bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5054/1:b..l P14002/1:b..l P4481/1:b..l P13997/1:b..l P6406/1:b..l rcu: (detected by 1, t=10502 jiffies, g=86125, q=317 ncpus=2) task:kworker/u4:27 state:R running task stack:25728 pid:6406 ppid:2 flags:0x00004000 Workqueue: bat_events batadv_nc_worker Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7022 irqentry_exit+0x35/0x80 kernel/entry/common.c:433 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:lock_acquire+0x1ef/0x510 kernel/locking/lockdep.c:5729 Code: c1 05 d5 6e 9b 7e 83 f8 01 0f 85 b0 02 00 00 9c 58 f6 c4 02 0f 85 9b 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc90007567ac8 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff92000eacf5b RCX: 0000000000000001 RDX: 1ffff11002edb158 RSI: ffffffff8a6c83a0 RDI: ffffffff8ac81200 RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2309dd0 R10: ffffffff9184ee87 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff8c9a7400 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:303 [inline] rcu_read_lock include/linux/rcupdate.h:749 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline] batadv_nc_worker+0x175/0x10f0 net/batman-adv/network-coding.c:719 process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2600 worker_thread+0x687/0x1110 kernel/workqueue.c:2751 kthread+0x33a/0x430 kernel/kthread.c:389 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 task:syz-executor.0 state:R running task stack:27360 pid:13997 ppid:5075 flags:0x20004006 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7022 irqentry_exit+0x35/0x80 kernel/entry/common.c:433 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:650 RIP: 0010:find_stack lib/stackdepot.c:349 [inline] RIP: 0010:__stack_depot_save+0x14e/0x510 lib/stackdepot.c:390 Code: 31 d8 c1 c3 0e 41 29 d8 44 31 c0 41 c1 c8 08 44 29 c0 89 c3 48 8b 05 a9 79 f0 0d 89 d9 23 0d 99 79 f0 0d 48 8d 0c c8 48 8b 29 <48> 85 ed 75 0b eb 70 48 8b 6d 00 48 85 ed 74 67 39 5d 08 75 f2 44 RSP: 0018:ffffc90005f3f6e8 EFLAGS: 00000202 RAX: ffff88823b400000 RBX: 000000004fe7f8e9 RCX: ffff88823b7fc748 RDX: 0000000000000010 RSI: 0000000000000002 RDI: 00000000d9d08c70 RBP: ffff88807dd9f5a0 R08: 00000000564644b3 R09: ffffffff8f3cd3d8 R10: ffffc90005f3f620 R11: 000000000000bddf R12: 0000000000000001 R13: 0000000000002800 R14: ffffc90005f3f770 R15: 0000000000000010 save_stack+0x16d/0x1f0 mm/page_owner.c:129 __reset_page_owner+0x5a/0x190 mm/page_owner.c:149 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1161 [inline] free_unref_page_prepare+0x508/0xb90 mm/page_alloc.c:2348 free_unref_page+0x33/0x3b0 mm/page_alloc.c:2443 qlink_free mm/kasan/quarantine.c:166 [inline] qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:185 kasan_quarantine_reduce+0x18b/0x1d0 mm/kasan/quarantine.c:292 __kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:305 kasan_slab_alloc include/linux/kasan.h:186 [inline] slab_post_alloc_hook mm/slab.h:762 [inline] slab_alloc_node mm/slub.c:3470 [inline] slab_alloc mm/slub.c:3478 [inline] __kmem_cache_alloc_lru mm/slub.c:3485 [inline] kmem_cache_alloc+0x172/0x3b0 mm/slub.c:3494 ptlock_alloc+0x1f/0x70 mm/memory.c:6066 ptlock_init include/linux/mm.h:2814 [inline] pgtable_pte_page_ctor include/linux/mm.h:2835 [inline] __pte_alloc_one include/asm-generic/pgalloc.h:66 [inline] pte_alloc_one+0x6a/0x240 arch/x86/mm/pgtable.c:33 __pte_alloc+0x6e/0x270 mm/memory.c:440 __get_locked_pte+0x99/0xc0 mm/memory.c:1817 get_locked_pte include/linux/mm.h:2642 [inline] insert_page mm/memory.c:1859 [inline] vm_insert_page+0x60e/0x810 mm/memory.c:2030 kcov_mmap+0xf2/0x170 kernel/kcov.c:496 call_mmap include/linux/fs.h:1882 [inline] mmap_region+0x615/0x2650 mm/mmap.c:2751 do_mmap+0x884/0xee0 mm/mmap.c:1363 vm_mmap_pgoff+0x1a6/0x3b0 mm/util.c:543 ksys_mmap_pgoff+0x422/0x5b0 mm/mmap.c:1409 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0x61/0xe0 arch/x86/entry/common.c:178 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203 entry_SYSENTER_compat_after_hwframe+0x70/0x82 RIP: 0023:0xf7f5e579 RSP: 002b:00000000f749faa0 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000200000 RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00000000000000db RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 task:udevd state:R running task stack:24352 pid:4481 ppid:1 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7022 irqentry_exit+0x35/0x80 kernel/entry/common.c:433 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:lock_acquire+0x33/0x510 kernel/locking/lockdep.c:5729 Code: 00 00 fc ff df 41 57 4d 89 cf 41 56 49 89 fe 41 55 41 89 d5 41 54 45 89 c4 55 53 48 81 ec b0 00 00 00 48 8d 5c 24 10 89 34 24 <48> c1 eb 03 89 4c 24 04 48 c7 44 24 10 b3 8a b5 41 48 01 d8 48 c7 RSP: 0018:ffffc900031cf940 EFLAGS: 00000282 RAX: dffffc0000000000 RBX: ffffc900031cf950 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c9a7400 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: ffffea0001f230b7 R11: 0000000000094000 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff8c9a7400 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:303 [inline] rcu_read_lock include/linux/rcupdate.h:749 [inline] page_ext_get+0x3c/0x310 mm/page_ext.c:167 __reset_page_owner+0x2f/0x190 mm/page_owner.c:145 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1161 [inline] free_unref_page_prepare+0x508/0xb90 mm/page_alloc.c:2348 free_unref_page+0x33/0x3b0 mm/page_alloc.c:2443 __unfreeze_partials+0x21d/0x240 mm/slub.c:2647 qlink_free mm/kasan/quarantine.c:166 [inline] qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:185 kasan_quarantine_reduce+0x18b/0x1d0 mm/kasan/quarantine.c:292 __kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:305 kasan_slab_alloc include/linux/kasan.h:186 [inline] slab_post_alloc_hook mm/slab.h:762 [inline] slab_alloc_node mm/slub.c:3470 [inline] slab_alloc mm/slub.c:3478 [inline] __kmem_cache_alloc_lru mm/slub.c:3485 [inline] kmem_cache_alloc+0x172/0x3b0 mm/slub.c:3494 getname_flags.part.0+0x50/0x4d0 fs/namei.c:140 getname_flags+0x9c/0xf0 include/linux/audit.h:319 vfs_fstatat+0x77/0xb0 fs/stat.c:275 __do_sys_newfstatat+0x98/0x110 fs/stat.c:446 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fcc749635f4 RSP: 002b:00007ffe36de9a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055b76e0506c8 RCX: 00007fcc749635f4 RDX: 00007ffe36de9a38 RSI: 000055b76e040897 RDI: 00000000ffffff9c RBP: 000055b76faa7fb8 R08: 0005f9c4c6fe15c0 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000001 R14: 0005f9c4c6fe15c0 R15: 000055b76e044dca task:udevd state:R running task stack:27280 pid:14002 ppid:4481 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7022 irqentry_exit+0x35/0x80 kernel/entry/common.c:433 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:unwind_next_frame+0xe48/0x2020 arch/x86/kernel/unwind_orc.c:672 Code: d0 0f 93 c1 48 39 d5 0f 92 c0 84 c1 74 0b 48 39 5c 24 10 0f 83 82 08 00 00 bf 01 00 00 00 e8 df ab 1f 00 65 8b 05 b0 39 ca 7e <85> c0 0f 84 5f 08 00 00 b8 01 00 00 00 e9 e6 f1 ff ff ba 28 00 00 RSP: 0018:ffffc9000603f7a8 EFLAGS: 00000297 RAX: 0000000080000000 RBX: ffffc9000603fd40 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffc9000603fd30 RDI: 0000000000000001 RBP: ffffc90006038000 R08: ffffc9000603f84c R09: ffffffff8f3eed6e R10: ffffc9000603f818 R11: 000000000000d9b1 R12: ffffc9000603f868 R13: ffffc9000603f818 R14: ffffc9000603fd40 R15: ffffc9000603fd38 arch_stack_walk+0x8b/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:128 __reset_page_owner+0x5a/0x190 mm/page_owner.c:149 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1161 [inline] free_unref_page_prepare+0x508/0xb90 mm/page_alloc.c:2348 free_unref_page+0x33/0x3b0 mm/page_alloc.c:2443 __unfreeze_partials+0x21d/0x240 mm/slub.c:2647 qlink_free mm/kasan/quarantine.c:166 [inline] qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:185 kasan_quarantine_reduce+0x18b/0x1d0 mm/kasan/quarantine.c:292 __kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:305 kasan_slab_alloc include/linux/kasan.h:186 [inline] slab_post_alloc_hook mm/slab.h:762 [inline] slab_alloc_node mm/slub.c:3470 [inline] slab_alloc mm/slub.c:3478 [inline] __kmem_cache_alloc_lru mm/slub.c:3485 [inline] kmem_cache_alloc+0x172/0x3b0 mm/slub.c:3494 getname_flags.part.0+0x50/0x4d0 fs/namei.c:140 getname_flags+0x9c/0xf0 include/linux/audit.h:319 vfs_fstatat+0x77/0xb0 fs/stat.c:275 __do_sys_newfstatat+0x98/0x110 fs/stat.c:446 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fcc749635f4 RSP: 002b:00007ffe36de93d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc749635f4 RDX: 00007ffe36de9408 RSI: 000055b76fa92510 RDI: 00000000ffffff9c RBP: 0000000000000000 R08: 00000000ffffffff R09: 000055b76faa6580 R10: 0000000000000100 R11: 0000000000000202 R12: 0000000000006180 R13: 0000000000006180 R14: 000055b76fa92510 R15: 000055b76fab6550 task:syz-fuzzer state:R running task stack:24080 pid:5054 ppid:5017 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:7022 irqentry_exit+0x35/0x80 kernel/entry/common.c:433 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:unwind_get_return_address+0x6e/0xa0 arch/x86/kernel/unwind_orc.c:369 Code: ea 03 80 3c 02 00 75 32 48 8b 7b 48 e8 1b 87 1c 00 85 c0 74 d3 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 18 48 8b 43 48 5b 5d c3 e8 c4 ae a0 00 eb a8 48 89 ef e8 da ae RSP: 0018:ffffc90003c2f530 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: ffffc90003c2f548 RCX: 0000000000000000 RDX: 1ffff92000785eb2 RSI: 0000000000000001 RDI: ffffffff8a320528 RBP: ffffc90003c2f590 R08: ffffc90003c2f57c R09: ffffffff8f3e39e6 R10: ffffc90003c2f548 R11: 000000000000d024 R12: ffffffff8173dd10 R13: ffffc90003c2f608 R14: 0000000000000000 R15: ffff888027823b80 arch_stack_walk+0x9d/0xf0 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:128 __reset_page_owner+0x5a/0x190 mm/page_owner.c:149 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1161 [inline] free_unref_page_prepare+0x508/0xb90 mm/page_alloc.c:2348 free_unref_page_list+0xe6/0xb30 mm/page_alloc.c:2489 release_pages+0x32a/0x14e0 mm/swap.c:1042 tlb_batch_pages_flush+0x9a/0x190 mm/mmu_gather.c:97 tlb_flush_mmu_free mm/mmu_gather.c:292 [inline] tlb_flush_mmu mm/mmu_gather.c:299 [inline] tlb_finish_mmu+0x14b/0x7e0 mm/mmu_gather.c:391 zap_page_range_single+0x389/0x4f0 mm/memory.c:1763 madvise_dontneed_single_vma mm/madvise.c:819 [inline] madvise_dontneed_free mm/madvise.c:900 [inline] madvise_vma_behavior+0xbb2/0x1e60 mm/madvise.c:1039 madvise_walk_vmas+0x1cf/0x2c0 mm/madvise.c:1264 do_madvise+0x333/0x660 mm/madvise.c:1444 __do_sys_madvise mm/madvise.c:1457 [inline] __se_sys_madvise mm/madvise.c:1455 [inline] __x64_sys_madvise+0xaa/0x110 mm/madvise.c:1455 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x46b677 RSP: 002b:000000c000067e08 EFLAGS: 00000202 ORIG_RAX: 000000000000001c RAX: ffffffffffffffda RBX: 0000000000018000 RCX: 000000000046b677 RDX: 0000000000000004 RSI: 0000000000018000 RDI: 000000c00d580000 RBP: 000000c000067e48 R08: 0000000000200000 R09: 0000000000001a80 R10: 0000000000001018 R11: 0000000000000202 R12: 000000c000067da8 R13: 0000000000000003 R14: 000000c00bcb21a0 R15: 00000000011c04a0 rcu: rcu_preempt kthread starved for 10515 jiffies! g86125 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28240 pid:16 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0xee1/0x59f0 kernel/sched/core.c:6710 schedule+0xe7/0x1b0 kernel/sched/core.c:6786 schedule_timeout+0x157/0x2c0 kernel/time/timer.c:2167 rcu_gp_fqs_loop+0x1ec/0xa50 kernel/rcu/tree.c:1609 rcu_gp_kthread+0x249/0x380 kernel/rcu/tree.c:1808 kthread+0x33a/0x430 kernel/kthread.c:389 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 skipped: idling at native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] NMI backtrace for cpu 0 skipped: idling at arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1b/0x20 drivers/acpi/processor_idle.c:112 net_ratelimit: 18443 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) net_ratelimit: 20329 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)