bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12709/1:b..l rcu: (detected by 0, t=10506 jiffies, g=203929, q=2485 ncpus=2) task:syz.3.12245 state:R running task stack:28104 pid:12709 tgid:12708 ppid:6911 task_flags:0x400040 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7413 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 __local_bh_enable_ip+0xe1/0x130 kernel/softirq.c:457 spin_unlock_bh include/linux/spinlock.h:396 [inline] cfg80211_mlme_unregister_socket+0x2c8/0x650 net/wireless/mlme.c:780 nl80211_netlink_notify+0x356/0x840 net/wireless/nl80211.c:22939 notifier_call_chain+0x1a5/0x3d0 kernel/notifier.c:85 blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380 netlink_release+0x11f8/0x1a80 net/netlink/af_netlink.c:762 __sock_release net/socket.c:710 [inline] sock_close+0xad/0x220 net/socket.c:1501 __fput+0x418/0xa50 fs/file_table.c:512 fput_close_sync+0x11f/0x240 fs/file_table.c:617 __do_sys_close fs/open.c:1511 [inline] __se_sys_close fs/open.c:1496 [inline] __x64_sys_close+0x7e/0x110 fs/open.c:1496 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f144515e68e RSP: 002b:00007f14460dcf38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 00007f14460de6c0 RCX: 00007f144515e68e RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1445426038 R14: 00007f1445425fa0 R15: 00007fffb4383978 rcu: rcu_preempt kthread starved for 928 jiffies! g203929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 schedule_timeout+0x152/0x2c0 kernel/time/sleep_timeout.c:99 rcu_gp_fqs_loop+0x30c/0x11f0 kernel/rcu/tree.c:2123 rcu_gp_kthread+0x9e/0x2b0 kernel/rcu/tree.c:2325 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 7459 Comm: kworker/1:13 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker RIP: 0010:kasan_check_range+0xe/0x2c0 mm/kasan/generic.c:199 Code: e8 d7 3f f4 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 41 55 41 54 53 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 49 39 f8 0f 82 36 02 RSP: 0018:ffffc90000a07b08 EFLAGS: 00000056 RAX: 00000000ffffff01 RBX: ffffffff9a9b0988 RCX: ffffffff81a2c5ab RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a07b80 RBP: ffffc90000a07c00 R08: ffffffff9a9b098b R09: 1ffffffff3536131 R10: dffffc0000000000 R11: fffffbfff3536132 R12: 1ffff92000140f6c R13: ffffffff9a9b0990 R14: dffffc0000000000 R15: 1ffffffff3536132 FS: 0000000000000000(0000) GS:ffff888125059000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff407abd10 CR3: 000000003fb24000 CR4: 00000000003526f0 Call Trace: instrument_read_write include/linux/instrumented.h:55 [inline] atomic_try_cmpxchg_acquire include/linux/atomic/atomic-instrumented.h:1301 [inline] queued_spin_lock include/asm-generic/qspinlock.h:111 [inline] do_raw_spin_lock+0x12b/0x2f0 kernel/locking/spinlock_debug.c:116 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock_irqsave+0x4c/0x60 kernel/locking/spinlock.c:166 debug_object_activate+0xb7/0x420 lib/debugobjects.c:873 debug_hrtimer_activate kernel/time/hrtimer.c:485 [inline] debug_activate kernel/time/hrtimer.c:528 [inline] enqueue_hrtimer+0xa9/0x2c0 kernel/time/hrtimer.c:1109 __run_hrtimer kernel/time/hrtimer.c:2048 [inline] __hrtimer_run_queues+0x4ce/0xa10 kernel/time/hrtimer.c:2096 hrtimer_interrupt+0x448/0x910 kernel/time/hrtimer.c:2215 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1051 [inline] __sysvec_apic_timer_interrupt+0x102/0x430 arch/x86/kernel/apic/apic.c:1068 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:console_flush_one_record arch/x86/include/asm/irqflags.h:-1 [inline] RIP: 0010:console_flush_all+0x7d2/0xaf0 kernel/printk/printk.c:3343 Code: ff ff e8 d1 2d 21 00 90 0f 0b 90 e9 9c fc ff ff e8 c3 2d 21 00 e8 1e 51 29 0a 48 85 db 74 c0 e8 b4 2d 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 26 b2 RSP: 0018:ffffc90000a07fc0 EFLAGS: 00000246 RAX: ffffffff81a5440c RBX: ffffc90000a08120 RCX: ffff888027f1be00 RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000a080d0 R08: ffffffff905771f7 R09: 1ffffffff20aee3e R10: dffffc0000000000 R11: fffffbfff20aee3f R12: dffffc0000000000 R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46ea20 __console_flush_and_unlock kernel/printk/printk.c:3373 [inline] console_unlock+0xd1/0x1c0 kernel/printk/printk.c:3413 vprintk_emit+0x485/0x560 kernel/printk/printk.c:2479 _printk+0xdd/0x130 kernel/printk/printk.c:2504 br_fdb_update+0x657/0x6c0 net/bridge/br_fdb.c:987 br_handle_frame_finish+0x618/0x1990 net/bridge/br_input.c:144 br_nf_hook_thresh+0x3dd/0x4c0 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x90c/0xc40 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:318 [inline] br_nf_pre_routing_ipv6+0x382/0x6f0 net/bridge/br_netfilter_ipv6.c:183 nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline] nf_hook_bridge_pre net/bridge/br_input.c:291 [inline] br_handle_frame+0x127f/0x1510 net/bridge/br_input.c:442 __netif_receive_skb_core+0x989/0x30b0 net/core/dev.c:6093 __netif_receive_skb_one_core net/core/dev.c:6204 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x706/0x1860 net/core/dev.c:6670 __napi_poll+0xaa/0x330 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:7949 handle_softirqs+0x225/0x840 kernel/softirq.c:622 do_softirq+0x76/0xd0 kernel/softirq.c:523 __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450 blake2s_compress+0xfa/0x1c00 lib/crypto/x86/blake2s.h:42 blake2s_final+0x10f/0x270 lib/crypto/blake2s.c:142 hmac+0x204/0x3b0 drivers/net/wireguard/noise.c:325 kdf drivers/net/wireguard/noise.c:367 [inline] message_ephemeral+0x255/0x310 drivers/net/wireguard/noise.c:493 wg_noise_handshake_create_response+0x297/0x9f0 drivers/net/wireguard/noise.c:692 wg_packet_send_handshake_response+0x110/0x2d0 drivers/net/wireguard/send.c:94 wg_receive_handshake_packet drivers/net/wireguard/receive.c:154 [inline] wg_packet_handshake_receive_worker+0x6a9/0x10c0 drivers/net/wireguard/receive.c:213 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) net_ratelimit: 9605 callbacks suppressed bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:be:aa:80:48, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:e7:be:aa:80:48, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)