bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15586/1:b..l rcu: (detected by 1, t=10503 jiffies, g=58961, q=306 ncpus=2) task:syz-executor state:R running task stack:23600 pid:15586 tgid:15586 ppid:15579 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0xe55/0x5740 kernel/sched/core.c:6690 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7012 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline] RIP: 0010:__unwind_start+0x2ea/0x7f0 arch/x86/kernel/unwind_orc.c:713 Code: 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 01 03 00 00 41 c7 06 00 00 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc <65> 48 8b 05 3e 6a c6 7e 48 39 c5 0f 84 72 02 00 00 48 8d bd 98 18 RSP: 0018:ffffc9000b346b08 EFLAGS: 00000246 RAX: ffff888028492440 RBX: ffffc9000b346be8 RCX: 0000000000000000 RDX: 1ffff92001668d70 RSI: 0000000000000000 RDI: ffffc9000b346bb8 RBP: ffff888028492440 R08: 0000000000000001 R09: 0000000000000000 R10: ffffc9000b346b58 R11: 0000000000000000 R12: 0000000000000000 R13: ffffc9000b346c18 R14: ffffc9000b346b58 R15: ffffc9000b346b80 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0x74/0x100 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 save_stack+0x162/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x8d/0x400 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1108 [inline] free_unref_page+0x5f4/0xdc0 mm/page_alloc.c:2638 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x192/0x1e0 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:385 kasan_kmalloc include/linux/kasan.h:257 [inline] __do_kmalloc_node mm/slub.c:4264 [inline] __kmalloc_noprof+0x1e8/0x400 mm/slub.c:4276 kmalloc_noprof include/linux/slab.h:882 [inline] kzalloc_noprof include/linux/slab.h:1014 [inline] __register_sysctl_table+0xb4/0x1910 fs/proc/proc_sysctl.c:1368 __devinet_sysctl_register+0x1b5/0x360 net/ipv4/devinet.c:2610 devinet_sysctl_register net/ipv4/devinet.c:2650 [inline] devinet_sysctl_register+0x17b/0x200 net/ipv4/devinet.c:2640 inetdev_event+0x15d9/0x1830 net/ipv4/devinet.c:1652 notifier_call_chain+0xb9/0x410 kernel/notifier.c:93 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1996 call_netdevice_notifiers_extack net/core/dev.c:2034 [inline] call_netdevice_notifiers net/core/dev.c:2048 [inline] dev_change_name+0x5ab/0x920 net/core/dev.c:1268 do_setlink+0x312f/0x41c0 net/core/rtnetlink.c:2909 __rtnl_newlink+0xc35/0x1920 net/core/rtnetlink.c:3725 rtnl_newlink+0x67/0xa0 net/core/rtnetlink.c:3772 rtnetlink_rcv_msg+0x3c7/0xea0 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2551 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg net/socket.c:744 [inline] __sys_sendto+0x479/0x4d0 net/socket.c:2214 __do_sys_sendto net/socket.c:2226 [inline] __se_sys_sendto net/socket.c:2222 [inline] __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2222 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbc901805ac RSP: 002b:00007ffc67cf51f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fbc90e635c0 RCX: 00007fbc901805ac RDX: 0000000000000030 RSI: 00007fbc90e63610 RDI: 0000000000000006 RBP: 0000000000000000 R08: 00007ffc67cf5244 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 R13: 0000000000000000 R14: 00007fbc90e63610 R15: 0000000000000000 rcu: rcu_preempt kthread starved for 10459 jiffies! g58961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27264 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5328 [inline] __schedule+0xe55/0x5740 kernel/sched/core.c:6690 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6782 schedule_timeout+0x136/0x2a0 kernel/time/timer.c:2615 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:sk_skb_reason_drop+0x136/0x1a0 net/core/skbuff.c:1243 Code: 00 48 83 bb d0 00 00 00 00 74 12 e8 24 d3 97 f8 be 02 00 00 00 48 89 df e8 f7 3f ff ff e8 12 d3 97 f8 48 89 df e8 fa 0c fe ff <5b> 5d 41 5c 41 5d 41 5e e9 fd d2 97 f8 e8 f8 d2 97 f8 44 89 e5 bf RSP: 0018:ffffc90000156708 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff8881689c03c0 RCX: 1ffffffff20be2d9 RDX: ffff88801d2e8000 RSI: ffffffff88f5a846 RDI: ffffffff8bd1b2c0 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 R10: ffffffff905f590f R11: 0000000000000052 R12: 0000000000000001 R13: ffff888057a64000 R14: ffff8881689c04a4 R15: ffff88802ddf9d80 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020032000 CR3: 000000000df7c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: packet_rcv+0x16c/0x15a0 net/packet/af_packet.c:2290 dev_queue_xmit_nit+0x846/0xba0 net/core/dev.c:2347 xmit_one net/core/dev.c:3584 [inline] dev_hard_start_xmit+0x56/0x790 net/core/dev.c:3604 __dev_queue_xmit+0x7c7/0x4350 net/core/dev.c:4432 dev_queue_xmit include/linux/netdevice.h:3094 [inline] br_dev_queue_push_xmit+0x274/0x880 net/bridge/br_forward.c:53 br_nf_dev_queue_xmit+0x6db/0x2a10 net/bridge/br_netfilter_hooks.c:948 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] br_nf_post_routing+0x8ee/0x11b0 net/bridge/br_netfilter_hooks.c:994 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626 nf_hook+0x474/0x7d0 include/linux/netfilter.h:269 NF_HOOK include/linux/netfilter.h:312 [inline] br_forward_finish+0xcd/0x130 net/bridge/br_forward.c:66 br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1195 br_nf_forward_finish+0x66a/0xba0 net/bridge/br_netfilter_hooks.c:690 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] br_nf_forward_ip.part.0+0x610/0x820 net/bridge/br_netfilter_hooks.c:744 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:704 [inline] br_nf_forward+0xf11/0x1bd0 net/bridge/br_netfilter_hooks.c:801 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626 nf_hook+0x474/0x7d0 include/linux/netfilter.h:269 NF_HOOK include/linux/netfilter.h:312 [inline] __br_forward+0x1be/0x5b0 net/bridge/br_forward.c:115 deliver_clone+0x5b/0xa0 net/bridge/br_forward.c:131 br_flood+0x493/0x5c0 net/bridge/br_forward.c:245 br_handle_frame_finish+0xda5/0x1c80 net/bridge/br_input.c:215 br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1195 br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x3ce/0x8c0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:533 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9eb/0x1490 net/bridge/br_input.c:424 __netif_receive_skb_core.constprop.0+0xa3d/0x4330 net/core/dev.c:5564 __netif_receive_skb_one_core+0xb1/0x1e0 net/core/dev.c:5668 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5783 process_backlog+0x443/0x15f0 net/core/dev.c:6115 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6779 napi_poll net/core/dev.c:6848 [inline] net_rx_action+0xa92/0x1010 net/core/dev.c:6970 handle_softirqs+0x213/0x8f0 kernel/softirq.c:554 run_ksoftirqd kernel/softirq.c:927 [inline] run_ksoftirqd+0x3a/0x60 kernel/softirq.c:919 smpboot_thread_fn+0x661/0xa30 kernel/smpboot.c:164 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 30132 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:b1:d7:f9:91:53, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:b1:d7:f9:91:53, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:b1:d7:f9:91:53, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 26949 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:b1:d7:f9:91:53, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:b1:d7:f9:91:53, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)