bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5631/1:b..l P8036/1:b..l rcu: (detected by 0, t=10502 jiffies, g=25833, q=1199 ncpus=2) task:dhcpcd state:R running task stack:26584 pid:8036 tgid:8036 ppid:5293 task_flags:0x400040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:unwind_next_frame+0x9b1/0x2550 arch/x86/kernel/unwind_orc.c:-1 Code: 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 e4 23 ba 00 48 8b 3b 48 85 ff 0f 84 ee 0d 00 00 48 83 c7 50 e9 3c 01 00 00 <48> 8b 44 24 58 80 3c 28 00 74 11 4c 89 ff e8 bc 23 ba 00 48 8b 74 RSP: 0018:ffffc900030b7498 EFLAGS: 00000246 RAX: ffffc900030b759d RBX: 0000000000000003 RCX: ffffffff905174ec RDX: ffffffff90d18466 RSI: ffffffff90d1846a RDI: ffffffff8c28b880 RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8e95cc20 R10: ffffc900030b75b8 R11: ffffffff81b0e0e0 R12: ffffffff90d1846b R13: 1ffff92000616ead R14: ffffc900030b7568 R15: ffffc900030b75a0 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556 slab_free_hook mm/slub.c:2650 [inline] slab_free mm/slub.c:6251 [inline] kmem_cache_free+0x44f/0x650 mm/slub.c:6378 remove_vma mm/vma.c:473 [inline] vms_complete_munmap_vmas+0x929/0xc60 mm/vma.c:1361 do_vmi_align_munmap+0x3b7/0x4b0 mm/vma.c:1604 do_vmi_munmap+0x252/0x2d0 mm/vma.c:1652 __vm_munmap+0x22c/0x3d0 mm/vma.c:3285 __do_sys_munmap mm/mmap.c:1079 [inline] __se_sys_munmap mm/mmap.c:1076 [inline] __x64_sys_munmap+0x60/0x70 mm/mmap.c:1076 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f862d49b2e7 RSP: 002b:00007ffe8703f358 EFLAGS: 00000202 ORIG_RAX: 000000000000000b RAX: ffffffffffffffda RBX: 000055da83dcde50 RCX: 00007f862d49b2e7 RDX: 0000000000000001 RSI: 000000000002f6d0 RDI: 00007f862d22d000 RBP: 00007ffe8703f460 R08: 00000000000004f0 R09: 0000000000000002 R10: 00007ffe8703f290 R11: 0000000000000202 R12: 00007ffe8703f3a0 R13: 00007f862d4ae000 R14: 000055da83dcde50 R15: 0000000000000000 task:syz-executor state:R running task stack:21216 pid:5631 tgid:5631 ppid:5626 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7513 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8b0 kernel/entry/common.c:164 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lock_acquire+0x7/0x350 kernel/locking/lockdep.c:5828 Code: ff ff 00 0f 95 c0 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 RSP: 0018:ffffc90004407478 EFLAGS: 00000246 RAX: 0000000000000001 RBX: ffffffff8ba6f224 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e95cc20 RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 R10: ffffc900044075b8 R11: ffffffff81b0e0e0 R12: ffffc900044075a0 R13: 1ffff92000880ead R14: ffffc90004407568 R15: ffffffff8176e256 rcu_lock_acquire include/linux/rcupdate.h:300 [inline] rcu_read_lock include/linux/rcupdate.h:838 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xc3/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc1c/0xd30 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5613 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __do_kmalloc_node mm/slub.c:5296 [inline] __kmalloc_noprof+0x35c/0x760 mm/slub.c:5308 kmalloc_noprof include/linux/slab.h:954 [inline] tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x283/0x560 security/tomoyo/file.c:827 security_inode_getattr+0x12b/0x310 security/security.c:1895 vfs_getattr fs/stat.c:259 [inline] vfs_fstat fs/stat.c:281 [inline] __do_sys_newfstat fs/stat.c:551 [inline] __se_sys_newfstat fs/stat.c:546 [inline] __x64_sys_newfstat+0x13b/0x270 fs/stat.c:546 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f92ec19b467 RSP: 002b:00007ffca230b8c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f92ec19b467 RDX: 0000000000000000 RSI: 00007ffca230b8d0 RDI: 0000000000000003 RBP: 00007ffca230cabc R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffca230cad0 R13: 00007f92ec2321ca R14: 000000000002196c R15: 00007ffca230cb10 rcu: rcu_preempt kthread starved for 7150 jiffies! g25833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5388 [inline] __schedule+0x1821/0x5740 kernel/sched/core.c:7189 __schedule_loop kernel/sched/core.c:7268 [inline] schedule+0x164/0x360 kernel/sched/core.c:7283 schedule_timeout+0x158/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x312/0x11d0 kernel/rcu/tree.c:2095 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2297 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 3233 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Workqueue: bat_events batadv_tt_purge RIP: 0010:rcu_is_watching+0x67/0xb0 kernel/rcu/tree.c:753 Code: 89 f7 e8 fc 41 86 00 48 c7 c3 d8 39 39 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d d9 32 8d 11 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 01 be RSP: 0018:ffffc900000070b8 EFLAGS: 00000282 RAX: 0000000000025c04 RBX: ffff8880b86339d8 RCX: 0000000080000303 RDX: 0000000093b34494 RSI: ffffffff8c28b8c0 RDI: ffffffff8c28b880 RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cc20 R10: ffffc900000071f8 R11: ffffffff81b0e0e0 R12: ffffc900000071e0 R13: 1ffff92000000e35 R14: ffffffff8e262790 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f862d204e9c CR3: 0000000072c3e000 CR4: 00000000003526f0 Call Trace: rcu_read_lock include/linux/rcupdate.h:839 [inline] class_rcu_constructor include/linux/rcupdate.h:1181 [inline] unwind_next_frame+0xd5/0x2550 arch/x86/kernel/unwind_orc.c:495 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:57 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4570 [inline] slab_alloc_node mm/slub.c:4899 [inline] kmem_cache_alloc_noprof+0x2bc/0x650 mm/slub.c:4906 skb_clone+0x212/0x3a0 net/core/skbuff.c:2107 vxcan_xmit+0x1e0/0x780 drivers/net/can/vxcan.c:60 __netdev_start_xmit include/linux/netdevice.h:5368 [inline] netdev_start_xmit include/linux/netdevice.h:5377 [inline] xmit_one net/core/dev.c:3888 [inline] dev_hard_start_xmit+0x2cd/0x830 net/core/dev.c:3904 __dev_queue_xmit+0x14d9/0x3950 net/core/dev.c:4870 dev_queue_xmit include/linux/netdevice.h:3418 [inline] can_send+0x921/0xd20 net/can/af_can.c:279 can_can_gw_rcv+0xcb0/0xf70 net/can/gw.c:569 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0x126/0x7a0 net/can/af_can.c:602 can_receive+0x2c6/0x440 net/can/af_can.c:674 can_rcv+0x1f9/0x330 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6202 [inline] __netif_receive_skb net/core/dev.c:6315 [inline] process_backlog+0xc66/0x1950 net/core/dev.c:6666 __napi_poll+0xae/0x340 net/core/dev.c:7733 napi_poll net/core/dev.c:7796 [inline] net_rx_action+0x627/0xf70 net/core/dev.c:7953 handle_softirqs+0x22a/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2290 [inline] batadv_tt_purge+0x4d1/0x9e0 net/batman-adv/translation-table.c:3550 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3397 rescuer_thread+0x827/0x1130 kernel/workqueue.c:3621 kthread+0x389/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245