syzbot

bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:dd:f0:7c:d6:c3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P11491/1:b..l P5508/1:b..l P5215/1:b..l P5882/1:b..l
rcu: 	(detected by 1, t=10502 jiffies, g=39573, q=275 ncpus=1)
task:kworker/1:4     state:R  running task     stack:24568 pid:5882  tgid:5882  ppid:2      task_flags:0x4208060 flags:0x00004000
Workqueue: events_power_efficient gc_worker
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 preempt_schedule_notrace+0x62/0xe0 kernel/sched/core.c:7040
 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13
 rcu_is_watching+0x8e/0xc0 kernel/rcu/tree.c:737
 trace_lock_release include/trace/events/lock.h:69 [inline]
 lock_release+0x201/0x2f0 kernel/locking/lockdep.c:5877
 rcu_lock_release include/linux/rcupdate.h:341 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 gc_worker+0x99e/0x16e0 net/netfilter/nf_conntrack_core.c:1603
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
task:udevd           state:R  running task     stack:24664 pid:5215  tgid:5215  ppid:1      task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:869 [inline]
RIP: 0010:copy_creds+0x5db/0xa50 kernel/cred.c:345
Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 6c 04 00 00 4c 89 bb 98 00 00 00 4c 89 f7 e8 ca 77 00 00 e9 fa fa ff ff <e8> c0 33 34 00 e8 0b fc 19 00 31 ff 89 c3 89 c6 e8 90 2e 34 00 84
RSP: 0018:ffffc9000305fa18 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81867342
RDX: ffff88807d5e3c00 RSI: 0000000000000000 RDI: 0000000000000005
RBP: ffffffff8e289040 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880300908a8
R13: ffff8880300908b0 R14: ffff8880303db070 R15: 0000000000000000
 copy_process+0x10b1/0x91a0 kernel/fork.c:2293
 kernel_clone+0xfc/0x960 kernel/fork.c:2844
 __do_sys_clone+0xce/0x120 kernel/fork.c:2987
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe24a0fca12
RSP: 002b:00007ffeefca8d18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000558336d23301 RCX: 00007fe24a0fca12
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000558336d02910
R10: 00007fe24a5aaf50 R11: 0000000000000246 R12: 0000558336d260c0
R13: 0000000000000000 R14: 0000000000000000 R15: 0000558336d02910
 </TASK>
task:dhcpcd          state:R  running task     stack:25944 pid:5508  tgid:5508  ppid:1      task_flags:0x400140 flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:56 [inline]
RIP: 0010:unwind_next_frame+0x1655/0x20a0 arch/x86/kernel/unwind_orc.c:665
Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2e 05 00 00 49 8d 7d 10 49 8b 6d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa <48> c1 ea 03 80 3c 02 00 0f 85 01 05 00 00 49 8b 45 10 48 39 dd 0f
RSP: 0018:ffffc90003a57200 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: ffffc90003a57608 RCX: ffffffff9128be88
RDX: ffffc90003a57280 RSI: 0000000000000001 RDI: ffffc90003a57280
RBP: ffffc90003a50000 R08: ffffffff9128be8c R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000011f44 R12: ffffc90003a572c0
R13: ffffc90003a57270 R14: ffffc90003a57608 R15: ffffc90003a572a4
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x160/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1262 [inline]
 __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2725
 discard_slab mm/slub.c:2730 [inline]
 __put_partials+0x16d/0x1c0 mm/slub.c:3199
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4161 [inline]
 slab_alloc_node mm/slub.c:4210 [inline]
 kmem_cache_alloc_node_noprof+0x1d5/0x3b0 mm/slub.c:4262
 __alloc_skb+0x2b2/0x380 net/core/skbuff.c:658
 alloc_skb include/linux/skbuff.h:1340 [inline]
 alloc_skb_with_frags+0xe0/0x860 net/core/skbuff.c:6639
 sock_alloc_send_pskb+0x7fb/0x990 net/core/sock.c:2954
 unix_dgram_sendmsg+0x463/0x1910 net/unix/af_unix.c:2007
 sock_sendmsg_nosec net/socket.c:712 [inline]
 __sock_sendmsg net/socket.c:727 [inline]
 sock_write_iter+0x4fc/0x5b0 net/socket.c:1131
 do_iter_readv_writev+0x654/0x950 fs/read_write.c:825
 vfs_writev+0x353/0xdc0 fs/read_write.c:1055
 do_writev+0x295/0x330 fs/read_write.c:1101
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4b16a52e03
RSP: 002b:00007ffcc652e388 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
RAX: ffffffffffffffda RBX: 00007ffcc652e6e8 RCX: 00007f4b16a52e03
RDX: 0000000000000005 RSI: 00007ffcc652e3a0 RDI: 000000000000000a
RBP: 000000000000012c R08: 000000000000000a R09: 00007ffcc652e3e0
R10: 00007ffcc652e3e8 R11: 0000000000000246 R12: 000055c3e21b1650
R13: 000055c3c857df88 R14: 00000000ffffffff R15: 0000000000000001
 </TASK>
task:syz.3.1359      state:R  running task     stack:24968 pid:11491 tgid:11491 ppid:5851   task_flags:0x40044c flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x116f/0x5de0 kernel/sched/core.c:6767
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:24 [inline]
RIP: 0010:lock_acquire+0x4e/0x350 kernel/locking/lockdep.c:5829
Code: 48 8b 05 ad 66 0e 12 48 89 44 24 30 31 c0 66 90 65 8b 05 c9 66 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 92 bf ee 0e <0f> 82 74 02 00 00 8b 35 0a ef ee 0e 85 f6 0f 85 8d 00 00 00 48 8b
RSP: 0018:ffffc9000be56e30 EFLAGS: 00000297
RAX: 0000000000000001 RBX: ffffffff8e3bf440 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3bf440
RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 00000000000079c0 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x160/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1262 [inline]
 free_unref_folios+0x999/0x1630 mm/page_alloc.c:2782
 folios_put_refs+0x56f/0x740 mm/swap.c:992
 free_pages_and_swap_cache+0x245/0x4a0 mm/swap_state.c:267
 __tlb_batch_free_encoded_pages+0xf9/0x290 mm/mmu_gather.c:136
 tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:397 [inline]
 tlb_flush_mmu+0xe9/0x590 mm/mmu_gather.c:404
 zap_pte_range mm/memory.c:1770 [inline]
 zap_pmd_range mm/memory.c:1823 [inline]
 zap_pud_range mm/memory.c:1852 [inline]
 zap_p4d_range mm/memory.c:1873 [inline]
 unmap_page_range+0x1ed6/0x4390 mm/memory.c:1894
 unmap_single_vma+0x194/0x2a0 mm/memory.c:1940
 unmap_vmas+0x22c/0x490 mm/memory.c:1984
 exit_mmap+0x1b9/0xb90 mm/mmap.c:1284
 __mmput+0x12a/0x410 kernel/fork.c:1379
 mmput+0x62/0x70 kernel/fork.c:1401
 exit_mm kernel/exit.c:589 [inline]
 do_exit+0x9d1/0x2c30 kernel/exit.c:940
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102
 get_signal+0x2673/0x26d0 kernel/signal.c:3034
 arch_do_signal_or_restart+0x8f/0x7a0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 irqentry_exit_to_user_mode+0x13f/0x280 kernel/entry/common.c:231
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0033:0x7f4817e67d94
RSP: 002b:00007ffe45c55bf0 EFLAGS: 00000293
RAX: 00007f4817634fc0 RBX: 00007f4817609020 RCX: ffffffff81f4c679
RDX: ffffffff81b375ca RSI: ffffffff81f4c68b RDI: 00007f48176c96d8
RBP: 00007f48175ff010 R08: 00007f4817664370 R09: 00007f48181a2000
R10: 00007f48175ff008 R11: 0000000000000009 R12: 00007f48175ff008
R13: 0000000000000020 R14: 00007ffe45c55ce8 R15: 00007f48175ff008
 </TASK>
net_ratelimit: 6796 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:dd:f0:7c:d6:c3, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:dd:f0:7c:d6:c3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:dd:f0:7c:d6:c3, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
net_ratelimit: 8671 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:dd:f0:7c:d6:c3, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:dd:f0:7c:d6:c3, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:dd:f0:7c:d6:c3, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)