bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:44:00:9c:9a:05, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23778/1:b..l P19624/1:b..l P18471/1:b..l rcu: (detected by 0, t=10502 jiffies, g=119933, q=1356 ncpus=2) task:syz-executor state:R running task stack:22240 pid:18471 tgid:18471 ppid:18462 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:217 [inline] RIP: 0010:unwind_next_frame+0x1c9/0x2550 arch/x86/kernel/unwind_orc.c:510 Code: 08 4c 89 ff e8 e8 25 ba 00 4d 8b 27 48 83 f3 01 48 c7 c2 20 a5 c9 8b 49 29 dc 0f 84 b2 02 00 00 49 81 fc 00 00 00 81 0f 92 c0 <49> 81 fc 48 fc aa 8b 0f 93 c1 08 c1 0f 85 05 01 00 00 48 c7 c0 00 RSP: 0018:ffffc90004fdf0d8 EFLAGS: 00000206 RAX: 1ffff920009fbe00 RBX: 0000000000000001 RCX: 0000000080000001 RDX: ffffffff8bc9a520 RSI: ffffffff8c28b5c0 RDI: ffffffff8c28b580 RBP: dffffc0000000000 R08: ffffffff8176f256 R09: ffffffff8e95cca0 R10: ffffc90004fdf1f8 R11: ffffffff81b0f200 R12: ffffffff821b2d30 R13: 1ffff920009fbe35 R14: ffffc90004fdf1a8 R15: ffffc90004fdf1f0 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1402 [inline] __free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943 __slab_free+0x274/0x2c0 mm/slub.c:5612 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] kmem_cache_alloc_noprof+0x2bc/0x650 mm/slub.c:4905 anon_vma_chain_alloc mm/rmap.c:142 [inline] anon_vma_clone+0x3e5/0x9f0 mm/rmap.c:342 anon_vma_fork+0x16a/0x570 mm/rmap.c:404 dup_mmap+0x991/0x1d90 mm/mmap.c:1803 dup_mm kernel/fork.c:1534 [inline] copy_mm+0x13b/0x4a0 kernel/fork.c:1586 copy_process+0x1f1c/0x4440 kernel/fork.c:2264 kernel_clone+0x284/0x8f0 kernel/fork.c:2721 __do_sys_clone kernel/fork.c:2862 [inline] __se_sys_clone kernel/fork.c:2846 [inline] __x64_sys_clone+0x1b6/0x230 kernel/fork.c:2846 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2e4cdc58d2 RSP: 002b:00007ffc9759bce0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007ffc9759bce0 RCX: 00007f2e4cdc58d2 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 00007ffc9759be6c R08: 0000000000000000 R09: 0000000000000001 R10: 000055555e0937d0 R11: 0000000000000246 R12: 0000000000000001 R13: 00000000000927c0 R14: 00000000000a8808 R15: 00007ffc9759bec0 task:syz-executor state:R running task stack:22272 pid:19624 tgid:19624 ppid:1 task_flags:0x40054c flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 31 6e 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb 38 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b8 be 91 RSP: 0018:ffffc900060a7518 EFLAGS: 00000286 RAX: 4073c57e51828200 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 000000005a44979c RSI: ffffffff8e215738 RDI: ffffffff8c28b5e0 RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cca0 R10: ffffc900060a7678 R11: ffffffff81b0f200 R12: 0000000000000002 R13: ffffffff8e95cca0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xc3/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1402 [inline] __free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943 vfree+0x1d1/0x2f0 mm/vmalloc.c:3472 kcov_put kernel/kcov.c:442 [inline] kcov_close+0x28/0x50 kernel/kcov.c:543 __fput+0x44f/0xa60 fs/file_table.c:510 task_work_run+0x1d9/0x270 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x70f/0x22c0 kernel/exit.c:976 do_group_exit+0x21b/0x2d0 kernel/exit.c:1119 get_signal+0x1284/0x1330 kernel/signal.c:3037 arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0xa9/0x680 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x353/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbd1275d68e RSP: 002b:00007ffc33744d58 EFLAGS: 00000246 ORIG_RAX: 000000000000003d RAX: fffffffffffffe00 RBX: 000055555c46d500 RCX: 00007fbd1275d68e RDX: 0000000040000000 RSI: 00007ffc33744dfc RDI: ffffffffffffffff RBP: 00007ffc33744dfc R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000c5 R13: 000055555c480a00 R14: 00000000000a5cfa R15: 00007ffc33744e50 task:syz-executor state:R running task stack:26936 pid:23778 tgid:23778 ppid:17458 task_flags:0x40044c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7370 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3f/0x50 kernel/locking/spinlock.c:190 spin_unlock include/linux/spinlock.h:390 [inline] zap_pte_range mm/memory.c:1964 [inline] zap_pmd_range mm/memory.c:2020 [inline] zap_pud_range mm/memory.c:2048 [inline] zap_p4d_range mm/memory.c:2069 [inline] __zap_vma_range+0x3d26/0x4b50 mm/memory.c:2109 unmap_vmas+0x379/0x530 mm/memory.c:2178 exit_mmap+0x280/0x9e0 mm/mmap.c:1300 __mmput+0x118/0x430 kernel/fork.c:1178 exit_mm+0x1f6/0x2d0 kernel/exit.c:582 do_exit+0x6a2/0x22c0 kernel/exit.c:964 do_group_exit+0x21b/0x2d0 kernel/exit.c:1119 get_signal+0x1284/0x1330 kernel/signal.c:3037 arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop kernel/entry/common.c:98 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x2aa/0x8b0 kernel/entry/common.c:162 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fac79fc58d2 RSP: 002b:00007ffce26b5280 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00007ffce26b5280 RCX: 00007fac79fc58d2 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 00007ffce26b540c R08: 0000000000000000 R09: 0000000000000001 R10: 000055557ebc37d0 R11: 0000000000000246 R12: 0000000000000001 R13: 00000000000927c0 R14: 00000000000a8788 R15: 00007ffce26b5460 net_ratelimit: 10215 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:44:00:9c:9a:05, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:44:00:9c:9a:05, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) net_ratelimit: 13862 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:44:00:9c:9a:05, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:44:00:9c:9a:05, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)