bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16348/1:b..l
rcu: (detected by 0, t=10503 jiffies, g=51261, q=258 ncpus=2)
task:syz.4.2625 state:R running task stack:22648 pid:16348 tgid:16347 ppid:5826 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:kasan_check_range+0x1b8/0x290 mm/kasan/generic.c:189
Code: 4d 01 fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b <41> 5c 41 5e 41 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00
RSP: 0018:ffffc9000538e4d8 EFLAGS: 00000256
RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff817aac24
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901945f0
RBP: 0000000000000000 R08: ffffffff901945f7 R09: 1ffffffff20328be
R10: dffffc0000000000 R11: fffffbfff20328bf R12: 1ffff92000a71ca8
R13: dffffc0000000000 R14: dffffc0000000001 R15: fffffbfff20328bf
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
cpumask_test_cpu include/linux/cpumask.h:570 [inline]
cpu_online include/linux/cpumask.h:1117 [inline]
trace_lock_acquire include/trace/events/lock.h:24 [inline]
lock_acquire+0xd4/0x550 kernel/locking/lockdep.c:5820
rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
rcu_read_lock include/linux/rcupdate.h:849 [inline]
page_ext_get+0x3d/0x2a0 mm/page_ext.c:525
__page_table_check_zero+0xb1/0x350 mm/page_table_check.c:148
page_table_check_free include/linux/page_table_check.h:41 [inline]
free_pages_prepare mm/page_alloc.c:1128 [inline]
free_unref_page+0xe04/0x1130 mm/page_alloc.c:2657
discard_slab mm/slub.c:2673 [inline]
__put_partials+0xeb/0x130 mm/slub.c:3142
put_cpu_partial+0x17c/0x250 mm/slub.c:3217
__slab_free+0x2ea/0x3d0 mm/slub.c:4468
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
__kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:385
kasan_kmalloc include/linux/kasan.h:260 [inline]
__do_kmalloc_node mm/slub.c:4283 [inline]
__kmalloc_noprof+0x285/0x4c0 mm/slub.c:4295
kmalloc_noprof include/linux/slab.h:905 [inline]
kzalloc_noprof include/linux/slab.h:1037 [inline]
kobject_get_path+0xb8/0x230 lib/kobject.c:161
kobject_uevent_env+0x2a5/0x8e0 lib/kobject_uevent.c:545
__kobject_del+0xd3/0x310 lib/kobject.c:601
kobject_cleanup lib/kobject.c:680 [inline]
kobject_release lib/kobject.c:720 [inline]
kref_put include/linux/kref.h:65 [inline]
kobject_put+0x245/0x480 lib/kobject.c:737
net_rx_queue_update_kobjects+0x52b/0x5b0 net/core/net-sysfs.c:1178
remove_queue_kobjects net/core/net-sysfs.c:1953 [inline]
netdev_unregister_kobject+0x104/0x250 net/core/net-sysfs.c:2107
unregister_netdevice_many_notify+0x1859/0x1da0 net/core/dev.c:11562
unregister_netdevice_many net/core/dev.c:11590 [inline]
unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11462
ipip6_newlink+0x6f4/0x940 net/ipv6/sit.c:1594
rtnl_newlink_create+0x2ee/0xa40 net/core/rtnetlink.c:3786
__rtnl_newlink net/core/rtnetlink.c:3896 [inline]
rtnl_newlink+0x1b40/0x20e0 net/core/rtnetlink.c:4009
rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6919
netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2542
netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347
netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891
sock_sendmsg_nosec net/socket.c:711 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:726
____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583
___sys_sendmsg net/socket.c:2637 [inline]
__sys_sendmsg+0x269/0x350 net/socket.c:2669
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f4098f7ff19
RSP: 002b:00007f4099ca7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f4099145fa0 RCX: 00007f4098f7ff19
RDX: 0000000004000040 RSI: 00000000200000c0 RDI: 0000000000000003
RBP: 00007f4098ff3986 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f4099145fa0 R15: 00007fff13f45438
rcu: rcu_preempt kthread starved for 10571 jiffies! g51261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:25848 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 73 Comm: kworker/u8:4 Not tainted 6.13.0-rc1-syzkaller-00170-g896d8946da97 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: bat_events batadv_tt_purge
RIP: 0010:pol_lookup_func include/net/ip6_fib.h:616 [inline]
RIP: 0010:__fib6_rule_action net/ipv6/fib6_rules.c:234 [inline]
RIP: 0010:fib6_rule_action+0x625/0x7c0 net/ipv6/fib6_rules.c:272
Code: 51 cc 19 f7 eb be e8 4a cc 19 f7 41 bc f5 ff ff ff eb cf 4c 89 f7 e8 aa b5 44 fa 84 c0 0f 84 fd 00 00 00 e8 2d cc 19 f7 eb 9a <48> c7 c0 00 d6 74 8a 49 39 c5 0f 85 f4 00 00 00 e8 16 cc 19 f7 48
RSP: 0018:ffffc900000066f0 EFLAGS: 00000287
RAX: ffffffff8a74e9b0 RBX: ffff88801eb98000 RCX: ffffc90000006603
RDX: 0000000000000006 RSI: ffffffff8c0aa880 RDI: ffffffff8c5f63e0
RBP: ffff88805e441e40 R08: ffffffff901945f7 R09: 1ffffffff20328be
R10: dffffc0000000000 R11: fffffbfff20328bf R12: dffffc0000000000
R13: ffffffff8a74d600 R14: ffff88805eb29800 R15: ffff8881bad9d8c0
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3247f6 CR3: 0000000079d7e000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
fib_rules_lookup+0x62c/0xdb0 net/core/fib_rules.c:319
fib6_rule_lookup+0x1fd/0x790 net/ipv6/fib6_rules.c:109
ip6_route_input_lookup net/ipv6/route.c:2300 [inline]
ip6_route_input+0x859/0xd90 net/ipv6/route.c:2596
ip6_rcv_finish+0x144/0x180 net/ipv6/ip6_input.c:77
ip_sabotage_in+0x203/0x290 net/bridge/br_netfilter_hooks.c:1021
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626
nf_hook include/linux/netfilter.h:269 [inline]
NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312
__netif_receive_skb_one_core net/core/dev.c:5672 [inline]
__netif_receive_skb+0x1ea/0x650 net/core/dev.c:5785
netif_receive_skb_internal net/core/dev.c:5871 [inline]
netif_receive_skb+0x1e8/0x890 net/core/dev.c:5930
NF_HOOK+0x9e/0x400 include/linux/netfilter.h:314
br_handle_frame_finish+0x18ed/0x1fe0
br_nf_hook_thresh+0x472/0x590
br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0
NF_HOOK include/linux/netfilter.h:314 [inline]
br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]
br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424
__netif_receive_skb_core+0x14eb/0x4690 net/core/dev.c:5566
__netif_receive_skb_one_core net/core/dev.c:5670 [inline]
__netif_receive_skb+0x12f/0x650 net/core/dev.c:5785
process_backlog+0x662/0x15b0 net/core/dev.c:6117
__napi_poll+0xcb/0x490 net/core/dev.c:6883
napi_poll net/core/dev.c:6952 [inline]
net_rx_action+0x89b/0x1240 net/core/dev.c:7074
handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554
do_softirq+0x11b/0x1e0 kernel/softirq.c:455
__local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:382
spin_unlock_bh include/linux/spinlock.h:396 [inline]
batadv_tt_global_purge net/batman-adv/translation-table.c:2257 [inline]
batadv_tt_purge+0x4dd/0xa40 net/batman-adv/translation-table.c:3510
process_one_work kernel/workqueue.c:3229 [inline]
process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310
worker_thread+0x870/0xd30 kernel/workqueue.c:3391
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
net_ratelimit: 15087 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
net_ratelimit: 19258 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)