bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5735/2:b..l rcu: (detected by 0, t=10504 jiffies, g=67041, q=2169 ncpus=2) task:kworker/1:4 state:R running task stack:23216 pid:5735 tgid:5735 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: mld mld_ifc_work Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7413 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:914 [inline] __dev_queue_xmit+0x1ed7/0x37f0 net/core/dev.c:4907 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x337/0x540 net/ipv6/ip6_output.c:246 dst_output include/net/dst.h:471 [inline] NF_HOOK+0x177/0x4f0 include/linux/netfilter.h:318 mld_sendpack+0x890/0xe10 net/ipv6/mcast.c:1853 mld_send_cr net/ipv6/mcast.c:2154 [inline] mld_ifc_work+0x839/0xe70 net/ipv6/mcast.c:2694 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread starved for 5257 jiffies! g67041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 10426 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: krds_cp_wq#9/4 rds_connect_worker RIP: 0010:__this_cpu_preempt_check+0x0/0x20 lib/smp_processor_id.c:63 Code: bb 4b 8c e8 32 5c 5a f5 e8 7d 70 65 f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 80 ba 4b 8c e9 fd fe ff ff cc cc cc RSP: 0018:ffffc90000a07818 EFLAGS: 00000092 RAX: 0000000000000001 RBX: 0000000000000000 RCX: bc101d9a73125dae RDX: 00000000eeedd0fa RSI: 000000009dc59b3c RDI: ffffffff8e4ab7bc RBP: ffffffff81b32046 R08: ffffffff81b32046 R09: 0000000000080000 R10: 0000000000000000 R11: ffff8880b87281d8 R12: 0000000000000000 R13: ffff8880b87281d8 R14: 0000000000000001 R15: 0000000000000046 FS: 0000000000000000(0000) GS:ffff888125060000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055556ecec4e8 CR3: 00000000593d0000 CR4: 00000000003526f0 Call Trace: lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline] lock_acquire+0x116/0x350 kernel/locking/lockdep.c:5870 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock_irq+0x3d/0x50 kernel/locking/spinlock.c:174 __run_hrtimer kernel/time/hrtimer.c:2036 [inline] __hrtimer_run_queues+0x466/0xa10 kernel/time/hrtimer.c:2096 hrtimer_interrupt+0x448/0x910 kernel/time/hrtimer.c:2215 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:trace_lock_release include/trace/events/lock.h:68 [inline] RIP: 0010:lock_release+0x44/0x3c0 kernel/locking/lockdep.c:5879 Code: 8b 05 80 9c c9 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 83 9c c9 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 2c e2 b4 0e <73> 0d e8 25 f9 08 00 84 c0 0f 84 94 02 00 00 83 3d 26 15 b5 0e 00 RSP: 0018:ffffc90000a07bb8 EFLAGS: 00000297 RAX: 0000000000000001 RBX: ffffc90000a07cd8 RCX: 0000000080000102 RDX: ffffc90000a07d01 RSI: ffffffff8177021f RDI: ffffffff8eb59c20 RBP: 1ffffffff21dfc01 R08: ffffc9000fc1fe70 R09: 0000000000000000 R10: ffffc90000a07d18 R11: fffff52000140fa5 R12: ffffc9000fc18000 R13: ffffffff8177021f R14: ffffffff8eb59c20 R15: ffffc9000fc1fe80 rcu_lock_release include/linux/rcupdate.h:310 [inline] rcu_read_unlock include/linux/rcupdate.h:871 [inline] class_rcu_destructor include/linux/rcupdate.h:1183 [inline] unwind_next_frame+0x1baa/0x2550 arch/x86/kernel/unwind_orc.c:709 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4612 [inline] slab_alloc_node mm/slub.c:4945 [inline] kmem_cache_alloc_noprof+0x2a0/0x5f0 mm/slub.c:4959 skb_ext_maybe_cow net/core/skbuff.c:7112 [inline] skb_ext_add+0x1b6/0x8e0 net/core/skbuff.c:7187 nf_bridge_unshare net/bridge/br_netfilter_hooks.c:170 [inline] br_nf_forward_ip+0xc3/0xa30 net/bridge/br_netfilter_hooks.c:686 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:273 [inline] NF_HOOK+0x23e/0x3f0 include/linux/netfilter.h:316 __br_forward+0x397/0x540 net/bridge/br_forward.c:115 deliver_clone net/bridge/br_forward.c:131 [inline] maybe_deliver net/bridge/br_forward.c:191 [inline] br_flood+0x3e6/0x8d0 net/bridge/br_forward.c:245 br_handle_frame_finish+0x1175/0x1990 net/bridge/br_input.c:229 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x127f/0x1510 net/bridge/br_input.c:442 __netif_receive_skb_core+0x989/0x30b0 net/core/dev.c:6093 __netif_receive_skb_one_core net/core/dev.c:6204 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x706/0x1860 net/core/dev.c:6670 __napi_poll+0xaa/0x330 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7949 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 lock_sock include/net/sock.h:1713 [inline] __inet6_bind+0x301/0xf30 net/ipv6/af_inet6.c:292 kernel_bind+0x13e/0x1c0 net/socket.c:3646 rds_tcp_conn_path_connect+0x53b/0x920 net/rds/tcp_connect.c:175 rds_connect_worker+0x1d8/0x290 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 18227 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:45:07:9d:3f:5a, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 20563 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)