bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P22707/1:b..l
rcu: 	(detected by 0, t=10503 jiffies, g=330717, q=3239 ncpus=2)
task:syz.4.13792     state:R  running task     stack:25800 pid:22707 tgid:22702 ppid:16379  task_flags:0x400040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5388 [inline]
 __schedule+0x1821/0x5740 kernel/sched/core.c:7189
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:216
Code: 8b 3d 64 79 60 0c 48 89 de 5b e9 83 06 60 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 48 49 72 11 65 8b 15 69 49 72 11 81 e2 00 01 ff 00 74
RSP: 0018:ffffc9000522f538 EFLAGS: 00000246
RAX: ffffffff8202ec17 RBX: ffffffff8202e90d RCX: 0000000000000007
RDX: ffffffff8202e9d3 RSI: ffffffff8ea32740 RDI: 0000000000000000
RBP: ffffc9000522f628 R08: ffff88804f428000 R09: 0000000000000003
R10: 0000000000000406 R11: 0000000000000002 R12: 1ffff92000a45eac
R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000522f580
 xas_retry include/linux/xarray.h:1534 [inline]
 filemap_get_entry+0x3d7/0x3f0 mm/filemap.c:1902
 shmem_get_folio_gfp+0x243/0x1670 mm/shmem.c:2488
 shmem_fault+0x179/0x390 mm/shmem.c:2765
 __do_fault+0x138/0x2a0 mm/memory.c:5474
 do_read_fault mm/memory.c:5909 [inline]
 do_fault mm/memory.c:6043 [inline]
 do_pte_missing+0x2093/0x33f0 mm/memory.c:4566
 handle_pte_fault mm/memory.c:6427 [inline]
 __handle_mm_fault mm/memory.c:6565 [inline]
 handle_mm_fault+0x1bf2/0x3170 mm/memory.c:6734
 faultin_page mm/gup.c:1126 [inline]
 __get_user_pages+0x167f/0x2730 mm/gup.c:1428
 populate_vma_page_range+0x2be/0x3c0 mm/gup.c:1860
 __mm_populate+0x25f/0x390 mm/gup.c:1963
 mm_populate include/linux/mm.h:4137 [inline]
 vm_mmap_pgoff+0x3aa/0x4f0 mm/util.c:586
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb62d9ce59
RSP: 002b:00007fcb63cfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 00007fcb63016090 RCX: 00007fcb62d9ce59
RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
RBP: 00007fcb62e32d6f R08: ffffffffffffffff R09: 00000000215eb000
R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fcb63016128 R14: 00007fcb63016090 R15: 00007fff251bde78
 </TASK>
rcu: rcu_preempt kthread starved for 1367 jiffies! g330717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27968 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5388 [inline]
 __schedule+0x1821/0x5740 kernel/sched/core.c:7189
 __schedule_loop kernel/sched/core.c:7268 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7283
 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6116 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Workqueue: krds_cp_wq#33/1 rds_connect_worker
RIP: 0010:sched_balance_trigger+0x0/0xce0 kernel/sched/fair.c:13357
Code: 38 c1 0f 8c 12 f9 ff ff 4c 89 f7 e8 0a d5 99 00 e9 05 f9 ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48
RSP: 0018:ffffc90000a08920 EFLAGS: 00000096
RAX: 0000000000000000 RBX: 0000000000010000 RCX: 0000000000000000
RDX: 0000000000010100 RSI: 0000000000000080 RDI: ffff8880b873b080
RBP: 0000000000000001 R08: ffffffff81f97f4a R09: ffffffff8e95cc20
R10: dffffc0000000000 R11: ffffed10170e761a R12: dffffc0000000000
R13: 000000010002733b R14: ffff8880b8725040 R15: 000000010002733b
FS:  0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3d9990da10 CR3: 000000007bcc6000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 update_process_times+0x26f/0x2f0 kernel/time/timer.c:2480
 tick_sched_handle kernel/time/tick-sched.c:298 [inline]
 tick_nohz_handler+0x42b/0x770 kernel/time/tick-sched.c:319
 __run_hrtimer kernel/time/hrtimer.c:1930 [inline]
 __hrtimer_run_queues+0x375/0xa20 kernel/time/hrtimer.c:1994
 hrtimer_interrupt+0x44b/0x950 kernel/time/hrtimer.c:2113
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1067
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1061
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__usecs_to_jiffies+0x0/0x60 kernel/time/time.c:584
Code: e6 99 14 00 48 b8 fe ff ff ff ff ff ff 3f 5b e9 06 4d f9 09 cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 53 89 fb e8 b4 99 14 00 bf e0 b1 ff ff 89 de e8 e8 9d
RSP: 0018:ffffc90000a08d38 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffc90000a08e00 RCX: ffff888054ed9f00
RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000004e20
RBP: ffffc90000a08f40 R08: ffffffff903034f7 R09: 1ffffffff206069e
R10: dffffc0000000000 R11: ffffffff897f40b0 R12: dffffc0000000000
R13: ffffc90000a08e90 R14: 000000010002733a R15: 0000000000000001
 usecs_to_jiffies include/linux/jiffies.h:619 [inline]
 net_rx_action+0x152/0xf70 net/core/dev.c:7918
 handle_softirqs+0x22a/0x840 kernel/softirq.c:622
 do_softirq+0x76/0xd0 kernel/softirq.c:523
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450
 lock_sock include/net/sock.h:1713 [inline]
 __inet6_bind+0x30c/0xf60 net/ipv6/af_inet6.c:292
 kernel_bind+0x13e/0x1c0 net/socket.c:3660
 rds_tcp_conn_path_connect+0x53e/0x930 net/rds/tcp_connect.c:175
 rds_connect_worker+0x1d8/0x290 net/rds/threads.c:176
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397
 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3478
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
net_ratelimit: 12636 callbacks suppressed
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
net_ratelimit: 15438 callbacks suppressed
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:a6:08:f1:b3:36:eb, vlan:0)