bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15393/1:b..l P15405/1:b..l P4981/1:b..l rcu: (detected by 0, t=10502 jiffies, g=148645, q=1734 ncpus=1) task:udevd state:R running task stack:23400 pid:4981 tgid:4981 ppid:1 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7270 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7592 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x910 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_release+0xd/0x3c0 kernel/locking/lockdep.c:5917 Code: 00 00 e9 07 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 48 63 f1 11 48 89 44 RSP: 0018:ffffc90002ee6fe0 EFLAGS: 00000246 RAX: ffffffff81d84c00 RBX: 0000000000000000 RCX: ffff88807e78ddc0 RDX: 0000000000000000 RSI: ffffffff81d84ad6 RDI: ffffffff8ed5c6a0 RBP: 0000000000000000 R08: f700000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff8ed5c6a0 R12: 000000000000027e R13: dffffc0000000000 R14: 00007fa870f11b0a R15: 0000000000000000 rcu_lock_release include/linux/rcupdate.h:319 [inline] rcu_read_unlock include/linux/rcupdate.h:880 [inline] is_bpf_text_address+0x28d/0x2b0 kernel/bpf/core.c:751 kernel_text_address+0xa5/0xe0 kernel/extable.c:125 __kernel_text_address+0xd/0x30 kernel/extable.c:79 unwind_get_return_address+0x4d/0x90 arch/x86/kernel/unwind_orc.c:385 arch_stack_walk+0xfb/0x150 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x2b9/0x600 mm/slub.c:5010 kmem_alloc_batch lib/debugobjects.c:371 [inline] fill_pool+0x163/0x610 lib/debugobjects.c:420 debug_objects_fill_pool lib/debugobjects.c:780 [inline] debug_object_activate+0x38d/0x420 lib/debugobjects.c:869 debug_rcu_head_queue kernel/rcu/rcu.h:245 [inline] __call_rcu_common kernel/rcu/tree.c:3166 [inline] call_rcu+0x43/0x8b0 kernel/rcu/tree.c:3301 __slab_free+0x274/0x2c0 mm/slub.c:5815 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5414 [inline] __kmalloc_noprof+0x36b/0x720 mm/slub.c:5439 _kmalloc_noprof include/linux/slab.h:995 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] tomoyo_encode2 security/tomoyo/realpath.c:45 [inline] tomoyo_encode+0x2ad/0x570 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x5fa/0x640 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827 security_inode_getattr+0x12b/0x310 security/security.c:1895 vfs_getattr+0x23/0x70 fs/stat.c:259 vfs_statx_path+0x2b/0x230 fs/stat.c:299 vfs_statx+0x12e/0x200 fs/stat.c:356 vfs_fstatat+0x11b/0x170 fs/stat.c:373 __do_sys_newfstatat fs/stat.c:538 [inline] __se_sys_newfstatat fs/stat.c:532 [inline] __x64_sys_newfstatat+0x151/0x200 fs/stat.c:532 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa870f11b0a RSP: 002b:00007ffc47a67838 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055bd90cd4410 RCX: 00007fa870f11b0a RDX: 00007ffc47a67840 RSI: 000055bd90cc22a8 RDI: 00000000ffffff9c RBP: 000055bdc6287148 R08: 00063478c1c69200 R09: 3fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc47a67840 R14: 0000000000000000 R15: 00063478c1c69200 task:kworker/u8:9 state:R running task stack:27720 pid:15405 tgid:15405 ppid:5911 task_flags:0x8040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7270 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7592 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x910 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5913 Code: ff ff ff e8 40 28 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 93 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 17 71 da RSP: 0018:ffffc9000599f500 EFLAGS: 00000296 RAX: fce08e7c01ed4c00 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 000000003d5f2f8a RSI: ffffffff8e7006e2 RDI: ffffffff8c6d9080 RBP: ffff88802b1b1f40 R08: 2600000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: ffffffff8ed5c6a0 R12: ffffffff8ed5c6a0 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] class_rcu_constructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:183 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:338 reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2962 __slab_free+0x274/0x2c0 mm/slub.c:5815 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] __kmalloc_cache_noprof+0x29f/0x600 mm/slub.c:5559 _kmalloc_noprof include/linux/slab.h:991 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] tomoyo_find_next_domain+0xdf/0x1a90 security/tomoyo/domain.c:711 tomoyo_bprm_check_security+0x11b/0x180 security/tomoyo/tomoyo.c:102 security_bprm_check+0x85/0x240 security/security.c:820 search_binary_handler fs/exec.c:1749 [inline] exec_binprm fs/exec.c:1791 [inline] bprm_execve+0x888/0x1590 fs/exec.c:1847 kernel_execve+0x8c3/0x9c0 fs/exec.c:1991 call_usermodehelper_exec_async+0x20f/0x360 kernel/umh.c:107 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:syz.8.1961 state:R running task stack:24328 pid:15393 tgid:15393 ppid:9589 task_flags:0x40044c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5520 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7270 preempt_schedule_common+0x7f/0xd0 kernel/sched/core.c:7449 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline] _raw_spin_unlock+0x41/0x50 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] zap_pte_range mm/memory.c:2095 [inline] zap_pmd_range mm/memory.c:2151 [inline] zap_pud_range mm/memory.c:2179 [inline] zap_p4d_range mm/memory.c:2200 [inline] __zap_vma_range+0x40e1/0x4f80 mm/memory.c:2240 unmap_vmas+0x390/0x550 mm/memory.c:2309 exit_mmap+0x293/0x9f0 mm/mmap.c:1315 __mmput+0x118/0x420 kernel/fork.c:1193 exit_mm+0x221/0x2d0 kernel/exit.c:614 do_exit+0x6cd/0x2360 kernel/exit.c:996 do_group_exit+0x22d/0x2f0 kernel/exit.c:1151 get_signal+0x121b/0x12c0 kernel/signal.c:3039 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:336 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb629d9de42 RSP: 002b:00007ffd9d5d8748 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: 00007fb627bb4000 RBX: 00007fb627bb4000 RCX: 00007fb629d9de42 RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fb627bb4000 RBP: 0000000000000011 R08: 00000000000000db R09: 0000000000000000 R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 R13: 0000000000000003 R14: 0000000000000000 R15: 00007fb62a025fa0