bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:cc:f1:c8:ba:a1, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29659/1:b..l P32113/2:b..l rcu: (detected by 0, t=10502 jiffies, g=225913, q=569 ncpus=1) task:syz.0.5796 state:R running task stack:26840 pid:32113 tgid:32111 ppid:27511 task_flags:0x400040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7051 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xff/0x120 kernel/softirq.c:457 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:936 [inline] __dev_queue_xmit+0x7f1/0x46f0 net/core/dev.c:4859 dev_queue_xmit include/linux/netdevice.h:3381 [inline] neigh_hh_output include/net/neighbour.h:540 [inline] neigh_output include/net/neighbour.h:554 [inline] ip6_finish_output2+0x1184/0x1cd0 net/ipv6/ip6_output.c:136 __ip6_finish_output+0x3cd/0x10d0 net/ipv6/ip6_output.c:209 ip6_finish_output net/ipv6/ip6_output.c:220 [inline] NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x2aa/0xa60 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:464 [inline] ip6_local_out+0xce/0x4a0 net/ipv6/output_core.c:157 ip6_send_skb+0x112/0x430 net/ipv6/ip6_output.c:1994 ip6_push_pending_frames+0xdd/0x100 net/ipv6/ip6_output.c:2015 rawv6_push_pending_frames net/ipv6/raw.c:589 [inline] rawv6_sendmsg+0x2fe4/0x48e0 net/ipv6/raw.c:919 inet_sendmsg+0x11c/0x140 net/ipv4/af_inet.c:859 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0x9ad/0xc30 net/socket.c:2592 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2646 __sys_sendmmsg+0x205/0x430 net/socket.c:2735 __do_sys_sendmmsg net/socket.c:2762 [inline] __se_sys_sendmmsg net/socket.c:2759 [inline] __x64_sys_sendmmsg+0x9c/0x100 net/socket.c:2759 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1a03d9aeb9 RSP: 002b:00007f1a01fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f1a04016090 RCX: 00007f1a03d9aeb9 RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 00007f1a03e08c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1a04016128 R14: 00007f1a04016090 R15: 00007fffcb5a0df8 task:syz-executor state:R running task stack:23160 pid:29659 tgid:29659 ppid:29651 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe4/0x5e10 kernel/sched/core.c:6867 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7194 irqentry_exit+0x17b/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_release+0x19e/0x2e0 kernel/locking/lockdep.c:5893 Code: ff 65 0f c1 05 5b 8a 01 12 83 f8 01 0f 85 f7 00 00 00 9c 58 f6 c4 02 0f 85 0c 01 00 00 41 f7 c6 00 02 00 00 0f 85 99 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ed 42 01 12 0f 85 0f 01 00 00 48 83 c4 RSP: 0018:ffffc9000422f5c8 EFLAGS: 00000206 RAX: 0000000000000046 RBX: ffffffff8e5e3120 RCX: ffffc9000422f5d4 RDX: 0000000000000003 RSI: ffffffff8dc1b5c7 RDI: ffffffff8bfa3320 RBP: ffffffff81b6438e R08: 0000000000000001 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000016f76 R12: ffff88802a5d9e80 R13: ffffc9000422f680 R14: 0000000000000206 R15: 0000000000000004 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:897 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x3c3/0x1ea0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6674 [inline] kfree+0x1c7/0x690 mm/slub.c:6882 tomoyo_realpath_from_path+0x19c/0x690 security/tomoyo/realpath.c:286 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:822 tomoyo_path_unlink+0x91/0xe0 security/tomoyo/tomoyo.c:162 security_path_unlink+0x145/0x2b0 security/security.c:1457 do_unlinkat+0x326/0x6e0 fs/namei.c:5445 __do_sys_unlink fs/namei.c:5483 [inline] __se_sys_unlink fs/namei.c:5481 [inline] __x64_sys_unlink+0xc5/0x110 fs/namei.c:5481 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd6ad399fa7 RSP: 002b:00007ffce7f172d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6ad399fa7 RDX: 00007ffce7f17300 RSI: 00007ffce7f17390 RDI: 00007ffce7f17390 RBP: 00007ffce7f17390 R08: 00007ffce7f18390 R09: 00000000ffffffff R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffce7f18420 R13: 00007fd6ad40471f R14: 00000000001782b3 R15: 00007ffce7f18460 net_ratelimit: 10133 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:cc:f1:c8:ba:a1, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:cc:f1:c8:ba:a1, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 10140 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:cc:f1:c8:ba:a1, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:cc:f1:c8:ba:a1, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:cc:f1:c8:ba:a1, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)