bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	(detected by 0, t=10502 jiffies, g=381461, q=30841 ncpus=2)
rcu: All QSes seen, last rcu_preempt kthread activity 6346 (4295157647-4295151301), jiffies_till_next_fqs=1, root ->qsmask 0x0
rcu: rcu_preempt kthread starved for 6346 jiffies! g381461 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7326
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 27927 Comm: kworker/R-bond1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: bond14 bond_alb_monitor
RIP: 0010:rb_erase_linked+0x122/0x170 lib/rbtree.c:460
Code: 42 80 3c 28 00 74 08 4c 89 e7 e8 99 c9 66 f6 4d 89 34 24 4c 89 ff 48 89 de e8 ba f0 ff ff 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 74 c9 66 f6 4d 89 3f 48 83 c3 08 ba 10 00 00 00
RSP: 0018:ffffc90000a07e40 EFLAGS: 00000046
RAX: 1ffff1100aa43a60 RBX: ffff8880b8728458 RCX: dffffc0000000000
RDX: ffff88805521d320 RSI: ffff8880b8728458 RDI: ffff88805521d308
RBP: ffff88805521d318 R08: ffffffff9aa22d43 R09: 1ffffffff35445a8
R10: dffffc0000000000 R11: fffffbfff35445a9 R12: 0000000000000000
R13: dffffc0000000000 R14: 1ffff1100aa43a63 R15: ffff88805521d300
FS:  0000000000000000(0000) GS:ffff888125049000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000559626b197a0 CR3: 000000007e408000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 timerqueue_linked_del include/linux/timerqueue.h:66 [inline]
 __remove_hrtimer+0xf7/0x3e0 kernel/time/hrtimer.c:1155
 __run_hrtimer kernel/time/hrtimer.c:2012 [inline]
 __hrtimer_run_queues+0x295/0xa10 kernel/time/hrtimer.c:2096
 hrtimer_interrupt+0x448/0x910 kernel/time/hrtimer.c:2215
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline]
 __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1062
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:2039 [inline]
RIP: 0010:vprintk_emit+0x45d/0x560 kernel/printk/printk.c:2478
Code: 0f 84 44 ff ff ff e8 62 67 21 00 fb eb 44 e8 5a 67 21 00 e8 75 eb 2c 0a 4d 85 f6 74 94 e8 4b 67 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b
RSP: 0018:ffffc90000a081a0 EFLAGS: 00000246
RAX: ffffffff81a59a15 RBX: ffffffff81a5988f RCX: ffff888035f48000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0
RBP: ffffc90000a08250 R08: ffffffff90578f37 R09: 1ffffffff20af1e6
R10: dffffc0000000000 R11: fffffbfff20af1e7 R12: 0000000000000000
R13: 000000000000006e R14: 0000000000000200 R15: 1ffff92000141038
 _printk+0xdd/0x130 kernel/printk/printk.c:2504
 br_fdb_update+0x657/0x6c0 net/bridge/br_fdb.c:987
 br_handle_frame_finish+0x618/0x1990 net/bridge/br_input.c:144
 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1
 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1
 NF_HOOK include/linux/netfilter.h:318 [inline]
 br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
 br_handle_frame+0x127f/0x1510 net/bridge/br_input.c:442
 __netif_receive_skb_core+0x989/0x30b0 net/core/dev.c:6103
 __netif_receive_skb_one_core net/core/dev.c:6214 [inline]
 __netif_receive_skb net/core/dev.c:6329 [inline]
 process_backlog+0x706/0x1860 net/core/dev.c:6680
 __napi_poll+0xaa/0x330 net/core/dev.c:7739
 napi_poll net/core/dev.c:7802 [inline]
 net_rx_action+0x61d/0xf50 net/core/dev.c:7959
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 do_softirq+0x76/0xd0 kernel/softirq.c:523
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 __alloc_skb+0x1ad/0x7a0 net/core/skbuff.c:699
 __netdev_alloc_skb+0xc1/0x810 net/core/skbuff.c:777
 netdev_alloc_skb include/linux/skbuff.h:3500 [inline]
 dev_alloc_skb include/linux/skbuff.h:3513 [inline]
 alb_send_lp_vid+0x122/0x550 drivers/net/bonding/bond_alb.c:931
 alb_send_learning_packets+0x12c/0x300 drivers/net/bonding/bond_alb.c:1012
 bond_alb_monitor+0x3d0/0x1820 drivers/net/bonding/bond_alb.c:1563
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
 rescuer_thread+0x7b6/0x10b0 kernel/workqueue.c:3629
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:72:3c:f0:91:ec, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 38011 callbacks suppressed
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:72:3c:f0:91:ec, vlan:0)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)