bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: (detected by 1, t=10502 jiffies, g=253701, q=2138 ncpus=2) rcu: All QSes seen, last rcu_preempt kthread activity 1730 (4295064780-4295063050), jiffies_till_next_fqs=1, root ->qsmask 0x0 rcu: rcu_preempt kthread starved for 1731 jiffies! g253701 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5504 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228 __schedule_loop kernel/sched/core.c:7307 [inline] schedule+0x164/0x360 kernel/sched/core.c:7322 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: CPU: 1 UID: 0 PID: 25037 Comm: syz.1.14236 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:fib6_check_expired include/net/ip6_fib.h:271 [inline] RIP: 0010:__find_rr_leaf+0x17b/0x740 net/ipv6/route.c:847 Code: d3 48 89 df e8 c6 f7 da f7 eb c9 e8 4f a3 6f f7 49 8d 5e 64 49 89 dc 49 c1 ec 03 43 0f b6 04 2c 84 c0 0f 85 85 03 00 00 8b 1b <89> de 81 e6 00 00 40 00 31 ff e8 66 a7 6f f7 89 d8 25 00 00 40 00 RSP: 0018:ffffc90000a08160 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880325c8000 RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000100 RBP: ffffc90000a082b8 R08: ffffc90000a083e0 R09: ffffc90000a083f0 R10: ffffc90000a08240 R11: fffff5200014104a R12: 1ffff1100d01b10c R13: dffffc0000000000 R14: ffff8880680d8800 R15: ffffc90000a083b8 FS: 0000555574bdf500(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005602374664b0 CR3: 00000000991fc000 CR4: 00000000003526f0 Call Trace: find_rr_leaf net/ipv6/route.c:893 [inline] rt6_select net/ipv6/route.c:937 [inline] fib6_table_lookup+0x3c6/0xae0 net/ipv6/route.c:2255 ip6_pol_route+0x229/0x14d0 net/ipv6/route.c:2292 pol_lookup_func include/net/ip6_fib.h:669 [inline] __fib6_rule_action net/ipv6/fib6_rules.c:240 [inline] fib6_rule_action+0x9d7/0xc00 net/ipv6/fib6_rules.c:278 fib_rules_lookup+0x770/0xeb0 net/core/fib_rules.c:340 fib6_rule_lookup+0x1a0/0x730 net/ipv6/fib6_rules.c:115 ip6_route_input_lookup net/ipv6/route.c:2363 [inline] ip6_route_input+0x78d/0xb20 net/ipv6/route.c:2666 ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x774/0x1860 net/core/dev.c:6670 __napi_poll+0xaa/0x330 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7949 handle_softirqs+0x225/0x840 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:unwind_next_frame+0x828/0x2550 arch/x86/kernel/unwind_orc.c:530 Code: 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 1d a1 ba 00 48 8b 3b 48 85 ff 0f 84 3e 0e 00 00 48 83 c7 60 e9 a0 02 00 00 <83> fb 03 0f 84 6a 01 00 00 83 fb 04 0f 85 bf 0c 00 00 49 8d 5e 40 RSP: 0018:ffffc90006cdf740 EFLAGS: 00000202 RAX: ffffc90006cdf81d RBX: 0000000000000003 RCX: ffffffff904cb8b0 RDX: ffffffff90c9bdc2 RSI: ffffffff90c9bd94 RDI: ffffffff8c2910c0 RBP: ffffc90006cdf820 R08: 000000000000000a R09: 0000000000000000 R10: ffffc90006cdf838 R11: ffffffff81b10630 R12: dffffc0000000000 R13: ffffffff90c9bdbe R14: ffffc90006cdf7e8 R15: 1ffff92000d9befd arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:57 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556 __call_rcu_common kernel/rcu/tree.c:3159 [inline] call_rcu+0xee/0x8b0 kernel/rcu/tree.c:3279 netlink_release+0x16bb/0x1aa0 net/netlink/af_netlink.c:797 __sock_release net/socket.c:710 [inline] sock_close+0xad/0x220 net/socket.c:1501 __fput+0x418/0xa50 fs/file_table.c:512 task_work_run+0x1d9/0x270 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1fa/0x730 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa1c519ce59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc92d10cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00007fa1c5417da0 RCX: 00007fa1c519ce59 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007fa1c5417da0 R08: 0000000000000006 R09: 0000000000000000 R10: 00007fa1c5417cb0 R11: 0000000000000246 R12: 0000000000112d4e R13: 00007fa1c541627c R14: 0000000000112b78 R15: 00007ffc92d10de0 bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 23863 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)