bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:7f:a5:2c:c5:67, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5488/1:b..l P5183/1:b..l rcu: (detected by 0, t=10502 jiffies, g=46145, q=379 ncpus=1) task:klogd state:R running task stack:24664 pid:5183 tgid:5183 ppid:1 task_flags:0x400100 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__rcu_read_lock+0x56/0x70 kernel/rcu/tree_plugin.h:420 Code: 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 2c 8b 83 c4 04 00 00 83 c0 01 89 83 c4 04 00 00 8b 83 c4 04 00 00 3d ff ff ff 3f 7f 06 <5b> e9 14 f2 a4 09 90 0f 0b 90 5b e9 0a f2 a4 09 e8 f5 06 87 00 eb RSP: 0018:ffffc900030574a0 EFLAGS: 00000293 RAX: 0000000000000001 RBX: ffff88807df8db80 RCX: ffffc90003057474 RDX: 0000000000000000 RSI: ffffffff8273b4c9 RDI: ffff88807df8e044 RBP: ffffc90003057568 R08: 0000000000000001 R09: 0000000000000007 R10: 0000000000000200 R11: 00000000000173f7 R12: ffffffff81f2e390 R13: ffffc90003057520 R14: 0000000000000000 R15: ffff88807df8db80 rcu_read_lock include/linux/rcupdate.h:845 [inline] class_rcu_constructor include/linux/rcupdate.h:1190 [inline] unwind_next_frame+0xae/0x1ea0 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x162/0x1e0 mm/page_owner.c:165 __reset_page_owner+0x84/0x190 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1433 [inline] __free_frozen_pages+0x7e1/0x10d0 mm/page_alloc.c:2978 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4538 [inline] slab_alloc_node mm/slub.c:4866 [inline] __do_kmalloc_node mm/slub.c:5259 [inline] __kmalloc_node_track_caller_noprof+0x2ba/0x850 mm/slub.c:5368 kmalloc_reserve+0xe8/0x350 net/core/skbuff.c:635 __alloc_skb+0x185/0x710 net/core/skbuff.c:713 alloc_skb include/linux/skbuff.h:1383 [inline] alloc_skb_with_frags+0xe0/0x810 net/core/skbuff.c:6760 sock_alloc_send_pskb+0x801/0x980 net/core/sock.c:2995 unix_dgram_sendmsg+0x3c7/0x1820 net/unix/af_unix.c:2127 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x468/0x4b0 net/socket.c:2206 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2209 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff458d8f407 RSP: 002b:00007ffc8bee3a80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007ff458c3fc80 RCX: 00007ff458d8f407 RDX: 000000000000003d RSI: 00007ffc8bee3bc0 RDI: 0000000000000003 RBP: 00007ffc8bee3ff0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc8bee4008 R13: 00007ffc8bee3bc0 R14: 0000000000000022 R15: 00007ffc8bee3bc0 task:dhcpcd state:R running task stack:26200 pid:5488 tgid:5488 ppid:1 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7238 irqentry_exit+0x17b/0x670 kernel/entry/common.c:239 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:kasan_check_range+0x10/0x1e0 mm/kasan/generic.c:199 Code: 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 85 f6 0f 84 7a 01 00 00 48 89 f8 <41> 54 41 89 d0 48 01 f0 55 53 0f 82 e6 00 00 00 eb 0f cc cc cc 48 RSP: 0018:ffffc90002e979a8 EFLAGS: 00000202 RAX: ffff88801fd01898 RBX: ffff88801fd01898 RCX: ffffffff8280c2ed RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801fd01898 RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801fd01850 R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 instrument_atomic_read include/linux/instrumented.h:82 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] __page_table_check_zero+0x16d/0x410 mm/page_table_check.c:142 page_table_check_free include/linux/page_table_check.h:46 [inline] __free_pages_prepare mm/page_alloc.c:1434 [inline] __free_frozen_pages+0x7f1/0x10d0 mm/page_alloc.c:2978 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4538 [inline] slab_alloc_node mm/slub.c:4866 [inline] __do_kmalloc_node mm/slub.c:5259 [inline] __kmalloc_noprof+0x2b9/0x850 mm/slub.c:5272 kmalloc_noprof include/linux/slab.h:954 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45 tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_number_perm+0x23c/0x580 security/tomoyo/file.c:728 security_file_ioctl+0xd3/0x230 security/security.c:2436 __do_sys_ioctl fs/ioctl.c:591 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xb7/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f50953ab378 RSP: 002b:00007ffd968bc6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000556e4ddb14d0 RCX: 00007f50953ab378 RDX: 00007ffd968bc6d0 RSI: 0000000000008921 RDI: 000000000000000f RBP: 00007ffd968bc6d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000556e4ddb92f0 R13: 0000556e4ddb14d0 R14: 0000556e4ddb92f0 R15: 00007ffd968bc920 rcu: rcu_preempt kthread starved for 260 jiffies! g46145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5298 [inline] __schedule+0xfee/0x6120 kernel/sched/core.c:6911 __schedule_loop kernel/sched/core.c:6993 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7008 schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 3409 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Workqueue: bat_events batadv_dat_purge RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:write_comp_data+0x18/0x90 kernel/kcov.c:246 Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 99 c2 05 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 70 c2 05 12 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc RSP: 0018:ffffc90000007430 EFLAGS: 00000246 RAX: 0000000080000101 RBX: ffff888035cbe000 RCX: ffffffff8a5cab94 RDX: 000000000000dd86 RSI: 0000000000003580 RDI: ffff888033473d00 RBP: ffff8880afdf8780 R08: 0000000000000003 R09: 0000000000003580 R10: 000000000000dd86 R11: 0000000000000000 R12: 1ffff92000000e8e R13: 000000000000dd86 R14: ffff8880afdf87b3 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888124340000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055558547b4e8 CR3: 000000005fc62000 CR4: 00000000003526f0 Call Trace: br_handle_frame_finish+0x5b4/0x1f60 net/bridge/br_input.c:169 br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1167 br_nf_pre_routing_finish_ipv6+0x769/0xfb0 net/bridge/br_netfilter_ipv6.c:154 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x39c/0x8b0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x90d/0x1550 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0xcdd/0x1520 net/bridge/br_input.c:442 __netif_receive_skb_core.constprop.0+0x6c5/0x3550 net/core/dev.c:6068 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6179 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6294 process_backlog+0x37a/0x1580 net/core/dev.c:6645 __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7709 napi_poll net/core/dev.c:7772 [inline] net_rx_action+0xa40/0xf20 net/core/dev.c:7929 handle_softirqs+0x1eb/0x9e0 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xac/0xe0 kernel/softirq.c:510 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:395 [inline] __batadv_dat_purge.part.0+0x294/0x3c0 net/batman-adv/distributed-arp-table.c:185 __batadv_dat_purge net/batman-adv/distributed-arp-table.c:166 [inline] batadv_dat_purge+0x4b/0xa0 net/batman-adv/distributed-arp-table.c:204 process_one_work+0xa23/0x19a0 kernel/workqueue.c:3288 process_scheduled_works kernel/workqueue.c:3371 [inline] rescuer_thread+0x905/0x14a0 kernel/workqueue.c:3595 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 9170 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:7f:a5:2c:c5:67, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:7f:a5:2c:c5:67, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:7f:a5:2c:c5:67, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 13149 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:7f:a5:2c:c5:67, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:7f:a5:2c:c5:67, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:7f:a5:2c:c5:67, vlan:0)