bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P15499/1:b..l P4685/1:b..l P4647/1:b..l P13353/1:b..l
rcu: 	(detected by 0, t=10503 jiffies, g=125609, q=2045 ncpus=2)
task:syz-executor    state:R  running task     stack:20992 pid:13353 tgid:13353 ppid:13351  flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5315 [inline]
 __schedule+0x1895/0x4b30 kernel/sched/core.c:6675
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6997
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:filter_irq_stacks+0x3d/0xa0 kernel/stacktrace.c:397
Code: 89 fe 41 89 f4 45 31 ff 48 c7 c5 30 02 e0 8b 49 c7 c5 80 38 cf 8b 48 89 fb eb 0c 49 ff c7 48 83 c3 08 4d 39 fc 74 4f 48 89 d8 <48> c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89
RSP: 0018:ffffc90003ec7468 EFLAGS: 00000206
RAX: ffffc90003ec7588 RBX: ffffc90003ec7588 RCX: dffffc0000000000
RDX: 0000000000002800 RSI: 000000000000000f RDI: ffffc90003ec7540
RBP: ffffffff8be00230 R08: ffffffff901ce66f R09: 1ffffffff2039ccd
R10: dffffc0000000000 R11: fffffbfff2039cce R12: 000000000000000f
R13: ffffffff8bcf3880 R14: ffffc90003ec7540 R15: 0000000000000009
 stack_depot_save_flags+0x29/0x830 lib/stackdepot.c:609
 save_stack+0x109/0x1f0 mm/page_owner.c:157
 __reset_page_owner+0x76/0x430 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1108 [inline]
 free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638
 __slab_free+0x31b/0x3d0 mm/slub.c:4491
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:247 [inline]
 slab_post_alloc_hook mm/slub.c:4086 [inline]
 slab_alloc_node mm/slub.c:4135 [inline]
 __do_kmalloc_node mm/slub.c:4264 [inline]
 __kmalloc_noprof+0x1a6/0x400 mm/slub.c:4277
 kmalloc_noprof include/linux/slab.h:882 [inline]
 tomoyo_realpath_from_path+0xcf/0x5e0 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x2b7/0x740 security/tomoyo/file.c:822
 security_inode_getattr+0x130/0x330 security/security.c:2371
 vfs_getattr+0x45/0x430 fs/stat.c:204
 vfs_statx_path fs/stat.c:251 [inline]
 vfs_statx+0x199/0x490 fs/stat.c:315
 vfs_fstatat+0x145/0x190 fs/stat.c:341
 __do_sys_newfstatat fs/stat.c:505 [inline]
 __se_sys_newfstatat fs/stat.c:499 [inline]
 __x64_sys_newfstatat+0x11d/0x1a0 fs/stat.c:499
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcc4ef7c80a
RSP: 002b:00007fcc4f25ecc8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 00007fcc4eff0134 RCX: 00007fcc4ef7c80a
RDX: 00007fcc4f25ecf0 RSI: 00007fcc4f25ed80 RDI: 00000000ffffff9c
RBP: 00007fcc4f25ed80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000100 R11: 0000000000000286 R12: 00007fcc4f25fe00
R13: 00007fcc4eff0134 R14: 00000000000a4813 R15: 00007fcc4f25fe40
 </TASK>
task:jbd2/sda1-8     state:R  running task     stack:24144 pid:4647  tgid:4647  ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5315 [inline]
 __schedule+0x1895/0x4b30 kernel/sched/core.c:6675
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6997
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__asan_memset+0x1e/0x50 mm/kasan/shadow.c:84
Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 <e8> fd e5 ff ff 84 c0 74 12 48 89 ef 44 89 f6 48 89 da 5b 41 5e 5d
RSP: 0018:ffffc9000d38f380 EFLAGS: 00000246
RAX: ffffffff820927bb RBX: 0000000000000080 RCX: ffffffff820927ca
RDX: 0000000000000001 RSI: 0000000000000080 RDI: ffffc9000d38f3e0
RBP: ffffc9000d38f3e0 R08: ffffffff820b5bea R09: 1ffffffff2858b00
R10: dffffc0000000000 R11: fffffbfff2858b01 R12: dffffc0000000000
R13: 1ffff92001a71e78 R14: 0000000000000000 R15: ffff88801e17b100
 save_stack+0x8a/0x1f0 mm/page_owner.c:148
 __reset_page_owner+0x76/0x430 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1108 [inline]
 free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638
 __slab_free+0x31b/0x3d0 mm/slub.c:4491
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:247 [inline]
 slab_post_alloc_hook mm/slub.c:4086 [inline]
 slab_alloc_node mm/slub.c:4135 [inline]
 kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4142
 alloc_buffer_head+0x2a/0x290 fs/buffer.c:3020
 jbd2_journal_write_metadata_buffer+0xc2/0xa60 fs/jbd2/journal.c:349
 jbd2_journal_commit_transaction+0x1b36/0x67e0 fs/jbd2/commit.c:663
 kjournald2+0x41c/0x7b0 fs/jbd2/journal.c:201
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
task:udevd           state:R  running task     stack:21504 pid:4685  tgid:4685  ppid:1      flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5315 [inline]
 __schedule+0x1895/0x4b30 kernel/sched/core.c:6675
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6997
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_next_frame+0x0/0x22d0 arch/x86/kernel/unwind_orc.c:469
Code: cc cc 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 91 4c 89 f7 e8 a3 36 bd 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49
RSP: 0018:ffffc900031bf318 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffffc900031bf320 RCX: ffffffff917b9000
RDX: dffffc0000000000 RSI: ffffffff82124b7d RDI: ffffc900031bf320
RBP: ffffc900031bf3b0 R08: 000000000000000d R09: ffffc900031bf410
R10: ffffc900031bf370 R11: ffffffff81808f50 R12: ffff88807d5d1e00
R13: ffffffff81808f50 R14: ffffc900031bf400 R15: 0000000000000000
 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 save_stack+0xfb/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x76/0x430 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1108 [inline]
 free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638
 __slab_free+0x31b/0x3d0 mm/slub.c:4491
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:247 [inline]
 slab_post_alloc_hook mm/slub.c:4086 [inline]
 slab_alloc_node mm/slub.c:4135 [inline]
 __do_kmalloc_node mm/slub.c:4264 [inline]
 __kmalloc_noprof+0x1a6/0x400 mm/slub.c:4277
 kmalloc_noprof include/linux/slab.h:882 [inline]
 kzalloc_noprof include/linux/slab.h:1014 [inline]
 tomoyo_encode2 security/tomoyo/realpath.c:45 [inline]
 tomoyo_encode+0x26f/0x540 security/tomoyo/realpath.c:80
 tomoyo_realpath_from_path+0x59e/0x5e0 security/tomoyo/realpath.c:283
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x2b7/0x740 security/tomoyo/file.c:822
 security_inode_getattr+0x130/0x330 security/security.c:2371
 vfs_getattr+0x45/0x430 fs/stat.c:204
 vfs_statx_path fs/stat.c:251 [inline]
 vfs_statx+0x199/0x490 fs/stat.c:315
 vfs_fstatat+0x145/0x190 fs/stat.c:341
 __do_sys_newfstatat fs/stat.c:505 [inline]
 __se_sys_newfstatat fs/stat.c:499 [inline]
 __x64_sys_newfstatat+0x11d/0x1a0 fs/stat.c:499
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4c8b36f5f4
RSP: 002b:00007ffc006114d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 000055cb88f4a6c8 RCX: 00007f4c8b36f5f4
RDX: 00007ffc006114e8 RSI: 000055cb88f3a897 RDI: 00000000ffffff9c
RBP: 000055cb93e5afb8 R08: 000623062c2a2780 R09: 7fffffffffffffff
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000001 R14: 000623062c2a2780 R15: 000055cb88f3edca
 </TASK>
task:syz.3.1902      state:R  running task     stack:24848 pid:15499 tgid:15485 ppid:15014  flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5315 [inline]
 __schedule+0x1895/0x4b30 kernel/sched/core.c:6675
 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6854
 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6878
 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline]
 _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 zap_pte_range mm/memory.c:1691 [inline]
 zap_pmd_range mm/memory.c:1739 [inline]
 zap_pud_range mm/memory.c:1768 [inline]
 zap_p4d_range mm/memory.c:1789 [inline]
 unmap_page_range+0x36b1/0x40e0 mm/memory.c:1810
 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1900
 exit_mmap+0x275/0xc40 mm/mmap.c:1864
 __mmput+0x115/0x390 kernel/fork.c:1347
 exit_mm+0x220/0x310 kernel/exit.c:571
 do_exit+0x9b2/0x28e0 kernel/exit.c:926
 do_group_exit+0x207/0x2c0 kernel/exit.c:1088
 get_signal+0x16a3/0x1740 kernel/signal.c:2917
 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218
 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd64417dff9
RSP: 002b:00007fd644ff10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007fd644336060 RCX: 00007fd64417dff9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd644336060
RBP: 00007fd644336058 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd644336064
R13: 0000000000000000 R14: 00007fd64445f940 R15: 00007fd64445fa28
 </TASK>
rcu: rcu_preempt kthread starved for 10617 jiffies! g125609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:25712 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5315 [inline]
 __schedule+0x1895/0x4b30 kernel/sched/core.c:6675
 __schedule_loop kernel/sched/core.c:6752 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6767
 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615
 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events nsim_dev_trap_report_work
RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 kernel/rcu/update.c:319
Code: 0a 8c 48 c7 c6 e0 ed 0a 8c e8 bc 8a 90 f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 31 c0 83 3d df 99 57 04 00 74 1e 83 3d 36 cb 57 04 00
RSP: 0018:ffffc90000a17fe8 EFLAGS: 00000246
RAX: 0000000000000100 RBX: 0000000000000001 RCX: ffff88801d2e9e00
RDX: ffff88801d2e9e00 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888061f41cb8 R08: ffffffff8997fc06 R09: ffffc90000a18330
R10: ffffc90000a18320 R11: fffff52000143032 R12: ffff88807b955000
R13: ffff888061f41ccf R14: 1ffff1100c3e8399 R15: 1ffff1100c3e8397
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc5df424440 CR3: 000000005bd18000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 rcu_read_lock_held_common kernel/rcu/update.c:105 [inline]
 rcu_read_lock_held+0xa/0x50 kernel/rcu/update.c:349
 __in6_dev_get include/net/addrconf.h:330 [inline]
 ip6_ignore_linkdown include/net/addrconf.h:421 [inline]
 find_match+0xf9/0xc10 net/ipv6/route.c:744
 __find_rr_leaf+0x275/0x8e0 net/ipv6/route.c:832
 find_rr_leaf net/ipv6/route.c:853 [inline]
 rt6_select net/ipv6/route.c:897 [inline]
 fib6_table_lookup+0x413/0xbb0 net/ipv6/route.c:2195
 ip6_pol_route+0x273/0x15d0 net/ipv6/route.c:2231
 pol_lookup_func include/net/ip6_fib.h:616 [inline]
 fib6_rule_lookup+0x58c/0x790 net/ipv6/fib6_rules.c:117
 ip6_route_input_lookup net/ipv6/route.c:2300 [inline]
 ip6_route_input+0x859/0xd90 net/ipv6/route.c:2596
 ip6_rcv_finish+0x144/0x180 net/ipv6/ip6_input.c:77
 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314
 __netif_receive_skb_one_core net/core/dev.c:5662 [inline]
 __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775
 process_backlog+0x662/0x15b0 net/core/dev.c:6107
 __napi_poll+0xcb/0x490 net/core/dev.c:6771
 napi_poll net/core/dev.c:6840 [inline]
 net_rx_action+0x89b/0x1240 net/core/dev.c:6962
 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554
 do_softirq+0x11b/0x1e0 kernel/softirq.c:455
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline]
 nsim_dev_trap_report_work+0x75d/0xaa0 drivers/net/netdevsim/dev.c:850
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
net_ratelimit: 6049 callbacks suppressed
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
net_ratelimit: 8891 callbacks suppressed
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:34, vlan:0)