bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5234/1:b..l P14171/1:b..l P5223/1:b..l P5529/1:b..l P5849/1:b..l rcu: (detected by 1, t=10504 jiffies, g=92917, q=188 ncpus=2) task:syz-executor state:R running task stack:21520 pid:5849 tgid:5849 ppid:5848 task_flags:0x400100 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288 irqentry_exit+0x6f/0x90 kernel/entry/common.c:197 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x175/0x360 kernel/locking/lockdep.c:5872 Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb 63 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc900041ff618 EFLAGS: 00000206 RAX: 149d117030c70700 RBX: 0000000000000000 RCX: 149d117030c70700 RDX: 0000000000000000 RSI: ffffffff8dba33c3 RDI: ffffffff8be32600 RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 R10: ffffc900041ff838 R11: fffff5200083ff09 R12: 0000000000000002 R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0xc2/0x2390 arch/x86/kernel/unwind_orc.c:479 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:758 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2895 discard_slab mm/slub.c:2753 [inline] __put_partials+0x156/0x1a0 mm/slub.c:3218 put_cpu_partial+0x17c/0x250 mm/slub.c:3293 __slab_free+0x2d5/0x3c0 mm/slub.c:4550 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:396 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4365 [inline] __kmalloc_noprof+0x27a/0x4f0 mm/slub.c:4377 kmalloc_noprof include/linux/slab.h:909 [inline] kmalloc_array_noprof include/linux/slab.h:948 [inline] alloc_pipe_info+0x1fd/0x4d0 fs/pipe.c:815 get_pipe_inode fs/pipe.c:894 [inline] create_pipe_files+0x8a/0x7e0 fs/pipe.c:926 __do_pipe_flags+0x46/0x1f0 fs/pipe.c:988 do_pipe2+0x9c/0x170 fs/pipe.c:1036 __do_sys_pipe2 fs/pipe.c:1054 [inline] __se_sys_pipe2 fs/pipe.c:1052 [inline] __x64_sys_pipe2+0x5a/0x70 fs/pipe.c:1052 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f3d29f8d909 RSP: 002b:00007fff3bfc8898 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 RAX: ffffffffffffffda RBX: 00005555793cc950 RCX: 00007f3d29f8d909 RDX: 0000000000000006 RSI: 0000000000000000 RDI: 00007fff3bfc88a8 RBP: 00007fff3bfc8c60 R08: 0000000000000007 R09: 00005555793cd5b0 R10: 2faf98587a07cfa8 R11: 0000000000000246 R12: 00005555793ccb20 R13: 00005555793d1108 R14: 00007fff3bfc89e0 R15: 00005555793cb570 task:dhcpcd state:R running task stack:21384 pid:5529 tgid:5529 ppid:5528 task_flags:0x400140 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288 irqentry_exit+0x6f/0x90 kernel/entry/common.c:197 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_release+0x2b5/0x3e0 kernel/locking/lockdep.c:5893 Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 7b 51 02 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc90003567150 EFLAGS: 00000206 RAX: 8225a15d36470500 RBX: 0000000000000202 RCX: 8225a15d36470500 RDX: 0000000000000001 RSI: ffffffff8dba33c3 RDI: ffffffff8be32600 RBP: ffff88802db54718 R08: ffffc90003567848 R09: 0000000000000000 R10: ffffc900035672d8 R11: fffff520006ace5d R12: 0000000000000001 R13: 0000000000000001 R14: ffffffff8e139ee0 R15: ffff88802db53c00 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0x19a9/0x2390 arch/x86/kernel/unwind_orc.c:680 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2895 discard_slab mm/slub.c:2753 [inline] __put_partials+0x156/0x1a0 mm/slub.c:3218 put_cpu_partial+0x17c/0x250 mm/slub.c:3293 __slab_free+0x2d5/0x3c0 mm/slub.c:4550 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:396 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4365 [inline] __kmalloc_node_track_caller_noprof+0x271/0x4e0 mm/slub.c:4384 kmalloc_reserve+0x136/0x290 net/core/skbuff.c:600 __alloc_skb+0x142/0x2d0 net/core/skbuff.c:669 alloc_skb include/linux/skbuff.h:1336 [inline] alloc_skb_with_frags+0xca/0x890 net/core/skbuff.c:6665 sock_alloc_send_pskb+0x857/0x990 net/core/sock.c:2980 unix_dgram_sendmsg+0x461/0x1850 net/unix/af_unix.c:2153 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 __sys_sendto+0x3bd/0x520 net/socket.c:2228 __do_sys_sendto net/socket.c:2235 [inline] __se_sys_sendto net/socket.c:2231 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2231 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa3be0e1407 RSP: 002b:00007ffc8bdc9bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fa3be057740 RCX: 00007fa3be0e1407 RDX: 0000000000000043 RSI: 00007ffc8bdc9d10 RDI: 0000000000000003 RBP: 00007ffc8bdca140 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc8bdca590 R13: 00007ffc8bdc9d10 R14: 0000000000000021 R15: 00007ffc8bdc9d10 task:klogd state:R running task stack:22952 pid:5223 tgid:5223 ppid:1 task_flags:0x400100 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 preempt_schedule_notrace+0xd1/0x110 kernel/sched/core.c:7238 preempt_schedule_notrace_thunk+0x16/0x30 arch/x86/entry/thunk.S:13 rcu_is_watching+0x7f/0xb0 kernel/rcu/tree.c:752 trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0x4b/0x3e0 kernel/locking/lockdep.c:5879 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0x19a9/0x2390 arch/x86/kernel/unwind_orc.c:680 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2895 discard_slab mm/slub.c:2753 [inline] __put_partials+0x156/0x1a0 mm/slub.c:3218 put_cpu_partial+0x17c/0x250 mm/slub.c:3293 __slab_free+0x2d5/0x3c0 mm/slub.c:4550 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:396 kasan_kmalloc include/linux/kasan.h:260 [inline] __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4396 kmalloc_noprof include/linux/slab.h:905 [inline] syslog_print+0xd2/0x590 kernel/printk/printk.c:1607 do_syslog+0x544/0x760 kernel/printk/printk.c:1785 __do_sys_syslog kernel/printk/printk.c:1877 [inline] __se_sys_syslog kernel/printk/printk.c:1875 [inline] __x64_sys_syslog+0x7c/0x90 kernel/printk/printk.c:1875 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8f41cfba37 RSP: 002b:00007ffc6e8ba478 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 RAX: ffffffffffffffda RBX: 00007f8f41e9b490 RCX: 00007f8f41cfba37 RDX: 00000000000003ff RSI: 00007f8f41e9b490 RDI: 0000000000000002 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000206 R12: 00007f8f41e9b490 R13: 00007f8f41e78dfe R14: 00007f8f41e9b80e R15: 00007f8f41e9b80e task:syz-executor state:R running task stack:21736 pid:14171 tgid:14171 ppid:14164 task_flags:0x400140 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288 irqentry_exit+0x6f/0x90 kernel/entry/common.c:197 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:114 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:128 [inline] RIP: 0010:lock_acquire+0xda/0x360 kernel/locking/lockdep.c:5864 Code: 9f 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 48 c7 c7 02 7f 9c 8d e8 d9 56 db 09 65 ff 05 82 a4 02 11 45 31 RSP: 0018:ffffc900042df650 EFLAGS: 00000246 RAX: ffff88802c3f3c00 RBX: 0000000000000000 RCX: 507a7fd32e494100 RDX: 0000000000000000 RSI: ffffffff81cea217 RDI: 1ffffffff1c273dc RBP: ffffffff81cea1f6 R08: 0000000000000000 R09: 0000000000000000 R10: ffffc900042df7d8 R11: ffffffff81ac3890 R12: 0000000000000002 R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] is_bpf_text_address+0x47/0x2b0 kernel/bpf/core.c:776 kernel_text_address+0xa5/0xe0 kernel/extable.c:125 __kernel_text_address+0xd/0x40 kernel/extable.c:79 unwind_get_return_address+0x4d/0x90 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0xfc/0x150 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2895 discard_slab mm/slub.c:2753 [inline] __put_partials+0x156/0x1a0 mm/slub.c:3218 put_cpu_partial+0x17c/0x250 mm/slub.c:3293 __slab_free+0x2d5/0x3c0 mm/slub.c:4550 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:340 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4180 [inline] slab_alloc_node mm/slub.c:4229 [inline] kmem_cache_alloc_noprof+0x1c1/0x3c0 mm/slub.c:4236 getname_flags+0xb8/0x540 fs/namei.c:146 getname include/linux/fs.h:2918 [inline] getname_maybe_null include/linux/fs.h:2925 [inline] vfs_fstatat+0x43/0x170 fs/stat.c:370 __do_sys_newfstatat fs/stat.c:542 [inline] __se_sys_newfstatat fs/stat.c:536 [inline] __x64_sys_newfstatat+0x116/0x190 fs/stat.c:536 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc63498d3fa RSP: 002b:00007fc634cdecb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 00007fc634a11c05 RCX: 00007fc63498d3fa RDX: 00007fc634cdece0 RSI: 00007fc634cded70 RDI: 00000000ffffff9c RBP: 00007fc634cded70 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000286 R12: 00007fc634cdfe00 R13: 00007fc634a11c05 R14: 0000000000000005 R15: 00007fc634cdfe40 task:udevd state:R running task stack:22952 pid:5234 tgid:5234 ppid:1 task_flags:0x400140 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288 irqentry_exit+0x6f/0x90 kernel/entry/common.c:197 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:unwind_next_frame+0x17c4/0x2390 arch/x86/kernel/unwind_orc.c:-1 Code: fb 0a 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 0e 0b 00 00 49 0f bf 04 24 48 01 c6 4c 89 f7 48 89 da e8 4c 0e 00 00 <84> c0 0f 84 47 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 RSP: 0018:ffffc90002ff72b8 EFLAGS: 00000282 RAX: 1ffff920005fee01 RBX: ffffffff903216e6 RCX: 0000000000000001 RDX: ffffc90002ff7428 RSI: dffffc0000000000 RDI: ffffc90002ff7470 RBP: dffffc0000000000 R08: ffffc90002ff7470 R09: 0000000000000000 R10: ffffc90002ff7438 R11: fffff520005fee89 R12: ffffc90002ff7470 R13: ffffc90002ff7438 R14: ffffc90002ff73e8 R15: 1ffffffff20642dd __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:758 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2895 discard_slab mm/slub.c:2753 [inline] __put_partials+0x156/0x1a0 mm/slub.c:3218 put_cpu_partial+0x17c/0x250 mm/slub.c:3293 __slab_free+0x2d5/0x3c0 mm/slub.c:4550 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:340 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4180 [inline] slab_alloc_node mm/slub.c:4229 [inline] __do_kmalloc_node mm/slub.c:4364 [inline] __kmalloc_noprof+0x224/0x4f0 mm/slub.c:4377 kmalloc_noprof include/linux/slab.h:909 [inline] tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x213/0x4b0 security/tomoyo/file.c:822 security_inode_getattr+0x12f/0x330 security/security.c:2377 vfs_getattr fs/stat.c:259 [inline] vfs_statx_path fs/stat.c:299 [inline] vfs_statx+0x18e/0x550 fs/stat.c:356 vfs_fstatat+0x118/0x170 fs/stat.c:375 __do_sys_newfstatat fs/stat.c:542 [inline] __se_sys_newfstatat fs/stat.c:536 [inline] __x64_sys_newfstatat+0x116/0x190 fs/stat.c:536 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fda39630b0a RSP: 002b:00007ffe72991148 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055baf1e39410 RCX: 00007fda39630b0a RDX: 00007ffe72991150 RSI: 000055baf1e272a8 RDI: 00000000ffffff9c RBP: 000055baf90a2168 R08: 00063478c1c69200 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe72991150 R14: 0000000000000000 R15: 00063478c1c69200 rcu: rcu_preempt kthread starved for 10147 jiffies! g92917 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:kasan_check_range+0x5/0x2c0 mm/kasan/generic.c:188 Code: ba 8d e8 be fd 04 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d RSP: 0018:ffffc90000a08190 EFLAGS: 00000246 RAX: 0000000000000003 RBX: ffff888057398e10 RCX: ffffffff8a509e6f RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888057398e10 RBP: ffffc90000a08350 R08: ffff88801ceada00 R09: 0000000000000003 R10: 000000000000dd86 R11: 0000000000000100 R12: 1ffff92000141044 R13: 0000000000000001 R14: ffff888057398d80 R15: 1ffff1102bfcaeba FS: 0000000000000000(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005574682e4fe0 CR3: 000000007abf8000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: instrument_atomic_read include/linux/instrumented.h:68 [inline] _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline] br_opt_get net/bridge/br_private.h:758 [inline] br_handle_frame_finish+0xa9f/0x19b0 net/bridge/br_input.c:175 br_nf_hook_thresh+0x3c6/0x4a0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x948/0xd00 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x37e/0x6b0 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:283 [inline] br_handle_frame+0x97f/0x14c0 net/bridge/br_input.c:434 __netif_receive_skb_core+0x10b6/0x4020 net/core/dev.c:5866 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x72/0x380 net/core/dev.c:6092 process_backlog+0x60e/0x14f0 net/core/dev.c:6444 __napi_poll+0xc4/0x360 net/core/dev.c:7497 napi_poll net/core/dev.c:7560 [inline] net_rx_action+0x707/0xe30 net/core/dev.c:7687 handle_softirqs+0x283/0x870 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 97 0f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 RAX: 84d24f72463be600 RBX: ffffffff81968308 RCX: 84d24f72463be600 RDX: 0000000000000001 RSI: ffffffff8d9b4400 RDI: ffffffff8be32600 RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa34230 R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:757 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x147 bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:9b:4b:b1:56:b7, vlan:0)