bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:75:cb:c0:82:b5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:be:d7:c9:45:5e, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5192/1:b..l P175/1:b..l P5819/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=56797, q=919 ncpus=1)
task:syz-executor state:R running task stack:23832 pid:5819 tgid:5819 ppid:5816 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6908
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7235
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5872
Code: 05 fb e8 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 5b f5 0e 0f 82 c2 02 00 00 8b 35 8e 8f f5 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d e8 28 12 0f 85 02 03 00 00 48 83 c4
RSP: 0018:ffffc90003a875c0 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000004
RDX: 0000000000000000 RSI: ffffffff8de55a23 RDI: ffffffff8c1af720
RBP: ffffffff8e7e9220 R08: 000000002d95789c R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
rcu_read_lock include/linux/rcupdate.h:850 [inline]
class_rcu_constructor include/linux/rcupdate.h:1193 [inline]
unwind_next_frame+0xd1/0x1ea0 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1433 [inline]
__free_frozen_pages+0x7e1/0x10d0 mm/page_alloc.c:2978
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4515 [inline]
slab_alloc_node mm/slub.c:4844 [inline]
__do_kmalloc_node mm/slub.c:5237 [inline]
__kmalloc_noprof+0x2b9/0x850 mm/slub.c:5250
kmalloc_noprof include/linux/slab.h:954 [inline]
tomoyo_realpath_from_path+0xb6/0x690 security/tomoyo/realpath.c:251
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:827
tomoyo_path_unlink+0x91/0xe0 security/tomoyo/tomoyo.c:162
security_path_unlink+0x145/0x2b0 security/security.c:1457
filename_unlinkat+0x316/0x730 fs/namei.c:5537
__do_sys_unlink fs/namei.c:5575 [inline]
__se_sys_unlink fs/namei.c:5572 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5572
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7c4d79b887
RSP: 002b:00007ffe5f726d18 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7c4d79b887
RDX: 00007ffe5f726d40 RSI: 00007ffe5f726dd0 RDI: 00007ffe5f726dd0
RBP: 00007ffe5f726dd0 R08: 00007ffe5f727dd0 R09: 00000000ffffffff
R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe5f727e60
R13: 00007f7c4d831f90 R14: 0000000000058ad2 R15: 00007ffe5f727ea0
task:kworker/u8:6 state:R running task stack:24392 pid:175 tgid:175 ppid:2 task_flags:0x24248060 flags:0x00080000
Workqueue: writeback wb_workfn (flush-8:0)
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6908
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7235
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210
Code: 46 fc 59 00 48 89 df 5b e9 9d 74 5f 00 be 03 00 00 00 5b e9 22 80 eb 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 85 30 05 12 48 8b 34 24 65 48 8b 15 61 30 05
RSP: 0018:ffffc90003056908 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff81cf8569
RDX: ffff888020363d00 RSI: ffffffff81cf8573 RDI: ffff888020363d00
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff9200060ad23
R13: 0000000000000000 R14: ffff88801f6fc800 R15: 0000000000000000
mod_delayed_work_on+0x149/0x1c0 kernel/workqueue.c:2613
kblockd_mod_delayed_work_on+0x29/0x40 block/blk-core.c:1125
blk_mq_delay_run_hw_queue+0x48d/0x850 block/blk-mq.c:2320
blk_mq_do_dispatch_sched block/blk-mq-sched.c:186 [inline]
__blk_mq_sched_dispatch_requests+0xd65/0x1620 block/blk-mq-sched.c:307
blk_mq_sched_dispatch_requests+0xd7/0x1c0 block/blk-mq-sched.c:329
blk_mq_run_hw_queue+0x348/0x670 block/blk-mq.c:2386
blk_mq_dispatch_list+0x51d/0x1360 block/blk-mq.c:2949
blk_mq_flush_plug_list block/blk-mq.c:2997 [inline]
blk_mq_flush_plug_list+0x130/0x600 block/blk-mq.c:2969
blk_add_rq_to_plug+0x1ca/0x540 block/blk-mq.c:1417
blk_mq_submit_bio+0x1bda/0x2bf0 block/blk-mq.c:3243
__submit_bio+0x1e1/0x6c0 block/blk-core.c:635
__submit_bio_noacct_mq block/blk-core.c:722 [inline]
submit_bio_noacct_nocheck+0x562/0xc10 block/blk-core.c:753
submit_bio_noacct+0xd17/0x2010 block/blk-core.c:884
blk_crypto_submit_bio include/linux/blk-crypto.h:203 [inline]
ext4_io_submit+0xf7/0x1a0 fs/ext4/page-io.c:405
ext4_do_writepages+0xa15/0x3f50 fs/ext4/inode.c:2875
ext4_writepages+0x347/0x790 fs/ext4/inode.c:3019
do_writepages+0x278/0x600 mm/page-writeback.c:2554
__writeback_single_inode+0x164/0x13c0 fs/fs-writeback.c:1750
writeback_sb_inodes+0x766/0x1c70 fs/fs-writeback.c:2042
__writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2118
wb_writeback+0x755/0xbe0 fs/fs-writeback.c:2229
wb_check_old_data_flush fs/fs-writeback.c:2333 [inline]
wb_do_writeback fs/fs-writeback.c:2386 [inline]
wb_workfn+0x8c6/0xc00 fs/fs-writeback.c:2414
process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:udevd state:R running task stack:24680 pid:5192 tgid:5192 ppid:1 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6908
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7235
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210
Code: 46 fc 59 00 48 89 df 5b e9 9d 74 5f 00 be 03 00 00 00 5b e9 22 80 eb 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 85 30 05 12 48 8b 34 24 65 48 8b 15 61 30 05
RSP: 0018:ffffc90002f477c8 EFLAGS: 00000286
RAX: 0000000000000000 RBX: 0000000000059f90 RCX: ffffffff82808114
RDX: ffff88807eae8000 RSI: ffffffff8280813e RDI: ffff88807eae8000
RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000001f90 R11: 0000000000000000 R12: ffff88801e49dd00
R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88801e49dcfc
__page_table_check_zero+0x250/0x410 mm/page_table_check.c:139
page_table_check_free include/linux/page_table_check.h:46 [inline]
__free_pages_prepare mm/page_alloc.c:1434 [inline]
__free_frozen_pages+0x7f1/0x10d0 mm/page_alloc.c:2978
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:406
kasan_kmalloc include/linux/kasan.h:263 [inline]
__do_kmalloc_node mm/slub.c:5238 [inline]
__kmalloc_noprof+0x301/0x850 mm/slub.c:5250
kmalloc_noprof include/linux/slab.h:954 [inline]
kzalloc_noprof include/linux/slab.h:1188 [inline]
tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45
tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80
tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_perm+0x276/0x460 security/tomoyo/file.c:827
security_inode_getattr+0x116/0x280 security/security.c:1869
vfs_getattr fs/stat.c:259 [inline]
vfs_statx_path fs/stat.c:299 [inline]
vfs_statx+0x11f/0x3f0 fs/stat.c:356
vfs_fstatat+0x77/0xe0 fs/stat.c:373
__do_sys_newfstatat+0x9d/0x120 fs/stat.c:538
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9cadb11b0a
RSP: 002b:00007ffe6fbbedd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
RAX: ffffffffffffffda RBX: 0000557e42e1f400 RCX: 00007f9cadb11b0a
RDX: 00007ffe6fbbede0 RSI: 0000557e42e0d296 RDI: 00000000ffffff9c
RBP: 0000557e6a77a148 R08: 00000000192d8b50 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe6fbbede0 R14: 0000000000000000 R15: 0000000000000000
rcu: rcu_preempt kthread starved for 1076 jiffies! g56797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6120 kernel/sched/core.c:6908
__schedule_loop kernel/sched/core.c:6990 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7005
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 3407 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: bat_events batadv_tt_purge
RIP: 0010:lowmem_page_address include/linux/mm.h:2730 [inline]
RIP: 0010:folio_address include/linux/mm.h:2741 [inline]
RIP: 0010:slab_address mm/slab.h:157 [inline]
RIP: 0010:nearest_obj mm/slab.h:282 [inline]
RIP: 0010:check_slab_allocation+0x50/0xf0 mm/kasan/common.c:229
Code: 06 48 01 d1 48 8b 41 08 48 8d 70 ff a8 01 48 0f 45 ce 31 c0 41 8b 74 24 18 80 79 33 f5 49 89 f0 48 0f 45 c8 48 89 c8 48 29 d0 <48> c1 f8 06 48 c1 e0 0c 48 03 05 49 ad 9e 0b 48 89 c7 48 89 d8 48
RSP: 0018:ffffc90000006c20 EFLAGS: 00000206
RAX: 0000000005750600 RBX: ffff88815d418800 RCX: ffffea0005750600
RDX: ffffea0000000000 RSI: 0000000000000100 RDI: ffff8880340a8000
RBP: ffffffff8955e362 R08: 0000000000000100 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff888140af4c80
R13: 0000000000a12110 R14: ffffffff8955e362 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff88812434c000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8cad3f0626 CR3: 000000007213e000 CR4: 00000000003526f0
Call Trace:
kasan_slab_pre_free include/linux/kasan.h:199 [inline]
slab_free_hook mm/slub.c:2637 [inline]
slab_free mm/slub.c:6143 [inline]
kmem_cache_free+0xee/0x6a0 mm/slub.c:6273
__skb_ext_put+0x102/0x2f0 net/core/skbuff.c:7252
__skb_ext_del+0xf8/0x380 net/core/skbuff.c:7219
skb_ext_del include/linux/skbuff.h:5073 [inline]
nf_bridge_info_free net/bridge/br_netfilter_hooks.c:156 [inline]
br_nf_dev_queue_xmit+0x7ab/0x2a20 net/bridge/br_netfilter_hooks.c:919
NF_HOOK include/linux/netfilter.h:318 [inline]
NF_HOOK include/linux/netfilter.h:312 [inline]
br_nf_post_routing+0xcbb/0x16a0 net/bridge/br_netfilter_hooks.c:966
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK include/linux/netfilter.h:316 [inline]
br_forward_finish+0x261/0x4d0 net/bridge/br_forward.c:66
br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167
br_nf_forward_finish+0x693/0xb30 net/bridge/br_netfilter_hooks.c:662
NF_HOOK include/linux/netfilter.h:318 [inline]
NF_HOOK include/linux/netfilter.h:312 [inline]
br_nf_forward_ip.part.0+0x61e/0x820 net/bridge/br_netfilter_hooks.c:716
br_nf_forward_ip net/bridge/br_netfilter_hooks.c:676 [inline]
br_nf_forward+0xfe5/0x19f0 net/bridge/br_netfilter_hooks.c:773
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xbf/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK include/linux/netfilter.h:316 [inline]
__br_forward+0x2f6/0x970 net/bridge/br_forward.c:115
deliver_clone net/bridge/br_forward.c:131 [inline]
maybe_deliver+0xf0/0x180 net/bridge/br_forward.c:191
br_flood+0x193/0x650 net/bridge/br_forward.c:238
br_handle_frame_finish+0xf57/0x1f00 net/bridge/br_input.c:229
br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167
br_nf_pre_routing_finish_ipv6+0x769/0xfb0 net/bridge/br_netfilter_ipv6.c:154
NF_HOOK include/linux/netfilter.h:318 [inline]
br_nf_pre_routing_ipv6+0x39c/0x8b0 net/bridge/br_netfilter_ipv6.c:184
br_nf_pre_routing+0x93b/0x1510 net/bridge/br_netfilter_hooks.c:508
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442
__netif_receive_skb_core.constprop.0+0x6c5/0x3550 net/core/dev.c:6054
__netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6165
__netif_receive_skb+0x1f/0x120 net/core/dev.c:6280
process_backlog+0x37a/0x1580 net/core/dev.c:6631
__napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7695
napi_poll net/core/dev.c:7758 [inline]
net_rx_action+0xa40/0xf20 net/core/dev.c:7910
handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622
do_softirq kernel/softirq.c:523 [inline]
do_softirq+0xac/0xe0 kernel/softirq.c:510
__local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
spin_unlock_bh include/linux/spinlock.h:395 [inline]
batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline]
batadv_tt_purge+0x25d/0xbd0 net/batman-adv/translation-table.c:3510
process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
rescuer_thread+0x902/0x1490 kernel/workqueue.c:3582
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 2945 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:75:cb:c0:82:b5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:be:d7:c9:45:5e, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:75:cb:c0:82:b5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:be:d7:c9:45:5e, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:75:cb:c0:82:b5, vlan:0)
net_ratelimit: 4183 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:75:cb:c0:82:b5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:be:d7:c9:45:5e, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:75:cb:c0:82:b5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:be:d7:c9:45:5e, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:75:cb:c0:82:b5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:be:d7:c9:45:5e, vlan:0)