bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5840/1:b..l P5843/1:b..l rcu: (detected by 1, t=10503 jiffies, g=45401, q=258 ncpus=2) task:syz-executor state:R running task stack:23056 pid:5843 tgid:5843 ppid:1 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7078 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:stack_trace_consume_entry+0x26/0x170 kernel/stacktrace.c:86 Code: 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 c7 10 48 89 fa 48 83 ec 08 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e e7 00 00 00 48 8d 7b 08 8b 6b 10 48 b8 00 RSP: 0018:ffffc9000403f860 EFLAGS: 00000a02 RAX: 0000000000000000 RBX: ffffc9000403f940 RCX: 0000000000000000 RDX: 1ffff92000807f2a RSI: ffffffff81fb3cdd RDI: ffffc9000403f950 RBP: ffffc9000403f910 R08: ffffc9000403f8b4 R09: ffffffff9101f682 R10: ffffc9000403f880 R11: 000000000000fb1a R12: ffffffff817a8270 R13: ffffc9000403f940 R14: 0000000000000000 R15: ffff88803221a440 arch_stack_walk+0x86/0x100 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 save_stack+0x162/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_unref_page+0x661/0x1080 mm/page_alloc.c:2657 __put_partials+0x14c/0x170 mm/slub.c:3142 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4104 [inline] slab_alloc_node mm/slub.c:4153 [inline] kmem_cache_alloc_lru_noprof+0x226/0x3d0 mm/slub.c:4172 __d_alloc+0x31/0xaa0 fs/dcache.c:1646 d_alloc+0x4a/0x1e0 fs/dcache.c:1726 lookup_one_qstr_excl+0xcb/0x190 fs/namei.c:1688 filename_create+0x1ed/0x530 fs/namei.c:4081 do_mkdirat+0xab/0x3a0 fs/namei.c:4326 __do_sys_mkdirat fs/namei.c:4349 [inline] __se_sys_mkdirat fs/namei.c:4347 [inline] __x64_sys_mkdirat+0x83/0xb0 fs/namei.c:4347 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5dfbb7f077 RSP: 002b:00007ffdab420248 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007ffdab420290 RCX: 00007f5dfbb7f077 RDX: 00000000000001ff RSI: 00007ffdab420290 RDI: 00000000ffffff9c RBP: 00007ffdab42027c R08: 0000000000000005 R09: 00007ffdab41ffe5 R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000004a R13: 000000000004cc80 R14: 000000000004cc80 R15: 00007ffdab4202d0 task:syz-executor state:R running task stack:23088 pid:5840 tgid:5840 ppid:5832 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7078 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__asan_memset+0x32/0x50 mm/kasan/shadow.c:88 Code: f4 55 48 89 d5 ba 01 00 00 00 53 48 8b 4c 24 18 48 89 ee 48 89 fb e8 ad f0 ff ff 84 c0 74 12 48 89 ea 44 89 e6 48 89 df 5b 5d <41> 5c e9 e7 19 3e 09 5b 31 c0 5d 41 5c c3 cc cc cc cc 66 66 2e 0f RSP: 0018:ffffc9000261f8a0 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffc9000261f990 RCX: ffffffff813e201e RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc9000261f900 RBP: ffff888027fdc880 R08: 0000000000000001 R09: fffff520004c3f2b R10: ffffc9000261f95f R11: 0000000000000001 R12: 0000000000000000 R13: ffffc9000261f9c0 R14: ffffc9000261f900 R15: ffffc9000261f928 __unwind_start+0x2e/0x7f0 arch/x86/kernel/unwind_orc.c:688 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0x74/0x100 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 save_stack+0x162/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_unref_page+0x661/0x1080 mm/page_alloc.c:2657 __put_partials+0x14c/0x170 mm/slub.c:3142 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4104 [inline] slab_alloc_node mm/slub.c:4153 [inline] kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4160 getname_flags.part.0+0x4c/0x550 fs/namei.c:139 getname_flags include/linux/audit.h:322 [inline] getname+0x8d/0xe0 fs/namei.c:223 do_sys_openat2+0x104/0x1e0 fs/open.c:1396 do_sys_open fs/open.c:1417 [inline] __do_sys_openat fs/open.c:1433 [inline] __se_sys_openat fs/open.c:1428 [inline] __x64_sys_openat+0x175/0x210 fs/open.c:1428 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fca19580101 RSP: 002b:00007ffd2ada77b0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fca195f37dc RCX: 00007fca19580101 RDX: 0000000000090800 RSI: 00007ffd2ada8950 RDI: 00000000ffffff9c RBP: 00007ffd2ada893c R08: 0000000000000000 R09: 00007fca1a339000 R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffd2ada8950 R13: 00007fca195f37dc R14: 000000000004c9e5 R15: 00007ffd2ada8990 rcu: rcu_preempt kthread starved for 10480 jiffies! g45401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_timeout+0x124/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:check_wait_context kernel/locking/lockdep.c:4892 [inline] RIP: 0010:__lock_acquire+0x670/0x3c40 kernel/locking/lockdep.c:5176 Code: 23 00 00 0f b6 88 c4 00 00 00 84 c9 74 3a 48 8d b8 c6 00 00 00 41 38 ce 44 0f 47 f1 49 89 f8 49 89 f9 49 c1 e8 03 41 83 e1 07 <45> 0f b6 04 28 45 38 c8 7f 09 45 84 c0 0f 85 d2 26 00 00 80 b8 c6 RSP: 0018:ffffc90000156d98 EFLAGS: 00000006 RAX: ffffffff96e86aa8 RBX: ffff88801d288ae0 RCX: 0000000000000003 RDX: fffffbfff2dd0999 RSI: 0000000000000008 RDI: ffffffff96e86b6e RBP: dffffc0000000000 R08: 1ffffffff2dd0d6d R09: 0000000000000006 R10: ffffffff96e84cc7 R11: 0000000000000002 R12: ffffed1003a5115b R13: ffff88801d288000 R14: 0000000000000003 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd2ada7f80 CR3: 000000000df7e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] nf_hook.constprop.0+0xaa/0x750 include/linux/netfilter.h:238 NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0xa4/0x680 net/ipv6/ip6_input.c:309 __netif_receive_skb_one_core+0x12e/0x1e0 net/core/dev.c:5672 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5785 netif_receive_skb_internal net/core/dev.c:5871 [inline] netif_receive_skb+0x13f/0x7b0 net/core/dev.c:5930 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] br_pass_frame_up+0x346/0x490 net/bridge/br_input.c:70 br_handle_frame_finish+0xdcf/0x1c80 net/bridge/br_input.c:221 br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1198 br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x3ce/0x8c0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:536 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9eb/0x1490 net/bridge/br_input.c:424 __netif_receive_skb_core.constprop.0+0xa76/0x4470 net/core/dev.c:5566 __netif_receive_skb_one_core+0xb1/0x1e0 net/core/dev.c:5670 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5785 process_backlog+0x443/0x15f0 net/core/dev.c:6117 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6877 napi_poll net/core/dev.c:6946 [inline] net_rx_action+0xa94/0x1010 net/core/dev.c:7068 handle_softirqs+0x213/0x8f0 kernel/softirq.c:554 run_ksoftirqd kernel/softirq.c:943 [inline] run_ksoftirqd+0x3a/0x60 kernel/softirq.c:935 smpboot_thread_fn+0x661/0xa30 kernel/smpboot.c:164 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 22873 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) net_ratelimit: 25708 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:5c:b2:ab:20:88, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)