ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9486/1:b..l P9484/1:b..l P5611/1:b..l P5624/1:b..l P9487/1:b..l P9488/1:b..l P5627/1:b..l
rcu: 	(detected by 1, t=10504 jiffies, g=36969, q=1522 ncpus=2)
task:syz-executor    state:R  running task     stack:20928 pid:5627  tgid:5627  ppid:5622   task_flags:0x400140 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:kasan_byte_accessible+0x1b/0x30 mm/kasan/generic.c:213
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 3c 08 0f 92 c0 <e9> d0 74 9d 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90
RSP: 0018:ffffc90003bff5a0 EFLAGS: 00000293
RAX: 0000000000000001 RBX: ffffffff8176f23c RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8176f23c RDI: 1ffffffff1d6b384
RBP: ffffffff8176f21f R08: 0000000000000000 R09: 0000000000000000
R10: ffffc90003bff758 R11: ffffffff81b16930 R12: 0000000000000002
R13: ffffffff8eb59c20 R14: ffffffff8eb59c20 R15: 0000000000000000
 __kasan_check_byte+0x12/0x40 mm/kasan/common.c:573
 kasan_check_byte include/linux/kasan.h:402 [inline]
 lock_acquire+0x84/0x350 kernel/locking/lockdep.c:5842
 rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 rcu_read_lock include/linux/rcupdate.h:840 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950
 __slab_free+0x274/0x2c0 mm/slub.c:5767
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x32d/0x660 mm/slub.c:5515
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 ref_tracker_alloc+0x15b/0x4b0 lib/ref_tracker.c:270
 __netns_tracker_alloc include/net/net_namespace.h:367 [inline]
 netns_tracker_alloc include/net/net_namespace.h:376 [inline]
 get_net_track+0x16e/0x230 include/net/net_namespace.h:393
 sk_alloc+0x1da/0x390 net/core/sock.c:2325
 inet_create+0x7a9/0xff0 net/ipv4/af_inet.c:333
 __sock_create+0x4b3/0x9d0 net/socket.c:1651
 sock_create net/socket.c:1709 [inline]
 __sys_socket_create net/socket.c:1746 [inline]
 __sys_socket+0xd6/0x1b0 net/socket.c:1793
 __do_sys_socket net/socket.c:1807 [inline]
 __se_sys_socket net/socket.c:1805 [inline]
 __x64_sys_socket+0x7a/0x90 net/socket.c:1805
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff613d9f6c7
RSP: 002b:00007ffc4f3b2098 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff613d9f6c7
RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 00007ffc4f3b27cc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ff613fedfc0
R13: 00000000000927c0 R14: 000000000002dfd9 R15: 00007ff613ff0180
 </TASK>
task:modprobe        state:R  running task     stack:24328 pid:9488  tgid:9488  ppid:1176   task_flags:0x400000 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_release+0x2d7/0x3c0 kernel/locking/lockdep.c:5893
Code: 4e ca 11 00 00 00 00 eb b5 e8 a5 fe 2b 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 95 09 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 52 a6 b8
RSP: 0018:ffffc9000360f430 EFLAGS: 00000286
RAX: 270df37017542b00 RBX: 0000000000000206 RCX: 0000000000000046
RDX: 0000000000000002 RSI: ffffffff8e4ae78c RDI: ffffffff8c4bd280
RBP: ffff88807eba2af0 R08: ffffc9000360f558 R09: 0000000000000000
R10: ffffc9000360f5b8 R11: fffff520006c1eb9 R12: 0000000000000002
R13: 0000000000000002 R14: ffffffff8eb59c20 R15: ffff88807eba1f00
 rcu_lock_release include/linux/rcupdate.h:310 [inline]
 rcu_read_unlock include/linux/rcupdate.h:871 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0x1baa/0x2550 arch/x86/kernel/unwind_orc.c:709
 __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950
 __slab_free+0x274/0x2c0 mm/slub.c:5767
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4612 [inline]
 slab_alloc_node mm/slub.c:4945 [inline]
 __do_kmalloc_node mm/slub.c:5361 [inline]
 __kmalloc_noprof+0x311/0x720 mm/slub.c:5387
 _kmalloc_noprof include/linux/slab.h:973 [inline]
 tomoyo_realpath_from_path+0xef/0x640 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827
 security_inode_getattr+0x12b/0x310 security/security.c:1895
 vfs_getattr fs/stat.c:259 [inline]
 vfs_fstat fs/stat.c:281 [inline]
 __do_sys_newfstat fs/stat.c:551 [inline]
 __se_sys_newfstat fs/stat.c:546 [inline]
 __x64_sys_newfstat+0x133/0x270 fs/stat.c:546
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5ca658fe87
RSP: 002b:00007ffd1ee8e538 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
RAX: ffffffffffffffda RBX: 00007f5ca65640c0 RCX: 00007f5ca658fe87
RDX: 0000000000000000 RSI: 00007ffd1ee8e5d0 RDI: 0000000000000000
RBP: 00007ffd1ee8e690 R08: 00007f5ca6565560 R09: 00007f5ca65640c0
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007ffd1ee8e730 R15: 0000000000000000
 </TASK>
task:modprobe        state:R  running task     stack:24232 pid:9487  tgid:9487  ppid:64     task_flags:0x400000 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_is_held_type+0x5/0x150 kernel/locking/lockdep.c:5925
Code: 48 c7 c6 cc 7b 42 8e 67 48 0f b9 3a 90 eb ce 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 bb ff ff ff ff 83 3d 96 47 89 04 00 0f
RSP: 0018:ffffc900035ef298 EFLAGS: 00000202
RAX: 1ffffffff1d6bf01 RBX: ffff88801c180000 RCX: 0000000080000001
RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8eb59c20
RBP: 0000000000000000 R08: ffffffff823de4ae R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 00000000000481db
R13: dffffc0000000000 R14: ffff88813fe56130 R15: 0000000000001000
 lookup_page_ext mm/page_ext.c:258 [inline]
 page_ext_lookup+0xe7/0x180 mm/page_ext.c:513
 page_ext_iter_begin include/linux/page_ext.h:133 [inline]
 __update_page_owner_free_handle+0x104/0x470 mm/page_owner.c:284
 __reset_page_owner+0x85/0x1f0 mm/page_owner.c:321
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950
 __slab_free+0x274/0x2c0 mm/slub.c:5767
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4612 [inline]
 slab_alloc_node mm/slub.c:4945 [inline]
 kmem_cache_alloc_noprof+0x2a0/0x5f0 mm/slub.c:4959
 vm_area_alloc+0x24/0x140 mm/vma_init.c:32
 __mmap_new_vma mm/vma.c:2547 [inline]
 __mmap_region mm/vma.c:2774 [inline]
 mmap_region+0x1221/0x2310 mm/vma.c:2860
 do_mmap+0xc3b/0x10c0 mm/mmap.c:560
 vm_mmap_pgoff+0x272/0x4e0 mm/util.c:581
 ksys_mmap_pgoff+0x4dc/0x760 mm/mmap.c:606
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4cdc691242
RSP: 002b:00007fff48a9c178 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4cdc691242
RDX: 0000000000000001 RSI: 0000000000061018 RDI: 0000000000000000
RBP: 0000000000000802 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f4cdc3686b0 R14: 00007fff48a9c5b0 R15: 00000fffe9153832
 </TASK>
task:syz-executor    state:R  running task     stack:21744 pid:5624  tgid:5624  ppid:1      task_flags:0x40054c flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__rcu_read_unlock+0x0/0xe0 kernel/rcu/tree_plugin.h:431
Code: d9 80 e1 07 80 c1 03 38 c1 7c dc 48 89 df e8 a7 f3 87 00 eb d2 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff
RSP: 0018:ffffc90003bcf298 EFLAGS: 00000282
RAX: 9ca0e395cdb4e000 RBX: ffffc90003bcf358 RCX: 0000000000000046
RDX: 0000000000000001 RSI: ffffffff8e4ae78c RDI: ffffffff8c4bd280
RBP: 1ffffffff21de601 R08: ffffc90003bcfc78 R09: 0000000000000000
R10: ffffc90003bcf398 R11: fffff52000779e75 R12: ffffc90003bc8000
R13: ffffffff8176f21f R14: ffffc90003bcf348 R15: ffffc90003bcfc88
 rcu_read_unlock include/linux/rcupdate.h:873 [inline]
 class_rcu_destructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0x1baf/0x2550 arch/x86/kernel/unwind_orc.c:709
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x32d/0x660 mm/slub.c:5515
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 slab_free_hook mm/slub.c:2657 [inline]
 slab_free mm/slub.c:6405 [inline]
 kmem_cache_free+0x156/0x650 mm/slub.c:6532
 tear_down_vmas+0x312/0x520 mm/mmap.c:1262
 exit_mmap+0x4ca/0x9f0 mm/mmap.c:1320
 __mmput+0x118/0x420 kernel/fork.c:1182
 exit_mm+0x221/0x2d0 kernel/exit.c:610
 do_exit+0x6cd/0x2360 kernel/exit.c:992
 do_group_exit+0x22d/0x2f0 kernel/exit.c:1147
 get_signal+0x121b/0x12c0 kernel/signal.c:3038
 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0x104/0x730 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
 do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fab1e15e68e
RSP: 002b:00007ffdc247d9c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: 0000000000000000 RBX: 000055557c947500 RCX: 00007fab1e15e68e
RDX: 00007ffdc247da20 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffdc247da8c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000de
R13: 000000000000000d R14: 000000000002e5a4 R15: 00007ffdc247dae0
 </TASK>
task:syz-executor    state:R  running task     stack:22736 pid:5611  tgid:5611  ppid:5610   task_flags:0x400100 flags:0x00080800
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872
Code: ff ff ff e8 41 30 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b 3b ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 31 2f 0a cc 48 8d 3d 78 d4 b8
RSP: 0018:ffffc900036ff760 EFLAGS: 00000286
RAX: 7d5d1e537b554f00 RBX: 0000000000000000 RCX: 0000000000000046
RDX: 000000000973479e RSI: ffffffff8e4ae78c RDI: ffffffff8c4bd280
RBP: ffffffff8176f21f R08: ffffffff8176f21f R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002
R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000246
 rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 rcu_read_lock include/linux/rcupdate.h:840 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950
 __slab_free+0x274/0x2c0 mm/slub.c:5767
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5362 [inline]
 __kmalloc_noprof+0x375/0x720 mm/slub.c:5387
 _kmalloc_noprof include/linux/slab.h:973 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 alloc_pipe_info+0x1f9/0x4c0 fs/pipe.c:915
 get_pipe_inode fs/pipe.c:994 [inline]
 create_pipe_files+0x88/0x7c0 fs/pipe.c:1026
 __do_pipe_flags+0x46/0x1f0 fs/pipe.c:1088
 do_pipe2+0xaa/0x190 fs/pipe.c:1136
 __do_sys_pipe2 fs/pipe.c:1154 [inline]
 __se_sys_pipe2 fs/pipe.c:1152 [inline]
 __x64_sys_pipe2+0x5a/0x70 fs/pipe.c:1152
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f2c8db9ce89
RSP: 002b:00007ffc83252038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
RAX: ffffffffffffffda RBX: 000055558b40be50 RCX: 00007f2c8db9ce89
RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007ffc83252048
RBP: 00007ffc83252610 R08: 0000000000001180 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc83252450
R13: 000055558b4156f0 R14: 000055558b410290 R15: 00007ffc83252190
 </TASK>
task:modprobe        state:R  running task     stack:24424 pid:9484  tgid:9484  ppid:7981   task_flags:0x400000 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:100 [inline]
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:238 [inline]
RIP: 0010:unwind_next_frame+0x515/0x2550 arch/x86/kernel/unwind_orc.c:510
Code: 00 00 fc ff df 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48 8d 43 fc 4c 0f 47 e0 4c 0f 46 eb <4d> 39 e7 76 a9 e9 7c fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 7c cd
RSP: 0018:ffffc900035cf6a0 EFLAGS: 00000212
RAX: ffffffff906aa60c RBX: ffffffff906aa610 RCX: ffffffff906aa614
RDX: ffffffff906aa5d0 RSI: ffffffff90e56e22 RDI: ffffffff8c4bd220
RBP: ffffffff8100012f R08: 0000000000000022 R09: 0000000000000000
R10: 0000000000000000 R11: ffffffff8eb59c20 R12: ffffffff906aa60c
R13: ffffffff906aa5d0 R14: ffffc900035cf748 R15: ffffffff906aa5d0
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950
 __slab_free+0x274/0x2c0 mm/slub.c:5767
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4612 [inline]
 slab_alloc_node mm/slub.c:4945 [inline]
 kmem_cache_alloc_noprof+0x2a0/0x5f0 mm/slub.c:4959
 alloc_filename fs/namei.c:147 [inline]
 do_getname+0x2e/0x250 fs/namei.c:187
 getname include/linux/fs.h:2532 [inline]
 class_filename_constructor include/linux/fs.h:2559 [inline]
 user_statfs+0x97/0x1c0 fs/statfs.c:102
 __do_sys_statfs fs/statfs.c:194 [inline]
 __se_sys_statfs fs/statfs.c:191 [inline]
 __x64_sys_statfs+0x120/0x270 fs/statfs.c:191
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5d4ce04487
RSP: 002b:00007ffe77341c08 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
RAX: ffffffffffffffda RBX: 00007f5d4ccdb2fe RCX: 00007f5d4ce04487
RDX: 00007f5d4cce41d4 RSI: 00007ffe77341c90 RDI: 00007f5d4ccdb2fe
RBP: 00007ffe77341c90 R08: 00007f5d4cfeeaf8 R09: 0000000000000000
R10: 00007ffe77341a40 R11: 0000000000000246 R12: 00007ffe77341e18
R13: 00007ffe77341e40 R14: 00007f5d4cce24d0 R15: 0000000000000000
 </TASK>
task:modprobe        state:R  running task     stack:25544 pid:9486  tgid:9486  ppid:7973   task_flags:0x400000 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:on_stack arch/x86/include/asm/stacktrace.h:58 [inline]
RIP: 0010:stack_access_ok arch/x86/kernel/unwind_orc.c:409 [inline]
RIP: 0010:deref_stack_reg+0x7d/0x220 arch/x86/kernel/unwind_orc.c:419
Code: 49 8d 7f 10 49 89 fd 49 c1 ed 03 41 80 7c 35 00 00 74 13 e8 65 dc bc 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df 4d 8b 77 10 <4c> 89 fb 48 c1 eb 03 0f b6 04 33 84 c0 0f 85 39 01 00 00 41 83 3f
RSP: 0018:ffffc90003c1eec0 EFLAGS: 00000246
RAX: fffffffffffffff0 RBX: ffffc90003c1f048 RCX: 0000000000000000
RDX: ffffc90003c1f048 RSI: dffffc0000000000 RDI: ffffc90003c1f018
RBP: ffffc90003c18000 R08: ffffc90003c1eff8 R09: 0000000000000000
R10: ffffc90003c1f058 R11: fffff52000783e0d R12: 1ffff92000783e02
R13: 1ffff92000783e03 R14: ffffc90003c20000 R15: ffffc90003c1f008
 unwind_next_frame+0x19bd/0x2550 arch/x86/kernel/unwind_orc.c:-1
 __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1406 [inline]
 __free_frozen_pages+0xc1e/0xd10 mm/page_alloc.c:2950
 __slab_free+0x274/0x2c0 mm/slub.c:5767
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4612 [inline]
 slab_alloc_node mm/slub.c:4945 [inline]
 kmem_cache_alloc_noprof+0x2a0/0x5f0 mm/slub.c:4959
 ptlock_alloc+0x20/0x70 mm/memory.c:7531
 ptlock_init include/linux/mm.h:3775 [inline]
 pagetable_pte_ctor include/linux/mm.h:3824 [inline]
 __pte_alloc_one_noprof include/asm-generic/pgalloc.h:79 [inline]
 pte_alloc_one+0x7a/0x370 arch/x86/mm/pgtable.c:18
 __do_fault+0xd1/0x2a0 mm/memory.c:5420
 do_cow_fault mm/memory.c:5890 [inline]
 do_fault mm/memory.c:5996 [inline]
 do_pte_missing+0x1032/0x34b0 mm/memory.c:4566
 handle_pte_fault mm/memory.c:6379 [inline]
 __handle_mm_fault mm/memory.c:6517 [inline]
 handle_mm_fault+0x1b36/0x3080 mm/memory.c:6686
 do_user_addr_fault+0x744/0x1340 arch/x86/mm/fault.c:1394
 handle_page_fault arch/x86/mm/fault.c:1483 [inline]
 exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1536
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0010:rep_stos_alternative+0x40/0x80 arch/x86/lib/clear_page_64.S:76
Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
RSP: 0018:ffffc90003c1fa00 EFLAGS: 00050206
RAX: 0000000000000000 RBX: 000055b67f8b4010 RCX: 0000000000000ff8
RDX: 0000000000000000 RSI: ffffffff8e4ae78c RDI: 000055b67f8b4008
RBP: dffffc0000000000 R08: ffffffff821b3ccf R09: 0000000000000000
R10: 0000000000000000 R11: ffff88807e241d38 R12: 000055b67f8b4008
R13: 0000000000000008 R14: 0000000000000ff8 R15: ffff88807a6b0918
 __clear_user arch/x86/include/asm/uaccess_64.h:190 [inline]
 clear_user arch/x86/include/asm/uaccess_64.h:207 [inline]
 padzero fs/binfmt_elf.c:134 [inline]
 elf_load+0x4bc/0x6a0 fs/binfmt_elf.c:436
 load_elf_binary+0x116f/0x2950 fs/binfmt_elf.c:1188
 search_binary_handler fs/exec.c:1694 [inline]
 exec_binprm fs/exec.c:1726 [inline]
 bprm_execve+0x9c7/0x1630 fs/exec.c:1778
 kernel_execve+0x8c3/0x9c0 fs/exec.c:1922
 call_usermodehelper_exec_async+0x20f/0x360 kernel/umh.c:109
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: rcu_preempt kthread starved for 9862 jiffies! g36969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27560 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7326
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 8571 Comm: kworker/R-bond2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue:  0x0 (bond2)
RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:216
Code: 8b 3d 94 0e 89 0c 48 89 de 5b e9 83 fb 61 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 38 ee a5 11 65 8b 15 59 ee a5 11 81 e2 00 01 ff 00 74
RSP: 0018:ffffc90000007d08 EFLAGS: 00000002
RAX: ffffffff89dc30db RBX: 0000000000000001 RCX: 0000000000010000
RDX: ffff88802eb09f00 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffff88807d3f6300 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000000f90 R12: 0000000000000000
R13: ffff88807d3f6000 R14: dffffc0000000000 R15: ffff88807b992000
FS:  0000000000000000(0000) GS:ffff888124f5a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff613feb158 CR3: 000000007e2d2000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 advance_sched+0x17b/0xc80 net/sched/sch_taprio.c:933
 __run_hrtimer kernel/time/hrtimer.c:2032 [inline]
 __hrtimer_run_queues+0x3bc/0xa10 kernel/time/hrtimer.c:2096
 hrtimer_interrupt+0x448/0x910 kernel/time/hrtimer.c:2215
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline]
 __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:finish_task_switch+0x417/0xc60 kernel/sched/core.c:5361
Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 43 0b 3c 0a e8 5e ac 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
RSP: 0018:ffffc90003e3f860 EFLAGS: 00000202
RAX: 000000000053b90d RBX: ffff8880b863bf20 RCX: 0000000080000001
RDX: 0000000000000006 RSI: ffffffff8e22940e RDI: ffffffff8c4bd280
RBP: ffffc90003e3f8b0 R08: ffffffff90576bf7 R09: 1ffffffff20aed7e
R10: dffffc0000000000 R11: fffffbfff20aed7f R12: ffff88802eb09f00
R13: ffff8880b863bef8 R14: dffffc0000000000 R15: 1ffff110170c77e4
 context_switch kernel/sched/core.c:5513 [inline]
 __schedule+0x17e1/0x56c0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7326
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7383
 __mutex_lock_common kernel/locking/mutex.c:726 [inline]
 __mutex_lock+0x7bf/0x1550 kernel/locking/mutex.c:821
 worker_attach_to_pool+0x31/0x390 kernel/workqueue.c:2737
 rescuer_thread+0x335/0x10b0 kernel/workqueue.c:3622
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
net_ratelimit: 7531 callbacks suppressed
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
net_ratelimit: 16951 callbacks suppressed
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
ICMPv6: NA: aa:aa:aa:aa:aa:1b advertised our address fe80::a8aa:aaff:feaa:aa1b on veth0_to_bridge!
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)