bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8029/1:b..l
rcu: (detected by 0, t=10503 jiffies, g=118545, q=3235 ncpus=2)
task:syz.0.10264 state:R running task stack:26024 pid:8029 tgid:8027 ppid:6028 task_flags:0x400140 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7288
irqentry_exit+0x6f/0x90 kernel/entry/common.c:197
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 kernel/kcov.c:217
Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 a0 92 65 8b 15 e8 a4 e0 10 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00
RSP: 0018:ffffc900127e7558 EFLAGS: 00000297
RAX: ffffffff822e3acc RBX: 0000000000000000 RCX: ffff8880202d3c00
RDX: 0000000080000000 RSI: 0000000000004025 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffff888141140b8f R09: 1ffff11028228171
R10: dffffc0000000000 R11: ffffed1028228172 R12: ffff888141140b90
R13: 0000000000000001 R14: 000000000015c025 R15: 000000000015c025
__page_table_check_zero+0x1ec/0x530 mm/page_table_check.c:139
page_table_check_alloc include/linux/page_table_check.h:35 [inline]
post_alloc_hook+0x253/0x2a0 mm/page_alloc.c:1852
prep_new_page mm/page_alloc.c:1859 [inline]
get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858
__alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5148
__alloc_pages_noprof mm/page_alloc.c:5182 [inline]
alloc_pages_bulk_noprof+0x560/0x710 mm/page_alloc.c:5102
___alloc_pages_bulk mm/kasan/shadow.c:344 [inline]
__kasan_populate_vmalloc mm/kasan/shadow.c:368 [inline]
kasan_populate_vmalloc+0xba/0x1a0 mm/kasan/shadow.c:417
alloc_vmap_area+0xd51/0x1490 mm/vmalloc.c:2092
__get_vm_area_node+0x1f8/0x300 mm/vmalloc.c:3187
get_vm_area+0x80/0xb0 mm/vmalloc.c:3229
arena_map_alloc+0x256/0x520 kernel/bpf/arena.c:125
map_create+0xaa0/0x14d0 kernel/bpf/syscall.c:1480
__sys_bpf+0x60f/0x870 kernel/bpf/syscall.c:6011
__do_sys_bpf kernel/bpf/syscall.c:6139 [inline]
__se_sys_bpf kernel/bpf/syscall.c:6137 [inline]
__x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:6137
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5f1b58ebe9
RSP: 002b:00007f5f1c446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
RAX: ffffffffffffffda RBX: 00007f5f1b7b5fa0 RCX: 00007f5f1b58ebe9
RDX: 0000000000000050 RSI: 0000200000000480 RDI: 0000000000000000
RBP: 00007f5f1b611e19 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5f1b7b6038 R14: 00007f5f1b7b5fa0 R15: 00007ffd49a69d28
rcu: rcu_preempt kthread starved for 1429 jiffies! g118545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
rcu: RCU grace-period kthread stack dump:
task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000
Call Trace:
context_switch kernel/sched/core.c:5357 [inline]
__schedule+0x1798/0x4cc0 kernel/sched/core.c:6961
__schedule_loop kernel/sched/core.c:7043 [inline]
schedule+0x165/0x360 kernel/sched/core.c:7058
schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99
rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083
rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
rcu: Stack dump where RCU GP kthread last ran:
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 16782 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
RIP: 0010:addr_has_metadata mm/kasan/kasan.h:333 [inline]
RIP: 0010:check_region_inline mm/kasan/generic.c:177 [inline]
RIP: 0010:kasan_check_range+0x43/0x2c0 mm/kasan/generic.c:189
Code: 4c 8d 04 37 49 39 f8 0f 82 82 02 00 00 49 b9 00 00 00 00 00 80 ff ff eb 11 cc cc cc f3 0f 1e fa 49 b9 00 00 00 00 00 00 00 ff 0f 1e fa 4c 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 49 ba
RSP: 0018:ffffc90000a07430 EFLAGS: 00000002
RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81c75578
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa38430
RBP: ffffc90000a07510 R08: ffffffff8fa38438 R09: ffff800000000000
R10: dffffc0000000000 R11: ffffed1011d80433 R12: ffffffff8962600b
R13: 1ffff11011d80430 R14: dffffc0000000000 R15: 1ffff92000140e90
FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f82c3800218 CR3: 000000000df36000 CR4: 00000000003526f0
Call Trace:
instrument_atomic_read include/linux/instrumented.h:68 [inline]
_test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
cpumask_test_cpu include/linux/cpumask.h:646 [inline]
cpu_online include/linux/cpumask.h:1205 [inline]
trace_irq_disable+0x28/0x110 include/trace/events/preemptirq.h:36
__local_bh_enable_ip+0xce/0x1c0 kernel/softirq.c:389
local_bh_enable include/linux/bottom_half.h:33 [inline]
rcu_read_unlock_bh include/linux/rcupdate.h:910 [inline]
__dev_queue_xmit+0x1d79/0x3b50 net/core/dev.c:4752
dev_queue_xmit include/linux/netdevice.h:3361 [inline]
br_dev_queue_push_xmit+0x6c5/0x890 net/bridge/br_forward.c:53
NF_HOOK+0x618/0x6b0 include/linux/netfilter.h:318
br_nf_post_routing+0xb66/0xfe0 net/bridge/br_netfilter_hooks.c:969
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xc2/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK+0x215/0x3c0 include/linux/netfilter.h:316
br_forward_finish+0xd3/0x130 net/bridge/br_forward.c:66
br_nf_hook_thresh net/bridge/br_netfilter_hooks.c:-1 [inline]
br_nf_forward_finish+0xa40/0xe60 net/bridge/br_netfilter_hooks.c:665
NF_HOOK+0x618/0x6b0 include/linux/netfilter.h:318
br_nf_forward_ip+0x647/0x7e0 net/bridge/br_netfilter_hooks.c:719
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xc2/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK+0x215/0x3c0 include/linux/netfilter.h:316
__br_forward+0x41e/0x600 net/bridge/br_forward.c:115
br_handle_frame_finish+0x14b4/0x19b0 net/bridge/br_input.c:221
br_nf_hook_thresh+0x3c3/0x4a0 net/bridge/br_netfilter_hooks.c:-1
br_nf_pre_routing_finish_ipv6+0x948/0xd00 net/bridge/br_netfilter_ipv6.c:-1
NF_HOOK include/linux/netfilter.h:318 [inline]
br_nf_pre_routing_ipv6+0x37e/0x6b0 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:283 [inline]
br_handle_frame+0x982/0x14c0 net/bridge/br_input.c:434
__netif_receive_skb_core+0x10b9/0x4020 net/core/dev.c:5878
__netif_receive_skb_one_core net/core/dev.c:5989 [inline]
__netif_receive_skb+0x72/0x380 net/core/dev.c:6104
process_backlog+0x60e/0x14f0 net/core/dev.c:6456
__napi_poll+0xc4/0x360 net/core/dev.c:7506
napi_poll net/core/dev.c:7569 [inline]
net_rx_action+0x707/0xe30 net/core/dev.c:7696
handle_softirqs+0x283/0x870 kernel/softirq.c:579
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1050
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x83/0x90 kernel/kcov.c:316
Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90003f5f338 EFLAGS: 00000293
RAX: ffffffff817e628a RBX: 000000000000023c RCX: 0000000000000000
RDX: ffff888027b93c00 RSI: 000000000000023c RDI: 00000000000003f1
RBP: ffffc90003f5f630 R08: 60651c76a9440e82 R09: 5c7cb5bdcf36848b
R10: 666e22f5e87a58fb R11: 7e9f7b2a0029fa2b R12: 0000000000000012
R13: 0000000000000002 R14: 0000000000000000 R15: ffffc90003f5f3e0
curve25519_ever64_base arch/x86/crypto/curve25519-x86_64.c:1575 [inline]
curve25519_base_arch+0x3fa/0x2fb0 arch/x86/crypto/curve25519-x86_64.c:1610
curve25519_generate_public include/crypto/curve25519.h:55 [inline]
wg_noise_handshake_create_initiation+0x232/0x7e0 drivers/net/wireguard/noise.c:542
wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline]
wg_packet_handshake_send_worker+0x163/0x320 drivers/net/wireguard/send.c:51
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319
worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
kthread+0x70e/0x8a0 kernel/kthread.c:463
ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
net_ratelimit: 61795 callbacks suppressed
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:3a:2c:ea:05:09, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:3a:2c:ea:05:09, vlan:0)
bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:3a:2c:ea:05:09, vlan:0)