bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8000/1:b..l P5199/1:b..l rcu: (detected by 1, t=10503 jiffies, g=14561, q=899 ncpus=2) task:klogd state:R running task stack:23072 pid:5199 tgid:5199 ppid:1 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x184f/0x4c30 kernel/sched/core.c:6690 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7012 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__update_page_owner_free_handle mm/page_owner.c:268 [inline] RIP: 0010:__reset_page_owner+0x11f/0x430 mm/page_owner.c:298 Code: 30 48 89 54 24 10 eb 0a 4c 03 3d bc 13 3b 18 41 ff c4 66 83 7c 24 04 1f 0f 87 a1 01 00 00 e8 28 a0 8b ff 44 89 e7 8b 5c 24 24 <89> de e8 da a1 8b ff 44 39 e3 0f 84 a5 01 00 00 4c 8b 35 0a 99 9d RSP: 0018:ffffc900043977b0 EFLAGS: 00000293 RAX: ffffffff82093a38 RBX: 0000000000000001 RCX: ffff88807b94bc00 RDX: 0000000000000000 RSI: 0000000006ac0414 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff820939d8 R09: 000000000000000d R10: dffffc0000000000 R11: fffffbfff203a13e R12: 0000000000000000 R13: dffffc0000000000 R14: 0000000006ac0414 R15: ffff88801c485a70 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638 discard_slab mm/slub.c:2677 [inline] __put_partials+0xeb/0x130 mm/slub.c:3145 put_cpu_partial+0x17c/0x250 mm/slub.c:3220 __slab_free+0x2ea/0x3d0 mm/slub.c:4449 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4085 [inline] slab_alloc_node mm/slub.c:4134 [inline] __kmalloc_cache_noprof+0x132/0x2c0 mm/slub.c:4290 kmalloc_noprof include/linux/slab.h:878 [inline] syslog_print+0x121/0x9c0 kernel/printk/printk.c:1588 do_syslog+0x3c2/0x820 kernel/printk/printk.c:1766 __do_sys_syslog kernel/printk/printk.c:1858 [inline] __se_sys_syslog kernel/printk/printk.c:1856 [inline] __x64_sys_syslog+0x7c/0x90 kernel/printk/printk.c:1856 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f607e7d0fa7 RSP: 002b:00007ffce10bc038 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 RAX: ffffffffffffffda RBX: 00007f607e96f4a0 RCX: 00007f607e7d0fa7 RDX: 00000000000003ff RSI: 00007f607e96f4a0 RDI: 0000000000000002 RBP: 0000000000000000 R08: 0000000000000007 R09: 404e4a09d4ac18bd R10: 0000000000004000 R11: 0000000000000206 R12: 00007f607e96f4a0 R13: 00007f607e95f212 R14: 00007f607e96f81c R15: 00007f607e96f81c task:syz.5.842 state:R running task stack:23408 pid:8000 tgid:8000 ppid:5845 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x184f/0x4c30 kernel/sched/core.c:6690 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6869 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6893 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 unwind_next_frame+0x18f8/0x22d0 arch/x86/kernel/unwind_orc.c:672 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638 __slab_free+0x31b/0x3d0 mm/slub.c:4490 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4085 [inline] slab_alloc_node mm/slub.c:4134 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4141 mt_alloc_one lib/maple_tree.c:162 [inline] mas_alloc_nodes+0x26c/0x840 lib/maple_tree.c:1241 mas_node_count_gfp lib/maple_tree.c:1321 [inline] mas_preallocate+0x554/0x8c0 lib/maple_tree.c:5546 vma_iter_prealloc mm/vma.h:440 [inline] __split_vma+0x302/0xc50 mm/vma.c:397 split_vma mm/vma.c:460 [inline] vma_modify+0x153a/0x1a80 mm/vma.c:1440 vma_modify_flags+0x3a5/0x430 mm/vma.c:1458 mprotect_fixup+0x45a/0xaa0 mm/mprotect.c:664 do_mprotect_pkey+0x8d4/0xd70 mm/mprotect.c:838 __do_sys_mprotect mm/mprotect.c:859 [inline] __se_sys_mprotect mm/mprotect.c:856 [inline] __x64_sys_mprotect+0x80/0x90 mm/mprotect.c:856 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f00c837e7d7 RSP: 002b:00007fffc72a4738 EFLAGS: 00000206 ORIG_RAX: 000000000000000a RAX: ffffffffffffffda RBX: 00007f00c91366c0 RCX: 00007f00c837e7d7 RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f00c9117000 RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffc72a4890 R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10600 jiffies! g14561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25920 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0x184f/0x4c30 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6782 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 RIP: 0010:unwind_next_frame+0x315/0x22d0 arch/x86/kernel/unwind_orc.c:505 Code: 64 48 01 d2 48 01 f2 0f 84 42 01 00 00 48 8d 5a 04 4c 8d 72 05 48 89 d8 48 c1 e8 03 48 bd 00 00 00 00 00 fc ff df 0f b6 04 28 <84> c0 0f 85 58 18 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f RSP: 0018:ffffc90000156750 EFLAGS: 00000213 RAX: 0000000000000000 RBX: ffffffff90a4ba4e RCX: ffffffff902ec214 RDX: ffffffff90a4ba4a RSI: ffffffff90a4ba4a RDI: 0000000000000001 RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffc90000156910 R10: dffffc0000000000 R11: ffffffff818092c0 R12: 0000000000000000 R13: ffffc90000156820 R14: ffffffff90a4ba4f R15: ffffffff8161e6d5 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0e3a3062d8 CR3: 0000000060f38000 CR4: 0000000000350ef0 Call Trace: arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack+0x3f/0x60 mm/kasan/common.c:47 __kasan_record_aux_stack+0xac/0xc0 mm/kasan/generic.c:541 kvfree_call_rcu+0xfc/0x790 kernel/rcu/tree.c:3810 cfg80211_update_known_bss+0xb45/0x1590 net/wireless/scan.c:1891 __cfg80211_bss_update+0x153/0x2030 net/wireless/scan.c:1938 cfg80211_inform_single_bss_data+0xd82/0x2090 net/wireless/scan.c:2329 cfg80211_inform_bss_data+0x3ce/0x5e80 net/wireless/scan.c:3188 cfg80211_inform_bss_frame_data+0x3b8/0x720 net/wireless/scan.c:3283 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5225 [inline] ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5462 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485 ieee80211_rx include/net/mac80211.h:5138 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:441 tasklet_action_common+0x323/0x4d0 kernel/softirq.c:784 handle_softirqs+0x2c7/0x980 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:927 smpboot_thread_fn+0x546/0xa30 kernel/smpboot.c:164 kthread+0x2f2/0x390 kernel/kthread.c:389 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 23025 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:09:62:c4:44:14, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:09:62:c4:44:14, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)