bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4975/1:b..l P17083/1:b..l P5282/1:b..l P5356/1:b..l rcu: (detected by 0, t=10502 jiffies, g=257349, q=1614 ncpus=2) task:crond state:R running task stack:24568 pid:5356 tgid:5356 ppid:1 task_flags:0x400000 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5504 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:unwind_next_frame+0x19cf/0x2550 arch/x86/kernel/unwind_orc.c:-1 Code: 00 00 48 0f bf 03 49 01 c0 49 8d 56 40 4c 89 f7 4c 89 c6 e8 33 0e 00 00 84 c0 0f 84 4e 01 00 00 48 bb 00 00 00 00 00 fc ff df <48> 8b 44 24 10 0f b6 04 18 84 c0 0f 85 7b 08 00 00 40 b5 01 8b 44 RSP: 0018:ffffc900036ff820 EFLAGS: 00000202 RAX: 1ffff920006dff01 RBX: dffffc0000000000 RCX: 0000000000000001 RDX: ffffc900036ff908 RSI: dffffc0000000000 RDI: ffffc900036ffdb0 RBP: 1ffffffff21aaa3b R08: ffffc900036ffdb0 R09: 0000000000000000 R10: ffffc900036ff918 R11: fffff520006dff25 R12: dffffc0000000000 R13: ffffffff90d551d9 R14: ffffc900036ff8c8 R15: ffffc900036ff910 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5672 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4610 [inline] slab_alloc_node mm/slub.c:4939 [inline] kmem_cache_alloc_noprof+0x2b8/0x650 mm/slub.c:4946 alloc_filename fs/namei.c:147 [inline] do_getname+0x2e/0x250 fs/namei.c:187 class_filename_flags_constructor include/linux/fs.h:2566 [inline] do_sys_openat2+0xcc/0x200 fs/open.c:1394 do_sys_open fs/open.c:1401 [inline] __do_sys_openat fs/open.c:1417 [inline] __se_sys_openat fs/open.c:1412 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1412 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4fefb74c3a RSP: 002b:00007ffd82b19028 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055c33f1182a0 RCX: 00007f4fefb74c3a RDX: 0000000000080000 RSI: 00007f4fefc1145a RDI: 00000000ffffff9c RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000206 R12: 00007f4fefc0f7f4 R13: 00007f4fefc0f7f4 R14: 0000000000000001 R15: 000000000000002a task:dhcpcd state:R running task stack:22072 pid:5282 tgid:5282 ppid:5281 task_flags:0x400140 flags:0x00080800 Call Trace: context_switch kernel/sched/core.c:5504 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:__reset_page_owner+0x55/0x1f0 mm/page_owner.c:311 Code: 0f 84 52 01 00 00 48 8b 0d 98 e2 70 0c 48 8d 1c 08 48 83 c3 08 48 89 d9 48 c1 e9 03 48 ba 00 00 00 00 00 fc ff df 0f b6 0c 11 <84> c9 0f 85 49 01 00 00 8b 1b 48 89 c7 e8 59 b8 01 00 bf 00 20 00 RSP: 0018:ffffc900034ff940 EFLAGS: 00000a02 RAX: ffff88801d4f0780 RBX: ffff88801d4f0790 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffff940002980c7 R12: ffffea00014c0600 R13: 1ffffd40002980c1 R14: ffffea00014c0600 R15: 00000111e8ca8521 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5672 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_kmalloc+0x22/0xb0 mm/kasan/common.c:406 kasan_kmalloc include/linux/kasan.h:263 [inline] __kmalloc_cache_noprof+0x318/0x660 mm/slub.c:5451 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1286 [inline] ref_tracker_alloc+0x15b/0x4b0 lib/ref_tracker.c:270 __netns_tracker_alloc include/net/net_namespace.h:367 [inline] netns_tracker_alloc include/net/net_namespace.h:376 [inline] get_net_track+0x16e/0x230 include/net/net_namespace.h:393 sk_alloc+0x1da/0x390 net/core/sock.c:2325 unix_create1+0xb0/0x7c0 net/unix/af_unix.c:-1 unix_create+0x14c/0x1d0 net/unix/af_unix.c:1167 __sock_create+0x4b3/0x9d0 net/socket.c:1651 sock_create net/socket.c:1709 [inline] __sys_socketpair+0x1c4/0x560 net/socket.c:1856 __do_sys_socketpair net/socket.c:1909 [inline] __se_sys_socketpair net/socket.c:1906 [inline] __x64_sys_socketpair+0x9b/0xb0 net/socket.c:1906 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9a5e79f73a RSP: 002b:00007fff4d1ce1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 RAX: ffffffffffffffda RBX: 0000556bd9700710 RCX: 00007f9a5e79f73a RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 RBP: 00007fff4d1ee5e0 R08: 0000000000000000 R09: 0000000000000001 R10: 00007fff4d1ce1d0 R11: 0000000000000246 R12: 00007fff4d1ce1d0 R13: 0000000000000001 R14: 0000000000000000 R15: 0000556bba4eeac0 task:kworker/u8:27 state:R running task stack:21656 pid:17083 tgid:17083 ppid:2 task_flags:0x24248160 flags:0x00080000 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: context_switch kernel/sched/core.c:5504 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8f0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:deref_stack_reg arch/x86/kernel/unwind_orc.c:422 [inline] RIP: 0010:unwind_next_frame+0xcbc/0x2550 arch/x86/kernel/unwind_orc.c:614 Code: c0 20 c8 3c 01 0f 85 76 0e 00 00 48 89 d7 e8 eb 23 00 00 48 89 c3 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 20 42 80 3c 20 00 <4d> 8d 7e 48 74 08 4c 89 ff e8 56 9d ba 00 49 89 1f 48 8b 44 24 38 RSP: 0018:ffffc900051ee700 EFLAGS: 00000246 RAX: 1ffff92000a3dcfe RBX: ffffffff823b0521 RCX: 1ffff92000a3dc01 RDX: ffffc900051eea18 RSI: 0000000000000002 RDI: ffffc900051eea18 RBP: 1ffffffff21a8e09 R08: ffffc900051eea20 R09: 0000000000000000 R10: ffffc900051ee7f8 R11: ffffffff81b10630 R12: dffffc0000000000 R13: ffffc900051f0000 R14: ffffc900051ee7a8 R15: ffffc900051e8000 arch_stack_walk+0x11b/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0xa9/0x100 kernel/stacktrace.c:122 save_stack+0x122/0x230 mm/page_owner.c:165 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:320 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1397 [inline] __free_frozen_pages+0xc0d/0xd20 mm/page_alloc.c:2938 __slab_free+0x274/0x2c0 mm/slub.c:5672 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4610 [inline] slab_alloc_node mm/slub.c:4939 [inline] kmem_cache_alloc_noprof+0x2b8/0x650 mm/slub.c:4946 ext4_init_io_end+0x29/0x130 fs/ext4/page-io.c:310 ext4_do_writepages+0xc06/0x47a0 fs/ext4/inode.c:2889 ext4_writepages+0x241/0x3b0 fs/ext4/inode.c:3042 do_writepages+0x338/0x560 mm/page-writeback.c:2571 __writeback_single_inode+0x12e/0xf90 fs/fs-writeback.c:1787 writeback_sb_inodes+0x9de/0x1b00 fs/fs-writeback.c:2079 __writeback_inodes_wb+0x114/0x240 fs/fs-writeback.c:2155 wb_writeback+0x42f/0xad0 fs/fs-writeback.c:2266 wb_check_old_data_flush fs/fs-writeback.c:2370 [inline] wb_do_writeback fs/fs-writeback.c:2449 [inline] wb_workfn+0xc92/0x10f0 fs/fs-writeback.c:2477 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3397 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3478 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 task:klogd state:R running task stack:23632 pid:4975 tgid:4975 ppid:1 task_flags:0x400100 flags:0x00080800 Call Trace: context_switch kernel/sched/core.c:5504 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7409 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:179 [inline] _raw_spin_unlock_irqrestore+0x74/0x80 kernel/locking/spinlock.c:198 spin_unlock_irqrestore include/linux/spinlock.h:408 [inline] __wake_up_common_lock+0x195/0x1f0 kernel/sched/wait.c:127 sock_def_readable+0x1eb/0x550 net/core/sock.c:3656 unix_dgram_sendmsg+0xd30/0x17b0 net/unix/af_unix.c:2292 sock_sendmsg_nosec net/socket.c:775 [inline] __sock_sendmsg net/socket.c:790 [inline] __sys_sendto+0x626/0x6c0 net/socket.c:2252 __do_sys_sendto net/socket.c:2259 [inline] __se_sys_sendto net/socket.c:2255 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2255 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f489aacd407 RSP: 002b:00007fffaf0d35d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f489a97dc80 RCX: 00007f489aacd407 RDX: 00000000000000a0 RSI: 00007fffaf0d3710 RDI: 0000000000000003 RBP: 00007fffaf0d3b40 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffaf0d3b58 R13: 00007fffaf0d3710 R14: 0000000000000085 R15: 00007fffaf0d3710 rcu: rcu_preempt kthread starved for 393 jiffies! g257349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:28408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5504 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7228 __schedule_loop kernel/sched/core.c:7307 [inline] schedule+0x164/0x360 kernel/sched/core.c:7322 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 30774 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker RIP: 0010:kasan_mem_to_shadow include/linux/kasan.h:65 [inline] RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:140 [inline] RIP: 0010:memory_is_poisoned mm/kasan/generic.c:172 [inline] RIP: 0010:check_region_inline mm/kasan/generic.c:191 [inline] RIP: 0010:kasan_check_range+0x48/0x2c0 mm/kasan/generic.c:200 Code: 39 f8 0f 82 36 02 00 00 49 b9 00 00 00 00 00 80 ff ff eb 0d cc cc cc 49 b9 00 00 00 00 00 00 00 ff 4c 39 cf 0f 82 14 02 00 00 <49> 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 RSP: 0018:ffffc90000a088a8 EFLAGS: 00000002 RAX: 0000000000000001 RBX: ffffffff9a6ce958 RCX: ffffffff81a266bd RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a6ce958 RBP: ffff88804c42d700 R08: ffffffff9a6ce95c R09: ffff800000000000 R10: dffffc0000000000 R11: fffff52000141114 R12: dffffc0000000000 R13: ffff888179f9b000 R14: ffffffff9a6ce95c R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd5d6be8158 CR3: 0000000012624000 CR4: 00000000003526f0 Call Trace: instrument_atomic_read include/linux/instrumented.h:82 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:32 [inline] queued_spin_is_locked include/asm-generic/qspinlock.h:57 [inline] debug_spin_unlock kernel/locking/spinlock_debug.c:101 [inline] do_raw_spin_unlock+0x4d/0x210 kernel/locking/spinlock_debug.c:141 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:177 [inline] _raw_spin_unlock_irqrestore+0x23/0x80 kernel/locking/spinlock.c:198 __debug_check_no_obj_freed lib/debugobjects.c:1163 [inline] debug_check_no_obj_freed+0x39e/0x450 lib/debugobjects.c:1184 slab_free_hook mm/slub.c:2631 [inline] slab_free mm/slub.c:6310 [inline] kmem_cache_free+0xfd/0x650 mm/slub.c:6437 kfree_skb_reason include/linux/skbuff.h:1325 [inline] kfree_skb include/linux/skbuff.h:1334 [inline] ip6_mc_input+0x909/0xbc0 net/ipv6/ip6_input.c:638 NF_HOOK+0x336/0x3c0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x774/0x1860 net/core/dev.c:6670 __napi_poll+0xaa/0x330 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7949 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 blake2s_compress+0xfa/0x1c00 lib/crypto/x86/blake2s.h:42 blake2s_update+0x140/0x450 lib/crypto/blake2s.c:119 hmac+0x2d1/0x3b0 drivers/net/wireguard/noise.c:332 kdf+0xff/0x290 drivers/net/wireguard/noise.c:360 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_create_initiation+0x460/0x810 drivers/net/wireguard/noise.c:560 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x18c/0x370 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3314 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3397 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3478 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 18424 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:1e:20:3a:20:4d, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:1e:20:3a:20:4d, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:1e:20:3a:20:4d, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) net_ratelimit: 29848 callbacks suppressed bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:1e:20:3a:20:4d, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:1e:20:3a:20:4d, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:1e:20:3a:20:4d, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:1e:20:3a:20:4d, vlan:0)