rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6423/1:b..l rcu: (detected by 0, t=10503 jiffies, g=9421, q=451 ncpus=2) task:syz-executor state:R running task stack:25344 pid:6423 tgid:6423 ppid:5830 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x1850/0x4c30 kernel/sched/core.c:6756 preempt_schedule_common+0x84/0xd0 kernel/sched/core.c:6935 preempt_schedule+0xe1/0xf0 kernel/sched/core.c:6959 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 __raw_spin_unlock include/linux/spinlock_api_smp.h:143 [inline] _raw_spin_unlock+0x3e/0x50 kernel/locking/spinlock.c:186 spin_unlock include/linux/spinlock.h:391 [inline] zap_pte_range mm/memory.c:1705 [inline] zap_pmd_range mm/memory.c:1753 [inline] zap_pud_range mm/memory.c:1782 [inline] zap_p4d_range mm/memory.c:1803 [inline] unmap_page_range+0x36c3/0x4040 mm/memory.c:1824 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1914 exit_mmap+0x275/0xc20 mm/mmap.c:1668 __mmput+0x115/0x3c0 kernel/fork.c:1353 exit_mm+0x220/0x310 kernel/exit.c:570 do_exit+0x9b2/0x28e0 kernel/exit.c:925 do_group_exit+0x207/0x2c0 kernel/exit.c:1087 get_signal+0x16b2/0x1750 kernel/signal.c:3017 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] irqentry_exit_to_user_mode+0x7e/0x250 kernel/entry/common.c:231 exc_page_fault+0x590/0x8b0 arch/x86/mm/fault.c:1542 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fb32f77c593 RSP: 002b:00007fff2d9cc428 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb32f77c593 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 R10: 00005555776387d0 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000001491a R14: 00007fff2d9cc5b0 R15: 0000000000000019 rcu: rcu_preempt kthread starved for 10536 jiffies! g9421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:26000 pid:17 tgid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5369 [inline] __schedule+0x1850/0x4c30 kernel/sched/core.c:6756 __schedule_loop kernel/sched/core.c:6833 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6848 schedule_timeout+0x15a/0x290 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x2df/0x1330 kernel/rcu/tree.c:2045 rcu_gp_kthread+0xa7/0x3b0 kernel/rcu/tree.c:2247 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc2-syzkaller-00131-g429fde2d81bc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 RIP: 0010:do_raw_write_seqcount_barrier include/linux/seqlock.h:552 [inline] RIP: 0010:__run_hrtimer kernel/time/hrtimer.c:1717 [inline] RIP: 0010:__hrtimer_run_queues+0x33e/0xd30 kernel/time/hrtimer.c:1803 Code: 28 00 74 08 48 89 df e8 40 fe 78 00 4c 89 33 48 8b 54 24 18 48 89 d6 48 c1 ee 03 42 0f b6 04 2e 84 c0 0f 85 dd 04 00 00 ff 02 <48> 89 74 24 60 42 0f b6 04 2e 84 c0 0f 85 f3 04 00 00 ff 02 4c 89 RSP: 0018:ffffc90000a18d40 EFLAGS: 00000006 RAX: 0000000000000000 RBX: ffff8880b872c948 RCX: ffff88801d2f8000 RDX: ffff8880b872c910 RSI: 1ffff110170e5922 RDI: ffffffff8c5f9720 RBP: ffffc90000a18ea0 R08: ffffffff818cf533 R09: 1ffffffff2032c7e R10: dffffc0000000000 R11: fffffbfff2032c7f R12: 1ffff110170e592b R13: dffffc0000000000 R14: ffff8880b872d198 R15: ffff8880b872c900 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffc1d7c73c CR3: 0000000060404000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hrtimer_interrupt+0x403/0xa40 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x110/0x420 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__find_rr_leaf+0x155/0x8e0 net/ipv6/route.c:804 Code: 40 4c 89 74 24 48 4d 85 f6 74 3d 49 8d 9c 24 90 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 9b 04 00 00 44 8b 2b <44> 89 ef 8b 5c 24 74 89 de e8 8d 2c 31 f7 41 39 dd 0f 85 e4 05 00 RSP: 0018:ffffc900001e6180 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff888030964890 RCX: ffff88801d2f8000 RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900001e62f8 R08: ffffffff8a6e35b0 R09: ffffc900001e6430 R10: ffffc900001e6420 R11: fffff5200003cc52 R12: ffff888030964800 R13: 0000000000000100 R14: ffffc900001e6400 R15: dffffc0000000000 find_rr_leaf net/ipv6/route.c:856 [inline] rt6_select net/ipv6/route.c:900 [inline] fib6_table_lookup+0x413/0xbb0 net/ipv6/route.c:2195 ip6_pol_route+0x273/0x15d0 net/ipv6/route.c:2231 pol_lookup_func include/net/ip6_fib.h:616 [inline] fib6_rule_lookup+0x58c/0x790 net/ipv6/fib6_rules.c:117 ip6_route_input_lookup net/ipv6/route.c:2300 [inline] ip6_route_input+0x859/0xd90 net/ipv6/route.c:2596 ip6_rcv_finish+0x144/0x180 net/ipv6/ip6_input.c:77 ip_sabotage_in+0x203/0x290 net/bridge/br_netfilter_hooks.c:1021 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5672 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5785 netif_receive_skb_internal net/core/dev.c:5871 [inline] netif_receive_skb+0x1e8/0x890 net/core/dev.c:5930 NF_HOOK+0x9e/0x400 include/linux/netfilter.h:314 br_handle_frame_finish+0x18ed/0x1fe0 br_nf_hook_thresh+0x472/0x590 br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x379/0x770 net/bridge/br_netfilter_ipv6.c:184 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424 __netif_receive_skb_core+0x14eb/0x4690 net/core/dev.c:5566 __netif_receive_skb_one_core net/core/dev.c:5670 [inline] __netif_receive_skb+0x12f/0x650 net/core/dev.c:5785 process_backlog+0x662/0x15b0 net/core/dev.c:6117 __napi_poll+0xcb/0x490 net/core/dev.c:6883 napi_poll net/core/dev.c:6952 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:7074 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561 run_ksoftirqd+0xca/0x130 kernel/softirq.c:950 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 net_ratelimit: 7876 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) net_ratelimit: 9675 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:13:04:f9:dd:ef, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)