bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P32281/1:b..l P6543/3:b..l
rcu: (detected by 1, t=10502 jiffies, g=191321, q=1184 ncpus=2)
task:kworker/u8:14 state:R running task stack:21928 pid:6543 tgid:6543 ppid:2 task_flags:0x4208160 flags:0x00080000
Workqueue: krds_cp_wq#11/2 rds_send_worker
Call Trace:
context_switch kernel/sched/core.c:5388 [inline]
__schedule+0x1821/0x5740 kernel/sched/core.c:7189
preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7370
preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
__local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457
local_bh_enable include/linux/bottom_half.h:33 [inline]
ip6t_do_table+0x137d/0x1560 net/ipv6/netfilter/ip6_tables.c:375
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619
nf_hook+0x22a/0x3a0 include/linux/netfilter.h:273
NF_HOOK include/linux/netfilter.h:316 [inline]
ip6_xmit+0x112b/0x1af0 net/ipv6/ip6_output.c:379
inet6_csk_xmit+0x3bd/0x6c0 net/ipv6/inet6_connection_sock.c:115
__tcp_transmit_skb+0x26dd/0x4790 net/ipv4/tcp_output.c:1715
tcp_validate_incoming+0x13b4/0x2480 net/ipv4/tcp_input.c:6347
tcp_rcv_established+0x844/0x2800 net/ipv4/tcp_input.c:6639
tcp_v6_do_rcv+0x893/0x1c90 net/ipv6/tcp_ipv6.c:1610
sk_backlog_rcv include/net/sock.h:1190 [inline]
__release_sock+0x1b8/0x3a0 net/core/sock.c:3216
release_sock+0x190/0x260 net/core/sock.c:3815
rds_send_xmit+0x467/0x28d0 net/rds/send.c:244
rds_send_worker+0x7d/0x2e0 net/rds/threads.c:200
process_one_work kernel/workqueue.c:3314 [inline]
process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
kthread+0x389/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:syz.0.6837 state:R running task stack:25800 pid:32281 tgid:32275 ppid:28352 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5388 [inline]
__schedule+0x1821/0x5740 kernel/sched/core.c:7189
preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x14f/0x760 kernel/entry/common.c:164
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_is_held_type+0x3f/0x150 kernel/locking/lockdep.c:5933
Code: 56 b0 87 04 00 0f 84 e4 00 00 00 65 8b 05 39 7e 90 07 85 c0 0f 85 d5 00 00 00 65 4c 8b 2d 81 38 90 07 41 83 bd 8c 0b 00 00 00 <0f> 85 bf 00 00 00 89 f5 49 89 fe 9c 41 5c fa 48 c7 c7 16 6f fc 8d
RSP: 0018:ffffc900056af0c8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000001
RDX: ffffc90012e1a000 RSI: 00000000ffffffff RDI: ffffffff8e95cca0
RBP: 0000000000000002 R08: ffffffff823ac7de R09: ffffffff8e95cca0
R10: 0000000000000010 R11: ffffffff81b0f020 R12: 000000000004edf0
R13: ffff888029060000 R14: ffff88813febb130 R15: 0000000000001000
lookup_page_ext mm/page_ext.c:258 [inline]
page_ext_lookup+0xe7/0x180 mm/page_ext.c:513
page_ext_iter_begin include/linux/page_ext.h:133 [inline]
__update_page_owner_free_handle+0x103/0x470 mm/page_owner.c:284
__reset_page_owner+0x85/0x1f0 mm/page_owner.c:321
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1402 [inline]
__free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943
__slab_free+0x274/0x2c0 mm/slub.c:5612
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4569 [inline]
slab_alloc_node mm/slub.c:4898 [inline]
__do_kmalloc_node mm/slub.c:5294 [inline]
__kmalloc_node_track_caller_noprof+0x493/0x7b0 mm/slub.c:5407
__kmemdup_nul mm/util.c:64 [inline]
kstrdup+0x42/0x100 mm/util.c:84
__kernfs_new_node+0xaa/0x970 fs/kernfs/dir.c:660
kernfs_new_node+0x102/0x210 fs/kernfs/dir.c:748
__kernfs_create_file+0x4b/0x2e0 fs/kernfs/file.c:1057
sysfs_add_file_mode_ns+0x238/0x300 fs/sysfs/file.c:313
create_files fs/sysfs/group.c:82 [inline]
internal_create_group+0x673/0x1180 fs/sysfs/group.c:189
internal_create_groups fs/sysfs/group.c:229 [inline]
sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:255
setup_gid_attrs drivers/infiniband/core/sysfs.c:1118 [inline]
ib_setup_port_attrs+0x170d/0x2380 drivers/infiniband/core/sysfs.c:1394
add_one_compat_dev+0x448/0x650 drivers/infiniband/core/device.c:978
rdma_dev_init_net+0x243/0x2f0 drivers/infiniband/core/device.c:1194
ops_init+0x35c/0x5c0 net/core/net_namespace.c:137
setup_net+0x118/0x340 net/core/net_namespace.c:446
copy_net_ns+0x50e/0x730 net/core/net_namespace.c:579
create_new_namespaces+0x3e7/0x6a0 kernel/nsproxy.c:132
unshare_nsproxy_namespaces+0x149/0x190 kernel/nsproxy.c:234
ksys_unshare+0x57d/0x9f0 kernel/fork.c:3243
__do_sys_unshare kernel/fork.c:3317 [inline]
__se_sys_unshare kernel/fork.c:3315 [inline]
__x64_sys_unshare+0x38/0x50 kernel/fork.c:3315
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5c43d9ce59
RSP: 002b:00007f5c44cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f5c44016090 RCX: 00007f5c43d9ce59
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
RBP: 00007f5c43e32d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5c44016128 R14: 00007f5c44016090 R15: 00007fff64418548
rcu: rcu_preempt kthread starved for 4454 jiffies! g191321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5388 [inline]
__schedule+0x1821/0x5740 kernel/sched/core.c:7189
__schedule_loop kernel/sched/core.c:7268 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7283
schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095
rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297
kthread+0x389/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 21332 Comm: kworker/R-bond7 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: 0x0 (bond7)
RIP: 0010:__raw_spin_lock_irq include/linux/spinlock_api_smp.h:143 [inline]
RIP: 0010:_raw_spin_lock_irq+0x45/0x50 kernel/locking/spinlock.c:174
Code: 00 e8 8f d9 e7 f5 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 74 24 08 e8 43 b6 f5 f5 48 83 c4 08 48 89 df 5b 86 57 f6 f5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90000007dd0 EFLAGS: 00000082
RAX: 1a83adc88d59c000 RBX: 0000000000000001 RCX: 0000000000010002
RDX: 000000002d2c0f00 RSI: ffffffff8e22051c RDI: ffff8880b8628280
RBP: ffff888060f14300 R08: ffffffff81b28e0a R09: ffff8880b8628298
R10: dffffc0000000000 R11: fffffbfff2061a9f R12: ffff8880b8628280
R13: 1ffff110170c509a R14: ffff8880b8628520 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c377ed7 CR3: 0000000011f08000 CR4: 00000000003526f0
Call Trace:
__run_hrtimer kernel/time/hrtimer.c:1934 [inline]
__hrtimer_run_queues+0x46a/0xa20 kernel/time/hrtimer.c:1994
hrtimer_interrupt+0x44b/0x950 kernel/time/hrtimer.c:2113
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
__sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1067
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1061
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:finish_task_switch+0x427/0xbe0 kernel/sched/core.c:5245
Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 16 08 17 0a e8 f1 fa 38 00 fb 49 8d bd b0 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80
RSP: 0018:ffffc900064479f0 EFLAGS: 00000206
RAX: 00000000000508ff RBX: 1ffff110170c7784 RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8dfad286 RDI: ffff88804c39b570
RBP: ffffc90006447a50 R08: ffffffff9030d4f7 R09: 1ffffffff2061a9e
R10: dffffc0000000000 R11: fffffbfff2061a9f R12: ffff8880b863ae88
R13: ffff88804c399ec0 R14: ffff88809932dc40 R15: dffffc0000000000
context_switch kernel/sched/core.c:5391 [inline]
__schedule+0x1829/0x5740 kernel/sched/core.c:7189
__schedule_loop kernel/sched/core.c:7268 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7283
rescuer_thread+0xfbc/0x1130 kernel/workqueue.c:3670
kthread+0x389/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 10174 callbacks suppressed
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:f4:e1:af:a5:c9, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 14982 callbacks suppressed
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:f4:e1:af:a5:c9, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:f4:e1:af:a5:c9, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:f4:e1:af:a5:c9, vlan:0)