====================================== | [ 692.635594][ C1] 1 lock held by mirror_gre_brid/10986: | [ 692.635698][ C1] #0: ffffffffb6377c00 (rcu_callback){....}-{0:0}, at: rcu_do_batch (./include/linux/rcupdate.h:300 (discriminator 2) kernel/rcu/tree.c:2611 (discriminator 2)) | [ 692.635851][ C1] | [ 692.635851][ C1] stack backtrace: [ 692.635958][ C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 692.635960][ C1] Call Trace: [ 692.635962][ C1] [ 692.635963][ C1] dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120) [ 692.635968][ C1] print_usage_bug.part.0.cold (kernel/locking/lockdep.c:4042) [ 692.635971][ C1] ? filter_irq_stacks (kernel/stacktrace.c:402) [ 692.635974][ C1] mark_lock_irq (kernel/locking/lockdep.c:4013 kernel/locking/lockdep.c:4056 kernel/locking/lockdep.c:4267) [ 692.635976][ C1] ? sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1061 (discriminator 37) arch/x86/kernel/apic/apic.c:1061 (discriminator 37)) [ 692.635978][ C1] ? asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697) [ 692.635981][ C1] ? save_trace (kernel/locking/lockdep.c:589) [ 692.635983][ C1] mark_lock (kernel/locking/lockdep.c:4753) [ 692.635985][ C1] mark_usage (kernel/locking/lockdep.c:4642) [ 692.635986][ C1] __lock_acquire (kernel/locking/lockdep.c:5191) [ 692.635988][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 692.635990][ C1] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 692.635994][ C1] lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 692.635996][ C1] ? tcf_mirred_release (./include/linux/spinlock.h:342 net/sched/act_mirred.c:78) act_mirred [ 692.635998][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 692.636000][ C1] ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 692.636001][ C1] _raw_spin_lock (./include/linux/spinlock_api_smp.h:158 (discriminator 1) kernel/locking/spinlock.c:158 (discriminator 1)) [ 692.636003][ C1] ? tcf_mirred_release (./include/linux/spinlock.h:342 net/sched/act_mirred.c:78) act_mirred [ 692.636005][ C1] tcf_mirred_release (./include/linux/spinlock.h:342 net/sched/act_mirred.c:78) act_mirred [ 692.636006][ C1] tcf_action_rcu_free (net/sched/act_api.c:367 net/sched/act_api.c:378) [ 692.636008][ C1] ? rcu_do_batch (./include/linux/rcupdate.h:310 (discriminator 2) kernel/rcu/tree.c:2619 (discriminator 2)) [ 692.636010][ C1] rcu_do_batch (kernel/rcu/tree.c:2617) [ 692.636013][ C1] ? trace_rcu_batch_end (./include/trace/events/rcu.h:714 (discriminator 19)) [ 692.636015][ C1] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 692.636016][ C1] ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 692.636018][ C1] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2)) [ 692.636019][ C1] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 692.636021][ C1] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:178 (discriminator 6) kernel/locking/spinlock.c:198 (discriminator 6)) [ 692.636022][ C1] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1)) [ 692.636024][ C1] rcu_core (kernel/rcu/tree.c:2869) [ 692.636026][ C1] handle_softirqs (kernel/softirq.c:622) [ 692.636028][ C1] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 692.636031][ C1] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 692.636032][ C1] ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1)) [ 692.636034][ C1] __irq_exit_rcu (kernel/softirq.c:656 kernel/softirq.c:496 kernel/softirq.c:735) [ 692.636036][ C1] irq_exit_rcu (kernel/softirq.c:752) [ 692.636037][ C1] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1061 (discriminator 37) arch/x86/kernel/apic/apic.c:1061 (discriminator 37)) [ 692.636039][ C1] [ 692.636039][ C1] [ 692.636040][ C1] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697) [ 692.636042][ C1] RIP: 0010:do_user_addr_fault (./arch/x86/include/asm/jump_label.h:37 ./include/linux/jump_label.h:201 ./include/linux/perf_event.h:1603 arch/x86/mm/fault.c:1281) [ 692.636046][ C1] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c4 0a 00 00 f6 85 91 00 00 00 02 0f 84 9a 03 00 00 e8 75 b9 45 00 fb 0f 1f 44 00 00 <48> 89 d8 48 89 d9 48 8d 95 88 00 00 00 83 e0 40 41 0f 95 c1 48 89 All code ======== 0: df 48 89 fisttps -0x77(%rax) 3: fa cli 4: 48 c1 ea 03 shr $0x3,%rdx 8: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) c: 0f 85 c4 0a 00 00 jne 0xad6 12: f6 85 91 00 00 00 02 testb $0x2,0x91(%rbp) 19: 0f 84 9a 03 00 00 je 0x3b9 1f: e8 75 b9 45 00 call 0x45b999 24: fb sti 25: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 2a:* 48 89 d8 mov %rbx,%rax <-- trapping instruction 2d: 48 89 d9 mov %rbx,%rcx 30: 48 8d 95 88 00 00 00 lea 0x88(%rbp),%rdx 37: 83 e0 40 and $0x40,%eax 3a: 41 0f 95 c1 setne %r9b 3e: 48 rex.W 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 89 d8 mov %rbx,%rax 3: 48 89 d9 mov %rbx,%rcx 6: 48 8d 95 88 00 00 00 lea 0x88(%rbp),%rdx d: 83 e0 40 and $0x40,%eax 10: 41 0f 95 c1 setne %r9b 14: 48 rex.W 15: 89 .byte 0x89 [ 692.636048][ C1] RSP: 0000:ffa0000000b6feb0 EFLAGS: 00000282 [ 692.636050][ C1] RAX: 00000000000353f3 RBX: 0000000000000007 RCX: ffffffffb2f57ffb [ 692.636052][ C1] RDX: ff11000013e3a340 RSI: ffffffffb5e01bcb RDI: ffffffffb586f6c0 [ 692.636053][ C1] RBP: ffa0000000b6ff48 R08: 0000000000000000 R09: 0000000000000000 [ 692.636053][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ff11000013e3a340 [ 692.636054][ C1] R13: 000055db56561c88 R14: ff11000010424840 R15: 0000000000000000 [ 692.636056][ C1] ? do_user_addr_fault (arch/x86/mm/fault.c:1279) [ 692.636058][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 692.636060][ C1] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 692.636062][ C1] ? irqentry_enter (./include/linux/irq-entry-common.h:108 ./include/linux/irq-entry-common.h:293 kernel/entry/common.c:113) [ 692.636063][ C1] exc_page_fault (arch/x86/mm/fault.c:1474 arch/x86/mm/fault.c:1527) [ 692.636065][ C1] asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:618) [ 692.636067][ C1] RIP: 0033:0x7fe3d7e9f45f [ 692.636069][ C1] Code: 16 00 49 8d 49 e0 48 89 c8 64 4c 8b 02 48 c1 e8 04 48 81 f9 ff 03 00 00 77 31 41 0f b7 14 40 66 85 d2 74 2d 48 89 f9 83 ea 01 <48> 89 77 08 48 c1 e9 0c 49 33 8c c0 98 00 00 00 48 89 0f 49 89 bc All code ======== 0: 16 (bad) 1: 00 49 8d add %cl,-0x73(%rcx) 4: 49 e0 48 rex.WB loopne 0x4f 7: 89 c8 mov %ecx,%eax 9: 64 4c 8b 02 mov %fs:(%rdx),%r8 d: 48 c1 e8 04 shr $0x4,%rax 11: 48 81 f9 ff 03 00 00 cmp $0x3ff,%rcx 18: 77 31 ja 0x4b 1a: 41 0f b7 14 40 movzwl (%r8,%rax,2),%edx 1f: 66 85 d2 test %dx,%dx 22: 74 2d je 0x51 24: 48 89 f9 mov %rdi,%rcx 27: 83 ea 01 sub $0x1,%edx 2a:* 48 89 77 08 mov %rsi,0x8(%rdi) <-- trapping instruction 2e: 48 c1 e9 0c shr $0xc,%rcx 32: 49 33 8c c0 98 00 00 xor 0x98(%r8,%rax,8),%rcx 39: 00 3a: 48 89 0f mov %rcx,(%rdi) 3d: 49 rex.WB 3e: 89 .byte 0x89 3f: bc .byte 0xbc Code starting with the faulting instruction =========================================== 0: 48 89 77 08 mov %rsi,0x8(%rdi) 4: 48 c1 e9 0c shr $0xc,%rcx 8: 49 33 8c c0 98 00 00 xor 0x98(%r8,%rax,8),%rcx f: 00 10: 48 89 0f mov %rcx,(%rdi) 13: 49 rex.WB 14: 89 .byte 0x89 15: bc .byte 0xbc [ 692.636070][ C1] RSP: 002b:00007fff8a5c33c8 EFLAGS: 00010206 [ 692.636071][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000055db56561c80 [ 692.636072][ C1] RDX: 000000000000000a RSI: c535eaf81080c816 RDI: 000055db56561c80 [ 692.636073][ C1] RBP: 00007fff8a5c3430 R08: 000055db56445840 R09: 0000000000000030 [ 692.636073][ C1] R10: 0000000000000031 R11: 0000000000000246 R12: 000055db56561c80 Finger prints: mark_lock_irq:mark_lock:mark_usage:__lock_acquire:_raw_spin_lock