bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:82:fa:0e:11:54, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30/1:b..l P1318/1:b..l P5808/1:b..l rcu: (detected by 0, t=10503 jiffies, g=9717, q=478 ncpus=2) task:syz-executor state:R running task stack:21048 pid:5808 tgid:5808 ppid:5806 task_flags:0x400100 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7087 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:unwind_next_frame+0xd/0x22d0 arch/x86/kernel/unwind_orc.c:469 Code: 7c 91 4c 89 f7 e8 f3 5e b9 00 eb 87 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 81 ec 98 00 00 00 49 89 fd 49 bc 00 00 00 00 00 fc ff df 48 RSP: 0018:ffffc90003def6d0 EFLAGS: 00000283 RAX: ffffc90003def7f0 RBX: ffffc90003def798 RCX: 0000000080000000 RDX: dffffc0000000000 RSI: ffffc90003de8000 RDI: ffffc90003def760 RBP: 1ffff920007bdeed R08: ffffc90003def750 R09: 0000000000000000 R10: ffffc90003def7b0 R11: fffff520007bdef8 R12: 1ffff920007bdeee R13: ffffc90003def770 R14: ffffc90003def760 R15: ffffc90003def768 __unwind_start+0x59a/0x740 arch/x86/kernel/unwind_orc.c:760 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe5/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0xe04/0x10e0 mm/page_alloc.c:2660 discard_slab mm/slub.c:2684 [inline] __put_partials+0x160/0x1c0 mm/slub.c:3153 put_cpu_partial+0x17c/0x250 mm/slub.c:3228 __slab_free+0x290/0x380 mm/slub.c:4479 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x23/0xb0 mm/kasan/common.c:385 kasan_kmalloc include/linux/kasan.h:260 [inline] __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4325 kmalloc_noprof include/linux/slab.h:901 [inline] kzalloc_noprof include/linux/slab.h:1037 [inline] alloc_pipe_info+0xeb/0x4d0 fs/pipe.c:799 get_pipe_inode fs/pipe.c:891 [inline] create_pipe_files+0x86/0x7d0 fs/pipe.c:923 __do_pipe_flags+0x48/0x2d0 fs/pipe.c:980 do_pipe2+0xd4/0x310 fs/pipe.c:1031 __do_sys_pipe2 fs/pipe.c:1049 [inline] __se_sys_pipe2 fs/pipe.c:1047 [inline] __x64_sys_pipe2+0x5a/0x70 fs/pipe.c:1047 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f24f418bb09 RSP: 002b:00007fff096bc2c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 RAX: ffffffffffffffda RBX: 0000555573505c50 RCX: 00007f24f418bb09 RDX: 0000000000000005 RSI: 0000000000000000 RDI: 00007fff096bc2d8 RBP: 00007fff096bc690 R08: 0000000000000007 R09: 00005555735076a0 R10: 1477da40f444a5c4 R11: 0000000000000246 R12: 00007fff096bc6f0 R13: 0000555573507370 R14: 00007fff096bc410 R15: 0000555573508a10 task:kworker/u8:6 state:R running task stack:20920 pid:1318 tgid:1318 ppid:2 task_flags:0x4248060 flags:0x00004000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6944 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6968 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 unwind_next_frame+0x18f8/0x22d0 arch/x86/kernel/unwind_orc.c:672 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 save_stack+0xfb/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x76/0x430 mm/page_owner.c:297 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1127 [inline] free_frozen_pages+0xe04/0x10e0 mm/page_alloc.c:2660 discard_slab mm/slub.c:2684 [inline] __put_partials+0x160/0x1c0 mm/slub.c:3153 put_cpu_partial+0x17c/0x250 mm/slub.c:3228 __slab_free+0x290/0x380 mm/slub.c:4479 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x9a/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x14f/0x170 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x23/0x80 mm/kasan/common.c:329 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4115 [inline] slab_alloc_node mm/slub.c:4164 [inline] kmem_cache_alloc_noprof+0x1d9/0x380 mm/slub.c:4171 ext4_mb_new_blocks+0x665/0x4e00 fs/ext4/mballoc.c:6197 ext4_ext_map_blocks+0x1be0/0x7d30 fs/ext4/extents.c:4379 ext4_map_create_blocks fs/ext4/inode.c:516 [inline] ext4_map_blocks+0x8bf/0x1990 fs/ext4/inode.c:702 mpage_map_one_extent fs/ext4/inode.c:2219 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2272 [inline] ext4_do_writepages+0x21c7/0x3df0 fs/ext4/inode.c:2735 ext4_writepages+0x213/0x3c0 fs/ext4/inode.c:2824 do_writepages+0x35f/0x880 mm/page-writeback.c:2687 __writeback_single_inode+0x14f/0x10d0 fs/fs-writeback.c:1680 writeback_sb_inodes+0x820/0x1360 fs/fs-writeback.c:1976 __writeback_inodes_wb+0x11b/0x260 fs/fs-writeback.c:2047 wb_writeback+0x427/0xb80 fs/fs-writeback.c:2158 wb_check_old_data_flush fs/fs-writeback.c:2262 [inline] wb_do_writeback fs/fs-writeback.c:2315 [inline] wb_workfn+0xb94/0x1080 fs/fs-writeback.c:2343 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 task:khungtaskd state:R running task stack:28952 pid:30 tgid:30 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7087 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline] RIP: 0010:watchdog+0x30b/0x10a0 kernel/hung_task.c:399 Code: 48 c1 e9 03 48 89 4c 24 60 42 80 3c 31 00 48 89 44 24 10 74 15 48 89 d3 48 8b 7c 24 10 e8 cd 91 64 00 48 89 da 48 8b 44 24 10 <48> 8b 18 48 83 c3 10 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 0e 48 RSP: 0018:ffffc90000a67da0 EFLAGS: 00010246 RAX: ffff88802cbbe320 RBX: ffff88802cbbdf08 RCX: 1ffff11005977c64 RDX: ffff88802cbbdf08 RSI: 0000000000000000 RDI: 0000000000000002 RBP: ffff8880280786d0 R08: ffffffff81c1e657 R09: 1ffffffff28a2308 R10: dffffc0000000000 R11: fffffbfff28a2309 R12: 7fffffffffffffff R13: 1ffffffff1d02040 R14: dffffc0000000000 R15: 00000000003ffef2 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: rcu_preempt kthread starved for 6334 jiffies! g9717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26032 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x18bc/0x4c40 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2024 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2226 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 RIP: 0010:__find_rr_leaf+0x36e/0x8e0 net/ipv6/route.c:800 Code: 05 e8 e6 94 23 f7 49 bf 00 00 00 00 00 fc ff df 4c 8b 74 24 48 4c 8b 6c 24 40 49 83 c4 08 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 e7 e8 18 4e 88 f7 4d 8b 24 24 e8 6f 4f 62 01 89 c3 31 RSP: 0018:ffffc90000006fc0 EFLAGS: 00000246 RAX: 1ffff110042fbe01 RBX: ffff8880217df0b8 RCX: ffffffff8e896580 RDX: 0000000000000100 RSI: 00000000fffffffd RDI: 00000000fffffffd RBP: ffffc90000007138 R08: ffffffff8a9e2e3d R09: ffffc90000007270 R10: ffffc90000007260 R11: fffff52000000e1a R12: ffff8880217df008 R13: 0000000000000000 R14: ffffc90000007240 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffdecd41e68 CR3: 000000000e938000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: find_rr_leaf net/ipv6/route.c:856 [inline] rt6_select net/ipv6/route.c:900 [inline] fib6_table_lookup+0x413/0xbb0 net/ipv6/route.c:2195 ip6_pol_route+0x273/0x15d0 net/ipv6/route.c:2231 pol_lookup_func include/net/ip6_fib.h:616 [inline] fib6_rule_lookup+0x58c/0x790 net/ipv6/fib6_rules.c:119 ip6_route_input_lookup net/ipv6/route.c:2300 [inline] ip6_route_input+0x859/0xd90 net/ipv6/route.c:2596 ip6_rcv_finish+0x140/0x3d0 net/ipv6/ip6_input.c:77 NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5941 process_backlog+0x662/0x15b0 net/core/dev.c:6289 __napi_poll+0xcb/0x490 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:7297 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:92 [inline] RIP: 0010:acpi_safe_halt+0x21/0x30 drivers/acpi/processor_idle.c:112 Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 0a 89 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffffff8e807ca8 EFLAGS: 00000246 RAX: ffffffff8e896580 RBX: ffff8881442ad864 RCX: 000000000006e3b9 RDX: 0000000000000001 RSI: ffff8881442ad800 RDI: ffff8881442ad864 RBP: 000000000003a938 R08: ffff8880b863799b R09: 1ffff110170c6f33 R10: dffffc0000000000 R11: ffffffff8c00a010 R12: ffff888143ee5000 R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f325460 acpi_idle_enter+0xe4/0x140 drivers/acpi/processor_idle.c:699 cpuidle_enter_state+0x109/0x470 drivers/cpuidle/cpuidle.c:268 cpuidle_enter+0x5d/0xa0 drivers/cpuidle/cpuidle.c:389 call_cpuidle kernel/sched/idle.c:155 [inline] cpuidle_idle_call kernel/sched/idle.c:230 [inline] do_idle+0x372/0x5c0 kernel/sched/idle.c:325 cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:423 rest_init+0x2dc/0x300 init/main.c:743 start_kernel+0x484/0x510 init/main.c:1099 x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:515 x86_64_start_kernel+0x66/0x70 arch/x86/kernel/head64.c:496 common_startup_64+0x13e/0x147 bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:82:fa:0e:11:54, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:82:fa:0e:11:54, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)