bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7628/1:b..l P5802/1:b..l P976/1:b..l P7625/1:b..l P5956/1:b..l
rcu: (detected by 1, t=10502 jiffies, g=19489, q=781 ncpus=2)
task:kworker/1:9 state:R running task stack:23000 pid:5956 tgid:5956 ppid:2 task_flags:0x4208160 flags:0x00080000
Workqueue: events_power_efficient gc_worker
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7234
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__seqprop_spinlock_sequence include/linux/seqlock.h:228 [inline]
RIP: 0010:nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:343 [inline]
RIP: 0010:gc_worker+0x2bb/0x1630 net/netfilter/nf_conntrack_core.c:1548
Code: 00 00 48 c7 c7 a8 e2 d9 90 e8 f1 d6 38 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 3f a7 5c f8 58 48 85 db 0f 85 97 0f 00 00 50 ac 5c f8 8b 1d 2a f6 2d 07 89 dd 31 ff 83 e5 01 89 ee e8 ec
RSP: 0018:ffffc900052dfb48 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89abf706
RDX: ffff8880301c2480 RSI: ffffffff89abf715 RDI: ffff8880301c2480
RBP: 0000000000003691 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
R13: 0000000000040000 R14: 0000000000001b49 R15: 0000000000001770
process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:syz.3.466 state:R running task stack:25672 pid:7625 tgid:7623 ppid:5801 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7234
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:unwind_next_frame+0x11f5/0x1ea0 arch/x86/kernel/unwind_orc.c:532
Code: 00 00 00 00 fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 02 09 00 00 48 89 c8 4d 8b 7d 38 48 ba 00 00 00 00 00 fc ff df <48> c1 e8 03 0f b6 34 10 48 8d 41 01 48 89 c7 48 c1 ef 03 0f b6 14
RSP: 0018:ffffc9001000f3e8 EFLAGS: 00000246
RAX: ffffffff91779db0 RBX: 0000000000000001 RCX: ffffffff91779db0
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff90f11e94
RBP: ffffc9001000f4f0 R08: ffffffff91779db4 R09: 0000000000000007
R10: 0000000000000200 R11: 000000000000b81b R12: ffffc9001000f4f8
R13: ffffc9001000f4a8 R14: 0000000000000005 R15: ffffc9001000f458
__unwind_start+0x3d1/0x7f0 arch/x86/kernel/unwind_orc.c:773
unwind_start arch/x86/include/asm/unwind.h:64 [inline]
arch_stack_walk+0x73/0xf0 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1432 [inline]
__free_frozen_pages+0x7ca/0x10a0 mm/page_alloc.c:2977
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4459 [inline]
slab_alloc_node mm/slub.c:4788 [inline]
__do_kmalloc_node mm/slub.c:5176 [inline]
__kmalloc_node_track_caller_noprof+0x2ba/0x850 mm/slub.c:5285
__kmemdup_nul mm/util.c:64 [inline]
kstrdup+0x51/0xe0 mm/util.c:84
kstrdup_const+0x63/0x80 mm/util.c:104
kvasprintf_const+0x10f/0x1a0 lib/kasprintf.c:48
kobject_set_name_vargs+0x5a/0x140 lib/kobject.c:274
dev_set_name+0xc7/0x100 drivers/base/core.c:3492
tty_register_device_attr+0x2fb/0x7f0 drivers/tty/tty_io.c:3255
gsm_register_devices drivers/tty/n_gsm.c:658 [inline]
gsm_activate_mux+0x155/0x2a0 drivers/tty/n_gsm.c:3199
gsm_config_ext drivers/tty/n_gsm.c:3495 [inline]
gsmld_ioctl+0x346/0x15c0 drivers/tty/n_gsm.c:3859
tty_ioctl+0x1204/0x1690 drivers/tty/tty_io.c:2801
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:597 [inline]
__se_sys_ioctl fs/ioctl.c:583 [inline]
__x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f372e19bf79
RSP: 002b:00007f372f025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f372e415fa0 RCX: 00007f372e19bf79
RDX: 0000200000000040 RSI: 0000000040204706 RDI: 000000000000000b
RBP: 00007f372e2327e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f372e416038 R14: 00007f372e415fa0 R15: 00007ffed0e94f38
task:kworker/0:2 state:R running task stack:26072 pid:976 tgid:976 ppid:2 task_flags:0x4208060 flags:0x00080000
Workqueue: usb_hub_wq hub_event
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7234
irqentry_exit+0x17b/0x670 kernel/entry/common.c:239
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5872
Code: 05 3b 22 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 06 71 f4 0e 0f 82 c2 02 00 00 8b 35 1e a4 f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 21 28 12 0f 85 02 03 00 00 48 83 c4
RSP: 0018:ffffc90004fef1b0 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000006
RDX: 0000000000000000 RSI: ffffffff8de46fb3 RDI: ffffffff8c1adf20
RBP: ffffffff8e7e94a0 R08: 000000004ff71ccf R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
rcu_read_lock include/linux/rcupdate.h:850 [inline]
class_rcu_constructor include/linux/rcupdate.h:1193 [inline]
unwind_next_frame+0xd1/0x1ea0 arch/x86/kernel/unwind_orc.c:495
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1432 [inline]
__free_frozen_pages+0x7ca/0x10a0 mm/page_alloc.c:2977
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xe0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:406
kasan_kmalloc include/linux/kasan.h:263 [inline]
__do_kmalloc_node mm/slub.c:5177 [inline]
__kmalloc_noprof+0x301/0x850 mm/slub.c:5189
kmalloc_noprof include/linux/slab.h:966 [inline]
kzalloc_noprof include/linux/slab.h:1204 [inline]
rh_call_control drivers/usb/core/hcd.c:491 [inline]
rh_urb_enqueue drivers/usb/core/hcd.c:821 [inline]
usb_hcd_submit_urb+0x601/0x2150 drivers/usb/core/hcd.c:1542
usb_submit_urb+0x8aa/0x1910 drivers/usb/core/urb.c:587
usb_start_wait_urb+0x106/0x4c0 drivers/usb/core/message.c:59
usb_internal_control_msg drivers/usb/core/message.c:103 [inline]
usb_control_msg+0x326/0x4a0 drivers/usb/core/message.c:154
get_port_status drivers/usb/core/hub.c:607 [inline]
hub_ext_port_status+0x152/0x600 drivers/usb/core/hub.c:624
usb_hub_port_status drivers/usb/core/hub.c:674 [inline]
port_event drivers/usb/core/hub.c:5761 [inline]
hub_event+0x6d2/0x4af0 drivers/usb/core/hub.c:5953
process_one_work+0x9d7/0x1920 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
task:syz-executor state:R running task stack:22360 pid:5802 tgid:5802 ppid:1 task_flags:0x40054c flags:0x00080003
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7091
preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
__raw_read_unlock include/linux/rwlock_api_smp.h:254 [inline]
_raw_read_unlock+0x3e/0x50 kernel/locking/spinlock.c:260
zap_pid_ns_processes+0x259/0x6a0 kernel/pid_namespace.c:233
find_child_reaper kernel/exit.c:622 [inline]
forget_original_parent kernel/exit.c:706 [inline]
exit_notify kernel/exit.c:743 [inline]
do_exit+0x232a/0x2a90 kernel/exit.c:983
do_group_exit+0xd5/0x2a0 kernel/exit.c:1112
get_signal+0x1ec7/0x21e0 kernel/signal.c:3034
arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:64 [inline]
exit_to_user_mode_loop+0x86/0x4a0 kernel/entry/common.c:98
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:325 [inline]
do_syscall_64+0x67c/0xf80 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9bb235c84e
RSP: 002b:00007ffec7c0aff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: 0000000000000000 RBX: 00005555901ab500 RCX: 00007f9bb235c84e
RDX: 00007ffec7c0b050 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffec7c0b0bc R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
R13: 00000000000927c0 R14: 0000000000033930 R15: 00007ffec7c0b110
task:syz.0.467 state:R running task stack:26904 pid:7628 tgid:7627 ppid:5802 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
preempt_schedule_common+0x42/0xc0 kernel/sched/core.c:7091
preempt_schedule_thunk+0x16/0x30 arch/x86/entry/thunk.S:12
__local_bh_enable_ip+0xff/0x120 kernel/softirq.c:457
local_bh_enable include/linux/bottom_half.h:33 [inline]
rcu_read_unlock_bh include/linux/rcupdate.h:924 [inline]
__dev_queue_xmit+0x7f1/0x4750 net/core/dev.c:4856
dev_queue_xmit include/linux/netdevice.h:3384 [inline]
__netlink_deliver_tap_skb net/netlink/af_netlink.c:307 [inline]
__netlink_deliver_tap net/netlink/af_netlink.c:325 [inline]
netlink_deliver_tap+0xa4d/0xcc0 net/netlink/af_netlink.c:338
__netlink_sendskb net/netlink/af_netlink.c:1260 [inline]
netlink_sendskb net/netlink/af_netlink.c:1269 [inline]
netlink_unicast+0x70c/0x870 net/netlink/af_netlink.c:1359
nlmsg_unicast include/net/netlink.h:1198 [inline]
netlink_ack+0x655/0xb80 net/netlink/af_netlink.c:2512
netlink_rcv_skb+0x333/0x420 net/netlink/af_netlink.c:2556
xfrm_netlink_rcv+0x71/0x90 net/xfrm/xfrm_user.c:3529
netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1344
netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1894
sock_sendmsg_nosec net/socket.c:727 [inline]
__sock_sendmsg net/socket.c:742 [inline]
____sys_sendmsg+0xa54/0xc30 net/socket.c:2592
___sys_sendmsg+0x190/0x1e0 net/socket.c:2646
__sys_sendmsg+0x170/0x220 net/socket.c:2678
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9bb239bf79
RSP: 002b:00007f9bb3223028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f9bb2615fa0 RCX: 00007f9bb239bf79
RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000006
RBP: 00007f9bb24327e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9bb2616038 R14: 00007f9bb2615fa0 R15: 00007ffec7c0ad18
rcu: rcu_preempt kthread starved for 10462 jiffies! g19489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:28376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x60e0 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2095
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2297
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63
Code: 98 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2c 1d 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
RSP: 0018:ffffc90000197df0 EFLAGS: 00000242
RAX: 00000000028b17c7 RBX: ffff88801e2ea480 RCX: ffffffff8b8e5c75
RDX: 0000000000000000 RSI: ffffffff8de6cf89 RDI: ffffffff8c1adf20
RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795
R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003c5d490
R13: 0000000000000001 R14: ffffffff90d92f10 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000018000 CR3: 000000003159b000 CR4: 00000000003526f0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:73 [inline]
default_idle+0x9/0x10 arch/x86/kernel/process.c:767
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:191 [inline]
do_idle+0x35b/0x4b0 kernel/sched/idle.c:332
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430
start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
common_startup_64+0x13e/0x148
net_ratelimit: 24852 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)