bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5708/1:b..l rcu: (detected by 1, t=10503 jiffies, g=8181, q=1462 ncpus=2) task:syz-executor state:R running task stack:26424 pid:5708 tgid:5708 ppid:5239 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6997 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:unwind_next_frame+0x7/0x22d0 arch/x86/kernel/unwind_orc.c:469 Code: 07 80 c1 03 38 c1 7c 91 4c 89 f7 e8 a3 36 bd 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 <41> 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fd 49 bc 00 00 00 RSP: 0018:ffffc90016c77448 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffc90016c77460 RCX: ffffffff917b9000 RDX: dffffc0000000000 RSI: ffffffff846c621f RDI: ffffc90016c77460 RBP: ffffc90016c774f0 R08: 000000000000000b R09: ffffc90016c77550 R10: ffffc90016c774b0 R11: ffffffff81808f50 R12: ffff8880270c8000 R13: ffffffff81808f50 R14: ffffc90016c77540 R15: 0000000000000000 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_page+0xcfb/0xf20 mm/page_alloc.c:2638 discard_slab mm/slub.c:2678 [inline] __put_partials+0xeb/0x130 mm/slub.c:3146 put_cpu_partial+0x17c/0x250 mm/slub.c:3221 __slab_free+0x2ea/0x3d0 mm/slub.c:4450 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:385 kasan_kmalloc include/linux/kasan.h:257 [inline] __do_kmalloc_node mm/slub.c:4265 [inline] __kmalloc_noprof+0x1fc/0x400 mm/slub.c:4277 kmalloc_noprof include/linux/slab.h:882 [inline] kzalloc_noprof include/linux/slab.h:1014 [inline] tomoyo_encode2 security/tomoyo/realpath.c:45 [inline] tomoyo_encode+0x26f/0x540 security/tomoyo/realpath.c:80 tomoyo_path_perm+0x3ca/0x740 security/tomoyo/file.c:831 tomoyo_path_symlink+0xde/0x120 security/tomoyo/hooks.h:186 security_path_symlink+0x16f/0x370 security/security.c:1978 do_symlinkat+0x136/0x3a0 fs/namei.c:4639 __do_sys_symlinkat fs/namei.c:4657 [inline] __se_sys_symlinkat fs/namei.c:4654 [inline] __x64_sys_symlinkat+0x95/0xb0 fs/namei.c:4654 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f600937d577 RSP: 002b:00007fff51343fc8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f600937d577 RDX: 00007f60093f19b4 RSI: 00000000ffffff9c RDI: 00007fff51344050 RBP: 00007fff51343ffc R08: 0000000000000017 R09: 00007fff51343d17 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 R13: 0000000000011db8 R14: 0000000000011c07 R15: 00007fff51344050 rcu: rcu_preempt kthread starved for 1400 jiffies! g8181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25952 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5315 [inline] __schedule+0x1895/0x4b30 kernel/sched/core.c:6675 __schedule_loop kernel/sched/core.c:6752 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6767 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5282 Comm: kworker/0:5 Not tainted 6.12.0-rc1-syzkaller-00238-g8b641b5e4c78 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: events nsim_dev_trap_report_work RIP: 0010:__find_rr_leaf+0x14a/0x8e0 net/ipv6/route.c:801 Code: 89 84 24 98 00 00 00 48 89 5c 24 40 4c 89 74 24 48 4d 85 f6 74 3d 49 8d 9c 24 90 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 9b 04 00 00 44 8b 2b 44 89 ef 8b 5c 24 74 89 de e8 1d RSP: 0018:ffffc90000006400 EFLAGS: 00000a06 RAX: 0000000000000000 RBX: ffff88802f57a890 RCX: ffff88802fb88000 RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90000006578 R08: ffffffff8a6b1990 R09: ffffc900000066b0 R10: ffffc900000066a0 R11: fffff52000000ca2 R12: ffff88802f57a800 R13: 0000000000000000 R14: ffffc90000006680 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000080 CR3: 000000002ffda000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: find_rr_leaf net/ipv6/route.c:853 [inline] rt6_select net/ipv6/route.c:897 [inline] fib6_table_lookup+0x413/0xbb0 net/ipv6/route.c:2195 ip6_pol_route+0x273/0x15d0 net/ipv6/route.c:2231 pol_lookup_func include/net/ip6_fib.h:616 [inline] fib6_rule_lookup+0x58c/0x790 net/ipv6/fib6_rules.c:117 ip6_route_input_lookup net/ipv6/route.c:2300 [inline] ip6_route_input+0x859/0xd90 net/ipv6/route.c:2596 ip6_rcv_finish+0x144/0x180 net/ipv6/ip6_input.c:77 ip_sabotage_in+0x203/0x290 net/bridge/br_netfilter_hooks.c:1015 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5666 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5779 netif_receive_skb_internal net/core/dev.c:5865 [inline] netif_receive_skb+0x1e8/0x890 net/core/dev.c:5924 NF_HOOK+0x9e/0x400 include/linux/netfilter.h:314 br_handle_frame_finish+0x18ed/0x1fe0 br_nf_hook_thresh+0x472/0x590 br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424 __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5560 __netif_receive_skb_one_core net/core/dev.c:5664 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:5779 process_backlog+0x662/0x15b0 net/core/dev.c:6111 __napi_poll+0xcb/0x490 net/core/dev.c:6775 napi_poll net/core/dev.c:6844 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6966 handle_softirqs+0x2c5/0x980 kernel/softirq.c:554 do_softirq+0x11b/0x1e0 kernel/softirq.c:455 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x75d/0xaa0 drivers/net/netdevsim/dev.c:850 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 22030 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) net_ratelimit: 23475 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:cb:af:bc:39:a3, vlan:0)