bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3864/1:b..l rcu: (detected by 0, t=10503 jiffies, g=164577, q=3258 ncpus=2) task:syz.0.8082 state:R running task stack:25976 pid:3864 tgid:3860 ppid:27373 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7370 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457 local_bh_enable include/linux/bottom_half.h:33 [inline] xdp_test_run_batch net/bpf/test_run.c:357 [inline] bpf_test_run_xdp_live+0x1a47/0x1cf0 net/bpf/test_run.c:379 bpf_prog_test_run_xdp+0x81c/0x1160 net/bpf/test_run.c:1430 bpf_prog_test_run+0x2c7/0x340 kernel/bpf/syscall.c:4742 __sys_bpf+0x643/0x950 kernel/bpf/syscall.c:6292 __do_sys_bpf kernel/bpf/syscall.c:6387 [inline] __se_sys_bpf kernel/bpf/syscall.c:6385 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:6385 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff477f9ce59 RSP: 002b:00007ff478e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007ff478215fa0 RCX: 00007ff477f9ce59 RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a RBP: 00007ff478032d6f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff478216038 R14: 00007ff478215fa0 R15: 00007fff1a9ceef8 rcu: rcu_preempt kthread starved for 7558 jiffies! g164577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: krds_cp_wq#12/6 rds_connect_worker RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 a1 8f 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 7a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 dd 91 RSP: 0018:ffffc900000065d8 EFLAGS: 00000286 RAX: 1a959f465c224500 RBX: 0000000000000000 RCX: 0000000080000101 RDX: 000000006a707761 RSI: ffffffff8e215eff RDI: ffffffff8c28b6e0 RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cca0 R10: ffffc90000006738 R11: ffffffff81b0e0e0 R12: 0000000000000002 R13: ffffffff8e95cca0 R14: 0000000000000000 R15: 0000000000000246 FS: 0000000000000000(0000) GS:ffff88812529e000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd100ad56c8 CR3: 000000007e8ca000 CR4: 00000000003526f0 Call Trace: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xc3/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_mempool_unpoison_object+0xa3/0x130 mm/kasan/common.c:564 kasan_mempool_unpoison_object include/linux/kasan.h:391 [inline] napi_skb_cache_get+0x3c8/0x780 net/core/skbuff.c:306 __napi_build_skb net/core/skbuff.c:554 [inline] napi_build_skb+0x33/0x5c0 net/core/skbuff.c:576 skb_pp_cow_data+0x3c7/0x19b0 net/core/skbuff.c:953 netif_skb_check_for_xdp net/core/dev.c:5557 [inline] netif_receive_generic_xdp net/core/dev.c:5598 [inline] do_xdp_generic+0x76b/0x12e0 net/core/dev.c:5666 __netif_receive_skb_core+0x10e5/0x3170 net/core/dev.c:6012 __netif_receive_skb_one_core net/core/dev.c:6200 [inline] __netif_receive_skb net/core/dev.c:6315 [inline] netif_receive_skb_internal net/core/dev.c:6401 [inline] netif_receive_skb+0x1fe/0xbf0 net/core/dev.c:6460 NF_HOOK+0xa4/0x3a0 include/linux/netfilter.h:318 br_handle_frame_finish+0x1541/0x1c80 net/bridge/br_input.c:-1 br_nf_hook_thresh net/bridge/br_netfilter_hooks.c:-1 [inline] br_nf_pre_routing_finish+0x13d7/0x1a90 net/bridge/br_netfilter_hooks.c:430 NF_HOOK+0x64e/0x6e0 include/linux/netfilter.h:318 br_nf_pre_routing+0xed5/0x14c0 net/bridge/br_netfilter_hooks.c:539 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x1277/0x1510 net/bridge/br_input.c:442 __netif_receive_skb_core+0x98f/0x3170 net/core/dev.c:6089 __netif_receive_skb_one_core net/core/dev.c:6200 [inline] __netif_receive_skb net/core/dev.c:6315 [inline] process_backlog+0x76d/0x1950 net/core/dev.c:6666 __napi_poll+0xae/0x340 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7953 handle_softirqs+0x22a/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 __inet6_bind+0x399/0xf60 net/ipv6/af_inet6.c:419 kernel_bind+0x13e/0x1c0 net/socket.c:3660 rds_tcp_conn_path_connect+0x53e/0x930 net/rds/tcp_connect.c:175 rds_connect_worker+0x1d8/0x290 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) net_ratelimit: 19012 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)