bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6742/1:b..l rcu: (detected by 1, t=10502 jiffies, g=14345, q=833 ncpus=2) task:syz.5.264 state:R running task stack:23952 pid:6742 tgid:6738 ppid:6265 task_flags:0x400040 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5377 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6764 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7086 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:should_resched arch/x86/include/asm/preempt.h:103 [inline] RIP: 0010:__raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] RIP: 0010:_raw_spin_unlock+0x2f/0x50 kernel/locking/spinlock.c:186 Code: 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5a 34 a2 f5 48 89 df e8 92 7b a3 f5 bf 01 00 00 00 e8 d8 e0 94 f5 65 8b 05 e9 29 0b 74 <85> c0 74 06 5b c3 cc cc cc cc e8 62 8b 31 f5 5b c3 cc cc cc cc 66 RSP: 0018:ffffc9000b8ff850 EFLAGS: 00000297 RAX: 0000000080000000 RBX: ffff888031f9fe40 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffffc9000b8ff970 R08: ffff888031f9fe43 R09: 1ffff110063f3fc8 R10: dffffc0000000000 R11: ffffed10063f3fc9 R12: ffffea0001e02940 R13: dffffc0000000000 R14: ffffc9000b8ff900 R15: ffffea0001e02940 spin_unlock include/linux/spinlock.h:391 [inline] follow_page_pte+0xdd3/0x1460 mm/gup.c:944 follow_pmd_mask mm/gup.c:978 [inline] follow_pud_mask mm/gup.c:1030 [inline] follow_p4d_mask mm/gup.c:1047 [inline] follow_page_mask mm/gup.c:1090 [inline] __get_user_pages+0xb33/0x4140 mm/gup.c:1489 populate_vma_page_range+0x264/0x330 mm/gup.c:1929 __mm_populate+0x27a/0x460 mm/gup.c:2032 mm_populate include/linux/mm.h:3386 [inline] vm_mmap_pgoff+0x303/0x430 mm/util.c:580 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fac3e18cde9 RSP: 002b:00007fac3ef52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007fac3e3a6080 RCX: 00007fac3e18cde9 RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 RBP: 00007fac3e20e2a0 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007fac3e3a6080 R15: 00007fac3e4cfa28 rcu: rcu_preempt kthread starved for 9641 jiffies! g14345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26040 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5377 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6764 __schedule_loop kernel/sched/core.c:6841 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6856 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2024 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2226 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 RIP: 0010:check_preemption_disabled+0x37/0x120 Code: 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d cc cf 0d 74 65 8b 05 c1 cf 0d 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e RSP: 0018:ffffc90000007728 EFLAGS: 00000002 RAX: 171b94e8851a3b00 RBX: 0000000000000000 RCX: ffffffff819ab9f4 RDX: 0000000000000000 RSI: ffffffff8c0ab420 RDI: ffffffff8c608b40 RBP: ffffc900000078c0 R08: ffffffff901b5c77 R09: 1ffffffff2036b8e R10: dffffc0000000000 R11: fffffbfff2036b8f R12: 1ffff92000000ef4 R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff2d6d7b338 CR3: 0000000072330000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lockdep_recursion_inc kernel/locking/lockdep.c:464 [inline] lock_acquire+0x1b0/0x550 kernel/locking/lockdep.c:5850 rcu_lock_acquire include/linux/rcupdate.h:337 [inline] rcu_read_lock include/linux/rcupdate.h:849 [inline] link_sta_info_get_bss+0x6c/0x340 net/mac80211/sta_info.c:265 ieee80211_rx_for_interface+0x72/0x3d0 net/mac80211/rx.c:5177 __ieee80211_rx_handle_packet net/mac80211/rx.c:5348 [inline] ieee80211_rx_list+0x2df4/0x3810 net/mac80211/rx.c:5483 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5506 ieee80211_rx include/net/mac80211.h:5172 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:441 tasklet_action_common+0x426/0x620 kernel/softirq.c:811 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline] RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112 Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 45 fa 73 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 RAX: ffffffff8e696580 RBX: ffff88801daa6064 RCX: 0000000000094b89 RDX: 0000000000000001 RSI: ffff88801daa6000 RDI: ffff88801daa6064 RBP: 000000000003aab8 R08: ffff8880b863799b R09: 1ffff110170c6f33 R10: dffffc0000000000 R11: ffffffff8bf61b50 R12: ffff888147ec4000 R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f1304a0 acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:699 cpuidle_enter_state+0x109/0x470 drivers/cpuidle/cpuidle.c:268 cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:389 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:230 [inline] do_idle+0x372/0x5c0 kernel/sched/idle.c:325 cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:423 rest_init+0x2dc/0x300 init/main.c:743 start_kernel+0x484/0x510 init/main.c:1099 x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:515 x86_64_start_kernel+0x9f/0xa0 arch/x86/kernel/head64.c:496 common_startup_64+0x13e/0x147 net_ratelimit: 22182 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:1d:18:09:a6:96, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:1d:18:09:a6:96, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ed:be:85:e1:1e, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c2:e7:b4:ec:05, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:ea:87:f2:5a:eb:8d, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) net_ratelimit: 22342 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ed:be:85:e1:1e, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:ed:be:85:e1:1e, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:1d:18:09:a6:96, vlan:0)