bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5929/1:b..l rcu: (detected by 1, t=10502 jiffies, g=11521, q=5355 ncpus=2) task:syz.1.2 state:R running task stack:26072 pid:5929 tgid:5922 ppid:5837 task_flags:0x20400040 flags:0x00080003 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1190/0x5de0 kernel/sched/core.c:6929 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7256 irqentry_exit+0x36/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:stack_depot_save_flags+0x0/0x9c0 lib/stackdepot.c:637 Code: 86 06 83 f8 01 0f 85 10 ff ff ff 90 0f 0b 90 e9 07 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 83 f9 03 0f 87 8e 03 00 00 41 57 49 89 ff 41 56 41 55 RSP: 0018:ffffc90004a57290 EFLAGS: 00000287 RAX: 000000000000001b RBX: ffffc90004a57298 RCX: 0000000000000001 RDX: 0000000000002800 RSI: 000000000000001b RDI: ffffc90004a57298 RBP: 0000000000002800 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 R13: 0000000000000018 R14: 0000000000000000 R15: ffff8880206ba3c0 kasan_save_stack+0x42/0x60 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:417 kmalloc_noprof include/linux/slab.h:957 [inline] slab_free_hook mm/slub.c:2475 [inline] slab_free mm/slub.c:6611 [inline] kmem_cache_free+0x147/0x6c0 mm/slub.c:6721 mempool_free+0x102/0x750 mm/mempool.c:576 bio_put_percpu_cache block/bio.c:805 [inline] bio_put+0x355/0x5b0 block/bio.c:824 bio_endio+0x713/0x860 block/bio.c:1672 blk_update_request+0x93e/0x15f0 block/blk-mq.c:998 blk_mq_end_request+0x4f/0x90 block/blk-mq.c:1160 blk_mq_complete_request block/blk-mq.c:1338 [inline] blk_mq_complete_request+0x8b/0xb0 block/blk-mq.c:1335 nullb_complete_cmd drivers/block/null_blk/main.c:1402 [inline] null_handle_cmd drivers/block/null_blk/main.c:1454 [inline] null_queue_rq+0xb69/0xfd0 drivers/block/null_blk/main.c:1693 null_queue_rqs+0xe9/0x2f0 drivers/block/null_blk/main.c:1707 __blk_mq_flush_list block/blk-mq.c:2837 [inline] __blk_mq_flush_list+0x9a/0xc0 block/blk-mq.c:2833 blk_mq_dispatch_queue_requests+0x184/0x7b0 block/blk-mq.c:2882 blk_mq_flush_plug_list+0x1f2/0x600 block/blk-mq.c:2970 __blk_flush_plug+0x2c4/0x4b0 block/blk-core.c:1225 blk_finish_plug block/blk-core.c:1252 [inline] blk_finish_plug+0x53/0xa0 block/blk-core.c:1249 blkdev_writepages+0xe9/0x140 block/fops.c:492 do_writepages+0x27a/0x600 mm/page-writeback.c:2604 filemap_fdatawrite_wbc mm/filemap.c:389 [inline] filemap_fdatawrite_wbc+0x104/0x160 mm/filemap.c:379 __filemap_fdatawrite_range+0xb9/0x100 mm/filemap.c:422 file_write_and_wait_range+0xca/0x140 mm/filemap.c:797 blkdev_fsync+0x6c/0xd0 block/fops.c:623 vfs_fsync_range+0x139/0x220 fs/sync.c:187 __do_sys_msync+0x3cb/0x5c0 mm/msync.c:96 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa20a38eec9 RSP: 002b:00007fa2081d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a RAX: ffffffffffffffda RBX: 00007fa20a5e6270 RCX: 00007fa20a38eec9 RDX: 0000000000000006 RSI: 00000000000000e0 RDI: 0000000000000000 RBP: 00007fa20a411f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa20a5e6308 R14: 00007fa20a5e6270 R15: 00007ffd25301ec8 net_ratelimit: 15038 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) net_ratelimit: 14818 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 14955 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) net_ratelimit: 14840 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) net_ratelimit: 15093 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 15125 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 14614 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 14929 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 14819 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 15164 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:e9:5b:bf:d9:ed, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:03:9a:5a:c7:bd, vlan:0) NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 3413 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: bat_events batadv_tt_purge RIP: 0010:skb_orphan include/linux/skbuff.h:3375 [inline] RIP: 0010:setup_pre_routing+0x261/0x4d0 net/bridge/br_netfilter_hooks.c:468 Code: 66 41 81 fc 81 00 0f 84 41 01 00 00 e8 78 52 7f f7 44 89 e6 bf 88 64 00 00 e8 7b 4d 7f f7 66 41 81 fc 88 64 0f 84 be 00 00 00 5a 52 7f f7 48 8d 6b 60 48 b8 00 00 00 00 00 fc ff df 48 89 ea RSP: 0018:ffffc90000a08700 EFLAGS: 00000a12 RAX: 0000000000000000 RBX: ffff8880835a0140 RCX: ffffffff8a3d55f5 RDX: ffff888030b9bc80 RSI: 0000000000006488 RDI: 0000000000000003 RBP: ffff8880835a9410 R08: 0000000000000003 R09: 0000000000006488 R10: 000000000000dd86 R11: 0000000000000001 R12: 000000000000dd86 R13: ffff8880835a0150 R14: ffff888033a70000 R15: ffff8880835a9410 FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa100102492 CR3: 0000000012ddc000 CR4: 00000000003526f0 Call Trace: br_nf_pre_routing_ipv6+0x112/0x8c0 net/bridge/br_netfilter_ipv6.c:175 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0xad8/0x14b0 net/bridge/br_input.c:442 __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 net/core/dev.c:5966 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6077 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6192 process_backlog+0x439/0x15e0 net/core/dev.c:6544 __napi_poll.constprop.0+0xba/0x550 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0x97f/0xef0 net/core/dev.c:7784 handle_softirqs+0x219/0x8e0 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:510 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_local_purge+0x21c/0x3c0 net/batman-adv/translation-table.c:1315 batadv_tt_purge+0x8b/0xb80 net/batman-adv/translation-table.c:3509 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] rescuer_thread+0x620/0xea0 kernel/workqueue.c:3523 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x675/0x7d0 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245