bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22751/1:b..l P22928/1:b..l rcu: (detected by 0, t=10502 jiffies, g=192597, q=759 ncpus=1) task:syz.3.3943 state:R running task stack:26072 pid:22928 tgid:22922 ppid:16178 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe6/0x5fa0 kernel/sched/core.c:6867 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7194 irqentry_exit+0x17b/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__read_once_word_nocheck+0x3/0x10 include/asm-generic/rwonce.h:68 Code: 43 8e e8 b0 db 80 ff e9 c7 f9 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 07 c8 29 c4 09 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc900035f6f58 EFLAGS: 00000202 RAX: ffffffff82640623 RBX: 0000000000000001 RCX: ffffffff916460ec RDX: ffffc900035f7301 RSI: ffffc900035f7358 RDI: ffffc900035f7358 RBP: ffffc900035f7018 R08: ffffffff916460f0 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000016f80 R12: ffffc900035f7020 R13: ffffc900035f6fd0 R14: ffffc900035f7360 R15: ffffc900035f7004 deref_stack_reg arch/x86/kernel/unwind_orc.c:422 [inline] unwind_next_frame+0xb1d/0x1ea0 arch/x86/kernel/unwind_orc.c:600 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:253 [inline] __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2540 [inline] slab_free mm/slub.c:6674 [inline] kmem_cache_free+0x143/0x720 mm/slub.c:6789 skb_kfree_head net/core/skbuff.c:1066 [inline] skb_kfree_head net/core/skbuff.c:1063 [inline] skb_free_head+0x1c6/0x220 net/core/skbuff.c:1080 skb_release_data+0x540/0x700 net/core/skbuff.c:1107 skb_release_all net/core/skbuff.c:1182 [inline] __kfree_skb net/core/skbuff.c:1196 [inline] consume_skb net/core/skbuff.c:1429 [inline] consume_skb+0xc4/0x110 net/core/skbuff.c:1423 netlink_broadcast_filtered+0x3cc/0xf50 net/netlink/af_netlink.c:1535 nlmsg_multicast_filtered include/net/netlink.h:1165 [inline] nlmsg_multicast include/net/netlink.h:1184 [inline] nlmsg_notify+0xb1/0x290 net/netlink/af_netlink.c:2593 inet6_netconf_notify_devconf+0xf8/0x170 net/ipv6/addrconf.c:605 dev_forward_change+0x64c/0xb40 net/ipv6/addrconf.c:847 addrconf_forward_change net/ipv6/addrconf.c:868 [inline] addrconf_fixup_forwarding net/ipv6/addrconf.c:904 [inline] addrconf_sysctl_forward+0x5ab/0x880 net/ipv6/addrconf.c:6346 proc_sys_call_handler+0x47f/0x5a0 fs/proc/proc_sysctl.c:600 iter_file_splice_write+0x82b/0x10a0 fs/splice.c:738 do_splice_from fs/splice.c:938 [inline] direct_splice_actor+0x192/0x6c0 fs/splice.c:1161 splice_direct_to_actor+0x345/0xa30 fs/splice.c:1105 do_splice_direct_actor fs/splice.c:1204 [inline] do_splice_direct+0x174/0x240 fs/splice.c:1230 do_sendfile+0xadc/0xe20 fs/read_write.c:1372 __do_sys_sendfile64 fs/read_write.c:1433 [inline] __se_sys_sendfile64 fs/read_write.c:1419 [inline] __x64_sys_sendfile64+0x1d8/0x220 fs/read_write.c:1419 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f486379af79 RSP: 002b:00007f48645a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f4863a16270 RCX: 00007f486379af79 RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 RBP: 00007f48638316e0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f4863a16308 R14: 00007f4863a16270 R15: 00007fffccdb7ce8 task:syz.0.3899 state:R running task stack:22568 pid:22751 tgid:22751 ppid:16734 task_flags:0x40064c flags:0x00080001 Call Trace: context_switch kernel/sched/core.c:5260 [inline] __schedule+0xfe6/0x5fa0 kernel/sched/core.c:6867 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7194 irqentry_exit+0x17b/0x670 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x5e/0x330 kernel/locking/lockdep.c:5872 Code: 05 7b 08 03 12 83 f8 07 0f 87 a4 02 00 00 48 0f a3 05 06 7f d5 0e 0f 82 6f 02 00 00 8b 35 de b1 d5 0e 85 f6 0f 85 8a 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 08 03 12 0f 85 b8 02 00 00 48 83 c4 RSP: 0018:ffffc900001f7118 EFLAGS: 00000206 RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8dc24c4e RDI: ffffffff8bfa8820 RBP: ffffffff8e5e31a0 R08: 0000000086db7919 R09: 0000000000000007 R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:302 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] __update_page_owner_free_handle.isra.0+0x4d/0x4d0 mm/page_owner.c:283 __reset_page_owner+0x93/0x190 mm/page_owner.c:321 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1433 [inline] free_unref_folios+0xb2a/0x1760 mm/page_alloc.c:3030 folios_put_refs+0x53c/0x840 mm/swap.c:1002 folio_batch_release include/linux/pagevec.h:101 [inline] shmem_undo_range+0x5e5/0x1570 mm/shmem.c:1150 shmem_truncate_range mm/shmem.c:1278 [inline] shmem_evict_inode+0x39e/0xbd0 mm/shmem.c:1408 evict+0x3c2/0xad0 fs/inode.c:837 iput_final fs/inode.c:1957 [inline] iput.part.0+0x605/0xf50 fs/inode.c:2006 iput+0x35/0x40 fs/inode.c:1972 dentry_unlink_inode+0x2a1/0x490 fs/dcache.c:467 __dentry_kill+0x1d0/0x600 fs/dcache.c:670 finish_dput+0x76/0x480 fs/dcache.c:879 dput.part.0+0x456/0x570 fs/dcache.c:928 dput+0x1f/0x30 fs/dcache.c:920 __fput+0x519/0xb40 fs/file_table.c:477 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x829/0x2a30 kernel/exit.c:971 do_group_exit+0xd5/0x2a0 kernel/exit.c:1112 get_signal+0x1ec7/0x21e0 kernel/signal.c:3034 arch_do_signal_or_restart+0x91/0x770 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop kernel/entry/common.c:75 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline] irqentry_exit+0x1f8/0x670 kernel/entry/common.c:196 asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:616 RIP: 0033:0x0 RSP: 002b:0000000000000107 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007fa9b3a15fa0 RCX: 00007fa9b379af79 RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000007fff RBP: 00007fa9b38316e0 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa9b3a16038 R14: 00007fa9b3a15fa0 R15: 00007ffc418f72d8 net_ratelimit: 3106 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 3322 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)