bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P136/1:b..l rcu: (detected by 1, t=10502 jiffies, g=133921, q=3542 ncpus=2) task:kworker/u8:5 state:R running task stack:22152 pid:136 tgid:136 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_unbound toggle_allocation_gate Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x10e9/0x6820 kernel/sched/core.c:7189 preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7370 preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:169 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:190 spin_unlock include/linux/spinlock.h:390 [inline] __text_poke+0x502/0xae0 arch/x86/kernel/alternative.c:2648 smp_text_poke_batch_finish+0x2fb/0xc60 arch/x86/kernel/alternative.c:2980 arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146 jump_label_update+0x37a/0x550 kernel/jump_label.c:910 static_key_enable_cpuslocked+0x1bc/0x270 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate mm/kfence/core.c:906 [inline] toggle_allocation_gate+0xfe/0x2d0 mm/kfence/core.c:898 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302 process_scheduled_works kernel/workqueue.c:3385 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread starved for 9233 jiffies! g133921 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x10e9/0x6820 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7283 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 20188 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: events_unbound cfg80211_wiphy_work RIP: 0010:nf_nat_ipv6_fn+0xfa/0x2d0 net/netfilter/nf_nat_proto.c:912 Code: e8 83 e0 01 49 89 c7 48 89 c6 e8 e1 6c 51 f8 4d 85 ff 75 65 e8 f7 71 51 f8 4c 89 e2 48 89 ee 4c 89 ef e8 99 c6 ff ff 41 89 c7 e1 71 51 f8 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 RSP: 0018:ffffc90000007558 EFLAGS: 00000297 RAX: 0000000000000000 RBX: 1ffff92000000ead RCX: ffffffff89b720f0 RDX: 0000000000000000 RSI: 0000000000000007 RDI: ffff888039092500 RBP: ffff888157baa640 R08: 0000000000000007 R09: 0000000000000007 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000007750 R13: ffff888068bd70c0 R14: 0000000000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124375000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd0bb8cd080 CR3: 00000000838f4000 CR4: 00000000003526f0 Call Trace: nf_nat_ipv6_in+0x14c/0x340 net/netfilter/nf_nat_proto.c:943 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:273 [inline] NF_HOOK include/linux/netfilter.h:316 [inline] br_nf_pre_routing_ipv6+0x51f/0x8b0 net/bridge/br_netfilter_ipv6.c:183 br_nf_pre_routing+0x90f/0x1560 net/bridge/br_netfilter_hooks.c:509 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442 __netif_receive_skb_core.constprop.0+0x6c5/0x3530 net/core/dev.c:6089 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6200 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6315 process_backlog+0x37a/0x1580 net/core/dev.c:6666 __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7730 napi_poll net/core/dev.c:7793 [inline] net_rx_action+0xa40/0xf20 net/core/dev.c:7950 handle_softirqs+0x1ea/0xa00 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x162/0x210 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline] sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1061 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:198 Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 76 57 f6 48 89 df e8 7e c6 57 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 98 47 f6 65 8b 05 fe ae 7d 08 85 c0 74 16 5b RSP: 0018:ffffc900037dfb48 EFLAGS: 00000246 RAX: 0000000000000006 RBX: ffff888036995af8 RCX: 0000000000000040 RDX: 0000000000000000 RSI: ffffffff8df1ff3e RDI: ffffffff8c1c3680 RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000293 R13: ffff888036995af8 R14: ffff8880341c23c0 R15: 0000000000000080 spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] skb_dequeue+0x126/0x180 net/core/skbuff.c:3945 ieee80211_iface_work+0x21a/0x13e0 net/mac80211/iface.c:1843 cfg80211_wiphy_work+0x410/0x570 net/wireless/core.c:513 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3302 process_scheduled_works kernel/workqueue.c:3385 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3466 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 12967 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) net_ratelimit: 12304 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:fc:da:df:b0:73, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:c7:14:74:6e:dc, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)