====================================== | [ 41.600920][ T312] 1 lock held by nft/312: | [ 41.601068][ T312] #0: ffff88800205dcc8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid (./include/linux/jiffies.h:101 net/netfilter/nf_tables_api.c:10957) nf_tables | [ 41.601585][ T312] | [ 41.601585][ T312] stack backtrace: [ 41.602060][ T312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 41.602443][ T312] Call Trace: [ 41.602577][ T312] [ 41.602673][ T312] dump_stack_lvl (lib/dump_stack.c:123) [ 41.602850][ T312] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6822) [ 41.603032][ T312] nft_flowtable_lookup (net/netfilter/nf_tables_api.c:8383 (discriminator 7)) nf_tables [ 41.603267][ T312] nf_tables_newflowtable (net/netfilter/nf_tables_api.c:8739) nf_tables [ 41.603522][ T312] ? __pfx_nf_tables_newflowtable (net/netfilter/nf_tables_api.c:8714) nf_tables [ 41.603762][ T312] ? net_generic (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48) [ 41.603957][ T312] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) [ 41.604141][ T312] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) [ 41.604317][ T312] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 41.604496][ T312] ? __nla_validate_parse (lib/nlattr.c:638) [ 41.604682][ T312] nfnetlink_rcv_batch (net/netfilter/nfnetlink.c:524) [ 41.604868][ T312] ? __pfx_nfnetlink_rcv_batch (net/netfilter/nfnetlink.c:373) [ 41.605044][ T312] ? rcu_read_lock_any_held (kernel/rcu/update.c:387 kernel/rcu/update.c:380) [ 41.605226][ T312] ? find_stack (lib/stackdepot.c:552 (discriminator 1)) [ 41.605412][ T312] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 41.605580][ T312] ? validate_chain (kernel/locking/lockdep.c:3797 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) [ 41.605764][ T312] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) [ 41.605948][ T312] ? __lock_acquire (kernel/locking/lockdep.c:5202) [ 41.606128][ T312] ? find_held_lock (kernel/locking/lockdep.c:5315) [ 41.606301][ T312] ? __lock_release (kernel/locking/lockdep.c:5501) [ 41.606468][ T312] ? __nla_validate_parse (./include/net/netlink.h:1267 (discriminator 1) lib/nlattr.c:622 (discriminator 1)) [ 41.606642][ T312] nfnetlink_rcv (net/netfilter/nfnetlink.c:647 net/netfilter/nfnetlink.c:665) [ 41.606812][ T312] ? __pfx_nfnetlink_rcv (net/netfilter/nfnetlink.c:651) [ 41.606984][ T312] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 41.607158][ T312] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) [ 41.607336][ T312] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) [ 41.607514][ T312] netlink_sendmsg (net/netlink/af_netlink.c:1901) [ 41.607687][ T312] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) [ 41.607859][ T312] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) [ 41.608041][ T312] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) [ 41.608214][ T312] ? __pfx_____sys_sendmsg (net/socket.c:2553) [ 41.608383][ T312] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) [ 41.608605][ T312] ___sys_sendmsg (net/socket.c:2663) [ 41.608778][ T312] ? __lock_release (kernel/locking/lockdep.c:5501) [ 41.608950][ T312] ? __pfx____sys_sendmsg (net/socket.c:2650) [ 41.609125][ T312] ? __might_fault (mm/memory.c:6705 mm/memory.c:6698) [ 41.609295][ T312] ? lock_acquire (kernel/locking/lockdep.c:5798) [ 41.609463][ T312] ? __might_fault (mm/memory.c:6705 mm/memory.c:6698) [ 41.609633][ T312] ? __might_fault (mm/memory.c:6705 mm/memory.c:6698) [ 41.609807][ T312] ? do_sock_getsockopt (net/socket.c:2388) [ 41.609979][ T312] ? do_sock_setsockopt (net/socket.c:2303) [ 41.610156][ T312] ? __pfx_do_sock_getsockopt (net/socket.c:2374) [ 41.610330][ T312] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) [ 41.610466][ T312] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) [ 41.610637][ T312] ? __pfx___sys_sendmsg (net/socket.c:2678) [ 41.610809][ T312] ? __pfx___sys_getsockopt (net/socket.c:2415) [ 41.610996][ T312] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 41.611169][ T312] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 41.611390][ T312] RIP: 0033:0x7fc69ade87b7 [ 41.611587][ T312] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0a 00 or (%rax),%al 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 41.612194][ T312] RSP: 002b:00007ffc06dea368 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.612456][ T312] RAX: ffffffffffffffda RBX: 00007ffc06dfb560 RCX: 00007fc69ade87b7 [ 41.612753][ T312] RDX: 0000000000000000 RSI: 00007ffc06dfb420 RDI: 0000000000000005 [ 41.613010][ T312] RBP: 00007ffc06dfb510 R08: 00007ffc06dea34c R09: 00007ffc06dea370 [ 41.613265][ T312] R10: 00007fc69aca1708 R11: 0000000000000246 R12: 00007ffc06dfb460 [ 41.613520][ T312] R13: 0000000000002c00 R14: 0000000000000005 R15: 00007ffc06dea380 | [ 43.700579][ T312] 1 lock held by nft/312: | [ 43.700709][ T312] #0: ffff88800205dcc8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid (./include/linux/jiffies.h:101 net/netfilter/nf_tables_api.c:10957) nf_tables | [ 43.701138][ T312] | [ 43.701138][ T312] stack backtrace: [ 43.701599][ T312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 43.701969][ T312] Call Trace: [ 43.702102][ T312] [ 43.702192][ T312] dump_stack_lvl (lib/dump_stack.c:123) [ 43.702374][ T312] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6822) [ 43.702547][ T312] nft_set_lookup.part.0 (net/netfilter/nf_tables_api.c:4470) nf_tables [ 43.702782][ T312] nf_tables_newset (net/netfilter/nf_tables_api.c:5233) nf_tables [ 43.703028][ T312] ? __pfx_nf_tables_newset (net/netfilter/nf_tables_api.c:5075) nf_tables [ 43.703269][ T312] ? find_held_lock (kernel/locking/lockdep.c:5315) [ 43.703448][ T312] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) [ 43.703616][ T312] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 43.703803][ T312] ? __nla_validate_parse (lib/nlattr.c:638) [ 43.703981][ T312] nfnetlink_rcv_batch (net/netfilter/nfnetlink.c:524) [ 43.704173][ T312] ? __pfx_nfnetlink_rcv_batch (net/netfilter/nfnetlink.c:373) [ 43.704344][ T312] ? rcu_read_lock_any_held (kernel/rcu/update.c:387 kernel/rcu/update.c:380) [ 43.704514][ T312] ? find_stack (lib/stackdepot.c:552 (discriminator 1)) [ 43.704690][ T312] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) [ 43.704856][ T312] ? validate_chain (kernel/locking/lockdep.c:3797 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) [ 43.705042][ T312] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) [ 43.705236][ T312] ? find_held_lock (kernel/locking/lockdep.c:5315) [ 43.705411][ T312] ? __lock_release (kernel/locking/lockdep.c:5501) [ 43.705579][ T312] ? __nla_validate_parse (./include/net/netlink.h:1267 (discriminator 1) lib/nlattr.c:622 (discriminator 1)) [ 43.705757][ T312] nfnetlink_rcv (net/netfilter/nfnetlink.c:647 net/netfilter/nfnetlink.c:665) [ 43.705925][ T312] ? __pfx_nfnetlink_rcv (net/netfilter/nfnetlink.c:651) [ 43.706100][ T312] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) [ 43.706272][ T312] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) [ 43.706445][ T312] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) [ 43.706624][ T312] netlink_sendmsg (net/netlink/af_netlink.c:1901) [ 43.706797][ T312] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) [ 43.706970][ T312] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) [ 43.707147][ T312] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) [ 43.707319][ T312] ? __pfx_____sys_sendmsg (net/socket.c:2553) [ 43.707487][ T312] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) [ 43.707708][ T312] ___sys_sendmsg (net/socket.c:2663) [ 43.707876][ T312] ? __lock_release (kernel/locking/lockdep.c:5501) [ 43.708050][ T312] ? __pfx____sys_sendmsg (net/socket.c:2650) [ 43.708223][ T312] ? __might_fault (mm/memory.c:6705 mm/memory.c:6698) [ 43.708391][ T312] ? lock_acquire (kernel/locking/lockdep.c:5798) [ 43.708558][ T312] ? __might_fault (mm/memory.c:6705 mm/memory.c:6698) [ 43.708734][ T312] ? __might_fault (mm/memory.c:6705 mm/memory.c:6698) [ 43.708909][ T312] ? do_sock_getsockopt (net/socket.c:2388) [ 43.709079][ T312] ? do_sock_setsockopt (net/socket.c:2303) [ 43.709247][ T312] ? __pfx_do_sock_getsockopt (net/socket.c:2374) [ 43.709427][ T312] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) [ 43.709560][ T312] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) [ 43.709729][ T312] ? __pfx___sys_sendmsg (net/socket.c:2678) [ 43.709901][ T312] ? __pfx___sys_getsockopt (net/socket.c:2415) [ 43.710086][ T312] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) [ 43.710258][ T312] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 43.710466][ T312] RIP: 0033:0x7fc69ade87b7 [ 43.710646][ T312] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 All code ======== 0: 0a 00 or (%rax),%al 2: f7 d8 neg %eax 4: 64 89 02 mov %eax,%fs:(%rdx) 7: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax e: eb b9 jmp 0xffffffffffffffc9 10: 0f 1f 00 nopl (%rax) 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2e 00 00 00 mov $0x2e,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 28 sub $0x28,%rsp 37: 89 54 24 1c mov %edx,0x1c(%rsp) 3b: 48 89 74 24 10 mov %rsi,0x10(%rsp) Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 28 sub $0x28,%rsp d: 89 54 24 1c mov %edx,0x1c(%rsp) 11: 48 89 74 24 10 mov %rsi,0x10(%rsp) [ 43.711233][ T312] RSP: 002b:00007ffc06dea368 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.711491][ T312] RAX: ffffffffffffffda RBX: 00007ffc06dfb560 RCX: 00007fc69ade87b7 [ 43.711743][ T312] RDX: 0000000000000000 RSI: 00007ffc06dfb420 RDI: 0000000000000005 [ 43.712000][ T312] RBP: 00007ffc06dfb510 R08: 00007ffc06dea34c R09: 00007ffc06dea370 [ 43.712250][ T312] R10: 00007fc69aca1708 R11: 0000000000000246 R12: 00007ffc06dfb460 [ 43.712500][ T312] R13: 0000000000002c00 R14: 0000000000000005 R15: 00007ffc06dea380 | [ 195.522998][ T11] #2: ffffffff911cf8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net (net/core/net_namespace.c:590) | [ 195.523397][ T11] #3: ffff888005dc32c8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_exit_net (net/netfilter/nf_tables_api.c:10291 net/netfilter/nf_tables_api.c:11638) nf_tables | [ 195.523795][ T11] | [ 195.523795][ T11] stack backtrace: [ 195.524297][ T11] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 195.524655][ T11] Workqueue: netns cleanup_net [ 195.524831][ T11] Call Trace: [ 195.524957][ T11] [ 195.525046][ T11] dump_stack_lvl (lib/dump_stack.c:123) [ 195.525217][ T11] lockdep_rcu_suspicious (kernel/locking/lockdep.c:6822) [ 195.525389][ T11] nft_hash_walk (net/netfilter/nft_set_hash.c:650 (discriminator 7)) nf_tables [ 195.525581][ T11] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) [ 195.525800][ T11] nft_map_deactivate (net/netfilter/nf_tables_api.c:694) nf_tables [ 195.526028][ T11] ? __pfx_nft_map_deactivate (net/netfilter/nf_tables_api.c:687) nf_tables [ 195.526262][ T11] ? __pfx_nft_mapelem_deactivate (net/netfilter/nf_tables_api.c:650) nf_tables [ 195.526492][ T11] ? mark_held_locks (kernel/locking/lockdep.c:4321) [ 195.526661][ T11] nf_tables_deactivate_set (net/netfilter/nf_tables_api.c:5663) nf_tables [ 195.526893][ T11] nft_rule_expr_deactivate (net/netfilter/nf_tables_api.c:524) nf_tables [ 195.527126][ T11] __nft_release_table (./include/net/netfilter/nf_tables.h:1014 ./include/net/netfilter/nf_tables.h:1020 net/netfilter/nf_tables_api.c:3866 net/netfilter/nf_tables_api.c:3877 net/netfilter/nf_tables_api.c:11504) nf_tables [ 195.527360][ T11] ? __pfx___nft_release_table (net/netfilter/nf_tables_api.c:11483) nf_tables [ 195.527583][ T11] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 195.527754][ T11] ? net_generic (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48) nf_tables [ 195.527955][ T11] nf_tables_exit_net (net/netfilter/nf_tables_api.c:11538 net/netfilter/nf_tables_api.c:11646) nf_tables [ 195.528190][ T11] ops_exit_list (net/core/net_namespace.c:173 (discriminator 3)) [ 195.528356][ T11] cleanup_net (net/core/net_namespace.c:632 (discriminator 3)) [ 195.528524][ T11] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) [ 195.528686][ T11] ? __pfx_cleanup_net (net/core/net_namespace.c:577) [ 195.528847][ T11] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) [ 195.529009][ T11] ? process_one_work (kernel/workqueue.c:3205) [ 195.529172][ T11] ? lock_acquire (kernel/locking/lockdep.c:5798) [ 195.529334][ T11] ? process_one_work (kernel/workqueue.c:3205) [ 195.529501][ T11] process_one_work (kernel/workqueue.c:3229) [ 195.529677][ T11] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) [ 195.529840][ T11] ? __pfx_process_one_work (kernel/workqueue.c:3131) [ 195.530013][ T11] ? assign_work (kernel/workqueue.c:1200) [ 195.530183][ T11] worker_thread (kernel/workqueue.c:3304 kernel/workqueue.c:3391) [ 195.530359][ T11] ? __pfx_worker_thread (kernel/workqueue.c:3337) [ 195.530521][ T11] kthread (kernel/kthread.c:389) [ 195.530642][ T11] ? __pfx_kthread (kernel/kthread.c:342) [ 195.530827][ T11] ret_from_fork (arch/x86/kernel/process.c:147) [ 195.530991][ T11] ? __pfx_kthread (kernel/kthread.c:342) Finger prints: lockdep_rcu_suspicious:nft_hash_walk:nft_map_deactivate:nf_tables_deactivate_set:nft_rule_expr_deactivate lockdep_rcu_suspicious:nft_flowtable_lookup:nf_tables_newflowtable:nfnetlink_rcv_batch:nfnetlink_rcv lockdep_rcu_suspicious:nf_tables_newset:nfnetlink_rcv_batch:nfnetlink_rcv:netlink_unicast