bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l
rcu: (detected by 1, t=10503 jiffies, g=84881, q=532 ncpus=2)
task:kworker/0:0 state:R running task stack:21448 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000
Workqueue: 0x0 (wg-crypt-wg0)
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0x16e2/0x4cd0 kernel/sched/core.c:6767
preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7090
irqentry_exit+0x6f/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__kasan_check_byte+0x2d/0x40 mm/kasan/common.c:561
Code: 00 41 56 53 48 89 f3 49 89 fe e8 1e 12 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 b6 03 00 00 89 d8 5b <41> 5e e9 97 a2 ee fe cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90
RSP: 0018:ffffc900000e7548 EFLAGS: 00000202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: e5b916990a4c2a00
RDX: 0000000000000000 RSI: ffffffff8171aa12 RDI: 1ffffffff1be770c
RBP: ffffffff8171a9f5 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff81acbbf0 R12: 0000000000000002
R13: ffffffff8df3b860 R14: ffffffff8df3b860 R15: 0000000000000000
kasan_check_byte include/linux/kasan.h:399 [inline]
lock_acquire+0x8d/0x360 kernel/locking/lockdep.c:5840
rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
rcu_read_lock include/linux/rcupdate.h:841 [inline]
class_rcu_constructor include/linux/rcupdate.h:1155 [inline]
unwind_next_frame+0xc2/0x2390 arch/x86/kernel/unwind_orc.c:479
arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
save_stack+0xf7/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x71/0x1f0 mm/page_owner.c:308
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1262 [inline]
__free_frozen_pages+0xb0e/0xcd0 mm/page_alloc.c:2725
discard_slab mm/slub.c:2716 [inline]
__put_partials+0x161/0x1c0 mm/slub.c:3185
put_cpu_partial+0x17c/0x250 mm/slub.c:3260
__slab_free+0x2f7/0x400 mm/slub.c:4512
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:385
kasan_kmalloc include/linux/kasan.h:260 [inline]
__kmalloc_cache_node_noprof+0x234/0x3d0 mm/slub.c:4370
kmalloc_node_noprof include/linux/slab.h:928 [inline]
alloc_worker kernel/workqueue.c:2647 [inline]
create_worker+0x112/0x720 kernel/workqueue.c:2790
maybe_create_worker kernel/workqueue.c:3063 [inline]
manage_workers kernel/workqueue.c:3115 [inline]
worker_thread+0x33e/0xda0 kernel/workqueue.c:3375
kthread+0x711/0x8a0 kernel/kthread.c:464
ret_from_fork+0x4e/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: rcu_preempt kthread starved for 537 jiffies! g84881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0x16e2/0x4cd0 kernel/sched/core.c:6767
__schedule_loop kernel/sched/core.c:6845 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6860
schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2046
rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2248
kthread+0x711/0x8a0 kernel/kthread.c:464
ret_from_fork+0x4e/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 3393 Comm: kworker/R-bat_e Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
Workqueue: bat_events batadv_dat_purge
RIP: 0010:lock_is_held_type+0x51/0x190 kernel/locking/lockdep.c:5931
Code: dd 28 04 00 0f 84 fe 00 00 00 65 8b 05 a8 61 1f 07 85 c0 0f 85 ef 00 00 00 65 4c 8b 2c 25 08 50 75 92 41 83 bd ec 0a 00 00 00 <0f> 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04
RSP: 0018:ffffc90000007078 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00000000ffffffff RCX: f0ddbfea43a00500
RDX: ffff888030ab5a00 RSI: 00000000ffffffff RDI: ffffffff8df3b860
RBP: ffffc90000007188 R08: ffff88805e0cbc23 R09: 1ffff1100bc19784
R10: dffffc0000000000 R11: ffffed100bc19785 R12: 0000000000000001
R13: ffff888030ab5a00 R14: ffff8881404b2800 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1c276e4ba1 CR3: 0000000030e15000 CR4: 0000000000350ef0
Call Trace:
nbp_vlan_group_rcu net/bridge/br_private.h:1613 [inline]
__br_forward+0xbe/0x600 net/bridge/br_forward.c:86
deliver_clone net/bridge/br_forward.c:131 [inline]
maybe_deliver+0xb5/0x160 net/bridge/br_forward.c:190
br_flood+0x31a/0x6a0 net/bridge/br_forward.c:237
br_handle_frame_finish+0x146c/0x1950 net/bridge/br_input.c:220
br_nf_hook_thresh+0x3c2/0x490 net/bridge/br_netfilter_hooks.c:-1
br_nf_pre_routing_finish_ipv6+0x948/0xd00 net/bridge/br_netfilter_ipv6.c:-1
NF_HOOK include/linux/netfilter.h:314 [inline]
br_nf_pre_routing_ipv6+0x37e/0x6b0 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:282 [inline]
br_handle_frame+0x982/0x14c0 net/bridge/br_input.c:433
__netif_receive_skb_core+0x10e1/0x4180 net/core/dev.c:5773
__netif_receive_skb_one_core net/core/dev.c:5885 [inline]
__netif_receive_skb+0x72/0x380 net/core/dev.c:6000
process_backlog+0x60e/0x14f0 net/core/dev.c:6352
__napi_poll+0xc7/0x480 net/core/dev.c:7324
napi_poll net/core/dev.c:7388 [inline]
net_rx_action+0x6ea/0xdf0 net/core/dev.c:7510
handle_softirqs+0x286/0x870 kernel/softirq.c:579
do_softirq+0xec/0x180 kernel/softirq.c:480
__local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407
spin_unlock_bh include/linux/spinlock.h:396 [inline]
__batadv_dat_purge net/batman-adv/distributed-arp-table.c:185 [inline]
batadv_dat_purge+0x2da/0x3c0 net/batman-adv/distributed-arp-table.c:204
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xade/0x17a0 kernel/workqueue.c:3319
rescuer_thread+0x53c/0xdd0 kernel/workqueue.c:3496
kthread+0x711/0x8a0 kernel/kthread.c:464
ret_from_fork+0x4e/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 21077 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)