bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4974/1:b..l.. rcu: (detected by 0, t=10502 jiffies, g=85065, q=2319 ncpus=1) task:udevd state:R running task stack:23400 pid:4974 tgid:4974 ppid:1 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5535 [inline] __schedule+0x1b47/0x5c60 kernel/sched/core.c:7305 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7585 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:524 [inline] irqentry_exit+0x14f/0x910 kernel/entry/common.c:154 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:26 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:109 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:127 [inline] RIP: 0010:lock_release+0x93/0x3c0 kernel/locking/lockdep.c:5960 Code: 0f 85 17 02 00 00 65 4c 8b 3d 91 b5 f2 11 41 83 bf a4 0b 00 00 00 0f 85 01 02 00 00 49 81 3e a0 99 58 94 0f 84 f4 01 00 00 9c <5b> fa 48 c7 c7 91 53 44 8e e8 bf 78 46 0a 65 ff 05 d0 fd f2 11 c7 RSP: 0018:ffffc90004abf498 EFLAGS: 00000206 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8c6dbf60 RDI: ffffffff8c6dbf20 RBP: 0000000000000003 R08: ffff88801cd2957f R09: 1ffff110039a52af R10: dffffc0000000000 R11: ffffed10039a52b0 R12: 0000000000000008 R13: ffffffff824633cc R14: ffffffff8ed5c260 R15: ffff88807f6b5dc0 rcu_lock_release include/linux/rcupdate.h:319 [inline] rcu_read_unlock include/linux/rcupdate.h:880 [inline] __page_table_check_zero+0x3c3/0x430 mm/page_table_check.c:145 page_table_check_free include/linux/page_table_check.h:46 [inline] __free_pages_prepare mm/page_alloc.c:1402 [inline] __free_frozen_pages+0xca3/0xd90 mm/page_alloc.c:2952 __slab_free+0x269/0x2c0 mm/slub.c:5845 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5450 [inline] __kmalloc_noprof+0x366/0x710 mm/slub.c:5475 _kmalloc_noprof include/linux/slab.h:995 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] tomoyo_encode2 security/tomoyo/realpath.c:45 [inline] tomoyo_encode+0x2ad/0x570 security/tomoyo/realpath.c:80 tomoyo_realpath_from_path+0x5fa/0x640 security/tomoyo/realpath.c:283 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827 security_inode_getattr+0x12b/0x310 security/security.c:1942 vfs_getattr+0x23/0x70 fs/stat.c:259 vfs_statx_path+0x2b/0x230 fs/stat.c:299 vfs_statx+0x12e/0x200 fs/stat.c:356 vfs_fstatat+0x11b/0x170 fs/stat.c:373 __do_sys_newfstatat fs/stat.c:538 [inline] __se_sys_newfstatat+0x118/0x3a0 fs/stat.c:532 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fab88711b0a RSP: 002b:00007ffe4d5fc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 000055d4e3463418 RCX: 00007fab88711b0a RDX: 00007ffe4d5fc050 RSI: 000055d4e3451ef3 RDI: 00000000ffffff9c RBP: 000055d4efb6f148 R08: 00065c372ca5cb54 R09: 3fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe4d5fc050 R14: 0000000000000000 R15: 00065c372ca5cb54 rcu: rcu_preempt kthread starved for 3786 jiffies! g85065 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26752 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5535 [inline] __schedule+0x1b47/0x5c60 kernel/sched/core.c:7305 __schedule_loop kernel/sched/core.c:7382 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7397 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x1230 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9c/0x340 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: bat_events batadv_tt_purge RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:228 [inline] RIP: 0010:unwind_next_frame+0x1f8/0x2550 arch/x86/kernel/unwind_orc.c:510 Code: 15 5d a2 f7 0c 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 3c 74 c2 91 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 <4c> 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d 24 85 RSP: 0018:ffffc90000007528 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8000000000000100 RDX: 00000000000aee8a RSI: ffffffff8c6dbf60 RDI: ffffffff8c6dbf20 RBP: ffffffff816e8a92 R08: ffffffff8178199f R09: 0000000000000000 R10: ffffc90000007678 R11: fffff52000000ed1 R12: dffffc0000000000 R13: ffffffff91c42e64 R14: ffffc90000007628 R15: 0000000000006e8a FS: 0000000000000000(0000) GS:ffff888124cb2000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f7898b26630 CR3: 00000000126de000 CR4: 00000000003526f0 Call Trace: __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:264 [inline] __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:296 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:2779 [inline] slab_free mm/slub.c:6548 [inline] kmem_cache_free+0x182/0x650 mm/slub.c:6675 kfree_skb_reason include/linux/skbuff.h:1323 [inline] kfree_skb include/linux/skbuff.h:1332 [inline] ip6_mc_input+0x878/0xc80 net/ipv6/ip6_input.c:639 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325 __netif_receive_skb_one_core net/core/dev.c:6264 [inline] __netif_receive_skb net/core/dev.c:6377 [inline] process_backlog+0x795/0x18b0 net/core/dev.c:6728 __napi_poll+0xaa/0x330 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8007 handle_softirqs+0x223/0x840 kernel/softirq.c:645 do_softirq+0x77/0xd0 kernel/softirq.c:546 __local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473 spin_unlock_bh include/linux/spinlock.h:407 [inline] batadv_tt_local_purge+0x2d4/0x370 net/batman-adv/translation-table.c:1628 batadv_tt_purge+0x35/0xa40 net/batman-adv/translation-table.c:4098 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 rescuer_thread+0x84a/0x12a0 kernel/workqueue.c:3803 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245