bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5841/1:b..l rcu: (detected by 0, t=10503 jiffies, g=42829, q=1175 ncpus=2) task:syz-executor state:R running task stack:21256 pid:5841 tgid:5841 ppid:5826 task_flags:0x400140 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 preempt_schedule_irq+0xb5/0x150 kernel/sched/core.c:7256 irqentry_exit+0x6f/0x90 kernel/entry/common.c:211 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:lockdep_enabled kernel/locking/lockdep.c:118 [inline] RIP: 0010:lock_release+0x63/0x3e0 kernel/locking/lockdep.c:5881 Code: 00 89 c0 48 0f a3 05 0c 79 df 0d 73 16 e8 c5 ea 08 00 84 c0 75 0d f6 05 57 85 c9 0d 01 0f 84 ad 02 00 00 83 3d 0d a9 df 0d 00 <0f> 84 44 02 00 00 65 8b 05 e0 1c d1 10 85 c0 0f 85 35 02 00 00 65 RSP: 0018:ffffc9000422f430 EFLAGS: 00000202 RAX: 0000000000000001 RBX: ffffffff90199801 RCX: 5bbad7bf866b2a00 RDX: ffffc9000422f501 RSI: ffffffff8bbf05c0 RDI: ffffffff8bbf0580 RBP: dffffc0000000000 R08: ffffc9000422fd30 R09: 0000000000000000 R10: ffffc9000422f5b8 R11: fffff52000845eb9 R12: ffffc9000422fd40 R13: ffffffff81738d25 R14: ffffffff8df3d2e0 R15: ffffffff81738d25 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:897 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x19a9/0x2390 arch/x86/kernel/unwind_orc.c:680 arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 save_stack+0xf5/0x1f0 mm/page_owner.c:156 __reset_page_owner+0x71/0x1f0 mm/page_owner.c:311 reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1394 [inline] __free_frozen_pages+0xbc4/0xd30 mm/page_alloc.c:2906 __slab_free+0x2e7/0x390 mm/slub.c:5962 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x140 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:352 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4970 [inline] slab_alloc_node mm/slub.c:5280 [inline] __do_kmalloc_node mm/slub.c:5641 [inline] __kmalloc_noprof+0x3c3/0x7f0 mm/slub.c:5654 kmalloc_noprof include/linux/slab.h:961 [inline] tomoyo_realpath_from_path+0xe3/0x5d0 security/tomoyo/realpath.c:251 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x213/0x4b0 security/tomoyo/file.c:822 security_inode_getattr+0x12f/0x330 security/security.c:2416 vfs_getattr fs/stat.c:259 [inline] vfs_fstat fs/stat.c:281 [inline] vfs_fstatat+0xb1/0x170 fs/stat.c:373 __do_sys_newfstatat fs/stat.c:542 [inline] __se_sys_newfstatat fs/stat.c:536 [inline] __x64_sys_newfstatat+0x116/0x190 fs/stat.c:536 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5d2dd8ddba RSP: 002b:00007ffed07c7638 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5d2dd8ddba RDX: 00007ffed07c7640 RSI: 00007f5d2de4ef82 RDI: 0000000000000003 RBP: 00007ffed07c7640 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000001000 R11: 0000000000000206 R12: 00007ffed07c8840 R13: 00007f5d2de11d7d R14: 00000000000529f0 R15: 00007ffed07c8880 rcu: rcu_preempt kthread starved for 254 jiffies! g42829 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27112 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5325 [inline] __schedule+0x1798/0x4cc0 kernel/sched/core.c:6929 __schedule_loop kernel/sched/core.c:7011 [inline] schedule+0x165/0x360 kernel/sched/core.c:7026 schedule_timeout+0x12b/0x270 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x301/0x1540 kernel/rcu/tree.c:2083 rcu_gp_kthread+0x99/0x390 kernel/rcu/tree.c:2285 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 7383 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker RIP: 0010:match_held_lock+0x0/0xc0 kernel/locking/lockdep.c:5305 Code: 41 5e 41 5f e9 c1 dc 02 00 cc e8 fb f8 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 56 53 bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 RSP: 0018:ffffc90000a08070 EFLAGS: 00000087 RAX: 0000000000000007 RBX: ffff88802e460ba8 RCX: b1f9c37640b09f00 RDX: ffff88802e460000 RSI: ffffffff8df3d2e0 RDI: ffff88802e460ba8 RBP: 00000000ffffffff R08: ffffc90000a08340 R09: ffffc90000a08350 R10: ffffc90000a081a0 R11: fffff52000141036 R12: 0000000000000246 R13: ffff88802e460000 R14: ffffffff8df3d2e0 R15: 0000000000000003 FS: 0000000000000000(0000) GS:ffff88812623c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff6127b5000 CR3: 000000000dd38000 CR4: 00000000003526f0 Call Trace: __lock_is_held kernel/locking/lockdep.c:5601 [inline] lock_is_held_type+0xa8/0x190 kernel/locking/lockdep.c:5940 __find_rr_leaf+0x345/0x6d0 net/ipv6/route.c:833 find_rr_leaf net/ipv6/route.c:889 [inline] rt6_select net/ipv6/route.c:933 [inline] fib6_table_lookup+0x39f/0xa80 net/ipv6/route.c:2233 ip6_pol_route+0x222/0x1180 net/ipv6/route.c:2269 pol_lookup_func include/net/ip6_fib.h:617 [inline] __fib6_rule_action net/ipv6/fib6_rules.c:237 [inline] fib6_rule_action+0x674/0x7d0 net/ipv6/fib6_rules.c:275 fib_rules_lookup+0x767/0xe90 net/core/fib_rules.c:339 fib6_rule_lookup+0x18e/0x6f0 net/ipv6/fib6_rules.c:112 ip6_route_input_lookup net/ipv6/route.c:2338 [inline] ip6_route_input+0x6de/0xad0 net/ipv6/route.c:2641 ip6_rcv_finish+0x141/0x2e0 net/ipv6/ip6_input.c:77 NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6079 [inline] __netif_receive_skb+0xd3/0x380 net/core/dev.c:6192 process_backlog+0x60e/0x14f0 net/core/dev.c:6544 __napi_poll+0xc7/0x360 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0x5f7/0xdf0 net/core/dev.c:7784 handle_softirqs+0x286/0x870 kernel/softirq.c:622 do_softirq+0xec/0x180 kernel/softirq.c:523 __local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline] kernel_fpu_end+0xd2/0x120 arch/x86/kernel/fpu/core.c:479 blake2s_compress+0xe9/0x1b80 lib/crypto/x86/blake2s.h:44 blake2s_update+0x14b/0x450 lib/crypto/blake2s.c:126 hmac+0x1b6/0x330 drivers/net/wireguard/noise.c:324 kdf+0xde/0x270 drivers/net/wireguard/noise.c:360 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_create_initiation+0x3f1/0x750 drivers/net/wireguard/noise.c:560 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0x163/0x320 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 net_ratelimit: 13096 callbacks suppressed bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:b3:15:99:e5:fb, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:b3:15:99:e5:fb, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:b3:15:99:e5:fb, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) net_ratelimit: 12961 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:b3:15:99:e5:fb, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:b3:15:99:e5:fb, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on veth0_to_bridge with own address as source address (addr:fa:b3:15:99:e5:fb, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)