bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4986/1:b..l P4997/1:b..l rcu: (detected by 1, t=10503 jiffies, g=20609, q=1290 ncpus=2) task:udevd state:R running task stack:23864 pid:4997 tgid:4997 ppid:1 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:547 [inline] irqentry_exit+0x14f/0x760 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 f1 1d 07 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db a8 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 11 0a 0a cc 48 8d 3d 88 63 92 RSP: 0018:ffffc90002f675d8 EFLAGS: 00000286 RAX: fe880e10736ff500 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 0000000019406e04 RSI: ffffffff8e21a1b7 RDI: ffffffff8c28af60 RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cda0 R10: ffffc90002f67738 R11: ffffffff81b0efc0 R12: 0000000000000002 R13: ffffffff8e95cda0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xc3/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1402 [inline] __free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943 __slab_free+0x274/0x2c0 mm/slub.c:5612 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kvmalloc_node_noprof+0x4d7/0x8a0 mm/slub.c:6832 seq_buf_alloc fs/seq_file.c:39 [inline] seq_read_iter+0x202/0xe10 fs/seq_file.c:211 new_sync_read fs/read_write.c:493 [inline] vfs_read+0x582/0xa70 fs/read_write.c:574 ksys_read+0x150/0x270 fs/read_write.c:717 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4561ca7407 RSP: 002b:00007ffccc5431f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00007f45624ae880 RCX: 00007f4561ca7407 RDX: 0000000000001000 RSI: 000055e04b7c0570 RDI: 000000000000000c RBP: 00007f4561defff0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a R13: 00007f4561defea0 R14: 0000000000000000 R15: 000055e04b7947a0 task:klogd state:R running task stack:24200 pid:4986 tgid:4986 ppid:1 task_flags:0x400100 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:547 [inline] irqentry_exit+0x14f/0x760 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5872 Code: ff ff ff e8 f1 1d 07 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db a8 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 11 0a 0a cc 48 8d 3d 88 63 92 RSP: 0018:ffffc90002db7298 EFLAGS: 00000282 RAX: 63de215da4724500 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 000000005f93de65 RSI: ffffffff8e21a1b7 RDI: ffffffff8c28af60 RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cda0 R10: ffffc90002db73f8 R11: ffffffff81b0efc0 R12: 0000000000000002 R13: ffffffff8e95cda0 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xc3/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1402 [inline] __free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943 __slab_free+0x274/0x2c0 mm/slub.c:5612 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] __do_kmalloc_node mm/slub.c:5294 [inline] __kmalloc_node_track_caller_noprof+0x493/0x7b0 mm/slub.c:5407 kmalloc_reserve net/core/skbuff.c:635 [inline] __alloc_skb+0x2c1/0x7d0 net/core/skbuff.c:713 alloc_skb include/linux/skbuff.h:1383 [inline] alloc_skb_with_frags+0xc8/0x760 net/core/skbuff.c:6736 sock_alloc_send_pskb+0x878/0x990 net/core/sock.c:2998 unix_dgram_sendmsg+0x460/0x18d0 net/unix/af_unix.c:2141 sock_sendmsg_nosec net/socket.c:787 [inline] __sock_sendmsg net/socket.c:802 [inline] __sys_sendto+0x672/0x710 net/socket.c:2265 __do_sys_sendto net/socket.c:2272 [inline] __se_sys_sendto net/socket.c:2268 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2268 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f75001f0407 RSP: 002b:00007fff02feec80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f75000a0c80 RCX: 00007f75001f0407 RDX: 00000000000000a0 RSI: 00007fff02feedc0 RDI: 0000000000000003 RBP: 00007fff02fef1f0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff02fef208 R13: 00007fff02feedc0 R14: 0000000000000085 R15: 00007fff02feedc0 rcu: rcu_preempt kthread starved for 9311 jiffies! g20609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5637 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:216 Code: 8b 3d b4 ab 60 0c 48 89 de 5b e9 e3 ec 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 98 9b 73 11 65 8b 15 b9 9b 73 11 81 e2 00 01 ff 00 74 RSP: 0018:ffffc900040a7b18 EFLAGS: 00000246 RAX: ffffffff823c84ef RBX: 0000000000076543 RCX: ffff888036f60000 RDX: 0000000000000000 RSI: ffffffff8c28af40 RDI: 0000000000076543 RBP: dffffc0000000000 R08: ffffffff823c8e4a R09: ffffffff8e95cda0 R10: dffffc0000000000 R11: ffffed100d42cb3a R12: 0000000000076543 R13: 0000000000076543 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f45624ae880(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbc6a9e7458 CR3: 00000000251e2000 CR4: 00000000003526f0 Call Trace: _static_cpu_has arch/x86/include/asm/cpufeature.h:101 [inline] __nr_to_section include/linux/mmzone.h:2061 [inline] __pfn_to_section include/linux/mmzone.h:2198 [inline] lookup_page_ext mm/page_ext.c:255 [inline] page_ext_lookup+0x15f/0x180 mm/page_ext.c:513 page_ext_iter_begin include/linux/page_ext.h:133 [inline] __page_table_check_zero+0x135/0x3e0 mm/page_table_check.c:139 page_table_check_free include/linux/page_table_check.h:46 [inline] __free_pages_prepare mm/page_alloc.c:1403 [inline] __free_frozen_pages+0xbd7/0xd30 mm/page_alloc.c:2943 __slab_free+0x274/0x2c0 mm/slub.c:5612 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] kmem_cache_alloc_noprof+0x2bc/0x650 mm/slub.c:4905 alloc_filename fs/namei.c:142 [inline] do_getname+0x2e/0x250 fs/namei.c:182 class_filename_flags_constructor include/linux/fs.h:2555 [inline] do_readlinkat+0xc8/0x510 fs/stat.c:569 __do_sys_readlink fs/stat.c:605 [inline] __se_sys_readlink fs/stat.c:602 [inline] __x64_sys_readlink+0x7f/0x90 fs/stat.c:602 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4561d153a7 Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 RSP: 002b:00007ffccc546748 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 RAX: ffffffffffffffda RBX: 00007ffccc547120 RCX: 00007f4561d153a7 RDX: 0000000000000400 RSI: 00007ffccc546c00 RDI: 00007ffccc547120 RBP: 00007ffccc54712f R08: 0000000000000075 R09: 0000000000000000 R10: 0000000000000100 R11: 0000000000000246 R12: 00007ffccc546c00 R13: 00007ffccc546800 R14: 000055e01cd966d7 R15: 000055e04b7844a0 net_ratelimit: 9619 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:68:0c:1f:a8:65, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:68:0c:1f:a8:65, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:68:0c:1f:a8:65, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) net_ratelimit: 16845 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:68:0c:1f:a8:65, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:68:0c:1f:a8:65, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:1e:68:0c:1f:a8:65, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)