bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a3:bc:bf:b3:4a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a3:bc:bf:b3:4a, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5830/1:b..l rcu: (detected by 1, t=10503 jiffies, g=6397, q=1775 ncpus=2) task:syz-executor state:R running task stack:21728 pid:5830 tgid:5830 ppid:5825 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe5a/0x5ae0 kernel/sched/core.c:6756 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7078 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__reset_page_owner+0x68/0x400 mm/page_owner.c:295 Code: 00 00 48 89 c3 e8 18 58 94 ff 48 03 1d a1 9c 40 0c 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 09 03 00 00 8b 43 08 bf 00 28 00 00 41 bd RSP: 0018:ffffc90002e7f500 EFLAGS: 00000a06 RAX: 0000000000000000 RBX: ffff88801e1be908 RCX: ffffffff81fb7724 RDX: 1ffff11003c37d22 RSI: ffffffff81f94b38 RDI: ffff88801e1be910 RBP: 0000000000000003 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_unref_page+0x661/0x1080 mm/page_alloc.c:2657 __put_partials+0x14c/0x170 mm/slub.c:3145 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4085 [inline] slab_alloc_node mm/slub.c:4134 [inline] kmem_cache_alloc_noprof+0x121/0x2f0 mm/slub.c:4141 ptlock_alloc+0x1f/0x70 mm/memory.c:6918 ptlock_init include/linux/mm.h:2970 [inline] pagetable_pte_ctor include/linux/mm.h:2997 [inline] __pte_alloc_one_noprof include/asm-generic/pgalloc.h:73 [inline] pte_alloc_one+0x74/0x390 arch/x86/mm/pgtable.c:33 __pte_alloc+0x6e/0x3b0 mm/memory.c:448 copy_pte_range mm/memory.c:1108 [inline] copy_pmd_range mm/memory.c:1255 [inline] copy_pud_range mm/memory.c:1292 [inline] copy_p4d_range mm/memory.c:1316 [inline] copy_page_range+0x1725/0x5000 mm/memory.c:1414 dup_mmap kernel/fork.c:746 [inline] dup_mm kernel/fork.c:1675 [inline] copy_mm kernel/fork.c:1724 [inline] copy_process+0x8208/0x8cb0 kernel/fork.c:2375 kernel_clone+0xfd/0x960 kernel/fork.c:2787 __do_sys_clone+0xba/0x100 kernel/fork.c:2930 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1f8d575093 RSP: 002b:00007ffd70effcf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f8d575093 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 000055555b5087d0 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000f657 R14: 000000000000f602 R15: 00007ffd70effe80 rcu: rcu_preempt kthread starved for 1215 jiffies! g6397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27776 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0xe5a/0x5ae0 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0xe7/0x350 kernel/sched/core.c:6848 schedule_timeout+0x124/0x280 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1eb/0xb00 kernel/rcu/tree.c:2045 rcu_gp_kthread+0x271/0x380 kernel/rcu/tree.c:2247 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 RIP: 0010:__read_once_word_nocheck+0x0/0x10 include/asm-generic/rwonce.h:67 Code: 66 f9 ff ff e8 51 2e b2 00 e9 1f f9 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 c3 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 RSP: 0018:ffffc90000156d50 EFLAGS: 00000202 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc90000158000 RDX: ffffc90000157801 RSI: ffffc90000157810 RDI: ffffc90000157810 RBP: ffffc90000156e10 R08: ffffc90000156dfc R09: ffffffff918e71ac R10: ffffc90000156dc8 R11: 000000000008f188 R12: ffffc90000156e18 R13: ffffc90000156dc8 R14: ffffc90000157818 R15: ffffc90000157810 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f688ab9fd58 CR3: 0000000033450000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: deref_stack_reg arch/x86/kernel/unwind_orc.c:406 [inline] unwind_next_frame+0xadb/0x20c0 arch/x86/kernel/unwind_orc.c:585 arch_stack_walk+0x95/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:247 [inline] slab_post_alloc_hook mm/slub.c:4085 [inline] slab_alloc_node mm/slub.c:4134 [inline] kmem_cache_alloc_noprof+0x121/0x2f0 mm/slub.c:4141 skb_clone+0x190/0x3f0 net/core/skbuff.c:2084 deliver_clone+0x3f/0xa0 net/bridge/br_forward.c:125 maybe_deliver+0xa7/0x120 net/bridge/br_forward.c:190 br_flood+0x17e/0x5c0 net/bridge/br_forward.c:236 br_handle_frame_finish+0xda5/0x1c80 net/bridge/br_input.c:215 br_nf_hook_thresh+0x303/0x410 net/bridge/br_netfilter_hooks.c:1195 br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x3ce/0x8c0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:533 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9eb/0x1490 net/bridge/br_input.c:424 __netif_receive_skb_core.constprop.0+0xa3d/0x4330 net/core/dev.c:5564 __netif_receive_skb_one_core+0xb1/0x1e0 net/core/dev.c:5668 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5783 process_backlog+0x443/0x15f0 net/core/dev.c:6115 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6779 napi_poll net/core/dev.c:6848 [inline] net_rx_action+0xa92/0x1010 net/core/dev.c:6970 handle_softirqs+0x213/0x8f0 kernel/softirq.c:554 run_ksoftirqd kernel/softirq.c:943 [inline] run_ksoftirqd+0x3a/0x60 kernel/softirq.c:935 smpboot_thread_fn+0x661/0xa30 kernel/smpboot.c:164 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 25068 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a3:bc:bf:b3:4a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a3:bc:bf:b3:4a, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a3:bc:bf:b3:4a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 28043 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a3:bc:bf:b3:4a, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)