bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:be:ea:0d:77:df, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: (detected by 0, t=10703 jiffies, g=45165, q=1655 ncpus=2) rcu: All QSes seen, last rcu_preempt kthread activity 9982 (4294975222-4294965240), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 9982 jiffies! g45165 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5533 [inline] __schedule+0x17db/0x58f0 kernel/sched/core.c:7284 __schedule_loop kernel/sched/core.c:7361 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7376 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2122 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2330 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 9344 Comm: kworker/R-bond5 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: bond5 bond_alb_monitor RIP: 0010:__lock_release kernel/locking/lockdep.c:-1 [inline] RIP: 0010:lock_release+0xd1/0x3c0 kernel/locking/lockdep.c:5964 Code: 11 c7 44 24 24 01 00 00 00 83 3d 49 28 d7 0e 00 0f 84 9a 01 00 00 41 8b 87 a0 0b 00 00 85 c0 0f 84 21 01 00 00 4c 89 6c 24 18 <48> 89 5c 24 08 44 8d 60 ff 49 8d af b0 0b 00 00 4d 63 ec 48 89 04 RSP: 0018:ffffc90000a18240 EFLAGS: 00000002 RAX: 0000000000000004 RBX: 0000000000000202 RCX: 8000000000000101 RDX: 00000000f6c4d3d9 RSI: ffffffff8e430807 RDI: ffffffff8c6dac80 RBP: 0000000000000001 R08: ffffffff822bf5e6 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed10128ffd20 R12: ffff8880b8743f70 R13: ffffffff822bf5e6 R14: ffff8880b8743f70 R15: ffff888033421f40 FS: 0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fdcb07ed158 CR3: 000000007fa68000 CR4: 00000000003526f0 Call Trace: local_lock_release include/linux/local_lock_internal.h:62 [inline] alloc_from_pcs mm/slub.c:4872 [inline] slab_alloc_node mm/slub.c:4984 [inline] kmem_cache_alloc_noprof+0x22a/0x600 mm/slub.c:5010 skb_clone+0x212/0x3a0 net/core/skbuff.c:2119 deliver_clone net/bridge/br_forward.c:125 [inline] maybe_deliver net/bridge/br_forward.c:191 [inline] br_flood+0x3c0/0x8d0 net/bridge/br_forward.c:245 br_handle_frame_finish+0x1119/0x1950 net/bridge/br_input.c:229 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:325 [inline] br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x1329/0x1600 net/bridge/br_input.c:451 __netif_receive_skb_core+0x989/0x30c0 net/core/dev.c:6152 __netif_receive_skb_one_core net/core/dev.c:6263 [inline] __netif_receive_skb net/core/dev.c:6378 [inline] process_backlog+0x727/0x18b0 net/core/dev.c:6729 __napi_poll+0xaa/0x330 net/core/dev.c:7798 napi_poll net/core/dev.c:7861 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8018 handle_softirqs+0x226/0x860 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:queue_delayed_work_on+0x17a/0x1e0 kernel/workqueue.c:2674 Code: 00 4d 85 f6 75 16 e8 75 8b 39 00 eb 15 e8 6e 8b 39 00 e8 59 24 58 0a 4d 85 f6 74 ea e8 5f 8b 39 00 fb 65 48 8b 05 7e 0f 07 12 <48> 3b 44 24 20 75 56 89 d8 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f RSP: 0018:ffffc90005707940 EFLAGS: 00000293 RAX: 09a0a1b29a1c8a00 RBX: ffff88807eccd301 RCX: ffff888033421f40 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000008 R08: ffffffff907a607f R09: 1ffffffff20f4c0f R10: dffffc0000000000 R11: fffffbfff20f4c10 R12: 0000000002000001 R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 queue_delayed_work include/linux/workqueue.h:715 [inline] bond_alb_monitor+0x122e/0x1820 drivers/net/bonding/bond_alb.c:1636 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 rescuer_thread+0x7c5/0x10e0 kernel/workqueue.c:3703 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 12917 callbacks suppressed