bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7279/1:b..l P7281/1:b..l P5837/1:b..l P7415/1:b..l
rcu: 	(detected by 0, t=10502 jiffies, g=23861, q=1055 ncpus=1)
task:syz.1.369       state:R  running task     stack:25096 pid:7415  tgid:7414  ppid:5844   task_flags:0x480140 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
 irqentry_exit+0x36/0x90 kernel/entry/common.c:307
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_next_frame+0x1689/0x20a0 arch/x86/kernel/unwind_orc.c:665
Code: 01 05 00 00 49 8b 45 10 48 39 dd 0f 87 00 f8 ff ff 48 39 d8 0f 86 f7 f7 ff ff 48 8d 53 08 48 39 d0 0f 93 c1 48 39 d5 0f 92 c0 <84> c1 0f 84 df f7 ff ff 48 39 5c 24 10 0f 82 d4 f7 ff ff 48 b8 00
RSP: 0018:ffffc90003427160 EFLAGS: 00000297
RAX: ffffc90003428001 RBX: ffffc90003427de0 RCX: ffffc90003428001
RDX: ffffc90003427de8 RSI: ffffc90003427db8 RDI: ffffc900034271e0
RBP: ffffc90003420000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 00000000000850df R12: ffffc90003427220
R13: ffffc900034271d0 R14: ffffc90003427de0 R15: ffffc90003427204
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:548
 __call_rcu_common.constprop.0+0xa5/0xa10 kernel/rcu/tree.c:3094
 kernfs_put.part.0+0x162/0x640 fs/kernfs/dir.c:591
 kernfs_put fs/kernfs/dir.c:1724 [inline]
 kernfs_remove_by_name_ns+0xdf/0x110 fs/kernfs/dir.c:1718
 kernfs_remove_by_name include/linux/kernfs.h:633 [inline]
 remove_files+0x96/0x1c0 fs/sysfs/group.c:28
 sysfs_remove_group+0x8b/0x180 fs/sysfs/group.c:322
 sysfs_remove_groups fs/sysfs/group.c:346 [inline]
 sysfs_remove_groups+0x60/0xa0 fs/sysfs/group.c:338
 device_remove_groups drivers/base/core.c:2846 [inline]
 device_remove_attrs+0x203/0x290 drivers/base/core.c:2982
 device_del+0x38e/0x9f0 drivers/base/core.c:3880
 unregister_netdevice_many_notify+0x1903/0x2700 net/core/dev.c:12112
 unregister_netdevice_many net/core/dev.c:12140 [inline]
 unregister_netdevice_queue+0x305/0x3f0 net/core/dev.c:11984
 unregister_netdevice include/linux/netdevice.h:3379 [inline]
 _cfg80211_unregister_wdev+0x64b/0x830 net/wireless/core.c:1256
 ieee80211_remove_interfaces+0x34e/0x720 net/mac80211/iface.c:2362
 ieee80211_unregister_hw+0x55/0x3a0 net/mac80211/main.c:1683
 mac80211_hwsim_del_radio drivers/net/wireless/virtual/mac80211_hwsim.c:5671 [inline]
 remove_user_radios drivers/net/wireless/virtual/mac80211_hwsim.c:6471 [inline]
 mac80211_hwsim_netlink_notify+0x2ea/0x8e0 drivers/net/wireless/virtual/mac80211_hwsim.c:6485
 notifier_call_chain+0xb9/0x410 kernel/notifier.c:85
 blocking_notifier_call_chain kernel/notifier.c:380 [inline]
 blocking_notifier_call_chain+0x69/0xa0 kernel/notifier.c:368
 netlink_release+0x186b/0x2020 net/netlink/af_netlink.c:763
 __sock_release+0xb0/0x270 net/socket.c:647
 sock_close+0x1c/0x30 net/socket.c:1391
 __fput+0x402/0xb70 fs/file_table.c:465
 task_work_run+0x14d/0x240 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop+0xeb/0x110 kernel/entry/common.c:114
 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
 do_syscall_64+0x3f6/0x490 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fac10f8e9a9
RSP: 002b:00007fac11e0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007fac111b5fa0 RCX: 00007fac10f8e9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
RBP: 00007fac11010d69 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fac111b5fa0 R15: 00007ffdd94afed8
 </TASK>
task:udevd           state:R  running task     stack:27192 pid:5837  tgid:5837  ppid:5216   task_flags:0x40014c flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
 irqentry_exit+0x36/0x90 kernel/entry/common.c:307
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline]
RIP: 0010:lock_release+0x45/0x2f0 kernel/locking/lockdep.c:5882
Code: 69 23 37 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 82 23 37 12 83 f8 07 0f 87 38 02 00 00 89 c0 48 0f a3 05 8b 50 11 0f <0f> 82 b1 01 00 00 8b 3d 53 82 11 0f 85 ff 0f 84 25 01 00 00 65 8b
RSP: 0018:ffffc90003f2f760 EFLAGS: 00000297
RAX: 0000000000000000 RBX: ffffffff8e5c4c80 RCX: ffffc90003f30001
RDX: 0000000000000000 RSI: ffffffff816a9ac4 RDI: ffffffff8e5c4c80
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000007c1e R12: ffffffff816a9ac4
R13: ffffc90003f2f818 R14: ffffc90003f2fee0 R15: ffffc90003f2f84c
 rcu_lock_release include/linux/rcupdate.h:341 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0x3f9/0x20a0 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_record_aux_stack+0xa7/0xc0 mm/kasan/generic.c:548
 slab_free_hook mm/slub.c:2342 [inline]
 slab_free mm/slub.c:4643 [inline]
 kmem_cache_free+0x15a/0x4d0 mm/slub.c:4745
 exit_mmap+0x511/0xb90 mm/mmap.c:1309
 __mmput+0x12a/0x410 kernel/fork.c:1121
 mmput+0x62/0x70 kernel/fork.c:1144
 exit_mm kernel/exit.c:581 [inline]
 do_exit+0x7c4/0x2bd0 kernel/exit.c:952
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1105
 __do_sys_exit_group kernel/exit.c:1116 [inline]
 __se_sys_exit_group kernel/exit.c:1114 [inline]
 __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1114
 x64_sys_call+0x1530/0x1730 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1429cf16c5
RSP: 002b:00007ffef1248b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000055752cfd44e0 RCX: 00007f1429cf16c5
RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000
RBP: 000055752cfad910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffef1248bb0 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
task:syz.0.337       state:R  running task     stack:23064 pid:7281  tgid:7281  ppid:5842   task_flags:0x400640 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
 irqentry_exit+0x36/0x90 kernel/entry/common.c:307
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:debug_lockdep_rcu_enabled+0x2e/0x40 kernel/rcu/update.c:322
Code: 8b 05 96 ac 26 05 85 c0 74 20 8b 05 70 dd 26 05 85 c0 74 16 65 48 8b 05 58 7e 4c 08 8b 80 ec 0a 00 00 85 c0 0f 94 c0 0f b6 c0 <e9> 8d f1 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90
RSP: 0018:ffffc90003cde550 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffffc90003cdee58 RCX: ffffc90003ce0001
RDX: ffffc90003cdee60 RSI: ffffc90003cdee28 RDI: ffffc90003cde5d8
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 000000000000fb4d R12: ffffc90003cde618
R13: ffffc90003cde5c8 R14: ffffc90003cdee58 R15: ffffc90003cde5fc
 rcu_read_unlock include/linux/rcupdate.h:869 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0x3de/0x20a0 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x160/0x1f0 mm/page_owner.c:156
 __set_page_owner+0x91/0x550 mm/page_owner.c:329
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1704
 prep_new_page mm/page_alloc.c:1712 [inline]
 get_page_from_freelist+0x1321/0x3890 mm/page_alloc.c:3669
 __alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:4959
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2419
 folio_alloc_mpol_noprof+0x36/0x2f0 mm/mempolicy.c:2438
 shmem_alloc_folio+0x135/0x160 mm/shmem.c:1851
 shmem_alloc_and_add_folio+0x499/0xc20 mm/shmem.c:1890
 shmem_get_folio_gfp+0x67f/0x1600 mm/shmem.c:2536
 shmem_get_folio mm/shmem.c:2642 [inline]
 shmem_write_begin+0x160/0x300 mm/shmem.c:3292
 generic_perform_write+0x3d0/0x930 mm/filemap.c:4112
 shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3467
 __kernel_write_iter+0x317/0xa90 fs/read_write.c:619
 dump_emit_page fs/coredump.c:1112 [inline]
 dump_user_range+0x41f/0xb60 fs/coredump.c:1186
 elf_core_dump+0x288a/0x3a90 fs/binfmt_elf.c:2075
 do_coredump+0x399c/0x4f10 fs/coredump.c:950
 get_signal+0x22e3/0x26d0 kernel/signal.c:3019
 arch_do_signal_or_restart+0x8f/0x790 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
 irqentry_exit_to_user_mode+0x12a/0x270 kernel/entry/common.c:184
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x0
RSP: 002b:0000000000000010 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fcb2e9b6160 RCX: 00007fcb2e78e9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020003b46
RBP: 00007fcb2e810d69 R08: 0000000000000ac4 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 00007fcb2e9b6160 R15: 00007ffcc977fe88
 </TASK>
task:syz.0.337       state:R  running task     stack:23288 pid:7279  tgid:7279  ppid:5842   task_flags:0x400640 flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5397 [inline]
 __schedule+0x116a/0x5dd0 kernel/sched/core.c:6786
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109
 irqentry_exit+0x36/0x90 kernel/entry/common.c:307
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:lock_acquire+0x62/0x350 kernel/locking/lockdep.c:5875
Code: 1c 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 d2 49 11 0f 0f 82 74 02 00 00 8b 35 9a 7b 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 1c 37 12 0f 85 c7 02 00 00 48 83 c4
RSP: 0018:ffffc90004aee298 EFLAGS: 00000206
RAX: 0000000000000046 RBX: ffffffff8e5c4c80 RCX: 000000000f5b292f
RDX: 0000000000000000 RSI: ffffffff8de04ada RDI: ffffffff8c155ee0
RBP: 0000000000000002 R08: e0d1dae0968818e2 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
 unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_stack+0x160/0x1f0 mm/page_owner.c:156
 __set_page_owner+0x91/0x550 mm/page_owner.c:329
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1704
 prep_new_page mm/page_alloc.c:1712 [inline]
 get_page_from_freelist+0x1321/0x3890 mm/page_alloc.c:3669
 __alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:4959
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2419
 folio_alloc_mpol_noprof+0x36/0x2f0 mm/mempolicy.c:2438
 shmem_alloc_folio+0x135/0x160 mm/shmem.c:1851
 shmem_alloc_and_add_folio+0x499/0xc20 mm/shmem.c:1890
 shmem_get_folio_gfp+0x67f/0x1600 mm/shmem.c:2536
 shmem_fault+0x1fe/0xa30 mm/shmem.c:2737
 __do_fault+0x10d/0x490 mm/memory.c:5169
 do_read_fault mm/memory.c:5590 [inline]
 do_fault mm/memory.c:5724 [inline]
 do_pte_missing mm/memory.c:4251 [inline]
 handle_pte_fault mm/memory.c:6069 [inline]
 __handle_mm_fault+0x3c2a/0x5490 mm/memory.c:6212
 handle_mm_fault+0x589/0xd10 mm/memory.c:6381
 faultin_page mm/gup.c:1186 [inline]
 __get_user_pages+0x589/0x3b80 mm/gup.c:1488
 __get_user_pages_locked mm/gup.c:1754 [inline]
 get_dump_page+0x257/0x3d0 mm/gup.c:2258
 dump_user_range+0x195/0xb60 fs/coredump.c:1180
 elf_core_dump+0x288a/0x3a90 fs/binfmt_elf.c:2075
 do_coredump+0x399c/0x4f10 fs/coredump.c:950
 get_signal+0x22e3/0x26d0 kernel/signal.c:3019
 arch_do_signal_or_restart+0x8f/0x790 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
 irqentry_exit_to_user_mode+0x12a/0x270 kernel/entry/common.c:184
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x0
RSP: 002b:0000000000000010 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007fcb2e9b6080 RCX: 00007fcb2e78e9a9
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020003b46
RBP: 00007fcb2e810d69 R08: 0000000000000ac4 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fcb2e9b6080 R15: 00007ffcc977fe88
 </TASK>
net_ratelimit: 5208 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:28:d2:45:99:9e, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
net_ratelimit: 10697 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:28:d2:45:99:9e, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:28:d2:45:99:9e, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)