bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16654/1:b..l
rcu: (detected by 0, t=10503 jiffies, g=109633, q=861 ncpus=2)
task:syz-executor state:R running task stack:23864 pid:16654 tgid:16654 ppid:5808 task_flags:0x40050c flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0x17b4/0x5680 kernel/sched/core.c:7183
preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7364
preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
__raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline]
_raw_spin_unlock+0x3f/0x50 kernel/locking/spinlock.c:190
spin_unlock include/linux/spinlock.h:390 [inline]
zap_pte_range mm/memory.c:1959 [inline]
zap_pmd_range mm/memory.c:2021 [inline]
zap_pud_range mm/memory.c:2049 [inline]
zap_p4d_range mm/memory.c:2070 [inline]
unmap_page_range+0x3b71/0x48f0 mm/memory.c:2091
unmap_single_vma mm/memory.c:2133 [inline]
unmap_vmas+0x48f/0x6a0 mm/memory.c:2171
exit_mmap+0x280/0x9e0 mm/mmap.c:1302
__mmput+0x118/0x430 kernel/fork.c:1177
exit_mm+0x18e/0x250 kernel/exit.c:581
do_exit+0x6a2/0x23c0 kernel/exit.c:965
do_group_exit+0x21b/0x2d0 kernel/exit.c:1119
get_signal+0x1284/0x1330 kernel/signal.c:3039
arch_do_signal_or_restart+0xbc/0x830 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
exit_to_user_mode_loop+0x86/0x480 kernel/entry/common.c:98
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:238 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:328 [inline]
do_syscall_64+0x33e/0xf80 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa215f57f57
RSP: 002b:00007ffdb69077c0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d
RAX: fffffffffffffe00 RBX: 0000555565409500 RCX: 00007fa215f57f57
RDX: 0000000040000000 RSI: 00007ffdb690781c RDI: ffffffffffffffff
RBP: 00007ffdb690781c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
R13: 0000000000000003 R14: 00007ffdb6907a78 R15: 0000000000000000
rcu: rcu_preempt kthread starved for 1779 jiffies! g109633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5382 [inline]
__schedule+0x17b4/0x5680 kernel/sched/core.c:7183
__schedule_loop kernel/sched/core.c:7262 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7277
schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095
rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 19797 Comm: kworker/R-bond1 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: 0x0 (bond1)
RIP: 0010:trace_lock_release include/trace/events/lock.h:69 [inline]
RIP: 0010:lock_release+0x44/0x3c0 kernel/locking/lockdep.c:5879
Code: 8b 05 a0 29 9c 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 a3 29 9c 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 0c 75 90 0e <73> 0d e8 b5 f7 08 00 84 c0 0f 84 94 02 00 00 83 3d d6 a7 90 0e 00
RSP: 0018:ffffc90000a07cc0 EFLAGS: 00000097
RAX: 0000000000000001 RBX: ffff88807e8002a8 RCX: ffff888027971ec0
RDX: 0000000000010100 RSI: ffffffff89ba279f RDI: ffff88807e8002c0
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000140f98 R12: ffff88805c6c5800
R13: ffffffff89ba279f R14: ffff88807e8002c0 R15: 18a9437b08d64909
FS: 0000000000000000(0000) GS:ffff888125343000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feecaa9e270 CR3: 00000000805aa000 CR4: 00000000003526f0
Call Trace:
__raw_spin_unlock include/linux/spinlock_api_smp.h:167 [inline]
_raw_spin_unlock+0x16/0x50 kernel/locking/spinlock.c:190
spin_unlock include/linux/spinlock.h:390 [inline]
advance_sched+0x94f/0xc20 net/sched/sch_taprio.c:988
__run_hrtimer kernel/time/hrtimer.c:1930 [inline]
__hrtimer_run_queues+0x3c0/0xa20 kernel/time/hrtimer.c:1994
hrtimer_interrupt+0x44b/0x950 kernel/time/hrtimer.c:2113
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
__sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1067
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1061
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2039 [inline]
RIP: 0010:vprintk_emit+0x45d/0x560 kernel/printk/printk.c:2478
Code: 0f 84 44 ff ff ff e8 a2 00 21 00 fb eb 44 e8 9a 00 21 00 e8 d5 07 0f 0a 4d 85 f6 74 94 e8 8b 00 21 00 fb 48 c7 c7 40 f4 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 17
RSP: 0018:ffffc90000a080e0 EFLAGS: 00000246
RAX: ffffffff81a45d65 RBX: ffffffff81a45bdf RCX: ffff888027971ec0
RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8e94f440
RBP: ffffc90000a08190 R08: ffffffff90321bb7 R09: 1ffffffff2064376
R10: dffffc0000000000 R11: fffffbfff2064377 R12: 0000000000000000
R13: 000000000000006f R14: 0000000000000200 R15: 1ffff92000141020
_printk+0xdd/0x130 kernel/printk/printk.c:2504
br_fdb_update+0x62d/0x690 net/bridge/br_fdb.c:1015
br_handle_frame_finish+0x573/0x1c80 net/bridge/br_input.c:144
br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1
br_nf_pre_routing_finish_ipv6+0x91f/0xc30 net/bridge/br_netfilter_ipv6.c:-1
NF_HOOK include/linux/netfilter.h:318 [inline]
br_nf_pre_routing_ipv6+0x374/0x6f0 net/bridge/br_netfilter_ipv6.c:183
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
br_handle_frame+0x1277/0x1510 net/bridge/br_input.c:442
__netif_receive_skb_core+0x98f/0x3170 net/core/dev.c:6096
__netif_receive_skb_one_core net/core/dev.c:6207 [inline]
__netif_receive_skb net/core/dev.c:6322 [inline]
process_backlog+0x76d/0x1950 net/core/dev.c:6673
__napi_poll+0xae/0x340 net/core/dev.c:7737
napi_poll net/core/dev.c:7800 [inline]
net_rx_action+0x627/0xf70 net/core/dev.c:7957
handle_softirqs+0x22a/0x840 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1061
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:finish_task_switch+0x427/0xbe0 kernel/sched/core.c:5239
Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 86 44 21 0a e8 21 6d 38 00 fb 49 8d bd a8 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80
RSP: 0018:ffffc90002fe79f0 EFLAGS: 00000206
RAX: 000000000021e8af RBX: 1ffff110170e7784 RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8dfb71ef RDI: ffff888027973568
RBP: ffffc90002fe7a50 R08: ffffffff90321bb7 R09: 1ffffffff2064376
R10: dffffc0000000000 R11: fffffbfff2064377 R12: ffff8880b873ae88
R13: ffff888027971ec0 R14: ffff888028250000 R15: dffffc0000000000
context_switch kernel/sched/core.c:5385 [inline]
__schedule+0x17bc/0x5680 kernel/sched/core.c:7183
__schedule_loop kernel/sched/core.c:7262 [inline]
schedule+0x164/0x360 kernel/sched/core.c:7277
rescuer_thread+0xfbc/0x1130 kernel/workqueue.c:3644
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
net_ratelimit: 14304 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)