bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15157/1:b..l rcu: (detected by 1, t=10502 jiffies, g=77225, q=550 ncpus=2) task:syz.2.1745 state:X running task stack:26104 pid:15157 tgid:15156 ppid:0 task_flags:0x40054c flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:547 [inline] irqentry_exit+0x14f/0x760 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__kasan_check_byte+0x14/0x40 mm/kasan/common.c:573 Code: fa ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 56 53 48 89 f3 49 89 fe e8 3e 15 00 00 84 c0 <75> 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 f6 04 00 00 RSP: 0018:ffffc90005acf988 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff8238a0c4 RCX: 0000000080000001 RDX: 0000000000000000 RSI: ffffffff8238a0c4 RDI: 1ffffffff1d2b9ac RBP: ffffffff8238a0a8 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed10038d24b9 R12: 0000000000000002 R13: ffffffff8e95cd60 R14: ffffffff8e95cd60 R15: 0000000000000000 kasan_check_byte include/linux/kasan.h:402 [inline] lock_acquire+0x84/0x350 kernel/locking/lockdep.c:5842 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] get_non_dying_memcg_start mm/memcontrol.c:817 [inline] mod_memcg_state+0x64/0x190 mm/memcontrol.c:879 account_kmem_nmi_safe mm/memcontrol.c:3029 [inline] obj_cgroup_uncharge_pages mm/memcontrol.c:3045 [inline] __memcg_kmem_uncharge_page+0x25b/0x370 mm/memcontrol.c:3136 memcg_kmem_uncharge_page include/linux/memcontrol.h:1735 [inline] exit_task_stack_account+0x1e3/0x320 kernel/fork.c:511 do_exit+0x18b1/0x22c0 kernel/exit.c:1008 do_group_exit+0x21b/0x2d0 kernel/exit.c:1118 get_signal+0x1284/0x1330 kernel/signal.c:3037 arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x8c/0x4d0 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:238 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x33e/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fbceb19ce59 RSP: 002b:00007fbcec0840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007fbceb415fa8 RCX: 00007fbceb19ce59 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbceb415fa8 RBP: 00007fbceb415fa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fbceb416038 R14: 00007ffe6f3a1580 R15: 00007ffe6f3a1668 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g77225 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=33726 rcu: rcu_preempt kthread starved for 10502 jiffies! g77225 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 15164 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:arch_irqs_disabled_flags arch/x86/include/asm/irqflags.h:146 [inline] RIP: 0010:lock_acquire+0xd4/0x350 kernel/locking/lockdep.c:5869 Code: 8c 0b 00 00 00 0f 85 aa 00 00 00 4c 89 74 24 10 4d 89 fe 9c 41 5f fa 48 c7 c7 73 05 fc 8d e8 83 2f 07 0a 65 ff 05 9c c3 97 11 <45> 31 c9 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef RSP: 0000:ffffc90000007c70 EFLAGS: 00000002 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000010001 RDX: 0000000000000000 RSI: ffffffff8dfc0573 RDI: ffffffff8c28af60 RBP: ffffffff89b8753b R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed1006a1e856 R12: 0000000000000002 R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000046 FS: 00007fbca155f880(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbca0ea7420 CR3: 00000000a3ff3000 CR4: 0000000000350ef0 Call Trace: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] advance_sched+0x9b7/0xc20 net/sched/sch_taprio.c:992 __run_hrtimer kernel/time/hrtimer.c:1930 [inline] __hrtimer_run_queues+0x3c0/0xa20 kernel/time/hrtimer.c:1994 hrtimer_interrupt+0x44b/0x950 kernel/time/hrtimer.c:2113 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1067 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1061 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:constant_test_bit arch/x86/include/asm/bitops.h:202 [inline] RIP: 0010:arch_test_bit arch/x86/include/asm/bitops.h:232 [inline] RIP: 0010:_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:142 [inline] RIP: 0010:folio_test_head include/linux/page-flags.h:843 [inline] RIP: 0010:folio_test_large include/linux/page-flags.h:864 [inline] RIP: 0010:filemap_map_pages+0xb90/0x2100 mm/filemap.c:3931 Code: 0f 85 32 13 00 00 4c 8b 64 24 08 4c 89 e7 be 08 00 00 00 e8 62 4c 2d 00 49 be 00 00 00 00 00 fc ff df 48 8b 84 24 80 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 d1 49 2d 00 48 c1 e3 0c 48 01 5c RSP: 0000:ffffc900058df940 EFLAGS: 00000256 RAX: 1ffffd40004ea838 RBX: 0000000000000001 RCX: ffffffff8203b57e RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea00027541c0 RBP: ffffc900058dfb30 R08: ffffea00027541c7 R09: 1ffffd40004ea838 R10: dffffc0000000000 R11: fffff940004ea839 R12: ffffea00027541c0 R13: ffffc900058dfdb8 R14: dffffc0000000000 R15: 0000000000000085 do_fault_around mm/memory.c:5851 [inline] do_read_fault mm/memory.c:5884 [inline] do_fault mm/memory.c:6027 [inline] do_pte_missing+0x1f38/0x33f0 mm/memory.c:4550 handle_pte_fault mm/memory.c:6411 [inline] __handle_mm_fault mm/memory.c:6549 [inline] handle_mm_fault+0x1bd7/0x3170 mm/memory.c:6718 do_user_addr_fault+0xa73/0x1340 arch/x86/mm/fault.c:1334 handle_page_fault arch/x86/mm/fault.c:1474 [inline] exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fbca0ea7420 Code: Unable to access opcode bytes at 0x7fbca0ea73f6. RSP: 002b:00007ffcabdad408 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000559866bea140 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 RBP: 000055987e5a8190 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000246 R12: 000055987e5cab80 R13: 00007ffcabdad540 R14: 0000000000000000 R15: 0000000000000000