bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5637/1:b..l rcu: (detected by 0, t=10502 jiffies, g=60785, q=1623 ncpus=2) task:kworker/0:3 state:R running task stack:24744 pid:5637 tgid:5637 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: mld mld_ifc_work Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:unwind_next_frame+0x19d8/0x2550 arch/x86/kernel/unwind_orc.c:693 Code: 49 8d 56 40 4c 89 f7 4c 89 c6 e8 33 0e 00 00 84 c0 0f 84 4e 01 00 00 48 bb 00 00 00 00 00 fc ff df 48 8b 44 24 10 0f b6 04 18 <84> c0 0f 85 7b 08 00 00 40 b5 01 8b 44 24 5c 41 39 06 4c 8b 6c 24 RSP: 0018:ffffc900044872a0 EFLAGS: 00000202 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 RDX: ffffc90004487388 RSI: dffffc0000000000 RDI: ffffc90004487af0 RBP: 1ffffffff22b6cc4 R08: ffffc90004487af0 R09: 0000000000000000 R10: ffffc90004487398 R11: fffff52000890e75 R12: dffffc0000000000 R13: ffffffff915b661f R14: ffffc90004487348 R15: ffffc90004487390 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950 __slab_free+0x274/0x2c0 mm/slub.c:5767 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5362 [inline] __kmalloc_node_track_caller_noprof+0x4c3/0x730 mm/slub.c:5497 kmalloc_reserve net/core/skbuff.c:637 [inline] __alloc_skb+0x2bd/0x7a0 net/core/skbuff.c:715 alloc_skb include/linux/skbuff.h:1384 [inline] mld_newpack+0x165/0xcb0 net/ipv6/mcast.c:1773 add_grhead net/ipv6/mcast.c:1884 [inline] add_grec+0x119f/0x19d0 net/ipv6/mcast.c:2023 mld_send_cr net/ipv6/mcast.c:2109 [inline] mld_ifc_work+0x30b/0xe70 net/ipv6/mcast.c:2694 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread starved for 4825 jiffies! g60785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 6992 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: events_unbound nsim_dev_trap_report_work RIP: 0010:match_held_lock+0x76/0xb0 kernel/locking/lockdep.c:-1 Code: ff 1f 00 00 48 c7 c2 10 65 e8 93 48 29 d0 48 c1 f8 03 48 ba 29 5c 8f c2 f5 28 5c 8f 48 0f af d0 bb 01 00 00 00 48 39 ca 74 02 <31> db 89 d8 5b 41 5e e9 0e fb 02 00 cc 90 e8 c7 2b 01 f9 85 c0 74 RSP: 0018:ffffc90000a08098 EFLAGS: 00000083 RAX: 0000000000000007 RBX: 0000000000000001 RCX: 0000000080000102 RDX: 0000000000000100 RSI: ffffffff8fdeac00 RDI: ffff8880272be968 RBP: 00000000ffffffff R08: ffffc90000a08420 R09: ffffc90000a08430 R10: ffffc90000a08280 R11: fffff52000141052 R12: 0000000000000246 R13: ffff8880272bdd00 R14: ffffffff8fdeac00 R15: 0000000000000005 FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f122dd276c8 CR3: 000000000e746000 CR4: 00000000003526f0 Call Trace: __lock_is_held kernel/locking/lockdep.c:5601 [inline] lock_is_held_type+0x89/0x150 kernel/locking/lockdep.c:5940 lock_is_held include/linux/lockdep.h:249 [inline] lockdep_rtnl_is_held+0x1b/0x40 net/core/rtnetlink.c:182 __in6_dev_get include/net/addrconf.h:348 [inline] ip6_ignore_linkdown+0x4f/0x140 include/net/addrconf.h:452 find_match+0x9c/0xb40 net/ipv6/route.c:783 __find_rr_leaf+0x243/0x740 net/ipv6/route.c:872 find_rr_leaf net/ipv6/route.c:893 [inline] rt6_select net/ipv6/route.c:937 [inline] fib6_table_lookup+0x3c6/0xae0 net/ipv6/route.c:2255 ip6_pol_route+0x229/0x14d0 net/ipv6/route.c:2292 pol_lookup_func include/net/ip6_fib.h:669 [inline] __fib6_rule_action net/ipv6/fib6_rules.c:240 [inline] fib6_rule_action+0x9d7/0xc00 net/ipv6/fib6_rules.c:278 fib_rules_lookup+0x770/0xeb0 net/core/fib_rules.c:340 fib6_rule_lookup+0x1a0/0x730 net/ipv6/fib6_rules.c:115 ip6_route_input_lookup net/ipv6/route.c:2363 [inline] ip6_route_input+0x78d/0xb20 net/ipv6/route.c:2666 ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x774/0x1860 net/core/dev.c:6670 __napi_poll+0xaa/0x330 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7949 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:891 [inline] nsim_dev_trap_report_work+0x7a4/0xb40 drivers/net/netdevsim/dev.c:922 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 7499 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) net_ratelimit: 7385 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:36:2f:87:e2:70, vlan:1)