bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5197/1:b..l P5824/1:b..l
rcu: (detected by 1, t=10503 jiffies, g=11549, q=299 ncpus=2)
task:syz-executor state:R running task stack:18448 pid:5824 tgid:5824 ppid:5821 flags:0x00004002
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078
irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_next_frame+0x99/0x22d0
Code: eb 48 c1 eb 03 42 0f b6 04 23 84 c0 0f 85 e1 19 00 00 41 8b 45 00 85 c0 0f 84 d7 18 00 00 89 84 24 84 00 00 00 48 89 6c 24 78 <48> 89 8c 24 90 00 00 00 48 89 5c 24 20 bf 01 00 00 00 e8 d0 d7 21
RSP: 0018:ffffc90003ff72b0 EFLAGS: 00000202
RAX: 0000000000000001 RBX: 1ffff920007fee70 RCX: ffffc90003ff7650
RDX: dffffc0000000000 RSI: ffffffff820f41e6 RDI: ffffc90003ff7380
RBP: ffffc90003ff73b8 R08: 0000000000000000 R09: ffffc90003ff7470
R10: ffffc90003ff73d0 R11: ffffffff818b4a10 R12: dffffc0000000000
R13: ffffc90003ff7380 R14: ffffffff820f41e6 R15: 0000000000000000
arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
save_stack+0xfb/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x76/0x430 mm/page_owner.c:297
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1127 [inline]
free_unref_page+0xd3f/0x1010 mm/page_alloc.c:2659
discard_slab mm/slub.c:2688 [inline]
__put_partials+0x160/0x1c0 mm/slub.c:3157
put_cpu_partial+0x17c/0x250 mm/slub.c:3232
__slab_free+0x290/0x380 mm/slub.c:4483
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329
kasan_slab_alloc include/linux/kasan.h:250 [inline]
slab_post_alloc_hook mm/slub.c:4119 [inline]
slab_alloc_node mm/slub.c:4168 [inline]
kmem_cache_alloc_noprof+0x1d9/0x380 mm/slub.c:4175
copy_fs_struct+0x4e/0x270 fs/fs_struct.c:114
copy_fs+0x6e/0x150 kernel/fork.c:1769
copy_process+0x170f/0x3d50 kernel/fork.c:2385
kernel_clone+0x226/0x8e0 kernel/fork.c:2806
__do_sys_clone3 kernel/fork.c:3110 [inline]
__se_sys_clone3+0x2d8/0x360 kernel/fork.c:3089
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9072fba589
RSP: 002b:00007ffd3dda9ff8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 00007f9072f83f30 RCX: 00007f9072fba589
RDX: 00007f9072f83f30 RSI: 0000000000000058 RDI: 00007ffd3ddaa060
RBP: 00007ffd3ddaa0c0 R08: 00007ffd3ddaa0c0 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8
R13: 0000000000000009 R14: 00007ffd3ddaa060 R15: 00007ffd3ddaa530
task:klogd state:R running task stack:22784 pid:5197 tgid:5197 ppid:1 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6935
preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6959
preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12
unwind_next_frame+0x18f8/0x22d0 arch/x86/kernel/unwind_orc.c:672
arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
save_stack+0xfb/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x76/0x430 mm/page_owner.c:297
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1127 [inline]
free_unref_page+0xd3f/0x1010 mm/page_alloc.c:2659
__slab_free+0x2c2/0x380 mm/slub.c:4524
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329
kasan_slab_alloc include/linux/kasan.h:250 [inline]
slab_post_alloc_hook mm/slub.c:4119 [inline]
slab_alloc_node mm/slub.c:4168 [inline]
kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4220
__alloc_skb+0x1c3/0x440 net/core/skbuff.c:668
alloc_skb include/linux/skbuff.h:1331 [inline]
alloc_skb_with_frags+0xc3/0x820 net/core/skbuff.c:6612
sock_alloc_send_pskb+0x91a/0xa60 net/core/sock.c:2897
unix_dgram_sendmsg+0x5f1/0x1e00 net/unix/af_unix.c:2015
sock_sendmsg_nosec net/socket.c:713 [inline]
__sock_sendmsg+0x221/0x270 net/socket.c:728
__sys_sendto+0x363/0x4c0 net/socket.c:2210
__do_sys_sendto net/socket.c:2217 [inline]
__se_sys_sendto net/socket.c:2213 [inline]
__x64_sys_sendto+0xde/0x100 net/socket.c:2213
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe892d009b5
RSP: 002b:00007fffbebbd0f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe892d009b5
RDX: 00000000000000a0 RSI: 0000558fd216b640 RDI: 0000000000000003
RBP: 0000558fd2166910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013
R13: 00007fe892e8e212 R14: 00007fffbebbd1f8 R15: 0000000000000000
rcu: rcu_preempt kthread starved for 5368 jiffies! g11549 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:25624 pid:17 tgid:17 ppid:2 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5369 [inline]
__schedule+0x1850/0x4c30 kernel/sched/core.c:6756
__schedule_loop kernel/sched/core.c:6833 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6848
schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045
rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.13.0-rc6-syzkaller-00970-g7d0da8f86234 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:rcu_rdp_cpu_online kernel/rcu/tree.c:4744 [inline]
RIP: 0010:rcu_lockdep_current_cpu_online+0x82/0x120 kernel/rcu/tree.c:4785
Code: c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 f6 6b 80 00 48 8b 03 48 8d 98 80 f8 03 00 48 8d b8 a0 f8 03 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 d2 6b 80 00 4c 8b 7b 20 48 83 c3 18 48 89
RSP: 0018:ffffc90000156d08 EFLAGS: 00000a06
RAX: 1ffff110170c7f14 RBX: ffff8880b863f880 RCX: 0000000080000100
RDX: ffff88801cad5a00 RSI: ffffffff8c5fb080 RDI: ffff8880b863f8a0
RBP: ffff88804d030000 R08: ffffffff8a9287a1 R09: ffffffff8a9291a9
R10: 0000000000000003 R11: ffff88801cad5a00 R12: 0000000000000000
R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88802dc5b800
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555823435c8 CR3: 0000000033cc2000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rcu_read_lock_held_common kernel/rcu/update.c:113 [inline]
rcu_read_lock_held+0x1e/0x50 kernel/rcu/update.c:349
nbp_vlan_group_rcu net/bridge/br_private.h:1614 [inline]
should_deliver+0x5f/0x310 net/bridge/br_forward.c:26
maybe_deliver+0x4f/0x150 net/bridge/br_forward.c:182
br_flood+0x2e4/0x680 net/bridge/br_forward.c:237
br_handle_frame_finish+0x18d2/0x2000 net/bridge/br_input.c:220
br_nf_hook_thresh+0x472/0x590
br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0
NF_HOOK include/linux/netfilter.h:314 [inline]
br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:282 [inline]
br_handle_frame+0x9f3/0x1530 net/bridge/br_input.c:433
__netif_receive_skb_core+0x13e7/0x4540 net/core/dev.c:5619
__netif_receive_skb_one_core net/core/dev.c:5723 [inline]
__netif_receive_skb+0x12f/0x650 net/core/dev.c:5838
process_backlog+0x662/0x15b0 net/core/dev.c:6170
__napi_poll+0xcb/0x490 net/core/dev.c:6953
napi_poll net/core/dev.c:7022 [inline]
net_rx_action+0x89b/0x1240 net/core/dev.c:7144
handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561
run_ksoftirqd+0xca/0x130 kernel/softirq.c:950
smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
net_ratelimit: 18310 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:4b:d4:e6:13, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:4b:d4:e6:13, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:4b:d4:e6:13, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
net_ratelimit: 24299 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:4b:d4:e6:13, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:4b:d4:e6:13, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:bd:4b:d4:e6:13, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)