rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P29626
rcu: 	(detected by 1, t=10502 jiffies, g=108209, q=640 ncpus=2)
task:syz.8.6858      state:R  running task     stack:22840 pid:29626 tgid:29625 ppid:27208  task_flags:0x400140 flags:0x00080002
Call Trace:
 <TASK>
 </TASK>
rcu: rcu_preempt kthread starved for 8063 jiffies! g108209 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27400 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 __schedule+0x14ef/0x4fb0
 schedule+0x164/0x360
 schedule_timeout+0x158/0x2c0
 rcu_gp_fqs_loop+0x312/0x1560
 rcu_gp_kthread+0x9d/0x3b0
 kthread+0x726/0x8b0
 ret_from_fork+0x51b/0xa40
 ret_from_fork_asm+0x1a/0x30
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 1 UID: 0 PID: 29628 Comm: syz.8.6858 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:lock_acquire+0x221/0x330
Code: ff ff ff e8 e1 8c d9 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb 4d 30 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 e6 32
RSP: 0018:ffffc90000a07af8 EFLAGS: 00000282
RAX: d76b6248da4fde00 RBX: 0000000000000000 RCX: 0000000080000100
RDX: 00000000a42637f2 RSI: ffffffff8dd3c55e RDI: ffffffff8be73f00
RBP: ffffffff8174c0e5 R08: ffffffff8174c0e5 R09: ffffffff8e35a3a0
R10: ffffc90000a07c58 R11: ffffffff81ae5bd0 R12: 0000000000000002
R13: ffffffff8e35a3a0 R14: 0000000000000000 R15: 0000000000000246
FS:  00007fdf3f4466c0(0000) GS:ffff8882a9928000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555a99b4e8 CR3: 0000000022900000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 unwind_next_frame+0xc2/0x23c0
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_track+0x3e/0x80
 __kasan_slab_alloc+0x6c/0x80
 kmem_cache_alloc_noprof+0x370/0x6e0
 skb_ext_add+0x1b6/0x8f0
 br_nf_forward_ip+0xc6/0x7e0
 nf_hook_slow+0xc5/0x220
 NF_HOOK+0x23e/0x3f0
 __br_forward+0x397/0x540
 maybe_deliver+0xb5/0x160
 br_flood+0x31a/0x690
 br_handle_frame_finish+0x1492/0x1b40
 br_nf_hook_thresh+0x3dd/0x4c0
 br_nf_pre_routing_finish_ipv6+0xa3a/0xd70
 br_nf_pre_routing_ipv6+0x374/0x6f0
 br_handle_frame+0x989/0x1520
 __netif_receive_skb_core+0x98f/0x30a0
 __netif_receive_skb+0x72/0x370
 process_backlog+0x54e/0x1340
 __napi_poll+0xae/0x320
 net_rx_action+0x696/0xe30
 handle_softirqs+0x22a/0x7c0
 __irq_exit_rcu+0x5f/0x150
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:seqcount_lockdep_reader_access+0x9d/0xc0
Code: 82 ff 48 83 c4 08 48 89 df 4c 89 f6 e8 6c 38 82 ff e8 d7 40 ad ff 9c 58 a9 00 02 00 00 75 15 41 f7 c7 00 02 00 00 74 01 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc e8 64 96 5b 09 41 f7 c7 00 02 00 00
RSP: 0018:ffffc9000a617220 EFLAGS: 00000206
RAX: 0000000000000002 RBX: ffff88823fff8300 RCX: 0000000000000046
RDX: 0000000000000006 RSI: ffffffff8dad379b RDI: ffffffff8be73f00
RBP: ffffea0006e91200 R08: ffffffff8fced577 R09: 1ffffffff1f9daae
R10: dffffc0000000000 R11: fffffbfff1f9daaf R12: 1ffff11047fff07a
R13: ffff88823fff83a0 R14: ffffffff821d218b R15: 0000000000000a06
 bad_range+0x8b/0x2c0
 get_page_from_freelist+0x24bb/0x2580
 __alloc_frozen_pages_noprof+0x18d/0x380
 alloc_pages_mpol+0x232/0x4a0
 alloc_pages_noprof+0xa8/0x190
 skb_page_frag_refill+0x179/0x310
 sk_page_frag_refill+0x4c/0x140
 tcp_sendmsg_locked+0x1055/0x55b0
 tcp_sendmsg+0x2f/0x50
 __sock_sendmsg+0x19c/0x270
 ____sys_sendmsg+0x4d7/0x810
 ___sys_sendmsg+0x2a5/0x360
 __x64_sys_sendmsg+0x1bd/0x2a0
 do_syscall_64+0xe2/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdf3e59acb9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fdf3f446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fdf3e816090 RCX: 00007fdf3e59acb9
RDX: 00000000000052cc RSI: 0000200000000040 RDI: 000000000000000d
RBP: 00007fdf3e608bf7 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fdf3e816128 R14: 00007fdf3e816090 R15: 00007ffc6bf75728
 </TASK>
net_ratelimit: 2954 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
net_ratelimit: 47047 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
