bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18261/1:b..l
rcu: (detected by 1, t=10503 jiffies, g=53029, q=444 ncpus=2)
task:syz-executor state:R running task stack:28032 pid:18261 tgid:18261 ppid:5911 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7078
irqentry_exit+0x36/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:avtab_search_node+0x0/0x4b0 security/selinux/ss/avtab.c:179
Code: ff e8 a4 55 a3 fd e9 2e ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 57 41 56 41 55 41 54 55 48 89 f5 53 48 89 fb 48 83
RSP: 0018:ffffc9000f9c75f0 EFLAGS: 00000202
RAX: 0000000000000316 RBX: 0000000000000315 RCX: ffffffff845b5ba3
RDX: ffff888049478000 RSI: ffffc9000f9c76e8 RDI: ffff8880293da930
RBP: ffff88802e556960 R08: 0000000000000004 R09: 0000000000000600
R10: 0000000000000315 R11: 0000000000000000 R12: ffff88802e556968
R13: 0000000000000600 R14: ffffc9000f9c7990 R15: dffffc0000000000
context_struct_compute_av+0x63c/0x1270 security/selinux/ss/services.c:657
security_compute_av+0x48f/0xfd0 security/selinux/ss/services.c:1146
avc_compute_av+0x86/0x5c0 security/selinux/avc.c:986
avc_perm_nonode+0xaa/0x170 security/selinux/avc.c:1110
avc_has_perm_noaudit+0x2d2/0x3a0 security/selinux/avc.c:1153
selinux_inode_permission+0x361/0x590 security/selinux/hooks.c:3118
security_inode_permission+0xda/0x260 security/security.c:2319
inode_permission fs/namei.c:600 [inline]
inode_permission+0x17a/0x5f0 fs/namei.c:567
may_open+0x11c/0x400 fs/namei.c:3418
do_open fs/namei.c:3826 [inline]
path_openat+0x136d/0x2d60 fs/namei.c:3987
do_filp_open+0x20c/0x470 fs/namei.c:4014
do_sys_openat2+0x17a/0x1e0 fs/open.c:1402
do_sys_open fs/open.c:1417 [inline]
__do_sys_openat fs/open.c:1433 [inline]
__se_sys_openat fs/open.c:1428 [inline]
__x64_sys_openat+0x175/0x210 fs/open.c:1428
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdc0677e880
RSP: 002b:00007fff785353b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007fdc0677e880
RDX: 0000000000080001 RSI: 00007fdc067f5475 RDI: 00000000ffffff9c
RBP: 00007fdc067f5475 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
R13: 00007fff78535450 R14: 00000000000547d8 R15: 00007fff785359b0
rcu: rcu_preempt kthread starved for 3087 jiffies! g53029 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28424 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0xe7/0x350 kernel/sched/core.c:6848
schedule_timeout+0x124/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045
rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 72 Comm: kworker/u8:4 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:26 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 kernel/kcov.c:217
Code: cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 74 d5 69 7e <65> 8b 05 75 d5 69 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74
RSP: 0018:ffffc90000a17d48 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffffffff2dcf7e8
RDX: ffff88801bbf8000 RSI: ffffffff89fd32b9 RDI: ffffffff8bd1d280
RBP: 0000000000000038 R08: 0000000000000001 R09: fffffbfff2dc99a7
R10: ffffffff96e4cd3f R11: 0000000000000008 R12: ffff88815302ce90
R13: ffff88815302ce3f R14: 00000000000005dc R15: ffff88815302cdc0
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d448ee6028 CR3: 0000000035e2e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
br_nf_dev_queue_xmit+0x5b1/0x2a10 net/bridge/br_netfilter_hooks.c:954
NF_HOOK include/linux/netfilter.h:314 [inline]
NF_HOOK include/linux/netfilter.h:308 [inline]
br_nf_post_routing+0x8ee/0x11b0 net/bridge/br_netfilter_hooks.c:997
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626
nf_hook+0x474/0x7d0 include/linux/netfilter.h:269
NF_HOOK include/linux/netfilter.h:312 [inline]
br_forward_finish+0xcd/0x130 net/bridge/br_forward.c:66
br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1198
br_nf_forward_finish+0x66a/0xba0 net/bridge/br_netfilter_hooks.c:693
NF_HOOK include/linux/netfilter.h:314 [inline]
NF_HOOK include/linux/netfilter.h:308 [inline]
br_nf_forward_ip.part.0+0x610/0x820 net/bridge/br_netfilter_hooks.c:747
br_nf_forward_ip net/bridge/br_netfilter_hooks.c:707 [inline]
br_nf_forward+0xf11/0x1bd0 net/bridge/br_netfilter_hooks.c:804
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626
nf_hook+0x474/0x7d0 include/linux/netfilter.h:269
NF_HOOK include/linux/netfilter.h:312 [inline]
__br_forward+0x1be/0x5b0 net/bridge/br_forward.c:115
deliver_clone+0x5b/0xa0 net/bridge/br_forward.c:131
br_flood+0x493/0x5c0 net/bridge/br_forward.c:245
br_handle_frame_finish+0xda5/0x1c80 net/bridge/br_input.c:215
br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1198
br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154
NF_HOOK include/linux/netfilter.h:314 [inline]
br_nf_pre_routing_ipv6+0x3ce/0x8c0 net/bridge/br_netfilter_ipv6.c:184
br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:536
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]
br_handle_frame+0x9eb/0x1490 net/bridge/br_input.c:424
__netif_receive_skb_core.constprop.0+0xa76/0x4470 net/core/dev.c:5566
__netif_receive_skb_one_core+0xb1/0x1e0 net/core/dev.c:5670
__netif_receive_skb+0x1d/0x160 net/core/dev.c:5785
process_backlog+0x443/0x15f0 net/core/dev.c:6117
__napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6883
napi_poll net/core/dev.c:6952 [inline]
net_rx_action+0xa94/0x1010 net/core/dev.c:7074
handle_softirqs+0x213/0x8f0 kernel/softirq.c:561
do_softirq kernel/softirq.c:462 [inline]
do_softirq+0xb2/0xf0 kernel/softirq.c:449
__local_bh_enable_ip+0x100/0x120 kernel/softirq.c:389
spin_unlock_bh include/linux/spinlock.h:396 [inline]
cfg80211_inform_single_bss_data+0x9b6/0x1de0 net/wireless/scan.c:2350
cfg80211_inform_bss_data+0x205/0x3ba0 net/wireless/scan.c:3189
cfg80211_inform_bss_frame_data+0x272/0x7a0 net/wireless/scan.c:3284
ieee80211_bss_info_update+0x311/0xab0 net/mac80211/scan.c:226
ieee80211_rx_bss_info net/mac80211/ibss.c:1101 [inline]
ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1580 [inline]
ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 net/mac80211/ibss.c:1607
ieee80211_iface_process_skb net/mac80211/iface.c:1616 [inline]
ieee80211_iface_work+0xc0b/0xf00 net/mac80211/iface.c:1670
cfg80211_wiphy_work+0x3de/0x560 net/wireless/core.c:440
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
net_ratelimit: 35708 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:7e:b1:a8:59:2c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:7e:b1:a8:59:2c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:7e:b1:a8:59:2c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:7e:b1:a8:59:2c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)