bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:4a:25:7b:b4:00, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16371/1:b..l P6058/1:b..l P19422/1:b..l P5195/1:b..l P16070/1:b..l rcu: (detected by 0, t=10502 jiffies, g=163293, q=889 ncpus=1) task:syz-executor state:R running task stack:25416 pid:16070 tgid:16070 ppid:5813 task_flags:0x40050c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6908 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7092 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:389 [inline] zap_pte_range mm/memory.c:1959 [inline] zap_pmd_range mm/memory.c:2021 [inline] zap_pud_range mm/memory.c:2049 [inline] zap_p4d_range mm/memory.c:2070 [inline] unmap_page_range+0x152f/0x4840 mm/memory.c:2091 unmap_single_vma+0x153/0x240 mm/memory.c:2133 unmap_vmas+0x295/0x590 mm/memory.c:2171 exit_mmap+0x1ef/0xa30 mm/mmap.c:1302 __mmput+0x12a/0x410 kernel/fork.c:1174 mmput+0x67/0x80 kernel/fork.c:1197 exit_mm kernel/exit.c:581 [inline] do_exit+0x819/0x2b60 kernel/exit.c:964 do_group_exit+0xd5/0x2a0 kernel/exit.c:1118 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x86/0x4a0 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline] do_syscall_64+0x668/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc25c157917 RSP: 002b:00007ffc712ef650 EFLAGS: 00000202 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 000055558568f500 RCX: 00007fc25c157917 RDX: 0000000040000000 RSI: 00007ffc712ef6ac RDI: ffffffffffffffff RBP: 00007ffc712ef6ac R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 R13: 0000000000000003 R14: 00007ffc712ef908 R15: 0000000000000000 task:udevd state:R running task stack:24632 pid:5195 tgid:5195 ppid:1 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6908 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7235 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:unwind_next_frame+0xb85/0x1ea0 arch/x86/kernel/unwind_orc.c:606 Code: 00 0f 85 fa 0e 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 ba 0e 00 00 49 8d 7d 58 <49> c7 45 50 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 RSP: 0018:ffffc9000487f538 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91adaeae RDX: 1ffff9200090febf RSI: 1ffff9200090febe RDI: ffffc9000487f600 RBP: ffffc9000487f5f0 R08: ffffffff91adaeb2 R09: 0000000000000007 R10: 0000000000000200 R11: 000000000003a69b R12: ffffc9000487f5f8 R13: ffffc9000487f5a8 R14: ffffc9000487fca8 R15: ffffc9000487f5dc arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x162/0x1e0 mm/page_owner.c:165 __reset_page_owner+0x84/0x190 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1433 [inline] __free_frozen_pages+0x7e1/0x10d0 mm/page_alloc.c:2978 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4542 [inline] slab_alloc_node mm/slub.c:4869 [inline] __do_kmalloc_node mm/slub.c:5262 [inline] __kmalloc_noprof+0x2b9/0x850 mm/slub.c:5275 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45 tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:827 security_inode_getattr+0x116/0x280 security/security.c:1869 vfs_getattr fs/stat.c:259 [inline] vfs_statx_path fs/stat.c:299 [inline] vfs_statx+0x11f/0x3f0 fs/stat.c:356 vfs_fstatat+0x77/0xe0 fs/stat.c:373 __do_sys_newfstatat+0x9d/0x120 fs/stat.c:538 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5534511b0a RSP: 002b:00007ffd8c5ab058 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055c31e23a418 RCX: 00007f5534511b0a RDX: 00007ffd8c5ab060 RSI: 000055c31e228ef3 RDI: 00000000ffffff9c RBP: 000055c32fa4a148 R08: 00064cec619df4c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd8c5ab060 R14: 0000000000000000 R15: 00064cec619df4c0 task:syz.3.3140 state:R running task stack:23144 pid:19422 tgid:19422 ppid:11925 task_flags:0x40064c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6908 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7092 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:389 [inline] zap_pte_range mm/memory.c:1959 [inline] zap_pmd_range mm/memory.c:2021 [inline] zap_pud_range mm/memory.c:2049 [inline] zap_p4d_range mm/memory.c:2070 [inline] unmap_page_range+0x152f/0x4840 mm/memory.c:2091 unmap_single_vma+0x153/0x240 mm/memory.c:2133 unmap_vmas+0x295/0x590 mm/memory.c:2171 exit_mmap+0x1ef/0xa30 mm/mmap.c:1302 __mmput+0x12a/0x410 kernel/fork.c:1174 mmput+0x67/0x80 kernel/fork.c:1197 exit_mm kernel/exit.c:581 [inline] do_exit+0x819/0x2b60 kernel/exit.c:964 do_group_exit+0xd5/0x2a0 kernel/exit.c:1118 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop kernel/entry/common.c:98 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline] irqentry_exit+0x1f8/0x670 kernel/entry/common.c:219 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x0 RSP: 002b:00002000000001c8 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f65d4416090 RCX: 00007f65d419c799 RDX: 0000200000000280 RSI: 00002000000001c0 RDI: 0000000020000000 RBP: 00007f65d4232c99 R08: 0000200000000300 R09: 0000200000000300 R10: 00002000000002c0 R11: 0000000000000206 R12: 0000000000000000 R13: 00007f65d4416128 R14: 00007f65d4416090 R15: 00007ffe282de7c8 task:kworker/u10:4 state:R running task stack:23512 pid:6058 tgid:6058 ppid:2 task_flags:0x24248160 flags:0x00080000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6908 preempt_schedule_notrace+0x5f/0xd0 kernel/sched/core.c:7185 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13 rcu_is_watching+0x8e/0xc0 kernel/rcu/tree.c:753 rcu_read_lock include/linux/rcupdate.h:851 [inline] class_rcu_constructor include/linux/rcupdate.h:1193 [inline] unwind_next_frame+0x6fa/0x1ea0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x162/0x1e0 mm/page_owner.c:165 __reset_page_owner+0x84/0x190 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1433 [inline] __free_frozen_pages+0x7e1/0x10d0 mm/page_alloc.c:2978 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4542 [inline] slab_alloc_node mm/slub.c:4869 [inline] kmem_cache_alloc_noprof+0x241/0x6e0 mm/slub.c:4876 new_handle fs/jbd2/transaction.c:457 [inline] jbd2__journal_start+0x194/0x6a0 fs/jbd2/transaction.c:484 __ext4_journal_start_sb+0x382/0x6a0 fs/ext4/ext4_jbd2.c:114 __ext4_journal_start fs/ext4/ext4_jbd2.h:242 [inline] ext4_do_writepages+0xc1c/0x3f50 fs/ext4/inode.c:2907 ext4_writepages+0x347/0x790 fs/ext4/inode.c:3019 do_writepages+0x278/0x600 mm/page-writeback.c:2554 __writeback_single_inode+0x164/0x13c0 fs/fs-writeback.c:1750 writeback_sb_inodes+0x766/0x1c70 fs/fs-writeback.c:2042 __writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2118 wb_writeback+0x755/0xbe0 fs/fs-writeback.c:2229 wb_check_old_data_flush fs/fs-writeback.c:2333 [inline] wb_do_writeback fs/fs-writeback.c:2386 [inline] wb_workfn+0x8c6/0xc00 fs/fs-writeback.c:2414 process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275 process_scheduled_works kernel/workqueue.c:3358 [inline] worker_thread+0x5da/0xe40 kernel/workqueue.c:3439 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:syz-executor state:R running task stack:24264 pid:16371 tgid:16371 ppid:16365 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5295 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6908 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7092 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:389 [inline] lockref_get_not_dead+0x6a/0x80 lib/lockref.c:160 __legitimize_path+0x7f/0x1d0 fs/namei.c:869 legitimize_path fs/namei.c:879 [inline] try_to_unlazy+0x147/0x910 fs/namei.c:943 complete_walk+0x125/0x340 fs/namei.c:1059 path_lookupat+0x491/0xc40 fs/namei.c:2811 filename_lookup+0x202/0x590 fs/namei.c:2833 vfs_statx+0xff/0x3f0 fs/stat.c:353 vfs_fstatat+0x77/0xe0 fs/stat.c:373 __do_sys_newfstatat+0x9d/0x120 fs/stat.c:538 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f443b59adda RSP: 002b:00007ffc00fcae08 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f443b59adda RDX: 00007ffc00fcae30 RSI: 00007ffc00fcaec0 RDI: 00000000ffffff9c RBP: 00007ffc00fcaec0 R08: 00007ffc00fcbec0 R09: 00000000ffffffff R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffc00fcbf50 R13: 00007f443b632050 R14: 00000000000f6355 R15: 00007ffc00fcbf90 net_ratelimit: 7728 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:ab:3a:80:94:02, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:4a:25:7b:b4:00, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:ab:3a:80:94:02, vlan:0) net_ratelimit: 9449 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:4a:25:7b:b4:00, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:ab:3a:80:94:02, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)