bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14834/1:b..l P5817/1:b..l P5806/2:b..l
rcu: 	(detected by 1, t=10502 jiffies, g=44521, q=1663744 ncpus=2)
task:syz-executor    state:R  running task     stack:23056 pid:5806  tgid:5806  ppid:5804   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7078
 irqentry_exit+0x36/0x90 kernel/entry/common.c:354
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210
Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 65 48 8b 15 74 d5 69 7e 65 8b 05 75 d5 69 7e a9 00 01
RSP: 0018:ffffc90003207900 EFLAGS: 00000292
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81aa9472
RDX: ffff88807fa48000 RSI: ffffffff81aa9410 RDI: 00007f64d9b84a39
RBP: 00007f64d9b84a39 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000002 R12: 00007f64d9b84a39
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807fa48000
 raw_read_seqcount_latch include/linux/seqlock.h:621 [inline]
 read_seqcount_latch include/linux/seqlock.h:638 [inline]
 latch_tree_find include/linux/rbtree_latch.h:209 [inline]
 bpf_ksym_find+0x20/0x1c0 kernel/bpf/core.c:736
 is_bpf_text_address+0x58/0x1a0 kernel/bpf/core.c:769
 kernel_text_address kernel/extable.c:125 [inline]
 kernel_text_address+0x8d/0x100 kernel/extable.c:94
 __kernel_text_address+0xd/0x40 kernel/extable.c:79
 unwind_get_return_address+0x59/0xa0 arch/x86/kernel/unwind_orc.c:369
 arch_stack_walk+0xa7/0x100 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 save_stack+0x162/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0x1080 mm/page_alloc.c:2657
 __put_partials+0x14c/0x170 mm/slub.c:3142
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329
 kasan_slab_alloc include/linux/kasan.h:250 [inline]
 slab_post_alloc_hook mm/slub.c:4104 [inline]
 slab_alloc_node mm/slub.c:4153 [inline]
 kmem_cache_alloc_lru_noprof+0x226/0x3d0 mm/slub.c:4172
 alloc_inode+0xbf/0x230 fs/inode.c:338
 get_pipe_inode fs/pipe.c:882 [inline]
 create_pipe_files+0x4c/0x850 fs/pipe.c:922
 __do_pipe_flags fs/pipe.c:973 [inline]
 do_pipe2+0xb0/0x1d0 fs/pipe.c:1024
 __do_sys_pipe2 fs/pipe.c:1042 [inline]
 __se_sys_pipe2 fs/pipe.c:1040 [inline]
 __x64_sys_pipe2+0x54/0x80 fs/pipe.c:1040
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f64d9b84a39
RSP: 002b:00007ffca9534ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
RAX: ffffffffffffffda RBX: 0000555578d01d00 RCX: 00007f64d9b84a39
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffca9534f00
RBP: 00007ffca95352b0 R08: 0000000000000000 R09: 0000000000000050
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca9535020
R13: 0000555578d03420 R14: 0000000000000000 R15: 0000555578d08760
 </TASK>
task:syz-executor    state:R  running task     stack:23056 pid:5817  tgid:5817  ppid:5814   flags:0x00004002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6935
 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
 unwind_next_frame+0x1776/0x20c0 arch/x86/kernel/unwind_orc.c:672
 arch_stack_walk+0x95/0x100 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 save_stack+0x162/0x1f0 mm/page_owner.c:156
 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1127 [inline]
 free_unref_page+0x661/0x1080 mm/page_alloc.c:2657
 __put_partials+0x14c/0x170 mm/slub.c:3142
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286
 __kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:385
 kasan_kmalloc include/linux/kasan.h:260 [inline]
 __do_kmalloc_node mm/slub.c:4283 [inline]
 __kmalloc_noprof+0x21c/0x510 mm/slub.c:4295
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1037 [inline]
 lsm_blob_alloc+0x68/0x90 security/security.c:684
 lsm_sock_alloc security/security.c:4836 [inline]
 security_sk_alloc+0x30/0x270 security/security.c:4852
 sk_prot_alloc+0xfb/0x2a0 net/core/sock.c:2168
 sk_alloc+0x36/0xb90 net/core/sock.c:2218
 inet_create net/ipv4/af_inet.c:326 [inline]
 inet_create+0x3a1/0x10a0 net/ipv4/af_inet.c:252
 __sock_create+0x335/0x8d0 net/socket.c:1558
 sock_create net/socket.c:1616 [inline]
 __sys_socket_create net/socket.c:1653 [inline]
 __sys_socket+0x14f/0x260 net/socket.c:1700
 __do_sys_socket net/socket.c:1714 [inline]
 __se_sys_socket net/socket.c:1712 [inline]
 __x64_sys_socket+0x72/0xb0 net/socket.c:1712
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9646387c37
RSP: 002b:00007fff4973aa28 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f9646387c37
RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 00007fff4973b14c R08: 00007fff4973aa7c R09: 00007fff4973ae67
R10: 00007fff4973aad0 R11: 0000000000000206 R12: 00007f9646548e40
R13: 000000000004c3c1 R14: 00007fff4973b1a0 R15: 00007f964654b000
 </TASK>
task:syz.0.4287      state:R  running task     stack:25232 pid:14834 tgid:14832 ppid:5825   flags:0x00404002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
 preempt_schedule_common+0x44/0xc0 kernel/sched/core.c:6935
 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock_irqrestore+0x61/0x80 kernel/locking/spinlock.c:194
 sock_def_readable+0x15f/0x610 net/core/sock.c:3453
 __netlink_sendskb net/netlink/af_netlink.c:1268 [inline]
 netlink_broadcast_deliver net/netlink/af_netlink.c:1398 [inline]
 do_one_broadcast net/netlink/af_netlink.c:1485 [inline]
 netlink_broadcast_filtered+0x96a/0xef0 net/netlink/af_netlink.c:1530
 netlink_broadcast+0x39/0x50 net/netlink/af_netlink.c:1554
 uevent_net_broadcast_untagged lib/kobject_uevent.c:331 [inline]
 kobject_uevent_net_broadcast lib/kobject_uevent.c:410 [inline]
 kobject_uevent_env+0xc55/0x1860 lib/kobject_uevent.c:608
 device_del+0x623/0x9f0 drivers/base/core.c:3872
 device_unregister+0x1d/0xc0 drivers/base/core.c:3895
 hci_conn_del_sysfs+0xab/0x170 net/bluetooth/hci_sysfs.c:79
 hci_conn_cleanup net/bluetooth/hci_conn.c:174 [inline]
 hci_conn_del+0x54e/0xdb0 net/bluetooth/hci_conn.c:1164
 hci_conn_hash_flush+0x4bf/0x790 net/bluetooth/hci_conn.c:2699
 hci_dev_close_sync+0x603/0x11a0 net/bluetooth/hci_sync.c:5212
 hci_dev_do_close+0x2e/0x90 net/bluetooth/hci_core.c:482
 hci_unregister_dev+0x213/0x620 net/bluetooth/hci_core.c:2697
 vhci_release+0x79/0xf0 drivers/bluetooth/hci_vhci.c:664
 __fput+0x3f8/0xb60 fs/file_table.c:450
 task_work_run+0x14e/0x250 kernel/task_work.c:239
 exit_task_work include/linux/task_work.h:43 [inline]
 do_exit+0xadd/0x2d70 kernel/exit.c:938
 do_group_exit+0xd3/0x2a0 kernel/exit.c:1087
 get_signal+0x24ed/0x26c0 kernel/signal.c:3017
 arch_do_signal_or_restart+0x90/0x7e0 arch/x86/kernel/signal.c:337
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218
 do_syscall_64+0xda/0x250 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff916b85d19
RSP: 002b:00007ff917a90038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
RAX: 0000000000000000 RBX: 00007ff916d75fa0 RCX: 00007ff916b85d19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102
RBP: 00007ff916c01a20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007ff916d75fa0 R15: 00007fffe498ecc8
 </TASK>
rcu: rcu_preempt kthread starved for 10551 jiffies! g44521 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:28424 pid:17    tgid:17    ppid:2      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5369 [inline]
 __schedule+0xe58/0x5ad0 kernel/sched/core.c:6756
 __schedule_loop kernel/sched/core.c:6833 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6848
 schedule_timeout+0x124/0x280 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045
 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 969 Comm: kworker/0:2 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Workqueue: events legacy_dvb_usb_read_remote_control
RIP: 0010:nf_hook_state_init include/linux/netfilter.h:166 [inline]
RIP: 0010:nf_hook.constprop.0+0x3fc/0x750 include/linux/netfilter.h:266
Code: 00 00 e8 47 04 c5 f7 4d 85 ff 0f 84 4f 02 00 00 e8 39 04 c5 f7 31 c0 b9 06 00 00 00 4c 89 fa 48 8d 74 24 48 48 89 f7 f3 48 ab <89> e9 48 8b 3c 24 4c 89 64 24 68 0f b7 05 6c 2a d1 03 4c 89 74 24
RSP: 0018:ffffc90000007a88 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 1ffff92000000f54 RCX: 0000000000000000
RDX: ffff88807cc66e00 RSI: ffffc90000007ad0 RDI: ffffc90000007b00
RBP: 000000000000000a R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000003 R12: ffff88805e369e40
R13: 0000000000000000 R14: ffff88805d56c000 R15: ffff88807cc66e00
FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020002140 CR3: 0000000035f1c000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 NF_HOOK include/linux/netfilter.h:312 [inline]
 ipv6_rcv+0xa4/0x680 net/ipv6/ip6_input.c:309
 __netif_receive_skb_one_core+0x12e/0x1e0 net/core/dev.c:5672
 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5785
 process_backlog+0x443/0x15f0 net/core/dev.c:6117
 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6883
 napi_poll net/core/dev.c:6952 [inline]
 net_rx_action+0xa94/0x1010 net/core/dev.c:7074
 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561
 __do_softirq kernel/softirq.c:595 [inline]
 invoke_softirq kernel/softirq.c:435 [inline]
 __irq_exit_rcu+0x109/0x170 kernel/softirq.c:662
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2061 [inline]
RIP: 0010:vprintk_emit+0x621/0x6f0 kernel/printk/printk.c:2431
Code: 85 ed 0f 85 81 00 00 00 e8 dc 4f 20 00 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 38 52 20 00 4d 85 e4 0f 85 8d 00 00 00 <e8> ba 4f 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00
RSP: 0018:ffffc90003c77a30 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000017 RCX: ffffffff8179b43e
RDX: ffff8880269c0000 RSI: ffffffff8179b448 RDI: 0000000000000007
RBP: 1ffff9200078ef48 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000
R13: 0000000000000200 R14: ffff88801d698000 R15: ffffc90003c77b18
 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:86
 _printk+0xc8/0x100 kernel/printk/printk.c:2457
 m920x_read drivers/media/usb/dvb-usb/m920x.c:40 [inline]
 m920x_rc_query+0x496/0x770 drivers/media/usb/dvb-usb/m920x.c:193
 legacy_dvb_usb_read_remote_control+0x10a/0x500 drivers/media/usb/dvb-usb/dvb-usb-remote.c:123
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
net_ratelimit: 19062 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 17410 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:d6:e6:ad:05:fc, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)