bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:a2:19:42:d3:04, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:a2:19:42:d3:04, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31883 rcu: (detected by 1, t=10502 jiffies, g=133001, q=2506 ncpus=2) task:syz.0.7136 state:R running task stack:27056 pid:31883 tgid:31879 ppid:27797 task_flags:0x400040 flags:0x00080000 Call Trace: sched_show_task+0x4aa/0x5f0 kernel/sched/core.c:8180 rcu_print_detail_task_stall_rnp kernel/rcu/tree_stall.h:292 [inline] print_other_cpu_stall+0xf7d/0x1310 kernel/rcu/tree_stall.h:680 check_cpu_stall kernel/rcu/tree_stall.h:855 [inline] rcu_pending kernel/rcu/tree.c:3708 [inline] rcu_sched_clock_irq+0x93d/0x1050 kernel/rcu/tree.c:2744 update_process_times+0x23b/0x2f0 kernel/time/timer.c:2475 tick_sched_handle kernel/time/tick-sched.c:296 [inline] tick_nohz_handler+0x38f/0x6b0 kernel/time/tick-sched.c:317 __run_hrtimer kernel/time/hrtimer.c:2032 [inline] __hrtimer_run_queues+0x371/0xa10 kernel/time/hrtimer.c:2096 hrtimer_interrupt+0x448/0x910 kernel/time/hrtimer.c:2215 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2039 [inline] RIP: 0010:vprintk_emit+0x45d/0x560 kernel/printk/printk.c:2478 Code: 0f 84 44 ff ff ff e8 d2 52 21 00 fb eb 44 e8 ca 52 21 00 e8 b5 21 03 0a 4d 85 f6 74 94 e8 bb 52 21 00 fb 48 c7 c7 80 bd 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 ab 1c RSP: 0018:ffffc90000a081a0 EFLAGS: 00000246 RAX: ffffffff81a4a365 RBX: ffffffff81a4a1df RCX: ffff88807aa20000 RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8e94bd80 RBP: ffffc90000a08250 R08: ffffffff903116f7 R09: 1ffffffff20622de R10: dffffc0000000000 R11: fffffbfff20622df R12: 0000000000000000 R13: 000000000000006f R14: 0000000000000200 R15: 1ffff92000141038 _printk+0xdd/0x130 kernel/printk/printk.c:2504 br_fdb_update+0x657/0x6c0 net/bridge/br_fdb.c:987 br_handle_frame_finish+0x618/0x1990 net/bridge/br_input.c:144 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x127f/0x1510 net/bridge/br_input.c:442 __netif_receive_skb_core+0x989/0x30b0 net/core/dev.c:6093 __netif_receive_skb_one_core net/core/dev.c:6204 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x706/0x1860 net/core/dev.c:6670 __napi_poll+0xaa/0x330 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7949 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] nl80211_netlink_notify+0x6f4/0x840 net/wireless/nl80211.c:22960 notifier_call_chain+0x1a5/0x3d0 kernel/notifier.c:85 blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380 netlink_release+0x11f8/0x1aa0 net/netlink/af_netlink.c:762 __sock_release net/socket.c:710 [inline] sock_close+0xad/0x220 net/socket.c:1501 __fput+0x418/0xa50 fs/file_table.c:512 fput_close_sync+0x11f/0x240 fs/file_table.c:617 __do_sys_close fs/open.c:1538 [inline] __se_sys_close fs/open.c:1523 [inline] __x64_sys_close+0x7e/0x110 fs/open.c:1523 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd325d5d68e Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007fd326ba7f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 00007fd326ba96c0 RCX: 00007fd325d5d68e RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 RBP: 0000000000000007 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fd326016128 R14: 00007fd326016090 R15: 00007ffc0e2d5ce8 rcu: rcu_preempt kthread starved for 244 jiffies! g133001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28120 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5504 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228 __schedule_loop kernel/sched/core.c:7307 [inline] schedule+0x164/0x360 kernel/sched/core.c:7322 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: bat_events batadv_dat_purge RIP: 0010:read_pnet_rcu include/net/net_namespace.h:428 [inline] RIP: 0010:dev_net_rcu include/linux/netdevice.h:2789 [inline] RIP: 0010:__netif_receive_skb_core+0x276d/0x30b0 net/core/dev.c:6160 Code: 00 00 48 89 44 24 38 48 8d 58 10 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cc 8e b3 f8 41 bf 08 01 00 00 4c 03 3b <4c> 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 ad 8e b3 f8 RSP: 0018:ffffc90000007a00 EFLAGS: 00000282 RAX: 1ffff110162d7a2a RBX: ffff8880b16bd150 RCX: ffff888032f9dd00 RDX: 0000000000000100 RSI: 000000000000dd86 RDI: 000000000000dd86 RBP: ffffc90000007c40 R08: ffffc90000007b9f R09: 0000000000000000 R10: ffffc90000007b30 R11: fffff52000000f74 R12: ffffffff90319020 R13: dffffc0000000000 R14: 000000000000dd86 R15: ffff88805b486108 FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4340feb078 CR3: 000000007e59c000 CR4: 00000000003526f0 Call Trace: __netif_receive_skb_one_core net/core/dev.c:6204 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x706/0x1860 net/core/dev.c:6670 __napi_poll+0xaa/0x330 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7949 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] __batadv_dat_purge net/batman-adv/distributed-arp-table.c:186 [inline] batadv_dat_purge+0x2d7/0x3c0 net/batman-adv/distributed-arp-table.c:205 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3397 rescuer_thread+0x7b6/0x10b0 kernel/workqueue.c:3621 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 30923 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:2e:a2:19:42:d3:04, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) net_ratelimit: 34145 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)