bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:9e:4f:5a:40:d9, vlan:1)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P22893/1:b..l
rcu: 	(detected by 0, t=10503 jiffies, g=80669, q=1235 ncpus=2)
task:syz.1.4901      state:R  running task     stack:28312 pid:22893 tgid:22885 ppid:17106  task_flags:0x40044c flags:0x00080002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552
 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
 irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 kernel/rcu/update.c:319
Code: 48 8d 3d a3 cf 8c 04 48 c7 c6 96 65 fa 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 31 c0 83 3d 93 3e 89 04 00 74 1d 83 3d 6a 70 89 04 00
RSP: 0018:ffffc900032e7538 EFLAGS: 00000292
RAX: 4109cf42eccaa500 RBX: ffffffff82315b88 RCX: 0000000080000001
RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0
RBP: 1ffff9200065cec4 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc900032e7638 R11: ffffffff81b10630 R12: dffffc0000000000
R13: ffffffff8176a21f R14: ffffc900032e75e8 R15: 1ffff9200065cebd
 rcu_read_lock include/linux/rcupdate.h:841 [inline]
 class_rcu_constructor include/linux/rcupdate.h:1183 [inline]
 unwind_next_frame+0xb5/0x2550 arch/x86/kernel/unwind_orc.c:495
 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122
 save_stack+0x122/0x230 mm/page_owner.c:165
 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938
 __slab_free+0x274/0x2c0 mm/slub.c:5672
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4610 [inline]
 slab_alloc_node mm/slub.c:4939 [inline]
 kmem_cache_alloc_noprof+0x2b8/0x650 mm/slub.c:4946
 taskstats_tgid_alloc kernel/taskstats.c:576 [inline]
 taskstats_exit+0x376/0xac0 kernel/taskstats.c:615
 do_exit+0x6ad/0x2360 kernel/exit.c:974
 do_group_exit+0x22d/0x2f0 kernel/exit.c:1147
 get_signal+0x121b/0x12c0 kernel/signal.c:3038
 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337
 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
 exit_to_user_mode_loop+0x104/0x730 kernel/entry/common.c:101
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
 do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8f95f9ce59
RSP: 002b:00007f8f96edf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f8f96216188 RCX: 00007f8f95f9ce59
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f96216188
RBP: 00007f8f96216180 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f8f96216218 R14: 00007fff5346c0e0 R15: 00007fff5346c1c8
 </TASK>
rcu: rcu_preempt kthread starved for 336 jiffies! g80669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt     state:R  running task     stack:27176 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5504 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228
 __schedule_loop kernel/sched/core.c:7307 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7322
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123
 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
rcu: Stack dump where RCU GP kthread last ran:
CPU: 0 UID: 0 PID: 16400 Comm: ipvs-e:8:0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:get_current arch/x86/include/asm/current.h:25 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 kernel/kcov.c:300
Code: c3 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 d8 46 74 11 65 8b 0d f9 46 74 11 81 e1 00 01 ff 00 74
RSP: 0018:ffffc90000006890 EFLAGS: 00000246
RAX: ffffffff8a565dc0 RBX: ffff8880914dc0df RCX: ffff88802cf98000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000000000000d R08: ffffc90000006ba0 R09: ffffc90000006bb0
R10: ffffc90000006a00 R11: fffff52000000d42 R12: 0000000000000003
R13: 0000000000000000 R14: 1ffff1101229b81b R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7e131e8158 CR3: 000000007e0fc000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 find_match+0x60/0xb40 net/ipv6/route.c:780
 __find_rr_leaf+0x243/0x740 net/ipv6/route.c:872
 find_rr_leaf net/ipv6/route.c:893 [inline]
 rt6_select net/ipv6/route.c:937 [inline]
 fib6_table_lookup+0x3c6/0xae0 net/ipv6/route.c:2255
 ip6_pol_route+0x229/0x14d0 net/ipv6/route.c:2292
 pol_lookup_func include/net/ip6_fib.h:669 [inline]
 fib6_rule_lookup+0x556/0x730 net/ipv6/fib6_rules.c:123
 ip6_route_input_lookup net/ipv6/route.c:2363 [inline]
 ip6_route_input+0x78d/0xb20 net/ipv6/route.c:2666
 ip6_rcv_finish+0x141/0x280 net/ipv6/ip6_input.c:117
 ip_sabotage_in+0x1e1/0x270 net/bridge/br_netfilter_hooks.c:988
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_slow+0xc5/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:273 [inline]
 NF_HOOK+0x21f/0x3c0 include/linux/netfilter.h:316
 __netif_receive_skb_one_core net/core/dev.c:6206 [inline]
 __netif_receive_skb net/core/dev.c:6319 [inline]
 netif_receive_skb_internal net/core/dev.c:6405 [inline]
 netif_receive_skb+0x278/0xbf0 net/core/dev.c:6464
 NF_HOOK+0xa4/0x3a0 include/linux/netfilter.h:318
 br_handle_frame_finish+0x1192/0x1990 net/bridge/br_input.c:-1
 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1
 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1
 NF_HOOK include/linux/netfilter.h:318 [inline]
 br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183
 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
 br_handle_frame+0x127f/0x1510 net/bridge/br_input.c:442
 __netif_receive_skb_core+0x989/0x30b0 net/core/dev.c:6093
 __netif_receive_skb_one_core net/core/dev.c:6204 [inline]
 __netif_receive_skb net/core/dev.c:6319 [inline]
 process_backlog+0x706/0x1860 net/core/dev.c:6670
 __napi_poll+0xaa/0x330 net/core/dev.c:7729
 napi_poll net/core/dev.c:7792 [inline]
 net_rx_action+0x61d/0xf50 net/core/dev.c:7949
 handle_softirqs+0x225/0x840 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:finish_task_switch+0x417/0xbc0 kernel/sched/core.c:5361
Code: 03 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 33 eb 15 0a e8 ce 82 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
RSP: 0018:ffffc90003f477e0 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffff8880b863bda0 RCX: 0000000080000002
RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8194a022
RBP: ffffc90003f47830 R08: ffffffff903117f7 R09: 1ffffffff20622fe
R10: dffffc0000000000 R11: fffffbfff20622ff R12: ffff88802cf98000
R13: ffff8880b863bd68 R14: dffffc0000000000 R15: 1ffff110170c77b4
 context_switch kernel/sched/core.c:5507 [inline]
 __schedule+0x17e1/0x56c0 kernel/sched/core.c:7228
 __schedule_loop kernel/sched/core.c:7307 [inline]
 schedule+0x164/0x360 kernel/sched/core.c:7322
 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99
 ip_vs_estimation_kthread+0x29a6/0x38f0 net/netfilter/ipvs/ip_vs_est.c:213
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:9e:4f:5a:40:d9, vlan:1)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:9e:4f:5a:40:d9, vlan:1)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:9e:4f:5a:40:d9, vlan:1)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:9e:4f:5a:40:d9, vlan:1)
bridge0: received packet on veth1_to_bridge with own address as source address (addr:b6:9e:4f:5a:40:d9, vlan:1)