bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7279/1:b..l P7281/1:b..l P5837/1:b..l P7415/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=23861, q=1055 ncpus=1)
task:syz.1.369 state:R running task stack:25096 pid:7415 tgid:7414 ppid:5844 task_flags:0x480140 flags:0x00004006
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5397 [inline]
__schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
irqentry_exit+0x36/0x90 kernel/entry/common.c:307
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_next_frame+0x1689/0x20a0 arch/x86/kernel/unwind_orc.c:665
Code: 01 05 00 00 49 8b 45 10 48 39 dd 0f 87 00 f8 ff ff 48 39 d8 0f 86 f7 f7 ff ff 48 8d 53 08 48 39 d0 0f 93 c1 48 39 d5 0f 92 c0 <84> c1 0f 84 df f7 ff ff 48 39 5c 24 10 0f 82 d4 f7 ff ff 48 b8 00
RSP: 0018:ffffc90003427160 EFLAGS: 00000297
RAX: ffffc90003428001 RBX: ffffc90003427de0 RCX: ffffc90003428001
RDX: ffffc90003427de8 RSI: ffffc90003427db8 RDI: ffffc900034271e0
RBP: ffffc90003420000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 00000000000850df R12: ffffc90003427220
R13: ffffc900034271d0 R14: ffffc90003427de0 R15: ffffc90003427204
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:548
__call_rcu_common.constprop.0+0xa5/0xa10 kernel/rcu/tree.c:3094
kernfs_put.part.0+0x162/0x640 fs/kernfs/dir.c:591
kernfs_put fs/kernfs/dir.c:1724 [inline]
kernfs_remove_by_name_ns+0xdf/0x110 fs/kernfs/dir.c:1718
kernfs_remove_by_name include/linux/kernfs.h:633 [inline]
remove_files+0x96/0x1c0 fs/sysfs/group.c:28
sysfs_remove_group+0x8b/0x180 fs/sysfs/group.c:322
sysfs_remove_groups fs/sysfs/group.c:346 [inline]
sysfs_remove_groups+0x60/0xa0 fs/sysfs/group.c:338
device_remove_groups drivers/base/core.c:2846 [inline]
device_remove_attrs+0x203/0x290 drivers/base/core.c:2982
device_del+0x38e/0x9f0 drivers/base/core.c:3880
unregister_netdevice_many_notify+0x1903/0x2700 net/core/dev.c:12112
unregister_netdevice_many net/core/dev.c:12140 [inline]
unregister_netdevice_queue+0x305/0x3f0 net/core/dev.c:11984
unregister_netdevice include/linux/netdevice.h:3379 [inline]
_cfg80211_unregister_wdev+0x64b/0x830 net/wireless/core.c:1256
ieee80211_remove_interfaces+0x34e/0x720 net/mac80211/iface.c:2362
ieee80211_unregister_hw+0x55/0x3a0 net/mac80211/main.c:1683
mac80211_hwsim_del_radio drivers/net/wireless/virtual/mac80211_hwsim.c:5671 [inline]
remove_user_radios drivers/net/wireless/virtual/mac80211_hwsim.c:6471 [inline]
mac80211_hwsim_netlink_notify+0x2ea/0x8e0 drivers/net/wireless/virtual/mac80211_hwsim.c:6485
notifier_call_chain+0xb9/0x410 kernel/notifier.c:85
blocking_notifier_call_chain kernel/notifier.c:380 [inline]
blocking_notifier_call_chain+0x69/0xa0 kernel/notifier.c:368
netlink_release+0x186b/0x2020 net/netlink/af_netlink.c:763
__sock_release+0xb0/0x270 net/socket.c:647
sock_close+0x1c/0x30 net/socket.c:1391
__fput+0x402/0xb70 fs/file_table.c:465
task_work_run+0x14d/0x240 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop+0xeb/0x110 kernel/entry/common.c:114
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
do_syscall_64+0x3f6/0x490 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fac10f8e9a9
RSP: 002b:00007fac11e0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007fac111b5fa0 RCX: 00007fac10f8e9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
RBP: 00007fac11010d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fac111b5fa0 R15: 00007ffdd94afed8
</TASK>
task:udevd state:R running task stack:27192 pid:5837 tgid:5837 ppid:5216 task_flags:0x40014c flags:0x00004002
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5397 [inline]
__schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
irqentry_exit+0x36/0x90 kernel/entry/common.c:307
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline]
RIP: 0010:lock_release+0x45/0x2f0 kernel/locking/lockdep.c:5882
Code: 69 23 37 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 82 23 37 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 8b 50 11 0f <0f> 82 b1 01 00 00 8b 3d 53 82 11 0f 85 ff 0f 84 25 01 00 00 65 8b
RSP: 0018:ffffc90003f2f760 EFLAGS: 00000297
RAX: 0000000000000000 RBX: ffffffff8e5c4c80 RCX: ffffc90003f30001
RDX: 0000000000000000 RSI: ffffffff816a9ac4 RDI: ffffffff8e5c4c80
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000007c1e R12: ffffffff816a9ac4
R13: ffffc90003f2f818 R14: ffffc90003f2fee0 R15: ffffc90003f2f84c
rcu_lock_release include/linux/rcupdate.h:341 [inline]
rcu_read_unlock include/linux/rcupdate.h:871 [inline]
class_rcu_destructor include/linux/rcupdate.h:1155 [inline]
unwind_next_frame+0x3f9/0x20a0 arch/x86/kernel/unwind_orc.c:479
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:548
slab_free_hook mm/slub.c:2342 [inline]
slab_free mm/slub.c:4643 [inline]
kmem_cache_free+0x15a/0x4d0 mm/slub.c:4745
exit_mmap+0x511/0xb90 mm/mmap.c:1309
__mmput+0x12a/0x410 kernel/fork.c:1121
mmput+0x62/0x70 kernel/fork.c:1144
exit_mm kernel/exit.c:581 [inline]
do_exit+0x7c4/0x2bd0 kernel/exit.c:952
do_group_exit+0xd3/0x2a0 kernel/exit.c:1105
__do_sys_exit_group kernel/exit.c:1116 [inline]
__se_sys_exit_group kernel/exit.c:1114 [inline]
__x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1114
x64_sys_call+0x1530/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1429cf16c5
RSP: 002b:00007ffef1248b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000055752cfd44e0 RCX: 00007f1429cf16c5
RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000
RBP: 000055752cfad910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffef1248bb0 R14: 0000000000000000 R15: 0000000000000000
</TASK>
task:syz.0.337 state:R running task stack:23064 pid:7281 tgid:7281 ppid:5842 task_flags:0x400640 flags:0x00004002
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5397 [inline]
__schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
irqentry_exit+0x36/0x90 kernel/entry/common.c:307
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:debug_lockdep_rcu_enabled+0x2e/0x40 kernel/rcu/update.c:322
Code: 8b 05 96 ac 26 05 85 c0 74 20 8b 05 70 dd 26 05 85 c0 74 16 65 48 8b 05 58 7e 4c 08 8b 80 ec 0a 00 00 85 c0 0f 94 c0 0f b6 c0 <e9> 8d f1 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90
RSP: 0018:ffffc90003cde550 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffffc90003cdee58 RCX: ffffc90003ce0001
RDX: ffffc90003cdee60 RSI: ffffc90003cdee28 RDI: ffffc90003cde5d8
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 000000000000fb4d R12: ffffc90003cde618
R13: ffffc90003cde5c8 R14: ffffc90003cdee58 R15: ffffc90003cde5fc
rcu_read_unlock include/linux/rcupdate.h:869 [inline]
class_rcu_destructor include/linux/rcupdate.h:1155 [inline]
unwind_next_frame+0x3de/0x20a0 arch/x86/kernel/unwind_orc.c:479
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x160/0x1f0 mm/page_owner.c:156
__set_page_owner+0x91/0x550 mm/page_owner.c:329
set_page_owner include/linux/page_owner.h:32 [inline]
post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1704
prep_new_page mm/page_alloc.c:1712 [inline]
get_page_from_freelist+0x1321/0x3890 mm/page_alloc.c:3669
__alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:4959
alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2419
folio_alloc_mpol_noprof+0x36/0x2f0 mm/mempolicy.c:2438
shmem_alloc_folio+0x135/0x160 mm/shmem.c:1851
shmem_alloc_and_add_folio+0x499/0xc20 mm/shmem.c:1890
shmem_get_folio_gfp+0x67f/0x1600 mm/shmem.c:2536
shmem_get_folio mm/shmem.c:2642 [inline]
shmem_write_begin+0x160/0x300 mm/shmem.c:3292
generic_perform_write+0x3d0/0x930 mm/filemap.c:4112
shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3467
__kernel_write_iter+0x317/0xa90 fs/read_write.c:619
dump_emit_page fs/coredump.c:1112 [inline]
dump_user_range+0x41f/0xb60 fs/coredump.c:1186
elf_core_dump+0x288a/0x3a90 fs/binfmt_elf.c:2075
do_coredump+0x399c/0x4f10 fs/coredump.c:950
get_signal+0x22e3/0x26d0 kernel/signal.c:3019
arch_do_signal_or_restart+0x8f/0x790 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
irqentry_exit_to_user_mode+0x12a/0x270 kernel/entry/common.c:184
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x0
RSP: 002b:0000000000000010 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fcb2e9b6160 RCX: 00007fcb2e78e9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020003b46
RBP: 00007fcb2e810d69 R08: 0000000000000ac4 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007fcb2e9b6160 R15: 00007ffcc977fe88
</TASK>
task:syz.0.337 state:R running task stack:23288 pid:7279 tgid:7279 ppid:5842 task_flags:0x400640 flags:0x00004002
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5397 [inline]
__schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
irqentry_exit+0x36/0x90 kernel/entry/common.c:307
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x62/0x350 kernel/locking/lockdep.c:5875
Code: 1c 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 d2 49 11 0f 0f 82 74 02 00 00 8b 35 9a 7b 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 1c 37 12 0f 85 c7 02 00 00 48 83 c4
RSP: 0018:ffffc90004aee298 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8e5c4c80 RCX: 000000000f5b292f
RDX: 0000000000000000 RSI: ffffffff8de04ada RDI: ffffffff8c155ee0
RBP: 0000000000000002 R08: e0d1dae0968818e2 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
rcu_read_lock include/linux/rcupdate.h:841 [inline]
class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479
arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x160/0x1f0 mm/page_owner.c:156
__set_page_owner+0x91/0x550 mm/page_owner.c:329
set_page_owner include/linux/page_owner.h:32 [inline]
post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1704
prep_new_page mm/page_alloc.c:1712 [inline]
get_page_from_freelist+0x1321/0x3890 mm/page_alloc.c:3669
__alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:4959
alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2419
folio_alloc_mpol_noprof+0x36/0x2f0 mm/mempolicy.c:2438
shmem_alloc_folio+0x135/0x160 mm/shmem.c:1851
shmem_alloc_and_add_folio+0x499/0xc20 mm/shmem.c:1890
shmem_get_folio_gfp+0x67f/0x1600 mm/shmem.c:2536
shmem_fault+0x1fe/0xa30 mm/shmem.c:2737
__do_fault+0x10d/0x490 mm/memory.c:5169
do_read_fault mm/memory.c:5590 [inline]
do_fault mm/memory.c:5724 [inline]
do_pte_missing mm/memory.c:4251 [inline]
handle_pte_fault mm/memory.c:6069 [inline]
__handle_mm_fault+0x3c2a/0x5490 mm/memory.c:6212
handle_mm_fault+0x589/0xd10 mm/memory.c:6381
faultin_page mm/gup.c:1186 [inline]
__get_user_pages+0x589/0x3b80 mm/gup.c:1488
__get_user_pages_locked mm/gup.c:1754 [inline]
get_dump_page+0x257/0x3d0 mm/gup.c:2258
dump_user_range+0x195/0xb60 fs/coredump.c:1180
elf_core_dump+0x288a/0x3a90 fs/binfmt_elf.c:2075
do_coredump+0x399c/0x4f10 fs/coredump.c:950
get_signal+0x22e3/0x26d0 kernel/signal.c:3019
arch_do_signal_or_restart+0x8f/0x790 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
irqentry_exit_to_user_mode+0x12a/0x270 kernel/entry/common.c:184
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x0
RSP: 002b:0000000000000010 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fcb2e9b6080 RCX: 00007fcb2e78e9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020003b46
RBP: 00007fcb2e810d69 R08: 0000000000000ac4 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcb2e9b6080 R15: 00007ffcc977fe88
</TASK>
net_ratelimit: 5208 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:28:d2:45:99:9e, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
net_ratelimit: 10697 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:28:d2:45:99:9e, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:28:d2:45:99:9e, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)