bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13337/1:b..l P34/1:b..l P30036/1:b..l P5589/1:b..l rcu: (detected by 1, t=10502 jiffies, g=183461, q=930 ncpus=1) task:crond state:R running task stack:25512 pid:5589 tgid:5589 ppid:1 task_flags:0x400000 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109 irqentry_exit+0x36/0x90 kernel/entry/common.c:307 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x62/0x350 kernel/locking/lockdep.c:5875 Code: ec 37 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 b2 8d 11 0f 0f 82 74 02 00 00 8b 35 7a bf 11 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 ec 37 12 0f 85 c7 02 00 00 48 83 c4 RSP: 0018:ffffc900036c74e8 EFLAGS: 00000206 RAX: 0000000000000046 RBX: ffffffff8e5c4c80 RCX: 000000005db5502a RDX: 0000000000000000 RSI: ffffffff8de07322 RDI: ffffffff8c157960 RBP: 0000000000000002 R08: 6dc5ce739a282624 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock include/linux/rcupdate.h:841 [inline] class_rcu_constructor include/linux/rcupdate.h:1155 [inline] unwind_next_frame+0xd1/0x20a0 arch/x86/kernel/unwind_orc.c:479 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1248 [inline] __free_frozen_pages+0x7fe/0x1180 mm/page_alloc.c:2706 discard_slab mm/slub.c:2717 [inline] __put_partials+0x16d/0x1c0 mm/slub.c:3186 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x8a/0xb0 mm/kasan/common.c:385 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4328 [inline] __kmalloc_noprof+0x223/0x510 mm/slub.c:4340 kmalloc_noprof include/linux/slab.h:909 [inline] tomoyo_realpath_from_path+0xc2/0x6e0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x274/0x460 security/tomoyo/file.c:822 security_inode_getattr+0x116/0x290 security/security.c:2377 vfs_getattr fs/stat.c:259 [inline] vfs_statx_path fs/stat.c:299 [inline] vfs_statx+0x121/0x3e0 fs/stat.c:356 vfs_fstatat+0x7b/0xf0 fs/stat.c:375 __do_sys_newfstatat+0x97/0x120 fs/stat.c:542 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0x490 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8711aa9b0a RSP: 002b:00007fff7f939488 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 00007f8711c59490 RCX: 00007f8711aa9b0a RDX: 00007fff7f9394a8 RSI: 00007f8711c327e8 RDI: 00000000ffffff9c RBP: 00000001000013a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000003c R14: 0000000000000000 R15: 000000000000001d task:kworker/1:6 state:R running task stack:26424 pid:30036 tgid:30036 ppid:2 task_flags:0x4208060 flags:0x00004000 Workqueue: events_power_efficient gc_worker Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109 irqentry_exit+0x36/0x90 kernel/entry/common.c:307 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__seqprop_spinlock_sequence include/linux/seqlock.h:227 [inline] RIP: 0010:nf_conntrack_get_ht include/net/netfilter/nf_conntrack.h:333 [inline] RIP: 0010:gc_worker+0x2d5/0x16e0 net/netfilter/nf_conntrack_core.c:1537 Code: 00 00 48 c7 c7 68 4f aa 90 e8 d7 e3 ee f7 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 75 31 12 f8 58 48 85 db 0f 85 d4 0f 00 00 f6 35 12 f8 8b 1d 70 26 01 07 41 89 dc 31 ff 41 83 e4 01 44 89 RSP: 0018:ffffc9000418fb58 EFLAGS: 00000293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89a93429 RDX: ffff88803dfd9e00 RSI: ffffffff89a93438 RDI: 0000000000000007 RBP: ffffffff9b26258c R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888031400000 R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:kcompactd0 state:R running task stack:27144 pid:34 tgid:34 ppid:2 task_flags:0x210040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109 irqentry_exit+0x36/0x90 kernel/entry/common.c:307 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:map_pte mm/page_vma_mapped.c:37 [inline] RIP: 0010:page_vma_mapped_walk+0xab3/0x3000 mm/page_vma_mapped.c:292 Code: 23 00 00 48 8b 7d 10 4c 8b 44 24 78 4c 89 fa 4c 89 e6 48 8b 8c 24 80 00 00 00 e8 a8 af 00 00 48 89 c5 48 8b 44 24 70 80 38 00 <0f> 85 e8 22 00 00 49 89 6e 30 48 85 ed 0f 84 c0 1a 00 00 e8 95 25 RSP: 0018:ffffc90000aa7058 EFLAGS: 00000246 RAX: fffff52000154e55 RBX: dffffc0000000000 RCX: ffffffff820ce9ec RDX: ffff8880202f9e00 RSI: ffffffff820ce9bb RDI: ffffea0001938e28 RBP: ffff888064e38c88 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806667ce88 R13: dffffc0000000000 R14: ffffc90000aa7278 R15: 00007fdffa391000 try_to_migrate_one+0x446/0x35f0 mm/rmap.c:2328 __rmap_walk_file+0x359/0x620 mm/rmap.c:2907 rmap_walk_file+0x174/0x1f0 mm/rmap.c:2940 rmap_walk mm/rmap.c:2951 [inline] try_to_migrate+0x206/0x690 mm/rmap.c:2623 migrate_folio_unmap mm/migrate.c:1261 [inline] migrate_pages_batch+0x9b2/0x31a0 mm/migrate.c:1807 migrate_pages_sync+0x12d/0x8a0 mm/migrate.c:1930 migrate_pages+0x1b67/0x23b0 mm/migrate.c:2039 compact_zone+0x2023/0x4760 mm/compaction.c:2683 compact_node+0x1a4/0x2d0 mm/compaction.c:2952 kcompactd+0x765/0xeb0 mm/compaction.c:3250 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:kworker/1:0 state:R running task stack:26264 pid:13337 tgid:13337 ppid:2 task_flags:0x4208060 flags:0x00004000 Workqueue: 0x0 (wg-crypt-wg1) Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7109 irqentry_exit+0x36/0x90 kernel/entry/common.c:307 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__orc_find+0x60/0xf0 arch/x86/kernel/unwind_orc.c:100 Code: 89 ff 48 89 fd eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa <48> 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 RSP: 0018:ffffc90003caf540 EFLAGS: 00000202 RAX: ffffffff917b590a RBX: ffffffff90e33c10 RCX: dffffc0000000000 RDX: 0000000000000002 RSI: 0000000000000004 RDI: ffffffff90e33bfc RBP: ffffffff90e33bfc R08: ffffffff917b594c R09: 0000000000000000 R10: 0000000000000000 R11: 000000000003d5c1 R12: ffffffff90e33c0c R13: ffffffff84d5c14b R14: ffffffff90e33bfc R15: ffffffff90e33bfc orc_find arch/x86/kernel/unwind_orc.c:227 [inline] unwind_next_frame+0x2ec/0x20a0 arch/x86/kernel/unwind_orc.c:494 arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 save_stack+0x160/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x84/0x1a0 mm/page_owner.c:308 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1248 [inline] __free_frozen_pages+0x7fe/0x1180 mm/page_alloc.c:2706 discard_slab mm/slub.c:2717 [inline] __put_partials+0x16d/0x1c0 mm/slub.c:3186 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4d/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4148 [inline] slab_alloc_node mm/slub.c:4197 [inline] __do_kmalloc_node mm/slub.c:4327 [inline] __kmalloc_node_track_caller_noprof+0x1d3/0x510 mm/slub.c:4347 kvasprintf+0xbc/0x160 lib/kasprintf.c:25 __kthread_create_on_node+0x186/0x3f0 kernel/kthread.c:520 kthread_create_on_node+0xc7/0x100 kernel/kthread.c:588 create_worker+0x416/0x7e0 kernel/workqueue.c:2802 maybe_create_worker kernel/workqueue.c:3063 [inline] manage_workers kernel/workqueue.c:3115 [inline] worker_thread+0x9dd/0xf10 kernel/workqueue.c:3377 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: rcu_preempt kthread starved for 828 jiffies! g183461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5397 [inline] __schedule+0x116a/0x5de0 kernel/sched/core.c:6786 __schedule_loop kernel/sched/core.c:6864 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6879 schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1ea/0xb00 kernel/rcu/tree.c:2054 rcu_gp_kthread+0x270/0x380 kernel/rcu/tree.c:2256 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 3414 Comm: kworker/R-bat_e Tainted: G U 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) Tainted: [U]=USER Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bat_events batadv_tt_purge RIP: 0010:in_softirq_really kernel/kcov.c:171 [inline] RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline] RIP: 0010:write_comp_data+0x24/0x90 kernel/kcov.c:246 Code: 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 a7 a7 14 12 65 8b 05 b8 a7 14 12 a9 00 01 ff 00 74 1d f6 c4 01 74 67 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 3c 16 00 00 85 c0 RSP: 0018:ffffc90000a07a08 EFLAGS: 00000202 RAX: 0000000080000301 RBX: 0000000000000000 RCX: ffffffff8a4950d4 RDX: ffff888032068000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8880263cb380 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: ffff88816c150d38 R12: ffff8880263cb404 R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe094769dc CR3: 000000003eb78000 CR4: 00000000003526f0 Call Trace: ip6_packet_match net/ipv6/netfilter/ip6_tables.c:72 [inline] ip6t_do_table+0x7e4/0x1c30 net/ipv6/netfilter/ip6_tables.c:306 ip6table_mangle_hook+0xc3/0x770 net/ipv6/netfilter/ip6table_mangle.c:73 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623 nf_hook+0x471/0x7a0 include/linux/netfilter.h:272 NF_HOOK include/linux/netfilter.h:315 [inline] br_nf_post_routing+0x8bd/0x1190 net/bridge/br_netfilter_hooks.c:969 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623 nf_hook+0x45e/0x780 include/linux/netfilter.h:272 NF_HOOK include/linux/netfilter.h:315 [inline] br_forward_finish+0xcd/0x130 net/bridge/br_forward.c:66 br_nf_hook_thresh+0x307/0x410 net/bridge/br_netfilter_hooks.c:1170 br_nf_forward_finish+0x66a/0xba0 net/bridge/br_netfilter_hooks.c:665 NF_HOOK include/linux/netfilter.h:317 [inline] NF_HOOK include/linux/netfilter.h:311 [inline] br_nf_forward_ip.part.0+0x609/0x810 net/bridge/br_netfilter_hooks.c:719 br_nf_forward_ip net/bridge/br_netfilter_hooks.c:679 [inline] br_nf_forward+0xf0f/0x1be0 net/bridge/br_netfilter_hooks.c:776 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:623 nf_hook+0x45e/0x780 include/linux/netfilter.h:272 NF_HOOK include/linux/netfilter.h:315 [inline] __br_forward+0x1be/0x5b0 net/bridge/br_forward.c:115 deliver_clone net/bridge/br_forward.c:131 [inline] br_flood+0x39c/0x650 net/bridge/br_forward.c:249 br_handle_frame_finish+0xf2d/0x1ca0 net/bridge/br_input.c:221 br_nf_hook_thresh+0x307/0x410 net/bridge/br_netfilter_hooks.c:1170 br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 net/bridge/br_netfilter_ipv6.c:154 NF_HOOK include/linux/netfilter.h:317 [inline] br_nf_pre_routing_ipv6+0x3cd/0x8c0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_bridge_pre net/bridge/br_input.c:283 [inline] br_handle_frame+0xad5/0x14b0 net/bridge/br_input.c:434 __netif_receive_skb_core.constprop.0+0xa26/0x4a00 net/core/dev.c:5863 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:5975 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6090 process_backlog+0x442/0x15e0 net/core/dev.c:6442 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0xa9f/0xfe0 net/core/dev.c:7605 handle_softirqs+0x219/0x8e0 kernel/softirq.c:579 do_softirq kernel/softirq.c:480 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:467 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:407 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline] batadv_tt_purge+0x25f/0xb80 net/batman-adv/translation-table.c:3510 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3321 [inline] rescuer_thread+0x620/0xea0 kernel/workqueue.c:3498 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 6058 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:26:65:2b:e7:cd, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:26:65:2b:e7:cd, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)