bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7496/1:b..l rcu: (detected by 0, t=10503 jiffies, g=15101, q=2240 ncpus=2) task:syz.2.388 state:R running task stack:28344 pid:7496 tgid:7495 ppid:5823 task_flags:0x40054c flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7090 irqentry_exit+0x36/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210 Code: 96 56 55 00 48 89 df 5b e9 3d b0 5a 00 be 03 00 00 00 5b e9 02 54 14 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 98 b2 eb 11 65 8b 05 a9 b2 eb RSP: 0018:ffffc9001c23f8c8 EFLAGS: 00000246 RAX: 0000000000000007 RBX: ffff88801e22f1a0 RCX: ffffffff822a901a RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88801e22f1b4 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1003c45e34 R10: ffff88801e22f1a7 R11: 0000000000000000 R12: 00000000079402e5 R13: 0000000000000001 R14: ffff88801e22f1a8 R15: 0000000000000000 __update_page_owner_free_handle.constprop.0+0x1a6/0x470 mm/page_owner.c:279 __reset_page_owner+0x93/0x1a0 mm/page_owner.c:309 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1262 [inline] __free_frozen_pages+0x69d/0xff0 mm/page_alloc.c:2680 discard_slab mm/slub.c:2720 [inline] __put_partials+0x16d/0x1c0 mm/slub.c:3189 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4e/0x120 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4151 [inline] slab_alloc_node mm/slub.c:4200 [inline] kmem_cache_alloc_noprof+0x1cb/0x3b0 mm/slub.c:4207 taskstats_tgid_alloc kernel/taskstats.c:576 [inline] taskstats_exit+0x654/0xbe0 kernel/taskstats.c:615 do_exit+0x85f/0x2c30 kernel/exit.c:938 do_group_exit+0xd3/0x2a0 kernel/exit.c:1102 get_signal+0x2673/0x26d0 kernel/signal.c:3034 arch_do_signal_or_restart+0x8f/0x7d0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x150/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xda/0x260 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c5798e169 RSP: 002b:00007f2c5874a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 RAX: 0000000000001082 RBX: 00007f2c57bb5fa0 RCX: 00007f2c5798e169 RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 RBP: 00007f2c57a10a68 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f2c57bb5fa0 R15: 00007fffe38f91e8 rcu: rcu_preempt kthread starved for 1214 jiffies! g15101 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1ea/0xb00 kernel/rcu/tree.c:2046 rcu_gp_kthread+0x270/0x380 kernel/rcu/tree.c:2248 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:check_preemption_disabled+0x1d/0xe0 lib/smp_processor_id.c:56 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 84 34 08 65 8b 05 5a 84 34 08 a9 ff ff ff 7f 74 0f <48> 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea RSP: 0018:ffffc90000007360 EFLAGS: 00000202 RAX: 0000000080000102 RBX: 0000000000000000 RCX: ffffffff8a1db83a RDX: 0000000000000001 RSI: ffffffff8bf46480 RDI: ffffffff8bf464c0 RBP: ffffc900000074b0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff888031043ccf R13: ffff888031043cb8 R14: 1ffff92000000e84 R15: ffff8880325c0000 FS: 0000000000000000(0000) GS:ffff8881249b1000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc168050a8 CR3: 0000000025838000 CR4: 00000000003526f0 DR0: 000005fffffffffe DR1: 000000000000064b DR2: 0000000000000005 DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] rcu_is_watching+0x12/0xc0 kernel/rcu/tree.c:736 rcu_read_lock_held_common kernel/rcu/update.c:109 [inline] rcu_read_lock_held+0x1e/0x50 kernel/rcu/update.c:349 __in6_dev_get include/net/addrconf.h:347 [inline] ip6_ignore_linkdown include/net/addrconf.h:443 [inline] find_match+0x373/0x15d0 net/ipv6/route.c:781 __find_rr_leaf+0x140/0xe00 net/ipv6/route.c:869 find_rr_leaf net/ipv6/route.c:890 [inline] rt6_select net/ipv6/route.c:934 [inline] fib6_table_lookup+0x57c/0xa30 net/ipv6/route.c:2229 ip6_pol_route+0x1cc/0x1230 net/ipv6/route.c:2265 pol_lookup_func include/net/ip6_fib.h:616 [inline] fib6_rule_lookup+0x536/0x720 net/ipv6/fib6_rules.c:120 ip6_route_input_lookup net/ipv6/route.c:2334 [inline] ip6_route_input+0x662/0xc00 net/ipv6/route.c:2630 ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 net/ipv6/ip6_input.c:66 ip6_rcv_finish net/ipv6/ip6_input.c:77 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ipv6_rcv+0x1e8/0x680 net/ipv6/ip6_input.c:309 __netif_receive_skb_one_core+0x12d/0x1e0 net/core/dev.c:5885 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5998 process_backlog+0x442/0x15e0 net/core/dev.c:6350 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:7322 napi_poll net/core/dev.c:7386 [inline] net_rx_action+0xa97/0x1010 net/core/dev.c:7508 handle_softirqs+0x216/0x8e0 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:81 Code: 75 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 8c 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 RAX: 0000000000fb5bc1 RBX: 0000000000000000 RCX: ffffffff8b726439 RDX: 0000000000000000 RSI: ffffffff8dbef517 RDI: ffffffff8bf46500 RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff8e097740 R14: ffffffff90866010 R15: 0000000000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:748 default_idle_call+0x6d/0xb0 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x391/0x510 kernel/sched/idle.c:325 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:423 rest_init+0x16b/0x2b0 init/main.c:743 start_kernel+0x3e9/0x4d0 init/main.c:1099 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:513 x86_64_start_kernel+0xb0/0xc0 arch/x86/kernel/head64.c:494 common_startup_64+0x13e/0x148 bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:3c:92:03:6e:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:3c:92:03:6e:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:3c:92:03:6e:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:3c:92:03:6e:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:36:3c:92:03:6e:0c, vlan:0)