bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7668/1:b..l P7090/1:b..l P4330/1:b..l rcu: (detected by 0, t=10502 jiffies, g=38897, q=652 ncpus=1) task:klogd state:R running task stack:0 pid:4330 tgid:4330 ppid:1 task_flags:0x400100 flags:0x00000000 Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5533 [inline] __schedule+0x135c/0x2b00 kernel/sched/core.c:7284 preempt_schedule_common+0xd4/0x190 kernel/sched/core.c:7463 preempt_schedule+0x60/0x78 kernel/sched/core.c:7487 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:211 [inline] _raw_spin_unlock_irqrestore+0x94/0x98 kernel/locking/spinlock.c:221 spin_unlock_irqrestore include/linux/spinlock.h:425 [inline] __wake_up_common_lock+0x5c/0x78 kernel/sched/wait.c:128 __wake_up_sync_key+0x20/0x2c kernel/sched/wait.c:193 sock_def_readable+0x208/0x5d0 net/core/sock.c:3668 unix_dgram_sendmsg+0xbb8/0x1078 net/unix/af_unix.c:2300 sock_sendmsg_nosec net/socket.c:800 [inline] __sock_sendmsg+0xc8/0x17c net/socket.c:815 __sys_sendto+0x250/0x328 net/socket.c:2281 __do_sys_sendto net/socket.c:2288 [inline] __se_sys_sendto net/socket.c:2284 [inline] __arm64_sys_sendto+0xec/0x10c net/socket.c:2284 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 task:kworker/u8:15 state:R running task stack:0 pid:7090 tgid:7090 ppid:2 task_flags:0x4208060 flags:0x00000010 Workqueue: events_power_efficient gc_worker Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5533 [inline] __schedule+0x135c/0x2b00 kernel/sched/core.c:7284 preempt_schedule_irq+0x74/0x174 kernel/sched/core.c:7606 raw_irqentry_exit_cond_resched+0x30/0x40 kernel/entry/common.c:145 irqentry_exit_to_kernel_mode_preempt+0x44/0x54 include/linux/irq-entry-common.h:468 arm64_exit_to_kernel_mode_preempt+0x1c/0x38 arch/arm64/kernel/entry-common.c:107 __el1_irq arch/arm64/kernel/entry-common.c:571 [inline] el1_interrupt+0x4c/0x60 arch/arm64/kernel/entry-common.c:581 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586 el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P) arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P) seqcount_lockdep_reader_access+0xe4/0x104 include/linux/seqlock.h:75 (P) nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:348 [inline] gc_worker+0x2a8/0x144c net/netfilter/nf_conntrack_core.c:1534 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 task:syz-executor state:R running task stack:0 pid:7668 tgid:7668 ppid:1 task_flags:0x40054c flags:0x00000011 Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5533 [inline] __schedule+0x135c/0x2b00 kernel/sched/core.c:7284 preempt_schedule_common+0xd4/0x190 kernel/sched/core.c:7463 preempt_schedule+0x60/0x78 kernel/sched/core.c:7487 __raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline] _raw_spin_unlock+0x74/0x78 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] zap_pte_range mm/memory.c:2095 [inline] zap_pmd_range mm/memory.c:2151 [inline] zap_pud_range mm/memory.c:2179 [inline] zap_p4d_range mm/memory.c:2200 [inline] __zap_vma_range+0x30b8/0x4348 mm/memory.c:2240 unmap_vmas+0x2e0/0x43c mm/memory.c:2309 exit_mmap+0x1e8/0x9bc mm/mmap.c:1315 __mmput+0xe0/0x2e8 kernel/fork.c:1193 mmput+0x70/0xa8 kernel/fork.c:1216 exit_mm+0x13c/0x1f0 kernel/exit.c:592 do_exit+0x524/0x1a74 kernel/exit.c:974 do_group_exit+0x198/0x238 kernel/exit.c:1129 get_signal+0xfb0/0x1094 kernel/signal.c:3112 arch_do_signal_or_restart+0x288/0x444c arch/arm64/kernel/signal.c:1671 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x70/0x17c kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:146 [inline] el0_svc+0x12c/0x1d8 arch/arm64/kernel/entry-common.c:797 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 rcu: rcu_preempt kthread starved for 2119 jiffies! g38897 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:0 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00000010 Call trace: __switch_to+0x2b4/0x6e4 arch/arm64/kernel/process.c:775 (T) context_switch kernel/sched/core.c:5533 [inline] __schedule+0x135c/0x2b00 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x13c/0x20c kernel/sched/core.c:7376 schedule_timeout+0x13c/0x28c kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x260/0xde8 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x148/0x230 kernel/rcu/tree.c:2330 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 2855 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: bat_events batadv_tt_purge pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __lse_atomic_add_return_acquire arch/arm64/include/asm/atomic_lse.h:95 [inline] pc : arch_atomic_add_return_acquire arch/arm64/include/asm/atomic.h:52 [inline] pc : raw_atomic_add_return_acquire include/linux/atomic/atomic-arch-fallback.h:591 [inline] pc : atomic_add_return_acquire include/linux/atomic/atomic-instrumented.h:142 [inline] pc : queued_read_lock include/asm-generic/qrwlock.h:82 [inline] pc : do_raw_read_lock+0x68/0xcc kernel/locking/spinlock_debug.c:162 lr : instrument_atomic_read_write include/linux/instrumented.h:112 [inline] lr : atomic_add_return_acquire include/linux/atomic/atomic-instrumented.h:141 [inline] lr : queued_read_lock include/asm-generic/qrwlock.h:82 [inline] lr : do_raw_read_lock+0x5c/0xcc kernel/locking/spinlock_debug.c:162 sp : ffff80008f7e6d60 x29: ffff80008f7e6d60 x28: ffff0000f1747210 x27: 1fffe0001e2e8e40 x26: ffff0000cb461f00 x25: ffff8000859ceca8 x24: dfff800000000000 x23: 0000000000000002 x22: ffff80008f7e6ea0 x21: ffff0000a3f4ab40 x20: ffff0000cb461f40 x19: ffff0000cb461f40 x18: ffff80011b876000 x17: 0000000000020010 x16: 0038dd8600000000 x15: 0000000000000000 x14: 000000000483cf14 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001968c3e9 x9 : dfff800000000000 x8 : 0000000000000000 x7 : ffff8000859ced68 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080461d7c x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: __lse_atomic_fetch_add_acquire arch/arm64/include/asm/atomic_lse.h:62 [inline] (P) __lse_atomic_add_return_acquire arch/arm64/include/asm/atomic_lse.h:95 [inline] (P) arch_atomic_add_return_acquire arch/arm64/include/asm/atomic.h:52 [inline] (P) raw_atomic_add_return_acquire include/linux/atomic/atomic-arch-fallback.h:591 [inline] (P) atomic_add_return_acquire include/linux/atomic/atomic-instrumented.h:142 [inline] (P) queued_read_lock include/asm-generic/qrwlock.h:82 [inline] (P) do_raw_read_lock+0x68/0xcc kernel/locking/spinlock_debug.c:162 (P) __raw_read_lock_bh include/linux/rwlock_api_smp.h:193 [inline] _raw_read_lock_bh+0x5c/0x6c kernel/locking/spinlock.c:287 ebt_do_table+0xc0/0x1b24 net/bridge/netfilter/ebtables.c:214 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_slow+0xc8/0x224 net/netfilter/core.c:619 nf_hook include/linux/netfilter.h:252 [inline] NF_HOOK+0x1ec/0x394 include/linux/netfilter.h:323 __br_forward+0x2d8/0x43c net/bridge/br_forward.c:115 deliver_clone+0x70/0xcc net/bridge/br_forward.c:131 maybe_deliver+0x98/0x128 net/bridge/br_forward.c:191 br_flood+0x28c/0x5c0 net/bridge/br_forward.c:245 br_handle_frame_finish+0xd78/0x14c4 net/bridge/br_input.c:229 br_nf_hook_thresh+0x344/0x3e8 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x7ac/0xaa4 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:325 [inline] br_nf_pre_routing_ipv6+0x2c4/0x5f8 net/bridge/br_netfilter_ipv6.c:183 br_nf_pre_routing+0x6e0/0x1168 net/bridge/br_netfilter_hooks.c:513 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0xeb0/0x10dc net/bridge/br_input.c:451 __netif_receive_skb_core+0x848/0x2a3c net/core/dev.c:6184 __netif_receive_skb_one_core+0x70/0x110 net/core/dev.c:6295 __netif_receive_skb+0x34/0x128 net/core/dev.c:6410 process_backlog+0x588/0x14e0 net/core/dev.c:6761 __napi_poll+0xb4/0x328 net/core/dev.c:7830 napi_poll net/core/dev.c:7893 [inline] net_rx_action+0x5b0/0xc14 net/core/dev.c:8050 handle_softirqs+0x324/0xcbc kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:83 do_softirq+0x90/0xf8 kernel/softirq.c:546 __local_bh_enable_ip+0x190/0x234 kernel/softirq.c:473 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:237 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:245 spin_unlock_bh include/linux/spinlock.h:407 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2390 [inline] batadv_tt_purge+0x3e4/0x7b4 net/batman-adv/translation-table.c:3754 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 rescuer_thread+0x68c/0xd90 kernel/workqueue.c:3703 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854