bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10056/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=49229, q=1396 ncpus=1)
task:syz.2.919 state:R running task stack:23592 pid:10056 tgid:10048 ppid:5826 task_flags:0x400940 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5298 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6911
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:unwind_next_frame+0x182/0x1ea0 arch/x86/kernel/unwind_orc.c:510
Code: f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 f7 0a 00 00 48 89 e9 41 0f b6 45 35 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 8b 16 00 00 4d 8b 7d 48 3c 01 49 83 df 00 4d 85 ff 0f 84 f0
RSP: 0018:ffffc90004e1e538 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffff920009c3cbe
RDX: dffffc0000000000 RSI: ffffffff8c1b1da0 RDI: ffffffff8e1318e0
RBP: ffffc90004e1e5f0 R08: 00000000ed1a4351 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000000 R12: ffffc90004e1e5f8
R13: ffffc90004e1e5a8 R14: ffffc90004e1e5dd R15: ffff888029aa0000
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1433 [inline]
free_unref_folios+0xaea/0x1790 mm/page_alloc.c:3040
shrink_folio_list+0x2f10/0x6000 mm/vmscan.c:1610
evict_folios+0x7fa/0x1e90 mm/vmscan.c:4718
try_to_shrink_lruvec+0x57e/0x990 mm/vmscan.c:4881
lru_gen_shrink_lruvec mm/vmscan.c:5030 [inline]
shrink_lruvec+0x319/0x2a50 mm/vmscan.c:5784
shrink_node_memcgs mm/vmscan.c:6020 [inline]
shrink_node+0x8e7/0x3e20 mm/vmscan.c:6061
shrink_zones mm/vmscan.c:6300 [inline]
do_try_to_free_pages+0x340/0x1870 mm/vmscan.c:6362
try_to_free_mem_cgroup_pages+0x2b2/0x820 mm/vmscan.c:6683
mem_cgroup_resize_max+0x114/0x2a0 mm/memcontrol-v1.c:1502
mem_cgroup_write+0x1fc/0x340 mm/memcontrol-v1.c:1684
cgroup_file_write+0x1e9/0x790 kernel/cgroup/cgroup.c:4311
kernfs_fop_write_iter+0x3e0/0x5f0 fs/kernfs/file.c:352
iter_file_splice_write+0x830/0x10a0 fs/splice.c:736
do_splice_from fs/splice.c:936 [inline]
direct_splice_actor+0x192/0x6c0 fs/splice.c:1159
splice_direct_to_actor+0x345/0xa30 fs/splice.c:1103
do_splice_direct_actor fs/splice.c:1202 [inline]
do_splice_direct+0x174/0x240 fs/splice.c:1228
do_sendfile+0xadc/0xe20 fs/read_write.c:1372
__do_sys_sendfile64 fs/read_write.c:1433 [inline]
__se_sys_sendfile64 fs/read_write.c:1419 [inline]
__x64_sys_sendfile64+0x1d8/0x220 fs/read_write.c:1419
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f53fbb9c819
RSP: 002b:00007f53f95f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f53fbe16360 RCX: 00007f53fbb9c819
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008
RBP: 00007f53fbc32c91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f53fbe163f8 R14: 00007f53fbe16360 R15: 00007ffc19179bb8
rcu: rcu_preempt kthread starved for 561 jiffies! g49229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27976 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5298 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6911
__schedule_loop kernel/sched/core.c:6993 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7008
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 1040 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Workqueue: bat_events batadv_dat_purge
RIP: 0010:bytes_is_nonzero mm/kasan/generic.c:97 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/generic.c:115 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:140 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline]
RIP: 0010:kasan_check_range+0x161/0x1e0 mm/kasan/generic.c:200
Code: 48 39 d0 74 0f 80 38 00 74 ef 4e 8d 5c 25 00 48 85 c0 75 9d 48 89 da 4c 89 d8 4c 29 da e9 32 ff ff ff 48 85 d2 74 98 48 01 ea 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 83 c0 01 48 39 d0
RSP: 0018:ffffc90000006db8 EFLAGS: 00000282
RAX: ffffed1006f2a948 RBX: ffffed1006f2a949 RCX: ffffffff81e4c4df
RDX: ffffed1006f2a949 RSI: 0000000000000004 RDI: ffff888037954a40
RBP: ffffed1006f2a948 R08: 0000000000000001 R09: ffffed1006f2a948
R10: ffff888037954a43 R11: 0000000000000000 R12: 0000000000000000
R13: ffff888037954a40 R14: ffffc90000006fd0 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff888124340000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055dc936a22f0 CR3: 00000000797dc000 CR4: 00000000003526f0
Call Trace:
instrument_atomic_read_write include/linux/instrumented.h:112 [inline]
atomic_add_return_acquire include/linux/atomic/atomic-instrumented.h:141 [inline]
queued_read_lock include/asm-generic/qrwlock.h:82 [inline]
do_raw_read_lock+0x3f/0x80 kernel/locking/spinlock_debug.c:162
ebt_do_table+0xe8/0x2250 net/bridge/netfilter/ebtables.c:211
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK include/linux/netfilter.h:316 [inline]
br_forward_finish+0x261/0x4d0 net/bridge/br_forward.c:66
br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167
br_nf_forward_finish+0x693/0xb30 net/bridge/br_netfilter_hooks.c:662
NF_HOOK include/linux/netfilter.h:318 [inline]
NF_HOOK include/linux/netfilter.h:312 [inline]
br_nf_forward_ip.part.0+0x61e/0x820 net/bridge/br_netfilter_hooks.c:716
br_nf_forward_ip net/bridge/br_netfilter_hooks.c:676 [inline]
br_nf_forward+0xfe5/0x19f0 net/bridge/br_netfilter_hooks.c:773
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK include/linux/netfilter.h:316 [inline]
__br_forward+0x2f6/0x970 net/bridge/br_forward.c:115
deliver_clone net/bridge/br_forward.c:131 [inline]
br_flood+0x37f/0x650 net/bridge/br_forward.c:250
br_handle_frame_finish+0xff4/0x1f60 net/bridge/br_input.c:229
br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167
br_nf_pre_routing_finish_ipv6+0x769/0xfb0 net/bridge/br_netfilter_ipv6.c:154
NF_HOOK include/linux/netfilter.h:318 [inline]
br_nf_pre_routing_ipv6+0x39c/0x8b0 net/bridge/br_netfilter_ipv6.c:184
br_nf_pre_routing+0x90d/0x1550 net/bridge/br_netfilter_hooks.c:508
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442
__netif_receive_skb_core.constprop.0+0x6c5/0x3550 net/core/dev.c:6068
__netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6179
__netif_receive_skb+0x1f/0x120 net/core/dev.c:6294
process_backlog+0x37a/0x1580 net/core/dev.c:6645
__napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7709
napi_poll net/core/dev.c:7772 [inline]
net_rx_action+0xa40/0xf20 net/core/dev.c:7929
handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622
do_softirq kernel/softirq.c:523 [inline]
do_softirq+0xac/0xe0 kernel/softirq.c:510
__local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
spin_unlock_bh include/linux/spinlock.h:395 [inline]
__batadv_dat_purge.part.0+0x294/0x3c0 net/batman-adv/distributed-arp-table.c:185
__batadv_dat_purge net/batman-adv/distributed-arp-table.c:166 [inline]
batadv_dat_purge+0x4b/0xa0 net/batman-adv/distributed-arp-table.c:204
process_one_work+0xa23/0x19a0 kernel/workqueue.c:3276
process_scheduled_works kernel/workqueue.c:3359 [inline]
worker_thread+0x5ef/0xe50 kernel/workqueue.c:3440
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 13336 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:c7:3b:6e:05:c6, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:c7:3b:6e:05:c6, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:c7:3b:6e:05:c6, vlan:0)
net_ratelimit: 14270 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:c7:3b:6e:05:c6, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:c7:3b:6e:05:c6, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:52:c7:3b:6e:05:c6, vlan:0)