bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:ee:58:6a:a4:5b:d6, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5608/3:b..l
rcu: (detected by 1, t=10503 jiffies, g=34473, q=1416 ncpus=2)
task:syz-executor state:R running task stack:21280 pid:5608 tgid:5608 ppid:5607 task_flags:0x400100 flags:0x00080800
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7413
preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12
__local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457
local_bh_enable include/linux/bottom_half.h:33 [inline]
rcu_read_unlock_bh include/linux/rcupdate.h:914 [inline]
__dev_queue_xmit+0x1edc/0x3820 net/core/dev.c:4913
dev_queue_xmit include/linux/netdevice.h:3446 [inline]
neigh_hh_output include/net/neighbour.h:544 [inline]
neigh_output include/net/neighbour.h:558 [inline]
ip_finish_output2+0xbda/0x10b0 net/ipv4/ip_output.c:236
NF_HOOK_COND include/linux/netfilter.h:307 [inline]
ip_output+0x29f/0x450 net/ipv4/ip_output.c:437
__ip_queue_xmit+0x10df/0x1b10 net/ipv4/ip_output.c:533
__tcp_transmit_skb+0x2d18/0x47c0 net/ipv4/tcp_output.c:1717
tcp_transmit_skb net/ipv4/tcp_output.c:1734 [inline]
tcp_write_xmit+0x1bfa/0x6400 net/ipv4/tcp_output.c:3062
__tcp_push_pending_frames+0x96/0x380 net/ipv4/tcp_output.c:3245
tcp_sendmsg_locked+0x498e/0x55c0 net/ipv4/tcp.c:1414
tcp_sendmsg+0x2f/0x50 net/ipv4/tcp.c:1451
sock_sendmsg_nosec+0x10e/0x180 net/socket.c:776
__sock_sendmsg net/socket.c:790 [inline]
sock_write_iter+0x2de/0x3e0 net/socket.c:1241
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x612/0xba0 fs/read_write.c:687
ksys_write+0x150/0x270 fs/read_write.c:739
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe7bb559197
RSP: 002b:00007ffd2db75660 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000055558337d540 RCX: 00007fe7bb559197
RDX: 0000000000000320 RSI: 00007fe7b73ffce0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000320
R13: 00005555833962e0 R14: 00007ffd2db75c40 R15: 00007fe7b73ffce0
rcu: rcu_preempt kthread starved for 9949 jiffies! g34473 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0x164/0x2b0 kernel/sched/core.c:7326
schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 4980 Comm: klogd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:__run_hrtimer kernel/time/hrtimer.c:2012 [inline]
RIP: 0010:__hrtimer_run_queues+0x289/0xa10 kernel/time/hrtimer.c:2096
Code: 89 d7 49 c1 ef 03 43 0f b6 04 2f 84 c0 0f 85 75 03 00 00 ff 02 43 0f b6 04 2f 84 c0 0f 85 88 03 00 00 48 8b 74 24 38 ff 46 10 <48> 89 ef 31 d2 31 c9 e8 9b 3d 00 00 48 8d 5d 48 48 89 d8 48 c1 e8
RSP: 0018:ffffc90000006ec0 EFLAGS: 00000002
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000010100
RDX: ffff8880b8628310 RSI: ffff8880b8628300 RDI: 00000000ffffffff
RBP: ffff88807b412300 R08: ffffffff9a9ae7b3 R09: 1ffffffff3535cf6
R10: dffffc0000000000 R11: fffffbfff3535cf7 R12: ffff8880b86281c0
R13: dffffc0000000000 R14: ffff8880b8628360 R15: 1ffff110170c5062
FS: 00007f95a9d0ac80(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055556b3574e8 CR3: 0000000012308000 CR4: 00000000003526f0
Call Trace:
hrtimer_interrupt+0x448/0x910 kernel/time/hrtimer.c:2215
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline]
__sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:check_preemption_disabled+0x1d/0xe0 lib/smp_processor_id.c:53
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 f7 7d 9b 07 65 8b 0d ec 7d 9b 07 f7 c1 ff ff ff 7f 74 0c 5b <41> 5e 41 5f 5d e9 49 e5 02 00 cc 9c 59 f7 c1 00 02 00 00 74 ea 65
RSP: 0018:ffffc900000071a0 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000102
RDX: 0000000000000000 RSI: ffffffff8c4bdd60 RDI: ffffffff8c4bdd20
RBP: ffffffff8aa115e2 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed10054928dd R12: 0000000000000002
R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000000
rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline]
rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:752
trace_lock_acquire include/trace/events/lock.h:23 [inline]
lock_acquire+0x5f/0x350 kernel/locking/lockdep.c:5831
rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
rcu_read_lock include/linux/rcupdate.h:840 [inline]
nf_hook include/linux/netfilter.h:242 [inline]
NF_HOOK+0xc3/0x3f0 include/linux/netfilter.h:316
__br_forward+0x397/0x540 net/bridge/br_forward.c:115
br_handle_frame_finish+0x1175/0x1990 net/bridge/br_input.c:229
br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1
br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1
NF_HOOK include/linux/netfilter.h:318 [inline]
br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
br_handle_frame+0x127f/0x1510 net/bridge/br_input.c:442
__netif_receive_skb_core+0x989/0x30b0 net/core/dev.c:6099
__netif_receive_skb_one_core net/core/dev.c:6210 [inline]
__netif_receive_skb net/core/dev.c:6325 [inline]
process_backlog+0x706/0x1860 net/core/dev.c:6676
__napi_poll+0xaa/0x330 net/core/dev.c:7735
napi_poll net/core/dev.c:7798 [inline]
net_rx_action+0x61d/0xf50 net/core/dev.c:7955
handle_softirqs+0x225/0x840 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:schedule_debug kernel/sched/core.c:6073 [inline]
RIP: 0010:__schedule+0x185/0x56c0 kernel/sched/core.c:7083
Code: 74 08 48 89 df e8 3b 3a 62 f6 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 22 3a 62 f6 48 81 3b 9d 6e ac 57 <0f> 85 2f 1d 00 00 8b 5c 24 48 85 db 7f 4c 49 8d 5c 24 18 48 89 d8
RSP: 0018:ffffc900034b7400 EFLAGS: 00000246
RAX: 1ffff92000696000 RBX: ffffc900034b0000 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8c4bdd60 RDI: ffffffff8c4bdd20
RBP: ffffc900034b75f8 R08: ffffffff90579937 R09: 1ffffffff20af326
R10: dffffc0000000000 R11: fffffbfff20af327 R12: ffff88807fe9be00
R13: dffffc0000000000 R14: 1ffff92000696ea4 R15: ffff888124f4d000
preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:qlist_free_all+0x6c/0x100 mm/kasan/quarantine.c:177
Code: 8d 0c 04 49 8b 44 04 08 89 c2 83 e2 01 48 ff ca 48 09 c2 48 21 ca 0f b6 42 33 c1 e0 18 3d 00 00 00 f5 49 0f 45 d5 4c 8b 62 08 <49> 8b 2f 49 63 84 24 b8 00 00 00 49 29 c7 4c 89 e7 4c 89 fe e8 5b
RSP: 0018:ffffc900034b7720 EFLAGS: 00010246
RAX: 00000000f5000000 RBX: ffffc900034b7758 RCX: ffffea0001a96100
RDX: ffffea0001a96100 RSI: ffffea00009bcd40 RDI: ffff88806a584500
RBP: ffff88806a584500 R08: 0000000000000000 R09: ffffffff8234bd4e
R10: dffffc0000000000 R11: fffffbfff20af327 R12: ffff88801f6ffc80
R13: 0000000000000000 R14: 0000000000000000 R15: ffff88806a584500
kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4584 [inline]
slab_alloc_node mm/slub.c:4917 [inline]
kmem_cache_alloc_node_noprof+0x355/0x610 mm/slub.c:4989
__alloc_skb+0x1d7/0x7a0 net/core/skbuff.c:704
alloc_skb include/linux/skbuff.h:1384 [inline]
alloc_skb_with_frags+0xc6/0x760 net/core/skbuff.c:6775
sock_alloc_send_pskb+0x878/0x990 net/core/sock.c:3013
unix_dgram_sendmsg+0x4da/0x17b0 net/unix/af_unix.c:2137
sock_sendmsg_nosec+0x13a/0x180 net/socket.c:775
__sock_sendmsg net/socket.c:790 [inline]
__sys_sendto+0x408/0x5a0 net/socket.c:2252
__do_sys_sendto net/socket.c:2259 [inline]
__se_sys_sendto net/socket.c:2255 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2255
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f95a9e5a407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffe440bd910 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f95a9d0ac80 RCX: 00007f95a9e5a407
RDX: 00000000000000a1 RSI: 00007ffe440bda50 RDI: 0000000000000003
RBP: 00007ffe440bde80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe440bde98
R13: 00007ffe440bda50 R14: 0000000000000086 R15: 00007ffe440bda50
net_ratelimit: 9276 callbacks suppressed
bridge0: received packet on veth1_to_bridge with own address as source address (addr:ee:58:6a:a4:5b:d6, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
net_ratelimit: 17799 callbacks suppressed
bridge0: received packet on veth1_to_bridge with own address as source address (addr:ee:58:6a:a4:5b:d6, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)