bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6973/1:b..l P7003/1:b..l P6868/1:b..l P5210/1:b..l P8701/1:b..l rcu: (detected by 0, t=10502 jiffies, g=199265, q=822 ncpus=1) task:syz.4.5095 state:R running task stack:26712 pid:8701 tgid:8701 ppid:2113 task_flags:0x40044c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:7113 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1884 [inline] zap_pmd_range mm/memory.c:1946 [inline] zap_pud_range mm/memory.c:1975 [inline] zap_p4d_range mm/memory.c:1996 [inline] unmap_page_range+0xf71/0x41b0 mm/memory.c:2017 unmap_single_vma.constprop.0+0x153/0x240 mm/memory.c:2060 unmap_vmas+0x218/0x470 mm/memory.c:2104 exit_mmap+0x1b2/0xb90 mm/mmap.c:1280 __mmput+0x12a/0x410 kernel/fork.c:1133 mmput+0x62/0x70 kernel/fork.c:1156 exit_mm kernel/exit.c:582 [inline] do_exit+0x7c7/0x2bf0 kernel/exit.c:954 do_group_exit+0xd3/0x2a0 kernel/exit.c:1107 get_signal+0x2671/0x26d0 kernel/signal.c:3034 arch_do_signal_or_restart+0x8f/0x790 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x85/0x130 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x419/0x4b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7514f8eec9 RSP: 002b:00007ffcd4f4cea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000001 RBX: 00007f75151e5fa8 RCX: 00007f7514f8eec9 RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f75151e5fa8 RBP: 0000000000000000 R08: 0000000000000000 R09: 00000002d4f4d19f R10: 00007f75151e5fa0 R11: 0000000000000246 R12: 00007f75151e5fac R13: 00007f75151e5fa0 R14: 00000000000011f5 R15: 0000000000000004 task:udevd state:R running task stack:24744 pid:5210 tgid:5210 ppid:1 task_flags:0x400140 flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7256 irqentry_exit+0x36/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210 Code: 56 62 56 00 48 89 df 5b e9 cd 0d 5c 00 be 03 00 00 00 5b e9 92 75 e4 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 a8 6b bf 11 65 8b 05 b9 6b bf RSP: 0018:ffffc90003067ad0 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff822de1b2 RDX: ffff88807bcb3c80 RSI: 0000000000000000 RDI: 0000000000000001 RBP: 0000000000000008 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801f196680 R13: ffff88801f19667c R14: 0000000000000003 R15: dffffc0000000000 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] __page_table_check_zero+0x32e/0x5d0 mm/page_table_check.c:145 page_table_check_free include/linux/page_table_check.h:43 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0x7d0/0x1160 mm/page_alloc.c:2906 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4946 [inline] slab_alloc_node mm/slub.c:5245 [inline] kmem_cache_alloc_noprof+0x250/0x6e0 mm/slub.c:5252 getname_flags.part.0+0x4c/0x550 fs/namei.c:146 getname_flags+0x93/0xf0 include/linux/audit.h:345 getname include/linux/fs.h:2921 [inline] getname_maybe_null include/linux/fs.h:2928 [inline] getname_maybe_null include/linux/fs.h:2925 [inline] vfs_fstatat+0xe1/0xf0 fs/stat.c:370 __do_sys_newfstatat+0x97/0x120 fs/stat.c:542 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c96311b0a RSP: 002b:00007ffecc13a938 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 0000560572c70418 RCX: 00007f3c96311b0a RDX: 00007ffecc13a940 RSI: 0000560572c5eef3 RDI: 00000000ffffff9c RBP: 000056057df57148 R08: 0006404f92aaf649 R09: 00007f3c96a7f000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffecc13a940 R14: 0000000000000000 R15: 0006404f92aaf649 task:udevd state:R running task stack:24952 pid:6868 tgid:6868 ppid:5210 task_flags:0x40014c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7256 irqentry_exit+0x36/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:118 [inline] RIP: 0010:lock_acquire kernel/locking/lockdep.c:5844 [inline] RIP: 0010:lock_acquire+0xfc/0x350 kernel/locking/lockdep.c:5825 Code: d0 fe ff 5f 41 58 65 ff 0d 61 22 e3 11 0f 85 4f ff ff ff e8 76 e0 94 ff e9 45 ff ff ff 48 8b 74 24 68 48 89 df e8 d4 0a 8b 00 <8b> 0d e2 2a c9 0e 85 c9 0f 84 b1 00 00 00 65 8b 05 c7 63 e3 11 85 RSP: 0018:ffffc900037e76e0 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff8e1c3fa0 RCX: 0000000000000002 RDX: 0000000000000000 RSI: ffffffff816a55d1 RDI: fffffbfff1c387f4 RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 00000000000a4a0f R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1169 [inline] unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:559 __call_rcu_common.constprop.0+0xa5/0xa10 kernel/rcu/tree.c:3123 slab_free_hook mm/slub.c:2478 [inline] slab_free mm/slub.c:6566 [inline] kmem_cache_free+0x171/0x6c0 mm/slub.c:6676 exit_mmap+0x50a/0xb90 mm/mmap.c:1305 __mmput+0x12a/0x410 kernel/fork.c:1133 mmput+0x62/0x70 kernel/fork.c:1156 exit_mm kernel/exit.c:582 [inline] do_exit+0x7c7/0x2bf0 kernel/exit.c:954 do_group_exit+0xd3/0x2a0 kernel/exit.c:1107 __do_sys_exit_group kernel/exit.c:1118 [inline] __se_sys_exit_group kernel/exit.c:1116 [inline] __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1116 x64_sys_call+0x150b/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c962f16c5 RSP: 002b:00007ffecc13a858 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000056057df4e840 RCX: 00007f3c962f16c5 RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 RBP: 000056057df44910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffecc13a8a0 R14: 0000000000000000 R15: 0000000000000000 task:udevd state:R running task stack:26888 pid:7003 tgid:7003 ppid:5210 task_flags:0x40014c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7256 irqentry_exit+0x36/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:124 [inline] RIP: 0010:lock_acquire kernel/locking/lockdep.c:5844 [inline] RIP: 0010:lock_acquire+0x127/0x350 kernel/locking/lockdep.c:5825 Code: 0d e2 2a c9 0e 85 c9 0f 84 b1 00 00 00 65 8b 05 c7 63 e3 11 85 c0 0f 85 a2 00 00 00 65 48 8b 05 07 22 e3 11 8b 90 2c 0b 00 00 <85> d2 0f 85 8c 00 00 00 9c 8f 04 24 fa 48 c7 c7 60 27 91 8d e8 d0 RSP: 0018:ffffc90003f0f460 EFLAGS: 00000246 RAX: ffff888027c31e40 RBX: ffffffff8e1c3fa0 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff816a55d1 RDI: fffffbfff1c387f4 RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000002 R11: 0000000000010abe R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1169 [inline] unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:56 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 unpoison_slab_object mm/kasan/common.c:342 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:368 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4946 [inline] slab_alloc_node mm/slub.c:5245 [inline] kmem_cache_alloc_noprof+0x250/0x6e0 mm/slub.c:5252 kmem_alloc_batch+0x49/0x170 lib/debugobjects.c:371 fill_pool lib/debugobjects.c:403 [inline] debug_objects_fill_pool lib/debugobjects.c:725 [inline] debug_objects_fill_pool+0x23f/0x520 lib/debugobjects.c:697 debug_object_activate+0x10b/0x4c0 lib/debugobjects.c:814 debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline] __call_rcu_common.constprop.0+0x35/0xa10 kernel/rcu/tree.c:3108 slab_free_hook mm/slub.c:2478 [inline] slab_free mm/slub.c:6566 [inline] kmem_cache_free+0x171/0x6c0 mm/slub.c:6676 exit_mmap+0x50a/0xb90 mm/mmap.c:1305 __mmput+0x12a/0x410 kernel/fork.c:1133 mmput+0x62/0x70 kernel/fork.c:1156 exit_mm kernel/exit.c:582 [inline] do_exit+0x7c7/0x2bf0 kernel/exit.c:954 do_group_exit+0xd3/0x2a0 kernel/exit.c:1107 __do_sys_exit_group kernel/exit.c:1118 [inline] __se_sys_exit_group kernel/exit.c:1116 [inline] __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1116 x64_sys_call+0x150b/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3c962f16c5 RSP: 002b:00007ffecc13a858 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000056057df44500 RCX: 00007f3c962f16c5 RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 RBP: 000056057df44910 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffecc13a8a0 R14: 0000000000000000 R15: 0000000000000000 task:syz-executor state:R running task stack:25160 pid:6973 tgid:6973 ppid:5828 task_flags:0x40050c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:7113 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1884 [inline] zap_pmd_range mm/memory.c:1946 [inline] zap_pud_range mm/memory.c:1975 [inline] zap_p4d_range mm/memory.c:1996 [inline] unmap_page_range+0xf71/0x41b0 mm/memory.c:2017 unmap_single_vma.constprop.0+0x153/0x240 mm/memory.c:2060 unmap_vmas+0x218/0x470 mm/memory.c:2104 exit_mmap+0x1b2/0xb90 mm/mmap.c:1280 __mmput+0x12a/0x410 kernel/fork.c:1133 mmput+0x62/0x70 kernel/fork.c:1156 exit_mm kernel/exit.c:582 [inline] do_exit+0x7c7/0x2bf0 kernel/exit.c:954 do_group_exit+0xd3/0x2a0 kernel/exit.c:1107 get_signal+0x2671/0x26d0 kernel/signal.c:3034 arch_do_signal_or_restart+0x8f/0x790 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x85/0x130 kernel/entry/common.c:40 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x419/0x4b0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f299fb84fd3 RSP: 002b:00007ffcee62e1b8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 0000000000001b76 RCX: 00007f299fb84fd3 RDX: 0000000040000000 RSI: 00007ffcee62e1cc RDI: 00000000ffffffff RBP: 00007ffcee62e1cc R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 net_ratelimit: 7124 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:c9:57:4e:36:65, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:c9:57:4e:36:65, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:c9:57:4e:36:65, vlan:0) net_ratelimit: 9392 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:c9:57:4e:36:65, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:c9:57:4e:36:65, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)