ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on bridge0! bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6529/1:b..l P6647/1:b..l rcu: (detected by 0, t=10502 jiffies, g=217937, q=4615 ncpus=2) task:syz.0.8494 state:R running task stack:25928 pid:6647 tgid:6646 ppid:29894 task_flags:0x40054c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7413 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3f/0x50 kernel/locking/spinlock.c:190 spin_unlock include/linux/spinlock.h:390 [inline] zap_pte_range mm/memory.c:1964 [inline] zap_pmd_range mm/memory.c:2020 [inline] zap_pud_range mm/memory.c:2048 [inline] zap_p4d_range mm/memory.c:2069 [inline] __zap_vma_range+0x4084/0x4f10 mm/memory.c:2109 unmap_vmas+0x390/0x550 mm/memory.c:2178 exit_mmap+0x293/0x9f0 mm/mmap.c:1300 __mmput+0x118/0x420 kernel/fork.c:1187 exit_mm+0x221/0x2d0 kernel/exit.c:610 do_exit+0x6cd/0x2360 kernel/exit.c:992 do_group_exit+0x22d/0x2f0 kernel/exit.c:1147 get_signal+0x121b/0x12c0 kernel/signal.c:3038 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x104/0x730 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f70f759de99 RSP: 002b:00007f70f84e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: 00000000000000b8 RBX: 00007f70f7825fa0 RCX: 00007f70f759de99 RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 RBP: 00007f70f7633eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f70f7826038 R14: 00007f70f7825fa0 R15: 00007ffff6839ff8 task:syz.3.8461 state:R running task stack:25512 pid:6529 tgid:6529 ppid:30845 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_release+0x2d7/0x3c0 kernel/locking/lockdep.c:5893 Code: 7d ca 11 00 00 00 00 eb b5 e8 c5 dd 2c 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 38 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a de 2f 0a cc 48 8d 3d 72 b1 b8 RSP: 0018:ffffc90006227808 EFLAGS: 00000282 RAX: bfbaa74b7d630500 RBX: 0000000000000206 RCX: 0000000000000046 RDX: 0000000000000001 RSI: ffffffff8e4af75f RDI: ffffffff8c4bd380 RBP: ffff88801e3349c8 R08: ffffc90006227b48 R09: 0000000000000000 R10: ffffc90006227938 R11: fffff52000c44f29 R12: 0000000000000001 R13: 0000000000000001 R14: ffffffff8eb59c60 R15: ffff88801e333e00 rcu_lock_release include/linux/rcupdate.h:310 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1183 [inline] unwind_next_frame+0x1baa/0x2550 arch/x86/kernel/unwind_orc.c:709 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] free_pages_prepare+0x960/0xa60 mm/page_alloc.c:1451 __free_contig_range_common+0x174/0x340 mm/page_alloc.c:6897 __free_contig_range mm/page_alloc.c:6942 [inline] free_pages_bulk+0x48/0x120 mm/page_alloc.c:5257 vm_area_free_pages mm/vmalloc.c:3439 [inline] vfree+0x224/0x4a0 mm/vmalloc.c:3488 xskq_destroy+0x40/0x60 net/xdp/xsk_queue.c:64 xsk_release+0x6ff/0x980 net/xdp/xsk.c:1363 __sock_release net/socket.c:710 [inline] sock_close+0xad/0x220 net/socket.c:1501 __fput+0x418/0xa50 fs/file_table.c:512 task_work_run+0x1d9/0x270 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1fa/0x730 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f789079de99 RSP: 002b:00007ffde9698478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007f7890a27da0 RCX: 00007f789079de99 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f7890a27da0 R08: 0000000000000006 R09: 0000000000000000 R10: 00000000003ffd64 R11: 0000000000000246 R12: 00000000000f455b R13: 00007f7890a2627c R14: 00000000000f431b R15: 00007f7890a26270 net_ratelimit: 74720 callbacks suppressed ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on bridge0! bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on bridge0! bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on bridge0! ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on bridge0! bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on bridge0! bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on bridge0!