bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17320/1:b..l rcu: (detected by 1, t=10503 jiffies, g=123157, q=265861 ncpus=2) task:syz-executor state:R running task stack:24104 pid:17320 tgid:17320 ppid:17301 task_flags:0x400140 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109 irqentry_exit+0x36/0x90 kernel/entry/common.c:307 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x62/0x350 kernel/locking/lockdep.c:5875 Code: 45 38 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 fc 10 0f 0f 82 74 02 00 00 8b 35 da 2e 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 45 38 12 0f 85 c7 02 00 00 48 83 c4 RSP: 0018:ffffc9000c0e6e60 EFLAGS: 00000206 RAX: 0000000000000046 RBX: ffffffff8e5c4e00 RCX: 00000000ef9d33e4 RDX: 0000000000000000 RSI: ffffffff8de0d97d RDI: ffffffff8c158f60 RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:156 __set_page_owner+0x91/0x550 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1704 prep_new_page mm/page_alloc.c:1712 [inline] get_page_from_freelist+0x1321/0x3890 mm/page_alloc.c:3669 __alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:4959 __alloc_pages_noprof mm/page_alloc.c:4993 [inline] alloc_pages_bulk_noprof+0x71c/0x1410 mm/page_alloc.c:4913 alloc_pages_bulk_mempolicy_noprof+0x244/0x1280 mm/mempolicy.c:2727 vm_area_alloc_pages mm/vmalloc.c:3616 [inline] __vmalloc_area_node mm/vmalloc.c:3720 [inline] __vmalloc_node_range_noprof+0x526/0x14b0 mm/vmalloc.c:3893 __vmalloc_node_noprof+0xad/0xf0 mm/vmalloc.c:3956 xt_counters_alloc+0x4c/0x70 net/netfilter/x_tables.c:1380 __do_replace+0x97/0x9f0 net/ipv4/netfilter/arp_tables.c:894 do_replace net/ipv6/netfilter/ip6_tables.c:1158 [inline] do_ip6t_set_ctl+0x87c/0xb00 net/ipv6/netfilter/ip6_tables.c:1644 nf_setsockopt+0x8d/0xf0 net/netfilter/nf_sockopt.c:101 ipv6_setsockopt+0x135/0x170 net/ipv6/ipv6_sockglue.c:998 tcp_setsockopt+0xa7/0x100 net/ipv4/tcp.c:4108 do_sock_setsockopt+0x224/0x470 net/socket.c:2296 __sys_setsockopt+0x1a0/0x230 net/socket.c:2321 __do_sys_setsockopt net/socket.c:2327 [inline] __se_sys_setsockopt net/socket.c:2324 [inline] __x64_sys_setsockopt+0xbd/0x160 net/socket.c:2324 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe9a3f9081a RSP: 002b:00007ffcfdbd6ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007ffcfdbd6b40 RCX: 00007fe9a3f9081a RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00000000000002e8 R09: 0079746972756365 R10: 00007fe9a4182120 R11: 0000000000000206 R12: 00007fe9a41820c0 R13: 00007ffcfdbd6adc R14: 0000000000000000 R15: 00007fe9a4182e40 rcu: rcu_preempt kthread starved for 3230 jiffies! g123157 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 __schedule_loop kernel/sched/core.c:6864 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6879 schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1ea/0xb00 kernel/rcu/tree.c:2054 rcu_gp_kthread+0x270/0x380 kernel/rcu/tree.c:2256 kthread+0x3c5/0x780 kernel/kthread.c:464 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_power_efficient neigh_periodic_work RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194 Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8c 0d f6 48 89 df e8 be e0 0d f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 02 fe f5 65 8b 05 7e d9 45 08 85 c0 74 16 5b RSP: 0018:ffffc90000a07830 EFLAGS: 00000246 RAX: 0000000000000002 RBX: ffffffff9af6fb88 RCX: 0000000000000002 RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff90a98757 R11: 0000000000000001 R12: 0000000000000001 R13: ffffffff9af6fb88 R14: 000000000000001a R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31f11ff8 CR3: 00000000256e1000 CR4: 00000000003526f0 Call Trace: spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] avc_reclaim_node security/selinux/avc.c:488 [inline] avc_alloc_node+0x420/0x6a0 security/selinux/avc.c:507 avc_insert security/selinux/avc.c:618 [inline] avc_compute_av+0x100/0x7f0 security/selinux/avc.c:993 avc_perm_nonode+0xab/0x180 security/selinux/avc.c:1117 avc_has_perm_noaudit+0x2de/0x3b0 security/selinux/avc.c:1160 avc_has_perm+0xc0/0x1c0 security/selinux/avc.c:1195 selinux_ip_postroute+0xba7/0xde0 security/selinux/hooks.c:6046 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623 nf_hook+0x471/0x7a0 include/linux/netfilter.h:272 NF_HOOK include/linux/netfilter.h:315 [inline] br_nf_post_routing+0x8bd/0x1190 net/bridge/br_netfilter_hooks.c:969 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623 nf_hook+0x45e/0x780 include/linux/netfilter.h:272 NF_HOOK include/linux/netfilter.h:315 [inline] br_forward_finish+0xcd/0x130 net/bridge/br_forward.c:66 br_nf_hook_thresh+0x304/0x410 net/bridge/br_netfilter_hooks.c:1170 br_nf_forward_finish+0x66a/0xba0 net/bridge/br_netfilter_hooks.c:665 NF_HOOK include/linux/netfilter.h:317 [inline] NF_HOOK include/linux/netfilter.h:311 [inline] br_nf_forward_ip.part.0+0x609/0x810 net/bridge/br_netfilter_hooks.c:719 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:679 [inline] br_nf_forward+0xf0f/0x1be0 net/bridge/br_netfilter_hooks.c:776 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623 nf_hook+0x45e/0x780 include/linux/netfilter.h:272 NF_HOOK include/linux/netfilter.h:315 [inline] __br_forward+0x1be/0x5b0 net/bridge/br_forward.c:115 deliver_clone net/bridge/br_forward.c:131 [inline] maybe_deliver+0xf1/0x180 net/bridge/br_forward.c:190 br_flood+0x17c/0x650 net/bridge/br_forward.c:237 br_handle_frame_finish+0xf2d/0x1ca0 net/bridge/br_input.c:221 br_nf_hook_thresh+0x304/0x410 net/bridge/br_netfilter_hooks.c:1170 br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154 NF_HOOK include/linux/netfilter.h:317 [inline] br_nf_pre_routing_ipv6+0x3cd/0x8c0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_bridge_pre net/bridge/br_input.c:283 [inline] br_handle_frame+0xad8/0x14b0 net/bridge/br_input.c:434 __netif_receive_skb_core.constprop.0+0xa26/0x4a00 net/core/dev.c:5863 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:5975 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6090 process_backlog+0x442/0x15e0 net/core/dev.c:6442 __napi_poll.constprop.0+0xba/0x550 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0xa9f/0xfe0 net/core/dev.c:7605 handle_softirqs+0x219/0x8e0 kernel/softirq.c:579 do_softirq kernel/softirq.c:480 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:467 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:407 neigh_periodic_work+0x768/0xcd0 net/core/neighbour.c:966 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402 kthread+0x3c5/0x780 kernel/kthread.c:464 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 506 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ab:cc:2e:88:1e, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ab:cc:2e:88:1e, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) audit_log_start: 16979 callbacks suppressed audit: audit_backlog=65 > audit_backlog_limit=64 audit: audit_lost=147140 audit_rate_limit=0 audit_backlog_limit=64 audit: backlog limit exceeded audit: audit_backlog=65 > audit_backlog_limit=64 audit: audit_lost=147142 audit_rate_limit=0 audit_backlog_limit=64 net_ratelimit: 540 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ab:cc:2e:88:1e, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ab:cc:2e:88:1e, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:ab:cc:2e:88:1e, vlan:0)