bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21314/1:b..l P21325/1:b..l rcu: (detected by 1, t=10570 jiffies, g=120805, q=2681 ncpus=2) task:syz.1.3444 state:R running task stack:26888 pid:21325 tgid:21322 ppid:20132 task_flags:0x40044c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7276 preempt_schedule_common+0x7f/0xd0 kernel/sched/core.c:7455 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline] _raw_spin_unlock+0x41/0x50 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] zap_pte_range mm/memory.c:2095 [inline] zap_pmd_range mm/memory.c:2151 [inline] zap_pud_range mm/memory.c:2179 [inline] zap_p4d_range mm/memory.c:2200 [inline] __zap_vma_range+0x40e1/0x4f80 mm/memory.c:2240 unmap_vmas+0x390/0x550 mm/memory.c:2309 exit_mmap+0x293/0x9f0 mm/mmap.c:1315 __mmput+0x118/0x420 kernel/fork.c:1193 exit_mm+0x221/0x2d0 kernel/exit.c:617 do_exit+0x6cd/0x2360 kernel/exit.c:999 do_group_exit+0x22d/0x2f0 kernel/exit.c:1154 get_signal+0x121b/0x12c0 kernel/signal.c:3051 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f19e4f9e159 RSP: 002b:00007f19e5f4e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 00007f19e5225fa8 RCX: 00007f19e4f9e159 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f19e5225fa8 RBP: 00007f19e5225fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f19e5226038 R14: 00007ffcba403d10 R15: 00007ffcba403df8 task:syz.2.3442 state:R running task stack:27768 pid:21314 tgid:21310 ppid:19444 task_flags:0x40054c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5526 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7276 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7598 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x910 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947 Code: ff ff ff e8 f0 09 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 c5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d c7 3f da RSP: 0018:ffffc90005f2f3a8 EFLAGS: 00000282 RAX: 5750b538db78f000 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 00000000acb1bb44 RSI: ffffffff8e6fe025 RDI: ffffffff8c6d9c80 RBP: ffff88802bc58000 R08: ffffffff8177f1df R09: 0000000000000000 R10: ffffc90005f2f538 R11: fffff52000be5ea9 R12: ffffffff8ed5c8a0 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] class_rcu_constructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:183 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:338 reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2962 __slab_free+0x274/0x2c0 mm/slub.c:5815 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x2b9/0x600 mm/slub.c:5010 taskstats_tgid_alloc kernel/taskstats.c:563 [inline] taskstats_exit+0x19e/0xe10 kernel/taskstats.c:602 do_exit+0x6ad/0x2360 kernel/exit.c:981 do_group_exit+0x22d/0x2f0 kernel/exit.c:1154 get_signal+0x121b/0x12c0 kernel/signal.c:3051 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe3d7d9e159 RSP: 002b:00007fe3d8bb0fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 RAX: ffffffffffffffa3 RBX: 0000000000000007 RCX: 00007fe3d7d9e159 RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000001f RBP: 00007fe3d7e3503b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe3d8026128 R14: 00007fe3d8026090 R15: 00007ffd0285b808