bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7649/1:b..l
rcu: (detected by 0, t=10503 jiffies, g=20569, q=1393 ncpus=2)
task:syz.0.489 state:R running task stack:23344 pid:7649 tgid:7640 ppid:5837 task_flags:0x40054c flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5396 [inline]
__schedule+0x16f5/0x4d00 kernel/sched/core.c:6785
preempt_schedule_common+0x83/0xd0 kernel/sched/core.c:6965
preempt_schedule+0xae/0xc0 kernel/sched/core.c:6989
preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
__local_bh_enable_ip+0x13e/0x1c0 kernel/softirq.c:414
nl80211_netlink_notify+0x46b/0x840 net/wireless/nl80211.c:20310
notifier_call_chain+0x1b3/0x3e0 kernel/notifier.c:85
blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380
netlink_release+0x1259/0x1b10 net/netlink/af_netlink.c:764
__sock_release net/socket.c:647 [inline]
sock_close+0xc0/0x240 net/socket.c:1437
__fput+0x44c/0xa70 fs/file_table.c:465
task_work_run+0x1d1/0x260 kernel/task_work.c:227
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0x6ad/0x22e0 kernel/exit.c:955
do_group_exit+0x21c/0x2d0 kernel/exit.c:1104
get_signal+0x1286/0x1340 kernel/signal.c:3034
arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop+0x75/0x110 kernel/entry/common.c:111
exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline]
do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6ec5f8e929
RSP: 002b:00007f6ec6d14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: 0000000000000400 RBX: 00007f6ec61b6080 RCX: 00007f6ec5f8e929
RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 000000000000000a
RBP: 00007f6ec6010b39 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f6ec61b6080 R15: 00007ffd9842f3b8
rcu: rcu_preempt kthread starved for 2040 jiffies! g20569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5396 [inline]
__schedule+0x16f5/0x4d00 kernel/sched/core.c:6785
__schedule_loop kernel/sched/core.c:6863 [inline]
schedule+0x165/0x360 kernel/sched/core.c:6878
schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2054
rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2256
kthread+0x70e/0x8a0 kernel/kthread.c:464
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:rt6_select net/ipv6/route.c:906 [inline]
RIP: 0010:fib6_table_lookup+0x16f/0xa80 net/ipv6/route.c:2233
Code: 5c 24 68 48 83 c3 20 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 8e be 07 f8 48 8b 03 48 89 44 24 20 e8 f1 07 4a 01 <89> c3 31 ff 89 c6 e8 46 4b a4 f7 85 db 74 1f e8 3d e0 89 f7 89 c3
RSP: 0018:ffffc90000a07680 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffff8880595a1920 RCX: ffff88801fecda00
RDX: 1ffff110066f79bb RSI: 1ffff92000140f10 RDI: 1ffff92000140f10
RBP: ffffc90000a077f0 R08: ffffc90000a075ef R09: 0000000000000000
R10: ffffc90000a075e0 R11: fffff52000140ebe R12: dffffc0000000000
R13: ffffc90000a07870 R14: ffffc90000a07878 R15: 1ffff92000140f0f
FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000c1e030 CR3: 000000000df38000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
ip6_pol_route+0x222/0x1180 net/ipv6/route.c:2269
pol_lookup_func include/net/ip6_fib.h:617 [inline]
__fib6_rule_action net/ipv6/fib6_rules.c:237 [inline]
fib6_rule_action+0x674/0x7d0 net/ipv6/fib6_rules.c:275
fib_rules_lookup+0x767/0xe90 net/core/fib_rules.c:339
fib6_rule_lookup+0x18e/0x6f0 net/ipv6/fib6_rules.c:112
ip6_route_input_lookup net/ipv6/route.c:2338 [inline]
ip6_route_input+0x6ce/0xa50 net/ipv6/route.c:2641
ip6_rcv_finish+0x141/0x2d0 net/ipv6/ip6_input.c:77
ip_sabotage_in+0x1e1/0x270 net/bridge/br_netfilter_hooks.c:993
nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline]
nf_hook_slow+0xc2/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:272 [inline]
NF_HOOK+0x206/0x3a0 include/linux/netfilter.h:315
__netif_receive_skb_one_core net/core/dev.c:5975 [inline]
__netif_receive_skb+0xd3/0x380 net/core/dev.c:6088
netif_receive_skb_internal net/core/dev.c:6174 [inline]
netif_receive_skb+0x1cb/0x790 net/core/dev.c:6233
NF_HOOK+0x9d/0x390 include/linux/netfilter.h:318
br_handle_frame_finish+0x14d1/0x19b0 net/bridge/br_input.c:-1
br_nf_hook_thresh+0x3c3/0x4a0 net/bridge/br_netfilter_hooks.c:-1
br_nf_pre_routing_finish_ipv6+0x948/0xd00 net/bridge/br_netfilter_ipv6.c:-1
NF_HOOK include/linux/netfilter.h:317 [inline]
br_nf_pre_routing_ipv6+0x37e/0x6b0 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:283 [inline]
br_handle_frame+0x97f/0x14c0 net/bridge/br_input.c:434
__netif_receive_skb_core+0x10e1/0x4180 net/core/dev.c:5861
__netif_receive_skb_one_core net/core/dev.c:5973 [inline]
__netif_receive_skb+0x72/0x380 net/core/dev.c:6088
process_backlog+0x60e/0x14f0 net/core/dev.c:6440
__napi_poll+0xc7/0x480 net/core/dev.c:7453
napi_poll net/core/dev.c:7517 [inline]
net_rx_action+0x707/0xe30 net/core/dev.c:7644
handle_softirqs+0x286/0x870 kernel/softirq.c:579
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline]
RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 kernel/smp.c:885
Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b
RSP: 0018:ffffc90000ba76a0 EFLAGS: 00000293
RAX: ffffffff81b4eb00 RBX: ffff8880b873cb40 RCX: ffff88801fecda00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90000ba7800 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe
R10: dffffc0000000000 R11: fffffbfff1f421ff R12: 1ffff110170c86b5
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86435a8
on_each_cpu_cond_mask+0x3f/0x80 kernel/smp.c:1052
on_each_cpu include/linux/smp.h:71 [inline]
smp_text_poke_sync_each_cpu arch/x86/kernel/alternative.c:2660 [inline]
smp_text_poke_batch_finish+0x5e0/0x1100 arch/x86/kernel/alternative.c:2870
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
static_key_enable_cpuslocked+0x128/0x250 kernel/jump_label.c:210
static_key_enable+0x1a/0x20 kernel/jump_label.c:223
toggle_allocation_gate+0xad/0x240 mm/kfence/core.c:850
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
kthread+0x70e/0x8a0 kernel/kthread.c:464
ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 6798 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 7544 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0)