bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10034/1:b..l P5287/1:b..l
rcu: (detected by 0, t=10502 jiffies, g=299829, q=573 ncpus=1)
task:dhcpcd state:R running task stack:24632 pid:5287 tgid:5287 ppid:1 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:231 [inline]
RIP: 0010:unwind_next_frame+0x2c2/0x2090 arch/x86/kernel/unwind_orc.c:510
Code: cf 8b 14 95 3c 79 83 92 48 8d 04 7f 48 8d 84 00 e4 00 bb 91 83 c2 01 48 3d 3c 79 83 92 0f 83 ab 08 00 00 41 89 d0 4f 8d 04 40 <4f> 8d 84 00 e4 00 bb 91 49 81 f8 3c 79 83 92 0f 87 8f 08 00 00 29
RSP: 0018:ffffc900036af6a8 EFLAGS: 00000293
RAX: ffffffff91c4809a RBX: 0000000000000001 RCX: 0000000000019549
RDX: 000000000001955a RSI: 00000000000abcd2 RDI: 0000000000019549
RBP: ffffc900036af7b0 R08: 000000000004c00e R09: 0000000000000007
R10: 0000000000000200 R11: 000000000000b826 R12: ffffc900036af7b8
R13: ffffc900036af768 R14: ffffc900036af79d R15: ffffffff81b82696
__unwind_start+0x3cd/0x7e0 arch/x86/kernel/unwind_orc.c:787
unwind_start arch/x86/include/asm/unwind.h:64 [inline]
arch_stack_walk+0x73/0xf0 arch/x86/kernel/stacktrace.c:24
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1406 [inline]
__free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4584 [inline]
slab_alloc_node mm/slub.c:4917 [inline]
__do_kmalloc_node mm/slub.c:5333 [inline]
__kmalloc_noprof+0x2bf/0x820 mm/slub.c:5359
_kmalloc_noprof include/linux/slab.h:992 [inline]
_kzalloc_noprof include/linux/slab.h:1309 [inline]
tomoyo_encode2+0xfb/0x3c0 security/tomoyo/realpath.c:45
tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80
tomoyo_realpath_from_path+0x18c/0x690 security/tomoyo/realpath.c:283
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_path_number_perm+0x23c/0x580 security/tomoyo/file.c:728
security_file_ioctl+0xd3/0x230 security/security.c:2512
__do_sys_ioctl fs/ioctl.c:591 [inline]
__se_sys_ioctl fs/ioctl.c:583 [inline]
__x64_sys_ioctl+0xb7/0x210 fs/ioctl.c:583
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f17e872a378
RSP: 002b:00007ffe05dfb068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00005573b11deed0 RCX: 00007f17e872a378
RDX: 00007ffe05dfb070 RSI: 0000000000008921 RDI: 000000000000000f
RBP: 00007ffe05dfb070 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00005573b110ea10
R13: 00005573b11deed0 R14: 00005573b110ea10 R15: 00007ffe05dfb2c0
task:syz-executor state:R running task stack:22984 pid:10034 tgid:10034 ppid:10021 task_flags:0x400140 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:869 [inline]
RIP: 0010:class_rcu_destructor include/linux/rcupdate.h:1183 [inline]
RIP: 0010:unwind_next_frame+0x740/0x2090 arch/x86/kernel/unwind_orc.c:495
Code: 0f 85 c3 f9 ff ff 48 c7 c2 40 c3 cb 8b be 49 03 00 00 48 c7 c7 a0 c3 cb 8b c6 05 8a 5a 52 0f 01 e8 65 fd 2c 00 e9 9f f9 ff ff 3b c4 35 00 84 c0 0f 85 63 fc ff ff e8 3e 98 00 0a 85 c0 0f 84
RSP: 0018:ffffc900044ef8d0 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffffc900044efca0 RCX: ffffffff91d3be01
RDX: ffffc900044efca8 RSI: ffffc900044efc90 RDI: ffffc900044ef950
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000017958 R12: ffffc900044ef990
R13: ffffc900044ef940 R14: ffffc900044efca0 R15: ffffc900044ef974
arch_stack_walk+0x94/0xf0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
save_stack+0x162/0x1e0 mm/page_owner.c:165
__reset_page_owner+0x84/0x190 mm/page_owner.c:320
reset_page_owner include/linux/page_owner.h:25 [inline]
__free_pages_prepare mm/page_alloc.c:1406 [inline]
__free_frozen_pages+0x79f/0x1090 mm/page_alloc.c:2950
qlink_free mm/kasan/quarantine.c:163 [inline]
qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
kasan_slab_alloc include/linux/kasan.h:253 [inline]
slab_post_alloc_hook mm/slub.c:4584 [inline]
slab_alloc_node mm/slub.c:4917 [inline]
kmem_cache_alloc_noprof+0x26b/0x6a0 mm/slub.c:4931
alloc_filename fs/namei.c:147 [inline]
do_getname+0x35/0x390 fs/namei.c:187
class_filename_flags_constructor include/linux/fs.h:2566 [inline]
do_sys_openat2+0xc7/0x1e0 fs/open.c:1367
do_sys_open fs/open.c:1374 [inline]
__do_sys_openat fs/open.c:1390 [inline]
__se_sys_openat fs/open.c:1385 [inline]
__x64_sys_openat+0x12d/0x210 fs/open.c:1385
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f465599d3fc
RSP: 002b:00007ffcf75a92f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f4655a34474 RCX: 00007f465599d3fc
RDX: 0000000000090800 RSI: 00007ffcf75aa4a0 RDI: 00000000ffffff9c
RBP: 00007ffcf75aa48c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffcf75aa4a0
R13: 00007f4655a34474 R14: 00000000000d30dd R15: 00007ffcf75aa4e0
rcu: rcu_preempt kthread starved for 354 jiffies! g299829 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5510 [inline]
__schedule+0x125c/0x6730 kernel/sched/core.c:7234
__schedule_loop kernel/sched/core.c:7311 [inline]
schedule+0xdd/0x2c0 kernel/sched/core.c:7326
schedule_timeout+0x127/0x280 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x1a9/0x900 kernel/rcu/tree.c:2123
rcu_gp_kthread+0x179/0x230 kernel/rcu/tree.c:2325
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 3228 Comm: kworker/R-bat_e Tainted: G U L syzkaller #0 PREEMPT(full)
Tainted: [U]=USER, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: bat_events batadv_tt_purge
RIP: 0010:stack_trace_consume_entry+0x0/0x170 kernel/stacktrace.c:83
Code: e8 a5 d7 15 00 e9 36 ff ff ff 49 c7 c4 ea ff ff ff eb c7 e8 72 c2 c4 09 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 c7
RSP: 0018:ffffc900000069c0 EFLAGS: 00000286
RAX: ffffffff89846774 RBX: ffffc900000069c8 RCX: ffffc9000000691c
RDX: 1ffff92000000d42 RSI: ffffffff89846774 RDI: ffffc90000006a88
RBP: ffffc90000006a58 R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000200 R11: 0000000000088383 R12: ffffffff81f3d980
R13: ffffc90000006a88 R14: 0000000000000000 R15: ffff888033a5dd00
FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f529c13c4ed CR3: 0000000074810000 CR4: 00000000003526f0
Call Trace:
arch_stack_walk+0x88/0xf0 arch/x86/kernel/stacktrace.c:27
stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
kasan_save_track+0x14/0x30 mm/kasan/common.c:78
kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
poison_slab_object mm/kasan/common.c:253 [inline]
__kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285
kasan_slab_free include/linux/kasan.h:235 [inline]
slab_free_hook mm/slub.c:2677 [inline]
slab_free mm/slub.c:6377 [inline]
kfree+0x22b/0x6c0 mm/slub.c:6692
skb_kfree_head net/core/skbuff.c:1083 [inline]
skb_free_head+0xb9/0x160 net/core/skbuff.c:1095
skb_release_data+0x6c5/0x8e0 net/core/skbuff.c:1122
skb_release_all net/core/skbuff.c:1197 [inline]
__kfree_skb net/core/skbuff.c:1211 [inline]
consume_skb net/core/skbuff.c:1445 [inline]
consume_skb+0xc4/0x110 net/core/skbuff.c:1439
batadv_interface_tx+0x186d/0x1d00 net/batman-adv/mesh-interface.c:349
__netdev_start_xmit include/linux/netdevice.h:5400 [inline]
netdev_start_xmit include/linux/netdevice.h:5409 [inline]
xmit_one net/core/dev.c:3889 [inline]
dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3905
__dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4878
dev_queue_xmit include/linux/netdevice.h:3446 [inline]
br_dev_queue_push_xmit+0x361/0x530 net/bridge/br_forward.c:53
NF_HOOK include/linux/netfilter.h:318 [inline]
NF_HOOK include/linux/netfilter.h:312 [inline]
br_forward_finish+0x102/0x4d0 net/bridge/br_forward.c:66
br_nf_hook_thresh+0x30d/0x420 net/bridge/br_netfilter_hooks.c:1165
br_nf_forward_finish+0x693/0xb30 net/bridge/br_netfilter_hooks.c:667
NF_HOOK include/linux/netfilter.h:318 [inline]
NF_HOOK include/linux/netfilter.h:312 [inline]
br_nf_forward_arp net/bridge/br_netfilter_hooks.c:757 [inline]
br_nf_forward+0x157a/0x19f0 net/bridge/br_netfilter_hooks.c:780
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK include/linux/netfilter.h:316 [inline]
__br_forward+0x2f7/0x970 net/bridge/br_forward.c:115
deliver_clone net/bridge/br_forward.c:131 [inline]
maybe_deliver+0xf0/0x180 net/bridge/br_forward.c:191
br_flood+0x29b/0x7b0 net/bridge/br_forward.c:245
br_handle_frame_finish+0x1014/0x1fa0 net/bridge/br_input.c:229
nf_hook_bridge_pre net/bridge/br_input.c:313 [inline]
br_handle_frame+0x97f/0x1540 net/bridge/br_input.c:442
__netif_receive_skb_core.constprop.0+0x6c5/0x3530 net/core/dev.c:6099
__netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6210
__netif_receive_skb+0x1f/0x120 net/core/dev.c:6325
process_backlog+0x37a/0x1580 net/core/dev.c:6676
__napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7735
napi_poll net/core/dev.c:7798 [inline]
net_rx_action+0xa40/0xf20 net/core/dev.c:7955
handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622
do_softirq kernel/softirq.c:523 [inline]
do_softirq+0xac/0xe0 kernel/softirq.c:510
__local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450
spin_unlock_bh include/linux/spinlock.h:396 [inline]
batadv_tt_global_purge net/batman-adv/translation-table.c:2301 [inline]
batadv_tt_purge+0x25d/0xbd0 net/batman-adv/translation-table.c:3566
process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
process_scheduled_works kernel/workqueue.c:3405 [inline]
rescuer_thread+0x905/0x14a0 kernel/workqueue.c:3629
kthread+0x370/0x450 kernel/kthread.c:436
ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 2475 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
net_ratelimit: 2927 callbacks suppressed
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)