bridge0: received packet on veth1_to_bridge with own address as source address (addr:6a:ce:be:f5:0e:69, vlan:0) bridge0: received packet on  with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:6a:ce:be:f5:0e:69, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5621/1:b..l P15985/1:b..l rcu: (detected by 1, t=10568 jiffies, g=65101, q=1681 ncpus=2) task:syz.3.2552 state:R running task stack:22488 pid:15985 tgid:15982 ppid:5620 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7606 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x910 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x232/0x350 kernel/locking/lockdep.c:5947 Code: ff ff ff e8 b0 9d 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 18 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 92 d9 RSP: 0018:ffffc90003955f08 EFLAGS: 00000282 RAX: 3489132a7d14dc00 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 0000000019077c09 RSI: ffffffff8e688ec6 RDI: ffffffff8c6dad80 RBP: ffff888078950000 R08: ffffffff8177f1df R09: 0000000000000000 R10: ffffc90003956098 R11: fffff5200072ac15 R12: ffffffff8ed5c8a0 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:309 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] class_rcu_constructor include/linux/rcupdate.h:1216 [inline] unwind_next_frame+0xac/0x2550 arch/x86/kernel/unwind_orc.c:495 __unwind_start+0x514/0x660 arch/x86/kernel/unwind_orc.c:787 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe3/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:183 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:338 reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] __free_frozen_pages+0xc93/0xd90 mm/page_alloc.c:2962 __slab_free+0x274/0x2c0 mm/slub.c:5823 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:361 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4683 [inline] slab_alloc_node mm/slub.c:4996 [inline] kmem_cache_alloc_noprof+0x2b9/0x600 mm/slub.c:5010 __kernfs_new_node+0xe6/0x980 fs/kernfs/dir.c:665 kernfs_new_node+0xea/0x140 fs/kernfs/dir.c:751 __kernfs_create_file+0x4b/0x2e0 fs/kernfs/file.c:1050 sysfs_add_file_mode_ns+0x237/0x300 fs/sysfs/file.c:316 create_files fs/sysfs/group.c:82 [inline] internal_create_group+0x679/0x1180 fs/sysfs/group.c:189 internal_create_groups fs/sysfs/group.c:229 [inline] sysfs_create_groups+0x59/0x120 fs/sysfs/group.c:255 device_add_groups drivers/base/core.c:2911 [inline] device_add_attrs+0xde/0x600 drivers/base/core.c:2975 device_add+0x488/0xb80 drivers/base/core.c:3715 netdev_register_kobject+0x197/0x350 net/core/net-sysfs.c:2354 register_netdevice+0x1433/0x1eb0 net/core/dev.c:11582 vxlan_dev_create drivers/net/vxlan/vxlan_core.c:4120 [inline] vxlan_newlink+0x3c7/0x8b0 drivers/net/vxlan/vxlan_core.c:4561 rtnl_newlink_create+0x305/0x7b0 net/core/rtnetlink.c:3996 __rtnl_newlink net/core/rtnetlink.c:4125 [inline] rtnl_newlink+0x167a/0x1c30 net/core/rtnetlink.c:4242 rtnetlink_rcv_msg+0x802/0xc00 net/core/rtnetlink.c:7159 netlink_rcv_skb+0x226/0x4a0 net/netlink/af_netlink.c:2572 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0x7bd/0x940 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1916 sock_sendmsg_nosec+0x14e/0x190 net/socket.c:800 __sock_sendmsg net/socket.c:818 [inline] ____sys_sendmsg+0x54e/0x850 net/socket.c:2715 ___sys_sendmsg+0x2a5/0x360 net/socket.c:2769 __sys_sendmmsg+0x273/0x4d0 net/socket.c:2858 __do_sys_sendmmsg net/socket.c:2885 [inline] __se_sys_sendmmsg net/socket.c:2882 [inline] __x64_sys_sendmmsg+0xa0/0xc0 net/socket.c:2882 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f1e0d59e199 RSP: 002b:00007f1e0e51f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f1e0d826090 RCX: 00007f1e0d59e199 RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 RBP: 00007f1e0d6350b8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1e0d826128 R14: 00007f1e0d826090 R15: 00007ffdbe2ed5a8 task:syz-executor state:R running task stack:21288 pid:5621 tgid:5621 ppid:1 task_flags:0x40054c flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 preempt_schedule_common+0x7f/0xd0 kernel/sched/core.c:7463 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:201 [inline] _raw_spin_unlock+0x41/0x50 kernel/locking/spinlock.c:213 spin_unlock include/linux/spinlock.h:401 [inline] zap_pte_range mm/memory.c:2095 [inline] zap_pmd_range mm/memory.c:2151 [inline] zap_pud_range mm/memory.c:2179 [inline] zap_p4d_range mm/memory.c:2200 [inline] __zap_vma_range+0x40e1/0x4f80 mm/memory.c:2240 unmap_vmas+0x390/0x550 mm/memory.c:2309 exit_mmap+0x293/0x9f0 mm/mmap.c:1315 __mmput+0x118/0x420 kernel/fork.c:1193 exit_mm+0x18e/0x240 kernel/exit.c:592 do_exit+0x6cd/0x2360 kernel/exit.c:974 do_group_exit+0x22d/0x2f0 kernel/exit.c:1129 get_signal+0x121b/0x12c0 kernel/signal.c:3112 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop+0x10e/0x770 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:343 [inline] do_syscall_64+0x328/0x520 arch/x86/entry/syscall_64.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f649695e9ce RSP: 002b:00007fffb5a41c38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 RAX: 0000000000000000 RBX: 000055556e0d2500 RCX: 00007f649695e9ce RDX: 00007fffb5a41c90 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fffb5a41cfc R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000216 R13: 0000000000000020 R14: 0000000000056277 R15: 00007fffb5a41d50 rcu: rcu_preempt kthread starved for 839 jiffies! g65101 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 12994 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Workqueue: krds_cp_wq#1/1 rds_connect_worker RIP: 0010:check_preemption_disabled+0x1a/0xd0 lib/smp_processor_id.c:53 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b 5d ae 07 65 48 8b 0d eb 5c ae 07 85 c9 74 0c 5b <41> 5e 41 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea 65 RSP: 0018:ffffc90000007070 EFLAGS: 00000002 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000101 RDX: 8000000000000100 RSI: ffffffff8e688ec6 RDI: ffffffff8c6dad80 RBP: 00000000ffffffff R08: 0000000000000100 R09: ffffc90000007410 R10: ffffc90000007260 R11: fffff52000000e4e R12: 0000000000000246 R13: ffff888030cd9f40 R14: ffffffff90254aa0 R15: 0000000000000006 FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f279063ca52 CR3: 000000000eb48000 CR4: 00000000003526f0 Call Trace: lockdep_recursion_finish kernel/locking/lockdep.c:470 [inline] lock_is_held_type+0xdf/0x150 kernel/locking/lockdep.c:6017 lock_is_held include/linux/lockdep.h:249 [inline] lockdep_rtnl_is_held+0x1b/0x40 net/core/rtnetlink.c:182 __in6_dev_get include/net/addrconf.h:348 [inline] ip6_ignore_linkdown+0x4f/0x140 include/net/addrconf.h:457 find_match+0x9c/0xb40 net/ipv6/route.c:784 __find_rr_leaf+0x243/0x740 net/ipv6/route.c:873 find_rr_leaf net/ipv6/route.c:894 [inline] rt6_select net/ipv6/route.c:938 [inline] fib6_table_lookup+0x3c6/0xae0 net/ipv6/route.c:2216 ip6_pol_route+0x229/0x14d0 net/ipv6/route.c:2253 pol_lookup_func include/net/ip6_fib.h:672 [inline] __fib6_rule_action net/ipv6/fib6_rules.c:240 [inline] fib6_rule_action+0x9d8/0xc00 net/ipv6/fib6_rules.c:278 fib_rules_lookup+0x770/0xeb0 net/core/fib_rules.c:338 fib6_rule_lookup+0x19b/0x6e0 net/ipv6/fib6_rules.c:115 ip6_route_input_lookup net/ipv6/route.c:2324 [inline] ip6_route_input+0x78d/0xb20 net/ipv6/route.c:2627 ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:325 __netif_receive_skb_one_core net/core/dev.c:6333 [inline] __netif_receive_skb net/core/dev.c:6446 [inline] process_backlog+0x795/0x18b0 net/core/dev.c:6797 __napi_poll+0xaa/0x330 net/core/dev.c:7866 napi_poll net/core/dev.c:7929 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8086 handle_softirqs+0x226/0x860 kernel/softirq.c:645 do_softirq+0x77/0xd0 kernel/softirq.c:546 __local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473 __inet6_bind+0x386/0xf30 net/ipv6/af_inet6.c:419 kernel_bind+0x13e/0x1c0 net/socket.c:3677 rds_tcp_conn_path_connect+0x53b/0x920 net/rds/tcp_connect.c:175 rds_connect_worker+0x1d8/0x290 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245