bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1838/2:b..l rcu: (detected by 1, t=10503 jiffies, g=6109, q=993 ncpus=2) task:kworker/u8:5 state:R running task stack:23768 pid:1838 tgid:1838 ppid:2 flags:0x00004000 Workqueue:  addrconf_dad_work Call Trace: context_switch kernel/sched/core.c:5270 [inline] __schedule+0x17ff/0x4ad0 kernel/sched/core.c:6639 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6818 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6842 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0x179/0x200 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x1763/0x3e90 net/core/dev.c:4450 dev_queue_xmit include/linux/netdevice.h:3073 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip6_finish_output2+0xfc2/0x1680 net/ipv6/ip6_output.c:137 ip6_finish_output+0x41e/0x810 net/ipv6/ip6_output.c:222 NF_HOOK+0x9e/0x430 include/linux/netfilter.h:314 mld_sendpack+0x843/0xdb0 net/ipv6/mcast.c:1818 ipv6_mc_dad_complete+0x88/0x490 net/ipv6/mcast.c:2244 addrconf_dad_completed+0x712/0xcd0 net/ipv6/addrconf.c:4344 addrconf_dad_work+0xdc2/0x16f0 process_one_work kernel/workqueue.c:3232 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3313 worker_thread+0x86d/0xd10 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: rcu_preempt kthread starved for 10438 jiffies! g6109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26016 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5270 [inline] __schedule+0x17ff/0x4ad0 kernel/sched/core.c:6639 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6961 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:19 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:87 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:123 [inline] RIP: 0010:__timer_delete_sync+0x8f/0x310 kernel/time/timer.c:1646 Code: ec 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 3c 66 43 c7 44 3c 09 f3 f3 43 c6 44 3c 0b f3 e8 48 6e 13 00 4c 89 f3 48 c1 eb 03 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 12 fe 7b 00 48 c7 44 24 60 00 00 RSP: 0000:ffffc90000167ac0 EFLAGS: 00000a02 RAX: ffffffff81802438 RBX: 1ffff9200002cf64 RCX: ffff888017ee8000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000167bc0 RBP: ffffc90000167b90 R08: ffffffff9018b8af R09: 1ffffffff2031715 R10: dffffc0000000000 R11: fffffbfff2031716 R12: 1ffff9200002cf5c R13: ffffc90000167bc0 R14: ffffc90000167b20 R15: dffffc0000000000 timer_delete_sync kernel/time/timer.c:1720 [inline] del_timer_sync include/linux/timer.h:185 [inline] schedule_timeout+0x1c8/0x310 kernel/time/timer.c:2582 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5245 Comm: kworker/u9:4 Not tainted 6.11.0-rc3-next-20240815-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: krxrpcd rxrpc_peer_keepalive_worker RIP: 0010:unwind_next_frame+0x7/0x22d0 arch/x86/kernel/unwind_orc.c:469 Code: 07 80 c1 03 38 c1 7c 91 4c 89 f7 e8 23 fb ba 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 <41> 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fd 49 bc 00 00 00 RSP: 0000:ffffc90000006628 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffc90000006640 RCX: ffffffff9175d000 RDX: dffffc0000000000 RSI: ffffffff8be014ca RDI: ffffc90000006640 RBP: ffffc900000066d0 R08: 000000000000001e R09: ffffc90000006730 R10: ffffc90000006690 R11: ffffffff817f23e0 R12: ffff888066b63c00 R13: ffffffff817f23e0 R14: ffffc90000006720 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8dcb92af98 CR3: 000000002dc70000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2295 [inline] slab_free mm/slub.c:4517 [inline] kmem_cache_free+0x195/0x3d0 mm/slub.c:4619 kfree_skb_reason include/linux/skbuff.h:1260 [inline] kfree_skb include/linux/skbuff.h:1269 [inline] ip6_mc_input+0xa1f/0xc30 net/ipv6/ip6_input.c:589 ip_sabotage_in+0x203/0x290 net/bridge/br_netfilter_hooks.c:1012 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775 netif_receive_skb_internal net/core/dev.c:5861 [inline] netif_receive_skb+0x1e8/0x890 net/core/dev.c:5921 NF_HOOK+0x9e/0x400 include/linux/netfilter.h:314 br_handle_frame_finish+0x18ed/0x1fe0 br_nf_hook_thresh+0x472/0x590 br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424 __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5555 __netif_receive_skb_one_core net/core/dev.c:5659 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6108 __napi_poll+0xcb/0x490 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6963 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1037 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:raw_spin_rq_unlock_irq+0x19/0x90 kernel/sched/sched.h:1498 Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 48 89 fb 66 90 48 89 df e8 be e9 5f 0a e8 59 12 36 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc f3 0f 1e fa 49 bf 00 00 00 00 00 fc ff RSP: 0000:ffffc90003d576c8 EFLAGS: 00000282 RAX: 2e90a0fb971d0c00 RBX: ffff8880b903ea40 RCX: ffffffff81705e3a RDX: dffffc0000000000 RSI: ffffffff8c0ace40 RDI: ffffffff8c609dc0 RBP: ffffc90003d578d0 R08: ffffffff9375c897 R09: 1ffffffff26eb912 R10: dffffc0000000000 R11: fffffbfff26eb913 R12: ffff888066b63c18 R13: 0000000000000001 R14: ffff888066b63c00 R15: ffff888066b64370 __schedule+0x1a3a/0x4ad0 kernel/sched/core.c:6643 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6961 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5766 Code: 2b 00 74 08 4c 89 f7 e8 2a 39 8c 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0000:ffffc90003d57a60 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff920007aaf58 RCX: 2e90a0fb971d0c00 RDX: dffffc0000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c609dc0 RBP: ffffc90003d57ba8 R08: ffffffff9375c897 R09: 1ffffffff26eb912 R10: dffffc0000000000 R11: fffffbfff26eb913 R12: 1ffff920007aaf54 R13: dffffc0000000000 R14: ffffc90003d57ac0 R15: 0000000000000246 process_one_work kernel/workqueue.c:3207 [inline] process_scheduled_works+0x950/0x1850 kernel/workqueue.c:3313 worker_thread+0x86d/0xd10 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 18051 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:74:53:89:90:9f, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:74:53:89:90:9f, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:74:53:89:90:9f, vlan:0)