bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7287/1:b..l rcu: (detected by 0, t=10502 jiffies, g=28169, q=226 ncpus=2) task:syz.2.455 state:R running task stack:21928 pid:7287 ppid:5769 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0x1553/0x45a0 kernel/sched/core.c:6700 preempt_schedule_notrace+0xdd/0x110 kernel/sched/core.c:6960 preempt_schedule_notrace_thunk+0x1a/0x30 arch/x86/entry/thunk_64.S:46 trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0x405/0x420 kernel/locking/lockdep.c:5725 rcu_lock_acquire include/linux/rcupdate.h:334 [inline] rcu_read_lock include/linux/rcupdate.h:786 [inline] __pte_offset_map+0x48/0x2c0 mm/pgtable-generic.c:287 __pte_offset_map_lock+0x47/0x1d0 mm/pgtable-generic.c:371 pte_offset_map_lock include/linux/mm.h:3016 [inline] __get_locked_pte mm/memory.c:1823 [inline] get_locked_pte include/linux/mm.h:2741 [inline] insert_page mm/memory.c:1865 [inline] vm_insert_page+0x558/0x8c0 mm/memory.c:2021 kcov_mmap+0xe9/0x160 kernel/kcov.c:505 call_mmap include/linux/fs.h:2023 [inline] mmap_file mm/internal.h:98 [inline] __mmap_region mm/mmap.c:2790 [inline] mmap_region+0xf8e/0x2000 mm/mmap.c:2941 do_mmap+0x92c/0x10a0 mm/mmap.c:1385 vm_mmap_pgoff+0x1c4/0x3f0 mm/util.c:556 ksys_mmap_pgoff+0x520/0x700 mm/mmap.c:1431 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fd97559ac22 RSP: 002b:00007fff05a2a258 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fd9733f6000 RCX: 00007fd97559ac22 RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fd9733f6000 RBP: 0000000000000011 R08: 00000000000000db R09: 0000000000000000 R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 R13: 0000000000000003 R14: 0000000000000000 R15: 00007fd975815fa0 rcu: rcu_preempt kthread starved for 1465 jiffies! g28169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26920 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5381 [inline] __schedule+0x1553/0x45a0 kernel/sched/core.c:6700 schedule+0xbd/0x170 kernel/sched/core.c:6774 schedule_timeout+0x188/0x2d0 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x313/0x1590 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x9d/0x3b0 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 7291 Comm: syz.2.455 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:__this_cpu_preempt_check+0x0/0x20 lib/smp_processor_id.c:65 Code: 48 89 da e8 12 6a f4 ff 48 8b 74 24 30 48 c7 c7 60 81 1c 8b e8 01 6a f4 ff e8 4c 80 ff ff eb a8 e8 e5 e8 ff ff 0f 1f 44 00 00 0f 1e fa 48 89 fe 48 c7 c7 e0 80 1c 8b e9 dd fe ff ff cc cc cc RSP: 0018:ffffc900001ef2d8 EFLAGS: 00000006 RAX: ffffffff8190ff60 RBX: 0000000000000001 RCX: ffff88802b2f8000 RDX: 0000000000010100 RSI: 0000000000000001 RDI: ffffffff8acfe8c0 RBP: ffffc900001ef3d8 R08: 0000000000000001 R09: ffff8880b8f36930 R10: ffffe8ffffd9a02c R11: fffff91ffffb3407 R12: ffffffff8cffd180 R13: 1ffff9200003de68 R14: ffff8880b8f36930 R15: 0000000000000000 FS: 00007fd9764136c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007feee69abb40 CR3: 0000000025e1d000 CR4: 00000000003506e0 Call Trace: trace_call_bpf+0x5e9/0x6c0 kernel/trace/bpf_trace.c:148 perf_trace_run_bpf_submit+0x7a/0x1c0 kernel/events/core.c:10263 perf_trace_lock_acquire+0x34f/0x410 include/trace/events/lock.h:24 trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0x3ef/0x420 kernel/locking/lockdep.c:5725 seqcount_lockdep_reader_access+0xd1/0x1d0 include/linux/seqlock.h:102 timekeeping_get_delta kernel/time/timekeeping.c:254 [inline] timekeeping_get_ns kernel/time/timekeeping.c:388 [inline] ktime_get+0x7f/0x280 kernel/time/timekeeping.c:848 hrtimer_forward_now include/linux/hrtimer.h:509 [inline] perf_swevent_hrtimer+0x2c9/0x570 kernel/events/core.c:11193 __run_hrtimer kernel/time/hrtimer.c:1750 [inline] __hrtimer_run_queues+0x4eb/0xc40 kernel/time/hrtimer.c:1814 hrtimer_interrupt+0x3c9/0x9c0 kernel/time/hrtimer.c:1876 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x51/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:__preempt_count_add arch/x86/include/asm/preempt.h:80 [inline] RIP: 0010:rcu_is_watching+0x6/0xb0 kernel/rcu/tree.c:699 Code: 8a e8 be 2e 13 09 48 c7 c7 40 88 13 8d 4c 89 f6 e8 3f 9e eb 02 e9 44 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 98 d9 92 7e e8 7b 44 13 09 89 c3 83 f8 08 73 60 RSP: 0018:ffffc900001efd50 EFLAGS: 00000257 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81682307 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8ad9e8 RBP: ffffc900001efe68 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: 1ffff9200003dfb8 R13: ffffffff8d131fe0 R14: 0000000000000001 R15: dffffc0000000000 trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0xc6/0x420 kernel/locking/lockdep.c:5725 rcu_lock_acquire include/linux/rcupdate.h:334 [inline] rcu_read_lock include/linux/rcupdate.h:786 [inline] trace_call_bpf+0xe4/0x6c0 kernel/trace/bpf_trace.c:142 perf_trace_run_bpf_submit+0x7a/0x1c0 kernel/events/core.c:10263 perf_trace_lock_acquire+0x34f/0x410 include/trace/events/lock.h:24 trace_lock_acquire include/trace/events/lock.h:24 [inline] lock_acquire+0x3ef/0x420 kernel/locking/lockdep.c:5725 rcu_lock_acquire include/linux/rcupdate.h:334 [inline] rcu_read_lock include/linux/rcupdate.h:786 [inline] nf_hook include/linux/netfilter.h:228 [inline] NF_HOOK+0x111/0x3a0 include/linux/netfilter.h:302 br_handle_frame_finish+0x14b9/0x19b0 net/bridge/br_input.c:221 br_nf_hook_thresh+0x3cd/0x4a0 net/bridge/br_netfilter_hooks.c:1184 br_nf_pre_routing_finish_ipv6+0x9dc/0xd00 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:304 [inline] br_nf_pre_routing_ipv6+0x349/0x6b0 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:144 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x96b/0x14e0 net/bridge/br_input.c:424 __netif_receive_skb_core+0xfab/0x3af0 net/core/dev.c:5532 __netif_receive_skb_one_core net/core/dev.c:5636 [inline] __netif_receive_skb+0x74/0x290 net/core/dev.c:5752 process_backlog+0x396/0x700 net/core/dev.c:6080 __napi_poll+0xc0/0x460 net/core/dev.c:6642 napi_poll net/core/dev.c:6709 [inline] net_rx_action+0x616/0xc50 net/core/dev.c:6846 handle_softirqs+0x280/0x820 kernel/softirq.c:578 __do_softirq kernel/softirq.c:612 [inline] invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:in_lock_functions+0x4/0x20 kernel/locking/spinlock.c:412 Code: 03 38 c1 0f 8c 77 ff ff ff 48 c7 c7 80 ea 1f 93 e8 71 d6 75 00 e9 66 ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc f3 0f 1e fa <48> 81 ff a0 b0 8d 8a 0f 93 c0 48 81 ff 0c dc 8d 8a 0f 92 c1 20 c1 RSP: 0018:ffffc90003367a28 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffffffff8a8db1a2 RCX: ffffffff972c5403 RDX: ffffc9000d94d000 RSI: 000000000004e55b RDI: ffffffff8a8db1a2 RBP: ffffc90003367b50 R08: ffff88807702ae6f R09: 0000000000000000 R10: ffff88807702ae60 R11: ffffed100ee055ce R12: 1ffff9200066cf54 R13: ffff88807702ad38 R14: ffff88807702ad38 R15: dffffc0000000000 get_lock_parent_ip include/linux/ftrace.h:974 [inline] preempt_latency_start kernel/sched/core.c:5827 [inline] preempt_count_add+0x91/0x1a0 kernel/sched/core.c:5852 __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] _raw_spin_lock+0x12/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] d_instantiate+0x64/0x90 fs/dcache.c:2043 alloc_file_pseudo+0x173/0x210 fs/file_table.c:335 __anon_inode_getfile fs/anon_inodes.c:122 [inline] __anon_inode_getfd fs/anon_inodes.c:207 [inline] anon_inode_getfd+0xca/0x1c0 fs/anon_inodes.c:242 bpf_prog_load+0x1296/0x1670 kernel/bpf/syscall.c:2783 __sys_bpf+0x5ba/0x890 kernel/bpf/syscall.c:5476 __do_sys_bpf kernel/bpf/syscall.c:5580 [inline] __se_sys_bpf kernel/bpf/syscall.c:5578 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5578 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fd97559aeb9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd976413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007fd975816090 RCX: 00007fd97559aeb9 RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 RBP: 00007fd975608c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fd975816128 R14: 00007fd975816090 R15: 00007fff05a2a1a8 net_ratelimit: 432 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) net_ratelimit: 5631 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:94:9a:d2:6c:57, vlan:0)