bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:57:18:e5:56:1c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10106/1:b..l P10089/1:b..l
rcu: (detected by 1, t=10503 jiffies, g=28601, q=179 ncpus=2)
task:syz.0.1343 state:R running task stack:27264 pid:10089 tgid:10086 ppid:5819 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7078
irqentry_exit+0x36/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_is_held_type+0x114/0x150 kernel/locking/lockdep.c:5926
Code: d8 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f cc cc cc cc 45 31 ed eb b5 90 0f 0b 90 48 c7 c7 e0 d9 6c 8b e8
RSP: 0018:ffffc9000cc775b8 EFLAGS: 00000286
RAX: 0000000000000001 RBX: 000000000003af82 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8b6cdce0 RDI: ffffffff8bd1ede0
RBP: ffff88813fffa620 R08: 0000000000000007 R09: 000000000007ffff
R10: 0000000000000007 R11: 0000000000000002 R12: ffff88801be80000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
lookup_page_ext mm/page_ext.c:254 [inline]
page_ext_get+0x132/0x310 mm/page_ext.c:526
__page_table_check_zero+0xbf/0x360 mm/page_table_check.c:148
page_table_check_free include/linux/page_table_check.h:41 [inline]
free_pages_prepare mm/page_alloc.c:1128 [inline]
free_unref_page+0x6c8/0x1080 mm/page_alloc.c:2659
__put_partials+0x14c/0x170 mm/slub.c:3157
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
kasan_slab_alloc include/linux/kasan.h:250 [inline]
slab_post_alloc_hook mm/slub.c:4119 [inline]
slab_alloc_node mm/slub.c:4168 [inline]
kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4175
__kernfs_new_node+0xd3/0x890 fs/kernfs/dir.c:624
kernfs_new_node+0x186/0x240 fs/kernfs/dir.c:700
__kernfs_create_file+0x53/0x350 fs/kernfs/file.c:1034
sysfs_add_file_mode_ns+0x1ff/0x3b0 fs/sysfs/file.c:313
create_files fs/sysfs/group.c:76 [inline]
internal_create_group+0x56c/0xf10 fs/sysfs/group.c:183
internal_create_groups+0x9d/0x150 fs/sysfs/group.c:223
device_add_groups drivers/base/core.c:2812 [inline]
device_add_attrs drivers/base/core.c:2876 [inline]
device_add+0x6d3/0x1a70 drivers/base/core.c:3619
netdev_register_kobject+0x183/0x3a0 net/core/net-sysfs.c:2139
register_netdevice+0x1473/0x1e90 net/core/dev.c:10599
tun_set_iff drivers/net/tun.c:2862 [inline]
__tun_chr_ioctl+0x25a6/0x4760 drivers/net/tun.c:3131
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:906 [inline]
__se_sys_ioctl fs/ioctl.c:892 [inline]
__x64_sys_ioctl+0x190/0x200 fs/ioctl.c:892
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f27b8585d29
RSP: 002b:00007f27b9454038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f27b8776080 RCX: 00007f27b8585d29
RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004
RBP: 00007f27b8601b08 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f27b8776080 R15: 00007fffc05c5e88
task:syz.5.1348 state:R running task stack:26048 pid:10106 tgid:10106 ppid:7977 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6935
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
unwind_next_frame+0x1776/0x20c0 arch/x86/kernel/unwind_orc.c:672
arch_stack_walk+0x95/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
save_stack+0x162/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x8d/0x400 mm/page_owner.c:297
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1127 [inline]
free_unref_page+0x661/0x1080 mm/page_alloc.c:2659
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
kasan_slab_alloc include/linux/kasan.h:250 [inline]
slab_post_alloc_hook mm/slub.c:4119 [inline]
slab_alloc_node mm/slub.c:4168 [inline]
kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4175
mt_alloc_one lib/maple_tree.c:176 [inline]
mas_alloc_nodes+0x18b/0x8b0 lib/maple_tree.c:1253
mas_node_count_gfp+0x105/0x130 lib/maple_tree.c:1335
mas_preallocate+0x53f/0xce0 lib/maple_tree.c:5545
vma_iter_prealloc mm/vma.h:349 [inline]
__split_vma+0x474/0x1160 mm/vma.c:447
split_vma mm/vma.c:510 [inline]
vma_modify.constprop.0+0x2ed/0x3b0 mm/vma.c:1528
vma_modify_flags+0x209/0x2a0 mm/vma.c:1546
mprotect_fixup+0x2c2/0xbe0 mm/mprotect.c:666
do_mprotect_pkey+0x981/0xcf0 mm/mprotect.c:840
__do_sys_mprotect mm/mprotect.c:861 [inline]
__se_sys_mprotect mm/mprotect.c:858 [inline]
__x64_sys_mprotect+0x78/0xc0 mm/mprotect.c:858
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fadee185de7
RSP: 002b:00007ffd57effa48 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
RAX: ffffffffffffffda RBX: 00007fadeefb86c0 RCX: 00007fadee185de7
RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fadeef99000
RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd57effba0
R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
rcu: rcu_preempt kthread starved for 8190 jiffies! g28601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6848
schedule_timeout+0x124/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045
rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:218 [inline]
RIP: 0010:unwind_next_frame+0x27e/0x20c0 arch/x86/kernel/unwind_orc.c:494
Code: 80 b3 00 48 8b 54 24 30 8b 4c 24 28 8b 74 24 20 44 8b 5c 24 18 8b 14 95 a0 54 ab 91 89 cf 48 8d 04 7f 48 8d 84 00 54 89 eb 90 <83> c2 01 48 3d 9e 54 ab 91 0f 83 c1 07 00 00 41 89 d0 4f 8d 04 40
RSP: 0018:ffffc900001562d8 EFLAGS: 00000246
RAX: ffffffff90f29460 RBX: 0000000000000001 RCX: 0000000000012c82
RDX: 0000000000012c8e RSI: 00000000000a6001 RDI: 0000000000012c82
RBP: ffffc90000156390 R08: 0000000000000000 R09: ffffffff90f293d4
R10: ffffc90000156348 R11: 0000000000005c57 R12: ffffc90000156398
R13: ffffc90000156348 R14: ffffc9000015637d R15: ffffffff815c57b9
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e712ff8 CR3: 000000000df7e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
arch_stack_walk+0x95/0x100 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
kasan_save_track+0x14/0x30 mm/kasan/common.c:68
unpoison_slab_object mm/kasan/common.c:319 [inline]
__kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:345
kasan_slab_alloc include/linux/kasan.h:250 [inline]
slab_post_alloc_hook mm/slub.c:4119 [inline]
slab_alloc_node mm/slub.c:4168 [inline]
kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4175
skb_clone+0x190/0x3f0 net/core/skbuff.c:2084
dev_queue_xmit_nit+0x38f/0xbc0 net/core/dev.c:2315
xmit_one net/core/dev.c:3586 [inline]
dev_hard_start_xmit+0x283/0x7b0 net/core/dev.c:3606
__dev_queue_xmit+0x7f0/0x43e0 net/core/dev.c:4434
dev_queue_xmit include/linux/netdevice.h:3168 [inline]
br_dev_queue_push_xmit+0x274/0x8a0 net/bridge/br_forward.c:53
br_nf_dev_queue_xmit+0x6db/0x2a20 net/bridge/br_netfilter_hooks.c:951
NF_HOOK include/linux/netfilter.h:314 [inline]
NF_HOOK include/linux/netfilter.h:308 [inline]
br_nf_post_routing+0x8ee/0x11b0 net/bridge/br_netfilter_hooks.c:997
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626
nf_hook+0x474/0x7d0 include/linux/netfilter.h:269
NF_HOOK include/linux/netfilter.h:312 [inline]
br_forward_finish+0xcd/0x130 net/bridge/br_forward.c:66
br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1198
br_nf_forward_finish+0x66a/0xba0 net/bridge/br_netfilter_hooks.c:693
NF_HOOK include/linux/netfilter.h:314 [inline]
NF_HOOK include/linux/netfilter.h:308 [inline]
br_nf_forward_ip.part.0+0x610/0x820 net/bridge/br_netfilter_hooks.c:747
br_nf_forward_ip net/bridge/br_netfilter_hooks.c:707 [inline]
br_nf_forward+0xf11/0x1bd0 net/bridge/br_netfilter_hooks.c:804
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626
nf_hook+0x474/0x7d0 include/linux/netfilter.h:269
NF_HOOK include/linux/netfilter.h:312 [inline]
__br_forward+0x1be/0x5b0 net/bridge/br_forward.c:115
deliver_clone+0x5b/0xa0 net/bridge/br_forward.c:131
maybe_deliver+0xa7/0x120 net/bridge/br_forward.c:190
br_flood+0x17e/0x5c0 net/bridge/br_forward.c:236
br_handle_frame_finish+0xda5/0x1c80 net/bridge/br_input.c:215
br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1198
br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154
NF_HOOK include/linux/netfilter.h:314 [inline]
br_nf_pre_routing_ipv6+0x3ce/0x8c0 net/bridge/br_netfilter_ipv6.c:184
br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:536
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]
br_handle_frame+0x9eb/0x1490 net/bridge/br_input.c:424
__netif_receive_skb_core.constprop.0+0xa76/0x4470 net/core/dev.c:5566
__netif_receive_skb_one_core+0xb1/0x1e0 net/core/dev.c:5670
__netif_receive_skb+0x1d/0x160 net/core/dev.c:5785
process_backlog+0x443/0x15f0 net/core/dev.c:6117
__napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6883
napi_poll net/core/dev.c:6952 [inline]
net_rx_action+0xa94/0x1010 net/core/dev.c:7074
handle_softirqs+0x213/0x8f0 kernel/softirq.c:561
run_ksoftirqd kernel/softirq.c:950 [inline]
run_ksoftirqd+0x3a/0x60 kernel/softirq.c:942
smpboot_thread_fn+0x661/0xa30 kernel/smpboot.c:164
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
net_ratelimit: 21254 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:57:18:e5:56:1c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:57:18:e5:56:1c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:57:18:e5:56:1c, vlan:0)
net_ratelimit: 27156 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:57:18:e5:56:1c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:57:18:e5:56:1c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:57:18:e5:56:1c, vlan:0)