bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5219/1:b..l rcu: (detected by 0, t=10503 jiffies, g=31713, q=367 ncpus=2) task:syz-executor state:R running task stack:20528 pid:5219 tgid:5219 ppid:5217 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6997 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:stack_trace_consume_entry+0x131/0x280 kernel/stacktrace.c:95 Code: 00 4d 89 f9 4c 89 ee 4c 89 f2 48 89 33 41 8b 19 41 0f b6 04 14 84 c0 0f 85 34 01 00 00 3b 5d 00 0f 92 c0 48 83 c4 18 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc 44 89 c9 80 e1 07 80 c1 03 38 RSP: 0018:ffffc90002def5f8 EFLAGS: 00000286 RAX: 0000000000000001 RBX: ffffc90002def620 RCX: ffffffff917b9000 RDX: dffffc0000000000 RSI: ffffffff81efa1eb RDI: ffffc90002def70c RBP: ffffc90002def708 R08: 0000000000000000 R09: ffffc90002def710 R10: ffffc90002def670 R11: ffffffff81808f50 R12: ffff88802b6c8000 R13: 1ffff920005bdee1 R14: 0000000000000001 R15: 1ffff920005bdee2 arch_stack_walk+0x10e/0x150 arch/x86/kernel/stacktrace.c:27 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638 discard_slab mm/slub.c:2678 [inline] __put_partials+0xeb/0x130 mm/slub.c:3146 put_cpu_partial+0x17c/0x250 mm/slub.c:3221 __slab_free+0x2ea/0x3d0 mm/slub.c:4450 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4086 [inline] slab_alloc_node mm/slub.c:4135 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4142 lsm_file_alloc security/security.c:734 [inline] security_file_alloc+0x32/0x310 security/security.c:2853 init_file+0x93/0x1e0 fs/file_table.c:153 alloc_empty_file+0xb8/0x1d0 fs/file_table.c:213 alloc_file fs/file_table.c:326 [inline] alloc_file_pseudo+0x1da/0x290 fs/file_table.c:357 create_pipe_files+0x33e/0x700 fs/pipe.c:938 __do_pipe_flags+0x48/0x2d0 fs/pipe.c:973 do_pipe2+0xd4/0x310 fs/pipe.c:1024 __do_sys_pipe2 fs/pipe.c:1042 [inline] __se_sys_pipe2 fs/pipe.c:1040 [inline] __x64_sys_pipe2+0x5a/0x70 fs/pipe.c:1040 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0ac3b7cd49 RSP: 002b:00007ffee81abd28 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 RAX: ffffffffffffffda RBX: 000055555fa06c90 RCX: 00007f0ac3b7cd49 RDX: 000055555fa220e0 RSI: 0000000000000000 RDI: 00007ffee81abd40 RBP: 00007ffee81ac2e0 R08: 0000000000000007 R09: 000055555fa11410 R10: ab08184d7a71ceff R11: 0000000000000246 R12: 00007ffee81ac130 R13: 000055555fa06a90 R14: 00007ffee81abe70 R15: 000055555fa05c90 rcu: rcu_preempt kthread starved for 10137 jiffies! g31713 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:24976 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 __schedule_loop kernel/sched/core.c:6752 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6767 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc1-syzkaller-00196-ga354733c738d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:unwind_get_return_address+0x56/0x90 arch/x86/kernel/unwind_orc.c:369 Code: 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 cb 37 bd 00 48 8b 3b e8 23 72 1e 00 85 c0 74 14 43 80 3c 37 00 <74> 08 48 89 df e8 b0 37 bd 00 48 8b 03 eb 02 31 c0 5b 41 5e 41 5f RSP: 0018:ffffc900001566e0 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffffc90000156748 RCX: ffffffff917b9000 RDX: ffffffff91966601 RSI: ffffc90000150000 RDI: ffffffff81608420 RBP: ffffc90000156790 R08: ffffc90000157ed0 R09: 0000000000000000 R10: ffffc90000156750 R11: fffff5200002acec R12: ffff88801ceb5a00 R13: ffffffff81808f50 R14: dffffc0000000000 R15: 1ffff9200002ace9 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c343073 CR3: 0000000062d4a000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_stack_walk+0xfd/0x150 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4086 [inline] slab_alloc_node mm/slub.c:4135 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4142 skb_ext_maybe_cow net/core/skbuff.c:6942 [inline] skb_ext_add+0x1d6/0x910 net/core/skbuff.c:7016 nf_bridge_unshare net/bridge/br_netfilter_hooks.c:169 [inline] br_nf_forward_ip+0xd8/0x7b0 net/bridge/br_netfilter_hooks.c:709 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x2a7/0x460 include/linux/netfilter.h:312 __br_forward+0x489/0x660 net/bridge/br_forward.c:115 br_handle_frame_finish+0x18ba/0x1fe0 net/bridge/br_input.c:215 br_nf_hook_thresh+0x472/0x590 br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424 __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5560 __netif_receive_skb_one_core net/core/dev.c:5664 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:5779 process_backlog+0x662/0x15b0 net/core/dev.c:6111 __napi_poll+0xcb/0x490 net/core/dev.c:6775 napi_poll net/core/dev.c:6844 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6966 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:927 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 65368 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)