C2] __do_softirq (kernel/softirq.c:554) [ 150.309267][ C2] irq_exit_rcu (kernel/softirq.c:428 kernel/softirq.c:633 kernel/softirq.c:645) [ 150.309381][ C2] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043 arch/x86/kernel/apic/apic.c:1043) [ 150.309532][ C2] [ 150.309610][ C2] [ 150.309781][ C2] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 150.309970][ C2] RIP: 0010:unwind_next_frame (arch/x86/kernel/unwind_orc.c:588) [ 150.310166][ C2] Code: 00 49 8b 7d 28 4c 89 f9 e8 42 73 3f 00 48 3d 50 d1 b2 9c 0f 84 89 0d 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 e9 48 c1 e9 03 <80> 3c 11 00 0f 85 6f 12 00 00 48 8b 14 24 49 89 45 58 48 b8 00 00 All code ======== 0: 00 49 8b add %cl,-0x75(%rcx) 3: 7d 28 jge 0x2d 5: 4c 89 f9 mov %r15,%rcx 8: e8 42 73 3f 00 call 0x3f734f d: 48 3d 50 d1 b2 9c cmp $0xffffffff9cb2d150,%rax 13: 0f 84 89 0d 00 00 je 0xda2 19: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 20: fc ff df 23: 48 89 e9 mov %rbp,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx 2a:* 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) <-- trapping instruction 2e: 0f 85 6f 12 00 00 jne 0x12a3 34: 48 8b 14 24 mov (%rsp),%rdx 38: 49 89 45 58 mov %rax,0x58(%r13) 3c: 48 rex.W 3d: b8 .byte 0xb8 ... Code starting with the faulting instruction =========================================== 0: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) 4: 0f 85 6f 12 00 00 jne 0x1279 a: 48 8b 14 24 mov (%rsp),%rdx e: 49 89 45 58 mov %rax,0x58(%r13) 12: 48 rex.W 13: b8 .byte 0xb8 ... [ 150.310812][ C2] RSP: 0018:ffffc9000245f7a8 EFLAGS: 00000a02 [ 150.311000][ C2] RAX: ffffffff9d32117b RBX: 0000000000000001 RCX: 1ffff9200048bf20 [ 150.311317][ C2] RDX: dffffc0000000000 RSI: ffffc9000245f8d8 RDI: ffff888005325a6c [ 150.311548][ C2] RBP: ffffc9000245f900 R08: ffffc9000245f8e8 R09: 1ffff9200048befe [ 150.311777][ C2] R10: ffffc9000245f8a8 R11: ffffc9000245f8e9 R12: 1ffff9200048befe [ 150.312107][ C2] R13: ffffc9000245f8a8 R14: ffffffffa13d9550 R15: ffffc9000245fa68 [ 150.312332][ C2] ? free_to_partial_list (mm/slub.c:4026) [ 150.312483][ C2] ? unwind_next_frame (./arch/x86/include/asm/unwind.h:111 ./arch/x86/include/asm/unwind.h:127 arch/x86/kernel/unwind_orc.c:588) [ 150.312633][ C2] ? set_track_prepare (mm/slub.c:886) [ 150.312786][ C2] ? __pfx_unwind_next_frame (arch/x86/kernel/unwind_orc.c:469) [ 150.312940][ C2] ? set_track_prepare (mm/slub.c:886) [ 150.313088][ C2] ? kernel_text_address (kernel/extable.c:99) [ 150.313238][ C2] ? __pfx_stack_trace_consume_entry (kernel/stacktrace.c:83) [ 150.313424][ C2] arch_stack_walk (arch/x86/kernel/stacktrace.c:24) [ 150.313574][ C2] ? free_to_partial_list (mm/slub.c:4026) [ 150.313723][ C2] stack_trace_save (kernel/stacktrace.c:123) [ 150.313876][ C2] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) [ 150.314119][ C2] ? find_held_lock (kernel/locking/lockdep.c:5244) [ 150.314270][ C2] set_track_prepare (mm/slub.c:886) [ 150.314420][ C2] ? __pfx___lock_release (kernel/locking/lockdep.c:5406) [ 150.314569][ C2] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) [ 150.314810][ C2] ? mark_lock (kernel/locking/lockdep.c:4656 (discriminator 3)) [ 150.314927][ C2] ? mark_held_locks (kernel/locking/lockdep.c:4274) [ 150.315076][ C2] free_to_partial_list (mm/slub.c:4026) [ 150.315224][ C2] ? qlist_free_all (mm/kasan/quarantine.c:163 mm/kasan/quarantine.c:179) [ 150.315375][ C2] qlist_free_all (mm/kasan/quarantine.c:174) [ 150.315617][ C2] kasan_quarantine_reduce (./include/linux/srcu.h:285 mm/kasan/quarantine.c:287) [ 150.315770][ C2] __kasan_slab_alloc (mm/kasan/common.c:322) [ 150.315921][ C2] kmem_cache_alloc (./include/linux/kasan.h:201 mm/slub.c:3798 mm/slub.c:3845 mm/slub.c:3852) [ 150.316071][ C2] getname_kernel (fs/namei.c:227) [ 150.316314][ C2] open_exec (fs/exec.c:969) [ 150.316427][ C2] load_elf_binary (fs/binfmt_elf.c:894) [ 150.316577][ C2] ? find_held_lock (kernel/locking/lockdep.c:5244) [ 150.316725][ C2] ? __lock_release (kernel/locking/lockdep.c:5430) [ 150.316975][ C2] ? search_binary_handler (fs/exec.c:1778) [ 150.317128][ C2] ? __pfx___lock_release (kernel/locking/lockdep.c:5406) [ 150.317277][ C2] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) [ 150.317427][ C2] ? __pfx_load_elf_binary (fs/binfmt_elf.c:820) [ 150.317576][ C2] ? search_binary_handler (fs/exec.c:1778) [ 150.317726][ C2] search_binary_handler (fs/exec.c:1778) [ 150.317875][ C2] ? __pfx_search_binary_handler (fs/exec.c:1757) [ 150.318061][ C2] ? __task_pid_nr_ns (./include/linux/rcupdate.h:339 ./include/linux/rcupdate.h:814 kernel/pid.c:514) [ 150.318211][ C2] ? exec_binprm (./include/linux/rcupdate.h:339 ./include/linux/rcupdate.h:814 fs/exec.c:1812) [ 150.318362][ C2] exec_binprm (fs/exec.c:1821) [ 150.318512][ C2] bprm_execve (fs/exec.c:1872 fs/exec.c:1848) [ 150.318625][ C2] do_execveat_common.isra.0 (fs/exec.c:1979) [ 150.318774][ C2] ? getname_flags (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 fs/namei.c:190) [ 150.319035][ C2] __x64_sys_execve (fs/exec.c:2124) [ 150.319185][ C2] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 150.319334][ C2] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) [ 150.319518][ C2] RIP: 0033:0x7f994e00540b [ 150.319673][ C2] Code: c0 75 03 5f ff e7 c3 48 8b 0d f1 a9 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 80 00 00 00 00 f3 0f 1e fa b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c5 a9 1b 00 f7 d8 64 89 01 48 All code ======== 0: c0 75 03 5f shlb $0x5f,0x3(%rbp) 4: ff e7 jmp *%rdi 6: c3 ret 7: 48 8b 0d f1 a9 1b 00 mov 0x1ba9f1(%rip),%rcx # 0x1ba9ff e: f7 d8 neg %eax 10: 64 89 01 mov %eax,%fs:(%rcx) 13: 48 83 c8 ff or $0xffffffffffffffff,%rax 17: c3 ret 18: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 1f: f3 0f 1e fa endbr64 23: b8 3b 00 00 00 mov $0x3b,%eax 28: 0f 05 syscall 2a:* 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax <-- trapping instruction 30: 73 01 jae 0x33 32: c3 ret 33: 48 8b 0d c5 a9 1b 00 mov 0x1ba9c5(%rip),%rcx # 0x1ba9ff 3a: f7 d8 neg %eax 3c: 64 89 01 mov %eax,%fs:(%rcx) 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 48 3d 01 f0 ff ff cmp $0xfffffffffffff001,%rax 6: 73 01 jae 0x9 8: c3 ret 9: 48 8b 0d c5 a9 1b 00 mov 0x1ba9c5(%rip),%rcx # 0x1ba9d5 10: f7 d8 neg %eax 12: 64 89 01 mov %eax,%fs:(%rcx) 15: 48 rex.W [ 150.320200][ C2] RSP: 002b:00007ffea96d8468 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 150.320427][ C2] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f994e00540b [ 150.320647][ C2] RDX: 00005625c0b34790 RSI: 00005625c0bb5d90 RDI: 00005625c0be02d0 [ 150.320872][ C2] RBP: 00005625c0be02d0 R08: 00007ffea96d83b0 R09: 0000000000000000 [ 150.321095][ C2] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000ffffffff Finger prints: dump_stack_lvl:mark_lock_irq:mark_lock:mark_usage