bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d6:bc:e9:37:e6, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5838/1:b..l P7188/1:b..l rcu: (detected by 0, t=10502 jiffies, g=25497, q=1352 ncpus=1) task:kworker/u8:21 state:R running task stack:23544 pid:7188 tgid:7188 ppid:2 task_flags:0x24248060 flags:0x00080000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7190 irqentry_exit+0x1d8/0x8c0 kernel/entry/common.c:216 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 RIP: 0010:lock_is_held_type+0x107/0x150 kernel/locking/lockdep.c:5945 Code: 00 00 b8 ff ff ff ff 65 0f c1 05 5c 10 3d 08 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 87 2c 03 00 45 31 ed eb RSP: 0018:ffffc9000c1eed50 EFLAGS: 00000296 RAX: 0000000000000046 RBX: ffff88805b6dc8d0 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff8daa50c6 RDI: ffffffff8bf2b600 RBP: ffffffff8e3c9520 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: ffff88805b6dc830 R12: ffff88805b6dbd00 R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000004 xa_entry include/linux/xarray.h:1226 [inline] xas_find_marked+0x71d/0x1200 lib/xarray.c:1522 find_get_entry mm/filemap.c:2064 [inline] filemap_get_folios_tag+0x178/0xae0 mm/filemap.c:2332 mpage_prepare_extent_to_map+0x399/0x1510 fs/ext4/inode.c:2639 ext4_do_writepages+0xa11/0x3c80 fs/ext4/inode.c:2878 ext4_writepages+0x37a/0x7d0 fs/ext4/inode.c:3026 do_writepages+0x27a/0x600 mm/page-writeback.c:2598 __writeback_single_inode+0x168/0x14a0 fs/fs-writeback.c:1737 writeback_sb_inodes+0x72e/0x1ce0 fs/fs-writeback.c:2030 __writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2107 wb_writeback+0x799/0xae0 fs/fs-writeback.c:2218 wb_check_old_data_flush fs/fs-writeback.c:2322 [inline] wb_do_writeback fs/fs-writeback.c:2375 [inline] wb_workfn+0x8a0/0xbb0 fs/fs-writeback.c:2403 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 task:syz-executor state:R running task stack:23272 pid:5838 tgid:5838 ppid:5831 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 preempt_schedule_irq+0x51/0x90 kernel/sched/core.c:7190 irqentry_exit+0x1d8/0x8c0 kernel/entry/common.c:216 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:__sanitizer_cov_trace_cmp8+0x0/0x20 kernel/kcov.c:293 Code: 0c 24 89 f2 89 fe bf 04 00 00 00 e9 ea fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe RSP: 0018:ffffc900041cf838 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffff88801cc02440 RCX: ffffffff8231ce2f RDX: ffff88807a110000 RSI: 0000000000000002 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000003 R09: 000000000000001f R10: 0000000000000001 R11: ffff88807a110b30 R12: 0000000004cc03cf R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000001 __update_page_owner_free_handle.constprop.0+0x14a/0x4a0 mm/page_owner.c:284 __reset_page_owner+0x93/0x1a0 mm/page_owner.c:321 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1406 [inline] __free_frozen_pages+0x7df/0x1170 mm/page_alloc.c:2943 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x4c/0xf0 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x195/0x1e0 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4953 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x2f6/0x910 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] xt_jumpstack_alloc net/netfilter/x_tables.c:1336 [inline] xt_replace_table+0x64b/0x970 net/netfilter/x_tables.c:1395 __do_replace+0x1cf/0x9f0 net/ipv4/netfilter/arp_tables.c:912 do_replace net/ipv6/netfilter/ip6_tables.c:1158 [inline] do_ip6t_set_ctl+0x8d0/0xbc0 net/ipv6/netfilter/ip6_tables.c:1644 nf_setsockopt+0x8d/0xf0 net/netfilter/nf_sockopt.c:101 ipv6_setsockopt+0x135/0x170 net/ipv6/ipv6_sockglue.c:978 tcp_setsockopt+0xa7/0x100 net/ipv4/tcp.c:4164 do_sock_setsockopt+0xf3/0x1d0 net/socket.c:2322 __sys_setsockopt+0x120/0x1a0 net/socket.c:2347 __do_sys_setsockopt net/socket.c:2353 [inline] __se_sys_setsockopt net/socket.c:2350 [inline] __x64_sys_setsockopt+0xbd/0x160 net/socket.c:2350 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f32a4f916ba RSP: 002b:00007ffdd82b2198 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007ffdd82b2220 RCX: 00007f32a4f916ba RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00000000000003b8 R09: 0079746972756365 R10: 00007f32a51b7800 R11: 0000000000000202 R12: 00007f32a51b77a0 R13: 00007ffdd82b21bc R14: 0000000000000000 R15: 00007f32a51b7e60 rcu: rcu_preempt kthread starved for 1663 jiffies! g25497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5256 [inline] __schedule+0x1139/0x6150 kernel/sched/core.c:6863 __schedule_loop kernel/sched/core.c:6945 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6960 schedule_timeout+0x123/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x1ea/0xaf0 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x26d/0x380 kernel/rcu/tree.c:2285 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 794 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: events_power_efficient neigh_periodic_work RIP: 0010:rcu_read_unlock include/linux/rcupdate.h:899 [inline] RIP: 0010:class_rcu_destructor include/linux/rcupdate.h:1195 [inline] RIP: 0010:unwind_next_frame+0x3f9/0x20b0 arch/x86/kernel/unwind_orc.c:495 Code: 41 c7 45 00 00 00 00 00 31 ed e8 d2 1d 09 0a 85 c0 0f 85 50 06 00 00 48 c7 c7 20 95 3c 8e 48 8d 35 00 00 00 00 e8 07 05 2d 00 32 50 37 00 e9 3d fc ff ff 49 81 ff 00 70 06 92 72 0d 49 81 ff RSP: 0018:ffffc90000007248 EFLAGS: 00000286 RAX: 0000000000000000 RBX: ffffc90000007d20 RCX: ffffc9000000720c RDX: 0000000000000003 RSI: ffffffff8daa50c6 RDI: ffffffff8bf2b600 RBP: 0000000000000001 R08: 0000000000000001 R09: 000000000ac0d5af R10: 0000000000000002 R11: 00000000000846b6 R12: ffffc90000007308 R13: ffffc900000072b8 R14: ffffc90000007d20 R15: ffffc900000072ec FS: 0000000000000000(0000) GS:ffff8881248fa000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f63bbbd301a CR3: 000000000e184000 CR4: 00000000003526f0 Call Trace: arch_stack_walk+0x94/0x100 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:57 kasan_save_track+0x14/0x30 mm/kasan/common.c:78 unpoison_slab_object mm/kasan/common.c:340 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:366 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4953 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_noprof+0x25e/0x770 mm/slub.c:5270 __skb_ext_alloc+0x1a/0x80 net/core/skbuff.c:7025 skb_ext_add+0x242/0x7b0 net/core/skbuff.c:7129 nf_bridge_alloc include/net/netfilter/br_netfilter.h:12 [inline] br_nf_pre_routing_ipv6+0xca/0x8c0 net/bridge/br_netfilter_ipv6.c:172 br_nf_pre_routing+0x860/0x15b0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0xb28/0x14e0 net/bridge/br_input.c:442 __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 net/core/dev.c:6026 __netif_receive_skb_one_core+0xb0/0x1e0 net/core/dev.c:6137 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6252 process_backlog+0x4a2/0x1650 net/core/dev.c:6604 __napi_poll.constprop.0+0xb3/0x540 net/core/dev.c:7668 napi_poll net/core/dev.c:7731 [inline] net_rx_action+0x9f9/0xfa0 net/core/dev.c:7883 handle_softirqs+0x219/0x950 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xb2/0xf0 kernel/softirq.c:510 __local_bh_enable_ip+0x100/0x120 kernel/softirq.c:450 spin_unlock_bh include/linux/spinlock.h:396 [inline] neigh_periodic_work+0x6da/0xc10 net/core/neighbour.c:1039 process_one_work+0x9ba/0x1b20 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3421 kthread+0x3c5/0x780 kernel/kthread.c:463 ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 net_ratelimit: 6460 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d6:bc:e9:37:e6, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d6:bc:e9:37:e6, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 9790 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d6:bc:e9:37:e6, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:d6:bc:e9:37:e6, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)