bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23145/1:b..l P23142/1:b..l rcu: (detected by 0, t=10502 jiffies, g=177033, q=1362 ncpus=1) task:syz.6.3469 state:R running task stack:27600 pid:23142 tgid:23141 ppid:19146 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:unwind_next_frame+0x11de/0x1ea0 arch/x86/kernel/unwind_orc.c:532 Code: ff ff 80 3d af 86 0a 0f 00 0f 85 85 f1 ff ff e9 d0 40 69 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 <0f> 85 02 09 00 00 48 89 c8 4d 8b 7d 38 48 ba 00 00 00 00 00 fc ff RSP: 0018:ffffc900052bf1b8 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff9208d1a2 RDX: 1ffff92000a57e4c RSI: 0000000000000001 RDI: ffffffff91524678 RBP: ffffc900052bf270 R08: ffffffff9208d1a6 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000085857 R12: ffffc900052bf278 R13: ffffc900052bf228 R14: 0000000000000005 R15: 0000000000000000 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2685 [inline] slab_free mm/slub.c:6165 [inline] kmem_cache_free+0x124/0x6a0 mm/slub.c:6295 skb_kfree_head net/core/skbuff.c:1087 [inline] skb_kfree_head net/core/skbuff.c:1084 [inline] skb_free_head+0x1c6/0x220 net/core/skbuff.c:1101 skb_release_data+0x79b/0x9d0 net/core/skbuff.c:1128 skb_release_all net/core/skbuff.c:1203 [inline] __kfree_skb net/core/skbuff.c:1217 [inline] consume_skb net/core/skbuff.c:1450 [inline] consume_skb+0xc4/0x110 net/core/skbuff.c:1444 netlink_broadcast_filtered+0x3cc/0xf50 net/netlink/af_netlink.c:1535 netlink_broadcast+0x39/0x50 net/netlink/af_netlink.c:1557 uevent_net_broadcast_tagged lib/kobject_uevent.c:373 [inline] kobject_uevent_net_broadcast lib/kobject_uevent.c:413 [inline] kobject_uevent_env+0x1313/0x18b0 lib/kobject_uevent.c:608 device_add+0x116e/0x1950 drivers/base/core.c:3672 netdev_register_kobject+0x1a9/0x3d0 net/core/net-sysfs.c:2358 register_netdevice+0x12e0/0x2210 net/core/dev.c:11441 __ip_tunnel_create+0x52b/0x670 net/ipv4/ip_tunnel.c:268 ip_tunnel_init_net+0x230/0x780 net/ipv4/ip_tunnel.c:1147 ops_init+0x1e2/0x5f0 net/core/net_namespace.c:137 setup_net+0x118/0x3a0 net/core/net_namespace.c:446 copy_net_ns+0x46f/0x7c0 net/core/net_namespace.c:581 create_new_namespaces+0x3ea/0xac0 kernel/nsproxy.c:130 unshare_nsproxy_namespaces+0xc3/0x1f0 kernel/nsproxy.c:226 ksys_unshare+0x473/0xad0 kernel/fork.c:3173 __do_sys_unshare kernel/fork.c:3244 [inline] __se_sys_unshare kernel/fork.c:3242 [inline] __x64_sys_unshare+0x31/0x40 kernel/fork.c:3242 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8bfc79c819 RSP: 002b:00007f8bfd6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f8bfca15fa0 RCX: 00007f8bfc79c819 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 RBP: 00007f8bfc832c91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8bfca16038 R14: 00007f8bfca15fa0 R15: 00007fff86311658 task:syz.6.3469 state:R running task stack:27096 pid:23145 tgid:23141 ppid:19146 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__page_table_check_zero+0x191/0x410 mm/page_table_check.c:142 Code: df e8 83 23 f3 ff 48 89 d8 48 c1 e8 03 42 0f b6 14 30 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 43 02 00 00 44 8b 3b <31> ff 44 89 fe e8 55 80 87 ff 45 85 ff 0f 85 d1 00 00 00 e8 97 85 RSP: 0018:ffffc900057b6fa8 EFLAGS: 00000246 RAX: 0000000000000003 RBX: ffff8880200d6f08 RCX: ffffffff8280c32d RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880200d6f08 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100401ade1 R10: ffff8880200d6f0b R11: 0000000000000000 R12: ffff8880200d6ec0 R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 page_table_check_alloc include/linux/page_table_check.h:38 [inline] post_alloc_hook+0x140/0x170 mm/page_alloc.c:1890 prep_new_page mm/page_alloc.c:1897 [inline] get_page_from_freelist+0x111d/0x3140 mm/page_alloc.c:3962 __alloc_frozen_pages_noprof+0x27c/0x2ba0 mm/page_alloc.c:5250 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2490 alloc_frozen_pages_noprof mm/mempolicy.c:2561 [inline] alloc_pages_noprof+0x136/0x390 mm/mempolicy.c:2581 pagetable_alloc_noprof include/linux/mm.h:3404 [inline] __pud_alloc_one_noprof include/asm-generic/pgalloc.h:181 [inline] pud_alloc_one_noprof include/asm-generic/pgalloc.h:206 [inline] __pud_alloc+0x3b/0x690 mm/memory.c:6686 pud_alloc include/linux/mm.h:3314 [inline] copy_pud_range mm/memory.c:1422 [inline] copy_p4d_range mm/memory.c:1466 [inline] copy_page_range+0x3f74/0x6600 mm/memory.c:1552 dup_mmap+0xd25/0x2180 mm/mmap.c:1841 dup_mm kernel/fork.c:1531 [inline] copy_mm kernel/fork.c:1583 [inline] copy_process+0x7523/0x7a40 kernel/fork.c:2223 kernel_clone+0xfc/0x9a0 kernel/fork.c:2653 __do_sys_clone3+0x214/0x290 kernel/fork.c:2955 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8bfc79c819 RSP: 002b:00007f8bfd68def8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8bfc79c819 RDX: 00007f8bfd68df10 RSI: 0000000000000058 RDI: 00007f8bfd68df10 RBP: 00007f8bfc832c91 R08: 0000000000000000 R09: 0000000000000058 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8bfca16128 R14: 00007f8bfca16090 R15: 00007fff86311658 net_ratelimit: 4216 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) net_ratelimit: 4226 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)