====================================== | [ 20.208473][ C3] #0: ffffffffaf581e90 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce (./include/linux/srcu.h:161 ./include/linux/srcu.h:253 mm/kasan/quarantine.c:259) | [ 20.209225][ C3] #1: ffffffffaf3793c0 (rcu_callback){....}-{0:0}, at: rcu_do_batch (./include/linux/rcupdate.h:331 kernel/rcu/tree.c:2570) | [ 20.209877][ C3] | [ 20.209877][ C3] stack backtrace: [ 20.210336][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 20.210340][ C3] Call Trace: [ 20.210343][ C3] [ 20.210347][ C3] dump_stack_lvl (lib/dump_stack.c:123) [ 20.210358][ C3] print_usage_bug.part.0 (kernel/locking/lockdep.c:4048) [ 20.210368][ C3] mark_lock_irq (kernel/locking/lockdep.c:4013 kernel/locking/lockdep.c:4059 kernel/locking/lockdep.c:4270) [ 20.210381][ C3] mark_lock (kernel/locking/lockdep.c:4756) [ 20.210388][ C3] mark_usage (kernel/locking/lockdep.c:4645) [ 20.210394][ C3] __lock_acquire (kernel/locking/lockdep.c:5194) [ 20.210400][ C3] ? unwind_next_frame (./include/linux/rcupdate.h:874 ./include/linux/rcupdate.h:1155 arch/x86/kernel/unwind_orc.c:479) [ 20.210408][ C3] ? fuse_file_put (fs/fuse/file.c:98 fs/fuse/file.c:115 fs/fuse/file.c:102) [ 20.210418][ C3] lock_acquire.part.0 (kernel/locking/lockdep.c:473 kernel/locking/lockdep.c:5873) [ 20.210424][ C3] ? xa_set_mark (lib/xarray.c:2076 lib/xarray.c:2146) [ 20.210431][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 20.210440][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5834) [ 20.210444][ C3] ? xa_set_mark (lib/xarray.c:2076 lib/xarray.c:2146) [ 20.210452][ C3] _raw_spin_lock (./include/linux/spinlock_api_smp.h:134 kernel/locking/spinlock.c:154) [ 20.210457][ C3] ? xa_set_mark (lib/xarray.c:2076 lib/xarray.c:2146) [ 20.210461][ C3] xa_set_mark (lib/xarray.c:2076 lib/xarray.c:2146) [ 20.210466][ C3] ? __pfx_xa_set_mark (lib/xarray.c:2144) [ 20.210471][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 20.210481][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 20.210488][ C3] ref_tracker_dir_exit (lib/ref_tracker.c:54 lib/ref_tracker.c:223) [ 20.210495][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4328) [ 20.210501][ C3] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) [ 20.210506][ C3] ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:213) [ 20.210513][ C3] ? ref_tracker_free (lib/ref_tracker.c:281) [ 20.210518][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5240) [ 20.210524][ C3] ? __pfx_ref_tracker_free (lib/ref_tracker.c:281) [ 20.210529][ C3] ? __sk_destruct (./include/linux/instrumented.h:96 ./include/linux/atomic/atomic-instrumented.h:400 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/net_namespace.h:287 ./include/net/net_namespace.h:390 net/core/sock.c:2368) [ 20.210537][ C3] ? rcu_do_batch (./include/linux/rcupdate.h:341 kernel/rcu/tree.c:2578) [ 20.210543][ C3] ? rcu_core (kernel/rcu/tree.c:2834) [ 20.210547][ C3] ? handle_softirqs (kernel/softirq.c:580) [ 20.210557][ C3] __put_net (./include/linux/llist.h:238 ./include/linux/llist.h:265 net/core/net_namespace.c:732) [ 20.210564][ C3] ? fuse_request_alloc (fs/fuse/dev.c:143) [ 20.210570][ C3] ? __pfx___put_net (net/core/net_namespace.c:729) [ 20.210577][ C3] ? bpf_sk_storage_free (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 net/core/bpf_sk_storage.c:61) [ 20.210585][ C3] __sk_destruct (./include/net/net_namespace.h:288 ./include/net/net_namespace.h:390 net/core/sock.c:2368) [ 20.210591][ C3] ? rcu_do_batch (kernel/rcu/tree.c:2576) [ 20.210596][ C3] rcu_do_batch (./include/linux/rcupdate.h:341 kernel/rcu/tree.c:2578) [ 20.210603][ C3] ? find_held_lock (kernel/locking/lockdep.c:5353) [ 20.210609][ C3] ? __pfx_rcu_do_batch (kernel/rcu/tree.c:2500) [ 20.210616][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4328) [ 20.210621][ C3] ? note_gp_changes (kernel/rcu/tree.c:1326 (discriminator 1)) [ 20.210626][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4475) [ 20.210635][ C3] rcu_core (kernel/rcu/tree.c:2834) [ 20.210640][ C3] handle_softirqs (kernel/softirq.c:580) [ 20.210650][ C3] __irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680) [ 20.210656][ C3] irq_exit_rcu (kernel/softirq.c:698) [ 20.210661][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 arch/x86/kernel/apic/apic.c:1050) [ 20.210667][ C3] [ 20.210669][ C3] [ 20.210672][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) [ 20.210678][ C3] RIP: 0010:qlist_free_all (mm/kasan/../slab.h:214 mm/kasan/quarantine.c:131 mm/kasan/quarantine.c:176) [ 20.210685][ C3] Code: ae 70 ff 48 c1 e8 0c 48 c1 e0 06 48 03 05 8d 16 bd 02 48 8b 48 08 48 89 c2 f6 c1 01 0f 85 89 00 00 00 66 90 31 c0 80 7a 33 f5 <48> 0f 45 d0 48 8b 6a 08 eb 88 48 83 7d 48 00 75 9e f7 45 08 04 02 All code ======== 0: ae scas %es:(%rdi),%al 1: 70 ff jo 0x2 3: 48 c1 e8 0c shr $0xc,%rax 7: 48 c1 e0 06 shl $0x6,%rax b: 48 03 05 8d 16 bd 02 add 0x2bd168d(%rip),%rax # 0x2bd169f 12: 48 8b 48 08 mov 0x8(%rax),%rcx 16: 48 89 c2 mov %rax,%rdx 19: f6 c1 01 test $0x1,%cl 1c: 0f 85 89 00 00 00 jne 0xab 22: 66 90 xchg %ax,%ax 24: 31 c0 xor %eax,%eax 26: 80 7a 33 f5 cmpb $0xf5,0x33(%rdx) 2a:* 48 0f 45 d0 cmovne %rax,%rdx <-- trapping instruction 2e: 48 8b 6a 08 mov 0x8(%rdx),%rbp 32: eb 88 jmp 0xffffffffffffffbc 34: 48 83 7d 48 00 cmpq $0x0,0x48(%rbp) 39: 75 9e jne 0xffffffffffffffd9 3b: f7 .byte 0xf7 3c: 45 08 04 02 or %r8b,(%r10,%rax,1) Code starting with the faulting instruction =========================================== 0: 48 0f 45 d0 cmovne %rax,%rdx 4: 48 8b 6a 08 mov 0x8(%rdx),%rbp 8: eb 88 jmp 0xffffffffffffff92 a: 48 83 7d 48 00 cmpq $0x0,0x48(%rbp) f: 75 9e jne 0xffffffffffffffaf 11: f7 .byte 0xf7 12: 45 08 04 02 or %r8b,(%r10,%rax,1) [ 20.210689][ C3] RSP: 0018:ffffc90000a17b70 EFLAGS: 00000246 [ 20.210695][ C3] RAX: 0000000000000000 RBX: ffff88800259f250 RCX: ffffea0000096781 [ 20.210698][ C3] RDX: ffffea0000096780 RSI: ffffffffaeea57e9 RDI: ffff88800259f250 [ 20.210700][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 20.210703][ C3] R10: ffffffffafdf61d7 R11: ffff88800104f458 R12: ffff88800259f250 [ 20.210706][ C3] R13: 0000000000000000 R14: ffffc90000a17ba8 R15: ffff88800976d868 [ 20.210718][ C3] kasan_quarantine_reduce (./include/linux/srcu.h:400 mm/kasan/quarantine.c:287) [ 20.210724][ C3] __kasan_slab_alloc (mm/kasan/common.c:329) [ 20.210732][ C3] kmem_cache_alloc_noprof (./include/linux/kasan.h:250 mm/slub.c:4148 mm/slub.c:4197 mm/slub.c:4204) [ 20.210741][ C3] fuse_request_alloc (fs/fuse/dev.c:143) [ 20.210747][ C3] __fuse_simple_request (fs/fuse/dev.c:655) [ 20.210755][ C3] fuse_file_put (fs/fuse/file.c:98 fs/fuse/file.c:115 fs/fuse/file.c:102) [ 20.210761][ C3] fuse_release (fs/fuse/file.c:383) [ 20.210768][ C3] __fput (fs/file_table.c:465) [ 20.210777][ C3] ? _raw_spin_unlock_irq (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/spinlock_api_smp.h:159 kernel/locking/spinlock.c:202) [ 20.210785][ C3] task_work_run (kernel/task_work.c:229 (discriminator 1)) [ 20.210795][ C3] ? __pfx_task_work_run (kernel/task_work.c:195) [ 20.210801][ C3] ? kmem_cache_free (mm/slub.c:4643 mm/slub.c:4745) [ 20.210806][ C3] ? refcount_dec_and_lock (lib/refcount.c:146) [ 20.210814][ C3] ? do_exit (./include/linux/task_work.h:40 kernel/exit.c:955) [ 20.210821][ C3] do_exit (kernel/exit.c:956) [ 20.210826][ C3] ? __pfx_do_exit (kernel/exit.c:897) [ 20.210831][ C3] ? do_group_exit (./include/linux/spinlock.h:402 kernel/exit.c:1101) [ 20.210835][ C3] ? __lock_release (kernel/locking/lockdep.c:5539) [ 20.210842][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:745) [ 20.210849][ C3] do_group_exit (kernel/exit.c:1085) [ 20.210856][ C3] __x64_sys_exit_group (kernel/exit.c:1113) [ 20.210861][ C3] x64_sys_call (arch/x86/entry/syscall_64.c:37) [ 20.210867][ C3] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 20.210872][ C3] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 20.210877][ C3] RIP: 0033:0x48991d [ 20.210882][ C3] Code: Unable to access opcode bytes at 0x4898f3. Code starting with the faulting instruction =========================================== [ 20.210885][ C3] RSP: 002b:00007ffe18dc2a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 20.210890][ C3] RAX: ffffffffffffffda RBX: 00000000005564b0 RCX: 000000000048991d [ 20.210893][ C3] RDX: 00000000000000e7 RSI: ffffffffffffffa8 RDI: 0000000000000000 [ 20.210896][ C3] RBP: 0000000000000000 R08: 0000000020d878a0 R09: 0000000000000000 [ 20.210899][ C3] R10: 0000000020d87320 R11: 0000000000000246 R12: 00000000005564b0 Finger prints: mark_lock_irq:mark_lock:mark_usage:__lock_acquire:_raw_spin_lock