bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6087/1:b..l rcu: (detected by 0, t=10503 jiffies, g=8909, q=1244 ncpus=2) task:syz.5.24 state:R running task stack:25256 pid:6087 tgid:6086 ppid:5858 task_flags:0x400140 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288 irqentry_exit+0x6f/0x90 kernel/entry/common.c:197 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:page_ext_iter_next_fast_possible include/linux/page_ext.h:80 [inline] RIP: 0010:page_ext_iter_next include/linux/page_ext.h:155 [inline] RIP: 0010:__update_page_owner_free_handle+0x295/0x470 mm/page_owner.c:272 Code: 18 84 c0 0f 85 02 01 00 00 44 89 7d 00 4c 8b 64 24 20 4f 8d 3c 34 4c 89 fe 48 81 e6 ff 7f 00 00 31 ff e8 2e 3a 93 ff 4c 89 f8 <48> 25 ff 7f 00 00 74 32 e8 3e 35 93 ff 48 8b 44 24 18 80 3c 18 00 RSP: 0018:ffffc90004817470 EFLAGS: 00000297 RAX: 000000000004ca92 RBX: dffffc0000000000 RCX: ffff88802e570000 RDX: 0000000000000002 RSI: 0000000000004a92 RDI: 0000000000000000 RBP: ffff88801cd74d94 R08: ffff88801cd74d57 R09: 1ffff110039ae9aa R10: dffffc0000000000 R11: ffffed10039ae9ab R12: 000000000004ca92 R13: 00000000000017c7 R14: 0000000000000000 R15: 000000000004ca92 __reset_page_owner+0x85/0x1f0 mm/page_owner.c:309 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2895 __slab_free+0x303/0x3c0 mm/slub.c:4591 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:340 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4180 [inline] slab_alloc_node mm/slub.c:4229 [inline] __kmalloc_cache_noprof+0x1be/0x3d0 mm/slub.c:4391 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] vlan_info_alloc net/8021q/vlan_core.c:153 [inline] vlan_vid_add+0x145/0x760 net/8021q/vlan_core.c:329 __vlan_vid_add net/bridge/br_vlan.c:114 [inline] __vlan_add+0x342/0x2660 net/bridge/br_vlan.c:284 nbp_vlan_add+0x262/0x3c0 net/bridge/br_vlan.c:1341 nbp_vlan_init+0x35b/0x440 net/bridge/br_vlan.c:1280 br_add_if+0xaa1/0xec0 net/bridge/br_if.c:677 add_del_if net/bridge/br_ioctl.c:99 [inline] br_dev_siocdevprivate+0xb11/0x1580 net/bridge/br_ioctl.c:160 dev_siocdevprivate net/core/dev_ioctl.c:521 [inline] dev_ifsioc+0xb57/0xf00 net/core/dev_ioctl.c:633 dev_ioctl+0x84c/0x1150 net/core/dev_ioctl.c:851 sock_ioctl+0x719/0x790 net/socket.c:1284 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:598 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:584 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f364098ebe9 RSP: 002b:00007f36417d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f3640bb5fa0 RCX: 00007f364098ebe9 RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 RBP: 00007f3640a11e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3640bb6038 R14: 00007f3640bb5fa0 R15: 00007fffa657e8d8 rcu: rcu_preempt kthread starved for 8964 jiffies! g8909 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:82 Code: 3e ad 96 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 13 ad 96 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 RAX: f5642c57eef15300 RBX: ffffffff819683b8 RCX: f5642c57eef15300 RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395db40 FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000025000 CR3: 0000000059718000 CR4: 0000000000350ef0 Call Trace: arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:757 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 start_secondary+0x101/0x110 arch/x86/kernel/smpboot.c:315 common_startup_64+0x13e/0x147 net_ratelimit: 28659 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:72:a9:34:7c:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:72:a9:34:7c:0c, vlan:0) net_ratelimit: 33477 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:72:a9:34:7c:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:72:a9:34:7c:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:72:a9:34:7c:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)