bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5128/1:b..l rcu: (detected by 0, t=10503 jiffies, g=39445, q=511 ncpus=2) task:klogd state:R running task stack:24232 pid:5128 ppid:1 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5380 [inline] __schedule+0x14d2/0x44d0 kernel/sched/core.c:6699 preempt_schedule_irq+0xb5/0x140 kernel/sched/core.c:7009 irqentry_exit+0x67/0x70 kernel/entry/common.c:438 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:page_ext_data include/linux/page_ext.h:87 [inline] RIP: 0010:get_page_owner mm/page_owner.c:107 [inline] RIP: 0010:__reset_page_owner+0xbc/0x190 mm/page_owner.c:152 Code: 8c 00 00 00 e8 a5 6e 9f ff 41 83 ee 01 0f 82 ba 00 00 00 e8 96 6e 9f ff 4c 89 ff be 08 00 00 00 e8 59 de f6 ff 49 0f ba 37 01 <4c> 8b 2d 5d 27 fe 0a 4b 8d 7c 2f 0c 48 89 f8 48 c1 e8 03 42 0f b6 RSP: 0018:ffffc90003277540 EFLAGS: 00000257 RAX: ffffffff81e62201 RBX: 1ffffffff2de0b30 RCX: ffffffff81e62237 RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801b5bbb08 RBP: 0000000000000003 R08: ffff88801b5bbb0f R09: 1ffff110036b7761 R10: dffffc0000000000 R11: ffffed10036b7762 R12: dffffc0000000000 R13: ffff88801b5bbae0 R14: 0000000000000006 R15: ffff88801b5bbb08 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1154 [inline] free_unref_page_prepare+0x7ce/0x8e0 mm/page_alloc.c:2336 free_unref_page+0x32/0x2e0 mm/page_alloc.c:2429 discard_slab mm/slub.c:2127 [inline] __unfreeze_partials+0x1cf/0x210 mm/slub.c:2667 put_cpu_partial+0x17c/0x250 mm/slub.c:2743 __slab_free+0x31d/0x410 mm/slub.c:3700 qlink_free mm/kasan/quarantine.c:166 [inline] qlist_free_all+0x75/0xe0 mm/kasan/quarantine.c:185 kasan_quarantine_reduce+0x143/0x160 mm/kasan/quarantine.c:292 ____kasan_kmalloc mm/kasan/common.c:340 [inline] __kasan_kmalloc+0x22/0xa0 mm/kasan/common.c:383 kasan_kmalloc include/linux/kasan.h:198 [inline] __do_kmalloc_node mm/slab_common.c:1007 [inline] __kmalloc_node_track_caller+0xb2/0x230 mm/slab_common.c:1027 kmalloc_reserve+0x116/0x240 net/core/skbuff.c:584 __alloc_skb+0x138/0x2c0 net/core/skbuff.c:653 alloc_skb include/linux/skbuff.h:1284 [inline] alloc_skb_with_frags+0xca/0x7c0 net/core/skbuff.c:6332 sock_alloc_send_pskb+0x857/0x990 net/core/sock.c:2821 unix_dgram_sendmsg+0x5a1/0x1720 net/unix/af_unix.c:2001 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x46a/0x620 net/socket.c:2201 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0xde/0xf0 net/socket.c:2209 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7f97213a3407 RSP: 002b:00007ffdd850b4c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f9721253c80 RCX: 00007f97213a3407 RDX: 00000000000000a0 RSI: 00007ffdd850b600 RDI: 0000000000000003 RBP: 00007ffdd850ba30 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffdd850ba48 R13: 00007ffdd850b600 R14: 0000000000000085 R15: 00007ffdd850b600 rcu: rcu_preempt kthread starved for 224 jiffies! g39445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:25976 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5380 [inline] __schedule+0x14d2/0x44d0 kernel/sched/core.c:6699 schedule+0xbd/0x170 kernel/sched/core.c:6773 schedule_timeout+0x160/0x280 kernel/time/timer.c:2168 rcu_gp_fqs_loop+0x302/0x1560 kernel/rcu/tree.c:1667 rcu_gp_kthread+0x99/0x380 kernel/rcu/tree.c:1866 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 8878 Comm: syz.9.883 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:32 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:89 [inline] RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:107 [inline] RIP: 0010:__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] RIP: 0010:_raw_spin_lock_irqsave+0x6f/0xf0 kernel/locking/spinlock.c:162 Code: 49 c1 ef 03 48 b8 f1 f1 f1 f1 00 f3 f3 f3 49 bc 00 00 00 00 00 fc ff df 4b 89 04 27 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 <4c> 8b 74 24 20 fa 41 f7 c6 00 02 00 00 74 05 e8 bd dc 1a f7 bf 01 RSP: 0018:ffffc900001efda0 EFLAGS: 00000806 RAX: f3f3f300f1f1f1f1 RBX: ffffffff97150fa0 RCX: 000000000001d878 RDX: 0000000000000003 RSI: ffffffff8aaace60 RDI: ffffffff97150fa0 RBP: ffffc900001efe38 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 R10: dffffc0000000000 R11: fffffbfff1c94426 R12: dffffc0000000000 R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff9200003dfb4 FS: 00007fafb266c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe92c86c58 CR3: 000000006b111000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: debug_object_activate+0x6c/0x4b0 lib/debugobjects.c:709 debug_hrtimer_activate kernel/time/hrtimer.c:450 [inline] debug_activate kernel/time/hrtimer.c:505 [inline] enqueue_hrtimer+0x30/0x370 kernel/time/hrtimer.c:1108 __run_hrtimer kernel/time/hrtimer.c:1767 [inline] __hrtimer_run_queues+0x637/0xc40 kernel/time/hrtimer.c:1814 hrtimer_interrupt+0x3c9/0x9c0 kernel/time/hrtimer.c:1876 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1077 [inline] __sysvec_apic_timer_interrupt+0xfb/0x3b0 arch/x86/kernel/apic/apic.c:1094 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0x51/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 kernel/kcov.c:212 Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 9c 92 c4 0c 48 89 de 5b e9 43 9d 56 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d f0 24 7e 7e 65 8b 15 f1 24 7e RSP: 0018:ffffc900001f0258 EFLAGS: 00000246 RAX: ffffffff89262b5d RBX: 0000000000000100 RCX: 0000000000000100 RDX: ffff88805fa68000 RSI: 0000000000000100 RDI: 0000000000000100 RBP: ffffc900001f03b8 R08: ffffc900001f04e0 R09: ffffc900001f04f0 R10: ffffc900001f0340 R11: fffff5200003e06a R12: 0000000000000100 R13: dffffc0000000000 R14: ffff88801d71a000 R15: ffffc900001f04b8 __find_rr_leaf+0x14b/0x6c0 net/ipv6/route.c:839 find_rr_leaf net/ipv6/route.c:891 [inline] rt6_select net/ipv6/route.c:935 [inline] fib6_table_lookup+0x3a0/0xa70 net/ipv6/route.c:2221 ip6_pol_route+0x22d/0x1160 net/ipv6/route.c:2257 pol_lookup_func include/net/ip6_fib.h:578 [inline] fib6_rule_lookup+0x1d7/0x510 net/ipv6/fib6_rules.c:116 ip6_route_input_lookup net/ipv6/route.c:2326 [inline] ip6_route_input+0x6cf/0xa50 net/ipv6/route.c:2622 ip6_rcv_finish+0x143/0x230 net/ipv6/ip6_input.c:77 NF_HOOK+0x303/0x390 include/linux/netfilter.h:304 __netif_receive_skb_one_core net/core/dev.c:5608 [inline] __netif_receive_skb+0xcc/0x290 net/core/dev.c:5722 process_backlog+0x380/0x6e0 net/core/dev.c:6050 __napi_poll+0xc0/0x460 net/core/dev.c:6612 napi_poll net/core/dev.c:6679 [inline] net_rx_action+0x5ea/0xbf0 net/core/dev.c:6815 handle_softirqs+0x280/0x820 kernel/softirq.c:578 __do_softirq kernel/softirq.c:612 [inline] invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xc7/0x190 kernel/softirq.c:661 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1088 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1088 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:687 RIP: 0010:check_kcov_mode kernel/kcov.c:184 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60 kernel/kcov.c:216 Code: 04 24 65 48 8b 0d f0 24 7e 7e 65 8b 15 f1 24 7e 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 RSP: 0018:ffffc90005297630 EFLAGS: 00000246 RAX: ffffffff813ac02f RBX: ffffc90005290001 RCX: ffff88805fa68000 RDX: 0000000000000000 RSI: ffffc90005297b80 RDI: ffffc90005297c80 RBP: ffffc90005297b80 R08: ffff88805fa68000 R09: 0000000000000003 R10: 0000000000000004 R11: 0000000000000002 R12: ffffc90005297708 R13: dffffc0000000000 R14: ffffc90005297c80 R15: ffffc90005297718 unwind_next_frame+0x1cef/0x2970 arch/x86/kernel/unwind_orc.c:665 arch_stack_walk+0x144/0x190 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf7/0x1f0 mm/page_owner.c:128 __set_page_owner+0x1d/0x60 mm/page_owner.c:192 set_page_owner include/linux/page_owner.h:31 [inline] post_alloc_hook+0x1cd/0x210 mm/page_alloc.c:1554 prep_new_page mm/page_alloc.c:1561 [inline] get_page_from_freelist+0x195c/0x19f0 mm/page_alloc.c:3191 __alloc_pages+0x1e3/0x460 mm/page_alloc.c:4457 __alloc_pages_node include/linux/gfp.h:237 [inline] alloc_pages_node include/linux/gfp.h:260 [inline] bpf_ringbuf_area_alloc kernel/bpf/ringbuf.c:124 [inline] bpf_ringbuf_alloc+0x251/0x560 kernel/bpf/ringbuf.c:172 ringbuf_map_alloc+0x1c3/0x2f0 kernel/bpf/ringbuf.c:207 map_create+0x877/0x12f0 kernel/bpf/syscall.c:1247 __sys_bpf+0x5f0/0x800 kernel/bpf/syscall.c:5455 __do_sys_bpf kernel/bpf/syscall.c:5577 [inline] __se_sys_bpf kernel/bpf/syscall.c:5575 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5575 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fafb178f749 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fafb266c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 RAX: ffffffffffffffda RBX: 00007fafb19e5fa0 RCX: 00007fafb178f749 RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 RBP: 00007fafb1813f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fafb19e6038 R14: 00007fafb19e5fa0 R15: 00007ffe754590f8 net_ratelimit: 4133 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:db:d0:22:6f:b9, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:db:d0:22:6f:b9, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:db:d0:22:6f:b9, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:db:d0:22:6f:b9, vlan:0) net_ratelimit: 13297 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:db:d0:22:6f:b9, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)