bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:ed:e5:9a:5d:ac, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P5806/1:b..l P10447/1:b..l rcu: (detected by 0, t=10503 jiffies, g=38225, q=1162 ncpus=2) task:syz.2.1156 state:R running task stack:25928 pid:10447 tgid:10443 ppid:5827 task_flags:0x40044c flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_release+0x183/0x2f0 kernel/locking/lockdep.c:5891 Code: 0f c1 05 28 f5 0e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 7d b7 0e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 RSP: 0018:ffffc90003ca7280 EFLAGS: 00000206 RAX: f825e65bc6caa800 RBX: ffffffff8e3c15c0 RCX: ffffc90003ca728c RDX: 0000000000000002 RSI: ffffffff8dbc9fb7 RDI: ffffffff8bf46340 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000002 R11: 000000000003d4ed R12: ffffffff8169dd14 R13: 0000000000000206 R14: ffff888020b60000 R15: 0000000000000003 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0x3f9/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4151 [inline] slab_alloc_node mm/slub.c:4200 [inline] kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4207 kmem_alloc_batch+0x49/0x170 lib/debugobjects.c:371 fill_pool lib/debugobjects.c:403 [inline] debug_objects_fill_pool lib/debugobjects.c:725 [inline] debug_objects_fill_pool+0x228/0x500 lib/debugobjects.c:697 debug_object_activate+0x10b/0x4c0 lib/debugobjects.c:814 debug_rcu_head_queue kernel/rcu/rcu.h:224 [inline] __call_rcu_common.constprop.0+0x2c/0x9f0 kernel/rcu/tree.c:3067 slab_free_hook mm/slub.c:2353 [inline] slab_free mm/slub.c:4646 [inline] kmem_cache_free+0x173/0x4d0 mm/slub.c:4748 exit_mmap+0x511/0xb90 mm/mmap.c:1309 __mmput+0x12a/0x410 kernel/fork.c:1379 mmput+0x62/0x70 kernel/fork.c:1401 exit_mm kernel/exit.c:589 [inline] do_exit+0x9d1/0x2c30 kernel/exit.c:940 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102 get_signal+0x2673/0x26d0 kernel/signal.c:3034 arch_do_signal_or_restart+0x8f/0x7d0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x260 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fded0f8d169 RSP: 002b:00007fded1e6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: 0000000000010106 RBX: 00007fded11a6080 RCX: 00007fded0f8d169 RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 RBP: 00007fded100e990 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 00007fded11a6080 R15: 00007ffd35dc5208 task:syz-executor state:R running task stack:21624 pid:5806 tgid:5806 ppid:5804 task_flags:0x400100 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_release+0x183/0x2f0 kernel/locking/lockdep.c:5891 Code: 0f c1 05 28 f5 0e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 7d b7 0e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 RSP: 0018:ffffc90003107458 EFLAGS: 00000206 RAX: a72825da53e12d00 RBX: ffffffff8e3c15c0 RCX: ffffc90003107464 RDX: 0000000000000001 RSI: ffffffff8dbc9fb7 RDI: ffffffff8bf46340 RBP: 0000000000000001 R08: ffffffff911425f2 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8169dd14 R13: 0000000000000206 R14: ffff888029bc2440 R15: 0000000000000002 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0x3f9/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1262 [inline] __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2680 discard_slab mm/slub.c:2720 [inline] __put_partials+0x16d/0x1c0 mm/slub.c:3189 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4151 [inline] slab_alloc_node mm/slub.c:4200 [inline] kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4207 prepare_creds+0x2c/0x7d0 kernel/cred.c:212 copy_creds+0xa7/0xa50 kernel/cred.c:312 copy_process+0x10b1/0x91a0 kernel/fork.c:2293 kernel_clone+0xfc/0x960 kernel/fork.c:2844 __do_sys_clone3+0x212/0x290 kernel/fork.c:3148 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x260 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa8c4dc19c9 RSP: 002b:00007ffee484e538 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 00007fa8c4d8b370 RCX: 00007fa8c4dc19c9 RDX: 00007fa8c4d8b370 RSI: 0000000000000058 RDI: 00007ffee484e5a0 RBP: 00007ffee484e600 R08: 00007ffee484e600 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8 R13: 000000000000000b R14: 00007ffee484e5a0 R15: 00007ffee484ea70 task:kthreadd state:R running task stack:26232 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x62/0x350 kernel/locking/lockdep.c:5870 Code: b2 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 36 ee 0e 0f 82 74 02 00 00 8b 35 aa 65 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 e9 b1 0e 12 0f 85 c7 02 00 00 48 83 c4 RSP: 0018:ffffc900000774a8 EFLAGS: 00000206 RAX: 0000000000000046 RBX: ffffffff8e3c15c0 RCX: 000000007568e256 RDX: 0000000000000000 RSI: ffffffff8dbc9fb7 RDI: ffffffff8bf46340 RBP: 0000000000000002 R08: a0d9e9811d6e44ec R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1262 [inline] __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2680 discard_slab mm/slub.c:2720 [inline] __put_partials+0x16d/0x1c0 mm/slub.c:3189 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4151 [inline] slab_alloc_node mm/slub.c:4200 [inline] __do_kmalloc_node mm/slub.c:4330 [inline] __kmalloc_noprof+0x1d4/0x510 mm/slub.c:4343 kmalloc_noprof include/linux/slab.h:909 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] lsm_blob_alloc+0x68/0x90 security/security.c:684 lsm_task_alloc security/security.c:771 [inline] security_task_alloc+0x2d/0x260 security/security.c:3160 copy_process+0x24ba/0x91a0 kernel/fork.c:2411 kernel_clone+0xfc/0x960 kernel/fork.c:2844 kernel_thread+0xd4/0x120 kernel/fork.c:2906 create_kthread kernel/kthread.c:487 [inline] kthreadd+0x503/0x800 kernel/kthread.c:847 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 17974 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:ed:e5:9a:5d:ac, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 22097 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:ed:e5:9a:5d:ac, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:ed:e5:9a:5d:ac, vlan:0)